last executing test programs: 36.011861174s ago: executing program 0 (id=122): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@ipv6_getaddr={0x40, 0x16, 0x3, 0x70bd28, 0x25dfdbfc, {0xa, 0x78, 0x2a, 0xfd}, [@IFA_LOCAL={0x10, 0x2, @private1}, @IFA_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x40}, 0x1, 0x500000000000000}, 0x24000800) 35.967961878s ago: executing program 0 (id=123): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) unshare(0x22020400) inotify_add_watch(r2, 0x0, 0x1000084) r3 = socket(0x400000000010, 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) splice(r3, 0x0, r5, 0x0, 0x6, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r4, 0x0, r7, 0x0, 0x4, 0x8) getpeername$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x440, 0x24, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x10, 0x7}, {0xfff2, 0xe}, {0x2, 0xfff1}}, [@TCA_STAB={0x1b8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc, 0x80, 0xd, 0x10, 0x2, 0x3, 0xfffffffb, 0x3}}, {0xa, 0x2, [0x800, 0x8, 0x8]}}, {{0x1c, 0x1, {0x3, 0x5, 0x1, 0x3, 0x0, 0x5, 0x6, 0x7}}, {0x12, 0x2, [0xd, 0x0, 0x0, 0x7f, 0x6, 0x0, 0x6]}}, {{0x1c, 0x1, {0x3, 0x9, 0x7, 0x29, 0x2, 0x100, 0x9, 0x5}}, {0xe, 0x2, [0x7, 0x6, 0x100, 0x7, 0x7]}}, {{0x1c, 0x1, {0x79, 0x6, 0x2, 0x4, 0x2, 0x1, 0x1, 0x5}}, {0xe, 0x2, [0x8000, 0x3ff, 0x8, 0x7ff, 0x8]}}, {{0x1c, 0x1, {0x8c, 0x6, 0x1ff, 0x4, 0x2, 0x1, 0x5, 0x3}}, {0xa, 0x2, [0x9, 0x1, 0x400]}}, {{0x1c, 0x1, {0x0, 0xf0, 0x7, 0xfff, 0x2, 0x9, 0x4, 0x9}}, {0x16, 0x2, [0xfffb, 0x2, 0x0, 0xd74, 0x0, 0x5, 0xc, 0xfff8, 0x6]}}, {{0x1c, 0x1, {0x0, 0x81, 0x94, 0xad, 0x1, 0x2, 0x40, 0x2}}, {0x8, 0x2, [0x9, 0xf]}}, {{0x1c, 0x1, {0x9, 0x21, 0xd, 0x4, 0x1, 0x0, 0x2, 0x3}}, {0xa, 0x2, [0x7, 0x2, 0x3]}}, {{0x1c, 0x1, {0x1, 0x7, 0x8, 0x4, 0x2, 0x1, 0x4, 0xa}}, {0x18, 0x2, [0xff, 0x3ff, 0x3, 0xa, 0x7, 0x3, 0xb8c3, 0x1afc, 0x4, 0xa]}}, {{0x1c, 0x1, {0xa, 0xfb, 0x3, 0x7, 0x0, 0x2, 0x6, 0x3}}, {0xa, 0x2, [0x9, 0x2, 0x9]}}]}, @TCA_STAB={0x160, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0xf9, 0xc1a9, 0x1d2c, 0x2, 0x6, 0x7, 0x9}}, {0x16, 0x2, [0x2, 0x4, 0x54, 0x6, 0x7, 0x4, 0x9d, 0x232, 0x0]}}, {{0x1c, 0x1, {0x6, 0x3, 0x4, 0xfff, 0x1, 0x6, 0x2, 0x5}}, {0xe, 0x2, [0x800, 0x9, 0x8, 0x9, 0x5]}}, {{0x1c, 0x1, {0x7, 0x4, 0x0, 0x7, 0x2, 0xffffb513, 0x8, 0x3}}, {0xa, 0x2, [0x5, 0x42, 0x101]}}, {{0x1c, 0x1, {0x7, 0x46, 0x100, 0x595, 0x2, 0xffff3ad5, 0x9}}, {0x4}}, {{0x1c, 0x1, {0x6, 0x7, 0x5, 0x0, 0x0, 0x3, 0x6, 0x9}}, {0x16, 0x2, [0xfff, 0xf5ac, 0xc6, 0x1ff, 0x81, 0x9, 0x1, 0x3, 0x8000]}}, {{0x1c, 0x1, {0x9, 0x6, 0x80, 0x3ff, 0x2, 0x3, 0x0, 0x7}}, {0x12, 0x2, [0x5, 0xe, 0x9, 0x4, 0x8, 0x8, 0xdc]}}, {{0x1c, 0x1, {0x81, 0x4, 0xfff9, 0x3ff, 0x2, 0xa, 0x7, 0x4}}, {0xc, 0x2, [0x0, 0xff80, 0x3, 0x7]}}, {{0x1c, 0x1, {0x1, 0x6, 0x3, 0x4, 0x1, 0x5, 0x1, 0x3}}, {0xa, 0x2, [0x5, 0x4, 0x80]}}]}, @TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0xf4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf7, 0xe2, 0x8, 0x0, 0x1, 0x5, 0x2, 0x3}}, {0xa, 0x2, [0x2, 0x1, 0x6]}}, {{0x1c, 0x1, {0xc, 0x0, 0x7, 0x8000000, 0x1, 0x40, 0x6, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x5, 0x8, 0x7, 0x1000003, 0x2, 0x0, 0x243a, 0x3}}, {0xa, 0x2, [0xfff, 0x3, 0x2]}}, {{0x1c, 0x1, {0x7, 0x3, 0x23c, 0x7, 0x2, 0x10000, 0x1, 0x6}}, {0x10, 0x2, [0x3, 0xfff7, 0x91, 0x8, 0xa, 0x1]}}, {{0x1c, 0x1, {0xb, 0x9, 0x3, 0x9, 0x0, 0x7d2e882c, 0x1, 0x2}}, {0x8, 0x2, [0x7fff, 0x0]}}, {{0x1c, 0x1, {0xb2, 0x81, 0xa, 0x8, 0x0, 0x10, 0x34, 0x6}}, {0x10, 0x2, [0x1, 0xc8b, 0x88ee, 0x873, 0x9, 0x10]}}]}, @qdisc_kind_options=@q_qfg={0x8}]}, 0x440}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}]}, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="000000000000000014001a80100004800c0006"], 0x34}}, 0x0) 35.01824491s ago: executing program 0 (id=135): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) syz_open_dev$loop(&(0x7f0000000280), 0xffffffffffff2c1c, 0x20402) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)={0x14, r4, 0x301, 0x70bd29, 0x25dfdbfb, {0x21}}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x4814) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x8831}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 34.130386218s ago: executing program 0 (id=139): socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x68}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x227c, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 34.044882283s ago: executing program 0 (id=141): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/uevent_helper', 0xa8882, 0x107) io_setup(0x20, &(0x7f0000001140)) (async) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x8, r0, &(0x7f0000000000)="92", 0x1, 0xc, 0x0, 0x0, r0}]) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x154, 0x18, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@CGW_CS_CRC8={0x11e, 0x6, {0xfe, 0xff, 0x3, 0x0, 0xff, "71ec6d721744cd5200080000f8cfcad402006511ec028c7028564a9ce83afe1cc93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5560fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d458ec5d42c3ef0619022c00", 0x3, "5c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0x9, 0xf5, 0x2}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x0, 0x1}, 0x0, 0x5, 0x0, 0x0, '\t\x00'}, 0x1}}]}, 0x154}}, 0x40000) r3 = socket$inet_smc(0x2b, 0x1, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000002c0)=0x20) getsockopt$XDP_STATISTICS(r6, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x30) close_range(r5, 0xffffffffffffffff, 0x0) (async) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000080)={0x6, 0xcb57, 0x8, 0x0, 0x0, [{{r2}, 0x5}, {{r2}, 0x8}, {{r3}, 0xa}, {{r2}, 0x100}, {{r4}, 0x5}, {{r5}, 0x3}, {{r2}, 0x7fffffffffffffff}, {{r2}, 0x5}]}) 33.912740461s ago: executing program 0 (id=145): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, @local, {[], {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0xffff}}}}}}}, 0x0) syz_emit_ethernet(0x96, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x60, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x18, 0x2, 0x500, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0xd7}, @sack={0x5, 0x1e, [0x1ff, 0x9, 0xffffffff, 0x759, 0x9, 0x5, 0x3]}, @sack={0x5, 0xe, [0xd2d, 0x130c, 0x3]}, @md5sig={0x13, 0x12, "1626d9463cc9cd1f450d0000bcfdfea9"}]}}}}}}}}, 0x0) 29.265503107s ago: executing program 1 (id=191): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x7, &(0x7f0000001140)={0x1, 0x1, 0xfe5, 0x9}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000040)={0x1, 0x1, 0x5, 0x8000000a}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x76, 0x6031}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000040)={0xa, 0x4e20, 0x0, @remote, 0x2000008}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="28b1744daee515261d000000050000002c02020100000000006700"/40], 0x28}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007910a800000000005500ffff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r7 = getpid() kcmp(r7, r7, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r10 = socket(0x28, 0x3, 0x6) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r11 = socket$netlink(0x10, 0x3, 0xc) getsockname$packet(r10, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r9, r8}, 0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r8, @ANYBLOB="46ff0f00000000001c00128009000100626f6e64000000000c000280050001"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 28.239877977s ago: executing program 1 (id=203): syz_usb_connect(0x0, 0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004034127856000000000001090209000001"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000110)='auto\x00', 0x5) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, &(0x7f0000000100)='0\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/usb/devices/2-1/power/control\x00', 0x2, 0x0) write(r2, &(0x7f0000000110)='auto\x00', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/devices/3-1/power/autosuspend_delay_ms\x00', 0x2, 0x0) write(r3, &(0x7f0000000100)='0\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/usb/devices/4-1/power/autosuspend_delay_ms\x00', 0x2, 0x0) write(r4, &(0x7f0000000100)='0\x00', 0x2) 27.586198604s ago: executing program 1 (id=215): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000f00)='./file1\x00', 0x0, &(0x7f0000000180), 0x1, 0x27e, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x14) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101242, 0x97) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000fd3f00000000000009000000850000007a00000085000000110000009500003ac16f1e0000bcf960808b5af33668cb00000000004e572217276cac34ca8fbf477982f7fb8de5523d"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) writev(r3, &(0x7f00000004c0)=[{&(0x7f00000003c0)="8914bf58a0a4fa88a976fcea05e2bcde33ff29176bf577ae188bb2cd18b0dad59cd84ab60235927ec84b628dbcf74c1d5dbfd300abeddb7141bb4d2b2bb9dbbec19124859188aa97c48e1aefe7dc1473540cc99512246657f892bf6ca90a637f61c1c0e7e26cfd0fec2cc7a11e46a817d7ad5de5d01c8eec81f98cb4739c821d2d6ad3dded8711ad8e6cf6caec98b83cd4e5d5a285bd885dcccc4705c0023bfbb4d531c3a5379683dfda8e4ff82b197f864555fa55e8e9196a1d48737eb25d76590b58d8142a23d787990eded57a47ed713127", 0xd3}], 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000000c0)={'veth0_to_batadv\x00', 0x400}) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)='\x00\x00') ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000020c0)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x6, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x40) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f00000009c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x44, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_FAMILY={0x5, 0xd, 0xb}, @GTPA_MS_ADDR6={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004012}, 0x4004001) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000780)='westwood', 0x8) ioctl$NILFS_IOCTL_GET_BDESCS(r0, 0xc0186e87, &(0x7f0000000240)={&(0x7f00000001c0)=[{0x0, 0x100, 0x8000000000000000, 0x7140cbdd, 0x5}, {0xe, 0x8, 0x4, 0xff, 0x1c0000}], 0x2, 0x28, 0x8, 0x6}) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x20) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000880)="5c00000012006bab9a3ff36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb00"/74, 0x4a}, {&(0x7f0000000380)="1ed68483068e7e7b115365cde0c05b774875", 0x12}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0300001a"], 0x34c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$OCFS2_IOC_UNRESVSP64(r1, 0x4030582b, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 27.115857556s ago: executing program 1 (id=220): syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000480)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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") r0 = fanotify_init(0x200, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r0, 0x161, 0x40000867, r1, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[], &(0x7f00000001c0)=""/139, 0xe6, 0x8b, 0x1, 0x19549f46}, 0x28) r2 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/smackfs/load2\x00', 0x2, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 26.86480336s ago: executing program 1 (id=226): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@float={0x4, 0x0, 0x0, 0x10, 0x4}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x403, [{0x0, 0x1}]}]}, {0x0, [0x0, 0x61, 0x0]}}, 0x0, 0x41, 0x0, 0x1, 0xfffffffe}, 0x28) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x4000, &(0x7f0000000040)={[{@nombcache}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}]}, 0x21, 0x4bd, &(0x7f0000000b80)="$eJzs3c9vVFsdAPDvvf1JKbQoCzUqiCgawkw7QENY4UZjCImRuHIBtR2apjOdpjNFWlmU/8FEElf6J7gwcWHCyr073bnBhQkq0Udf8hbzcu9MS1+Zgb7QN0M6n09ycu+5p8z3nLm55wxf6JwABtb5iNiOiNGIuB8RU+3rSbvErVbJfu7Vy8cLOy8fLyTRbN79T5K3Z9di35/JnGy/5nhE/PRHEb9I3oxb39xama9UyuvterFRXSvWN7euLFfnl8pL5dVSaW52bubG1eulIxvrueofXvxw+fbP/vynbzz/6/b3f5V1a7Ldtn8cR6k19JG9OJnhiLj9RQTrg6H2eEYPXO9wy/kApRHxpYi4kD//UzGU300A4DhrNqeiObW/DgAcd2meA0vSQjsXMBlpWii0cnhnYyKt1OqNyw9qG6uLrVzZdIykD5Yr5Zl2rnA6RpKsPpufv66XDtSvRsSZiPj12Im8XlioVRb7+cEHAAbYyQPr///HWus/AHDMjfe7AwBAz1n/AWDwWP8BYPBY/wFg8Fj/AWDwWP8BYPBY/wFgoPzkzp2sNHfa33+9+HBzY6X28Mpiub5SqG4sFBZq62uFpVptKf/Onuq7Xq9Sq63NXouNR8VGud4o1je37lVrG6uNe/n3et8rj/RkVADA25w59+zvSURs3zyRl9i3l4O1Go63tN8dAPpmqN8dAPrGbl8wuPwdH3jXfq1d/4vQ06PvC9Abl74q/w+DSv4fBpf8Pwwu+X8YXM1mYs9/ABgwcvyAf/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAz28yL0laaO8FPhlpWihEnIqI6RhJHixXyjMRcToi/jY2MpbVZ/vdaQDgPaX/SuKj9jaAFycPto4mH4/lx4j45W/v/ubRfKOxPptd/+/e9cbT9vVSzzsPABzC7jq9u47vevXy8cJu6WV/XvygtbloFnenXVotwzGcH8cj+3Ay8b+kXW9JImLoCOJvP4mIr3Qaf5LnRqbbO58ejJ/FPtXT+Oln4qd5W+uYvRdfPoK+wKB5ls0/tzo9f2mcz4+dn//xfIZ6f7vz384b81+6N/8NdZn/zh82xrW//Hi0W9uTiK8Nd4qf7MVPusS/eMj4//j6Ny90a2v+LuJSdI6/P1axUV0r1je3rixX55fKS+XVUmludm7mxtXrpWKeoy7uZqrf9O+bl093i5+Nf6JL/PzO35nsOv7vHHL8v//k/s+/9Zb43/t25/t/Nj92fv+zNfG7h4w/P/HHrtt3Z/EXu4z/Xff/8iHjP//n1uIhfxQA6IH65tbKfKVSXnfiZO9k95Peh9Kf7ifNqVZPP5T+HJ+Tfs5KQC+8fuj73RMAAAAAAAAAAAAAAKCbXvw6Ub/HCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPH1aQAAAP//sHnUnw==") getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000400)=0xe8) fchownat(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file0\x00', r0, 0xffffffffffffffff, 0x400) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$update(0x2, r1, 0x0, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000000)={r1, 0x75, 0xcb}, &(0x7f0000000080)={'enc=', 'raw', ' hash=', {'sha224-ssse3\x00'}}, &(0x7f0000000140)="d672e05eb5f88b42c1012d35e79123ed9fd2eb5a84cabc7b2f61856bf3a94737b2b4274258271c3059495e06130abb56a3a08089c97fc8f860e95e38132a61f3268a172fb8386e2fbb5913daddc290aa371f9020602d66da490e0ed70e9b83e8f5a12e5d624a5c7f66bbf8024c28a2fad777af36c0", &(0x7f00000001c0)=""/203) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x1354, 0x6, 0x5}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000100)={0x20004, r7, 0x2}) r10 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000200)={r11}) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r12, 0xffffffffffffffff, 0x0) write$FUSE_INIT(r2, &(0x7f0000001dc0)={0x50, 0x0, r3, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7, {0x5, 0x0, 0xdc, 0x8, 0x3, 0x3, {0x6, 0x638, 0x6, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x200, 0xc000, 0x4, r4, r5, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000001040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount$tmpfs(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000500), 0x1400, &(0x7f0000003080)={[{@gid}, {@gid={'gid', 0x3d, r5}}, {@huge_within_size}, {@mode={'mode', 0x3d, 0x81}}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x33, 0x2d, 0x36, 0x1a, 0x37, 0x32]}}, {@inode32}, {@gid={'gid', 0x3d, r13}}, {@grpquota}], [{@dont_appraise}]}) 26.189446859s ago: executing program 1 (id=230): bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_vlan\x00'}) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) socket$nl_route(0x10, 0x3, 0x0) 26.159072622s ago: executing program 32 (id=230): bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_vlan\x00'}) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) socket$nl_route(0x10, 0x3, 0x0) 19.005627332s ago: executing program 33 (id=145): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, @local, {[], {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0xffff}}}}}}}, 0x0) syz_emit_ethernet(0x96, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x60, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x18, 0x2, 0x500, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0xd7}, @sack={0x5, 0x1e, [0x1ff, 0x9, 0xffffffff, 0x759, 0x9, 0x5, 0x3]}, @sack={0x5, 0xe, [0xd2d, 0x130c, 0x3]}, @md5sig={0x13, 0x12, "1626d9463cc9cd1f450d0000bcfdfea9"}]}}}}}}}}, 0x0) 15.808633275s ago: executing program 4 (id=320): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000c00)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="bc01330080000000ffffffffffff080211"], 0x1d8}, 0x1, 0x0, 0x0, 0x805}, 0x0) 15.790676665s ago: executing program 4 (id=321): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x20040880) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = dup3(0xffffffffffffffff, r0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001700)=@any_dev={0x4, 0xfd1, 0x0, 0x0, 0x1000, 0x1, 0xffffffffffffffff, 0x0, 0x109}}}, &(0x7f0000000100)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_ublk_setup_queues(r2, r3, &(0x7f0000000280)={0x0, 0xc71a, 0x80, 0x2, 0xc3}, 0x0, 0x4, &(0x7f0000001580)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, r4, '\x00', {0x0, 0x349, 0x0, &(0x7f0000000580)=@buf_512="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"}}, &(0x7f0000001600)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x480d0) 14.914011334s ago: executing program 4 (id=324): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x0, 0x1, "", [@typed={0x7, 0x0, 0x0, 0x0, @str=' \x00\x80'}]}, 0x18}], 0x1}, 0x4004080) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async) sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x0, 0x1, "", [@typed={0x7, 0x0, 0x0, 0x0, @str=' \x00\x80'}]}, 0x18}], 0x1}, 0x4004080) (async) 14.860789838s ago: executing program 4 (id=325): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a) socket$unix(0x1, 0x2, 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00') 14.481304376s ago: executing program 4 (id=328): socket$netlink(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x20}) syz_emit_ethernet(0x72, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000640800000000019078ac1e0001941414aa0b009078030b00004200000000000000008900000a010101ac0e00aa862600000002060b5e000000ff00d8870000050404a6001096060539fff5800000b61af9070b5764010101ac1414aa00"], 0x0) 14.125305863s ago: executing program 4 (id=332): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) accept$alg(r1, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000040)={0x6, 0x32, 0x0, 0x2, 0x6}) pselect6(0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="64004a5bd973640000", @ANYRES16=r0, @ANYBLOB="00012dbd7000fcdbdf253b0000000c009900070000002b00000037003300d08c0500ffffffffffff080211000000ffffffffffff61000a000c410c0a0465125148f30af46608021100000008021100000000080057004509000004008e00"], 0x64}, 0x1, 0x0, 0x0, 0x20048010}, 0x5) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$UHID_INPUT(r4, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xa, 0x8, "ff000000000000000000000000000200"}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r5, 0x2) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000500), 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r6, 0x1) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) pread64(r7, &(0x7f00000000c0)=""/23, 0x17, 0x1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RREADDIR(r8, 0x0, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00ec1044441ca1a847a0b10ca049568fa39143095d76ebfa8ff75a477a76efdb6799e6bcc6e943b656", @ANYRES16=r0, @ANYBLOB="01002cbd7000fedbdf251b0000000700210062620000"], 0x1c}, 0x1, 0x0, 0x0, 0x4008042}, 0x4000090) ioctl$XFS_IOC_AG_GEOMETRY(r1, 0xc080583d, &(0x7f0000000380)={0x4, 0x2, 0xe, 0x3fe, 0x0, 0x409, 0x3, 0x100}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000080)={'ipvlan1\x00', &(0x7f0000000000)=@ethtool_cmd={0x37, 0x3, 0x80, 0xca, 0xf4, 0x8, 0xe, 0x4, 0xd, 0x5, 0x5, 0x79, 0x9, 0xfa, 0x80, 0xb7, [0x0, 0x2]}}) 14.044469714s ago: executing program 34 (id=332): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) accept$alg(r1, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000040)={0x6, 0x32, 0x0, 0x2, 0x6}) pselect6(0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="64004a5bd973640000", @ANYRES16=r0, @ANYBLOB="00012dbd7000fcdbdf253b0000000c009900070000002b00000037003300d08c0500ffffffffffff080211000000ffffffffffff61000a000c410c0a0465125148f30af46608021100000008021100000000080057004509000004008e00"], 0x64}, 0x1, 0x0, 0x0, 0x20048010}, 0x5) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$UHID_INPUT(r4, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xa, 0x8, "ff000000000000000000000000000200"}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r5, 0x2) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000500), 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r6, 0x1) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) pread64(r7, &(0x7f00000000c0)=""/23, 0x17, 0x1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RREADDIR(r8, 0x0, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00ec1044441ca1a847a0b10ca049568fa39143095d76ebfa8ff75a477a76efdb6799e6bcc6e943b656", @ANYRES16=r0, @ANYBLOB="01002cbd7000fedbdf251b0000000700210062620000"], 0x1c}, 0x1, 0x0, 0x0, 0x4008042}, 0x4000090) ioctl$XFS_IOC_AG_GEOMETRY(r1, 0xc080583d, &(0x7f0000000380)={0x4, 0x2, 0xe, 0x3fe, 0x0, 0x409, 0x3, 0x100}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000080)={'ipvlan1\x00', &(0x7f0000000000)=@ethtool_cmd={0x37, 0x3, 0x80, 0xca, 0xf4, 0x8, 0xe, 0x4, 0xd, 0x5, 0x5, 0x79, 0x9, 0xfa, 0x80, 0xb7, [0x0, 0x2]}}) 3.160460994s ago: executing program 2 (id=409): clock_adjtime(0x0, 0x0) setns(0xc9, 0x0) syslog(0x3, &(0x7f0000000000)=""/185, 0x64075da62934d5d1) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket(0x2a, 0x2, 0x9) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040f0401fa1b04a3b3dfdd1a715c952645a6f55f5d32fd9157f50f6c190593bd3766c71d785fae98b0332d31d40667f50ae54ce00932dc99ec2120f4436b58450efa4600601e2b85919df68d34e4950acc19efe04d30a3c84794ee0c7b4561895a1890448ba5f504eae8624a17deeab751b7483f69f007307061d3be47fb35c7283583dd0d0055f0a5fe7f3bf23ad881a12703cecbe1fc972984dda26e4c4ff45b4cca6cd878cfbdde8a48c8821ca903dffd201e8225f4c9bfe61d95b16b5f924b199c91ce70"], 0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b0000008000000001000000ffff000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f00000004c0)=""/234}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010ff0004c9b7dcd801000000000000005008475e60a2e989a5e749321e84468fbf99d4e9ec1ce661c641bcfd03e7af80455bb88a060605c427c5e03e25bf70beb378b768875590dc5c5786c6978c2b63d1620c2192d814ba3d000000000000000000e72ee6dd5c78b5730a743c03a0629c67", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006970366772650000180002800600030080000000040012000600020001000000"], 0x48}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000280)={@local, @random="7f0a6fa40011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @echo_reply={0x3c}}}}}, 0x0) close(0xffffffffffffffff) 2.947561813s ago: executing program 2 (id=412): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r5 = syz_open_procfs$userns(0x0, &(0x7f0000000100)) ioctl$NS_GET_USERNS(r5, 0x8008b70d, 0xf8ffffffffff0f00) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES16=r3, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRESOCT=r4], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = timerfd_create(0x0, 0x800) timerfd_settime(r7, 0x3, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) lseek(r0, 0x100, 0x1) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200c0, 0x3) mmap(&(0x7f00009c3000/0x3000)=nil, 0x3000, 0x300000c, 0x4000010, r10, 0x2ad94000) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 2.103516421s ago: executing program 7 (id=416): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/sys/net/ipv6/conf/all/keep_addr_on_down\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='1\n\x00', 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@ipv6_newaddr={0x34, 0x14, 0x401, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x34}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'lo\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'lo\x00'}) r4 = socket(0x400000000010, 0x3, 0x9) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafc, {0x0, 0x0, 0x0, r6, {0xc, 0xffff}, {0x2, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x200008c1}, 0x4041080) 2.067853443s ago: executing program 5 (id=417): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x20040880) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = dup3(0xffffffffffffffff, r0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001700)=@any_dev={0x4, 0xfd1, 0x0, 0x0, 0x1000, 0x1, 0xffffffffffffffff, 0x0, 0x109}}}, &(0x7f0000000100)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_ublk_setup_queues(r2, r3, &(0x7f0000000280)={0x0, 0xc71a, 0x80, 0x2, 0xc3}, 0x0, 0x4, &(0x7f0000001580)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, r4, '\x00', {0x0, 0x349, 0x0, &(0x7f0000000580)=@buf_512="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"}}, &(0x7f0000001600)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x480d0) 1.873477114s ago: executing program 2 (id=419): syz_usb_connect(0x0, 0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004034127856000000000001090209000001"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000110)='auto\x00', 0x5) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/usb/devices/2-1/power/control\x00', 0x2, 0x0) write(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/devices/3-1/power/autosuspend_delay_ms\x00', 0x2, 0x0) write(r3, &(0x7f0000000100)='0\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/usb/devices/4-1/power/autosuspend_delay_ms\x00', 0x2, 0x0) write(r4, &(0x7f0000000100)='0\x00', 0x2) 1.862288312s ago: executing program 7 (id=422): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000270001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x2bb3}, {{0x0, 0x0, 0x0}, 0x4f56}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f00000003c0)=""/132, 0x84}, {&(0x7f0000000c40)=""/132, 0x84}, {&(0x7f0000002840)=""/4107, 0x100b}, {&(0x7f00000000c0)=""/12, 0xc}, {&(0x7f0000000200)=""/169, 0xa9}], 0x5, 0x0, 0x60}}], 0x4, 0x40002000, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x4, 0x9, 0xb, 0x4, 0x38, @private1, @private2, 0x8, 0x7, 0x8, 0x8}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000040)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = semget$private(0x0, 0x7, 0x191) semop(r5, &(0x7f00000002c0)=[{0x2, 0x2, 0x800}, {0x3, 0x5, 0x3000}], 0x2) semop(r5, &(0x7f0000000300)=[{0x1, 0x6, 0x800}, {0x1, 0x4, 0x1000}], 0x2) semctl$GETZCNT(r5, 0x0, 0xf, 0x0) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), r4) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000940)=ANY=[@ANYBLOB="d71cb578f123035c0457a95c080000", @ANYRES16=r6, @ANYBLOB="20002dbd7000fddbdf25020000000c0004008d000000000000000a000a007770616e3000000008000100000000000c00060001000000000000000d000a006e6c383032313534000000000c0002000900000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20000890}, 0x10000014) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYRESDEC=r7], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x24044840) recvfrom$packet(r0, &(0x7f0000000000)=""/166, 0xa6, 0x0, &(0x7f0000000180)={0x11, 0xc, r2, 0x1, 0x7, 0x6, @remote}, 0x14) 1.722920056s ago: executing program 3 (id=429): socket$netlink(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000640800000000019078ac1e0001941414aa0b009078030b00004200000000000000008900000a010101ac0e00aa862600000002060b5e000000ff00d8870000050404a6001096060539fff5800000b61af9070b5764010101ac1414aa00"], 0x0) 1.672251934s ago: executing program 3 (id=430): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f00000009c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x38, 0x140d, 0x20, 0x8, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="9febbab4f13f0000000000003f0000003f000000070000000b0000000000000700000000070000000100000f030000000100000065f6ffff9f070000755b770800000000000002000000000e000000000000090400000000005f5f615f0000"], &(0x7f00000000c0)=""/140, 0x5f, 0x8c, 0x0, 0x80}, 0x28) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0xc8182) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x80001) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r5 = dup3(r3, r4, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004080}, 0x8000) r6 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x243, &(0x7f0000000540)="$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") ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40e8662e, &(0x7f0000000000)={0x3f33, 0x40000000000001, 0x0, 0xb, 0x101, 0x905}) pread64(r4, &(0x7f0000000280)=""/42, 0x2a, 0x8b9) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f0000000800)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791a18000000000062000400000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc9, &(0x7f00000004c0)=""/209, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x22) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="880000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a31000000005c000380580000800800034000000003"], 0x88}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000400)={'\x00', 0x4, 0x9, 0xc456, 0x6, 0x200000000000000, 0xffffffffffffffff}) syz_open_procfs$namespace(r8, &(0x7f0000000480)='ns/pid\x00') bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000010400000000000000000000711213000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @cgroup_sock_addr=0xf, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 1.525561322s ago: executing program 6 (id=432): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, 0x0, 0x0, 0x423, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1805000000000000000000000000000085000000a8"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x95) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r0}, 0xc) 1.499482792s ago: executing program 6 (id=433): r0 = getpgid(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) renameat2(r1, &(0x7f0000000000)='./file1\x00', r1, &(0x7f0000000480)='./file3\x00', 0x2) r2 = syz_pidfd_open(r0, 0x0) pidfd_getfd(r2, r2, 0x0) 1.435531612s ago: executing program 6 (id=434): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x304}, "6175aa246176d6e7", "38052b2de90802aca5cb3dfb40cf4ed1", "a9a20500", "869f77f40df20cb3"}, 0x28) (async) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400000003051005c3e45b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b302e7dc6a00000000807174bac1414aae00000027f0000017f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffffac1414aae0000001000000000014000000000000001a01000001"], 0x100}, 0x0) (async) socket$inet(0x2, 0x80000, 0x2) r1 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0xad82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) getpid() (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (async) openat(r1, &(0x7f0000004140)='./mnt\x00', 0x22200, 0x20) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000008c0)={@cgroup=r1, 0x37, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x50, &(0x7f0000000100), 0x48) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3}}) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(0xffffffffffffffff, 0x1, 0x1, 0x61, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000004000)=[{{&(0x7f0000000a40)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000004180)=[{&(0x7f0000000ac0)=""/13, 0xd}, {&(0x7f0000000b00)=""/184, 0xb8}, {&(0x7f0000000bc0)=""/163, 0xa3}, {&(0x7f0000000c80)=""/161, 0xa1}, {&(0x7f0000000d40)=""/215, 0xd7}, {&(0x7f00000042c0)=""/234, 0xea}], 0x6, &(0x7f0000000fc0)=""/245, 0xf5}, 0x1}, {{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000011c0)=""/157, 0x9d}, 0x20008}, {{&(0x7f0000001280), 0x80, &(0x7f0000001500)=[{&(0x7f0000001300)=""/74, 0x4a}, {&(0x7f0000001380)=""/121, 0x79}, {&(0x7f0000001400)=""/197, 0xc5}], 0x3, &(0x7f0000001540)=""/4096, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000002540)=""/4, 0x4}, {&(0x7f0000002580)=""/113, 0x71}, {&(0x7f0000004200)=""/151, 0x97}, {&(0x7f00000026c0)=""/41, 0x29}, {&(0x7f0000002700)=""/218, 0xda}, {&(0x7f0000002800)=""/196, 0xc4}], 0x6, &(0x7f0000002980)=""/244, 0xf4}, 0xb00}, {{&(0x7f0000000440)=@pptp, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000002b00)=""/199, 0xc7}, {&(0x7f0000002c00)=""/4096, 0x1000}, {&(0x7f0000003c00)=""/36, 0x24}, {&(0x7f0000003c40)=""/119, 0x77}, {&(0x7f0000003cc0)=""/107, 0x6b}, {&(0x7f0000003d40)=""/138, 0x8a}, {&(0x7f0000003e00)=""/45, 0x2d}, {&(0x7f0000003e40)=""/123, 0x7b}], 0x8, &(0x7f0000003f40)=""/134, 0x86}, 0xd1}], 0x5, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48010) sendmsg$alg(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000240)="88d887bc876e60d724e106aa29f134088fb2bb4406fcebb592d14f6135821d8381a08ea2b3ee2fd16b89b666911cfaacacc6842daf1b111b813aad2480be0deb3615e97a462b37c2953365972b39a9c42497ed1d071c834d265fef50a5099ad0b011129beb264672075077d6b48e70e08c6593ef5fbace82599c02fa19f54c1335635f7e60f3fc60d3570b1df2181d20eba9f749ad363c0d2c189b5422b0141d1e1845c2923372708bf9b46c882042a9374f358aad8348d5c3dbc3c606f8b82dbcb4a6261c86783d97e73d", 0xcb}, {&(0x7f0000000340)="6204aa729e56814467bdf93773461408e5dd899cee3f1b6b227cdef2e38e32afff40a707e71a6560613c1addb2bae238f32b0fd895b56dd1c8816de35b735898794ad7e9af48de2e0a543d9e76dba10b4893da7e98cefca30e78246a9f12eaac6d0e6125275e79d790b358fa0f17ada27665f71024592d7b551738813fd458330225564d7b7e0e41a1c6d1451ed4b5c09066e53b28716e5818dc99bc19114b9e17b7c0144be41e25447978", 0xab}, {&(0x7f0000000400)="d860876ff8a285565c531fa275198d6dc68f36fa4cf880dabbd1384bc3285a3756297f06dc35b449800d8d", 0x2b}, {&(0x7f00000004c0)="ffee292f40db61990c994c89030f92aec2972a13824989fc221d89c5db3dc48d8871091712c0cbf888401b76bf96e90fe682470a785c505eea21fa3e0c6ef0830a5c7c9726ff9ab1428bd1896d0feb6a0ff1a310a2d74b92bc50ab848edddaf30247b691abda93529935bed70367c8419be369ecbf30885197eca0fce824e3a60a913bb9e3116c77def0c4a38c2b2e90a570dc43255e8262b77467508a9617b8ed27ab981bb49909fa1601aa5e2e283a30319fe00b89e2ddbbdb563223a870fa3653dc44734baaec3713260029673ece3e3795cc3ea55974037bb589aefadf097c5dd785270c9ca7bd9672de", 0xec}, {&(0x7f00000005c0)="f6d89b58fca41f759323b89d50059ee2ef6104fb7bc16d23e4523797a66c7c2f08f59abfd94053764dbf530b53d97ae6463d3378b6781638e9b7f1a0e361de38de82d5853f7a713e2ceb85a0efcdcbb4db2803a232b46fa6fe94272f2657a8c213341e799aaf6bc12ce5b4fb5d83227c748b519bda60d862f81504266e6051a4e0ecba7572455201afd8117255be41018eeffee7135e5e860996feaa99335b6af7aef06fc455d25087e2016ca29670c8603fa4b0844a0d78e7c219b1812d3d50f9f1e153ba71b0", 0xc7}, {&(0x7f00000006c0)="c2976e8eb9a181d2aa7b76c9bbd2c00cc62f94d19a8412067fe7b6c30b1aa78f468c4b6ac97a297bac45d4699fcb80d27d52453d06f4ee2029ff4dea1f1cc001eb11c7f5c54e07ca30ce5a21fa6cf01131f93f17d6e301c316c48be1a6a94b55c08faf83063849194038d6910168c231dd784fcc51da49721594ff2571b8be3f1445c086d7f7c54b4864bb39c769bf07a756d93a90f30f127e2d223990a55b481434bc05ba95c2025d4eba761004cec5313dfe6d15d03f0cb5651d24ead584169fca01ac25de2c51f5d28732114b89f0f48732eba850e81036085f", 0xdb}], 0x6, &(0x7f0000000880)=[@op={0x18}], 0x18, 0x80}, 0x4081) (async) semctl$SETALL(0x0, 0x0, 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) socket$rxrpc(0x21, 0x2, 0x2) (async) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="616464723d3132372e302e302e312c706f72743d323034392c6d6f756e74706f72743d323034392c70726f746f3d7463702c6d6f756e7470726f746f3d7463702c6e6f6c6f636b2c74696d656f3d31302c72657472616e733d31002c00a6520c69adacc217b9b4408ea44138cbc81b760dff90b2babd99591f9957f06b32ec0283f539cddddc54bee216cbc11a02842917d7039670f51e007e386a10d9e404d828cb68631de888d01955a05b37d68c93e05f17c1d57780af0d767cea756b3de667264aac5a56a6499bbc0cc1197654b1f2d38d4ecdcf61a34508dbaf5a8d77a5f75b771d8055130df9ee8f5c74f792dfbba13935c28a5dc1378f0eed5ec321d1851779545c0d72846bde335dd38c76b7822ce0e4036101d7354cf9"]) 1.435072443s ago: executing program 3 (id=435): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18010000210001000000000000000000fc020000000000000000000000000000fc02000000000000000000000000000000000000002000000a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac14140c000000"], 0x118}}, 0x0) 1.433681165s ago: executing program 3 (id=436): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=@setlink={0x214, 0x13, 0x1, 0x2000000, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_CARRIER={0x5}, @IFLA_VFINFO_LIST={0x1ec, 0x16, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x10, 0x2}}, @IFLA_VF_VLAN={0x10, 0x2, {0x1ff, 0x34e, 0x5}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x5f, 0x7fffffff}}]}, {0xcc, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x2}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xa, 0xc8a8}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x0, 0x4}}, @IFLA_VF_VLAN_LIST={0x54, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x6, 0x3ce, 0xc6c8, 0x8100}}, {0x14, 0x1, {0x8001, 0x83d, 0x8, 0x88a8}}, {0x14, 0x1, {0x2, 0xb7, 0xa3c, 0x8100}}, {0x14, 0x1, {0xfffffff1, 0xa4, 0xffffff37, 0x88a8}}]}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x1, 0x9}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x7, 0x9}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x9, 0x80000001}}, @IFLA_VF_VLAN={0x10, 0x2, {0xfffffffe, 0xb6e, 0x8}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x6, 0xc}}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x10001, 0xffff}}]}, {0x88, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x4, 0x3, 0x9}}, @IFLA_VF_RATE={0x10, 0x6, {0x9, 0x4, 0x4cda}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x25f, 0x10001}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x5, 0x3}}, @IFLA_VF_RATE={0x10, 0x6, {0x7, 0x1000, 0x6}}, @IFLA_VF_RATE={0x10, 0x6, {0x4, 0xdc, 0xffffffff}}, @IFLA_VF_TRUST={0xc, 0x9, {0x3, 0x3}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x5, 0x200}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x6, 0x7}}]}, {0x48, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x6, 0x4}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x1, 0x3}}, @IFLA_VF_TRUST={0xc, 0x9, {0xcd3a, 0x1000}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x5, 0x9718}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x3, 0x9}}]}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x4000885}, 0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x80a, &(0x7f0000000740), 0x1, 0x7bf, &(0x7f0000000d00)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prlimit64(0x0, 0x2, &(0x7f0000000040)={0x1000000000000009, 0xffffffffffffffff}, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) 1.361384072s ago: executing program 3 (id=437): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./debug\x00', 0x80008c, &(0x7f00000000c0)={[{@noinit_itable}, {@usrquota}, {@resuid}, {@i_version}, {@stripe={'stripe', 0x3d, 0x8}}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}]}, 0x3, 0x447, &(0x7f0000000380)="$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") r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0xa0363159}}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) ptrace$poke(0x5, r1, &(0x7f00000002c0), 0xcc6f) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mincore(&(0x7f0000f0c000/0x3000)=nil, 0xffffffffff600000, &(0x7f0000afaf0a)=""/246) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) msync(&(0x7f000073a000/0x4000)=nil, 0x4000, 0x5) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001800010400000000000000100a400000fe0300010000000014000500fe8000000000000000000000000000bb08000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c0001000002010140"], 0x60}}, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001600010a00000000fbdbdf250a0000001800ca8007"], 0x2c}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 1.323348994s ago: executing program 6 (id=438): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 1.299813513s ago: executing program 6 (id=439): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000080000000000000009000000731108000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioprio_set$pid(0x3, 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) io_setup(0x8, &(0x7f0000000040)=0x0) io_submit(r4, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0x0, 0x0, 0x48, 0x0, 0x7, r3, 0x0}]) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0x0, 0x4}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$l2tp(0x2, 0x2, 0x73) connect$pppl2tp(r6, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x4e21, @remote}, 0x2, 0x0, 0x0, 0x4}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r6, 0x8004745a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000011000100000000000033ece229cfdb34", @ANYRES32=r8], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.258549079s ago: executing program 2 (id=440): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000002080)=ANY=[@ANYRES8, @ANYBLOB="092aaf102f13e8f8ef2911c83b655942dca6a3da14be9e24ccfc760e403a9a27032716e3d97b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1e}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x10, &(0x7f0000002040)=ANY=[@ANYRESOCT], &(0x7f0000002140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000140)={[{@discard}, {@dioread_lock}, {@test_dummy_encryption}]}, 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) fallocate(r0, 0x0, 0x8e14, 0x8ffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setns(0xc9, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e1f, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r0, &(0x7f0000000840)=0xffff, 0x9, 0x0) 1.15788614s ago: executing program 5 (id=441): socket$netlink(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000640800000000019078ac1e0001941414aa0b009078030b00004200000000000000008900000a010101ac0e00aa862600000002060b5e000000ff00d8870000050404a6001096060539fff5800000b61af9070b5764010101ac1414aa00"], 0x0) 1.118496612s ago: executing program 5 (id=442): bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 669.507231ms ago: executing program 6 (id=443): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='md0\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='raid1\n', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1:0\n', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='1:1\n', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='0\n', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) write(r6, &(0x7f0000000440)='1\n', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0) write(r7, &(0x7f00000004c0)='writemostly\n', 0xc) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r8, &(0x7f0000000540)='readonly\n', 0x9) write(r8, &(0x7f0000000580)='inactive\n', 0x9) r9 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/block/md0/md/bitmap/location\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='1', 0x1) write(r8, &(0x7f0000000640)='readonly\n', 0x9) r10 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/block/md0/md/bitmap/backlog\x00', 0x1, 0x0) write(r10, &(0x7f00000006c0)='1024\n', 0x5) 496.208194ms ago: executing program 7 (id=444): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, 0x0, 0x0, 0x423, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1805000000000000000000000000000085000000a8"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x95) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r0}, 0xc) 464.30924ms ago: executing program 3 (id=445): bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 421.093948ms ago: executing program 7 (id=446): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000180)={{}, "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"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000003800010327b6341d21c2e68f06"], 0x14}, 0x1, 0x0, 0x0, 0x48d3}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="9500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x4}, {0x0, 0x0, 0x0, 0x26}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x8}, {0xffffffff, 0x800}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x40000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x18}, {}, {}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x4}, {}, {0x0, 0x4}, {0x0, 0x2}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x9}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3, 0x0, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x4, 0x0, 0xffff}, {0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x8}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r6, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') writev(0xffffffffffffffff, 0x0, 0x0) pread64(r7, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) r8 = fanotify_init(0x68, 0x0) fanotify_mark(r8, 0x105, 0x40001032, r5, 0x0) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_RATE={0x6, 0x5, {0x2, 0xb}}]}, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), r9) write(r5, &(0x7f00000001c0)="05f73f279b4b9168fb68c0f80898a570a0f9ff449b13cc700f2b91bf5ae701c4103d7d064b00754a64f46c3a876bd8d8b348dc4386200f2b52f7cd62dfc05d8ae85d17043a0bbae06ef9c34d0b4789297ccb", 0x52) r12 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x7, &(0x7f0000000040)="c2a77903b6d7ad7c6b2646c9c4f7edb08a030e95163df00ecb0d8096ab1922d5f400359e38a8301593b4069da0de5b211dd209683b94d854d0b49133f7993279cc032dbf7d4451bc0d9a6e8a5a327a052f61dcd99e594878c635a899a1e208f1e20b380b20aa5e0b42692853feb73d88ffda34") sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r12) 408.261819ms ago: executing program 7 (id=447): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18010000210001000000000000000000fc020000000000000000000000000000fc02000000000000000000000000000000000000002000000a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac14140c000000"], 0x118}}, 0x0) 84.077378ms ago: executing program 2 (id=448): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001980), r0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000027c0)={0x80000000}) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000001a40)={0x0, 0xffffffffffffffec, &(0x7f0000000080)={&(0x7f00000019c0)={0x14, r1, 0x311, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24000001}, 0x20040054) 52.836539ms ago: executing program 5 (id=449): r0 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000580)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x200000000000000, 0x0, 0x0) 51.832529ms ago: executing program 7 (id=450): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x31, 0x0, &(0x7f0000000040)) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x5) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000000022, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x10}}, 0x800) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000500), 0x8200, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) 1.365748ms ago: executing program 5 (id=451): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000c00)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b0000000800", @ANYRES32=r2, @ANYBLOB="bc01330080000000ffffffffffff080211"], 0x1d8}, 0x1, 0x0, 0x0, 0x805}, 0x0) 858.53µs ago: executing program 2 (id=452): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x20040880) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = dup3(0xffffffffffffffff, r0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001700)=@any_dev={0x4, 0xfd1, 0x0, 0x0, 0x1000, 0x1, 0xffffffffffffffff, 0x0, 0x109}}}, &(0x7f0000000100)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_ublk_setup_queues(r2, r3, &(0x7f0000000280)={0x0, 0xc71a, 0x80, 0x2, 0xc3}, 0x0, 0x4, &(0x7f0000001580)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, r4, '\x00', {0x0, 0x349, 0x0, &(0x7f0000000580)=@buf_512="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"}}, &(0x7f0000001600)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x480d0) 0s ago: executing program 5 (id=453): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) syz_open_dev$loop(&(0x7f0000000280), 0xffffffffffff2c1c, 0x20402) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)={0x14, r4, 0x301, 0x70bd29, 0x25dfdbfb, {0x21}}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x4814) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x8831}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}]}}}, @IFLA_LINK={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.165' (ED25519) to the list of known hosts. [ 28.882107][ T4693] cgroup: Unknown subsys name 'net' [ 28.983094][ T4693] cgroup: Unknown subsys name 'cpuset' [ 28.984992][ T4693] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.124205][ T4693] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 30.950339][ T4709] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.957313][ T4709] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.959398][ T4709] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.960928][ T4711] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.961576][ T4711] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.965678][ T4711] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.966016][ T4711] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.966200][ T4708] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.966652][ T4708] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.966859][ T4708] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.973510][ T4713] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.975632][ T4713] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.977111][ T4719] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.978054][ T4719] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.978371][ T4719] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.978689][ T4719] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.979008][ T4719] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.979298][ T4719] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.979688][ T4719] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.979873][ T4719] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.994288][ T4713] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.995818][ T4713] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.997329][ T4713] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 31.009371][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 31.012819][ T4713] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 31.371821][ T4707] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.372061][ T4707] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.372139][ T4707] bridge_slave_0: entered allmulticast mode [ 31.372606][ T4707] bridge_slave_0: entered promiscuous mode [ 31.373995][ T4707] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.374017][ T4707] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.374069][ T4707] bridge_slave_1: entered allmulticast mode [ 31.374517][ T4707] bridge_slave_1: entered promiscuous mode [ 31.388430][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.388501][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.388558][ T4710] bridge_slave_0: entered allmulticast mode [ 31.388957][ T4710] bridge_slave_0: entered promiscuous mode [ 31.389924][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.389951][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.389998][ T4710] bridge_slave_1: entered allmulticast mode [ 31.390404][ T4710] bridge_slave_1: entered promiscuous mode [ 31.401556][ T4710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.406257][ T4710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.438644][ T4707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.439608][ T4707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.457933][ T4710] team0: Port device team_slave_0 added [ 31.459868][ T4710] team0: Port device team_slave_1 added [ 31.461178][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.461252][ T4714] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.461313][ T4714] bridge_slave_0: entered allmulticast mode [ 31.461744][ T4714] bridge_slave_0: entered promiscuous mode [ 31.462985][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.463009][ T4714] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.463062][ T4714] bridge_slave_1: entered allmulticast mode [ 31.463525][ T4714] bridge_slave_1: entered promiscuous mode [ 31.478587][ T4707] team0: Port device team_slave_0 added [ 31.479744][ T4707] team0: Port device team_slave_1 added [ 31.500214][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.500238][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.500252][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.504227][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.504236][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.504250][ T4707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.504757][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.504763][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.504776][ T4707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.516026][ T4707] hsr_slave_0: entered promiscuous mode [ 31.516335][ T4707] hsr_slave_1: entered promiscuous mode [ 31.536467][ T4705] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.537891][ T4705] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.539434][ T4705] bridge_slave_0: entered allmulticast mode [ 31.539886][ T4705] bridge_slave_0: entered promiscuous mode [ 31.540788][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.540796][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.540811][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.550382][ T4710] hsr_slave_0: entered promiscuous mode [ 31.550790][ T4710] hsr_slave_1: entered promiscuous mode [ 31.550999][ T4710] debugfs: 'hsr0' already exists in 'hsr' [ 31.551031][ T4710] Cannot create hsr debugfs directory [ 31.556280][ T4714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.557374][ T4714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.560245][ T4704] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.560998][ T4704] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.561102][ T4704] bridge_slave_0: entered allmulticast mode [ 31.561512][ T4704] bridge_slave_0: entered promiscuous mode [ 31.562664][ T4704] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.562687][ T4704] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.562738][ T4704] bridge_slave_1: entered allmulticast mode [ 31.563220][ T4704] bridge_slave_1: entered promiscuous mode [ 31.564043][ T4705] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.564070][ T4705] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.564133][ T4705] bridge_slave_1: entered allmulticast mode [ 31.564577][ T4705] bridge_slave_1: entered promiscuous mode [ 31.574920][ T4714] team0: Port device team_slave_0 added [ 31.591999][ T4714] team0: Port device team_slave_1 added [ 31.599394][ T4704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.603025][ T4705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.604067][ T4705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.609153][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.609490][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.609521][ T4714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.611494][ T4704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.622176][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.622200][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.622226][ T4714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.632144][ T4714] hsr_slave_0: entered promiscuous mode [ 31.632435][ T4714] hsr_slave_1: entered promiscuous mode [ 31.632613][ T4714] debugfs: 'hsr0' already exists in 'hsr' [ 31.632622][ T4714] Cannot create hsr debugfs directory [ 31.637910][ T4704] team0: Port device team_slave_0 added [ 31.649690][ T4704] team0: Port device team_slave_1 added [ 31.653605][ T4705] team0: Port device team_slave_0 added [ 31.654572][ T4705] team0: Port device team_slave_1 added [ 31.675347][ T4704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.675372][ T4704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.675389][ T4704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.675921][ T4704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.675927][ T4704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.675940][ T4704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.686879][ T4705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.686888][ T4705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.686903][ T4705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.687488][ T4705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.687495][ T4705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.687510][ T4705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.701819][ T4704] hsr_slave_0: entered promiscuous mode [ 31.702130][ T4704] hsr_slave_1: entered promiscuous mode [ 31.702318][ T4704] debugfs: 'hsr0' already exists in 'hsr' [ 31.702327][ T4704] Cannot create hsr debugfs directory [ 31.717226][ T4707] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.720240][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.724575][ T4705] hsr_slave_0: entered promiscuous mode [ 31.724914][ T4705] hsr_slave_1: entered promiscuous mode [ 31.725114][ T4705] debugfs: 'hsr0' already exists in 'hsr' [ 31.725123][ T4705] Cannot create hsr debugfs directory [ 31.727953][ T4707] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.730040][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.742491][ T4707] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.744804][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.745125][ T4707] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.747200][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.796866][ T4707] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.796932][ T4707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.797104][ T4707] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.797141][ T4707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.831307][ T4710] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.833581][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.833916][ T4710] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.835793][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.836546][ T4710] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.838293][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.843286][ T4710] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.845644][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.863585][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.863634][ T4710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.863730][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.863770][ T4710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.872352][ T4714] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.874459][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.879740][ T4714] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.882151][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.894779][ T4707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.896359][ T4714] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.897494][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.897774][ T4714] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.898716][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.909475][ T4705] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.912542][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.915936][ T4705] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.916856][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.917121][ T4705] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.918296][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.923094][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.924489][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.925819][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.927173][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.939585][ T4707] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.939772][ T4705] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.942367][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.960972][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.963511][ T1236] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.963571][ T1236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.963954][ T1236] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.963972][ T1236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.972353][ T4704] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.974553][ T4704] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.974867][ T4704] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.976878][ T4704] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.980176][ T4704] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.983230][ T4704] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.983531][ T4704] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.985276][ T4704] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.987932][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.997488][ T1236] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.997524][ T1236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.001010][ T1236] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.001067][ T1236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.028436][ T4710] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.029742][ T4710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.048127][ T4714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.063391][ T4714] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.073083][ T1236] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.073136][ T1236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.073460][ T1236] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.073481][ T1236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.086254][ T4704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.090220][ T4704] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.100496][ T4714] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.106273][ T4714] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.108164][ T4705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.115828][ T4705] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.124786][ T3773] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.124828][ T3773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.125165][ T3773] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.125184][ T3773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.130647][ T1236] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.130710][ T1236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.143421][ T4705] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.145426][ T4705] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.158243][ T199] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.158288][ T199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.182798][ T4704] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.304762][ T4707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.317469][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.339661][ T4707] veth0_vlan: entered promiscuous mode [ 32.349473][ T4705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.354166][ T4707] veth1_vlan: entered promiscuous mode [ 32.360616][ T4707] veth0_macvtap: entered promiscuous mode [ 32.363395][ T4707] veth1_macvtap: entered promiscuous mode [ 32.368263][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.380123][ T4714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.387124][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.397478][ T4710] veth0_vlan: entered promiscuous mode [ 32.405435][ T4704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.407478][ T4710] veth1_vlan: entered promiscuous mode [ 32.419261][ T4705] veth0_vlan: entered promiscuous mode [ 32.424351][ T4705] veth1_vlan: entered promiscuous mode [ 32.446253][ T4710] veth0_macvtap: entered promiscuous mode [ 32.449151][ T4710] veth1_macvtap: entered promiscuous mode [ 32.460033][ T4705] veth0_macvtap: entered promiscuous mode [ 32.465667][ T4704] veth0_vlan: entered promiscuous mode [ 32.467285][ T4704] veth1_vlan: entered promiscuous mode [ 32.471040][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.471571][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.471591][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.471608][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.473582][ T4705] veth1_macvtap: entered promiscuous mode [ 32.476718][ T4705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.478683][ T4705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.484406][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.485394][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.516571][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.518416][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.523824][ T4704] veth0_macvtap: entered promiscuous mode [ 32.530806][ T4704] veth1_macvtap: entered promiscuous mode [ 32.541645][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.542022][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.542080][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.542141][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.542210][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.542261][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.542311][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.542361][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.549553][ T2737] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.549565][ T2737] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.553005][ T4704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.558465][ T4704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.561631][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.561657][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.572834][ T4714] veth0_vlan: entered promiscuous mode [ 32.577790][ T4714] veth1_vlan: entered promiscuous mode [ 32.593932][ T4714] veth0_macvtap: entered promiscuous mode [ 32.597850][ T4714] veth1_macvtap: entered promiscuous mode [ 32.609722][ T2737] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.609748][ T2737] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.624805][ T199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.624834][ T199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.625278][ T199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.625286][ T199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.628015][ T4707] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.639157][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.642444][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.650632][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.650893][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.696246][ T2737] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.696322][ T2737] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.741847][ T2737] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.741877][ T2737] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.749899][ T4890] IPv6: Can't replace route, no match found [ 32.757882][ T2737] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.757910][ T2737] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.762244][ T199] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.762626][ T199] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.762744][ T199] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.762833][ T199] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.762918][ T199] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.763055][ T199] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.763155][ T199] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.763169][ T199] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.796637][ T4894] loop1: detected capacity change from 0 to 1024 [ 32.798302][ T4894] ======================================================= [ 32.798302][ T4894] WARNING: The mand mount option has been deprecated and [ 32.798302][ T4894] and is ignored by this kernel. Remove the mand [ 32.798302][ T4894] option from the mount to silence this warning. [ 32.798302][ T4894] ======================================================= [ 32.806041][ T4894] EXT4-fs: Ignoring removed oldalloc option [ 32.807194][ T4894] EXT4-fs: Ignoring removed orlov option [ 32.832673][ T4898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 32.842022][ T4894] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.863739][ T4894] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: comm syz.1.2: lblock 0 mapped to illegal pblock 0 (length 6) [ 32.867002][ T4894] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 32.867042][ T4894] EXT4-fs (loop1): This should not happen!! Data will be lost [ 32.867042][ T4894] [ 32.881771][ T59] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: comm kworker/u8:4: lblock 0 mapped to illegal pblock 0 (length 6) [ 32.888724][ T59] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 32.888759][ T59] EXT4-fs (loop1): This should not happen!! Data will be lost [ 32.888759][ T59] [ 32.895126][ T59] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm kworker/u8:4: bg 0: block 112: padding at end of block bitmap is not set [ 32.898492][ T59] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 32 with error 28 [ 32.901145][ T59] EXT4-fs (loop1): This should not happen!! Data will be lost [ 32.901145][ T59] [ 32.903180][ T59] EXT4-fs (loop1): Total free blocks count 0 [ 32.904486][ T59] EXT4-fs (loop1): Free/Dirty block details [ 32.910876][ T59] EXT4-fs (loop1): free_blocks=0 [ 32.914085][ T4705] EXT4-fs warning (device loop1): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost [ 32.964959][ T4908] ip_tables: iptables: counters copy to user failed while replacing table [ 33.041122][ T4719] Bluetooth: hci3: command tx timeout [ 33.041137][ T4713] Bluetooth: hci4: command tx timeout [ 33.041325][ T4719] Bluetooth: hci1: command tx timeout [ 33.041340][ T4713] Bluetooth: hci0: command tx timeout [ 33.041512][ T4719] Bluetooth: hci2: command tx timeout [ 33.083448][ T4925] tmpfs: Invalid uid '0x00000000ffffffff' [ 33.312220][ T4928] input: syz0 as /devices/virtual/input/input2 [ 33.400446][ T4929] loop4: detected capacity change from 0 to 512 [ 33.410458][ T4929] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 33.460198][ T4929] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c840e018, mo2=0002] [ 33.460648][ T4929] EXT4-fs (loop4): orphan cleanup on readonly fs [ 33.466356][ T4929] EXT4-fs error (device loop4): __ext4_iget:5592: inode #11: block 7176215: comm syz.4.16: invalid block [ 33.466444][ T4929] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 33.473029][ T4929] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.16: couldn't read orphan inode 11 (err -117) [ 33.473122][ T4929] loop4: lost filesystem error report for type 5 error -117 [ 33.482256][ T4929] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 33.504051][ T4929] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.16: dx entry: limit 0 != root limit 125 [ 33.504160][ T4929] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.16: Corrupt directory, running e2fsck is recommended [ 33.509276][ T4929] overlay: filesystem on ./file0 is read-only [ 34.034913][ T4935] Illegal XDP return value 4094951460 on prog (id 1) dev syz_tun, expect packet loss! [ 34.049691][ T4925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15'. [ 34.137524][ T4938] netlink: 'syz.3.18': attribute type 14 has an invalid length. [ 34.137556][ T4938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18'. [ 34.146749][ T4938] netlink: 'syz.3.18': attribute type 14 has an invalid length. [ 34.146784][ T4938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18'. [ 34.147250][ T4938] Zero length message leads to an empty skb [ 34.190813][ T4932] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.194018][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.195903][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.197702][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.309751][ T4714] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 34.349499][ T4938] netlink: 196 bytes leftover after parsing attributes in process `syz.3.18'. [ 34.383570][ T4938] overlayfs: refusing to follow metacopy origin for (/file1) [ 34.448337][ T4959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.450214][ T4959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.541011][ T4966] netlink: 20 bytes leftover after parsing attributes in process `syz.0.30'. [ 34.868363][ T30] audit: type=1326 audit(34.850:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4977 comm="syz.2.34" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff875792a8 code=0x7ffc0000 [ 34.868411][ T30] audit: type=1326 audit(34.850:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4977 comm="syz.2.34" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff875792a8 code=0x7ffc0000 [ 34.868444][ T30] audit: type=1326 audit(34.850:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4977 comm="syz.2.34" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff875792a8 code=0x7ffc0000 [ 34.868467][ T30] audit: type=1326 audit(34.850:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4977 comm="syz.2.34" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff875792a8 code=0x7ffc0000 [ 34.868486][ T30] audit: type=1326 audit(34.850:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4977 comm="syz.2.34" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff875792a8 code=0x7ffc0000 [ 34.868505][ T30] audit: type=1326 audit(34.850:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4977 comm="syz.2.34" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff875792a8 code=0x7ffc0000 [ 34.868524][ T30] audit: type=1326 audit(34.850:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4977 comm="syz.2.34" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff875792a8 code=0x7ffc0000 [ 34.868543][ T30] audit: type=1326 audit(34.850:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4977 comm="syz.2.34" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=265 compat=0 ip=0xffff875792a8 code=0x7ffc0000 [ 34.868563][ T30] audit: type=1326 audit(34.850:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4977 comm="syz.2.34" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff875792a8 code=0x7ffc0000 [ 34.868581][ T30] audit: type=1326 audit(34.850:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4977 comm="syz.2.34" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff875792a8 code=0x7ffc0000 [ 34.967913][ T4991] netlink: 444 bytes leftover after parsing attributes in process `syz.2.40'. [ 35.016976][ T4997] netlink: 20 bytes leftover after parsing attributes in process `syz.1.42'. [ 35.120743][ T51] Bluetooth: hci0: command tx timeout [ 35.120779][ T51] Bluetooth: hci4: command tx timeout [ 35.120811][ T51] Bluetooth: hci3: command tx timeout [ 35.130850][ T4719] Bluetooth: hci2: command tx timeout [ 35.132191][ T51] Bluetooth: hci1: command tx timeout [ 35.135508][ T5010] loop3: detected capacity change from 0 to 128 [ 35.157805][ T5010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.49'. [ 35.170136][ T5010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.49'. [ 35.301755][ T4814] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 35.323402][ T5028] loop3: detected capacity change from 0 to 512 [ 35.327422][ T5028] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.53: corrupted in-inode xattr: invalid ea_ino [ 35.327460][ T5028] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 35.327846][ T5028] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.53: couldn't read orphan inode 15 (err -117) [ 35.327869][ T5028] loop3: lost filesystem error report for type 5 error -117 [ 35.328408][ T5028] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.360190][ T5032] loop4: detected capacity change from 0 to 1024 [ 35.383848][ T5032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 35.415981][ T4714] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 35.473581][ T4814] usb 1-1: device descriptor read/64, error -71 [ 35.854539][ T4814] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 35.877015][ T5043] netlink: 'syz.2.57': attribute type 63 has an invalid length. [ 35.980815][ T4814] usb 1-1: device descriptor read/64, error -71 [ 36.091210][ T4814] usb usb1-port1: attempt power cycle [ 36.142877][ T5057] tmpfs: Cannot change global quota limit on remount [ 36.186021][ T4704] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.382825][ T3773] IPVS: starting estimator thread 0... [ 36.384532][ T5068] IPVS: set_ctl: invalid protocol: 29 10.1.1.1:20001 [ 36.389411][ T5068] loop4: detected capacity change from 0 to 1024 [ 36.419700][ T5068] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.419723][ T5068] EXT4-fs (loop4): can't mount with both data=journal and delalloc [ 36.450779][ T4814] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 36.471996][ T4814] usb 1-1: device descriptor read/8, error -71 [ 36.521035][ T5069] IPVS: using max 59 ests per chain, 141600 per kthread [ 36.907905][ T5072] loop4: detected capacity change from 0 to 8192 [ 36.923261][ T5077] loop2: detected capacity change from 0 to 8192 [ 36.932739][ T4814] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 36.951542][ T4814] usb 1-1: device descriptor read/8, error -71 [ 37.061031][ T4814] usb usb1-port1: unable to enumerate USB device [ 37.160005][ T5084] loop1: detected capacity change from 0 to 512 [ 37.170055][ T5084] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 37.170188][ T5084] EXT4-fs (loop1): orphan cleanup on readonly fs [ 37.173280][ T5084] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.71: Failed to acquire dquot type 1 [ 37.173318][ T5084] loop1: lost filesystem error report for type 5 error -5 [ 37.177707][ T5084] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.71: bg 0: block 40: padding at end of block bitmap is not set [ 37.177754][ T5084] loop1: lost filesystem error report for type 5 error -117 [ 37.180707][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 37.180722][ C1] EXT4-fs (loop1): initial error at time 37: ext4_acquire_dquot:7069 [ 37.180736][ C1] EXT4-fs (loop1): last error at time 37: ext4_validate_block_bitmap:445 [ 37.188849][ T5084] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 37.188889][ T5084] loop1: lost filesystem error report for type 5 error -117 [ 37.196954][ T5084] EXT4-fs warning (device loop1): ext4_evict_inode:196: inode #16: comm syz.1.71: data will be lost [ 37.197140][ T5084] EXT4-fs (loop1): 1 truncate cleaned up [ 37.201344][ T4719] Bluetooth: hci2: command tx timeout [ 37.201364][ T4719] Bluetooth: hci1: command tx timeout [ 37.201379][ T4719] Bluetooth: hci3: command tx timeout [ 37.201392][ T4719] Bluetooth: hci4: command tx timeout [ 37.201405][ T4719] Bluetooth: hci0: command tx timeout [ 37.274785][ T5084] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 37.323598][ T4705] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.513802][ T5113] loop1: detected capacity change from 0 to 1024 [ 37.528310][ T5115] EXT4-fs: Mount option(s) incompatible with ext3 [ 37.540313][ T5115] netlink: 'syz.2.82': attribute type 2 has an invalid length. [ 37.542663][ T5101] netlink: 'syz.3.77': attribute type 1 has an invalid length. [ 37.545291][ T5113] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 37.558260][ T5101] warning: `syz.3.77' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 37.568091][ T4705] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 37.612262][ T5126] netlink: 'syz.4.85': attribute type 11 has an invalid length. [ 37.849488][ T5151] openvswitch: netlink: Actions may not be safe on all matching packets [ 37.905959][ T5162] set_capacity_and_notify: 1 callbacks suppressed [ 37.907170][ T5162] loop3: detected capacity change from 0 to 512 [ 37.917094][ T5162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.924573][ T5162] Bluetooth: MGMT ver 1.23 [ 38.035689][ T5170] __nla_validate_parse: 5 callbacks suppressed [ 38.035726][ T5170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.101'. [ 38.176312][ T5172] netlink: 36 bytes leftover after parsing attributes in process `syz.2.97'. [ 38.235963][ T5178] loop0: detected capacity change from 0 to 512 [ 38.254534][ T5178] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.258505][ T5178] netlink: 36 bytes leftover after parsing attributes in process `syz.0.103'. [ 38.326451][ T5188] EXT4-fs: Cannot specify journal on remount [ 38.360044][ T4704] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.503275][ T4707] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.534830][ T51] Bluetooth: hci2: SCO packet for unknown connection handle 1024 [ 38.778621][ T5216] sit0: entered promiscuous mode [ 38.780436][ T5216] netlink: 'syz.0.114': attribute type 1 has an invalid length. [ 38.782091][ T5216] netlink: 1 bytes leftover after parsing attributes in process `syz.0.114'. [ 38.885333][ T5228] syzkaller0: entered promiscuous mode [ 38.885361][ T5228] syzkaller0: entered allmulticast mode [ 38.887829][ T5228] netlink: 'syz.4.115': attribute type 3 has an invalid length. [ 39.291493][ T4719] Bluetooth: hci4: command tx timeout [ 39.291531][ T4719] Bluetooth: hci3: command tx timeout [ 39.291549][ T4713] Bluetooth: hci1: command tx timeout [ 39.292802][ T51] Bluetooth: hci0: command tx timeout [ 39.429306][ T5271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.125'. [ 39.705178][ T5276] Format for deleting device is "id" (uint). [ 39.749023][ T5280] FAULT_INJECTION: forcing a failure. [ 39.749023][ T5280] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 39.750262][ T5280] CPU: 0 UID: 0 PID: 5280 Comm: syz.2.128 Not tainted syzkaller #0 PREEMPT [ 39.750278][ T5280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 39.750283][ T5280] Call trace: [ 39.750286][ T5280] show_stack+0x2c/0x3c (C) [ 39.750302][ T5280] __dump_stack+0x30/0x40 [ 39.750313][ T5280] dump_stack_lvl+0xd8/0x12c [ 39.750323][ T5280] dump_stack+0x1c/0x28 [ 39.750333][ T5280] should_fail_ex+0x41c/0x590 [ 39.750344][ T5280] should_fail_alloc_page+0xec/0x10c [ 39.750355][ T5280] prepare_alloc_pages+0x194/0x484 [ 39.750362][ T5280] alloc_pages_bulk_noprof+0x10c/0x7d8 [ 39.750373][ T5280] __kasan_populate_vmalloc+0xc0/0x1d0 [ 39.750383][ T5280] alloc_vmap_area+0xdf4/0x13e8 [ 39.750391][ T5280] __get_vm_area_node+0x210/0x32c [ 39.750398][ T5280] __vmalloc_node_range_noprof+0x2a0/0xe9c [ 39.750407][ T5280] __vmalloc_node_noprof+0xec/0x14c [ 39.750415][ T5280] __vmalloc_noprof+0x64/0x8c [ 39.750423][ T5280] bpf_check+0xd58/0x243c [ 39.750433][ T5280] bpf_prog_load+0xf4c/0x1554 [ 39.750442][ T5280] __sys_bpf+0x7d4/0x82c [ 39.750449][ T5280] __arm64_sys_bpf+0xd0/0xec [ 39.750457][ T5280] invoke_syscall+0x98/0x244 [ 39.750467][ T5280] el0_svc_common+0xec/0x23c [ 39.750476][ T5280] do_el0_svc+0x4c/0x5c [ 39.750486][ T5280] el0_svc+0x64/0x260 [ 39.750495][ T5280] el0t_64_sync_handler+0x44/0x104 [ 39.750503][ T5280] el0t_64_sync+0x198/0x19c [ 39.750576][ T5280] syz.2.128: vmalloc error: size 124032, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 39.750626][ T5280] CPU: 0 UID: 0 PID: 5280 Comm: syz.2.128 Not tainted syzkaller #0 PREEMPT [ 39.750636][ T5280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 39.750640][ T5280] Call trace: [ 39.750642][ T5280] show_stack+0x2c/0x3c (C) [ 39.750653][ T5280] __dump_stack+0x30/0x40 [ 39.750667][ T5280] dump_stack_lvl+0xd8/0x12c [ 39.750676][ T5280] dump_stack+0x1c/0x28 [ 39.750686][ T5280] warn_alloc+0x1c4/0x1d8 [ 39.750696][ T5280] __vmalloc_node_range_noprof+0x2c4/0xe9c [ 39.750705][ T5280] __vmalloc_node_noprof+0xec/0x14c [ 39.750713][ T5280] __vmalloc_noprof+0x64/0x8c [ 39.750721][ T5280] bpf_check+0xd58/0x243c [ 39.750731][ T5280] bpf_prog_load+0xf4c/0x1554 [ 39.750739][ T5280] __sys_bpf+0x7d4/0x82c [ 39.750747][ T5280] __arm64_sys_bpf+0xd0/0xec [ 39.750754][ T5280] invoke_syscall+0x98/0x244 [ 39.750764][ T5280] el0_svc_common+0xec/0x23c [ 39.750774][ T5280] do_el0_svc+0x4c/0x5c [ 39.750783][ T5280] el0_svc+0x64/0x260 [ 39.750791][ T5280] el0t_64_sync_handler+0x44/0x104 [ 39.750800][ T5280] el0t_64_sync+0x198/0x19c [ 39.751037][ T5280] Mem-Info: [ 39.751051][ T5280] active_anon:23 inactive_anon:8014 isolated_anon:0 [ 39.751051][ T5280] active_file:2357 inactive_file:4555 isolated_file:0 [ 39.751051][ T5280] unevictable:768 dirty:28 writeback:0 [ 39.751051][ T5280] slab_reclaimable:8720 slab_unreclaimable:87215 [ 39.751051][ T5280] mapped:31980 shmem:3812 pagetables:1076 [ 39.751051][ T5280] sec_pagetables:0 bounce:0 [ 39.751051][ T5280] kernel_misc_reclaimable:0 [ 39.751051][ T5280] free:1482557 free_pcp:17456 free_cma:7616 [ 39.751081][ T5280] Node 0 active_anon:92kB inactive_anon:32056kB active_file:9428kB inactive_file:18220kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:127920kB dirty:112kB writeback:0kB shmem:15248kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9500kB pagetables:4304kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 39.751109][ T5280] Node 0 DMA free:3077888kB boost:0kB min:20360kB low:25448kB high:30536kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 39.751136][ T5280] lowmem_reserve[]: 0 0 3650 3650 3650 [ 39.751165][ T5280] Node 0 Normal free:2852340kB boost:0kB min:24692kB low:30864kB high:37036kB reserved_highatomic:0kB free_highatomic:0kB active_anon:92kB inactive_anon:32056kB active_file:9428kB inactive_file:18220kB unevictable:3072kB writepending:112kB zspages:4kB present:5242880kB managed:3738144kB mlocked:0kB bounce:0kB free_pcp:69824kB local_pcp:30960kB free_cma:0kB [ 39.751190][ T5280] lowmem_reserve[]: 0 0 0 0 0 [ 39.751210][ T5280] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 39.751268][ T5280] Node 0 Normal: 1163*4kB (UM) 293*8kB (UME) 230*16kB (UME) 54*32kB (UME) 23*64kB (UME) 15*128kB (UM) 8*256kB (UM) 10*512kB (UM) 11*1024kB (UM) 16*2048kB (UM) 680*4096kB (UM) = 2852276kB [ 39.751361][ T5280] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 39.751368][ T5280] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 39.751374][ T5280] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 39.751381][ T5280] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 39.751387][ T5280] 10722 total pagecache pages [ 39.751390][ T5280] 3 pages in swap cache [ 39.751393][ T5280] Free swap = 124980kB [ 39.751397][ T5280] Total swap = 124996kB [ 39.751400][ T5280] 2097152 pages RAM [ 39.751403][ T5280] 0 pages HighMem/MovableOnly [ 39.751406][ T5280] 392568 pages reserved [ 39.751410][ T5280] 8192 pages cma reserved [ 39.751413][ T5280] 0 pages hwpoisoned [ 39.842325][ T5293] loop2: detected capacity change from 0 to 4096 [ 39.846367][ T5293] EXT4-fs (loop2): Test dummy encryption mode enabled [ 39.850317][ T5293] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.866982][ T5293] netlink: 'syz.2.131': attribute type 39 has an invalid length. [ 40.302994][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.319436][ T5308] loop3: detected capacity change from 0 to 1024 [ 40.341808][ T5308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 40.367549][ T5312] binder: 5311:5312 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 40.368177][ T5312] fuse: Bad value for 'fd' [ 40.579594][ T5317] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 41.185039][ T4704] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.672574][ T5348] loop5: detected capacity change from 0 to 7 [ 41.796827][ T5348] Dev loop5: unable to read RDB block 7 [ 41.800811][ T5348] loop5: unable to read partition table [ 41.800906][ T5348] loop5: partition table beyond EOD, truncated [ 41.800936][ T5348] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 41.832249][ T5350] loop4: detected capacity change from 0 to 8192 [ 42.091459][ T4338] Dev loop5: unable to read RDB block 7 [ 42.091495][ T4338] loop5: unable to read partition table [ 42.091576][ T4338] loop5: partition table beyond EOD, truncated [ 42.190355][ T5352] loop4: detected capacity change from 0 to 8 [ 42.208394][ T5352] SQUASHFS error: Unable to read inode 0xa7 [ 42.306252][ T5356] loop4: detected capacity change from 0 to 2048 [ 42.400956][ T4713] Bluetooth: hci5: command 0x1003 tx timeout [ 42.405192][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 42.408037][ T5356] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.438646][ T5356] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 42.439512][ T5356] EXT4-fs (loop4): Remounting filesystem read-only [ 42.481541][ T51] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 42.481584][ T51] Bluetooth: hci2: Injecting HCI hardware error event [ 42.482069][ T51] Bluetooth: hci2: hardware error 0x00 [ 42.541847][ T4714] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.565526][ T5369] loop2: detected capacity change from 0 to 1024 [ 42.565872][ T5369] EXT4-fs: Ignoring removed oldalloc option [ 42.565882][ T5369] EXT4-fs: Ignoring removed orlov option [ 42.586712][ T5369] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.857339][ T5387] loop3: detected capacity change from 0 to 1024 [ 42.863009][ T5387] EXT4-fs: Ignoring removed oldalloc option [ 42.867073][ T5388] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.157: bg 0: block 112: padding at end of block bitmap is not set [ 42.868694][ T5388] overlayfs: failed to resolve './bus': -2 [ 42.874575][ T5387] EXT4-fs: Ignoring removed orlov option [ 42.903516][ T5387] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.296086][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 43.346959][ T4704] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 43.503713][ T5400] 9p: Bad value for 'rfdno' [ 43.769421][ T5406] loop2: detected capacity change from 0 to 512 [ 43.777662][ T5406] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 43.790138][ T5406] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 43.790221][ T5406] block device autoloading is deprecated and will be removed. [ 43.790468][ T5406] EXT4-fs (loop2): couldn't read superblock of external journal [ 43.802078][ T5414] loop4: detected capacity change from 0 to 1024 [ 43.802610][ T5414] EXT4-fs: Ignoring removed oldalloc option [ 43.802620][ T5414] EXT4-fs: Ignoring removed orlov option [ 43.817048][ T5414] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.517760][ T5435] netlink: 'syz.3.176': attribute type 10 has an invalid length. [ 44.529641][ T5435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.532732][ T5435] team0: Port device bond0 added [ 44.619986][ T5445] FAULT_INJECTION: forcing a failure. [ 44.619986][ T5445] name failslab, interval 1, probability 0, space 0, times 1 [ 44.620021][ T5445] CPU: 1 UID: 0 PID: 5445 Comm: syz.1.179 Not tainted syzkaller #0 PREEMPT [ 44.620037][ T5445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 44.620043][ T5445] Call trace: [ 44.620047][ T5445] show_stack+0x2c/0x3c (C) [ 44.620066][ T5445] __dump_stack+0x30/0x40 [ 44.620079][ T5445] dump_stack_lvl+0xd8/0x12c [ 44.620090][ T5445] dump_stack+0x1c/0x28 [ 44.620101][ T5445] should_fail_ex+0x41c/0x590 [ 44.620120][ T5445] should_failslab+0xc4/0x120 [ 44.620133][ T5445] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 44.620142][ T5445] kvasprintf+0x110/0x1e4 [ 44.620154][ T5445] kvasprintf_const+0x154/0x2e4 [ 44.620165][ T5445] kobject_set_name_vargs+0xd8/0x1c0 [ 44.620177][ T5445] dev_set_name+0xe8/0x13c [ 44.620186][ T5445] nfc_allocate_device+0x19c/0x474 [ 44.620199][ T5445] nci_allocate_device+0x1a4/0x348 [ 44.620209][ T5445] virtual_ncidev_open+0x7c/0x1a0 [ 44.620222][ T5445] misc_open+0x2dc/0x338 [ 44.620234][ T5445] chrdev_open+0x398/0x3e8 [ 44.620244][ T5445] do_dentry_open+0x5c4/0xfc0 [ 44.620255][ T5445] vfs_open+0x44/0x2dc [ 44.620266][ T5445] path_openat+0x1084/0x18f4 [ 44.620276][ T5445] do_file_open+0x1c8/0x2e8 [ 44.620285][ T5445] do_sys_openat2+0x114/0x1e8 [ 44.620296][ T5445] do_sys_open+0xb0/0xe0 [ 44.620307][ T5445] __arm64_sys_openat+0xa8/0xc4 [ 44.620318][ T5445] invoke_syscall+0x98/0x244 [ 44.620330][ T5445] el0_svc_common+0xec/0x23c [ 44.620341][ T5445] do_el0_svc+0x4c/0x5c [ 44.620352][ T5445] el0_svc+0x64/0x260 [ 44.620362][ T5445] el0t_64_sync_handler+0x44/0x104 [ 44.620372][ T5445] el0t_64_sync+0x198/0x19c [ 44.733744][ T51] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 44.739141][ T4714] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 45.464140][ T5502] loop2: detected capacity change from 0 to 4096 [ 45.466765][ T5502] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 45.469149][ T5502] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c128, mo2=0023] [ 45.470894][ T5502] System zones: 0-5 [ 45.473646][ T5502] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.516936][ T5509] uf [ 45.690539][ T5513] loop1: detected capacity change from 0 to 1024 [ 45.690916][ T5513] ext4: Unknown parameter '' [ 45.939831][ T5518] netlink: 60 bytes leftover after parsing attributes in process `syz.4.190'. [ 45.975540][ T5518] netlink: 36 bytes leftover after parsing attributes in process `syz.4.190'. [ 46.381156][ T5533] netlink: 96 bytes leftover after parsing attributes in process `syz.3.193'. [ 46.511363][ T5540] loop3: detected capacity change from 0 to 512 [ 46.532145][ T5540] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 46.540609][ T5540] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.195: bad orphan inode 15 [ 46.540646][ T5540] loop3: lost filesystem error report for type 5 error -117 [ 46.542575][ T5540] ext4_test_bit(bit=14, block=5) = 0 [ 46.543146][ T5540] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.569447][ T5544] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 46.580100][ T5544] EXT4-fs error (device loop3): ext4_free_inode:356: comm syz.3.195: bit already cleared for inode 13 [ 46.686187][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.998119][ T5589] loop2: detected capacity change from 0 to 128 [ 46.998479][ T5589] EXT4-fs: Ignoring removed nobh option [ 47.008999][ T5589] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.017568][ T5589] FAULT_INJECTION: forcing a failure. [ 47.017568][ T5589] name failslab, interval 1, probability 0, space 0, times 0 [ 47.020808][ T5589] CPU: 1 UID: 0 PID: 5589 Comm: syz.2.201 Not tainted syzkaller #0 PREEMPT [ 47.020831][ T5589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 47.020837][ T5589] Call trace: [ 47.020840][ T5589] show_stack+0x2c/0x3c (C) [ 47.020865][ T5589] __dump_stack+0x30/0x40 [ 47.020877][ T5589] dump_stack_lvl+0xd8/0x12c [ 47.020887][ T5589] dump_stack+0x1c/0x28 [ 47.020897][ T5589] should_fail_ex+0x41c/0x590 [ 47.020908][ T5589] should_failslab+0xc4/0x120 [ 47.020919][ T5589] kmem_cache_alloc_noprof+0x94/0x5d4 [ 47.020931][ T5589] ext4_get_nojournal+0xb4/0x200 [ 47.020941][ T5589] __ext4_journal_start_sb+0x248/0x8f4 [ 47.020949][ T5589] ext4_alloc_file_blocks+0x394/0x1234 [ 47.020959][ T5589] ext4_do_fallocate+0x1d4/0xc04 [ 47.020967][ T5589] ext4_fallocate+0x248/0x3cc [ 47.020976][ T5589] vfs_fallocate+0x514/0x650 [ 47.020985][ T5589] ksys_fallocate+0x58/0xa4 [ 47.020994][ T5589] __arm64_sys_fallocate+0xa8/0xc4 [ 47.021003][ T5589] invoke_syscall+0x98/0x244 [ 47.021013][ T5589] el0_svc_common+0xec/0x23c [ 47.021023][ T5589] do_el0_svc+0x4c/0x5c [ 47.021032][ T5589] el0_svc+0x64/0x260 [ 47.021042][ T5589] el0t_64_sync_handler+0x44/0x104 [ 47.021050][ T5589] el0t_64_sync+0x198/0x19c [ 47.033799][ T5594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.033965][ T5594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.055211][ T4710] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.093758][ T5596] FAULT_INJECTION: forcing a failure. [ 47.093758][ T5596] name failslab, interval 1, probability 0, space 0, times 0 [ 47.093791][ T5596] CPU: 0 UID: 0 PID: 5596 Comm: syz.2.204 Not tainted syzkaller #0 PREEMPT [ 47.093804][ T5596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 47.093809][ T5596] Call trace: [ 47.093813][ T5596] show_stack+0x2c/0x3c (C) [ 47.093828][ T5596] __dump_stack+0x30/0x40 [ 47.093840][ T5596] dump_stack_lvl+0xd8/0x12c [ 47.093849][ T5596] dump_stack+0x1c/0x28 [ 47.093859][ T5596] should_fail_ex+0x41c/0x590 [ 47.093870][ T5596] should_failslab+0xc4/0x120 [ 47.093886][ T5596] __kmalloc_cache_noprof+0x94/0x5fc [ 47.093894][ T5596] _netlbl_catmap_getnode+0x1f4/0x354 [ 47.093904][ T5596] netlbl_catmap_setbit+0x3c/0x104 [ 47.093911][ T5596] smk_netlbl_mls+0x108/0x228 [ 47.093921][ T5596] smack_populate_secattr+0x224/0x30c [ 47.093930][ T5596] smk_import_allocated_label+0x120/0x208 [ 47.093940][ T5596] smk_import_entry+0x4c/0x64 [ 47.093949][ T5596] smk_fill_rule+0x60/0x270 [ 47.093958][ T5596] smk_parse_long_rule+0x46c/0x514 [ 47.093968][ T5596] smk_write_rules_list+0x220/0x330 [ 47.093977][ T5596] smk_write_load_self2+0xac/0xec [ 47.093987][ T5596] vfs_write+0x2a4/0xa0c [ 47.093997][ T5596] ksys_write+0x12c/0x228 [ 47.094007][ T5596] __arm64_sys_write+0x84/0x98 [ 47.094017][ T5596] invoke_syscall+0x98/0x244 [ 47.094027][ T5596] el0_svc_common+0xec/0x23c [ 47.094036][ T5596] do_el0_svc+0x4c/0x5c [ 47.094046][ T5596] el0_svc+0x64/0x260 [ 47.094054][ T5596] el0t_64_sync_handler+0x44/0x104 [ 47.094063][ T5596] el0t_64_sync+0x198/0x19c [ 47.203927][ T5602] syz.2.206 uses obsolete (PF_INET,SOCK_PACKET) [ 47.457557][ T4704] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.584487][ T5613] fuse: Bad value for 'fd' [ 47.585889][ T5613] netlink: 'syz.3.210': attribute type 10 has an invalid length. [ 47.589018][ T5613] fuse: Bad value for 'fd' [ 47.663568][ T5623] loop1: detected capacity change from 0 to 128 [ 47.666651][ T5623] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 47.691168][ T5623] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.725770][ T5623] netlink: 'syz.1.215': attribute type 2 has an invalid length. [ 47.730120][ T5623] netlink: 60 bytes leftover after parsing attributes in process `syz.1.215'. [ 47.733495][ T5623] netlink: 60 bytes leftover after parsing attributes in process `syz.1.215'. [ 48.162106][ T4705] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.281442][ T5643] loop1: detected capacity change from 0 to 8192 [ 48.364555][ T5653] loop4: detected capacity change from 0 to 256 [ 48.659377][ T5661] loop4: detected capacity change from 0 to 4096 [ 48.668915][ T5661] EXT4-fs (loop4): Test dummy encryption mode enabled [ 48.675412][ T5661] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.058614][ T5566] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.136611][ T5566] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.162538][ T4713] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 49.164394][ T4713] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 49.165979][ T4713] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 49.166773][ T4713] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 49.167006][ T4713] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 49.197689][ T5566] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.260245][ T5566] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.442391][ T5566] bridge_slave_1: left allmulticast mode [ 49.442437][ T5566] bridge_slave_1: left promiscuous mode [ 49.442953][ T5566] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.453375][ T5566] bridge_slave_0: left allmulticast mode [ 49.453404][ T5566] bridge_slave_0: left promiscuous mode [ 49.453471][ T5566] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.567967][ T5566] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.590852][ T5566] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.623166][ T5566] bond0 (unregistering): Released all slaves [ 49.847411][ T5566] hsr_slave_0: left promiscuous mode [ 49.848516][ T5566] hsr_slave_1: left promiscuous mode [ 49.848855][ T5566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.848870][ T5566] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.849909][ T5566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.849921][ T5566] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.856618][ T5566] veth1_macvtap: left promiscuous mode [ 49.856666][ T5566] veth0_macvtap: left promiscuous mode [ 49.856728][ T5566] veth1_vlan: left promiscuous mode [ 49.856768][ T5566] veth0_vlan: left promiscuous mode [ 49.981591][ T5566] team0 (unregistering): Port device team_slave_1 removed [ 49.985586][ T5566] team0 (unregistering): Port device team_slave_0 removed [ 50.054630][ T5669] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.054710][ T5669] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.054765][ T5669] bridge_slave_0: entered allmulticast mode [ 50.055206][ T5669] bridge_slave_0: entered promiscuous mode [ 50.056780][ T5669] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.056827][ T5669] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.056879][ T5669] bridge_slave_1: entered allmulticast mode [ 50.057321][ T5669] bridge_slave_1: entered promiscuous mode [ 50.066548][ T5669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.067632][ T5669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.075249][ T5669] team0: Port device team_slave_0 added [ 50.077104][ T5669] team0: Port device team_slave_1 added [ 50.092179][ T5669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.092456][ T5669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.092473][ T5669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.093071][ T5669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.093078][ T5669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.093092][ T5669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.124455][ T5669] hsr_slave_0: entered promiscuous mode [ 50.125413][ T5669] hsr_slave_1: entered promiscuous mode [ 50.125756][ T5669] debugfs: 'hsr0' already exists in 'hsr' [ 50.125766][ T5669] Cannot create hsr debugfs directory [ 50.478862][ T5704] ip_tables: iptables: counters copy to user failed while replacing table [ 51.140789][ T4713] Bluetooth: hci2: command tx timeout [ 51.421097][ T5657] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 51.443622][ T5669] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 51.470711][ T5669] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 51.471042][ T5669] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 51.472255][ T4714] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.491056][ T5669] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 51.502229][ T5669] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 51.526057][ T5669] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 51.526404][ T5669] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 51.542446][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 51.542487][ T30] audit: type=1400 audit(524339.652:25): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=5725 comm="syz.2.244" name="56" dev="tmpfs" ino=309 [ 51.555066][ T5669] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.685762][ T5669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.694671][ T5669] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.707894][ T5566] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.707938][ T5566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.708496][ T5566] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.708523][ T5566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.759352][ T5669] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.781644][ T5755] loop2: detected capacity change from 0 to 512 [ 51.804143][ T5755] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 51.808311][ T5755] EXT4-fs (loop2): invalid journal inode [ 51.808407][ T5755] EXT4-fs (loop2): can't get journal size [ 51.812617][ T5755] EXT4-fs (loop2): 1 truncate cleaned up [ 51.813110][ T5755] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.199667][ T4396] 8021q: adding VLAN 0 to HW filter on device eth0 [ 52.249128][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.320418][ T5784] loop2: detected capacity change from 0 to 2048 [ 52.327558][ T5669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.407160][ T5784] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.413807][ T5784] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.254: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 52.427822][ T5784] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.254: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 52.435981][ T5784] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.254: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 52.440837][ T5784] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.254: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 52.513881][ T4396] 8021q: adding VLAN 0 to HW filter on device eth1 [ 52.532245][ T5669] veth0_vlan: entered promiscuous mode [ 52.537576][ T5669] veth1_vlan: entered promiscuous mode [ 52.554089][ T5669] veth0_macvtap: entered promiscuous mode [ 52.557235][ T5669] veth1_macvtap: entered promiscuous mode [ 52.567982][ T5669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.572465][ T5669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.590024][ T199] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.590354][ T199] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.590374][ T199] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.590389][ T199] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.619191][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.619204][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.664553][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.664674][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.681502][ T5813] 9pnet_fd: Insufficient options for proto=fd [ 52.921709][ T4396] 8021q: adding VLAN 0 to HW filter on device eth2 [ 53.162748][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.166990][ T4396] 8021q: adding VLAN 0 to HW filter on device eth3 [ 53.178403][ T4713] Bluetooth: hci2: command tx timeout [ 53.370127][ T5861] loop2: detected capacity change from 0 to 2048 [ 53.385479][ T5861] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.502750][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.634730][ T5874] bonding: unable to delete non-existent bond [ 54.106527][ T5889] fuse: fd is not a fuse device [ 54.289616][ T5895] netlink: 316 bytes leftover after parsing attributes in process `syz.4.276'. [ 54.357680][ T5899] netlink: 200 bytes leftover after parsing attributes in process `syz.4.278'. [ 54.407500][ T5901] FAULT_INJECTION: forcing a failure. [ 54.407500][ T5901] name failslab, interval 1, probability 0, space 0, times 0 [ 54.407537][ T5901] CPU: 0 UID: 0 PID: 5901 Comm: syz.4.279 Tainted: G L syzkaller #0 PREEMPT [ 54.407557][ T5901] Tainted: [L]=SOFTLOCKUP [ 54.407561][ T5901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 54.407566][ T5901] Call trace: [ 54.407569][ T5901] show_stack+0x2c/0x3c (C) [ 54.407586][ T5901] __dump_stack+0x30/0x40 [ 54.407597][ T5901] dump_stack_lvl+0xd8/0x12c [ 54.407606][ T5901] dump_stack+0x1c/0x28 [ 54.407616][ T5901] should_fail_ex+0x41c/0x590 [ 54.407627][ T5901] should_failslab+0xc4/0x120 [ 54.407638][ T5901] kmem_cache_alloc_noprof+0x94/0x5d4 [ 54.407649][ T5901] security_inode_alloc+0x40/0x304 [ 54.407656][ T5901] inode_init_always_gfp+0x704/0xbac [ 54.407666][ T5901] alloc_inode+0x9c/0x198 [ 54.407675][ T5901] new_inode+0x20/0x50 [ 54.407683][ T5901] proc_pid_make_inode+0x30/0x148 [ 54.407697][ T5901] proc_pid_make_base_inode+0x38/0x12c [ 54.407706][ T5901] proc_task_instantiate+0x50/0x1a8 [ 54.407715][ T5901] proc_task_lookup+0x350/0x534 [ 54.407723][ T5901] __lookup_slow+0x1e4/0x2b4 [ 54.407731][ T5901] lookup_slow+0x60/0x84 [ 54.407739][ T5901] link_path_walk+0xfd0/0x1584 [ 54.407748][ T5901] path_openat+0x160/0x18f4 [ 54.407756][ T5901] do_file_open+0x1c8/0x2e8 [ 54.407764][ T5901] do_sys_openat2+0x114/0x1e8 [ 54.407774][ T5901] do_sys_open+0xb0/0xe0 [ 54.407783][ T5901] __arm64_sys_openat+0xa8/0xc4 [ 54.407793][ T5901] invoke_syscall+0x98/0x244 [ 54.407803][ T5901] el0_svc_common+0xec/0x23c [ 54.407812][ T5901] do_el0_svc+0x4c/0x5c [ 54.407822][ T5901] el0_svc+0x64/0x260 [ 54.407831][ T5901] el0t_64_sync_handler+0x44/0x104 [ 54.407840][ T5901] el0t_64_sync+0x198/0x19c [ 54.487962][ T5904] FAULT_INJECTION: forcing a failure. [ 54.487962][ T5904] name failslab, interval 1, probability 0, space 0, times 0 [ 54.488000][ T5904] CPU: 0 UID: 0 PID: 5904 Comm: syz.4.280 Tainted: G L syzkaller #0 PREEMPT [ 54.488016][ T5904] Tainted: [L]=SOFTLOCKUP [ 54.488020][ T5904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 54.488026][ T5904] Call trace: [ 54.488029][ T5904] show_stack+0x2c/0x3c (C) [ 54.488046][ T5904] __dump_stack+0x30/0x40 [ 54.488058][ T5904] dump_stack_lvl+0xd8/0x12c [ 54.488070][ T5904] dump_stack+0x1c/0x28 [ 54.488081][ T5904] should_fail_ex+0x41c/0x590 [ 54.488093][ T5904] should_failslab+0xc4/0x120 [ 54.488110][ T5904] __kmalloc_noprof+0x108/0x6c8 [ 54.488119][ T5904] genl_family_rcv_msg_attrs_parse+0xcc/0x27c [ 54.488132][ T5904] genl_family_rcv_msg_doit+0xd8/0x2d4 [ 54.488143][ T5904] genl_rcv_msg+0x43c/0x620 [ 54.488153][ T5904] netlink_rcv_skb+0x238/0x414 [ 54.488162][ T5904] genl_rcv+0x38/0x50 [ 54.488172][ T5904] netlink_unicast+0x600/0x7f8 [ 54.488180][ T5904] netlink_sendmsg+0x648/0x948 [ 54.488190][ T5904] __sock_sendmsg+0xc8/0x17c [ 54.488199][ T5904] __sys_sendto+0x250/0x328 [ 54.488208][ T5904] __arm64_sys_sendto+0xec/0x10c [ 54.488217][ T5904] invoke_syscall+0x98/0x244 [ 54.488228][ T5904] el0_svc_common+0xec/0x23c [ 54.488240][ T5904] do_el0_svc+0x4c/0x5c [ 54.488251][ T5904] el0_svc+0x64/0x260 [ 54.488260][ T5904] el0t_64_sync_handler+0x44/0x104 [ 54.488270][ T5904] el0t_64_sync+0x198/0x19c [ 54.555186][ T5897] netlink: 104 bytes leftover after parsing attributes in process `syz.5.277'. [ 54.613935][ T5909] netlink: 'syz.2.282': attribute type 4 has an invalid length. [ 54.615566][ T5909] netlink: 'syz.2.282': attribute type 4 has an invalid length. [ 54.655443][ T5909] netlink: 'syz.2.282': attribute type 4 has an invalid length. [ 54.656521][ T5910] netlink: 'syz.2.282': attribute type 4 has an invalid length. [ 54.675106][ T5915] loop4: detected capacity change from 0 to 2048 [ 54.676413][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.676551][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.723749][ T5915] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.855813][ T5924] FAULT_INJECTION: forcing a failure. [ 54.855813][ T5924] name failslab, interval 1, probability 0, space 0, times 0 [ 54.855849][ T5924] CPU: 0 UID: 0 PID: 5924 Comm: syz.2.285 Tainted: G L syzkaller #0 PREEMPT [ 54.855869][ T5924] Tainted: [L]=SOFTLOCKUP [ 54.855874][ T5924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 54.855880][ T5924] Call trace: [ 54.855884][ T5924] show_stack+0x2c/0x3c (C) [ 54.855903][ T5924] __dump_stack+0x30/0x40 [ 54.855917][ T5924] dump_stack_lvl+0xd8/0x12c [ 54.855929][ T5924] dump_stack+0x1c/0x28 [ 54.855944][ T5924] should_fail_ex+0x41c/0x590 [ 54.855959][ T5924] should_failslab+0xc4/0x120 [ 54.855973][ T5924] kmem_cache_alloc_noprof+0x94/0x5d4 [ 54.855987][ T5924] skb_clone+0x1ac/0x320 [ 54.855999][ T5924] __netlink_deliver_tap+0x364/0x6f4 [ 54.856011][ T5924] netlink_deliver_tap+0x1d8/0x1dc [ 54.856021][ T5924] netlink_unicast+0x5dc/0x7f8 [ 54.856031][ T5924] netlink_sendmsg+0x648/0x948 [ 54.856041][ T5924] __sock_sendmsg+0xc8/0x17c [ 54.856051][ T5924] __sys_sendto+0x250/0x328 [ 54.856061][ T5924] __arm64_sys_sendto+0xec/0x10c [ 54.856071][ T5924] invoke_syscall+0x98/0x244 [ 54.856084][ T5924] el0_svc_common+0xec/0x23c [ 54.856103][ T5924] do_el0_svc+0x4c/0x5c [ 54.856115][ T5924] el0_svc+0x64/0x260 [ 54.856127][ T5924] el0t_64_sync_handler+0x44/0x104 [ 54.856139][ T5924] el0t_64_sync+0x198/0x19c [ 55.220653][ T4713] Bluetooth: hci2: command tx timeout [ 55.239063][ T5930] FAULT_INJECTION: forcing a failure. [ 55.239063][ T5930] name failslab, interval 1, probability 0, space 0, times 0 [ 55.239100][ T5930] CPU: 0 UID: 0 PID: 5930 Comm: syz.5.287 Tainted: G L syzkaller #0 PREEMPT [ 55.239115][ T5930] Tainted: [L]=SOFTLOCKUP [ 55.239119][ T5930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 55.239125][ T5930] Call trace: [ 55.239128][ T5930] show_stack+0x2c/0x3c (C) [ 55.239146][ T5930] __dump_stack+0x30/0x40 [ 55.239157][ T5930] dump_stack_lvl+0xd8/0x12c [ 55.239166][ T5930] dump_stack+0x1c/0x28 [ 55.239176][ T5930] should_fail_ex+0x41c/0x590 [ 55.239187][ T5930] should_failslab+0xc4/0x120 [ 55.239198][ T5930] kmem_cache_alloc_noprof+0x94/0x5d4 [ 55.239209][ T5930] security_inode_alloc+0x40/0x304 [ 55.239217][ T5930] inode_init_always_gfp+0x704/0xbac [ 55.239227][ T5930] alloc_inode+0x9c/0x198 [ 55.239239][ T5930] new_inode+0x20/0x50 [ 55.239249][ T5930] proc_pid_make_inode+0x30/0x148 [ 55.239261][ T5930] proc_pident_instantiate+0x70/0x268 [ 55.239268][ T5930] proc_pident_lookup+0x208/0x260 [ 55.239276][ T5930] proc_tid_base_lookup+0x34/0x44 [ 55.239284][ T5930] lookup_open+0x6a8/0x1180 [ 55.239292][ T5930] path_openat+0x50c/0x18f4 [ 55.239300][ T5930] do_file_open+0x1c8/0x2e8 [ 55.239308][ T5930] do_sys_openat2+0x114/0x1e8 [ 55.239318][ T5930] do_sys_open+0xb0/0xe0 [ 55.239327][ T5930] __arm64_sys_openat+0xa8/0xc4 [ 55.239336][ T5930] invoke_syscall+0x98/0x244 [ 55.239346][ T5930] el0_svc_common+0xec/0x23c [ 55.239356][ T5930] do_el0_svc+0x4c/0x5c [ 55.239365][ T5930] el0_svc+0x64/0x260 [ 55.239375][ T5930] el0t_64_sync_handler+0x44/0x104 [ 55.239383][ T5930] el0t_64_sync+0x198/0x19c [ 55.347560][ T5932] input: syz0 as /devices/virtual/input/input5 [ 55.463673][ T5932] loop2: detected capacity change from 0 to 512 [ 55.500946][ T5932] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 55.576209][ T5932] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c840e018, mo2=0002] [ 55.576727][ T5932] EXT4-fs (loop2): orphan cleanup on readonly fs [ 55.580121][ T5932] EXT4-fs error (device loop2): __ext4_iget:5592: inode #11: block 7176215: comm syz.2.286: invalid block [ 55.580181][ T5932] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 55.582597][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 55.582609][ C1] EXT4-fs (loop2): initial error at time 524343: __ext4_iget:5592: inode 11: block 7176215 [ 55.582634][ C1] EXT4-fs (loop2): last error at time 524343: __ext4_iget:5592: inode 11: block 7176215 [ 55.595197][ T5932] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.286: couldn't read orphan inode 11 (err -117) [ 55.595261][ T5932] loop2: lost filesystem error report for type 5 error -117 [ 55.605473][ T5932] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 55.732744][ T5932] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.286: dx entry: limit 0 != root limit 125 [ 55.732823][ T5932] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.286: Corrupt directory, running e2fsck is recommended [ 55.762399][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.762511][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 56.159859][ T4714] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.232250][ T4716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 56.305574][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 56.328838][ T5938] xt_hashlimit: size too large, truncated to 1048576 [ 56.374457][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 56.376304][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 56.376747][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 56.379598][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 56.380002][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 56.501850][ T5953] loop2: detected capacity change from 0 to 128 [ 56.790648][ T4800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 56.790764][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 56.964914][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.964998][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.965398][ T5945] bridge_slave_0: entered allmulticast mode [ 56.966045][ T5945] bridge_slave_0: entered promiscuous mode [ 56.967205][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.967260][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.967312][ T5945] bridge_slave_1: entered allmulticast mode [ 56.968288][ T5945] bridge_slave_1: entered promiscuous mode [ 57.211366][ T3773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.211489][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.216739][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.218983][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.233986][ T5945] team0: Port device team_slave_0 added [ 57.237965][ T5945] team0: Port device team_slave_1 added [ 57.259570][ T5982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.259704][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.263590][ T4713] Bluetooth: hci2: command tx timeout [ 57.314961][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.339329][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.339363][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.339380][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.344001][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.344010][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.344024][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.367936][ T5990] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 57.408400][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.452657][ T5999] capability: warning: `syz.4.301' uses 32-bit capabilities (legacy support in use) [ 57.462244][ T5945] hsr_slave_0: entered promiscuous mode [ 57.464863][ T5945] hsr_slave_1: entered promiscuous mode [ 57.466179][ T5945] debugfs: 'hsr0' already exists in 'hsr' [ 57.466208][ T5945] Cannot create hsr debugfs directory [ 57.557376][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.644092][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.648422][ T6011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.650248][ T6011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.808794][ T5945] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 57.812169][ T5945] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 57.816194][ T13] bridge_slave_1: left allmulticast mode [ 57.816219][ T13] bridge_slave_1: left promiscuous mode [ 57.816296][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.817085][ T3773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.820311][ T13] bridge_slave_0: left allmulticast mode [ 57.820336][ T13] bridge_slave_0: left promiscuous mode [ 57.820418][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.445338][ T4713] Bluetooth: hci5: command tx timeout [ 58.845500][ T6027] loop4: detected capacity change from 0 to 512 [ 58.853042][ T6025] input: syz0 as /devices/virtual/input/input7 [ 58.860565][ T6027] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 58.876007][ T6027] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c840e018, mo2=0002] [ 58.876134][ T6027] EXT4-fs (loop4): orphan cleanup on readonly fs [ 58.878943][ T6027] EXT4-fs error (device loop4): __ext4_iget:5592: inode #11: block 7176215: comm syz.4.309: invalid block [ 58.878973][ T6027] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 58.881155][ T6027] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.309: couldn't read orphan inode 11 (err -117) [ 58.881186][ T6027] loop4: lost filesystem error report for type 5 error -117 [ 58.883381][ T6027] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 58.918088][ T6020] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.309: dx entry: limit 0 != root limit 125 [ 58.918122][ T6020] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.309: Corrupt directory, running e2fsck is recommended [ 58.947682][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.982298][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.988590][ T13] bond0 (unregistering): Released all slaves [ 58.991382][ T5945] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 58.994059][ T5945] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 59.024295][ T5945] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 59.031184][ T5945] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 59.031486][ T5945] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 59.036533][ T5945] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 59.079916][ T4714] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 59.157165][ T6043] FAULT_INJECTION: forcing a failure. [ 59.157165][ T6043] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 59.157203][ T6043] CPU: 0 UID: 0 PID: 6043 Comm: syz.4.314 Tainted: G L syzkaller #0 PREEMPT [ 59.157217][ T6043] Tainted: [L]=SOFTLOCKUP [ 59.157221][ T6043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 59.157226][ T6043] Call trace: [ 59.157229][ T6043] show_stack+0x2c/0x3c (C) [ 59.157247][ T6043] __dump_stack+0x30/0x40 [ 59.157261][ T6043] dump_stack_lvl+0xd8/0x12c [ 59.157271][ T6043] dump_stack+0x1c/0x28 [ 59.157280][ T6043] should_fail_ex+0x41c/0x590 [ 59.157293][ T6043] should_fail+0x14/0x24 [ 59.157302][ T6043] should_fail_usercopy+0x20/0x30 [ 59.157312][ T6043] _inline_copy_from_user+0x3c/0x174 [ 59.157324][ T6043] copy_msghdr_from_user+0xb8/0x194 [ 59.157334][ T6043] ___sys_sendmsg+0x14c/0x224 [ 59.157342][ T6043] __sys_sendmmsg+0x204/0x580 [ 59.157350][ T6043] __arm64_sys_sendmmsg+0xac/0xc8 [ 59.157358][ T6043] invoke_syscall+0x98/0x244 [ 59.157369][ T6043] el0_svc_common+0xec/0x23c [ 59.157378][ T6043] do_el0_svc+0x4c/0x5c [ 59.157387][ T6043] el0_svc+0x64/0x260 [ 59.157397][ T6043] el0t_64_sync_handler+0x44/0x104 [ 59.157406][ T6043] el0t_64_sync+0x198/0x19c [ 59.176762][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.225664][ T5945] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.232250][ T5248] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.232299][ T5248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.266648][ T199] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.266706][ T199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.278823][ T6058] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 59.332544][ T13] hsr_slave_0: left promiscuous mode [ 59.340255][ T13] hsr_slave_1: left promiscuous mode [ 59.341785][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.344591][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.350041][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.350067][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.358235][ T13] veth1_macvtap: left promiscuous mode [ 59.358277][ T13] veth0_macvtap: left promiscuous mode [ 59.358341][ T13] veth1_vlan: left promiscuous mode [ 59.358378][ T13] veth0_vlan: left promiscuous mode [ 59.361327][ T6073] loop2: detected capacity change from 0 to 1024 [ 59.365163][ T6073] EXT4-fs: Ignoring removed oldalloc option [ 59.365193][ T6073] EXT4-fs: Ignoring removed orlov option [ 59.377038][ T6073] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.585116][ T6085] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.319: bg 0: block 112: padding at end of block bitmap is not set [ 59.745729][ T6085] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28 [ 59.745767][ T6085] EXT4-fs (loop2): This should not happen!! Data will be lost [ 59.745767][ T6085] [ 59.745789][ T6085] EXT4-fs (loop2): Total free blocks count 0 [ 59.745803][ T6085] EXT4-fs (loop2): Free/Dirty block details [ 59.745820][ T6085] EXT4-fs (loop2): free_blocks=0 [ 59.745836][ T6085] EXT4-fs (loop2): dirty_blocks=32 [ 59.745849][ T6085] EXT4-fs (loop2): Block reservation details [ 59.745860][ T6085] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 59.758676][ T13] team0 (unregistering): Port device team_slave_1 removed [ 59.764682][ T13] team0 (unregistering): Port device team_slave_0 removed [ 59.819760][ T4396] 8021q: adding VLAN 0 to HW filter on device eth4 [ 59.837865][ T5945] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.275485][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 60.277661][ T4396] 8021q: adding VLAN 0 to HW filter on device eth6 [ 60.287626][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.578383][ T6142] hub 8-0:1.0: USB hub found [ 60.578903][ T6142] hub 8-0:1.0: 8 ports detected [ 60.661400][ T4713] Bluetooth: hci5: command tx timeout [ 60.793540][ T6148] netlink: 200 bytes leftover after parsing attributes in process `syz.3.327'. [ 60.805548][ T5945] veth0_vlan: entered promiscuous mode [ 60.810289][ T5945] veth1_vlan: entered promiscuous mode [ 60.828376][ T5945] veth0_macvtap: entered promiscuous mode [ 60.831382][ T5945] veth1_macvtap: entered promiscuous mode [ 60.837537][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.840449][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.849043][ T4396] 8021q: adding VLAN 0 to HW filter on device eth7 [ 60.892870][ T4799] net_ratelimit: 12 callbacks suppressed [ 60.892902][ T4799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.892984][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.898753][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.898779][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.922320][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.922462][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.922564][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.922593][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.930115][ T5248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.930126][ T5248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.957652][ T6161] netlink: 'syz.3.331': attribute type 3 has an invalid length. [ 61.072175][ T6161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.331'. [ 61.083368][ T6167] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 61.083405][ T6167] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 61.261568][ T6180] loop2: detected capacity change from 0 to 128 [ 61.285791][ T6180] netlink: 44 bytes leftover after parsing attributes in process `syz.2.334'. [ 61.312955][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.346680][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.348749][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.350190][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.353399][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.353918][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.399302][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.408806][ T4396] 8021q: adding VLAN 0 to HW filter on device eth5 [ 61.481870][ T6201] loop2: detected capacity change from 0 to 512 [ 61.527024][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.531152][ T6201] EXT4-fs: Ignoring removed nobh option [ 61.532456][ T6201] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.574739][ T6201] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.842254][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.236634][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.389044][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.407842][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.438413][ T6185] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.439986][ T6185] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.441557][ T6185] bridge_slave_0: entered allmulticast mode [ 62.443349][ T6185] bridge_slave_0: entered promiscuous mode [ 62.446038][ T6185] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.447723][ T6185] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.449444][ T6185] bridge_slave_1: entered allmulticast mode [ 62.451215][ T6185] bridge_slave_1: entered promiscuous mode [ 62.464862][ T6185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.467917][ T6185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.477195][ T6185] team0: Port device team_slave_0 added [ 62.479432][ T6185] team0: Port device team_slave_1 added [ 62.486992][ T6185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.488339][ T6185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.494814][ T6185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.498946][ T6185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.500437][ T6185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.507462][ T6185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.520664][ T6185] hsr_slave_0: entered promiscuous mode [ 62.522195][ T6185] hsr_slave_1: entered promiscuous mode [ 62.539450][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.539548][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.669651][ T6226] netlink: 'syz.6.342': attribute type 6 has an invalid length. [ 62.678615][ T13] bridge_slave_1: left allmulticast mode [ 62.679991][ T13] bridge_slave_1: left promiscuous mode [ 62.681555][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.691708][ T6220] loop2: detected capacity change from 0 to 2048 [ 62.706650][ T13] bridge_slave_0: left allmulticast mode [ 62.707911][ T13] bridge_slave_0: left promiscuous mode [ 62.709384][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.725455][ T4713] Bluetooth: hci5: command tx timeout [ 62.727439][ T6229] netlink: 'syz.6.342': attribute type 6 has an invalid length. [ 62.734077][ T6220] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.737421][ T6220] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.339: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 62.742221][ T6220] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.339: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 62.742669][ T6220] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.339: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 62.753391][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.845360][ T5569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.860478][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.901496][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.901590][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.051814][ T6238] loop5: detected capacity change from 0 to 8192 [ 63.104116][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.129519][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.148935][ T13] bond0 (unregistering): Released all slaves [ 63.261606][ T199] IPVS: starting estimator thread 0... [ 63.335877][ T6259] input: syz0 as /devices/virtual/input/input8 [ 63.344439][ T4713] Bluetooth: hci1: command tx timeout [ 63.350459][ T6256] IPVS: using max 43 ests per chain, 103200 per kthread [ 63.424513][ T6260] loop2: detected capacity change from 0 to 512 [ 63.435242][ T6260] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 63.468517][ T6260] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c840e018, mo2=0002] [ 63.468622][ T6260] EXT4-fs (loop2): orphan cleanup on readonly fs [ 63.471678][ T6260] EXT4-fs error (device loop2): __ext4_iget:5592: inode #11: block 7176215: comm syz.2.348: invalid block [ 63.471736][ T6260] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 63.474025][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 63.474039][ C1] EXT4-fs (loop2): initial error at time 524351: __ext4_iget:5592: inode 11: block 7176215 [ 63.474064][ C1] EXT4-fs (loop2): last error at time 524351: __ext4_iget:5592: inode 11: block 7176215 [ 63.482101][ T6260] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.348: couldn't read orphan inode 11 (err -117) [ 63.482169][ T6260] loop2: lost filesystem error report for type 5 error -117 [ 63.490589][ T6260] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 63.502034][ T6260] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.348: dx entry: limit 0 != root limit 125 [ 63.502061][ T6260] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.348: Corrupt directory, running e2fsck is recommended [ 64.152979][ T866] cfg80211: failed to load regulatory.db [ 64.214299][ T6264] loop5: detected capacity change from 0 to 4096 [ 64.223492][ T1593] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.223549][ T1593] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.235505][ T6264] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 not in group (block 270479860432900)! [ 64.235533][ T6264] EXT4-fs (loop5): group descriptors corrupted! [ 64.327485][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 64.390646][ T6185] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 64.399428][ T6185] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 64.400175][ T6185] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 64.409017][ T6185] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 64.455351][ T6185] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 64.493846][ T6185] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 64.494174][ T6185] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 64.504371][ T6287] loop5: detected capacity change from 0 to 512 [ 64.506744][ T6185] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 64.513339][ T6287] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.524397][ T6287] EXT4-fs (loop5): orphan cleanup on readonly fs [ 64.524425][ T6287] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 64.525575][ T6287] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.358: attempt to clear invalid blocks 2 len 1 [ 64.525592][ T6287] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 64.529545][ T6287] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 64.532397][ C0] EXT4-fs (loop5): error count since last fsck: 2 [ 64.532408][ C0] EXT4-fs (loop5): initial error at time 524352: ext4_clear_blocks:876: inode 13 [ 64.532426][ C0] EXT4-fs (loop5): last error at time 524352: ext4_mb_generate_buddy:1317 [ 64.533072][ T6287] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.358: invalid indirect mapped block 1819239214 (level 0) [ 64.533094][ T6287] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 64.533287][ T6287] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.358: invalid indirect mapped block 1819239214 (level 1) [ 64.533302][ T6287] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 64.541843][ T6287] EXT4-fs (loop5): 1 truncate cleaned up [ 64.542544][ T6287] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 64.572420][ T5669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.619025][ T4396] 8021q: adding VLAN 0 to HW filter on device eth8 [ 64.658653][ T6303] FAULT_INJECTION: forcing a failure. [ 64.658653][ T6303] name failslab, interval 1, probability 0, space 0, times 0 [ 64.658692][ T6303] CPU: 0 UID: 0 PID: 6303 Comm: syz.6.363 Tainted: G L syzkaller #0 PREEMPT [ 64.658708][ T6303] Tainted: [L]=SOFTLOCKUP [ 64.658713][ T6303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 64.658718][ T6303] Call trace: [ 64.658721][ T6303] show_stack+0x2c/0x3c (C) [ 64.658739][ T6303] __dump_stack+0x30/0x40 [ 64.658752][ T6303] dump_stack_lvl+0xd8/0x12c [ 64.658763][ T6303] dump_stack+0x1c/0x28 [ 64.658774][ T6303] should_fail_ex+0x41c/0x590 [ 64.658787][ T6303] should_failslab+0xc4/0x120 [ 64.658800][ T6303] __kmalloc_cache_noprof+0x94/0x5fc [ 64.658808][ T6303] fuse_dev_alloc_no_pq+0x58/0x16c [ 64.658820][ T6303] fuse_dev_open+0x1c/0x6c [ 64.658830][ T6303] misc_open+0x2dc/0x338 [ 64.658842][ T6303] chrdev_open+0x398/0x3e8 [ 64.658852][ T6303] do_dentry_open+0x5c4/0xfc0 [ 64.658863][ T6303] vfs_open+0x44/0x2dc [ 64.658874][ T6303] path_openat+0x1084/0x18f4 [ 64.658884][ T6303] do_file_open+0x1c8/0x2e8 [ 64.658893][ T6303] do_sys_openat2+0x114/0x1e8 [ 64.658904][ T6303] do_sys_open+0xb0/0xe0 [ 64.658915][ T6303] __arm64_sys_openat+0xa8/0xc4 [ 64.658926][ T6303] invoke_syscall+0x98/0x244 [ 64.658937][ T6303] el0_svc_common+0xec/0x23c [ 64.658949][ T6303] do_el0_svc+0x4c/0x5c [ 64.658960][ T6303] el0_svc+0x64/0x260 [ 64.658970][ T6303] el0t_64_sync_handler+0x44/0x104 [ 64.658980][ T6303] el0t_64_sync+0x198/0x19c [ 64.723421][ T13] hsr_slave_0: left promiscuous mode [ 64.724611][ T13] hsr_slave_1: left promiscuous mode [ 64.724933][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.724944][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.728831][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.728867][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.747959][ T13] veth1_macvtap: left promiscuous mode [ 64.748002][ T13] veth0_macvtap: left promiscuous mode [ 64.748070][ T13] veth1_vlan: left promiscuous mode [ 64.748117][ T13] veth0_vlan: left promiscuous mode [ 64.751196][ T6314] loop6: detected capacity change from 0 to 256 [ 64.769916][ T4713] Bluetooth: hci5: command tx timeout [ 65.701696][ T6323] input: syz0 as /devices/virtual/input/input9 [ 65.787440][ T4713] Bluetooth: hci1: command tx timeout [ 65.830963][ T6314] vivid-000: disconnect [ 65.837776][ T6313] vivid-000: reconnect [ 65.866948][ T6327] loop2: detected capacity change from 0 to 1024 [ 65.867302][ T6327] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.867325][ T6327] EXT4-fs: Ignoring removed bh option [ 65.940917][ T6325] loop5: detected capacity change from 0 to 512 [ 66.802966][ T9] net_ratelimit: 11 callbacks suppressed [ 66.803005][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.821040][ T6325] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 66.826552][ T6325] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c840e018, mo2=0002] [ 66.826669][ T6325] EXT4-fs (loop5): orphan cleanup on readonly fs [ 66.826839][ T6325] EXT4-fs error (device loop5): __ext4_iget:5592: inode #11: block 7176215: comm syz.5.369: invalid block [ 66.826859][ T6325] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 66.826910][ T6327] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a04ec01c, mo2=0002] [ 66.826989][ T6327] System zones: 0-1, 3-12 [ 66.831175][ T6325] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.369: couldn't read orphan inode 11 (err -117) [ 66.831198][ T6325] loop5: lost filesystem error report for type 5 error -117 [ 66.831436][ C0] EXT4-fs (loop5): error count since last fsck: 2 [ 66.831448][ C0] EXT4-fs (loop5): initial error at time 524355: __ext4_iget:5592: inode 11: block 7176215 [ 66.831468][ C0] EXT4-fs (loop5): last error at time 524355: ext4_orphan_get:1408 [ 66.837946][ T4800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.838032][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.844932][ T6325] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 66.864636][ T6322] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.369: dx entry: limit 0 != root limit 125 [ 66.864653][ T6322] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.369: Corrupt directory, running e2fsck is recommended [ 66.884424][ T6327] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.365623][ T5669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 67.448834][ T13] team0 (unregistering): Port device team_slave_1 removed [ 67.452852][ T13] team0 (unregistering): Port device team_slave_0 removed [ 67.466226][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.525811][ T6327] bridge1: entered promiscuous mode [ 67.525848][ T6327] bridge1: entered allmulticast mode [ 67.527894][ T6344] netlink: 8 bytes leftover after parsing attributes in process `syz.5.373'. [ 67.527906][ T6344] netlink: 8 bytes leftover after parsing attributes in process `syz.5.373'. [ 67.582167][ T6185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.590802][ T6185] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.600731][ T199] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.600782][ T199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.601330][ T199] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.601349][ T199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.607338][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.612471][ T6185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.791115][ T4713] Bluetooth: hci1: command tx timeout [ 68.301290][ T6384] hub 8-0:1.0: USB hub found [ 68.302701][ T6384] hub 8-0:1.0: 8 ports detected [ 68.371671][ T4800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.371774][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.386266][ T13] IPVS: stop unused estimator thread 0... [ 68.484012][ T6400] netlink: 380 bytes leftover after parsing attributes in process `syz.6.385'. [ 68.513273][ T4396] 8021q: adding VLAN 0 to HW filter on device eth9 [ 68.586254][ T6402] input: syz0 as /devices/virtual/input/input10 [ 68.717079][ T6402] loop5: detected capacity change from 0 to 512 [ 68.758257][ T199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.774597][ T5248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.774700][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.826132][ T4883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.468358][ T6402] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 69.468823][ T6185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.483920][ T6402] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c840e018, mo2=0002] [ 69.484037][ T6402] EXT4-fs (loop5): orphan cleanup on readonly fs [ 69.488843][ T6402] EXT4-fs error (device loop5): __ext4_iget:5592: inode #11: block 7176215: comm syz.5.384: invalid block [ 69.488913][ T6402] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 69.491303][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 69.491313][ C0] EXT4-fs (loop5): initial error at time 524357: __ext4_iget:5592: inode 11: block 7176215 [ 69.491334][ C0] EXT4-fs (loop5): last error at time 524357: __ext4_iget:5592: inode 11: block 7176215 [ 69.492132][ T6402] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.384: couldn't read orphan inode 11 (err -117) [ 69.492177][ T6402] loop5: lost filesystem error report for type 5 error -117 [ 69.496159][ T6402] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 69.547740][ T6413] FAULT_INJECTION: forcing a failure. [ 69.547740][ T6413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.547753][ T6397] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.384: dx entry: limit 0 != root limit 125 [ 69.547775][ T6413] CPU: 0 UID: 0 PID: 6413 Comm: syz.6.388 Tainted: G L syzkaller #0 PREEMPT [ 69.547780][ T6397] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.384: Corrupt directory, running e2fsck is recommended [ 69.547792][ T6413] Tainted: [L]=SOFTLOCKUP [ 69.547799][ T6413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 69.547805][ T6413] Call trace: [ 69.547808][ T6413] show_stack+0x2c/0x3c (C) [ 69.547828][ T6413] __dump_stack+0x30/0x40 [ 69.547841][ T6413] dump_stack_lvl+0xd8/0x12c [ 69.547852][ T6413] dump_stack+0x1c/0x28 [ 69.547864][ T6413] should_fail_ex+0x41c/0x590 [ 69.547877][ T6413] should_fail+0x14/0x24 [ 69.547888][ T6413] should_fail_usercopy+0x20/0x30 [ 69.547900][ T6413] _inline_copy_from_user+0x3c/0x174 [ 69.547910][ T6413] __sys_bpf+0x1b4/0x82c [ 69.547919][ T6413] __arm64_sys_bpf+0xd0/0xec [ 69.547928][ T6413] invoke_syscall+0x98/0x244 [ 69.547940][ T6413] el0_svc_common+0xec/0x23c [ 69.547952][ T6413] do_el0_svc+0x4c/0x5c [ 69.547963][ T6413] el0_svc+0x64/0x260 [ 69.547973][ T6413] el0t_64_sync_handler+0x44/0x104 [ 69.547983][ T6413] el0t_64_sync+0x198/0x19c [ 69.610819][ T30] audit: type=1326 audit(524357.983:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6406 comm="syz.3.387" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bb792a8 code=0x0 [ 69.693277][ T5669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 69.824594][ T6185] veth0_vlan: entered promiscuous mode [ 69.838821][ T6185] veth1_vlan: entered promiscuous mode [ 69.854336][ T6185] veth0_macvtap: entered promiscuous mode [ 69.856461][ T6185] veth1_macvtap: entered promiscuous mode [ 69.898802][ T4713] Bluetooth: hci1: command tx timeout [ 69.954328][ T6185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.955475][ T6185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.973077][ T59] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.974847][ T59] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.974896][ T59] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.987469][ T59] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.034075][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.034106][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.059923][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.059949][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.777105][ T5238] netdevsim netdevsim12 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.797617][ T6483] loop5: detected capacity change from 0 to 512 [ 70.811514][ T6483] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.395: bg 0: block 7: invalid block bitmap [ 70.811553][ T6483] loop5: lost filesystem error report for type 5 error -117 [ 70.811802][ C1] EXT4-fs (loop5): initial error at time 524359: ext4_validate_block_bitmap:436 [ 70.811829][ C1] EXT4-fs (loop5): last error at time 524359: ext4_validate_block_bitmap:436 [ 70.827007][ T6483] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 70.827047][ T6483] loop5: lost filesystem error report for type 5 error -117 [ 70.831802][ T6483] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2933: inode #11: comm syz.5.395: corrupted xattr block 95: invalid header [ 70.838243][ T6483] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 70.840193][ T6483] EXT4-fs warning (device loop5): ext4_evict_inode:288: xattr delete (err -117) [ 70.845225][ T6483] EXT4-fs (loop5): 1 orphan inode deleted [ 70.847004][ T6483] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.872097][ T6483] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 71.233851][ T5669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.720328][ T6530] FAULT_INJECTION: forcing a failure. [ 71.720328][ T6530] name failslab, interval 1, probability 0, space 0, times 0 [ 71.723162][ T6530] CPU: 1 UID: 0 PID: 6530 Comm: syz.2.406 Tainted: G L syzkaller #0 PREEMPT [ 71.723182][ T6530] Tainted: [L]=SOFTLOCKUP [ 71.723186][ T6530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 71.723192][ T6530] Call trace: [ 71.723196][ T6530] show_stack+0x2c/0x3c (C) [ 71.723216][ T6530] __dump_stack+0x30/0x40 [ 71.723228][ T6530] dump_stack_lvl+0xd8/0x12c [ 71.723238][ T6530] dump_stack+0x1c/0x28 [ 71.723247][ T6530] should_fail_ex+0x41c/0x590 [ 71.723259][ T6530] should_failslab+0xc4/0x120 [ 71.723270][ T6530] __kmalloc_noprof+0x108/0x6c8 [ 71.723278][ T6530] tomoyo_realpath_from_path+0xbc/0x4dc [ 71.723288][ T6530] tomoyo_path_number_perm+0x1f0/0x500 [ 71.723296][ T6530] tomoyo_file_ioctl+0x2c/0x3c [ 71.723305][ T6530] security_file_ioctl+0xdc/0x2b0 [ 71.723314][ T6530] __arm64_sys_ioctl+0xb0/0x1cc [ 71.723324][ T6530] invoke_syscall+0x98/0x244 [ 71.723334][ T6530] el0_svc_common+0xec/0x23c [ 71.723344][ T6530] do_el0_svc+0x4c/0x5c [ 71.723353][ T6530] el0_svc+0x64/0x260 [ 71.723363][ T6530] el0t_64_sync_handler+0x44/0x104 [ 71.723371][ T6530] el0t_64_sync+0x198/0x19c [ 71.746996][ T6530] ERROR: Out of memory at tomoyo_realpath_from_path. [ 71.788196][ T24] net_ratelimit: 5 callbacks suppressed [ 71.788225][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.788335][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.793534][ T6537] netlink: 20 bytes leftover after parsing attributes in process `syz.6.401'. [ 71.802234][ T6541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.802425][ T6541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.810229][ T6537] netlink: 108 bytes leftover after parsing attributes in process `syz.6.401'. [ 72.207023][ T30] audit: type=1326 audit(524360.590:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6553 comm="syz.3.410" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bb792a8 code=0x0 [ 72.237979][ T6561] loop6: detected capacity change from 0 to 256 [ 72.261264][ T6561] syz.6.411: attempt to access beyond end of device [ 72.261264][ T6561] loop6: rw=2049, sector=1808, nr_sectors = 24 limit=256 [ 72.268368][ T6561] syz.6.411: attempt to access beyond end of device [ 72.268368][ T6561] loop6: rw=2049, sector=1864, nr_sectors = 32 limit=256 [ 72.269588][ T6561] syz.6.411: attempt to access beyond end of device [ 72.269588][ T6561] loop6: rw=2049, sector=1928, nr_sectors = 36 limit=256 [ 72.329738][ T6561] syz.6.411: attempt to access beyond end of device [ 72.329738][ T6561] loop6: rw=2049, sector=1768, nr_sectors = 40 limit=256 [ 72.341603][ T4396] 8021q: adding VLAN 0 to HW filter on device eth10 [ 72.344434][ T6566] netlink: 'syz.2.412': attribute type 1 has an invalid length. [ 72.579529][ T4883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.887099][ T866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.887220][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.139964][ T6566] bond1 (unregistering): Released all slaves [ 73.247073][ T6589] netlink: 8 bytes leftover after parsing attributes in process `syz.7.416'. [ 73.393880][ T6600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.402200][ T6600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.422518][ T6602] netlink: 200 bytes leftover after parsing attributes in process `syz.6.420'. [ 73.520885][ T4396] 8021q: adding VLAN 0 to HW filter on device eth11 [ 73.663031][ T6635] netlink: 40 bytes leftover after parsing attributes in process `syz.3.430'. [ 73.663724][ T6635] netlink: 40 bytes leftover after parsing attributes in process `syz.3.430'. [ 73.703416][ T6635] netlink: 40 bytes leftover after parsing attributes in process `syz.3.430'. [ 73.703445][ T6635] netlink: 40 bytes leftover after parsing attributes in process `syz.3.430'. [ 73.786445][ T6635] netlink: 40 bytes leftover after parsing attributes in process `syz.3.430'. [ 73.786485][ T6635] netlink: 40 bytes leftover after parsing attributes in process `syz.3.430'. [ 73.816324][ T6661] netlink: 200 bytes leftover after parsing attributes in process `syz.3.435'. [ 73.824258][ T5238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.824364][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.904584][ T866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.904688][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.971956][ T6671] netlink: 20 bytes leftover after parsing attributes in process `syz.6.439'. [ 73.977329][ T6671] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.989464][ T6671] bridge_slave_0 (unregistering): left allmulticast mode [ 73.990922][ T6671] bridge_slave_0 (unregistering): left promiscuous mode [ 73.993166][ T6671] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.017563][ T6673] loop2: detected capacity change from 0 to 128 [ 74.022170][ T6673] EXT4-fs (loop2): Test dummy encryption mode enabled [ 74.027395][ T6673] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.047480][ T6673] fscrypt: AES-256-XTS using blk-crypto-fallback [ 74.776761][ T6688] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 75.169909][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.178699][ T4710] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.353123][ T6698] md/raid1:md0: not clean -- starting background reconstruction [ 75.353152][ T6698] md/raid1:md0: active with 2 out of 2 mirrors [ 75.585894][ T6688] md_update_sb: can't update sb for read-only array md0 [ 75.635050][ T6688] [ 75.635483][ T6688] ====================================================== [ 75.636857][ T6688] WARNING: possible circular locking dependency detected [ 75.638291][ T6688] syzkaller #0 Tainted: G L [ 75.639368][ T6688] ------------------------------------------------------ [ 75.640607][ T6688] syz.6.443/6688 is trying to acquire lock: [ 75.641655][ T6688] ffff0000d402a358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: location_store+0xb8/0x938 [ 75.643328][ T6688] [ 75.643328][ T6688] but task is already holding lock: [ 75.644615][ T6688] ffff0000f0af1e18 (kn->active#67){++++}-{0:0}, at: kernfs_fop_write_iter+0x1f0/0x3b8 [ 75.646418][ T6688] [ 75.646418][ T6688] which lock already depends on the new lock. [ 75.646418][ T6688] [ 75.648181][ T6688] [ 75.648181][ T6688] the existing dependency chain (in reverse order) is: [ 75.649741][ T6688] [ 75.649741][ T6688] -> #1 (kn->active#67){++++}-{0:0}: [ 75.651045][ T6688] kernfs_drain+0x1cc/0x4d0 [ 75.651882][ T6688] __kernfs_remove+0x354/0x718 [ 75.652759][ T6688] kernfs_remove_by_name_ns+0x70/0xd0 [ 75.653737][ T6688] remove_files+0x90/0x184 [ 75.654558][ T6688] sysfs_remove_group+0x98/0x160 [ 75.655453][ T6688] md_bitmap_destroy+0x1b0/0x230 [ 75.656394][ T6688] __md_stop+0x54/0x154 [ 75.657211][ T6688] do_md_stop+0x284/0xe6c [ 75.658060][ T6688] array_state_store+0x6ac/0xce8 [ 75.658981][ T6688] md_attr_store+0x304/0x438 [ 75.659886][ T6688] sysfs_kf_write+0xe0/0x108 [ 75.660818][ T6688] kernfs_fop_write_iter+0x260/0x3b8 [ 75.661926][ T6688] vfs_write+0x51c/0xa0c [ 75.662811][ T6688] ksys_write+0x12c/0x228 [ 75.663675][ T6688] __arm64_sys_write+0x84/0x98 [ 75.664659][ T6688] invoke_syscall+0x98/0x244 [ 75.665603][ T6688] el0_svc_common+0xec/0x23c [ 75.666533][ T6688] do_el0_svc+0x4c/0x5c [ 75.667353][ T6688] el0_svc+0x64/0x260 [ 75.668127][ T6688] el0t_64_sync_handler+0x44/0x104 [ 75.669131][ T6688] el0t_64_sync+0x198/0x19c [ 75.669991][ T6688] [ 75.669991][ T6688] -> #0 (&mddev->reconfig_mutex){+.+.}-{4:4}: [ 75.671414][ T6688] __lock_acquire+0x1600/0x2a6c [ 75.672396][ T6688] lock_acquire+0x150/0x370 [ 75.673266][ T6688] __mutex_lock+0x164/0xf14 [ 75.674170][ T6688] mutex_lock_interruptible_nested+0x24/0x30 [ 75.675323][ T6688] location_store+0xb8/0x938 [ 75.676240][ T6688] md_attr_store+0x304/0x438 [ 75.677155][ T6688] sysfs_kf_write+0xe0/0x108 [ 75.678106][ T6688] kernfs_fop_write_iter+0x260/0x3b8 [ 75.679147][ T6688] vfs_write+0x51c/0xa0c [ 75.680005][ T6688] ksys_write+0x12c/0x228 [ 75.680902][ T6688] __arm64_sys_write+0x84/0x98 [ 75.681863][ T6688] invoke_syscall+0x98/0x244 [ 75.682758][ T6688] el0_svc_common+0xec/0x23c [ 75.683738][ T6688] do_el0_svc+0x4c/0x5c [ 75.684667][ T6688] el0_svc+0x64/0x260 [ 75.685470][ T6688] el0t_64_sync_handler+0x44/0x104 [ 75.686414][ T6688] el0t_64_sync+0x198/0x19c [ 75.687264][ T6688] [ 75.687264][ T6688] other info that might help us debug this: [ 75.687264][ T6688] [ 75.689000][ T6688] Possible unsafe locking scenario: [ 75.689000][ T6688] [ 75.690355][ T6688] CPU0 CPU1 [ 75.691265][ T6688] ---- ---- [ 75.692152][ T6688] rlock(kn->active#67); [ 75.693058][ T6688] lock(&mddev->reconfig_mutex); [ 75.694545][ T6688] lock(kn->active#67); [ 75.695906][ T6688] lock(&mddev->reconfig_mutex); [ 75.696890][ T6688] [ 75.696890][ T6688] *** DEADLOCK *** [ 75.696890][ T6688] [ 75.698338][ T6688] locks held by syz.6.443/6688: 4, last CPU#0: [ 75.699450][ T6688] #0: ffff0000dd388d30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x100/0x144 [ 75.700997][ T6688] #1: ffff0000fad1a460 (sb_writers#6){.+.+}-{0:0}, at: vfs_write+0x248/0xa0c [ 75.702553][ T6688] #2: ffff0000eee3d880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1b0/0x3b8 [ 75.704192][ T6688] #3: ffff0000f0af1e18 (kn->active#67){++++}-{0:0}, at: kernfs_fop_write_iter+0x1f0/0x3b8 [ 75.706027][ T6688] [ 75.706027][ T6688] stack backtrace: [ 75.707094][ T6688] CPU: 0 UID: 0 PID: 6688 Comm: syz.6.443 Tainted: G L syzkaller #0 PREEMPT [ 75.708878][ T6688] Tainted: [L]=SOFTLOCKUP [ 75.709599][ T6688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 75.711281][ T6688] Call trace: [ 75.711834][ T6688] show_stack+0x2c/0x3c (C) [ 75.712596][ T6688] __dump_stack+0x30/0x40 [ 75.713323][ T6688] dump_stack_lvl+0xd8/0x12c [ 75.714106][ T6688] dump_stack+0x1c/0x28 [ 75.714808][ T6688] print_circular_bug+0x328/0x330 [ 75.715634][ T6688] check_noncircular+0x158/0x174 [ 75.716431][ T6688] __lock_acquire+0x1600/0x2a6c [ 75.717235][ T6688] lock_acquire+0x150/0x370 [ 75.718004][ T6688] __mutex_lock+0x164/0xf14 [ 75.718765][ T6688] mutex_lock_interruptible_nested+0x24/0x30 [ 75.719771][ T6688] location_store+0xb8/0x938 [ 75.720555][ T6688] md_attr_store+0x304/0x438 [ 75.721331][ T6688] sysfs_kf_write+0xe0/0x108 [ 75.722108][ T6688] kernfs_fop_write_iter+0x260/0x3b8 [ 75.723038][ T6688] vfs_write+0x51c/0xa0c [ 75.723756][ T6688] ksys_write+0x12c/0x228 [ 75.724508][ T6688] __arm64_sys_write+0x84/0x98 [ 75.725332][ T6688] invoke_syscall+0x98/0x244 [ 75.726103][ T6688] el0_svc_common+0xec/0x23c [ 75.726885][ T6688] do_el0_svc+0x4c/0x5c [ 75.727619][ T6688] el0_svc+0x64/0x260 [ 75.728309][ T6688] el0t_64_sync_handler+0x44/0x104 [ 75.729168][ T6688] el0t_64_sync+0x198/0x19c [ 75.891499][ T6698] md: pers->run() failed ... [ 77.257589][ T4353] net_ratelimit: 4 callbacks suppressed [ 77.257617][ T4353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.257706][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.283244][ T4353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.283346][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.601896][ T4715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.319455][ T866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.319562][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.399022][ T5566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.399119][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.355633][ T866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.428581][ T4353] net_ratelimit: 4 callbacks suppressed [ 82.428613][ T4353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.428713][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.475710][ T4353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.475814][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.503964][ T5569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.504080][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.507178][ T866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.507254][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.662255][ T4716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.540954][ T866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog