last executing test programs: 1m40.876161544s ago: executing program 4 (id=23): syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r0, r1, r2, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2000, @fd_index=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, '\x00', 0x0}}) syz_ublk_add_dev(0xffffffffffffffff, r0, 0x0, 0x0, &(0x7f0000000100)={0x2e, 0x28, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0xb0ef6ead6e7beb77, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x9, &(0x7f0000000040)=@any_dev={0x2, 0xde4, 0x0, 0x0, 0x1000, 0x5, 0xffffffffffffffff, 0x0, 0x18}}}, &(0x7f0000000180)) r4 = io_uring_setup(0x1d2d, &(0x7f0000000200)={0x0, 0x1c93, 0x400, 0x1, 0x200}) io_uring_enter(r4, 0xd99, 0x7d52, 0x28, &(0x7f0000000280)={[0x101]}, 0x8) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f00000001c0)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x4, &(0x7f00000000c0), 0x83, 0x4c2, &(0x7f0000000840)="$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") 1m40.875732115s ago: executing program 4 (id=24): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x20, 0x10, 0x437, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x704c3, 0xc4a48b7f26bf141b}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6d, 0x3, 0x3, 0x22, @mcast1, @empty, 0x8, 0x80, 0x61, 0x7}}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000200)="1700000072006bcd9e3fe3dc6e08000007230000040200", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r3, &(0x7f0000000200), &(0x7f00000002c0)=@udp6, 0x2}, 0x20) socket$inet6(0xa, 0x2, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) (async) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x20, 0x10, 0x437, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x704c3, 0xc4a48b7f26bf141b}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6d, 0x3, 0x3, 0x22, @mcast1, @empty, 0x8, 0x80, 0x61, 0x7}}) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000200)="1700000072006bcd9e3fe3dc6e08000007230000040200", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r3, &(0x7f0000000200), &(0x7f00000002c0)=@udp6, 0x2}, 0x20) (async) 1m40.823239827s ago: executing program 4 (id=26): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb77d8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) mknodat(r4, 0x0, 0x100, 0x7fff) sendmsg$nl_xfrm(r4, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0xf0, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@rand_addr=0x64010100, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0xee00}, {@in6=@empty, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x6, 0x0, 0x200000000}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x40, 0x70}}, 0xf0}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001c"], 0x104}}, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xffe0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f00000017c0)={{r5, &(0x7f0000000040)='\x00', 0x2, &(0x7f0000000080)={@_ha_fsid={[0x10000000, 0x1]}, {0x4, 0x2, 0x3, 0x4}}, 0x955e, &(0x7f00000001c0), &(0x7f0000000280)=0x40000}, 0x4, &(0x7f0000001740)=[{0x0, 0x5, &(0x7f00000002c0)='}\\([\x00', &(0x7f0000000400)="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", 0xfd, 0x28}, {0x1, 0x950, &(0x7f0000000500)='\x00', &(0x7f0000000540)="8a3fc04241786eb089edf4ff78f8f0d22cbe80d35f5e6123112b5ce4175b13b3183eff5d0fa2ea98b0930da34b600a0c745a61ec25baeb81c480f9bcd045f01435faf7dd913eaa2f50ee1fca78d1a6f69aa80049e668b6994b61f0384453b7bb1ad3f34488596297f61510334d0c71a452072a28eff619fe74a76c5a78e60c5f965b6b22ea55b111bebb8517450405e43dfd977a2389896b14804cab7d4726c9ad68b7281f21dcdfa0c828b212d49998d1d9ed46a17cdf9147e02642a4b040687045939da1379f7b314da9c37ed24d66486b91aea6c2e18f4082ad7caac3d954fb0a7773b5b63af498e625980f5312dc5a5141be3d777ebfed0ce708f3184cba63ad09b3c1e559b636e902e6c41e98249a8faf453a5ea6a78851788b9087c188a1fa28dc20a524d1cae2a731152cde58040135480ee92b0802e56fc49bb960ea45e254b4c8b944e84f2109fbd5dd07906986ddc7f5ff6158e01c35f08c9884c198c15ec01649d078b62deff596d55053c9a681626a2fba223d70a82e5aa99607e346d121fe885a3d682818c4682c073df59ba6efc1de4e711dea1ffff8fbc558c9a43f49bf7fc3c5659c8dd9485483f032e09f9bcc1be09b745ee4c80c477c82e56ac7abc8cd6a9d62c88ff904aed56b1e0509ac12cff58bdf86ef076572e487661879dbdf3f8cdeb571957282383719cb012aca347031fb872c0518750d3660e0e82ad4a6b0a511906535f68eaf1bc62196ef69b158ea76b0b923c411de3efc0eac86026dab7e1ba145b29affcfe45749aa518643babf20f165ae59a1894e312dacbfb9062e245488c634b49512698a728d6c0be4c2f22e213681a997e1e092cf29c91f4063b0eb46d41baee97c6ab0801895bd1f786ce1a313120651a9896892c903900454c86ab54b14f48f64b60a624533f7dcea0a1ebd61e5e90958413c37ed79372d6c0e9f603db497d09ef26000caed26b175180f2656d5d12c000f9ec4262427f42eb2d7b0859132d47deccf890f92b7a1e2ccde45cf2207df110e6cc78a27f301c4e0b347659e350b6a562184fe929d6469aba15e011c12b9a802e482822a4aeb104fd1c3afde18ec0ea50739ce2ecc508641ecf1b7a8d9a6ce178b0cb53490a051d41cc35a7ca1965f4587679f5a2dc44e3abf9e4ec25c5dd923e062c01e063c7eae570617febeadb365a8826f6bfd3184ed12616fce28cce2cccd377b412df03e792817231d46c830067b217f6e037de60b383cbe60ac35aa050baba9f4b562434937c44b44283330028d6ac711117a2f5dca50250fafaeef4ffbedb6f9fbb020d2593fc75dbac611e9abc314b46f378ec4eebb962d402f54608a225e8b046f81edce3c164c6ca77d53d94546888e57ae51f04758b4ebdb6a84d0155b309040fb1f34075e938a34e74e03086e79e9d24f35fd9d66649630d0c220c6c347521c282f113eebda65673d9934c4211df665ccabc32fa877eb6069908a720179f79abb24a3b580b1ad887c3a36911561475f95dcb4a2b361e2147be6ac9fe17b3a6d512def3034c0449595f2eee28c8b52766e7935840c3073cbe3144690ad4311add6957e7896665dd7e8a8ee6427e4f286dbb52ae23be82e24072c1527a881dcaefc01ac7eef58607b1a014eb5fd2f376f21633b9c72a4e5b181612f3a2a8117409f84e69084d9a4c11879c18859c2debea24ff490c170f49ca6a3b8d58c34f4d2e77a0ac3d74416bd9905e0a2b71caa7cdc6391e14f1d9d1631e5e5a348d78de21f19073b5b4d43509275e61548530d7a4a1adc96ec479de3762385f182a6a755e0ee953a52fe35352330c3eab4eaf9c73537556713bd076577dc5e5ae949122518a35c49c1da4c684c381a9a05b91ad966996973d78891be97e801c0b909630b4049231940e96c4c6b9d6aaa327edfa318f28cf04d477aed977a74700cd67763c63f3de563251c8171eb4e14bf7a9398eec3873620700c2bef74b4a499b884435bf779845edd7f8d6a8e93b582d5462be9bba0fb414bb6399efb640fd3046cb61e796a529b305299162ae49ea528b29c2eb2e5565eaca6878ee5b13dc987b31c37cb6718ad073925a321c4384390b1dadd20b6c924837ac1c3a5b189976c7eedc61327dc257750cd18be50adb45a51bc40e96a2c4a0bfb32a08d629d0f44042d4da45aa3f3a70daecc21e79aa5f1dd3619cfaa2b67932e8a95ad522275b9597ab503746cb37f6484b85121a4e377a0c17608ebb5fdadb6b7ed1c4e75cb95f916f89ba0c80662bd780c9bf1703aa2dcb2403de7897ed61a3c0f8b642ef1849b08d2293178cbb2aeb886cc3f968e033c430e8a6fe55d4e868612fc5e4f8eb6154ebd927808e8cdf988662605ca05e0181a1f10992ce541f1fb73162e7530bc429758d9ecd4bc86e04c2b8ddef09a257bdb2f54fd77830efb35ae5dba92e2b7d68932ad2a7cbcbb848f307d4ad822bc0e8ed262ada200dc2c4051b8486db9203faedc8a9fa52284fe95c2115aaeb9cfdc9f5101b099810b28d22e47f97b2ecc9bf141267aee06efcd13ac6116bb5fed02a77c42341b14e843b45285f674cf9ac3c5b0249382707e50c890764f093e203635de47e5c3895196966a9ef4697b705ac0da7e44470240fe482cd33297c8d8104430d5328d0fa345339c928c7316e1f7bda1d6783988b40c3d6dd3761918eb4cd03f28914535d2182594e42728dfa02854e76bd331c0a9b7d2be2c966308a9907ce827055090798c907167e7bed368ec58634329da16518d5c98dec061f3105f5b8ae4ca391c377378c7a0fdeac71189411b6c39609d9f906d21fc727a0c7650c44db9e44becc8e77403e421e390a7006a854be60c7f7f6996cfe56dca42004b29697d86e1f1d9bd9d9027202eb32685fb19bb544ccad4a53ffd12e69fa3e168c9a3267dd99bad775bf95d9fe043120a3a72e45ae1224d0ee6d617bd3a058175a1e667eeb705ea3f146d4100e776bd0dfc4905240b3bda1eae54ba4ba9c4cd2d9aa944aa8f53fe729ed68f7141dbcc065ee88a7826351d521255832d3264f318118d4c01e0ccb63ea1eabff5ecd2716502d4b49445c59a56d177b5880a9f80619f5cd220d0df7661a4ef0da261f902bf881789ef0cb34df1992b62d72160af1b2d964acda8b1308e9ce8fd0cb2e68f183285bb5c95eccaeffa4506368cee035497cb8b5297ae2326a3697f4b003122c40d57c5c1cc19e6514d9a09af27c4a9c1207a1f78cb4d707addacfe5a9e878597a30355524267d225e92a6f17bb542e02b4501633d85ac609549cb8a4c856796a9a77cea33995203da7d94335c19c52a1dc9c1f865abd4f8d5f9f1f84775a452f522b860c113b047f0225c7f0bab6535d5ffefa9fa51764ad4cf54e357a755fbe6ec12433b17e20111f00ec4bd12ede7383a01ca68c0f79d2a5974cf7fccd28b9c83620ce715e1d7ece183ac9340c08a7444aba781e965b30c06f6b1f047afa403c1da01a2310debf8e7821a46b3a0947f05e4a17feaff8818e2bb8d5ee03586dbd030e83555cbd6dfb6f5e16249d3360585a1700926804f084de6c2f162d17573c039ebc124065f6e4cfffe254a9c19ead345d165246a576c2b582c8828fb0012563a4fa8e1ddacd13bc6c5f4eaee6e12188cd8f6e7ada4bec892859dfccdd6f1d218a76d077eb332b500e32b13ea63eb7545b1990027d94408cfa27c6689cbc2727822b05da27e55c440ceac777a56e98d0b267feeaf9a1102946f5a3e13b4f761a53466a79bda4aa5fdcedd95bde2862953efdcf5ef67c0a7c9fcc8ee43818e667fbfec9d91d60a8bd5587fd7d42c99f2f24d8d45c9e31eb10182140f21a05f1496ec5b3f8b509857bbb14e3d1a794ea81c82f6d21837d951de9637f384068307bd6704c1b020bd71159ea3ae11b6afa0905ee500b9a5f57bb654ae9960336340cef5dc52cbfd5673a6776cf968fb6b40e246f9c89a20ae6f17261db57694ab6362369c9a0383ea2258da32932abdd986f304cabbeab77b511c81f46ddc71966dde4637b3969d490f3bfb448e220743ba8732125f39e8e9caa9c0f64d303b3957d1628337653cb2f4a3b21eb6f2abd36469f4e79765505925a9faa714d0f4971ee22f4ced010e2cc7f410149d1e3f09f8c4e2ba1308311406203a44452c678a030387793ef9c9d554eb26169e08515b405ed55bc18677cffc842cde142ad95f5253c3513d9dca157b301d3d8944f7903ece913dd17a501ffd4b1358a439016550eb47aae8d33a27d8268bb915dacc3094c21637fc6eda7a3230956b7629ae3a01ad8764d6d8a697792849a56f23e4780ee840df3205d7f44d2596bf1c9d7cbd4552948807a4830820796dd9be59f59a8004e2219c222c66a5afa7ba7819f68e1a6f385a9692ca7e71428edbc793d1f737ede77cb7f29eeb3fc22d6e25f3a5d78d96585628be9825e9c8df1b82571b1e8f393696ed8ec1680b112beb19c714f20da412e6c544468c1febaed59582e31d13f7d916ea91cfd6bf4d920ce2641001129031ea38d64ae614f94b5e3ea917dcdfb4ac87a1083dc29507579ca069dac3d3731f32fe3fdc4c10cb2094587b14565a78c3a200d7bedcb9da8a4b413e3c5945733538d9abb5061dbc18a91686cf2ac940c84d9a5093e1f1d4ef79fca76922a044bea3c9c269665f8aa06d4fa2c3a13c5f2acd3ec9e757990b4c58c70f73090eeb43806a82ae2fb00e73d3d985dc14d9d85966903f8de4e6c6a1515dc4ecfd57f709a3d1bcdf9d7c345355dc2eb9971e695439144c984624d5e1184bfaf722c63dba3a38a5591281b72f16c7116ee6c9c48020e0495cf74d0fe6848217028e80b5c5d09a6178f3b0e553bf15c7a09bf5127ecec18cbfa798a1e00ca2071950eb6a3f9cad87eacf02ba92203ef9b7ca9854b2911411b0159fd5ff888e79e26fbe3247d3fcddbb327657161e9f5c3d3f3dc85aa6a85e88f1f60b7245654d12234889c5b0b30ef476d0c9ff27697048352e282d48311abfcb2648005dd57e00c23e40b9f7375425f8cd17fb8d825df2a97185a0703a418255ea7c68c49818f21604ffa0686af8df5287a638c59dceafb1d7902914facaa29b6ac367180cdafb3d0011734249da67560b727fc73c19f571cf7e2f0602bc3701de119fd97f8a68cb4495de3b01bad4016e6e8b504c3063060b171cec4010a9a64828763ba443dea4495e4c87d573518d70bae9a4ee77b1928362d761f2c6d81ea368afcbd90c45bb0b2d7d15619bfb30ea277da7a0840e513ec2d6e78f4c632a813018b813d4c13560e0badb4fbc47a9de6ef171efa98861a8f4c92562be45c64392322fd5a44e4ae340af2feaeedaa8ed94d107c8585a362b1190b05272d5b3c462d6d19b89816ad56002662e8c00d4c471a63f06ed5ad086dad85aff7516caf024a4abf75d11c62c90c8aeb0068da3211b00b14fac7f4c9ed8a1b14019d5893d11f189f3da27e5250cd8f2b0bfc0b047837c7d9edbf5b47dd86f0d92edbc693afaec6c7e954ca5c67e11f8c87c22869c8e8eef7c333b951a7f630cf4f9127d1caac7526fbf4971e15e97877efe4059a4bbfc4fc18068a87c92b4ecc753583844220c3769cb7519899d16b91ed2545452f6be8bfa92a364146f568151f9d21006db3fc9a297a6d49ee90d1f9cd85ef4d1a046efd972cb8b09f101ab14acb394a9c4f37398f22809276ec56396dbb206ab975147f78640335d621f70acaa96734acda1831ee1a945a05aae3e484d31e86e569305cb434419bf87f11677de9190bab40a2", 0x1000, 0x32}, {0x1, 0x3, &(0x7f0000001540)='@\x00', &(0x7f0000001580)="35075fe61dfb7d6648954b03480a6533c496afa4c1f460d52550a0d708af70857e151fbaf9e340537cf9651b8d6897126787eca614ece3b76fe4c3a5ad21d02f54316f86e593094cae7ce05d45baa23556055110f7111120a6392422189bb2d1bd4092acccd68c9efd50ec73ea953aab3f948516f4d3487b893197555e42265f2c03e16535df809f29a684c360b308e823b7c0a059db1ebabd55d20467e971d57ebfb23a82704d95688d71e662a244f8369e1fb5a84bb6c0ec0c82a6efa556f5b633a544d315b60ca77810c97db709ac87542072d42d81887423d8abb67c318871ea6ea9c88b50a7a534", 0xea, 0x10}, {0x2, 0x9, &(0x7f0000001680)='/^\x00', &(0x7f00000016c0)="f8fa04da7226fd7e1f6087fbb18ce5897fad96714ebc795f845092a1dd4e48ba6e4a60fb873860e554f68ae96e83f4680150edd92cf0b7883c6ae25c26fdbec376b5ef415ae52b7fdf32813a692b367bae809367c27e7db6d88cc24df642f38f4a62deb0d24521", 0x67, 0x8}]}) 1m39.891030413s ago: executing program 4 (id=31): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r1, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x2, 0x8, 0xc, 0x801}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r4 = shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r3, 0xc0207511, &(0x7f0000000380)={0x0, 0xffff, 0x0, 0x0, 0x0}) capget(&(0x7f0000000400)={0x2ccb11be, r5}, &(0x7f0000000440)={0x80, 0x6, 0xf, 0x401, 0x2, 0xe7a}) shmat(r4, &(0x7f0000ffc000/0x3000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f0000000300)={[{@discard}, {@errors_remount}, {@dioread_lock}, {@usrquota}]}, 0x5, 0x523, &(0x7f0000000c40)="$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") mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@redirect_dir_nofollow}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1m39.705652292s ago: executing program 4 (id=34): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sock=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) (async) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x9, 0x4) syz_open_dev$evdev(&(0x7f0000000900), 0x1, 0x20000) (async) r4 = syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x942) write$evdev(r4, &(0x7f0000000040)=[{{0x0, 0xea60}, 0x0, 0x1, 0x2}], 0x18) 1m38.425485564s ago: executing program 4 (id=60): r0 = shmget(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000140)=ANY=[@ANYRESDEC=r4], 0x150) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10}, @in6={0xa, 0x4e21, 0xe, @mcast2}, @in={0x2, 0x4e24, @rand_addr=0x64010100}, @in6={0xa, 0x4e23, 0xfffffff8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x74b4}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4f24, @broadcast}], 0x94) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0xfffffffc, @loopback, 0x5}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) sendmmsg$inet_sctp(r1, &(0x7f0000004900)=[{&(0x7f00000000c0)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)="f4", 0xfffd}], 0x1, &(0x7f00000002c0)=[@init={0x18, 0x84, 0x0, {0x2561, 0x9, 0x0, 0x6}}], 0x18}], 0x1, 0xc4) 1m38.352932348s ago: executing program 32 (id=60): r0 = shmget(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000140)=ANY=[@ANYRESDEC=r4], 0x150) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10}, @in6={0xa, 0x4e21, 0xe, @mcast2}, @in={0x2, 0x4e24, @rand_addr=0x64010100}, @in6={0xa, 0x4e23, 0xfffffff8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x74b4}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4f24, @broadcast}], 0x94) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0xfffffffc, @loopback, 0x5}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) sendmmsg$inet_sctp(r1, &(0x7f0000004900)=[{&(0x7f00000000c0)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)="f4", 0xfffd}], 0x1, &(0x7f00000002c0)=[@init={0x18, 0x84, 0x0, {0x2561, 0x9, 0x0, 0x6}}], 0x18}], 0x1, 0xc4) 2.339422505s ago: executing program 0 (id=314): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0)=0x10, 0x80800) r3 = dup3(r2, r1, 0x80000) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r0}], 0x1, &(0x7f0000000440), 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x2}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x1489a, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB="2c233f35dc6f3d", @ANYRESHEX=r7, @ANYBLOB=',access=client,noextend,\x00']) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x480}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r9, &(0x7f0000000f80)=""/4096, 0x1000) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000380)) r10 = openat(r5, &(0x7f0000000480)='./proc/thread-self/fail-nth/../file0\x00', 0x101002, 0xa) write(r10, &(0x7f0000000000)='7', 0x1) syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x4, 0x154}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000300)) r11 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r11, 0x84, 0x6e, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000001040)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0xb}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) 1.837917506s ago: executing program 1 (id=322): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x34}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000140)={r0, &(0x7f0000000000)='\x00', 0x40003, &(0x7f0000000080)={@_ha_fsid={[0x5]}, {0x80, 0x4, 0x6, 0x967}}, 0x1c, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x2}) ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f0000000180)={0x3, 0x5, 0x8001, 0x401, 0x6}) 1.771957258s ago: executing program 1 (id=324): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r2 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x64, r3, 0x1, 0xffffffff, 0x400000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x100001}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x64}, 0x1, 0x620b}, 0x0) write$binfmt_script(r2, &(0x7f0000000280)={'#! ', './file0', [{0x20, '-XwwR\xf7\xc4\xe1L\xb9\xa1\x0e\xdb\x8bj\x8c\xe7\r\bP\xd6\xf4D\x0f\xd0\xb8\xbdh-\xb3aKo~\xa7\x17\xaf\xfd\x89l\xe5\\#\x90\xbf\xba\xb7!\x8e\x17\xa0\xe2\xa5\x88O\xc7p\xdd\xf7\xd5\x17\x8d\xfb\xde>\xb5'}]}, 0x4e) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x58, r1, 0x121, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac04}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "9e1f50cc3c"}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xf040}, 0x0) syz_read_part_table(0x5d4, &(0x7f0000000000)="$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") syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e04023920"], 0x7) fcntl$notify(r2, 0x402, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) (async) openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x64, r3, 0x1, 0xffffffff, 0x400000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x100001}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x64}, 0x1, 0x620b}, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000280)={'#! ', './file0', [{0x20, '-XwwR\xf7\xc4\xe1L\xb9\xa1\x0e\xdb\x8bj\x8c\xe7\r\bP\xd6\xf4D\x0f\xd0\xb8\xbdh-\xb3aKo~\xa7\x17\xaf\xfd\x89l\xe5\\#\x90\xbf\xba\xb7!\x8e\x17\xa0\xe2\xa5\x88O\xc7p\xdd\xf7\xd5\x17\x8d\xfb\xde>\xb5'}]}, 0x4e) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x58, r1, 0x121, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac04}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "9e1f50cc3c"}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xf040}, 0x0) (async) syz_read_part_table(0x5d4, &(0x7f0000000000)="$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") (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e04023920"], 0x7) (async) fcntl$notify(r2, 0x402, 0x1) (async) 1.732215199s ago: executing program 1 (id=326): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bond_slave_1\x00'}) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) r4 = socket$unix(0x1, 0x1, 0x0) close(r4) socket(0x1d, 0x2, 0x6) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x40c, @empty, 0x9}, 0x1c) sendmsg(r3, 0x0, 0x44004) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtfilter={0x8c, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {}, {0x3, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x54, 0x2, [@TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000, 0x80000001, 0x7}, 0x21}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4895}, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 1.491051071s ago: executing program 0 (id=330): r0 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) socket$l2tp(0x2, 0x2, 0x73) r1 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e25, @multicast1}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000002c0)=0x7e) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$UHID_GET_REPORT_REPLY(r4, &(0x7f0000000180)={0xa, {0x5, 0x9, 0x7f}}, 0xa) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0x13) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4003, 0x0, 0x5, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x58, r5, 0x211, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BSS_BASIC_RATES={0x5, 0x24, [{0x2, 0x1}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0xc, 0x1, 0x7, 0x0, {0x2000000000, 0xbb, 0x0, 0x3, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x300, 0x9, 0x3}}]}, 0x58}, 0x1, 0x0, 0x0, 0xf040}, 0x20004800) 1.424035863s ago: executing program 0 (id=331): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140), 0x3) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "68418d4bf82776db", "8d5d51001a95c900000000000000000000f8ffff0800", "2b63b7c7", "9c471e30f2ba88c0"}, 0x38) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0x110, 0x43, 0xa0, 0x110, 0x98, 0x1f8, 0x178, 0x178, 0x1f8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @rand_addr=0x64010100, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0xa8, 0xc8, 0x0, {0x0, 0x7a010000}, [@common=@unspec=@connbytes={{0x38}, {[{0x5}, {0xff}], 0x2, 0x1}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x270) setns(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r6) sendmsg$TIPC_NL_BEARER_ENABLE(r6, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x68, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, "31323379cf631f8e72b04b8f08f42334"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "00112233445566778899aabbccddeeff00112233"}}]}]}, 0x68}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x40001) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 1.414882983s ago: executing program 5 (id=332): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="0100ffffff81000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843e40108804400208024000180"], 0x22c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000002400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000023c0)={&(0x7f0000001480)={0xf28, r1, 0x300, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PEERS={0xea0, 0x8, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x4, @empty, 0x6}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c726e46cd8032ee64ea092f7c65a3c210075434d45fc4fada7c939e2165ca8e3"}]}, {0x1c4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x80, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast1}}, @WGPEER_A_ALLOWEDIPS={0xa4, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e644f01f1614e0793536ff6de62459f20c0fac66be5499f945bae30f0f96d07e"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @private=0xa010102}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x50, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8001}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x10}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x5e0, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c5f9f264b74c6d76d3ed5036b6c9cc7f38b3032a982a8c18acb541e18f7d011f"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x4, @mcast2, 0x7}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0c183e71950cefd5b9e6b40f3499f010ee8c2d86de934b67dc78d891129a93c0"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_ALLOWEDIPS={0x56c, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x27}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2f}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x35}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xb}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}]}]}]}, {0x280, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "822ea8ca346c2ddef2fb09f233ce6f3b34b2164cb295c59e06882399afbf4862"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ce372bdad3c5a40f688d22bf8a23f5eb09ce52f973230096664b6ad6c49f3d08"}, @WGPEER_A_ALLOWEDIPS={0x18c, 0x9, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xb}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x23}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @empty}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2f9c6f0de32563fc66b007fc6522e17351a9c2a2e4a4a850643b72aa26b4a7a7"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x100, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7ff}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d1ea2167e44a4b431c856e166d3404583fe5bcc5f3ca2b0c2bb997c1f27ef4f9"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x340, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x2f4, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x13}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x22}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}]}]}, {0x40, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1c41ba246078f673f72afcd9c30e6617e20d9a46f40d706ecf552debeb089c62"}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xc2}, @WGDEVICE_A_PEERS={0x1c, 0x8, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast1}}]}]}, @WGDEVICE_A_IFINDEX={0x8}]}, 0xf28}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$nl_route(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000002100010000000000000000000a10000000000000000000001400010000000000000000000000000000000000050015000200"], 0x38}}, 0x0) 1.382833251s ago: executing program 5 (id=333): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x424100, 0x0) (async) r1 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r2) (async) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000080)={0x8, 0xbc3b}) (async) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, 0x0) 1.320135367s ago: executing program 5 (id=334): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r0, 0x11a, 0x3, 0x0, &(0x7f00000004c0)=0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x3) (async) getsockopt$bt_hci(r0, 0x11a, 0x3, 0x0, &(0x7f00000004c0)=0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x3) (async) 1.074293964s ago: executing program 5 (id=336): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000008000100100000001c0005800a000400aaaaaaaaaa2d00000ae5753bdfadd6f9aed1000008000500", @ANYRES32=r2], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 938.544339ms ago: executing program 5 (id=340): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRES32=r0, @ANYBLOB="d5facb1d66705f69643d00"/22, @ANYRESDEC=r0, @ANYBLOB=',\x00']) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x130, 0x0, 0xfffffffffffffffe, {0x9, 0x0, 0x0, '\x00', {0x200, 0x0, 0x8000, 0x10, r2, r3, 0x1000, '\x00', 0x2, 0x7, 0xffffffdfffffffff, 0x8000000000, {0x4, 0x6}, {0x1, 0xb}, {0x2000001, 0x20000e}, {0xc83, 0xa}, 0x2, 0xffffffff, 0x200fff, 0x7}}}}) write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x10400005, 0x0, 0x2000}}, 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x2, 0xa, 0x73) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf0}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r6, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=""/163, 0xa3}, 0x6}], 0x1, 0x12141, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) cachestat(r4, &(0x7f0000000080)={0x7}, 0x0, 0x20) 938.349727ms ago: executing program 3 (id=341): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ae, &(0x7f0000000180)="$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") r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = syz_io_uring_setup(0xf03, &(0x7f0000000180)={0x0, 0x595f, 0x10000, 0x0, 0x25f}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x6000, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040e04093120"], 0x7) 842.455189ms ago: executing program 1 (id=342): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x6, 0x32240) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000080)={0x1, 0x37, 0x8, &(0x7f0000000040)={0x1c, "053818925aae3ae4592e3736110c1f6ae0ee80a7ce15622980ebbe4ed79fc52e38"}}) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x8, 0xc9, "d2df1b31a1716f07"}}}}, 0xf) 768.223066ms ago: executing program 3 (id=344): mlock2(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x0) (async) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) (async) r0 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x7, 0xff, 0x0, 0x1}, 0x50) (async) capset(&(0x7f0000a31000)={0x19980330, r0}, &(0x7f0000000080)={0x0, 0x7ff, 0x2, 0x0, 0x9, 0x8000}) r1 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r1, &(0x7f0000000fc0)=""/224, 0xe0) mlock2(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x1) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth0_to_bond\x00', &(0x7f0000000000)=@ethtool_test={0x1a, 0x101, 0xc5b0, 0x6, [0x0, 0xe12998f, 0x1, 0x7, 0x7f, 0x89c]}}) 765.670655ms ago: executing program 1 (id=345): r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x4, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) r3 = fsmount(r1, 0x1, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r3, 0x11, &(0x7f00000001c0)="d61bb7", 0x3) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r4, 0x202, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x4, 0x13}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8005}, 0x20004800) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x70, 0x4, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x100000001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x100000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xa}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffe35}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000040}, 0x90) sendmsg$NL80211_CMD_LEAVE_OCB(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r4, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x78}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80000}, 0x4080) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x60, r4, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x4a}}}}, [@NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x45}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x8]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7ff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x3, 0x8001]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) shutdown(r7, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r7) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r6, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xc0, r8, 0x400, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x72}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x40}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3ff}]}, 0xc0}, 0x1, 0x0, 0x0, 0x48000}, 0x10000000) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r1) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r3) sendmsg$GTP_CMD_GETPDP(r9, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x48, r10, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x24040) r11 = syz_open_dev$loop(&(0x7f0000000a80), 0x8, 0x100) ioctl$LOOP_SET_BLOCK_SIZE(r11, 0x4c09, 0x100) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f0000000b00)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000b40)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000b80)=0x0) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000d80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x4c, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20064050}, 0x0) 761.196774ms ago: executing program 5 (id=346): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="380100001600330627bd700000000080e00000020000000000000000000000000000000000000000000000000000000040000002000000000200000033000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES64=r0], 0x138}}, 0x40001) socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r2, 0x28) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$eJzs3U1IHGcYB/BnZndr1aXY9lIo/YBSSiuIvRV6sZcWhCJSSqEtWErppUULVulNe8olh+QYkuApFwm5xeQYvEguCYGcTOLBXAKJ5BDJIQnZsDsr+JVo3HUnZH4/WOfDd97nHWb+74g4GEBh9UXEUESUIqI/IioRkWxu8HH26WtuznUvjUXUaj/cTxrtsu3MxnG9ETEbEV9FxGKaxF/liOmFX1YfLn/32dGpyqdnFn7u7uhJNq2trny/fnrkyPnhL6evXr87ksRQVLecV/slu+wrJxHvHEaxV0RSznsE7Mfof+du1HP/bkR80sh/JdLILt6xyTcWK/HFqecde/zetfc7OVag/Wq1Sv0ZOFsDCieNiGok6UBEZOtpOjCQ/Qx/s9ST/j0x+W//nxNT43/kPVMB7VKNWPn2YteF3m35v1PK8g+8prJfSq38ODp/q76yXsp7QEBHfJAt6s///t9mPg/5h8KRfygu+Yfikn8oLvmH4pJ/KC75h4J42vxjv0275B+KS/6huA6c/xNPDm9QQEdszj8AUCy1rgO9Ndzel5CBXOQ9/wAAAAAAAAAAAAAAAAAAADvNdS+NbXza02N5zxaXT0asfZM13Vm/1Ph/xBFvNr72PEi29Jjsq8KL/fpRix206GzOb1+/dTvf+lc+zLf+zHjE7P8RMVgu77z/kub9d3Bv7/H9yu8tFnhJybbtr3/qbP3tHs/nW394OeJSff4Z3G3+SeO9xnL3+adav34t1v/nUYsdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0DHPAgAA///B2nXP") r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x4, &(0x7f0000000080)={0x2, 0x4c1e, @multicast1}, 0x10) setsockopt$inet_int(r5, 0x0, 0xd, &(0x7f0000000040)=0x6, 0x4) recvmmsg(r5, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x8a}, {{&(0x7f0000000100)=@ieee802154, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)=""/246, 0xf6}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000280)=""/66, 0x42}], 0x3, &(0x7f0000000440)=""/178, 0xbf}, 0x1}, {{&(0x7f00000003c0)=@sco, 0x80, &(0x7f0000000440), 0x1, &(0x7f0000000540)=""/18, 0x12}, 0x6}, {{0x0, 0x0, &(0x7f0000000d80), 0x5}, 0x9ac6}], 0x400000000000045, 0x22, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x1cb) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r7, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) fallocate(r6, 0x10, 0x800, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r8 = memfd_create(&(0x7f0000000540)='\x02A\xbb\xcc\x96\x0eo\x1f\xe2@\xcc\xb1Yg\x00\x00\x00\x00\x00\x00', 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) splice(r9, 0x0, r8, 0x0, 0x7fffffffffffffff, 0x1) dup(r8) 736.2826ms ago: executing program 3 (id=347): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) (async) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f0000000180)={0x2, 0x0, @multicast2, 0x4}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x8b, 0x100000500) 651.985347ms ago: executing program 2 (id=348): syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x275a, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000000)) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)="4673c875ca4d9c60679ed38f62fc1ef5e0d7c20bf64791a98a614276cb95185400000000d86430620044", 0x2a}, {&(0x7f00000003c0)="e146badcd6aca239c46b95275dd493f4578940a27af1978ab8560c3b60f6060b76f2c54838cc0735fef1b728f1d479962b0a31123f4636ce35f9c1d2dd70ce5c6e64", 0x42}], 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000040)='blkio.bfq.time\x00', 0x0, 0x0) write$UHID_INPUT(r0, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) r3 = syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3810744, &(0x7f00000000c0)={[{@nombcache}, {@inlinecrypt}, {@usrquota}, {@jqfmt_vfsv1}, {@jqfmt_vfsv0}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@i_version}]}, 0x1, 0x46b, &(0x7f0000000b00)="$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") r4 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000380)={[{@i_version}, {@nomblk_io_submit}, {@acl}]}, 0x3, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000540)={0x4, 0x0, 0x3, 0x8, 0x6, 0x6, 0x20000001002, 0xf64, 0xfffffffd}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r5, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x10, 0x8031, r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r8 = syz_open_dev$usbfs(0x0, 0x76, 0x103901) ioctl$USBDEVFS_DROP_PRIVILEGES(r8, 0x4004551e, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_tcp(&(0x7f0000000280), &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x800002, &(0x7f0000000f80)=ANY=[@ANYBLOB="7472616e733d7463702c706f325c8b25543d3078303030303030304430303030346532332c70726976706f72742c76657273696f6e3d3970323030302e4c2c008f5f2b77536af1a5462dc4fcd979a1f6f7d62512329ddfa45e7f39c3b513f35b426b56f3e7a44dd4b50e9830848ce910784b6ae3c5b6e5807f044087aaf57fbca3d620e900886027e731b7c3119b6cabaa51"]) ioctl$USBDEVFS_CONNECTINFO(r8, 0x8108551b, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r9, 0xee00, 0xee01) file_getattr(r3, 0x0, 0x0, 0x0, 0x800) socket(0x0, 0x80000, 0x6a1) 650.073864ms ago: executing program 1 (id=349): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00'}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000080)={[{@grpid}, {@jqfmt_vfsv0}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat(0xffffffffffffff9c, 0x0, 0x250942, 0x50) quotactl_fd$Q_GETNEXTQUOTA(r5, 0xffffffff80000901, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket(0x10, 0x4, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00a30000440c0000140012800b0001006d"], 0x34}, 0x1, 0x0, 0x0, 0x24008000}, 0x810) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r6, &(0x7f0000000000), 0x400000000000235, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r1], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000400000008000000c00b000001000000", @ANYRES32, @ANYBLOB="0039b4221164435b493aae50ad00008000000080", @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="010000000300"/28], 0x50) r10 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) fsmount(r10, 0x1, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 649.238547ms ago: executing program 3 (id=350): unshare(0x6a040000) socket$nl_route(0x10, 0x3, 0x0) unshare(0x30000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x18, 0x1, 0x70bd3e, 0x25dfdbfe, {0x2, 0x0, 0x30, 0x8, 0xfc, 0x1, 0x0, 0x1, 0x5100}, [@RTA_PREFSRC={0x8, 0x7, @broadcast}, @RTA_GATEWAY={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc8c4) 578.546693ms ago: executing program 0 (id=351): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000040)=[{&(0x7f0000000300)='5', 0x1}], 0x1) ioctl$DRM_IOCTL_PANTHOR_SET_USER_MMIO_OFFSET(r0, 0xc008644e, &(0x7f0000000080)={0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000080)={r4, 0x13, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @multicast}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newchain={0x24, 0x1e, 0x1, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xe, 0xffff}, {0x10, 0xb}}}, 0x24}}, 0x44004) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="495e9664743c1942dad1b49b842603dda2ad5b34e477125411fcbc91203e4b4391160f51b612cac4e1875471ceb6d64ad5024118ff133be1fa0abcd51574f881f55239393ebe229d0161f3f4", 0x4c}, {&(0x7f0000000340)="90cbce8c9794ab5ed17928c936ff6cfe267931290c2dc1cc98853e1d7223998f27dd17676e88d61de6b37d6ef167d589b7e0918949d053f60847ce43b64f44e8e932bf09028c04f27d2b36160cd7903a970a2c6cc5d3ff45f8c90c3924bcc5571f47b47f76f47c38df4621e4dc27974cc6c509fa6029419f95761bcfb69f092e5279c1e23da7536bcace4d83f0b264f604c674bb0a683d8aa1a4cd2ce3a5a2ff63b6756bbe1f29d0217cae3c80ca9985af88c64f0fb7a785f5753c853d99100d74e429d2e9abf08fcc46d9f06c4be0", 0xcf}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11d15}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1a, 0x1a}}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 269.690302ms ago: executing program 0 (id=352): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1b) (async) readv(r0, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7570646174601d0bb109954839667320747275737465643a2f6465762f6e65742f74756e0000"], 0x26, 0x0) (async) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x10e) 262.823752ms ago: executing program 2 (id=353): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES8], 0x28}, 0x1, 0x0, 0x0, 0x8044}, 0x4010) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x4b) 187.995145ms ago: executing program 2 (id=354): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x87}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012, r4}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001040)={&(0x7f0000000e80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x23f}}, @enum64={0xb, 0x4, 0x0, 0x13, 0x1, 0x1, [{0x9, 0xa1, 0x3}, {0x2, 0x4, 0x1}, {0x2, 0xfffffff7, 0x5}, {0x1, 0x8, 0x3}]}, @const={0x9, 0x0, 0x0, 0xa, 0x5}, @float={0x7, 0x0, 0x0, 0x10, 0xa}]}, {0x0, [0x2e]}}, &(0x7f0000000f40)=""/195, 0x87, 0xc3, 0x0, 0x9}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001140)=@bpf_lsm={0x1d, 0x11, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@exit, @alu={0x7, 0x0, 0x5, 0x6, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xc6}}}, &(0x7f0000000100)='syzkaller\x00', 0x5, 0x7b, &(0x7f0000000dc0)=""/123, 0x40f00, 0x29, '\x00', r4, 0x1b, r6, 0x8, &(0x7f0000001080)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000010c0)={0x0, 0x9, 0x13}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001100)=[{0x4, 0x5, 0x8, 0x9}, {0x4, 0x2, 0x9}], 0x10, 0xfff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x300f000, 0xe, 0x0, &(0x7f0000000e40)="0049c69d2786a4b8d3dce769c270", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 187.494937ms ago: executing program 3 (id=355): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="3a0038000000000095cd283865adbe05c26aa4803860808b529660ff73321fd2979de3ee8ade64cd6b0bc777012591dad88d84ec9af9935f69418223af1c8d706294c53f984057155a6dcad27c0a902994392f66f203515aabc4ee49ed1f474255e315cb954df65b84b6390160e15f28"], 0x8) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x0, 0x0, 0x1, 0x1, 0x4000, 0x1}, 0x20) (async) close(r0) (async, rerun: 32) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0xfffffffc}) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}, {0x4, 0xf}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x14, 0x18, 0xc, 0x2, 0x8, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x6, 0x0, 0x4, 0x7c33017e, 0x1, 0xb65, 0x6}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24040814}, 0x8090) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x10000, 0x2, 0xff, 0x1, 0x100, 0xfff8}, 0x20) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x9, 0x100) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f00000001c0)) 163.789388ms ago: executing program 2 (id=356): mkdirat(0xffffffffffffff9c, &(0x7f0000005a00)='./gadget\x00', 0x930aa59063c1a109) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x11e) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x5, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="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", @ANYRES32], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000040)={0x1000000, 0x0, 0xa5d6061}, 0x10, 0x0, r0}, 0x94) 161.710717ms ago: executing program 0 (id=357): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x170bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1ff, 0x200, 0x5, 0x3, 0x5, 0x4}}}}]}, 0x4c}}, 0x20000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0xfff1}, {0x1, 0xfff1}}}, 0x24}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x4, 0x1, 0x13, 0xffffffffffffffff, 0x20000000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000c00), 0xe000000000000000, 0x10000) ioctl$BLKFRAGET(r7, 0x1265, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff2424852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff0e0b5a293e3877adc1660edbc9a0307a25720a70e419dc44febf7ddc73fd4a5a0b6c28667f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7046b57d5400fddbdf25", @ANYRES32=0x0, @ANYBLOB="2010000000000400140003007665"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @value=0x1}) r9 = add_key$user(&(0x7f0000000080), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000200)='\x00', 0x1, 0xfffffffffffffffe) r10 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r9, r10, r9}, &(0x7f00000000c0)=""/67, 0x43, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) recvmmsg$unix(r6, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/218, 0xda}, {&(0x7f0000000040)=""/134, 0x86}, {&(0x7f00000003c0)=""/179, 0xb3}, {&(0x7f0000000a40)=""/146, 0x92}, {&(0x7f0000000000)=""/63, 0x3f}], 0x6}}], 0x1, 0x20, 0x0) r11 = socket(0x1d, 0x2, 0x6) r12 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r12, 0x400442c8, &(0x7f0000000540)=ANY=[]) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r11, &(0x7f0000000380)={0x1d, r13, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) sendmsg$IPSET_CMD_DESTROY(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x30084895) 148.25016ms ago: executing program 3 (id=358): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x4000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r7 = accept$alg(r6, 0x0, 0x0) sendmsg$alg(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) write$binfmt_script(r7, &(0x7f0000000600), 0xfec8) recvmmsg(r7, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000000)=""/54, 0x36}, {&(0x7f0000000440)=""/123, 0xff32}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000dc0)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f0000000100)={0x0, &(0x7f0000000180)}, 0x10) 140.230344ms ago: executing program 2 (id=359): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000440)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c6e66732c73686f72746e616d653d77696e6e742c726f6469722c696f636861727365743d6b6f69382d72752c73686f72746e616d653d6d697865642c757466383d302c756e695f786c6174653d312c756e695f786c6174653d312c006a4fcfcc9fc5ea902e1a6384d405e843e1dfa18259eaaba553a63617a0f84f2e66f4a8121e2cea67640f61a98cef24cdbc0121ddb0212c7365c895e70775f8c82357782f45acff678373e50747f0dbd34a6c51a45f248402fd4340c0024ca0ee5de3af9233d9e31dd6f105e2696137379613fb63ef2a91ccf785af00684cfa440b01bda2cbcd1b326a0ee91991ebfbd00ec2a75ac8d59d1e7793dfb73a16dd3b166bc6a158528f"], 0x1, 0x26c, &(0x7f0000000840)="$eJzs3U9rU1kYB+A3bTpJC0OyGCgzDMwdZjOr0HaYfcrQgWECipKFriw2RWlqoYWCLtruit9Bv4Iu3QouxK1fQASpghvrqgshEm//JDWJjZpG7PNs+nLu++Ock17upYueXPl1eWlhZW1xd3cn8vlMZMtRjr1MFGMkRiO1FQDA92Sv0Yg3jdSw1wIAnA7vfwA4e3q9/zNbh2PnT39lAMCgfNHf/yMDWRIAMGAXL13+f7ZSmbuQJPmI5e316no1/Zlen12M61GPWkxFId5FNA6l9b//VeamkqaXxcgvb46k+c316mh7fjoKUeycn05SUW3mDvJjMbGffzYRtZiJQvzUOT/TMf9D/PlHy/ylKMTTq7ES9ViIZjbN5yJiYzpJ/jlXOZbPfegDAAAAAAAAAAAAAAAAAAAAAIBBKCWHiu3n36Tn95RK3a6n+dbzgcZ7nQ/U2Dx2vk42fskOd+8AAAAAAAAAAAAAAAAAAADwrVi7eWtpvl6vrfYqbjy592gnlwY+2dy7yOzP219qu2fP+Ml2caz48fcXdzpdykWu38/n84qxiGgdSfanfPjbACf9WsXjnWs//7U2+Xe3nsi2jtxubrWtp8uNlB3UB/66ENG1J9/3Ddla3D8oym8/6jm4lWqr48P+xU3eLc8/2Hj+6qSpHg+NxuggHkUAAAAAAAAAAAAAAAAAAHDmHf3T77BXAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADDc/T9//0WuWgbyXdt3hr2HgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4H0AAAD//7qXlSU=") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000800000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, &(0x7f0000000140)=0x7, 0x4) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, 0x0, &(0x7f0000000040)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00'], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'gretap0\x00', 0x0, 0x20, 0x8000, 0xfa51, 0x71, {{0x14, 0x4, 0x2, 0x2, 0x50, 0x66, 0x0, 0x4, 0x4, 0x0, @loopback, @broadcast, {[@ssrr={0x89, 0x17, 0xd7, [@broadcast, @empty, @multicast1, @broadcast, @broadcast]}, @timestamp={0x44, 0x8, 0xc1, 0x0, 0x7, [0x6]}, @lsrr={0x83, 0x1b, 0x49, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast1, @multicast2, @rand_addr=0x64010101]}]}}}}}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000800)={0xfffffff7, 0xdd, {}, {0xee01}, 0xd, 0xfffffffffffffffb}) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x38, &(0x7f0000000340)={&(0x7f0000000580)=@report={0x0, 0x20, 0x400, 0x70bd28, 0x25dfdbfc, {0xff, {@in=@broadcast, @in6=@mcast1, 0x4e23, 0x3, 0x4e23, 0xfc90, 0xa, 0x80, 0x0, 0x32, r7, r8}}, [@replay_thresh={0x0, 0xb, 0x3}, @proto={0x0, 0x19, 0xff}, @iptfs_init_delay={0x0, 0x27, 0x31f2}, @srcaddr={0x0, 0xd, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @iptfs_init_delay={0x0, 0x27, 0x1}]}, 0xf8}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {}, {}, {}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r9, &(0x7f0000000700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x18, r1, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4040}, 0x800) r10 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000b40), 0x7fffffffffffffff, 0x2) r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r11, 0x541b, 0x0) r12 = fsmount(r10, 0x0, 0x0) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r13, 0x29, 0x38, 0x0, 0x64) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r3, r12, 0x1, 0x0, @void}, 0x10) sendto$inet6(r2, &(0x7f0000000080)="b1", 0xffe0, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000029000000180001801400020073797a5f74756e"], 0x2c}}, 0x0) 0s ago: executing program 2 (id=360): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000007000000040000000500000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$NILFS_IOCTL_GET_CPSTAT(r0, 0x80186e83, &(0x7f0000000080)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x20800, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0xac1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000001640)=0x8, 0x4) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) ioctl$TCSBRKP(r1, 0x5425, 0x2000000) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x48c}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$UFFDIO_MOVE(r4, 0xc028aa05, 0xfffffffffffffffe) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) landlock_create_ruleset(&(0x7f0000000000)={0xc, 0x0, 0x1, 0x200, 0x4, 0x2}, 0x30, 0x3) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x38, r5, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4004800) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) kernel console output (not intermixed with test programs): 847][ T4716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.289999][ T4716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.296784][ T4716] team0: Port device team_slave_0 added [ 30.297530][ T4716] team0: Port device team_slave_1 added [ 30.309401][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.311054][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.312442][ T4710] bridge_slave_0: entered allmulticast mode [ 30.314230][ T4710] bridge_slave_0: entered promiscuous mode [ 30.318695][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.320057][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.321454][ T4710] bridge_slave_1: entered allmulticast mode [ 30.323201][ T4710] bridge_slave_1: entered promiscuous mode [ 30.336467][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.336497][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.336510][ T4712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.337392][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.337400][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.337412][ T4712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.348440][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.349428][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.353688][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.353699][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.353710][ T4716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.365582][ T4721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.366674][ T4721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.367996][ T4710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.368262][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.368269][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.368282][ T4716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.371222][ T4711] team0: Port device team_slave_0 added [ 30.372064][ T4711] team0: Port device team_slave_1 added [ 30.377968][ T4712] hsr_slave_0: entered promiscuous mode [ 30.378336][ T4712] hsr_slave_1: entered promiscuous mode [ 30.384013][ T4710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.401445][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.401473][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.401485][ T4711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.402145][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.402152][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.402164][ T4711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.405771][ T4721] team0: Port device team_slave_0 added [ 30.409775][ T4710] team0: Port device team_slave_0 added [ 30.416926][ T4716] hsr_slave_0: entered promiscuous mode [ 30.417267][ T4716] hsr_slave_1: entered promiscuous mode [ 30.417475][ T4716] debugfs: 'hsr0' already exists in 'hsr' [ 30.417523][ T4716] Cannot create hsr debugfs directory [ 30.421484][ T4721] team0: Port device team_slave_1 added [ 30.424932][ T4710] team0: Port device team_slave_1 added [ 30.448024][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.448055][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.448082][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.457447][ T4721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.458853][ T4721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.462936][ T4721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.463573][ T4721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.463580][ T4721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.463593][ T4721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.469662][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.469672][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.469684][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.477075][ T4711] hsr_slave_0: entered promiscuous mode [ 30.477401][ T4711] hsr_slave_1: entered promiscuous mode [ 30.477602][ T4711] debugfs: 'hsr0' already exists in 'hsr' [ 30.477612][ T4711] Cannot create hsr debugfs directory [ 30.498921][ T4721] hsr_slave_0: entered promiscuous mode [ 30.499236][ T4721] hsr_slave_1: entered promiscuous mode [ 30.499420][ T4721] debugfs: 'hsr0' already exists in 'hsr' [ 30.499430][ T4721] Cannot create hsr debugfs directory [ 30.501189][ T4710] hsr_slave_0: entered promiscuous mode [ 30.501487][ T4710] hsr_slave_1: entered promiscuous mode [ 30.501695][ T4710] debugfs: 'hsr0' already exists in 'hsr' [ 30.501704][ T4710] Cannot create hsr debugfs directory [ 30.624781][ T4712] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.627801][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.628162][ T4712] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.630158][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.633661][ T4712] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.636462][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.639411][ T4712] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.641822][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.656166][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.656220][ T4712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.656377][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.656415][ T4712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.658163][ T4716] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.660398][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.660700][ T4716] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.661491][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.673403][ T4716] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.675795][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.676694][ T4716] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.678146][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.688632][ T4711] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.690498][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.691445][ T4711] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.693298][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.695198][ T4711] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.697523][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.699620][ T4711] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.701986][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.710941][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.710994][ T4716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.711094][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.711131][ T4716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.726720][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.726769][ T4711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.726841][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.726869][ T4711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.743827][ T4710] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.744907][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.745214][ T4710] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.746004][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.756257][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.758936][ T4710] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.761517][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.769218][ T4712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.771597][ T149] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.774921][ T149] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.776624][ T149] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.778205][ T149] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.780454][ T149] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.782125][ T149] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.789871][ T4710] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.792228][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.807524][ T4711] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.811576][ T4721] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.814016][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.815635][ T4721] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.818074][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.818461][ T4721] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.820818][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.823276][ T149] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.823323][ T149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.824253][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.824276][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.830170][ T4712] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.833923][ T4721] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.836086][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.841463][ T149] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.841513][ T149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.844625][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.844666][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.857271][ T4716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.864714][ T4711] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.865741][ T4711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.875152][ T4716] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.893536][ T4712] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.895502][ T4712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.920935][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.927167][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.927218][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.935396][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.935448][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.945919][ T4721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.959122][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.963648][ T4721] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.982276][ T593] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.982329][ T593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.982707][ T593] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.982726][ T593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.991573][ T593] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.991621][ T593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.012387][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.012445][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.020441][ T4721] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.028832][ T4710] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.028869][ T4710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.048860][ T4716] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.071313][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.119114][ T4711] veth0_vlan: entered promiscuous mode [ 31.121450][ T4711] veth1_vlan: entered promiscuous mode [ 31.147331][ T4711] veth0_macvtap: entered promiscuous mode [ 31.154057][ T4712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.158064][ T4711] veth1_macvtap: entered promiscuous mode [ 31.185932][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.189114][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.207583][ T40] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.207783][ T40] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.207940][ T40] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.208045][ T40] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.237454][ T4712] veth0_vlan: entered promiscuous mode [ 31.242003][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.259961][ T4712] veth1_vlan: entered promiscuous mode [ 31.275331][ T4710] veth0_vlan: entered promiscuous mode [ 31.279317][ T4721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.298387][ T4710] veth1_vlan: entered promiscuous mode [ 31.308542][ T4712] veth0_macvtap: entered promiscuous mode [ 31.310157][ T4712] veth1_macvtap: entered promiscuous mode [ 31.312206][ T4716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.316014][ T703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.316042][ T703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.324892][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.328791][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.369824][ T4716] veth0_vlan: entered promiscuous mode [ 31.385838][ T4716] veth1_vlan: entered promiscuous mode [ 31.385851][ T703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.385874][ T703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.390620][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.390660][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.411352][ T1463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.411383][ T1463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.424160][ T1463] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.424456][ T1463] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.424714][ T1463] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.424869][ T1463] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.427529][ T4716] veth0_macvtap: entered promiscuous mode [ 31.428637][ T4716] veth1_macvtap: entered promiscuous mode [ 31.431752][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.433197][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.438626][ T4710] veth0_macvtap: entered promiscuous mode [ 31.442317][ T4710] veth1_macvtap: entered promiscuous mode [ 31.449321][ T4711] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.455191][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.456449][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.457686][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.461660][ T4721] veth0_vlan: entered promiscuous mode [ 31.471539][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.498377][ T4721] veth1_vlan: entered promiscuous mode [ 31.515241][ T4896] loop1: detected capacity change from 0 to 2048 [ 31.517647][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.543810][ T39] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.547881][ T4896] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.570071][ T4721] veth0_macvtap: entered promiscuous mode [ 31.579588][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.579622][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.589691][ T4721] veth1_macvtap: entered promiscuous mode [ 31.613463][ T1463] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.613811][ T1463] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.613917][ T1463] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.614142][ T1463] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.630661][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.631798][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.637942][ T703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.637955][ T703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.656460][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.656492][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.678600][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.678629][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.933822][ T4713] Bluetooth: hci0: command tx timeout [ 31.934170][ T4713] Bluetooth: hci1: command tx timeout [ 31.934257][ T4713] Bluetooth: hci2: command tx timeout [ 31.934329][ T4713] Bluetooth: hci4: command tx timeout [ 31.934396][ T4713] Bluetooth: hci3: command tx timeout [ 31.957606][ T4906] fs-verity (loop1, inode 13): Error -28 writing Merkle tree block 1441 [ 31.957669][ T4906] fs-verity (loop1, inode 13): Error -28 building Merkle tree [ 31.966572][ T703] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.966790][ T703] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.966937][ T703] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.967053][ T703] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.984288][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.984313][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.018306][ T703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.018354][ T703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.061623][ T4912] CUSE: unknown device info "" [ 32.061654][ T4912] CUSE: unknown device info "" [ 32.061808][ T4912] CUSE: unknown device info "w" [ 32.061893][ T4912] CUSE: zero length info key specified [ 33.209088][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.218968][ T30] audit: type=1326 audit(33.190:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4916 comm="syz.3.8" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b9792a8 code=0x7fc00000 [ 33.219014][ T30] audit: type=1326 audit(33.190:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4916 comm="syz.3.8" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=26 compat=0 ip=0xffff8b9792a8 code=0x7fc00000 [ 33.219035][ T30] audit: type=1326 audit(33.190:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4916 comm="syz.3.8" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b9792a8 code=0x7fc00000 [ 33.219055][ T30] audit: type=1326 audit(33.190:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4916 comm="syz.3.8" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b9792a8 code=0x7fc00000 [ 33.219073][ T30] audit: type=1326 audit(33.190:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4916 comm="syz.3.8" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b9792a8 code=0x7fc00000 [ 33.219092][ T30] audit: type=1326 audit(33.190:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4916 comm="syz.3.8" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b9792a8 code=0x7fc00000 [ 33.219109][ T30] audit: type=1326 audit(33.190:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4916 comm="syz.3.8" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b9792a8 code=0x7fc00000 [ 33.219126][ T30] audit: type=1326 audit(33.190:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4916 comm="syz.3.8" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b9792a8 code=0x7fc00000 [ 33.219142][ T30] audit: type=1326 audit(33.190:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4916 comm="syz.3.8" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b9792a8 code=0x7fc00000 [ 33.219159][ T30] audit: type=1326 audit(33.190:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4916 comm="syz.3.8" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b9792a8 code=0x7fc00000 [ 33.617756][ T4954] loop0: detected capacity change from 0 to 256 [ 33.629257][ T4954] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 33.755775][ T4970] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14'. [ 33.755814][ T4970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14'. [ 33.771103][ T4964] netlink: 36 bytes leftover after parsing attributes in process `syz.1.18'. [ 33.805027][ T4948] netlink: 60 bytes leftover after parsing attributes in process `syz.2.14'. [ 33.810605][ T4954] pim6reg: entered allmulticast mode [ 33.816801][ T4956] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14'. [ 33.843482][ T4974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18'. [ 33.849712][ T40] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 33.900528][ T4974] team0: Port device team_slave_0 removed [ 33.951717][ T4988] tipc: Started in network mode [ 33.953026][ T4988] tipc: Node identity d28d70b6d8a6, cluster identity 4711 [ 33.954417][ T4988] tipc: Enabled bearer , priority 0 [ 33.955622][ T4988] syzkaller0: entered promiscuous mode [ 33.955635][ T4988] syzkaller0: entered allmulticast mode [ 33.963963][ T4988] tipc: Resetting bearer [ 33.978232][ T4987] tipc: Resetting bearer [ 33.982028][ T4987] tipc: Disabling bearer [ 34.012769][ T4727] Bluetooth: hci3: command tx timeout [ 34.012794][ T4713] Bluetooth: hci4: command tx timeout [ 34.012809][ T4727] Bluetooth: hci2: command tx timeout [ 34.012822][ T4713] Bluetooth: hci1: command tx timeout [ 34.012843][ T4727] Bluetooth: hci0: command tx timeout [ 34.042471][ T4993] loop4: detected capacity change from 0 to 512 [ 34.049196][ T4993] EXT4-fs (loop4): 1 truncate cleaned up [ 34.051426][ T4993] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.067653][ T4721] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.317571][ T5007] netlink: 240 bytes leftover after parsing attributes in process `syz.4.26'. [ 34.510416][ T5010] loop2: detected capacity change from 0 to 256 [ 34.738801][ T5015] netlink: 12 bytes leftover after parsing attributes in process `syz.3.28'. [ 34.762107][ T5017] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 34.765321][ T5017] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 34.959016][ T5023] loop0: detected capacity change from 0 to 128 [ 34.960959][ T5023] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 34.965232][ T5023] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 34.994567][ T5007] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 34.994808][ T5007] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 34.997933][ T5007] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 34.998706][ T5007] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 34.998732][ T5007] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 35.001059][ T5007] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 35.001451][ T5007] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 35.001475][ T5007] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 35.002072][ T5007] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 35.002471][ T5007] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 35.002487][ T5007] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 35.006261][ T5007] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 35.008517][ T5007] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 35.008537][ T5007] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 35.017435][ T5007] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 35.139408][ T1463] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 35.146669][ T5028] mmap: syz.4.31 (5028) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 35.148764][ T5028] loop4: detected capacity change from 0 to 512 [ 35.149068][ T5028] ======================================================= [ 35.149068][ T5028] WARNING: The mand mount option has been deprecated and [ 35.149068][ T5028] and is ignored by this kernel. Remove the mand [ 35.149068][ T5028] option from the mount to silence this warning. [ 35.149068][ T5028] ======================================================= [ 35.173241][ T5030] Injecting memory failure for pfn 0x11f7f7 at process virtual address 0x20000000 [ 35.180551][ T5030] Memory failure: 0x11f7f7: Sending SIGBUS to syz.0.32:5030 due to hardware memory corruption [ 35.183391][ T5030] Memory failure: 0x11f7f7: recovery action for dirty LRU page: Recovered [ 35.185414][ T5030] Injecting memory failure for pfn 0x219070 at process virtual address 0x20001000 [ 35.187364][ T5030] Memory failure: 0x219070: unhandlable page. [ 35.188828][ T5030] Memory failure: 0x219070: recovery action for get hwpoison page: Ignored [ 35.201043][ T5028] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.209033][ T5028] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 35.243237][ T4721] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 35.251698][ T4721] EXT4-fs (loop4): Remounting filesystem read-only [ 35.336612][ T5057] capability: warning: `syz.1.35' uses deprecated v2 capabilities in a way that may be insecure [ 35.371447][ T5060] netlink: 32 bytes leftover after parsing attributes in process `syz.1.37'. [ 35.501896][ T5069] process 'syz.1.41' launched '' with NULL argv: empty string added [ 35.522229][ T5073] erspan0: entered promiscuous mode [ 35.523327][ T5073] macvlan2: entered promiscuous mode [ 35.524846][ T5073] erspan0: left promiscuous mode [ 35.572326][ T5075] GUP no longer grows the stack in syz.1.43 (5075): 20004000-2000a000 (20002000) [ 35.572365][ T5075] CPU: 0 UID: 0 PID: 5075 Comm: syz.1.43 Not tainted syzkaller #0 PREEMPT [ 35.572381][ T5075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 35.572388][ T5075] Call trace: [ 35.572391][ T5075] show_stack+0x2c/0x3c (C) [ 35.572414][ T5075] __dump_stack+0x30/0x40 [ 35.572427][ T5075] dump_stack_lvl+0xd8/0x12c [ 35.572439][ T5075] dump_stack+0x1c/0x28 [ 35.572451][ T5075] gup_vma_lookup+0x1ac/0x1cc [ 35.572462][ T5075] __get_user_pages+0x2a0/0x15b8 [ 35.572473][ T5075] get_user_pages_remote+0x278/0x83c [ 35.572483][ T5075] __access_remote_vm+0x1d8/0x68c [ 35.572492][ T5075] access_remote_vm+0x48/0x60 [ 35.572501][ T5075] proc_pid_cmdline_read+0x4cc/0xa14 [ 35.572513][ T5075] do_loop_readv_writev+0x24c/0x3dc [ 35.572523][ T5075] vfs_readv+0x258/0x520 [ 35.572532][ T5075] do_preadv+0x11c/0x224 [ 35.572540][ T5075] __arm64_sys_preadv+0xac/0xc4 [ 35.572548][ T5075] invoke_syscall+0x98/0x244 [ 35.572560][ T5075] el0_svc_common+0xec/0x23c [ 35.572572][ T5075] do_el0_svc+0x4c/0x5c [ 35.572584][ T5075] el0_svc+0x64/0x260 [ 35.572595][ T5075] el0t_64_sync_handler+0x44/0x104 [ 35.572605][ T5075] el0t_64_sync+0x198/0x19c [ 35.674417][ T5084] loop3: detected capacity change from 0 to 128 [ 35.676162][ T5084] vfat: Bad value for 'shortname' [ 35.690329][ T5086] batman_adv: batadv0: Adding interface: veth0 [ 35.690358][ T5086] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.690592][ T5086] batman_adv: batadv0: Interface activated: veth0 [ 35.712372][ T5090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.712400][ T5090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.738924][ T5090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.738961][ T5090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.750742][ T5090] batman_adv: batadv0: Interface deactivated: veth0 [ 35.750776][ T5090] batman_adv: batadv0: Removing interface: veth0 [ 35.760710][ T5092] xt_HMARK: spi-set and port-set can't be combined [ 35.950175][ T5053] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.985004][ T4727] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 35.986608][ T4727] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 35.987386][ T4727] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 35.987752][ T4727] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 35.988476][ T4727] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 36.048929][ T5053] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.116141][ T4713] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 36.118596][ T4713] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 36.120014][ T5053] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.122930][ T4713] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 36.123327][ T4713] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 36.123540][ T4713] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 36.226345][ T5053] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.309033][ T5133] loop2: detected capacity change from 0 to 512 [ 36.309410][ T5133] EXT4-fs: Ignoring removed oldalloc option [ 36.320186][ T5133] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.55: Parent and EA inode have the same ino 15 [ 36.323993][ T5133] loop2: lost filesystem error report for type 5 error -117 [ 36.333096][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 36.333129][ C0] EXT4-fs (loop2): initial error at time 36: ext4_xattr_inode_iget:437 [ 36.333159][ C0] EXT4-fs (loop2): last error at time 36: ext4_xattr_inode_iget:437 [ 36.339433][ T5133] EXT4-fs (loop2): Remounting filesystem read-only [ 36.339535][ T5133] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -30) [ 36.339578][ T5133] EXT4-fs (loop2): 1 orphan inode deleted [ 36.340123][ T5133] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.382491][ T5094] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.384203][ T5094] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.385686][ T5094] bridge_slave_0: entered allmulticast mode [ 36.387527][ T5094] bridge_slave_0: entered promiscuous mode [ 36.403447][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.405407][ T5094] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.405837][ T5094] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.405942][ T5094] bridge_slave_1: entered allmulticast mode [ 36.407955][ T5094] bridge_slave_1: entered promiscuous mode [ 36.425421][ T5053] bridge_slave_1: left allmulticast mode [ 36.425459][ T5053] bridge_slave_1: left promiscuous mode [ 36.425882][ T5053] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.437843][ T5053] bridge_slave_0: left allmulticast mode [ 36.437875][ T5053] bridge_slave_0: left promiscuous mode [ 36.437983][ T5053] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.501467][ T4721] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.545956][ T5153] loop1: detected capacity change from 0 to 256 [ 36.569428][ T5053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 36.579626][ T5053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 36.585910][ T5053] bond0 (unregistering): Released all slaves [ 36.612293][ T5094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.613754][ T5110] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.613790][ T5110] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.614170][ T5110] bridge_slave_0: entered allmulticast mode [ 36.616127][ T5110] bridge_slave_0: entered promiscuous mode [ 36.619722][ T5110] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.619746][ T5110] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.619809][ T5110] bridge_slave_1: entered allmulticast mode [ 36.620262][ T5110] bridge_slave_1: entered promiscuous mode [ 36.641040][ T5094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.650690][ T5110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.665963][ T5110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.669725][ T5094] team0: Port device team_slave_0 added [ 36.688774][ T5094] team0: Port device team_slave_1 added [ 36.696236][ T5166] overlayfs: failed to decode file handle (len=6, type=0, flags=0, err=-22) [ 36.706228][ T5145] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 36.706333][ T5145] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 36.706389][ T5145] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 36.706406][ T5145] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 36.708114][ T5110] team0: Port device team_slave_0 added [ 36.709006][ T5110] team0: Port device team_slave_1 added [ 36.718187][ T5145] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 36.720483][ T5145] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 36.720912][ T5145] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 36.723237][ T5145] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 36.739384][ T4713] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 36.740951][ T4713] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 36.742485][ T4713] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 36.745284][ T5094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.746895][ T5094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.747020][ T5094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.748201][ T5094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.748217][ T5094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.748229][ T5094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.758632][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.758642][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.758656][ T5110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.759261][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.759268][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.759281][ T5110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.769582][ T5175] Zero length message leads to an empty skb [ 36.788186][ T4713] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 36.794129][ T4713] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 36.810753][ T5180] loop2: detected capacity change from 0 to 512 [ 36.812442][ T5180] EXT4-fs: Ignoring removed mblk_io_submit option [ 36.832102][ T5110] hsr_slave_0: entered promiscuous mode [ 36.835964][ T5110] hsr_slave_1: entered promiscuous mode [ 36.836221][ T5110] debugfs: 'hsr0' already exists in 'hsr' [ 36.836232][ T5110] Cannot create hsr debugfs directory [ 36.840637][ T5180] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.63: corrupted in-inode xattr: e_value size too large [ 36.840720][ T5180] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 36.841389][ T5180] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.63: couldn't read orphan inode 15 (err -117) [ 36.841413][ T5180] loop2: lost filesystem error report for type 5 error -117 [ 36.842286][ T5180] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.909303][ T5094] hsr_slave_0: entered promiscuous mode [ 36.911197][ T5094] hsr_slave_1: entered promiscuous mode [ 36.912699][ T5094] debugfs: 'hsr0' already exists in 'hsr' [ 36.913335][ T5094] Cannot create hsr debugfs directory [ 36.923570][ T4403] 8021q: adding VLAN 0 to HW filter on device eth0 [ 36.957345][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.981410][ T24] kernel read not supported for file /input/mice (pid: 24 comm: kworker/1:0) [ 36.996818][ T5053] hsr_slave_0: left promiscuous mode [ 36.998671][ T5053] hsr_slave_1: left promiscuous mode [ 37.000003][ T5053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.001512][ T5053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.003370][ T5053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.004706][ T5053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.009751][ T5053] veth1_macvtap: left promiscuous mode [ 37.010853][ T5053] veth0_macvtap: left promiscuous mode [ 37.011960][ T5053] veth1_vlan: left promiscuous mode [ 37.013046][ T5053] veth0_vlan: left promiscuous mode [ 37.026057][ T5195] loop2: detected capacity change from 0 to 512 [ 37.029351][ T5195] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.029401][ T5195] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 37.032233][ T5195] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.64: Invalid block bitmap block 0 in block_group 0 [ 37.032250][ T5195] loop2: lost filesystem error report for type 5 error -117 [ 37.032550][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 37.032563][ C1] EXT4-fs (loop2): initial error at time 37: ext4_read_block_bitmap_nowait:483 [ 37.032578][ C1] EXT4-fs (loop2): last error at time 37: ext4_read_block_bitmap_nowait:483 [ 37.033258][ T5195] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 37.033269][ T5195] loop2: lost filesystem error report for type 5 error -117 [ 37.034696][ T5195] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.64: attempt to clear invalid blocks 983261 len 1 [ 37.034725][ T5195] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 37.034988][ T5195] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm syz.2.64: Invalid inode table block 0 in block_group 0 [ 37.035005][ T5195] loop2: lost filesystem error report for type 5 error -117 [ 37.035292][ T5195] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 37.035303][ T5195] loop2: lost filesystem error report for type 5 error -117 [ 37.037013][ T5195] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 37.037028][ T5195] loop2: lost filesystem error report for type 5 error -117 [ 37.037540][ T5195] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm syz.2.64: Invalid inode table block 0 in block_group 0 [ 37.037558][ T5195] loop2: lost filesystem error report for type 5 error -117 [ 37.038217][ T5195] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 37.038238][ T5195] loop2: lost filesystem error report for type 5 error -117 [ 37.038505][ T5195] EXT4-fs error (device loop2): ext4_truncate:4691: inode #11: comm syz.2.64: mark_inode_dirty error [ 37.038525][ T5195] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 37.038667][ T5195] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 37.038677][ T5195] loop2: lost filesystem error report for type 5 error -117 [ 37.038915][ T5195] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm syz.2.64: Invalid inode table block 0 in block_group 0 [ 37.039208][ T5195] EXT4-fs (loop2): 1 truncate cleaned up [ 37.040229][ T5195] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.154816][ T5053] team0 (unregistering): Port device team_slave_1 removed [ 37.160519][ T5053] team0 (unregistering): Port device team_slave_0 removed [ 37.257377][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.470800][ T4403] 8021q: adding VLAN 0 to HW filter on device eth1 [ 37.477169][ T5228] netlink: 'syz.2.67': attribute type 1 has an invalid length. [ 37.528207][ T5236] netlink: 28 bytes leftover after parsing attributes in process `syz.1.69'. [ 37.536934][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.537076][ T5163] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.537158][ T5163] bridge_slave_0: entered allmulticast mode [ 37.541796][ T5163] bridge_slave_0: entered promiscuous mode [ 37.546246][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.547587][ T5163] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.549567][ T5163] bridge_slave_1: entered allmulticast mode [ 37.554804][ T5163] bridge_slave_1: entered promiscuous mode [ 37.557099][ T5228] veth0_virt_wifi: entered promiscuous mode [ 37.582095][ T5163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.595517][ T5163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.611869][ T5247] tipc: Started in network mode [ 37.614691][ T5247] tipc: Node identity 2007ff, cluster identity 4711 [ 37.616063][ T5247] tipc: Node number set to 2099199 [ 37.639570][ T5246] loop1: detected capacity change from 0 to 128 [ 37.646085][ T5163] team0: Port device team_slave_0 added [ 37.656823][ T5163] team0: Port device team_slave_1 added [ 37.695889][ T5053] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.712190][ T5163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.712223][ T5163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.712247][ T5163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.712915][ T5163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.712925][ T5163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.712937][ T5163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.755236][ T5163] hsr_slave_0: entered promiscuous mode [ 37.758234][ T5163] hsr_slave_1: entered promiscuous mode [ 37.759572][ T5163] debugfs: 'hsr0' already exists in 'hsr' [ 37.759608][ T5163] Cannot create hsr debugfs directory [ 37.789479][ T5053] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.835556][ T5271] binder: BINDER_SET_CONTEXT_MGR already set [ 37.835586][ T5271] binder: 5261:5271 ioctl 4018620d 200000c0 returned -16 [ 37.835634][ T5271] binder: BINDER_SET_CONTEXT_MGR already set [ 37.835644][ T5271] binder: 5261:5271 ioctl 4018620d 200000c0 returned -16 [ 37.835684][ T5271] binder: BINDER_SET_CONTEXT_MGR already set [ 37.835694][ T5271] binder: 5261:5271 ioctl 4018620d 200000c0 returned -16 [ 37.835730][ T5271] binder: BINDER_SET_CONTEXT_MGR already set [ 37.835739][ T5271] binder: 5261:5271 ioctl 4018620d 200000c0 returned -16 [ 37.835767][ T5271] binder: BINDER_SET_CONTEXT_MGR already set [ 37.835774][ T5271] binder: 5261:5271 ioctl 4018620d 200000c0 returned -16 [ 37.835801][ T5271] binder: BINDER_SET_CONTEXT_MGR already set [ 37.835808][ T5271] binder: 5261:5271 ioctl 4018620d 200000c0 returned -16 [ 37.835840][ T5271] binder: BINDER_SET_CONTEXT_MGR already set [ 37.835846][ T5271] binder: 5261:5271 ioctl 4018620d 200000c0 returned -16 [ 37.835873][ T5271] binder: BINDER_SET_CONTEXT_MGR already set [ 37.835880][ T5271] binder: 5261:5271 ioctl 4018620d 200000c0 returned -16 [ 37.835906][ T5271] binder: BINDER_SET_CONTEXT_MGR already set [ 37.835913][ T5271] binder: 5261:5271 ioctl 4018620d 200000c0 returned -16 [ 37.835939][ T5271] binder: BINDER_SET_CONTEXT_MGR already set [ 37.835945][ T5271] binder: 5261:5271 ioctl 4018620d 200000c0 returned -16 [ 37.835976][ T5271] binder: BINDER_SET_CONTEXT_MGR already set [ 37.835989][ T5271] binder: 5261:5271 ioctl 4018620d 200000c0 returned -16 [ 37.836021][ T5271] binder: BINDER_SET_CONTEXT_MGR already set [ 37.836030][ T5271] binder: 5261:5271 ioctl 4018620d 200000c0 returned -16 [ 37.836060][ T5271] binder: BINDER_SET_CONTEXT_MGR already set [ 37.836067][ T5271] binder: 5261:5271 ioctl 4018620d 200000c0 returned -16 [ 37.836093][ T5271] binder: BINDER_SET_CONTEXT_MGR already set [ 37.836100][ T5271] binder: 5261:5271 ioctl 4018620d 200000c0 returned -16 [ 37.836130][ T5271] binder: BINDER_SET_CONTEXT_MGR already set [ 37.836137][ T5271] binder: 5261:5271 ioctl 4018620d 200000c0 returned -16 [ 37.836163][ T5271] binder: BINDER_SET_CONTEXT_MGR already set [ 37.836169][ T5271] binder: 5261:5271 ioctl 4018620d 200000c0 returned -16 [ 37.836195][ T5271] binder: BINDER_SET_CONTEXT_MGR already set [ 37.836201][ T5271] binder: 5261:5271 ioctl 4018620d 200000c0 returned -16 [ 37.836227][ T5271] binder: BINDER_SET_CONTEXT_MGR already set [ 37.836233][ T5271] binder: 5261:5271 ioctl 4018620d 200000c0 returned -16 [ 37.836263][ T5271] binder: BINDER_SET_CONTEXT_MGR already set [ 37.836270][ T5271] binder: 5261:5271 ioctl 4018620d 200000c0 returned -16 [ 37.836296][ T5271] binder: BINDER_SET_CONTEXT_MGR already set [ 37.836303][ T5271] binder: 5261:5271 ioctl 4018620d 200000c0 returned -16 [ 37.836328][ T5271] binder: BINDER_SET_CONTEXT_MGR already set [ 37.836335][ T5271] binder: 5261:5271 ioctl 4018620d 200000c0 returned -16 [ 37.836360][ T5271] binder: BINDER_SET_CONTEXT_MGR already set [ 37.836367][ T5271] binder: 5261:5271 ioctl 4018620d 200000c0 returned -16 [ 37.836398][ T5271] binder: BINDER_SET_CONTEXT_MGR already set [ 37.836404][ T5271] binder: 5261:5271 ioctl 4018620d 200000c0 returned -16 [ 37.836430][ T5271] binder: BINDER_SET_CONTEXT_MGR already set [ 37.836436][ T5271] binder: 5261:5271 ioctl 4018620d 200000c0 returned -16 [ 37.836462][ T5271] binder: BINDER_SET_CONTEXT_MGR already set [ 37.836468][ T5271] binder: 5261:5271 ioctl 4018620d 200000c0 returned -16 [ 37.836494][ T5271] binder: BINDER_SET_CONTEXT_MGR already set [ 37.836500][ T5271] binder: 5261:5271 ioctl 4018620d 200000c0 returned -16 [ 37.836530][ T5271] binder: BINDER_SET_CONTEXT_MGR already set [ 37.836537][ T5271] binder: 5261:5271 ioctl 4018620d 200000c0 returned -16 [ 37.836562][ T5271] binder: BINDER_SET_CONTEXT_MGR already set [ 37.836569][ T5271] binder: 5261:5271 ioctl 4018620d 200000c0 returned -16 [ 37.836594][ T5271] binder: BINDER_SET_CONTEXT_MGR already set [ 37.836601][ T5271] binder: 5261:5271 ioctl 4018620d 200000c0 returned -16 [ 37.836627][ T5271] binder: BINDER_SET_CONTEXT_MGR already set [ 37.836634][ T5271] binder: 5261:5271 ioctl 4018620d 200000c0 returned -16 [ 37.836664][ T5271] binder: BINDER_SET_CONTEXT_MGR already set [ 37.836671][ T5271] binder: 5261:5271 ioctl 4018620d 200000c0 returned -16 [ 37.836697][ T5271] binder: BINDER_SET_CONTEXT_MGR already set [ 37.836703][ T5271] binder: 5261:5271 ioctl 4018620d 200000c0 returned -16 [ 37.843106][ T5271] binder: tried to use weak ref as strong ref [ 37.843117][ T5271] binder: 5261:5271 Acquire 1 refcount change on invalid ref 0 ret -22 [ 37.844771][ T5271] binder: 5261:5271 got transaction to invalid handle, 1 [ 37.844805][ T5271] binder: 5261:5271 cannot find target node [ 37.844819][ T5271] binder: 5261:5271 transaction async to 0:0 failed 3/29201/-22, code 0 size 0-0 line 3252 [ 37.844930][ T5263] binder: 5261:5263 got transaction to invalid handle, 1 [ 37.844938][ T5263] binder: 5261:5263 cannot find target node [ 37.844946][ T5263] binder: 5261:5263 transaction call to 0:0 failed 5/29201/-22, code 0 size 0-0 line 3252 [ 37.852000][ T5263] binder: 5261:5263 ioctl 89f3 200002c0 returned -22 [ 37.873191][ T5053] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.917380][ T5094] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.921262][ T5094] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 37.921707][ T5094] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.925987][ T5094] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.926317][ T5094] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.930416][ T5094] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.931424][ T5094] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.935514][ T5094] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.960598][ T5053] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.980562][ T5110] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.989773][ T5094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.998703][ T5094] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.000694][ T5037] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.000747][ T5037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.005553][ T5037] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.005603][ T5037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.075012][ T5110] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.140816][ T5110] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.167757][ T5094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.190922][ T5094] veth0_vlan: entered promiscuous mode [ 38.194379][ T5094] veth1_vlan: entered promiscuous mode [ 38.211515][ T5110] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.216488][ T5094] veth0_macvtap: entered promiscuous mode [ 38.218955][ T5094] veth1_macvtap: entered promiscuous mode [ 38.226659][ T5094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.229268][ T5094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.238973][ T4403] 8021q: adding VLAN 0 to HW filter on device eth0 [ 38.268707][ T5045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.268738][ T5045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.281632][ T5054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.281666][ T5054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.283877][ T5054] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.284805][ T5054] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.284887][ T5054] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.284908][ T5054] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.333961][ T5053] bridge_slave_1: left allmulticast mode [ 38.334004][ T5053] bridge_slave_1: left promiscuous mode [ 38.334106][ T5053] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.339072][ T5053] bridge_slave_0: left allmulticast mode [ 38.341462][ T5053] bridge_slave_0: left promiscuous mode [ 38.342067][ T5053] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.357682][ T5328] loop3: detected capacity change from 0 to 128 [ 38.363716][ T5053] bridge_slave_1: left allmulticast mode [ 38.363748][ T5053] bridge_slave_1: left promiscuous mode [ 38.364682][ T5053] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.367252][ T5053] bridge_slave_0: left allmulticast mode [ 38.367273][ T5053] bridge_slave_0: left promiscuous mode [ 38.367344][ T5053] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.370465][ T5053] pim6reg: left allmulticast mode [ 38.536712][ T5334] ptrace attach of ""[5335] was attempted by "ci-upstream-gce-arm64/syz-executor exec"[5334] [ 38.734745][ T4905] binder: undelivered TRANSACTION_ERROR: 29201 [ 38.736266][ T4905] binder: undelivered TRANSACTION_ERROR: 29201 [ 38.752635][ T4713] Bluetooth: hci3: command 0x041b tx timeout [ 38.754228][ T4713] Bluetooth: hci1: command 0x041b tx timeout [ 38.754360][ T4713] Bluetooth: hci2: command 0x0419 tx timeout [ 38.754387][ T4713] Bluetooth: hci0: command 0x0419 tx timeout [ 38.765937][ T5053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.784655][ T5053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.793905][ T5053] bond0 (unregistering): Released all slaves [ 38.812707][ T4727] Bluetooth: hci4: command tx timeout [ 38.839867][ T5053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.851089][ T5053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.873559][ T5053] bond0 (unregistering): Released all slaves [ 38.877325][ T4403] 8021q: adding VLAN 0 to HW filter on device eth1 [ 38.900767][ T5110] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.903707][ T5110] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.914395][ T5110] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.916691][ T5110] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.919356][ T5110] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.923535][ T5110] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.923718][ T5163] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 38.925831][ T5163] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.926136][ T5163] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 38.930420][ T5163] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.931976][ T5163] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 38.937441][ T5163] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.939979][ T5110] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.946316][ T5110] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.949163][ T5053] tipc: Left network mode [ 38.952107][ T5163] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 38.956627][ T5163] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.038271][ T5110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.047004][ T5163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.052181][ T5110] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.086863][ T593] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.086909][ T593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.087846][ T593] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.087873][ T593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.119439][ T4403] 8021q: adding VLAN 0 to HW filter on device eth2 [ 39.123774][ T5163] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.129184][ T5045] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.129229][ T5045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.134796][ T5045] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.134852][ T5045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.149294][ T5163] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.151521][ T5163] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.349548][ T5163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.381072][ T4403] 8021q: adding VLAN 0 to HW filter on device eth3 [ 39.406014][ T5110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.444296][ T5053] hsr_slave_0: left promiscuous mode [ 39.445447][ T5053] hsr_slave_1: left promiscuous mode [ 39.445665][ T5053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.445676][ T5053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.446904][ T5053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.446914][ T5053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.452491][ T5053] hsr_slave_0: left promiscuous mode [ 39.453802][ T5053] hsr_slave_1: left promiscuous mode [ 39.454053][ T5053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.454063][ T5053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.455168][ T5053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.455178][ T5053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.462226][ T5053] veth1_macvtap: left promiscuous mode [ 39.462274][ T5053] veth0_macvtap: left promiscuous mode [ 39.462359][ T5053] veth1_vlan: left promiscuous mode [ 39.462391][ T5053] veth0_vlan: left promiscuous mode [ 39.464277][ T5053] veth1_macvtap: left promiscuous mode [ 39.464294][ T5053] veth0_macvtap: left promiscuous mode [ 39.464334][ T5053] veth1_vlan: left promiscuous mode [ 39.464395][ T5053] veth0_vlan: left promiscuous mode [ 39.588390][ T5053] team0 (unregistering): Port device team_slave_1 removed [ 39.592115][ T5053] team0 (unregistering): Port device team_slave_0 removed [ 39.701447][ T5053] team0 (unregistering): Port device team_slave_1 removed [ 39.705306][ T5053] team0 (unregistering): Port device team_slave_0 removed [ 39.747767][ T5110] veth0_vlan: entered promiscuous mode [ 39.755131][ T5110] veth1_vlan: entered promiscuous mode [ 39.778628][ T5110] veth0_macvtap: entered promiscuous mode [ 39.789730][ T5110] veth1_macvtap: entered promiscuous mode [ 39.802337][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.806211][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.808068][ T5163] veth0_vlan: entered promiscuous mode [ 39.820335][ T5163] veth1_vlan: entered promiscuous mode [ 39.843154][ T703] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.844046][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.844063][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.844078][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.854201][ T5163] veth0_macvtap: entered promiscuous mode [ 39.860342][ T5163] veth1_macvtap: entered promiscuous mode [ 39.866023][ T5054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.866048][ T5054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.874902][ T5163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.876014][ T5163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.880151][ T149] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.894270][ T5054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.894298][ T5054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.914535][ T5054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.914563][ T5054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.927862][ T703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.927894][ T703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.933426][ T5054] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.933595][ T5054] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.933692][ T5054] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.974785][ T5409] loop5: detected capacity change from 0 to 128 [ 39.986303][ T5409] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.026615][ T5163] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.813199][ T4727] Bluetooth: hci0: command 0x0419 tx timeout [ 40.813240][ T4727] Bluetooth: hci2: command 0x0419 tx timeout [ 40.813246][ T4713] Bluetooth: hci1: command 0x041b tx timeout [ 40.813271][ T4727] Bluetooth: hci3: command 0x041b tx timeout [ 40.892617][ T4727] Bluetooth: hci4: command tx timeout [ 42.892555][ T4727] Bluetooth: hci1: command 0x041b tx timeout [ 42.893596][ T4727] Bluetooth: hci0: command 0x0419 tx timeout [ 42.902673][ T4723] Bluetooth: hci3: command 0x041b tx timeout [ 42.902712][ T4723] Bluetooth: hci2: command 0x0419 tx timeout [ 42.972589][ T4723] Bluetooth: hci4: command tx timeout [ 44.973309][ T4727] Bluetooth: hci0: command 0x0419 tx timeout [ 44.973546][ T4727] Bluetooth: hci3: command 0x041b tx timeout [ 44.973564][ T4727] Bluetooth: hci1: command 0x041b tx timeout [ 44.973628][ T4723] Bluetooth: hci2: command 0x0419 tx timeout [ 45.053020][ T4713] Bluetooth: hci4: command tx timeout [ 47.052686][ T4713] Bluetooth: hci1: command 0x041b tx timeout [ 47.052726][ T4713] Bluetooth: hci3: command 0x041b tx timeout [ 49.133597][ T4713] Bluetooth: hci1: command 0x041b tx timeout [ 49.133648][ T4723] Bluetooth: hci3: command 0x041b tx timeout [ 64.493607][ T1597] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.493659][ T1597] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.511481][ T9] cfg80211: failed to load regulatory.db [ 116.255196][ T5506] loop0: detected capacity change from 0 to 512 [ 117.193155][ T5506] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.77: bg 0: block 184: padding at end of block bitmap is not set [ 117.196615][ T5506] fserror_report: 1 callbacks suppressed [ 117.197855][ T5506] loop0: lost filesystem error report for type 5 error -117 [ 117.202561][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 117.202590][ C0] EXT4-fs (loop0): initial error at time 117: ext4_validate_block_bitmap:441 [ 117.202618][ C0] EXT4-fs (loop0): last error at time 117: ext4_validate_block_bitmap:441 [ 117.209775][ T5506] EXT4-fs (loop0): Remounting filesystem read-only [ 117.211326][ T5506] EXT4-fs (loop0): 1 truncate cleaned up [ 117.216029][ T5506] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.221622][ T5506] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.297807][ T5516] netlink: 'syz.5.81': attribute type 1 has an invalid length. [ 117.299866][ T5516] __nla_validate_parse: 1 callbacks suppressed [ 117.299876][ T5516] netlink: 28 bytes leftover after parsing attributes in process `syz.5.81'. [ 117.299892][ T5516] ip6gre0: entered promiscuous mode [ 117.299901][ T5516] ip6gre0: entered allmulticast mode [ 117.685652][ T5524] loop2: detected capacity change from 0 to 512 [ 117.687386][ T5524] EXT4-fs: Ignoring removed nomblk_io_submit option [ 117.729550][ T149] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 117.732029][ T149] __quota_error: 6051 callbacks suppressed [ 117.733428][ T149] Quota error (device loop0): write_blk: dquota write failed [ 117.734809][ T149] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries [ 117.736951][ T149] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 117.738909][ T149] Quota error (device loop0): write_blk: dquota write failed [ 117.740590][ T149] Quota error (device loop0): free_dqentry: Can't move quota data block (5) to free list [ 117.742462][ T149] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 117.745161][ T5524] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 117.745170][ T5524] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8840c01c, mo2=0102] [ 117.745258][ T5524] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 117.745266][ T5524] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 117.745709][ T5524] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 117.757634][ T149] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 117.759875][ T149] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 117.816798][ T5528] ip_tables: iptables: counters copy to user failed while replacing table [ 117.853900][ T5532] loop0: detected capacity change from 0 to 256 [ 117.880052][ T5530] netlink: 'syz.5.84': attribute type 1 has an invalid length. [ 117.897737][ T5530] bridge1: entered promiscuous mode [ 117.908688][ T5513] Set syz1 is full, maxelem 65536 reached [ 117.961791][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.001615][ T5544] 9p: Bad value for 'wfdno' [ 118.062346][ T5550] loop2: detected capacity change from 0 to 1024 [ 118.069320][ T5550] EXT4-fs: Ignoring removed orlov option [ 118.069354][ T5550] EXT4-fs: Ignoring removed nobh option [ 118.071632][ T5550] EXT4-fs (loop2): blocks per group (131072) and clusters per group (8192) inconsistent [ 118.096979][ T5548] sock: sock_timestamping_bind_phc: sock not bind to device [ 118.098516][ T5548] sock: sock_timestamping_bind_phc: sock not bind to device [ 118.099925][ T5548] sock: sock_timestamping_bind_phc: sock not bind to device [ 118.101521][ T5548] sock: sock_timestamping_bind_phc: sock not bind to device [ 118.103278][ T5548] sock: sock_timestamping_bind_phc: sock not bind to device [ 118.104711][ T5548] sock: sock_timestamping_bind_phc: sock not bind to device [ 118.106118][ T5548] sock: sock_timestamping_bind_phc: sock not bind to device [ 118.107515][ T5548] sock: sock_timestamping_bind_phc: sock not bind to device [ 118.108913][ T5548] sock: sock_timestamping_bind_phc: sock not bind to device [ 118.110325][ T5548] sock: sock_timestamping_bind_phc: sock not bind to device [ 118.111716][ T5548] sock: sock_timestamping_bind_phc: sock not bind to device [ 118.113131][ T5548] sock: sock_timestamping_bind_phc: sock not bind to device [ 118.114516][ T5548] sock: sock_timestamping_bind_phc: sock not bind to device [ 118.115914][ T5548] sock: sock_timestamping_bind_phc: sock not bind to device [ 118.117308][ T5548] sock: sock_timestamping_bind_phc: sock not bind to device [ 118.118628][ T5548] sock: sock_timestamping_bind_phc: sock not bind to device [ 118.119939][ T5548] sock: sock_timestamping_bind_phc: sock not bind to device [ 118.121388][ T5548] sock: sock_timestamping_bind_phc: sock not bind to device [ 118.125639][ T5550] syzkaller0: entered promiscuous mode [ 118.125672][ T5550] syzkaller0: entered allmulticast mode [ 118.160297][ T5550] netlink: 16 bytes leftover after parsing attributes in process `syz.2.90'. [ 118.245529][ T5567] netlink: 8 bytes leftover after parsing attributes in process `syz.5.104'. [ 118.267931][ T5570] loop0: detected capacity change from 0 to 1024 [ 118.287852][ T5570] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 118.287931][ T5570] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 118.290414][ T5570] EXT4-fs error (device loop0): ext4_get_journal_inode:5900: inode #32: comm syz.0.93: iget: special inode unallocated [ 118.290439][ T5570] loop0: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 118.292543][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 118.292557][ C0] EXT4-fs (loop0): initial error at time 118: ext4_get_journal_inode:5900: inode 32 [ 118.292575][ C0] EXT4-fs (loop0): last error at time 118: ext4_get_journal_inode:5900: inode 32 [ 118.315906][ T5570] EXT4-fs (loop0): Remounting filesystem read-only [ 118.316004][ T5570] EXT4-fs (loop0): no journal found [ 118.316034][ T5570] EXT4-fs (loop0): can't get journal size [ 118.324386][ T5570] EXT4-fs (loop0): failed to initialize system zone (-117) [ 118.324476][ T5570] EXT4-fs (loop0): mount failed [ 118.331488][ T5577] loop5: detected capacity change from 0 to 512 [ 118.336414][ T5579] netlink: 'syz.2.97': attribute type 30 has an invalid length. [ 118.346359][ T5577] EXT4-fs: inline encryption not supported [ 118.355593][ T5577] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 118.478526][ T5582] netlink: 'syz.1.95': attribute type 1 has an invalid length. [ 118.523706][ T5582] netlink: 28 bytes leftover after parsing attributes in process `syz.1.95'. [ 118.523895][ T5582] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 118.523950][ T5582] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 118.705914][ T5577] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 118.705987][ T5577] EXT4-fs (loop5): 1 truncate cleaned up [ 118.706497][ T5577] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.056770][ T5610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.107'. [ 119.081150][ T5610] netlink: 68 bytes leftover after parsing attributes in process `syz.3.107'. [ 119.161250][ T5615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.107'. [ 119.161286][ T5615] netlink: 68 bytes leftover after parsing attributes in process `syz.3.107'. [ 119.161863][ T5611] trusted_key: encrypted_key: master key parameter 'trust000000000004093' is invalid [ 119.212495][ T5628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.110'. [ 119.218229][ T5629] netlink: 27 bytes leftover after parsing attributes in process `syz.3.110'. [ 119.230871][ T5163] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.246150][ T5628] loop3: detected capacity change from 0 to 1024 [ 119.248014][ T5628] ext4: Unknown parameter './file1' [ 119.307333][ T5641] nvme_fabrics: missing parameter 'nqn=%s' [ 119.575308][ T5656] fuse: Unknown parameter 'd' [ 119.577372][ T5656] Bluetooth: MGMT ver 1.23 [ 119.578259][ T5656] Bluetooth: hci0: unsupported parameter 5161 [ 119.578455][ T5656] Bluetooth: hci0: unsupported parameter 8192 [ 119.578469][ T5656] Bluetooth: hci0: unsupported parameter 5161 [ 119.578476][ T5656] Bluetooth: hci0: unsupported parameter 8192 [ 119.607170][ T5658] FAULT_INJECTION: forcing a failure. [ 119.607170][ T5658] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 119.609753][ T5658] CPU: 1 UID: 0 PID: 5658 Comm: syz.0.114 Not tainted syzkaller #0 PREEMPT [ 119.609767][ T5658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 119.609773][ T5658] Call trace: [ 119.609776][ T5658] show_stack+0x2c/0x3c (C) [ 119.609798][ T5658] __dump_stack+0x30/0x40 [ 119.609811][ T5658] dump_stack_lvl+0xd8/0x12c [ 119.609823][ T5658] dump_stack+0x1c/0x28 [ 119.609835][ T5658] should_fail_ex+0x41c/0x590 [ 119.609844][ T5658] should_fail+0x14/0x24 [ 119.609851][ T5658] should_fail_usercopy+0x20/0x30 [ 119.609859][ T5658] _inline_copy_from_user+0x3c/0x174 [ 119.609871][ T5658] do_seccomp+0x2f8/0xbfc [ 119.609880][ T5658] __arm64_sys_seccomp+0x84/0x98 [ 119.609890][ T5658] invoke_syscall+0x98/0x244 [ 119.609902][ T5658] el0_svc_common+0xec/0x23c [ 119.609913][ T5658] do_el0_svc+0x4c/0x5c [ 119.609925][ T5658] el0_svc+0x64/0x260 [ 119.609936][ T5658] el0t_64_sync_handler+0x44/0x104 [ 119.609946][ T5658] el0t_64_sync+0x198/0x19c [ 119.788601][ T5682] xt_CT: You must specify a L4 protocol and not use inversions on it [ 120.210158][ T5698] x_tables: unsorted underflow at hook 2 [ 120.220576][ T5702] loop1: detected capacity change from 0 to 512 [ 120.224429][ T5701] loop3: detected capacity change from 0 to 512 [ 120.225206][ T5701] EXT4-fs: Ignoring removed orlov option [ 120.229884][ T5702] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 120.237629][ T5701] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 120.244222][ T5701] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=2042c018, mo2=0002] [ 120.244267][ T5701] EXT4-fs (loop3): failed to initialize system zone (-117) [ 120.244337][ T5701] EXT4-fs (loop3): mount failed [ 120.248555][ T5702] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.274533][ T5702] EXT4-fs error (device loop1): ext4_get_first_dir_block:3537: inode #12: comm syz.1.127: Directory hole found for htree leaf block 0 [ 120.279732][ T5708] all (unregistering): Released all slaves [ 120.301770][ T5711] netlink: 'syz.2.128': attribute type 4 has an invalid length. [ 120.311976][ T5713] Driver unsupported XDP return value 0 on prog (id 55) dev N/A, expect packet loss! [ 120.326802][ T5717] netlink: 'syz.2.128': attribute type 4 has an invalid length. [ 120.348016][ T5720] fuse: Bad value for 'fd' [ 120.357993][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.432132][ T5732] loop2: detected capacity change from 0 to 4096 [ 120.437370][ T5732] EXT4-fs (loop2): Test dummy encryption mode enabled [ 120.440699][ T5724] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.445900][ T5732] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.454948][ T5732] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 120.467322][ T5733] warning: `syz.1.133' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 120.470380][ T5732] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 120.550297][ T5751] EXT4-fs (loop1): Test dummy encryption mode enabled [ 120.556299][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.573270][ T5751] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0022] [ 120.573332][ T5751] System zones: 1-2, 4-12, 8-8 [ 120.577050][ T5751] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.140: iget: bad i_size value: 38620345925642 [ 120.577088][ T5751] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 120.580150][ T5751] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.140: couldn't read orphan inode 15 (err -117) [ 120.580185][ T5751] loop1: lost filesystem error report for type 5 error -117 [ 120.584139][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 120.584153][ C1] EXT4-fs (loop1): initial error at time 120: ext4_orphan_get:1399: inode 15 [ 120.584169][ C1] EXT4-fs (loop1): last error at time 120: ext4_orphan_get:1404 [ 120.591420][ T5751] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.595220][ T5751] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.601199][ T5762] overlay: ./file0 is not a directory [ 120.639126][ T5762] vfat: Unknown parameter 'nnonumtail' [ 120.651911][ T5758] EXT4-fs: inline encryption not supported [ 120.656938][ T5758] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 120.656985][ T5758] EXT4-fs (loop3): Test dummy encryption mode enabled [ 120.660190][ T5758] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 120.660275][ T5758] System zones: 0-5 [ 120.671430][ T5758] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.690886][ T5758] netlink: 'syz.3.141': attribute type 2 has an invalid length. [ 120.762005][ T5779] gadgetfs: bound to dummy_udc driver [ 120.785997][ T5777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.790153][ T5783] EXT4-fs: inline encryption not supported [ 120.792823][ T5783] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 120.792858][ T5783] EXT4-fs (loop5): Test dummy encryption mode enabled [ 120.799872][ T5783] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 120.799955][ T5783] System zones: 0-5 [ 120.812500][ T5783] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.838124][ T4403] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 120.849730][ T5094] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.890708][ T5163] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.922174][ T5788] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.929177][ T5788] bond1: (slave ip6erspan0): making interface the new active one [ 120.930942][ T5788] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 120.936990][ T5788] input: syz1 as /devices/virtual/input/input3 [ 120.937053][ T5788] input: failed to attach handler leds to device input3, error: -6 [ 121.197082][ T5814] 9p: Bad value for 'rfdno' [ 121.385891][ T5820] : renamed from vlan0 (while UP) [ 121.401753][ T5823] set_capacity_and_notify: 6 callbacks suppressed [ 121.401801][ T5823] loop3: detected capacity change from 0 to 256 [ 121.404732][ T5823] vfat: Unknown parameter 'hash' [ 121.501065][ T5834] loop0: detected capacity change from 0 to 512 [ 121.503018][ T5834] EXT4-fs: Ignoring removed i_version option [ 121.504355][ T5834] EXT4-fs: Ignoring removed oldalloc option [ 121.516001][ T5834] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.541428][ T5834] FAULT_INJECTION: forcing a failure. [ 121.541428][ T5834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.541462][ T5834] CPU: 0 UID: 0 PID: 5834 Comm: syz.0.159 Not tainted syzkaller #0 PREEMPT [ 121.541476][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 121.541483][ T5834] Call trace: [ 121.541486][ T5834] show_stack+0x2c/0x3c (C) [ 121.541508][ T5834] __dump_stack+0x30/0x40 [ 121.541523][ T5834] dump_stack_lvl+0xd8/0x12c [ 121.541535][ T5834] dump_stack+0x1c/0x28 [ 121.541546][ T5834] should_fail_ex+0x41c/0x590 [ 121.541555][ T5834] should_fail+0x14/0x24 [ 121.541563][ T5834] should_fail_usercopy+0x20/0x30 [ 121.541571][ T5834] _inline_copy_from_user+0x3c/0x174 [ 121.541583][ T5834] kstrtouint_from_user+0xcc/0x174 [ 121.541592][ T5834] proc_fail_nth_write+0x9c/0x234 [ 121.541602][ T5834] vfs_write+0x2a4/0xa0c [ 121.541611][ T5834] ksys_pwrite64+0x118/0x1ac [ 121.541618][ T5834] __arm64_sys_pwrite64+0xa8/0xc0 [ 121.541627][ T5834] invoke_syscall+0x98/0x244 [ 121.541639][ T5834] el0_svc_common+0xec/0x23c [ 121.541650][ T5834] do_el0_svc+0x4c/0x5c [ 121.541662][ T5834] el0_svc+0x64/0x260 [ 121.541672][ T5834] el0t_64_sync_handler+0x44/0x104 [ 121.541683][ T5834] el0t_64_sync+0x198/0x19c [ 121.718967][ T5110] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.818928][ T5855] geneve2: entered promiscuous mode [ 121.833036][ T5045] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 49554 - 0 [ 121.833083][ T5045] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 49554 - 0 [ 121.833101][ T5045] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 49554 - 0 [ 121.833115][ T5045] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 49554 - 0 [ 121.924438][ T5880] loop3: detected capacity change from 0 to 256 [ 122.038313][ T5893] loop5: detected capacity change from 0 to 512 [ 122.040260][ T5893] EXT4-fs: Ignoring removed i_version option [ 122.041612][ T5893] EXT4-fs: Ignoring removed oldalloc option [ 122.059573][ T5893] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.217321][ T5163] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.330042][ T5918] __nla_validate_parse: 8 callbacks suppressed [ 122.330081][ T5918] netlink: 12 bytes leftover after parsing attributes in process `syz.5.179'. [ 122.330105][ T5918] netlink: 'syz.5.179': attribute type 11 has an invalid length. [ 122.340706][ T5918] netlink: 12 bytes leftover after parsing attributes in process `syz.5.179'. [ 122.342450][ T5918] netlink: 'syz.5.179': attribute type 11 has an invalid length. [ 122.354302][ T703] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.354406][ T703] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.354433][ T703] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.354448][ T703] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.406728][ T5920] loop0: detected capacity change from 0 to 512 [ 122.407639][ T5920] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 122.443784][ T5920] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.574950][ T5110] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.606158][ T5932] overlayfs: overlapping lowerdir path [ 122.646493][ T5937] loop5: detected capacity change from 0 to 256 [ 122.705746][ T5936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.187'. [ 122.723215][ T5936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.187'. [ 122.787497][ T5941] loop2: detected capacity change from 0 to 256 [ 122.789152][ T5941] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 122.791245][ T5941] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 122.854489][ T5952] netlink: 20 bytes leftover after parsing attributes in process `syz.5.191'. [ 122.854947][ T5952] netlink: 20 bytes leftover after parsing attributes in process `syz.5.191'. [ 122.855023][ T5952] netlink: 20 bytes leftover after parsing attributes in process `syz.5.191'. [ 122.855170][ T5952] netlink: 20 bytes leftover after parsing attributes in process `syz.5.191'. [ 122.855228][ T5952] netlink: 20 bytes leftover after parsing attributes in process `syz.5.191'. [ 122.855284][ T5952] netlink: 20 bytes leftover after parsing attributes in process `syz.5.191'. [ 122.888505][ T4723] Bluetooth: hci2: unexpected event for opcode 0x1004 [ 122.912474][ T5941] FAT-fs (loop2): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 122.913888][ T5941] FAT-fs (loop2): Filesystem has been set read-only [ 122.921680][ T5955] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 122.966433][ T5958] loop0: detected capacity change from 0 to 512 [ 122.985286][ T5958] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.989494][ T5958] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.193: corrupted xattr block 33: invalid header [ 122.993041][ T5958] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.193: corrupted xattr block 33: invalid header [ 122.999752][ T5958] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.193: corrupted xattr block 33: invalid header [ 123.074417][ T5110] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.272810][ T5979] futex_wake_op: syz.0.199 tries to shift op by 144; fix this program [ 123.471021][ T5993] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1852649220.116.0), cmd(131) [ 123.688275][ T6013] gretap0: entered promiscuous mode [ 123.688423][ T6013] macvlan2: entered allmulticast mode [ 123.688435][ T6013] gretap0: entered allmulticast mode [ 123.726399][ T6015] loop2: detected capacity change from 0 to 512 [ 123.739842][ T6015] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 123.739987][ T6015] EXT4-fs (loop2): orphan cleanup on readonly fs [ 123.740160][ T6015] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 123.740265][ T6015] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 123.741214][ T6015] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 123.750856][ T6015] EXT4-fs (loop2): 1 truncate cleaned up [ 123.751313][ T6015] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 123.775532][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.870609][ T6030] syzkaller0: entered promiscuous mode [ 123.870639][ T6030] syzkaller0: entered allmulticast mode [ 124.162128][ T6036] loop5: detected capacity change from 0 to 8 [ 124.165752][ T4312] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 124.177257][ T6036] SQUASHFS error: Unable to read directory block [631:26] [ 124.251408][ T6040] tmpfs: Bad value for 'mpol' [ 124.313951][ T4312] usb 1-1: Using ep0 maxpacket: 32 [ 124.319432][ T4312] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 124.322625][ T4312] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.325058][ T4312] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 124.330740][ T4312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.330766][ T4312] usb 1-1: Product: syz [ 124.330786][ T4312] usb 1-1: Manufacturer: syz [ 124.330799][ T4312] usb 1-1: SerialNumber: syz [ 124.344594][ T4312] usb 1-1: config 0 descriptor?? [ 124.408711][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.412021][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.415206][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.417569][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.419118][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.420639][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.424993][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.426636][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.428390][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.430763][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.432340][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.432346][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.432381][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.432386][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.432414][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.432418][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.432460][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.432465][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.432494][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.451960][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.454179][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.455666][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.457213][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.458714][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.460075][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.461350][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.463442][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.464776][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.464838][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.464843][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.464869][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.464873][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.464897][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.464900][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.464925][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.464929][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.464951][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.464954][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.464983][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.464987][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.465012][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.465016][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.465043][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.465046][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.465069][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.465073][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.465095][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.465098][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.465119][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.465122][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.465147][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.465151][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.465172][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.465175][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.465197][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.465200][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.465222][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.465225][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.465249][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.465252][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.465274][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.465277][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.465310][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.465313][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.465335][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.465338][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.465362][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.465365][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.465387][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.465390][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.465412][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.465415][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.465437][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.465440][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.465464][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.465468][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.465489][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.465493][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.465514][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.465517][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.465539][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.465542][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.465567][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.465571][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.545635][ T6056] binder: BINDER_SET_CONTEXT_MGR already set [ 124.548112][ T6056] binder: 6053:6056 ioctl 4018620d 0 returned -16 [ 124.553511][ T6032] Set syz1 is full, maxelem 65536 reached [ 124.560821][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.560863][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.560903][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.560908][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.560938][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.560942][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.560967][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.560970][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.561002][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.561006][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.561031][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.561035][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.561059][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.561062][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.561087][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.561091][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.561113][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.561116][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.561138][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.561141][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.561166][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.561169][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.561191][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.561194][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.561217][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.561221][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.561246][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.561249][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.561274][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.561277][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.561299][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.561302][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.561324][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.561327][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.561349][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.561352][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.561377][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.561380][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.561402][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.561406][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.561427][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.561430][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.561454][ T6054] binder: BINDER_SET_CONTEXT_MGR already set [ 124.561457][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -16 [ 124.710054][ T6077] binder: 6076:6077 tried to acquire reference to desc 0, got 1 instead [ 124.711948][ T6077] binder: 6076:6077 unknown command 0 [ 124.713130][ T6077] binder: 6076:6077 ioctl c0306201 200001c0 returned -22 [ 124.714864][ T6077] binder: 6076:6077 got transaction with invalid parent offset or type [ 124.716731][ T6077] binder: 6076:6077 transaction call to 6076:0 failed 18/29201/-22, code 0 size 80-24 line 3617 [ 124.800169][ T6078] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 124.835217][ T6081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.837645][ T6081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.958120][ T4723] Bluetooth: hci4: unexpected cc 0x1407 length: 11 > 9 [ 125.169049][ T6097] ubi0: attaching mtd0 [ 125.169745][ T6097] ubi0: scanning is finished [ 125.169775][ T6097] ubi0: empty MTD device detected [ 125.172853][ T4713] Bluetooth: hci2: adv larger than maximum supported [ 125.172861][ T4713] Bluetooth: hci2: Malformed LE Event: 0x0d [ 125.204575][ T9] binder: release 6076:6077 transaction 11 out, still active [ 125.204612][ T9] binder: undelivered TRANSACTION_COMPLETE [ 125.207722][ T9] binder: undelivered TRANSACTION_ERROR: 29201 [ 125.207783][ T9] binder: send failed reply for transaction 11, target dead [ 125.376173][ T6078] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 125.379799][ T6104] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (40992!=35945) [ 125.379878][ T6104] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 125.396619][ T6104] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 125.396757][ T6104] EXT4-fs (loop3): orphan cleanup on readonly fs [ 125.400357][ T6104] Quota error (device loop3): v2_read_file_info: Number of blocks too big for quota file size (134223872 > 6144). [ 125.404616][ T6104] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 125.404653][ T6104] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 125.409687][ T6104] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.234: Freeing blocks not in datazone - block = 0, count = 4096 [ 125.423157][ T6104] loop3: lost filesystem error report for type 5 error -117 [ 125.423698][ T6104] EXT4-fs (loop3): 1 truncate cleaned up [ 125.424167][ T6104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 125.447475][ T6097] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 125.447511][ T6097] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 125.447522][ T6097] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 125.447532][ T6097] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 125.447540][ T6097] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 125.447547][ T6097] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 125.447556][ T6097] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1029014586 [ 125.447564][ T6097] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 125.447812][ T6118] ubi0: background thread "ubi_bgt0d" started, PID 6118 [ 125.766712][ T6104] syzkaller0: create flow: hash 1659595950 index 1 [ 125.833646][ T6102] syzkaller0: delete flow: hash 1659595950 index 1 [ 125.934050][ T1597] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.934108][ T1597] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.321875][ T5094] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.341333][ T6136] netlink: 'syz.3.238': attribute type 21 has an invalid length. [ 126.446006][ T6144] set_capacity_and_notify: 3 callbacks suppressed [ 126.446047][ T6144] loop1: detected capacity change from 0 to 256 [ 126.893582][ T4713] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 126.893633][ T4713] Bluetooth: hci2: Injecting HCI hardware error event [ 126.894327][ T4713] Bluetooth: hci2: hardware error 0x00 [ 126.947681][ T1048] usb 1-1: USB disconnect, device number 2 [ 127.029640][ T6168] binder: 6164:6168 tried to acquire reference to desc 0, got 1 instead [ 127.030551][ T6168] binder_alloc: 6164: pid 6164 spamming oneway? 1 buffers allocated for a total size of 4096 [ 127.051191][ T6172] binder: 6164:6172 tried to acquire reference to desc 0, got 1 instead [ 127.056578][ T6169] binder: BINDER_SET_CONTEXT_MGR already set [ 127.056599][ T6169] binder: 6164:6169 ioctl 4018620d 200000c0 returned -16 [ 127.056854][ T6171] binder: BINDER_SET_CONTEXT_MGR already set [ 127.056929][ T6171] binder: 6164:6171 ioctl 4018620d 20000040 returned -16 [ 127.065818][ T6170] binder_alloc: binder_alloc_mmap_handler: 6164 20ffd000-21000000 already mapped failed -16 [ 127.069952][ T6169] binder_alloc: 6164: binder_alloc_buf, no vma [ 127.069988][ T6169] binder: cannot allocate buffer: vma cleared, target dead or dying [ 127.070023][ T6169] binder: 6164:6169 transaction async to 6164:0 failed 27/29189/-3, code 0 size 0-0 line 3408 [ 127.070491][ T6173] binder: 6164:6173 tried to acquire reference to desc 0, got 1 instead [ 127.070560][ T6168] binder_alloc: 6164: binder_alloc_buf, no vma [ 127.071891][ T6168] binder: cannot allocate buffer: vma cleared, target dead or dying [ 127.071979][ T6168] binder: 6164:6168 transaction async to 6164:0 failed 28/29189/-3, code 0 size 0-0 line 3408 [ 127.085156][ T6170] binder: 6164:6170 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 127.087897][ T6170] binder: 6170 RLIMIT_NICE not set [ 127.154177][ T4823] binder: undelivered transaction 26, process died. [ 127.237652][ T6151] Set syz1 is full, maxelem 65536 reached [ 127.280414][ T6179] loop1: detected capacity change from 0 to 4096 [ 127.296514][ T6179] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 127.301449][ T6179] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.358926][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.410282][ T6191] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 127.477522][ T6206] syz.5.254 uses obsolete (PF_INET,SOCK_PACKET) [ 127.515991][ T6210] netlink: 'syz.1.259': attribute type 22 has an invalid length. [ 127.516705][ T6210] __nla_validate_parse: 34 callbacks suppressed [ 127.516720][ T6210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.259'. [ 127.521409][ T6210] netlink: 'syz.1.259': attribute type 22 has an invalid length. [ 127.521840][ T6210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.259'. [ 127.533110][ T593] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.533460][ T703] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.533847][ T703] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.535564][ T593] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.627032][ T6218] loop1: detected capacity change from 0 to 8192 [ 127.674960][ T6218] loop1: p1 p2 p3 [ 127.675016][ T6218] loop1: partition table partially beyond EOD, truncated [ 127.675121][ T6218] loop1: p1 start 51379968 is beyond EOD, truncated [ 127.676577][ T6218] loop1: p3 size 100663552 extends beyond EOD, truncated [ 128.456869][ T6235] loop5: detected capacity change from 0 to 256 [ 128.461809][ T6235] vfat: Unknown parameter 'icharset' [ 128.482884][ T6235] loop5: detected capacity change from 0 to 512 [ 128.485020][ T6235] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 128.558047][ T6237] loop2: detected capacity change from 0 to 1024 [ 128.560910][ T6237] EXT4-fs: Ignoring removed mblk_io_submit option [ 128.575983][ T6237] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.601913][ T6240] netlink: 16 bytes leftover after parsing attributes in process `syz.5.267'. [ 128.609893][ T6237] EXT4-fs error (device loop2): __ext4_iget:5533: inode #12: block 13: comm syz.2.268: invalid block [ 128.615374][ T6237] EXT4-fs (loop2): Remounting filesystem read-only [ 128.707544][ T6227] Set syz1 is full, maxelem 65536 reached [ 128.791164][ T6243] loop0: detected capacity change from 0 to 4096 [ 128.791607][ T6243] EXT4-fs: inline encryption not supported [ 128.794595][ T6243] EXT4-fs (loop0): Test dummy encryption mode enabled [ 128.796182][ T6243] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.950450][ T5110] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.972810][ T4713] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 129.047459][ T6248] loop0: detected capacity change from 0 to 512 [ 129.047855][ T6248] EXT4-fs: Ignoring removed oldalloc option [ 129.048821][ T6248] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 129.053693][ T6248] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a846c01c, mo2=0002] [ 129.053747][ T6248] System zones: 0-2, 18-18, 34-34 [ 129.055514][ T6248] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 129.055530][ T6248] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 129.055538][ T6248] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.270: bad orphan inode 20829 [ 129.055549][ T6248] loop0: lost filesystem error report for type 5 error -117 [ 129.056150][ T6248] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.075005][ T5110] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.129710][ T6251] ip_tables: iptables: counters copy to user failed while replacing table [ 129.130039][ T6251] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x11 [ 129.165092][ T30] audit: type=1326 audit(129.140:6063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6252 comm="syz.0.272" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91792a8 code=0x0 [ 129.266742][ T6267] fuse: Unknown parameter 'group_id0xffffffffffffffff0000000000000000000000000000000000000000b f#' [ 129.276831][ T6267] gadgetfs: bound to dummy_udc driver [ 129.478620][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.542937][ T1048] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 129.544087][ C1] gadgetfs: connected [ 129.546073][ T1048] gadgetfs: disconnected [ 129.652331][ T5786] udevd[5786]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 129.667707][ T5780] udevd[5780]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 129.717301][ T6314] IPv6: addrconf: prefix option has invalid lifetime [ 129.755450][ C1] gadgetfs: connected [ 129.755608][ T1048] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 129.756184][ T1048] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.759196][ C1] gadgetfs: configuration #1 [ 130.077100][ T6252] gadgetfs: suspended from state 3 [ 130.077483][ T1048] usb 1-1: can't set config #1, error -71 [ 130.078061][ T6252] gadgetfs: disconnected [ 130.081115][ T1048] usb 1-1: USB disconnect, device number 3 [ 130.151172][ T6320] loop5: detected capacity change from 0 to 1024 [ 130.151620][ T6320] EXT4-fs: Ignoring removed bh option [ 130.153412][ T6320] EXT4-fs: test_dummy_encryption requires encrypt feature [ 130.165308][ T30] audit: type=1326 audit(130.140:6064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6325 comm="syz.2.284" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff935792a8 code=0x0 [ 130.463858][ T1048] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 130.561376][ T6333] netlink: 12 bytes leftover after parsing attributes in process `syz.1.285'. [ 130.563216][ T6333] netlink: 12 bytes leftover after parsing attributes in process `syz.1.285'. [ 130.608716][ T6340] bond0: entered promiscuous mode [ 130.608752][ T6340] bond_slave_0: entered promiscuous mode [ 130.609075][ T6340] bond_slave_1: entered promiscuous mode [ 130.610692][ T6340] batadv0: entered promiscuous mode [ 130.612445][ T6340] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 130.622821][ T6340] bond0: left promiscuous mode [ 130.623779][ T6340] bond_slave_0: left promiscuous mode [ 130.623872][ T6340] bond_slave_1: left promiscuous mode [ 130.626565][ T6340] batadv0: left promiscuous mode [ 130.627768][ T1048] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=fc.65 [ 130.628947][ T1048] usb 1-1: config 3 has an invalid interface number: 132 but max is 0 [ 130.628960][ T1048] usb 1-1: config 3 has no interface number 0 [ 130.628975][ T1048] usb 1-1: config 3 interface 132 has no altsetting 0 [ 130.631693][ T1048] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.631707][ T1048] usb 1-1: Product: syz [ 130.631714][ T1048] usb 1-1: Manufacturer: syz [ 130.631721][ T1048] usb 1-1: SerialNumber: syz [ 130.695230][ T6346] loop3: detected capacity change from 0 to 1024 [ 130.697595][ T6346] EXT4-fs: inline encryption not supported [ 130.717478][ T6346] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.748009][ T5094] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.819210][ T6358] Injecting memory failure for pfn 0x219070 at process virtual address 0x20ff7000 [ 130.821476][ T6358] Memory failure: 0x219070: Sending SIGBUS to syz.1.294:6358 due to hardware memory corruption [ 130.825830][ T6358] Memory failure: 0x219070: recovery action for already poisoned page: Failed [ 130.835198][ T6350] netlink: 830 bytes leftover after parsing attributes in process `syz.5.291'. [ 130.835388][ T4312] bond_slave_0: entered promiscuous mode [ 130.835403][ T4312] bond_slave_1: entered promiscuous mode [ 131.459866][ T1048] iguanair 1-1:3.132: probe with driver iguanair failed with error -12 [ 131.466840][ T1048] usb 1-1: USB disconnect, device number 4 [ 131.957385][ T6391] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 132.012162][ T6390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.302'. [ 132.029442][ T6404] set_capacity_and_notify: 1 callbacks suppressed [ 132.030861][ T6404] loop5: detected capacity change from 0 to 256 [ 132.188643][ T6421] loop5: detected capacity change from 0 to 256 [ 132.222581][ T6421] FAT-fs (loop5): Directory bread(block 1285) failed [ 132.224240][ T6421] FAT-fs (loop5): Directory bread(block 1286) failed [ 132.224287][ T6421] FAT-fs (loop5): Directory bread(block 1287) failed [ 132.224354][ T6421] FAT-fs (loop5): Directory bread(block 1288) failed [ 132.234475][ T6421] FAT-fs (loop5): Directory bread(block 1285) failed [ 132.234516][ T6421] FAT-fs (loop5): Directory bread(block 1286) failed [ 132.234529][ T6421] FAT-fs (loop5): Directory bread(block 1287) failed [ 132.234552][ T6421] FAT-fs (loop5): Directory bread(block 1288) failed [ 132.234575][ T6421] FAT-fs (loop5): Directory bread(block 1285) failed [ 132.234586][ T6421] FAT-fs (loop5): Directory bread(block 1286) failed [ 132.588095][ T6429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.312'. [ 132.590637][ T6429] netlink: 56 bytes leftover after parsing attributes in process `syz.0.312'. [ 132.591706][ T6429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.312'. [ 132.610317][ T6432] binder: BINDER_SET_CONTEXT_MGR already set [ 132.610341][ T6432] binder: 6431:6432 ioctl 4018620d 20004a80 returned -16 [ 132.610932][ T6432] 9pnet_fd: Insufficient options for proto=fd [ 132.616396][ T6432] binder: 6431:6432 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 132.616424][ T6432] binder: 6432 RLIMIT_NICE not set [ 132.648070][ T6434] syzkaller0: entered promiscuous mode [ 132.648153][ T6434] syzkaller0: entered allmulticast mode [ 132.889567][ T6443] loop2: detected capacity change from 0 to 1024 [ 132.905706][ T6443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 132.911256][ T6443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.317'. [ 132.919461][ T6448] netlink: 40 bytes leftover after parsing attributes in process `syz.3.319'. [ 133.078838][ T6452] netlink: 20 bytes leftover after parsing attributes in process `syz.1.320'. [ 133.151941][ T30] audit: type=1807 audit(133.120:6065): action=measure res=1 [ 133.155931][ T6464] ima: policy update completed [ 133.157295][ T30] audit: type=1802 audit(133.130:6066): pid=6464 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=completed comm="syz.5.323" res=1 errno=0 [ 133.158992][ T6469] loop1: detected capacity change from 0 to 2048 [ 133.176621][ T30] audit: type=1800 audit(133.150:6067): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 133.187928][ T30] audit: type=1800 audit(133.160:6068): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 133.194407][ T30] audit: type=1800 audit(133.170:6069): pid=5786 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 133.224696][ T6476] sctp: [Deprecated]: syz.5.325 (pid 6476) Use of struct sctp_assoc_value in delayed_ack socket option. [ 133.224696][ T6476] Use struct sctp_sack_info instead [ 133.225302][ T6476] sctp: [Deprecated]: syz.5.325 (pid 6476) Use of struct sctp_assoc_value in delayed_ack socket option. [ 133.225302][ T6476] Use struct sctp_sack_info instead [ 133.225325][ T6476] sctp: [Deprecated]: syz.5.325 (pid 6476) Use of struct sctp_assoc_value in delayed_ack socket option. [ 133.225325][ T6476] Use struct sctp_sack_info instead [ 133.225347][ T6476] sctp: [Deprecated]: syz.5.325 (pid 6476) Use of struct sctp_assoc_value in delayed_ack socket option. [ 133.225347][ T6476] Use struct sctp_sack_info instead [ 133.225364][ T6476] sctp: [Deprecated]: syz.5.325 (pid 6476) Use of struct sctp_assoc_value in delayed_ack socket option. [ 133.225364][ T6476] Use struct sctp_sack_info instead [ 133.225380][ T6476] sctp: [Deprecated]: syz.5.325 (pid 6476) Use of struct sctp_assoc_value in delayed_ack socket option. [ 133.225380][ T6476] Use struct sctp_sack_info instead [ 133.225396][ T6476] sctp: [Deprecated]: syz.5.325 (pid 6476) Use of struct sctp_assoc_value in delayed_ack socket option. [ 133.225396][ T6476] Use struct sctp_sack_info instead [ 133.225410][ T6476] sctp: [Deprecated]: syz.5.325 (pid 6476) Use of struct sctp_assoc_value in delayed_ack socket option. [ 133.225410][ T6476] Use struct sctp_sack_info instead [ 133.225425][ T6476] sctp: [Deprecated]: syz.5.325 (pid 6476) Use of struct sctp_assoc_value in delayed_ack socket option. [ 133.225425][ T6476] Use struct sctp_sack_info instead [ 133.225439][ T6476] sctp: [Deprecated]: syz.5.325 (pid 6476) Use of struct sctp_assoc_value in delayed_ack socket option. [ 133.225439][ T6476] Use struct sctp_sack_info instead [ 133.236319][ T30] audit: type=1800 audit(133.200:6070): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 133.276628][ T30] audit: type=1800 audit(133.250:6071): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 133.295442][ T30] audit: type=1800 audit(133.270:6072): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 133.311376][ T6485] loop5: detected capacity change from 0 to 1024 [ 133.317837][ T6485] EXT4-fs: inline encryption not supported [ 133.318241][ T6485] EXT4-fs: Ignoring removed bh option [ 133.378223][ T6485] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.420133][ T5163] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.453765][ T6495] netlink: 8 bytes leftover after parsing attributes in process `syz.5.329'. [ 133.872086][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 133.917729][ T6514] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 133.938035][ T6518] loop3: detected capacity change from 0 to 512 [ 133.945458][ T1048] team_slave_0: entered promiscuous mode [ 133.945491][ T1048] team_slave_1: entered promiscuous mode [ 133.948834][ T6516] loop2: detected capacity change from 0 to 128 [ 133.949557][ T6516] FAT-fs (loop2): bogus number of FAT structure [ 133.949581][ T6516] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 133.949589][ T6516] FAT-fs (loop2): Can't find a valid FAT filesystem [ 133.961438][ T6514] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 133.974114][ T6523] support for the xor transformation has been removed. [ 134.014525][ T6527] fuse: Unknown parameter '' [ 134.017578][ T6525] loop2: detected capacity change from 0 to 1024 [ 134.020526][ T6525] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 134.020556][ T6525] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 134.020598][ T6525] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 134.021187][ T6525] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #3: comm syz.2.339: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0) [ 134.021206][ T6525] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 134.021325][ T6525] EXT4-fs (loop2): no journal found [ 134.021385][ T6525] EXT4-fs (loop2): can't get journal size [ 134.033057][ T6525] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 134.044246][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.339'. [ 134.047433][ T6530] loop3: detected capacity change from 0 to 1024 [ 134.050725][ T6530] EXT4-fs (loop3): bad geometry: first data block 0 is beyond end of filesystem (0) [ 134.099557][ T1608] asus 0018:0B05:0101.0001: hidraw0: I2C HID vffffff.fe Device [syz0] on syz1 [ 134.099878][ T1608] asus 0018:0B05:0101.0001: Asus handshake 5d failed to send: -5 [ 134.099893][ T1608] asus 0018:0B05:0101.0001: Failed to initialize 0x5d: -5. [ 134.117896][ T4713] Bluetooth: hci1: unexpected event for opcode 0x2031 [ 134.155363][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.173814][ T6537] capability: warning: `syz.3.344' uses 32-bit capabilities (legacy support in use) [ 134.194784][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 134.194820][ T30] audit: type=1800 audit(134.170:6091): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 134.218494][ T30] audit: type=1800 audit(134.190:6092): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 134.239630][ T6534] fido_id[6534]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 134.249904][ T6544] loop5: detected capacity change from 0 to 128 [ 134.257397][ T6544] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 134.274938][ T30] audit: type=1800 audit(134.240:6093): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 134.280315][ T6550] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 134.292853][ T6550] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.304590][ T30] audit: type=1800 audit(134.280:6094): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 134.316993][ T30] audit: type=1800 audit(134.290:6095): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 134.367455][ T6554] EXT4-fs: inline encryption not supported [ 134.367524][ T6554] EXT4-fs: Ignoring removed i_version option [ 134.391198][ T6554] EXT4-fs (loop2): 1 orphan inode deleted [ 134.391676][ T6554] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.403172][ T6563] batadv_slave_1: entered promiscuous mode [ 134.635686][ T6563] vlan2: entered promiscuous mode [ 134.636817][ T6563] bridge0: entered promiscuous mode [ 134.639516][ T6562] batadv_slave_1: left promiscuous mode [ 134.682094][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.701106][ T30] audit: type=1800 audit(134.670:6096): pid=5780 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 134.727803][ T6572] trusted_key: encrypted_key: master key parameter 'H9fs' is invalid [ 134.727954][ T6571] trusted_key: encrypted_key: master key parameter 'H9fs' is invalid [ 134.761893][ T30] audit: type=1800 audit(134.730:6097): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 134.776729][ T30] audit: type=1800 audit(134.750:6098): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 134.818890][ T30] audit: type=1800 audit(134.790:6099): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 134.835721][ T30] audit: type=1800 audit(134.810:6100): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 134.868041][ T6589] netlink: 36 bytes leftover after parsing attributes in process `syz.2.359'. [ 134.868072][ T6589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.359'. [ 134.986456][ T6593] trusted_key: syz.3.358 sent an empty control message without MSG_MORE. [ 135.153655][ T6594] ------------[ cut here ]------------ [ 135.153686][ T6594] do not call blocking ops when !TASK_RUNNING; state=2 set at [<000000004a009540>] prepare_to_wait_event+0x2e4/0x3ac [ 135.153754][ T6594] WARNING: kernel/sched/core.c:9124 at __might_sleep+0xc0/0xdc, CPU#1: syz.0.357/6594 [ 135.158952][ T6594] Modules linked in: [ 135.159679][ T6594] CPU: 1 UID: 0 PID: 6594 Comm: syz.0.357 Not tainted syzkaller #0 PREEMPT [ 135.161314][ T6594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 135.163183][ T6594] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 135.164628][ T6594] pc : __might_sleep+0xc0/0xdc [ 135.165472][ T6594] lr : __might_sleep+0xc0/0xdc [ 135.166320][ T6594] sp : ffff800095927930 [ 135.167053][ T6594] x29: ffff800095927930 x28: ffff8000805a793c x27: ffff800095927a00 [ 135.168502][ T6594] x26: 0000000000000000 x25: ffff800095927a08 x24: 0000000000000000 [ 135.169969][ T6594] x23: ffff700012b24f3c x22: ffff0000f6c7d150 x21: 0000000000000002 [ 135.171420][ T6594] x20: ffff8000869ca160 x19: 000000000000026f x18: 00000000ffffffff [ 135.172862][ T6594] x17: ffff80008016750c x16: ffff800080348f2c x15: ffff8000805a58a8 [ 135.174276][ T6594] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 135.175708][ T6594] x11: 0000000000000000 x10: 0000000000080000 x9 : 5a453b9cb088bb00 [ 135.177164][ T6594] x8 : 5a453b9cb088bb00 x7 : ffff80008048c60c x6 : 0000000000000000 [ 135.178648][ T6594] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f6830 [ 135.180162][ T6594] x2 : 0000000100000000 x1 : ffff0000f6c7ba80 x0 : 0000000000000001 [ 135.181680][ T6594] Call trace: [ 135.182282][ T6594] __might_sleep+0xc0/0xdc (P) [ 135.183164][ T6594] __mutex_lock+0xf8/0xf14 [ 135.183980][ T6594] mutex_lock_nested+0x24/0x30 [ 135.184874][ T6594] futex_pivot_pending+0x30/0xa4 [ 135.185778][ T6594] futex_hash_allocate+0x73c/0xc20 [ 135.186717][ T6594] futex_hash_prctl+0xd0/0x324 [ 135.187592][ T6594] __arm64_sys_prctl+0x8d0/0x13d0 [ 135.188508][ T6594] invoke_syscall+0x98/0x244 [ 135.189358][ T6594] el0_svc_common+0xec/0x23c [ 135.190200][ T6594] do_el0_svc+0x4c/0x5c [ 135.190973][ T6594] el0_svc+0x64/0x260 [ 135.191720][ T6594] el0t_64_sync_handler+0x44/0x104 [ 135.192643][ T6594] el0t_64_sync+0x198/0x19c [ 135.193458][ T6594] irq event stamp: 114 [ 135.194185][ T6594] hardirqs last enabled at (113): [] __arm64_exit_to_kernel_mode+0x64/0x78 [ 135.196039][ T6594] hardirqs last disabled at (114): [] el1_brk64+0x20/0x54 [ 135.197585][ T6594] softirqs last enabled at (58): [] fpsimd_restore_current_state+0x39c/0x9c8 [ 135.199438][ T6594] softirqs last disabled at (56): [] fpsimd_restore_current_state+0x44/0x9c8 [ 135.201275][ T6594] ---[ end trace 0000000000000000 ]--- [ 135.205220][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.211720][ T5163] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.