last executing test programs: 50.172651189s ago: executing program 3 (id=4): sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000001c0)='./file0\x00', 0x2004800, &(0x7f0000000700)=ANY=[@ANYRES64=0x0], 0xfe, 0x3bc, &(0x7f0000000800)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_clone3(&(0x7f0000000600)={0x2020800, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xca9097f165d7280b}, 0x58) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000bc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$ext4(&(0x7f00000006c0)='ext4\x00', &(0x7f0000002d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000002e00), 0x1, 0x73a, &(0x7f0000002e40)="$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") syz_mount_image$fuse(0x0, &(0x7f0000003580)='./bus\x00', 0x38bc43, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000035c0)='./bus\x00', &(0x7f0000003600), 0x8, &(0x7f0000003640)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000003680)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f00000036c0)='./file1\x00', 0x0) write$FUSE_ENTRY(r2, &(0x7f0000002c00)={0x90, 0x0, r3, {0x20000000000007, 0x0, 0x80006, 0xfa7, 0x0, 0xfffff801, {0x2, 0x0, 0x20e, 0x6, 0x10000, 0x7, 0x77ff, 0x9, 0x4, 0x0, 0x7, r4, r5, 0x5, 0x1000}}}, 0x90) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000002cc0)={0x28, 0x0, r3, {{0x1, 0xfffffffffffffffd, 0x1, r0}}}, 0x28) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="fc0000001900010027d570000000000000000000000000000000000000000001fc02000000000000000000001b00000000010000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000003c00000000000000ffffffffffffffff00000000002000000000000000000000abcd0000000000002f0000000000000005000000000000000200000000000008010000000000000001000000000000004400050000000000000000000000000000000000000000003c00000002000000fe80000000000000000000000000003a06000000040100"/180], 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000500)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010724bd7020ffdbdf2d0100000008000300", @ANYRES32=r11], 0x1c}, 0x1, 0x0, 0x0, 0x44891}, 0x44004) r12 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r12, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x20000030, 0x0, 0x0, 0x20000030, 0x20000060], 0x11e, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00001b09"]}, 0x108) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x6c, r7, 0x1, 0x170bd2b, 0x0, {0x3, 0x0, 0x12}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x5, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}, 0x1, 0x300}, 0x8000) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) 49.779012986s ago: executing program 3 (id=7): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@delqdisc={0x30, 0x26, 0x1, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xfff3, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc084}, 0x2400c800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x106f) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x439, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7453c}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x68, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004805}, 0xc080) 48.691382481s ago: executing program 3 (id=11): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa08, &(0x7f0000000180)={{&(0x7f000069f000/0x1000)=nil, 0x1000}, 0x7, 0x2}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$video(&(0x7f00000001c0), 0xa7, 0x0) preadv(r4, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/147, 0x93}], 0x1, 0xfc43, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f0000000400)={&(0x7f00000003c0)={0xa, 0x4e23, 0x0, @mcast1, 0x9}, 0x1c, &(0x7f0000000580), 0x0, &(0x7f00000005c0)}, 0x0) ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, &(0x7f0000000380)=0xfffffc01) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x40080) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x300}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000080)) 47.51708665s ago: executing program 3 (id=12): io_setup(0x3, &(0x7f0000000040)=0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x8d}}, &(0x7f0000000200)='syzkaller\x00'}, 0x80) io_submit(r0, 0x1, &(0x7f0000001700)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x6, r1, 0x0, 0xb01f, 0x5601}]) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r2, &(0x7f0000000240)="06000000000000000200000004feffffff0000000000000000000000030000006c733100"/104, 0x68) ioctl$SET_BITMAP_FILE(r2, 0x4004092b, r1) 47.169908829s ago: executing program 3 (id=17): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x2208810, &(0x7f0000000140), 0xfe, 0x572, &(0x7f0000000180)="$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") chdir(&(0x7f0000000700)='./file1\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000ac0)=0x20, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000b00)=r0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000880)='./pipefs\x00', &(0x7f00000008c0)='rpc_pipefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0x541b, 0x0) syz_clone(0x21200000, &(0x7f0000000000)="8290ae65fec369dfccf945500c7421c29069aac4", 0x14, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000007c0)="c80cc323c4ab2e8e3df47a1bae6effedf7cfc0a2914b81321a28cb6b689fee53f96b403888d685c9f4adb567412f684a9086520cc4344a6545170e605dda60ed86") r3 = openat(0xffffffffffffff9c, &(0x7f0000000740)='.\x00', 0x800, 0x63) getdents64(r3, &(0x7f0000000780)=""/61, 0x3d) ioctl$DVB_DVR_DMX_EXPBUF(r2, 0xc00c6f3e, &(0x7f0000000940)={0x8001, 0x0, r2}) 46.956097109s ago: executing program 3 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x15, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000001940)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001980), 0xfffffffffffffe8a, 0x10, &(0x7f00000019c0), 0xfffffffffffffd27}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x54, &(0x7f0000000200)={&(0x7f0000000240)=@ipv6_newnexthop={0x18, 0x68, 0x309, 0x4, 0x25dfdbfd}, 0x18}}, 0xc0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000340), 0xd) file_getattr(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280), 0x18, 0x100) 31.862156294s ago: executing program 32 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x15, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000001940)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001980), 0xfffffffffffffe8a, 0x10, &(0x7f00000019c0), 0xfffffffffffffd27}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x54, &(0x7f0000000200)={&(0x7f0000000240)=@ipv6_newnexthop={0x18, 0x68, 0x309, 0x4, 0x25dfdbfd}, 0x18}}, 0xc0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000340), 0xd) file_getattr(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280), 0x18, 0x100) 30.220038483s ago: executing program 1 (id=234): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x3ff}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in={0x2, 0x4e20, @empty}], 0x10) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={0x1, 0x39b0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={r1, 0x9}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000580)={0x0, 0x10, &(0x7f00000005c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000600)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000640)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000640)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000ac0)={'filter\x00', 0x7, 0x4, 0x3f0, 0xe8, 0x0, 0xe8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0xffffffff}}}, {{@arp={@local, @multicast2, 0x0, 0xff000000, 0x10, 0x4, {@mac, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x7, 0xde35, 0x5, 0xd88, 0x9, 0x9, 'veth0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x0, 0x242}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="16e4ec77bff1", @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14, 0x14, 0x17}, @multicast1, 0x0, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x48241, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000a40)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local}) close(0x3) 30.196127544s ago: executing program 1 (id=238): r0 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r0, &(0x7f0000000000)="95a8921eeddeee4ad50797d75d7c319184cb252099c339632c386944a5330d7ebf1e51bc965a39c0eeb16d769eeda634db8984e8d758", 0x36, 0x4000080, &(0x7f0000000040)={0x11, 0xc, 0x0, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000080)={0x2, 0xffffffffffffffff, 0x80800}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000100)={0x2, 0xd1}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_ASCONF_SUPPORTED(r2, 0x84, 0x80, &(0x7f0000000180)={r3, 0xd2}, 0x8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000240)={r3, 0x48, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x2, @remote, 0xfffff0db}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e21, 0x8, @local, 0x9}]}, &(0x7f0000000280)=0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x4, 0x4, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, 0x8, 0x8000, 0x3ff, 0x800}}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@type_tag={0xc, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x61, 0x0, 0x1cae2abb7a0986be, 0x61, 0x0, 0x0, 0xd8d8d3524c5e85e9, 0x0]}}, &(0x7f0000000440)=""/194, 0x2e, 0xc2, 0x1, 0x2, 0x10000}, 0x28) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x9, 0x800, 0x8, 0x6a280, 0x1, 0x2, '\x00', r5, 0xffffffffffffffff, 0x4, 0x0, 0x5, 0xb, @value=r6}, 0x50) bind$bt_hci(r7, &(0x7f0000000580)={0x1f, 0x0, 0x4}, 0x6) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000005c0), 0x220240) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000600)={r1, @in={{0x2, 0x4e24, @remote}}, 0xec5, 0x3ff, 0x3ff, 0x0, 0x0, 0xe66, 0x5}, 0x9c) getresuid(&(0x7f0000000740)=0x0, &(0x7f0000000780), &(0x7f00000007c0)) mount$overlay(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), 0x2200462, &(0x7f0000000800)={[{@uuid_off}, {@metacopy_off}, {@verity_on}, {@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '!/'}}, {@fowner_lt={'fowner<', r8}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@smackfsroot={'smackfsroot', 0x3d, '@'}}, {@obj_role={'obj_role', 0x3d, '\x00'}}]}) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000b40)={&(0x7f00000008c0)="afc797475d2967ab88b05966e23216be1d5867bf9af638da87f72a9d34ed2a459b017c5ea6ff6378d5c921f28214f1cea54c692cd618b70ba551e4ccea5dd1f7f1af39d2247111503aac9c05f4cd660d86f4bd312aee14a3abafd29985df0a9d7ed283f806386be0c1ac60c1d8984b038125d761c847591e4464e19e576ccaa5d810f8202c045aa19126d2130689", &(0x7f0000000980)=""/125, &(0x7f0000000a00)="c48c4fe48a1b7cd1a8597b129be38c28fa7f2d2bdda9120aaa1695b447f7b4a0ea056d56ff30b1fde41dd5d42b5d66788ce2a91777936390b01eed010935843318c9a807adc468ce5cd7e939ec6fa6ade5188b105b1cc9d1909e9a9e3d627e2c023489ca936b4ee37b85f63d71d82d57357efec45039d116986d1405114650edf9d554626ac5d8e65362eb854cb2b7112c981fa31f68bbcded94a416ffd55298e20ca9bc69c51dbd65d07e7dd47c73d34b3e1eb7a760ba602caf6eb2a4b6460a35f9c4a47b6353b782b62286fdd8672e9f382d8c36acfa27dcd6120bd54b5315815b669b55", &(0x7f0000000b00)="a046183723525f00e463b5b370aafdc6ddab31aa3649c41d24cb31168e04d49c7538bd1293ab", 0xffffffff, r7, 0x7f425a7df77a1ea}, 0x38) mknodat$md(0xffffffffffffff9c, &(0x7f0000000b80)='./md0\x00', 0x6180, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) preadv2(r7, &(0x7f0000001d00)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/174, 0xae}], 0x2, 0xcf3, 0x3, 0x1a) r10 = socket$kcm(0x29, 0x2, 0x0) recvmmsg(r10, &(0x7f00000058c0)=[{{&(0x7f0000001d40)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000003100)=[{&(0x7f0000001dc0)=""/59, 0x3b}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/109, 0x6d}, {&(0x7f0000001ec0)=""/26, 0x1a}, {&(0x7f0000001f00)=""/165, 0xa5}, {&(0x7f0000001fc0)=""/151, 0x97}, {&(0x7f0000002080)=""/62, 0x3e}, {&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f00000030c0)=""/19, 0x13}], 0x9, &(0x7f00000031c0)=""/203, 0xcb}, 0x3}, {{&(0x7f00000032c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000003440)=[{&(0x7f0000003340)=""/63, 0x3f}, {&(0x7f0000003380)=""/103, 0x67}, {&(0x7f0000003400)=""/32, 0x20}], 0x3, &(0x7f0000003480)=""/221, 0xdd}, 0x2}, {{&(0x7f0000003580)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000005800)=[{&(0x7f0000003600)=""/4096, 0x1000}, {&(0x7f0000004600)=""/37, 0x25}, {&(0x7f0000004640)=""/30, 0x1e}, {&(0x7f0000004680)=""/4096, 0x1000}, {&(0x7f0000005680)=""/157, 0x9d}, {&(0x7f0000005740)=""/84, 0x54}, {&(0x7f00000057c0)=""/53, 0x35}], 0x7, &(0x7f0000005880)=""/63, 0x3f}, 0x6}], 0x3, 0x2000, 0x0) accept4(r11, &(0x7f0000005980)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000005a00)=0x80, 0x80000) openat$md_node(0xffffffffffffff9c, &(0x7f0000005a40)='./md1\x00', 0x80, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000005a80)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, r6, 0x1, 0x2, 0x2}, 0x50) io_uring_setup(0x7252, &(0x7f0000005b00)={0x0, 0x208, 0x4000, 0x1, 0x139, 0x0, r9}) r12 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r12, &(0x7f0000005b80)={0x2, 0x0, @remote, 0x2}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000005bc0)) 29.475808289s ago: executing program 1 (id=243): r0 = socket(0x2b, 0x1, 0x1) listen(r0, 0x5) accept4$vsock_stream(r0, 0x0, 0x0, 0x80800) timer_create(0x4, &(0x7f0000000000)={0x0, 0x21, 0x4, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 28.569277923s ago: executing program 1 (id=256): r0 = syz_open_procfs(0x0, &(0x7f0000001040)='ns\x00') lseek(r0, 0x4, 0x1) getdents64(r0, 0xffffffffffffffff, 0x43) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001100000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_io_uring_setup(0xf07, &(0x7f0000000440)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f00000004c0)=0x0, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000600)=@rc={0x1f, @none}, 0x0, 0x0, 0x1}) r6 = mmap$IORING_OFF_PBUF_RING(0x0, 0xa, 0x2000000, 0x10, 0xffffffffffffffff, 0x858be0e6) syz_ublk_setup_io_uring(0x198c, &(0x7f0000000680)={0x0, 0xd256, 0x10000, 0x3, 0x11a}, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)=0x0) r8 = fsopen(&(0x7f0000001080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000010c0)={@map=r9, 0xf, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r10 = syz_mount_image$ext4(&(0x7f0000000840)='ext4\x00', &(0x7f0000000880)='./file1\x00', 0x1200000, &(0x7f00000008c0)={[{@nombcache}]}, 0x3, 0x58f, &(0x7f0000000900)="$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") lseek(r10, 0xd, 0x4) syz_io_uring_submit(r2, r6, r7, &(0x7f0000000f00)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, r10, 0x0, &(0x7f0000000ec0)='./file0\x00', 0x0, 0x200}) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r11, &(0x7f0000000180)={&(0x7f0000000f80)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000fc0)=[{&(0x7f0000001000)="13", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_REUSE_PORT(r11, 0x84, 0x24, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r1}, 0x11) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r1, 0x40109441, &(0x7f0000000040)={0x7, 0x4, 0xbdb}) syz_clone3(&(0x7f0000000080)={0x180801600, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r13 = syz_io_uring_setup(0xf00, &(0x7f00000007c0)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r14, r15, r16, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r13, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) waitid$P_PIDFD(0x3, r12, 0x0, 0x0, 0x0) 28.430053463s ago: executing program 1 (id=259): io_setup(0x8, &(0x7f0000000280)=0x0) io_pgetevents(r0, 0x3, 0x3, &(0x7f0000000340)=[{}, {}, {}], &(0x7f00000003c0), 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000440)) (async, rerun: 64) r2 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmsg$can_j1939(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000020) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, 0x0, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="28801c002000010027bd7000ffdbdf250a00004000000000070001000c001400", @ANYRES32=0xffffffffffffffff], 0x28}, 0x1, 0x0, 0x0, 0x4000825}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) (async) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) (async) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='uid_map\x00') write$UHID_INPUT(r9, 0x0, 0x0) mknodat$null(r9, &(0x7f0000000100)='./file0\x00', 0xc000, 0x103) setuid(0xee01) (async) tkill(r8, 0x8024) (async) bind$alg(r7, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r6], 0x5c}}, 0x40000) 28.096148122s ago: executing program 1 (id=266): r0 = syz_open_dev$video(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000002440)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000002480)=@userptr={0x0, 0x2, 0x59, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000002500)}, 0x400000}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000002580)=@userptr={0x0, 0x2, 0x4, 0x103000, 0xffffffff, {}, {0x1}, 0x0, 0x2, {0x0}, 0x400000}) 28.078459646s ago: executing program 33 (id=266): r0 = syz_open_dev$video(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000002440)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000002480)=@userptr={0x0, 0x2, 0x59, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000002500)}, 0x400000}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000002580)=@userptr={0x0, 0x2, 0x4, 0x103000, 0xffffffff, {}, {0x1}, 0x0, 0x2, {0x0}, 0x400000}) 8.903476229s ago: executing program 4 (id=482): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@newlink={0x54, 0x10, 0x439, 0x70bd40, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @sit={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x5}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000007}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) (async, rerun: 64) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 64) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000012}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x64, 0xd, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x64}}, 0x2000c850) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setns(0xc9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r3, 0x6, 0x1, 0x0, &(0x7f0000000bc0)=0x2) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000faffffff00000000030000008500000036000000670000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r4, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x34, &(0x7f00000002c0), 0x0, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xd5, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r6, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x15, &(0x7f00000001c0)={@broadcast, @remote, @val={@void, {0x8100, 0x2, 0x0, 0x3}}, {@x25={0x805, {0x0, 0x81, 0x1}}}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, 0x0) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FE_DISHNETWORK_SEND_LEGACY_CMD(r7, 0x6f50, 0xfffffffffffffe01) (async) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x7000000, {0xf0ffff}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0xb1, 0x0, 0x8, 0x20}, {}, {}, {}, {0x0, 0xfe, 0x0, 0x100}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x5973599c}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x20, 0xcd, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5, 0x1}, {}, {0x0, 0x0, 0xfd, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x0, 0x2}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {0x800}, {}, {0x20, 0x6}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {0x0, 0x4b}, {}, {}, {0x0, 0x0, 0xe2}, {0x4}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0xfc}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x2}, {0x0, 0xb}, {0x4}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1000b, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) (async) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x20000400, 0x0, 0x0, 0x20000430, 0x20000460], 0x0, 0x0, &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x138) (async, rerun: 64) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) (rerun: 64) 8.076451798s ago: executing program 4 (id=491): r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) write(r1, &(0x7f0000000180)='27', 0x2) setns(0xc9, 0x0) socket$inet(0xa, 0x801, 0x84) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x6, &(0x7f0000000480)={0x80, {{0x29, 0x0, 0x39000000, @loopback}}, {{0xa, 0x0, 0x0, @remote, 0x7}}}, 0x108) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000280)='asymmetric\x00', &(0x7f00000000c0)) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0xb, 0x0, 0x0) add_key(&(0x7f0000000240)='asymmetric\x00', 0x0, &(0x7f0000000340)="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", 0x110, r0) 7.651828826s ago: executing program 4 (id=495): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x40010, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x6, 0x8e, 0x80, 0x800, 0xffffffff, 0x5e9a}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "6819"}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x6, 0x100, 0xfffffff8, 0x9}}]}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) r2 = socket$kcm(0x28, 0x3, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x4c, &(0x7f0000000540)={0x1, &(0x7f0000000580)=[{0x9, 0x40, 0x36, 0x9}]}, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x210000, &(0x7f0000000680)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000000740)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000cc0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000d00)=0x2) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000d40)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000dc0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000e40), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f0000000e80), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x4) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x6, 0x3, &(0x7f0000000f80)=@framed, &(0x7f0000000fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001000)={r7, 0x0, 0xffc9, 0x0, &(0x7f0000001200)="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", &(0x7f0000002300), 0x3, 0x0, 0x33, 0x6f, &(0x7f0000002340)="46cc00117877b1d08f679b92d46ce23b736d0feb470f4e1d46f158db88cf3de81ac77bccb45147c5d8b3964b10d7310feec810", &(0x7f0000002380)="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", 0x2, 0x0, 0x7ffc}, 0x21) syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x20931, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b87670d000000ba090000160af3653c001ac00400020208000400000001a12c000000eeb556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000e091) 5.705205145s ago: executing program 4 (id=513): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) (async) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000200)={0x87, 0x1e, '\x00', [@ra={0x5, 0x2, 0xacd}, @generic={0x9, 0x18, "6977c06ae59f93bc12f605f12f4956d924e27d81db0b5e8a"}, @ra={0x5, 0x2, 0x3be}, @generic={0xe6, 0x25, "3ea2daf367c4b2d2ad346f8c6a9b499a88986b8302ac84a882bbd5fc19d8889dea99deaca3"}, @padn={0x1, 0x1, [0x0]}, @generic={0x81, 0xa2, "47365cf435abf0a3d7f2a8b7550503e35019c41c3d371e23061e3af7e4a30f113192107c0c6f1d876848b60e1d112d9dbe7e8526866f405d84a5bae925bc6f1924555d5c4603d55242b3172674d8f86d809afe3b70e8884db9a3469ea31c8294a9dd3bf4e9d289c8eec8279c290058a263026da8cba00e0278489ed18355230f648d47111bc9683dfd7d97af4747f4a76c479f46d7d5d00c39af30b82749dc5088b1"}]}, 0xf8) listen(r0, 0x0) (async, rerun: 32) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x3, 0x618, &(0x7f0000000680)="$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") (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)=@newqdisc={0x24, 0x24, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {}, {0xfff1, 0xffff}, {0xffe0, 0xc}}}, 0x24}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000e40)='./dev\x00', &(0x7f0000000e80)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 32) r1 = openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./dev/mapper/control\x00', 0x0, 0x0) (rerun: 32) ioctl(r1, 0xc138fd0d, &(0x7f0000000f00)="0400000000000000000000007e01") r2 = openat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0\x00', 0x0, 0x40) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000d00)=@v1={0x0, @aes256, 0x8, @desc3}) (async) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000850000000e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @xdp=0xb3f31c90c98aa6e2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)={0x114, 0x15, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767fc734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r3, r6, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[], 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000100", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 4.196861055s ago: executing program 4 (id=517): mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./mysys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000940)='./mysys\x00', &(0x7f0000000980)='sysfs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./mysys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r1, &(0x7f0000000580)='dummy_udc.0\n', 0xc) (async) r2 = fsopen(&(0x7f0000000a00)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a40)='addr\x00', &(0x7f0000000a80)='12:%0.0.1\x00', 0x0) (async) r3 = syz_io_uring_setup(0x315b, &(0x7f0000000000)={0x0, 0xc7ca, 0x40, 0x0, 0x1c1, 0x0, r1}, &(0x7f0000000140)=0x0, &(0x7f0000000280), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000300)=[@ioring_restriction_register_op={0x0, 0x7}], 0x1) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000004000000000000000000008500000036000000850000000700000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r1, 0x20, &(0x7f00000007c0)={0x0, 0x7, 0x38ad, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)="2ef61f1d4c27a131a6250888328fbfef502a10fd7bc899db13abf1b4f488fcdcfce4196c67d30e0f866bb5fe08c42db5e94f4a86ea546203f4961df0e2", 0x3d, 0x12, 0x1, 0x40000000}, &(0x7f0000000780)={&(0x7f00000006c0)="23eef937f9c0f3ceba61e7f73affc3f2a65436d9fca572c8c4d61bf3c5e1db78e05d37e35d2c41e38e1daed13c4eca53df69676122839e562a19eaa577bc2848a978249ef29ba0b11ec2f53dfdb5285bee793f6a5a553031f4ec4ace10e07955084aa35b99db15f7a6ccf0f5397e24054fd5401392a02aabf12669288c01b90c887ae1ff22576a1ef8bf119b360d76c29be0493c3b6cca528288dbfdeb44c92f45f2f39ccabc58e51ad52bcb3cb5c76893f9a9847ccea2c965356f1eebe5", 0xbe, 0x0, 0x7fff, 0x10000}, {0x7, 0x101, 0x1}, 0x8, 0x10}, 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r7, r6, 0x25, 0x8, @val=@tcx}, 0x1c) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r3, 0xc, 0x0, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000240)={'netdevsim0\x00', &(0x7f0000000840)=@ethtool_flash={0x33, 0xfffffff7, './file0/file0/..\x00'}}) (async) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES64=r4], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x18, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000700000f000000000010000008b708000000f5f2ec81591294baa9b6e4e00000007baaf8ff00000000b5080200fdffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff56ffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b705000008000000850000000c0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200000085000000060000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0xb, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 4.163102654s ago: executing program 2 (id=519): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x8000000, 0xbe, 0x1}) r1 = dup3(r0, r0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000080)=0x51, 0x4) r2 = syz_io_uring_setup(0x2c62, &(0x7f00000000c0)={0x0, 0xc4de, 0x4480, 0x0, 0x265, 0x0, r1}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) syz_ublk_setup_io_uring(0x71fa, &(0x7f0000000200)={0x0, 0x6976, 0x40000, 0x1, 0x1b2}, &(0x7f0000000280), &(0x7f00000002c0)=0x0, &(0x7f0000000300)) r4 = syz_ublk_setup_io_uring(0x1f0c, &(0x7f0000000340)={0x0, 0xcf69, 0x20, 0x3, 0x305, 0x0, r1}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)=0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000480)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) syz_ublk_add_dev(r2, 0x0, r3, r5, &(0x7f0000000540)={0x2e, 0x42, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x2, 0xff6, 0x0, 0x0, 0x1000, 0xffffffff, r6, 0x0, 0x155}}}, &(0x7f00000005c0)) write(r4, &(0x7f0000000600)="eb250aa63c7d7c6b4eca09f439bcf2589d5fc7581664575b473451d1130e46f5ab55f0ba5a49e26e41e000aba498e268c0915e22143672a3d245a4961f4a6cffc34ee8311984b8cabc246f74274a0b2c0e07269b2d7047e4f3b544441a02576e0c78833389c193dfd967558cc00e9c5c144dd430ec3eb43e1d67795fb390e6f3ab15d202f46a9c428368be0aba35af3b8ae2f4875cd95b74279f05716eb5d7e3e25e2aa564afd78d4aa0a5993729180d6c204feb8e7b50537bddfaf67486e08aced922841ce41c4e7aa3d831a1b3c57f27", 0xd1) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000700)="bfaadda7b965396c808b466794cf8d9f4c1f6837de51b13af9099651ecec3f0bdb3798de7a1f71564dfe96f3ae31c148b12128269a4a0dc600c20ac91634f86ed0feba832487da73d3d7af", 0x4b}, {&(0x7f0000000780)="c6a140515449db857b73a311ee5902bce93ef3dd4753f29c75bac44adc4e4b05b80d8afae63149fe5ab4bb62f70fe6941ac8e708d3bcb5ed76a98dc923138eb9a32359765b2c7b4ae61487df8f5713ccae49d7b1b55ba6d636c345e957761a9fb86cdcebf62f8eeec93365583f1b2d7711e4aa3a90395c095ddd7fd25675f333ff9d07dde7c7c4cb5ebf475949a3abca6a6ff5bc342e70541e30582797cc7d6bdc5b7ccde21973af2276473dc72dd92eaac93cd26d205fa62d96", 0xba}, {&(0x7f0000000840)="4d1802b58a2cc20461ea502c1af3eef2116004e040d44a6f6147276269f7ba2f826df6c464239b9512b9a1097b17f0f2ee3c5261d13b6ad9f9520b0674b936a75b240627d952e2db5c", 0x49}], 0x3) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0x7fff, 0x0, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, r1, 0x5, 0xfe8b, 0x4}, 0x50) read$usbmon(r1, &(0x7f0000000980)=""/196, 0xc4) ioprio_get$uid(0x0, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000a80)=""/229, &(0x7f0000000b80)=0xe5) r8 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r8, 0x941c, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000c00)) mount(&(0x7f0000000c40)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)='smb3\x00', 0x80080, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000d00)=@req3={0xffff, 0x929, 0x2, 0xf1f, 0x2, 0x8}, 0x1c) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000d40), 0x800, 0x0) ioctl$VIDIOC_G_INPUT(r1, 0x80045626, &(0x7f0000000d80)) move_mount(r1, &(0x7f0000000dc0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000e00)='./file0\x00', 0x226) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001100)={0x6, 0x19, &(0x7f0000000e40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfff}, [@ldst={0x0, 0x3, 0x0, 0x1, 0x6, 0xc, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000f40)='syzkaller\x00', 0x7, 0xe1, &(0x7f0000000f80)=""/225, 0x40e00, 0x15, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001080)={0x5, 0x9, 0x9, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000010c0)=[r1, r7, r1], 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000012c0)={@ifindex, 0x2, 0x1, 0x8, &(0x7f00000011c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000001200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001240)=[0x0, 0x0, 0x0], &(0x7f0000001280)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001300)={@map=r7, r9, 0x27, 0x11, r1, @void, @value=r1, @void, @void, r10}, 0x20) connect$inet6(r1, &(0x7f0000001340)={0xa, 0x4e22, 0xfff, @loopback, 0x7}, 0x1c) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000001380)=0x6) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x2) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r2, 0x21, &(0x7f00000013c0)={0x0, 0x3a5, 0x8, 0x0, 0x2df, 0x0, r4}, 0x1) 4.007875727s ago: executing program 2 (id=523): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x84fed0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1000818, &(0x7f0000000140)=ANY=[], 0x1, 0x2c7, &(0x7f00000002c0)="$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") sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000680)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000780), 0x651, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'wlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x3, 0x5, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000900)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "0e"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 3.87936003s ago: executing program 4 (id=524): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x0, 0x0}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/net\x00') prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map=r0, 0x24, 0x0, 0x8, &(0x7f0000000440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 3.100916104s ago: executing program 2 (id=531): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) (async) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x81) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) (async) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) (async) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0x4, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x6}, {0x0, 0x3}, {0x5, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x10, 0x2, [@TCA_U32_POLICE={0x4}, @TCA_U32_DIVISOR={0x8, 0x4, 0x44}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44084}, 0x24040085) (async) recvmmsg$unix(r4, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001000/0x4000)=nil}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, 0x0, {0x10}, {0xa, 0x3}, {0xfff2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040098}, 0x880) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) (async) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) sendto$inet6(r3, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) sendto$inet6(r3, 0x0, 0x0, 0x40000, 0x0, 0x0) 2.845258253s ago: executing program 5 (id=533): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000300)={r0, &(0x7f0000000200)='/\x9e\x00', 0x20000, &(0x7f0000000240)={@align=0x6, {0xf01, 0x1, 0x8}}, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0x6}) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000340)=0x3, 0x4) (async) shmctl$IPC_STAT(0x0, 0x2, 0x0) r2 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) getsockopt$inet6_buf(r2, 0x29, 0x2a, &(0x7f00000000c0)=""/205, &(0x7f00000001c0)=0xcd) (async, rerun: 64) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (rerun: 64) 2.620044578s ago: executing program 5 (id=535): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000200)={0x0, 0x0}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000002c0)=0x6a, 0x4) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto(r1, &(0x7f0000000400)="50fbdf12a30d7a4cb2c5c84948f3426077a9f0ca14972a603b3e78adff5905b22bae1b24430134d801251bcef8f165533a1edc5a0000d40000000000002944de604d849a1e83a8c86f66470ae2e4c639a500"/94, 0x5e, 0x4008044, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000480)='bic', 0x3) sendto$inet(r1, &(0x7f00000004c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) unlinkat(r3, &(0x7f0000000280)='.\x00', 0x200) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x80}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x1c, 0x2a, [@peer_mgmt={0x75, 0x16, {0x1, 0xb1, @val=0x80, @void, @val="50bb4b873d1f554bf27ff077f9b5438b"}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000080}, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000dc0)='./file1\x00', 0x2000, &(0x7f0000000080)=ANY=[], 0x29, 0x20d, &(0x7f0000000e40)="$eJzsVU1rE0EYft7NbLbRIAFvXg22F22zBfEoXuxdf4AhXWsx8aMb0YSCq5deFMQ/UfBP6EHQuwcRwYseFPRQ8VSRyDvz7nQ2m9pEqad5YHmf93tmdj6upbfTCMCvnc0OGtAg1PGeCArAPBnbbtXI7yJHgs/K6M+qRflJZDoYvnlk6PB6u9tNNtLBn0kEAg6IKZKy6cLzx8enzx8jrx8WLYRpskj9Ta9/I/2KWdmy60nBEk2KkVyMV25dOuTBh7NlnS+N0JLavq4fdcC1fLGuYzN1R1Z2hbyaISZmEc201ycQLqAJYF0/6+XfNE7ePTWdJ8ZUJL2G4rIcSPgU/7/9vD/hu0iTYKb0FPI/0osPAnwjIMTbnc0OW6/ILcbuVfPlR0JnsfLSiTmhgAygCka6KNdREjsPYLHfu7WYDoan13vttWQtuRHHy2eXXh2VIzq6D6x3kyXSwzDpARMFCz6nNcfPO+3Dnj+DA3KGBp6X2MgpmV/OCydtCDdA4OQ6NaTuC9s/EtudtIfLOIU5AHczdseyQE1wNYWrPLUVECqitJQzTmAXAea040znZnd1CwTK07ahbI3WR4RWiUXhRsnyOTv9LZFNkSsit/f6aeRvV/4mKV3hq2gLGVDFvXa/v9Fik2Fsq9oK2hY3bOdAuspr2MibNSNMiSPTBnp4eHh4eHh4HBJ+BwAA//+JdTvR") r4 = socket(0x15, 0x5, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) unshare(0xa000400) shmget(0x1, 0xfffffffffeffffff, 0x200, &(0x7f0000ffb000/0x3000)=nil) ioctl$SIOCGETMIFCNT_IN6(r4, 0x89e0, 0xffffffffffffffff) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2.079415918s ago: executing program 0 (id=539): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa08, &(0x7f0000000180)={{&(0x7f000069f000/0x1000)=nil, 0x1000}, 0x7, 0x2}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$video(&(0x7f00000001c0), 0xa7, 0x0) preadv(r4, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/147, 0x93}], 0x1, 0xfc43, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f0000000400)={&(0x7f00000003c0)={0xa, 0x4e23, 0x0, @mcast1, 0x9}, 0x1c, &(0x7f0000000580), 0x0, &(0x7f00000005c0)}, 0x0) ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, &(0x7f0000000380)=0xfffffc01) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x40080) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x300}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000080)) 1.913361999s ago: executing program 6 (id=540): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000060026008500000061000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="bf16000000000000b7070000000000007b7af0ff000000007b7af8ff00000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b70500000001000085000000550000001500020000000000bf010000000000008500000056000000b70000000200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000580), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000005c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000600)=0x8) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000640)=0x4) pwritev(r1, &(0x7f0000000680)=[{&(0x7f00000006c0)="00214500002c00000002400600000a0000010a000002", 0x16}], 0x1, 0x0, 0xfffffffe) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000400)={0x11, 0x0, r4}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000440)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="02011400b8dc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e4a139697dd206"], 0xdd12}], 0x1}, 0x20040051) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000540)={0x18, 0x0, {0x1, @empty, 'dummy0\x00'}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x28, 0xe40, &(0x7f0000000340)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000380)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000c80)={0x0, 'syz_tun\x00', {0x4}, 0xe}) syz_emit_ethernet(0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="aaaaaaaaf5"], 0x0) 1.654341615s ago: executing program 0 (id=541): syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000100)={0x0, 0x595f, 0x400, 0x0, 0x3c9}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_BIND=@ipv6={0x38, 0x0, 0x0, r6, 0x0, 0x0}) (async) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_BIND=@ipv6={0x38, 0x0, 0x0, r6, 0x0, 0x0}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r1) sendmsg$TIPC_CMD_GET_NETID(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r8, 0x800, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000080000000000000005000000731123000000000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r0, 0x3, 0x70bd27, 0x25dbdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4004044) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11, 0x1, 0x0, 0x4}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11, 0x1, 0x0, 0x4}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.568105726s ago: executing program 5 (id=542): shmget$private(0x0, 0x1000, 0x0, &(0x7f000005f000/0x1000)=nil) (async) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x7f]}, 0x8, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000180)=0xa) (async) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ff9000/0x1000)=nil) (async) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x7530}, 0x10) connect$llc(r1, &(0x7f0000000040)={0x1a, 0x1, 0xff, 0x0, 0x0, 0x9, @remote}, 0x10) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) r3 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/smackfs/load2\x00', 0x2, 0x0) write$binfmt_script(r3, &(0x7f0000000200)={'#! ', './file0', [{0x20, 'wrm\xb7\x17x\xe3\a\xe6o\xdf\x86\xc3\x1f\xecY\xcb\xd2\x17\xc1\x06\x14{\xd9kV\xfa\x88\xc3\x13\x83P8\x94\x0f\xda\x03n\x88g\x06y\xe8\xd5D\xec%X\x9b\x8d}\xb39\xc7\xaa\xe71Ue\xed_g\x03\xba\xe2\xc5\xf4J\xcb\x94\x80\xa7\xe8\x84\x86\xfc\xea\xf2a\xa1\xe4\xdc\x03]\xa1(\x88J\xa7\xb9\x18\xb2\xf7\xef$\xb2\xea}'}, {0x20, 'B-+'}, {0x20, 'hostdata'}, {0x20, '*'}]}, 0x7d) (async) r4 = syz_open_dev$media(&(0x7f0000000100), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, 0xffffffffffffffff) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100000}, &(0x7f00000000c0)=0x40) unshare(0x2a000400) 1.436612141s ago: executing program 0 (id=543): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000340)={[{@iocharset={'iocharset', 0x3d, 'cp862'}}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@utf8no}, {@shortname_win95}, {@utf8}, {@utf8no}, {@uni_xlateno}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@numtail}, {@uni_xlate}, {@utf8no}, {@uni_xlateno}]}, 0xfd, 0x2a8, &(0x7f0000000780)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x1c1) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000f00)='./file1\x00', 0x0, &(0x7f0000000180), 0x1, 0x27e, &(0x7f0000000500)="$eJzs3T1oO2UcB/DfXZJ/34JWBRHFFxARLZS6CSLoolAQKSKCChURJ2mFanFrnFwcdFbp5FLEzeooLsVF6Fq1Q0UQsThYHHSIXC6RmCZaL82l/+TzgfTuubsnv0vJ97mH0lwCmFqLEfFYRFQiYikiahGRdB9wT/5YbDd35w7WI5rNZ35NWsfl7Vyn30JENCLi4YhqZ9/2/gsnvx89ef+7b9bu+3j/+bkSXlqld8PpyfFTZx89/c5nqw9tp+1t9fay+3Vcottv7LOxmkTcPIJiV0VSHfcZcBFrb336bRaSWyLi3lb+a5G2I/ve1rWvavHgh4P6vv/L4R1lnitw+ZrNWnYNbDSBqZO25sBJuhwR+XqaLi/nc/jvKvPpa5tbbyy9ulnZeKV71Chj+g6MSj3i+IkvZj5f6Mn/T5U8/8DkyvL/7Nre99n62bm/lAET6c58keV/6aWdB0L+YerIP0yG+QJ95B8mQr1gJ/mH613B7BbI/60/Hj5arBhwpVww/z+XeU5AOcz/YYLVOiuNvrvlH6bXhfPvX31h4nTy79IP06f7+g8ATJfmzLg/gQyMy7jHHwAAAAAAAAAAAAAAAAAA4LzduYP1ziMiKaXm1x9EnD4eEdXe+tH6YoO0tZxt/Zz/LckO+1uSd2u7Vqj+i3cPc/bD+2T0n76u9rRnuxs3/DDy+v/qm7tG87xv/7M58A6WOxsRjezglWr1/Psvab//irvpP/bXXh6ywP/Um+pHniuj6uDf4p97ZdQfbPUo4sts/FnpN/6kcVtr2X/8qXffYrmg1/8Y8gkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAozV8BAAD///BWbAI=") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x88c2, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20000894) pwrite64(r0, &(0x7f0000000080), 0xfdcf, 0x404042ffe) r3 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x2000008, 0x8100000002, 0x0, 0xff}) 1.382059742s ago: executing program 5 (id=544): syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000140)='./file0\x00', 0x1048b, &(0x7f0000000ac0)={[{@debug}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xfe, 0x44e, &(0x7f0000000b40)="$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") syz_open_procfs(0x0, &(0x7f0000000fc0)='mountinfo\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004280)={&(0x7f00000042c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000"], 0x0, 0x52}, 0x28) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000045c0)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="090000000e0000002f4900007f00000001010000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000000000000000001fb5865c810793b973d139a67849bdcfb9e6f8dfeba8d884f069967432ce9357b3454988df54d6433114b7aa42ef04c56e712ccad85354", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000004680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000046c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000004740), 0x651, 0x0) recvmmsg(r2, &(0x7f0000004780), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000047c0)=0x6) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000004800)='net/udp\x00') lseek(r4, 0x1000000, 0x0) socket$kcm(0x21, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000004840)='./dev\x00', 0x147) mount(0x0, &(0x7f0000004880)='./dev\x00', &(0x7f00000048c0)='devtmpfs\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000004900)=ANY=[@ANYBLOB="230000002b00000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004940)={{r5, 0xffffffffffffffff}, &(0x7f0000004980), &(0x7f00000049c0)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000004a00)={0x0, 0x0, 0x0, 0x0, 0x6f1c, r6}, 0x38) r7 = openat(0xffffffffffffff9c, &(0x7f0000004a40)='./dev/nvme0n1\x00', 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004a80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000004ac0)={0x0, 0x0, &(0x7f0000004b00)={&(0x7f0000004b40)={0x34, r9, 0x1, 0x0, 0xfffffffb, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x800000d}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) ioctl$IOC_PR_CLEAR(r7, 0x401070cd, &(0x7f0000004b80)={0x7}) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004c00)={&(0x7f0000004c40)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000004cc0)={0x0, 0x0, &(0x7f0000004d00)={&(0x7f0000004d40)=ANY=[@ANYBLOB="c00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffffffffff08000740010000012c000680140004000000000000000000000000000000000114000500200100"], 0xc0}, 0x1, 0x0, 0x0, 0x488c4}, 0x0) 1.300121349s ago: executing program 6 (id=545): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x8b) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x702, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) connect$can_j1939(r2, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x2200000) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000040)=0x3) sendmsg$netlink(r0, &(0x7f0000004d80)={0x0, 0x0, &(0x7f0000004d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002d0001002dbd7000ffdbdf25040093782f3c0594b915dd667bae118489352c2e7fbe4ea946a19e4ed38c26aebc4356350f79bc33df6109cf56660c5aa721179451ee00"/84], 0x1c}], 0x1}, 0x4000000) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x8000, 0x118, 0xa}, 0x18) mkdirat(r3, &(0x7f00000001c0)='./file0\x00', 0x2) 866.340667ms ago: executing program 0 (id=546): migrate_pages(0x0, 0xac, &(0x7f0000000540)=0xe9ad, &(0x7f0000000580)=0x1) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000440)={'veth1_to_bond\x00', 0x7}) r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='mnt\x00', 0x0, &(0x7f00000000c0), 0x0, 0x248, &(0x7f0000000100)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000380)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) (async) setuid(0xee01) (async) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f00000004c0)={@id={0x2, 0x0, @a}}) (async) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbf7, 0x200}, 0xc) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000001280)=ANY=[@ANYBLOB="620ac4ff00000000711093000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) 851.085355ms ago: executing program 6 (id=547): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x1b, &(0x7f0000000040)={@multicast, @random="f829cfd6adf0", @val={@void, {0x8100, 0x7, 0x1, 0x3}}, {@generic={0x8863, "cca7f946c93c698ca5"}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) 736.062848ms ago: executing program 2 (id=548): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb}, [@generic={0x73, 0x1, 0x1, 0x60}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={0x1, @in={{0x2, 0x4e21, @broadcast}}}, &(0x7f0000000340)=0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(r0, 0x84, 0x7a, &(0x7f0000000380)={r1, 0xffffffffffffffff, 0x800}, &(0x7f00000003c0)=0xc) rseq(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, 0xffffffffffffff17, 0x0, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x8, 0x4}, 0x4}, 0x20, 0x0, 0x0) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r2, 0xbabc) sendmmsg$inet_sctp(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@authinfo={0x18, 0x84, 0x6, {0xf8bd}}], 0x18, 0x42080}], 0x1, 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 732.601551ms ago: executing program 6 (id=549): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000000801"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfe63, 0xe7c) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f0000000300)=0xe8) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000180)='./file2\x00', &(0x7f00000001c0), 0x1000, &(0x7f0000000340)={'trans=virtio,', {[{@noextend}, {@noextend}, {@mmap}], [{@uid_lt={'uid<', r2}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@subj_type={'subj_type', 0x3d, '('}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@smackfshat}]}}) 646.786698ms ago: executing program 2 (id=550): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x87}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x106f) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x439, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7453c}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x68, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004805}, 0xc080) 639.127955ms ago: executing program 0 (id=551): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa08, &(0x7f0000000180)={{&(0x7f000069f000/0x1000)=nil, 0x1000}, 0x7, 0x2}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$video(&(0x7f00000001c0), 0xa7, 0x0) preadv(r4, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/147, 0x93}], 0x1, 0xfc43, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f0000000400)={&(0x7f00000003c0)={0xa, 0x4e23, 0x0, @mcast1, 0x9}, 0x1c, &(0x7f0000000580), 0x0, &(0x7f00000005c0)}, 0x0) ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, &(0x7f0000000380)=0xfffffc01) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x40080) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x300}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000080)) 543.945178ms ago: executing program 6 (id=552): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000380), 0x14002) mknodat$null(r0, &(0x7f00000003c0)='./proc\x00', 0x400, 0x103) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x2800000, &(0x7f0000000480)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@acl}, {@nomblk_io_submit}]}, 0x1, 0xbc5, &(0x7f0000000540)="$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") (async) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x2800000, &(0x7f0000000480)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@acl}, {@nomblk_io_submit}]}, 0x1, 0xbc5, &(0x7f0000000540)="$eJzs3M9rHNcdAPDvjH7balcupdS9WKUUG0rXsouMbQq1i0svPRTaa8BCXhmh9Q8kBUeyDqvkHwhJzoFcAklMgg/x2ZcEcs0lca4xOQRMUKwEQkgUZn9IsrSrH/GuxpE+H3ia9+bNzPt+NdLOe7C7ARxYw9mPNOJoRFxOIgr1/WlE9FZr/RGV2nHLSwvj3y4tjCexsvK/r5JIIuLx0sJ441pJfXu43uiPiI//mcRvXto87szc/NRYuVyarrdPzl67eXJmbv6vk9fGrpaulq6fOnN29PTomZFzo23L9bvPL9z75o///qLy/ds/3Pn61TeTuBCD9b71edSzfmrDMbz6O1mvOyLG2nD9Z0FXPZ/1eSbd25yUdjgoAABaStfN4X4XheiKtclbIT74JNfgAAAAgLZY6YpYAQAAAPa5xPofAAAA9rnG+wAeLy2MN0q+70jYW48uRsRQLf/leqn1dEeluu2Pnog49DiJ9R9rTWqnPbXhiHj42bn3shJNPofcaZXFiPh9s/ufVPMfqn8SemP+aUSMtGH84Q3tX1L+F9owft75A3Aw3b9Ye5Btfv6lq/OfaPL8627y7Po58n7+NeZ/y5vmf2v5d7WY//13h2Pcfuv1W636svz/fu9f7zZKNn62faqkduHRYsQfupvln6zmn7TI//IOxyj8eKvUqi/v/FfeiDgezfNvSLb+fqKTE5Pl0kjtZ9MxFj8afafV+Hnnn93/Qy3y3+7+33ziSq2/1Oe5S5futurbPv/0y97k/9Vab33PC2Ozs9OnInqT/2zef3rrfBvHNK6R5X/iT1v//zfLP3tNqNR/D1nmi/Vt1n5xw5j/uHP7/a3yz9Z+ed7/K63v/9mt7v/LOxzjzx++cqJV3/r1b1ay8R8mtbUwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADSkETEYSVqMiKRaT9NiMeJwRPw2DqXlGzOzf5m48fz1K1lfxFD0pBOT5dJIRBRq7SRrn6rW19qnN7T/FhFHIuK1wkC1XRy/Ub6Sd/IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACsOhwRg5GkxYhII2K5kKbFYt5RAQAAAG03lHcAAAAAQMdZ/wMAAMD+Z/0PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAhx05dv9BEhGV8wPVkumt9/XkGhnQaWneAQC56co7ACA33XkHAORml2t80wXYh5JW+yu1bX/LM/s6ExAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz6TjR+8/SCKicn6gWjK99b6epmcc28PogE5K8w4AyE3XVp3dexcHsPf8i8PB1XyNDxwkyTb9/WvHVJ7s6etYTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8ewarJUmLEZFW62laLEb8KiKGoieZmCyXRiLi1xHxaaGnL2v35R00AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbTczNz81Vi6XplVUdlEZ8PfT/kry5J6uiMgvnpxfmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyMXM3PzUWLlcmp7JOxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgbzNz81Nj5XJpegeVu7s5eF0l7xwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMjPTwEAAP//ZJAJlQ==") r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000001140)='.log\x00', 0xc21c2, 0x9c37611dc13d0db7) r2 = syz_open_dev$vim2m(&(0x7f0000001180), 0x20006, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000011c0)={0x50, 0x2, 0x0, "bc57499e007105bf0000000100100000e403000000000000000040002100", 0x38414761}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000011c0)={0x50, 0x2, 0x0, "bc57499e007105bf0000000100100000e403000000000000000040002100", 0x38414761}) r3 = syz_open_dev$vim2m(&(0x7f0000001200), 0xe000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000001240)={0x8, 0x1, 0x2, 0x0, 0x1}) fchown(r1, 0x0, 0xee01) (async) fchown(r1, 0x0, 0xee01) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) geteuid() (async) geteuid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000300)={'dummy0\x00', &(0x7f0000000340)=@ethtool_perm_addr={0x4b, 0x23, "5c76276f6c86622447091e9940a5f2781ad01612b415e66ee2f69b275061f3ca96d040"}}) (async) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000300)={'dummy0\x00', &(0x7f0000000340)=@ethtool_perm_addr={0x4b, 0x23, "5c76276f6c86622447091e9940a5f2781ad01612b415e66ee2f69b275061f3ca96d040"}}) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/mpls/platform_labels\x00', 0x1, 0x0) write$FUSE_STATFS(r5, 0x0, 0x0) syz_emit_ethernet(0x87a2f, 0x0, 0x0) execve(&(0x7f0000000100)='./proc/sys/net/mpls/platform_labels\x00', &(0x7f0000000240)={[&(0x7f0000000140)='.R-($./\x00', &(0x7f0000000180)='{#\xb2(#\x00', &(0x7f00000001c0)='\\^:.][\x15-*\x00', &(0x7f0000000200)='proc\x00']}, &(0x7f0000000280)) (async) execve(&(0x7f0000000100)='./proc/sys/net/mpls/platform_labels\x00', &(0x7f0000000240)={[&(0x7f0000000140)='.R-($./\x00', &(0x7f0000000180)='{#\xb2(#\x00', &(0x7f00000001c0)='\\^:.][\x15-*\x00', &(0x7f0000000200)='proc\x00']}, &(0x7f0000000280)) 452.530973ms ago: executing program 5 (id=553): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYRESHEX=r1], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) shutdown(r0, 0x1) 201.170333ms ago: executing program 0 (id=554): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x200000, &(0x7f0000000080), 0x3, 0x589, &(0x7f0000000580)="$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") (async) syz_emit_vhci(&(0x7f0000000b40)=ANY=[], 0x53) (async) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000b80)={0x7, 0x100}, 0x0) (async) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000bc0)=0x7) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000c00)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000c80)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000d00), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000d40), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000d80)=0x6) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0xf, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}}, 0x0) (async) chroot(0x0) (async) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000079b0480000000000890424000000000095000000"], &(0x7f0000000440)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000480)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 44.056438ms ago: executing program 6 (id=555): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x7221, &(0x7f0000000380)={0x0, 0xc3b2, 0x0, 0x1, 0x2, 0x0, 0x0}, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) (async) r2 = syz_io_uring_setup(0x7221, &(0x7f0000000380)={0x0, 0xc3b2, 0x0, 0x1, 0x2, 0x0, 0x0}, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f00000004c0)=0x626, 0x4) (async) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f00000004c0)=0x626, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000500)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r2, 0x8, 0x0, 0x91a, 0x2}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, 0x0, &(0x7f0000000040)=0x38) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, 0x0, &(0x7f0000000040)=0x38) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) (async) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r8, &(0x7f0000000040), 0xffffffffffffff58, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) (async) sendto$inet(r8, &(0x7f0000000040), 0xffffffffffffff58, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) shutdown(r8, 0x0) recvfrom(r8, &(0x7f00000000c0)=""/110, 0xfffffdbb, 0x754, 0x0, 0x0) (async) recvfrom(r8, &(0x7f00000000c0)=""/110, 0xfffffdbb, 0x754, 0x0, 0x0) ioctl$sock_SIOCINQ(r8, 0x541b, &(0x7f0000000180)) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r10 = socket$inet_udp(0x2, 0x2, 0x0) r11 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000006c0)={'bridge_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000700)={'sit0\x00', &(0x7f0000000740)={'syztnl0\x00', r12, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x7, 0x0, 0x40, 0x4, 0x0, @local, @loopback}}}}) 18.280297ms ago: executing program 5 (id=556): r0 = socket$inet(0x2, 0x3, 0xd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x10, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x94}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) read$FUSE(r2, &(0x7f00000002c0)={0x2020}, 0xfffffec1) getpid() openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 0s ago: executing program 2 (id=557): r0 = socket(0x10, 0x803, 0x0) close(0x3) r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000000000)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_io_uring_setup(0x34b8, &(0x7f0000000240)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000440)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000480)={0x28, 0x3, r7, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x525b}) openat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', 0x0, 0x9) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000500)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1000}}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) mbind(&(0x7f0000002000/0x3000)=nil, 0x3000, 0xa002, &(0x7f00000000c0)=0x3ff, 0x61, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x40, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x40}}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000f00)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0x3e, &(0x7f0000001200)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa}}}}}}, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000040), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x0, 0x10}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0xc840) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_read_part_table(0x5d4, &(0x7f0000000900)="$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") r12 = dup(r11) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TIOCL_SETSEL(r12, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x551}}) ioctl$TIOCL_SETSEL(r12, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0x107, 0x500, 0x100, 0x1, 0x4000}}) kernel console output (not intermixed with test programs): it [ 39.676544][ T5232] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.81: Corrupt directory, running e2fsck is recommended [ 39.677089][ T5232] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 39.677323][ T5232] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.81: corrupted in-inode xattr: e_name out of bounds [ 39.677349][ T5232] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 39.677847][ T5232] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.81: couldn't read orphan inode 15 (err -117) [ 39.677924][ T5232] loop1: lost filesystem error report for type 5 error -117 [ 39.678458][ T5232] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.722585][ T5231] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.764737][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.866163][ T5244] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.869313][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.885616][ T5244] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #12: comm syz.1.83: corrupted xattr block 6: invalid header [ 39.889874][ T5244] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #12: comm syz.1.83: corrupted xattr block 6: invalid header [ 39.896430][ T5244] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #12: comm syz.1.83: corrupted xattr block 6: invalid header [ 39.903198][ T5244] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #12: comm syz.1.83: corrupted xattr block 6: invalid header [ 39.915518][ T5244] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #12: comm syz.1.83: corrupted xattr block 6: invalid header [ 39.919325][ T5244] overlayfs: failed to create directory ./file0/work (errno: 117); mounting read-only [ 39.947998][ T4714] EXT4-fs warning (device loop1): ext4_rmdir:3194: inode #12: comm syz-executor: empty directory 'file0' has too many links (4) [ 39.948069][ T4714] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2933: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 39.948093][ T4714] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 39.952366][ T4714] EXT4-fs warning (device loop1): ext4_evict_inode:288: xattr delete (err -117) [ 39.952845][ T4714] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz-executor: corrupted xattr block 33: invalid header [ 39.965468][ T4714] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz-executor: corrupted xattr block 33: invalid header [ 39.967969][ T4714] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz-executor: corrupted xattr block 33: invalid header [ 39.968513][ T4714] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2933: inode #15: comm syz-executor: corrupted xattr block 33: invalid header [ 39.968536][ T4714] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 39.972294][ T4714] EXT4-fs warning (device loop1): ext4_evict_inode:288: xattr delete (err -117) [ 39.992512][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.103975][ T5251] overlayfs: failed lookup in lower (newroot/22, name='file0', err=-40): overlapping layers [ 40.104112][ T5251] overlayfs: failed lookup in lower (newroot/22, name='file0', err=-40): overlapping layers [ 40.114915][ T4476] rxe_eth0 speed is unknown, defaulting to 1000 [ 40.414639][ T5278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.91'. [ 40.416997][ T5279] netlink: 12 bytes leftover after parsing attributes in process `syz.1.91'. [ 40.552409][ T5293] device-mapper: table: 248:0: writecache: Invalid optional argument (-EINVAL) [ 40.552430][ T5293] device-mapper: ioctl: error adding target to table [ 40.651275][ T5305] overlayfs: fs on './bus' does not support file handles, falling back to xino=off. [ 40.651293][ T5305] overlayfs: conflicting lowerdir path [ 40.655529][ T5301] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.706355][ T5310] overlayfs: conflicting lowerdir path [ 41.526927][ T5330] set_capacity_and_notify: 4 callbacks suppressed [ 41.526941][ T5330] loop0: detected capacity change from 0 to 256 [ 41.545804][ T5330] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 41.545820][ T5330] FAT-fs (loop0): Filesystem has been set read-only [ 41.609245][ T5334] loop1: detected capacity change from 0 to 4096 [ 41.655816][ T5334] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.840874][ T5362] __nla_validate_parse: 1 callbacks suppressed [ 41.840900][ T5362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.104'. [ 42.286097][ T5374] netlink: 28 bytes leftover after parsing attributes in process `syz.2.110'. [ 42.301181][ T5374] loop2: detected capacity change from 0 to 256 [ 42.331228][ T5374] ip_tables: iptables: counters copy to user failed while replacing table [ 42.366547][ T5381] netlink: 24 bytes leftover after parsing attributes in process `syz.4.108'. [ 42.373514][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.444937][ T5384] netlink: 'syz.0.112': attribute type 11 has an invalid length. [ 42.444993][ T5384] netlink: 448 bytes leftover after parsing attributes in process `syz.0.112'. [ 42.487151][ T5364] loop4: detected capacity change from 0 to 32768 [ 42.519244][ T5364] Dev loop4 Sun disklabel: Csum bad, label corrupted [ 42.555732][ T5401] overlayfs: workdir and upperdir must be separate subtrees [ 42.666819][ T5411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.115'. [ 42.675971][ T5411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.115'. [ 42.855488][ T5427] loop2: detected capacity change from 0 to 4096 [ 42.856614][ T5427] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.865802][ T5427] EXT4-fs (loop2): Test dummy encryption mode enabled [ 42.865823][ T5427] EXT4-fs (loop2): DAX unsupported by block device. [ 42.881880][ T5414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.117'. [ 42.916289][ T5427] netlink: 16 bytes leftover after parsing attributes in process `syz.2.119'. [ 42.929362][ T5427] loop2: detected capacity change from 0 to 512 [ 42.942761][ T5427] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.119: bad orphan inode 15 [ 42.942784][ T5427] loop2: lost filesystem error report for type 5 error -117 [ 42.947357][ T5427] ext4_test_bit(bit=14, block=18) = 1 [ 42.947379][ T5427] is_bad_inode(inode)=0 [ 42.947384][ T5427] NEXT_ORPHAN(inode)=1023 [ 42.947389][ T5427] max_ino=32 [ 42.947392][ T5427] i_nlink=0 [ 42.949422][ T5427] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2933: inode #15: comm syz.2.119: corrupted xattr block 19: invalid header [ 42.949452][ T5427] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 42.949967][ T5427] EXT4-fs warning (device loop2): ext4_evict_inode:288: xattr delete (err -117) [ 42.965781][ T5427] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 42.988845][ T5427] EXT4-fs (loop2): shut down requested (2) [ 43.052261][ T4716] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 43.052469][ T4716] Bluetooth: hci1: Injecting HCI hardware error event [ 43.052963][ T4716] Bluetooth: hci1: hardware error 0x00 [ 43.089081][ T4725] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 43.170961][ T5450] loop2: detected capacity change from 0 to 2048 [ 43.188761][ T5450] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.193937][ T5450] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.325374][ T5462] netlink: 'syz.1.126': attribute type 29 has an invalid length. [ 43.325729][ T5462] netlink: 'syz.1.126': attribute type 29 has an invalid length. [ 43.380833][ T5470] netlink: 20 bytes leftover after parsing attributes in process `syz.4.124'. [ 43.724582][ T4405] veth1_vlan: left promiscuous mode [ 43.732209][ T5493] loop2: detected capacity change from 0 to 512 [ 43.734003][ T5493] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 43.740733][ T5493] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 43.748978][ T5493] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #11: comm syz.2.131: corrupted inode contents [ 43.748999][ T5493] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 43.749608][ T5493] EXT4-fs error (device loop2): ext4_dirty_inode:6736: inode #11: comm syz.2.131: mark_inode_dirty error [ 43.749631][ T5493] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 43.750385][ C0] EXT4-fs (loop2): error count since last fsck: 3 [ 43.750399][ C0] EXT4-fs (loop2): initial error at time 43: mb_free_blocks:2049: inode 11: block 64 [ 43.750418][ C0] EXT4-fs (loop2): last error at time 43: ext4_dirty_inode:6736: inode 11 [ 43.768150][ T5493] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.131: invalid indirect mapped block 1 (level 1) [ 43.768176][ T5493] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 43.769112][ T5493] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #11: comm syz.2.131: corrupted inode contents [ 43.771245][ T5493] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 43.774276][ T5493] EXT4-fs error (device loop2) in ext4_orphan_del:304: Corrupt filesystem [ 43.774567][ T5493] loop2: lost filesystem error report for type 5 error -117 [ 43.775479][ T5493] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #11: comm syz.2.131: corrupted inode contents [ 43.775500][ T5493] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 43.775860][ T5493] EXT4-fs error (device loop2): ext4_truncate:4721: inode #11: comm syz.2.131: mark_inode_dirty error [ 43.775873][ T5493] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 43.775995][ T5493] EXT4-fs error (device loop2) in ext4_process_orphan:346: Corrupt filesystem [ 43.776004][ T5493] loop2: lost filesystem error report for type 5 error -117 [ 43.776186][ T5493] EXT4-fs (loop2): 1 truncate cleaned up [ 43.778859][ T5493] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.785840][ T5493] EXT4-fs error (device loop2): ext4_readdir:280: inode #2: block 13: comm syz.2.131: path /31/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 43.834601][ T5493] EXT4-fs (loop2): shut down requested (0) [ 43.886774][ T5511] FAULT_INJECTION: forcing a failure. [ 43.886774][ T5511] name failslab, interval 1, probability 0, space 0, times 0 [ 43.886803][ T5511] CPU: 1 UID: 0 PID: 5511 Comm: syz.0.134 Tainted: G L syzkaller #0 PREEMPT [ 43.886816][ T5511] Tainted: [L]=SOFTLOCKUP [ 43.886819][ T5511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 43.886825][ T5511] Call trace: [ 43.886828][ T5511] show_stack+0x2c/0x3c (C) [ 43.886852][ T5511] __dump_stack+0x30/0x40 [ 43.886866][ T5511] dump_stack_lvl+0xd8/0x12c [ 43.886878][ T5511] dump_stack+0x1c/0x28 [ 43.886889][ T5511] should_fail_ex+0x418/0x58c [ 43.886898][ T5511] should_failslab+0xc4/0x120 [ 43.886907][ T5511] __kmalloc_noprof+0x108/0x6c8 [ 43.886917][ T5511] tomoyo_realpath_from_path+0xbc/0x4dc [ 43.886930][ T5511] tomoyo_path_number_perm+0x1f0/0x500 [ 43.886941][ T5511] tomoyo_file_ioctl+0x2c/0x3c [ 43.886953][ T5511] security_file_ioctl+0xdc/0x2b0 [ 43.886964][ T5511] __arm64_sys_ioctl+0xb0/0x1cc [ 43.886973][ T5511] invoke_syscall+0x98/0x244 [ 43.886985][ T5511] el0_svc_common+0xec/0x23c [ 43.886997][ T5511] do_el0_svc+0x4c/0x5c [ 43.887009][ T5511] el0_svc+0x60/0x1d8 [ 43.887017][ T5511] el0t_64_sync_handler+0x44/0x104 [ 43.887025][ T5511] el0t_64_sync+0x198/0x19c [ 43.887036][ T5511] ERROR: Out of memory at tomoyo_realpath_from_path. [ 44.022313][ T4725] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.121508][ T4726] Bluetooth: hci2: hcon 00000000421d5953 sent 0 < count 32771 [ 44.166578][ T5538] overlayfs: workdir and upperdir must be separate subtrees [ 44.231105][ T5543] loop1: detected capacity change from 0 to 512 [ 44.239806][ T5543] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.139: iget: bad i_size value: -1099511627766 [ 44.239958][ T5543] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.139: couldn't read orphan inode 15 (err -117) [ 44.239971][ T5543] loop1: lost filesystem error report for type 5 error -117 [ 44.240369][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 44.240384][ C0] EXT4-fs (loop1): initial error at time 44: ext4_orphan_get:1403: inode 15 [ 44.240400][ C0] EXT4-fs (loop1): last error at time 44: ext4_orphan_get:1408 [ 44.254002][ T5543] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.324238][ T5550] netlink: 168 bytes leftover after parsing attributes in process `syz.0.141'. [ 44.428402][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.556450][ T5574] FAULT_INJECTION: forcing a failure. [ 44.556450][ T5574] name failslab, interval 1, probability 0, space 0, times 0 [ 44.556479][ T5574] CPU: 1 UID: 0 PID: 5574 Comm: syz.1.147 Tainted: G L syzkaller #0 PREEMPT [ 44.556492][ T5574] Tainted: [L]=SOFTLOCKUP [ 44.556496][ T5574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 44.556501][ T5574] Call trace: [ 44.556504][ T5574] show_stack+0x2c/0x3c (C) [ 44.556526][ T5574] __dump_stack+0x30/0x40 [ 44.556539][ T5574] dump_stack_lvl+0xd8/0x12c [ 44.556550][ T5574] dump_stack+0x1c/0x28 [ 44.556562][ T5574] should_fail_ex+0x418/0x58c [ 44.556571][ T5574] should_failslab+0xc4/0x120 [ 44.556580][ T5574] __kmalloc_noprof+0x108/0x6c8 [ 44.556590][ T5574] __memcg_list_lru_alloc+0x1c4/0x4e8 [ 44.556600][ T5574] memcg_list_lru_alloc+0xc4/0xf8 [ 44.556608][ T5574] __memcg_slab_post_alloc_hook+0x22c/0x824 [ 44.556622][ T5574] kmem_cache_alloc_lru_noprof+0x32c/0x5d8 [ 44.556631][ T5574] __d_alloc+0x50/0x600 [ 44.556640][ T5574] d_make_root+0x48/0x90 [ 44.556649][ T5574] kernfs_get_tree+0x4e0/0x7dc [ 44.556660][ T5574] vfs_get_tree+0x90/0x28c [ 44.556671][ T5574] vfs_cmd_create+0xb8/0x1d0 [ 44.556681][ T5574] vfs_fsconfig_locked+0x17c/0x2bc [ 44.556691][ T5574] __arm64_sys_fsconfig+0x634/0x72c [ 44.556701][ T5574] invoke_syscall+0x98/0x244 [ 44.556713][ T5574] el0_svc_common+0xec/0x23c [ 44.556725][ T5574] do_el0_svc+0x4c/0x5c [ 44.556736][ T5574] el0_svc+0x60/0x1d8 [ 44.556745][ T5574] el0t_64_sync_handler+0x44/0x104 [ 44.556753][ T5574] el0t_64_sync+0x198/0x19c [ 44.673729][ T5583] netlink: 'syz.4.149': attribute type 8 has an invalid length. [ 44.697326][ T5585] loop4: detected capacity change from 0 to 512 [ 44.718063][ T5585] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.778931][ T30] audit: type=1326 audit(44.750:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5584 comm="syz.4.150" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa57a228 code=0x0 [ 44.916267][ T5596] C: renamed from veth1_to_team (while UP) [ 44.917984][ T5596] netlink: 'syz.2.151': attribute type 1 has an invalid length. [ 44.918373][ T5596] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 45.210479][ T4716] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 45.546792][ T5613] capability: warning: `syz.1.156' uses deprecated v2 capabilities in a way that may be insecure [ 45.586774][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.980898][ T3833] IPVS: starting estimator thread 0... [ 45.989935][ T5646] syzkaller0: entered promiscuous mode [ 45.989960][ T5646] syzkaller0: entered allmulticast mode [ 46.070449][ T5647] IPVS: using max 60 ests per chain, 144000 per kthread [ 46.590559][ T4726] Bluetooth: hci0: Opcode 0x0c13 failed: -110 [ 46.590887][ T4726] Bluetooth: hci0: command 0x0c13 tx timeout [ 46.592099][ T5651] random: crng reseeded on system resumption [ 46.726492][ T5657] tmpfs: Invalid uid '0x00000000ffffffff' [ 46.811785][ T5675] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 46.813892][ T5677] netlink: 'syz.1.171': attribute type 19 has an invalid length. [ 46.860497][ T5684] netlink: 'syz.1.171': attribute type 19 has an invalid length. [ 46.860516][ T5684] __nla_validate_parse: 72 callbacks suppressed [ 46.860523][ T5684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.171'. [ 46.921471][ T5695] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 46.921488][ T5695] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 46.925169][ T5695] vhci_hcd vhci_hcd.0: Device attached [ 46.927130][ T5696] vhci_hcd: connection closed [ 46.928485][ T3833] vhci_hcd vhci_hcd.1: stop threads [ 46.928653][ T3833] vhci_hcd vhci_hcd.1: release socket [ 46.928675][ T3833] vhci_hcd vhci_hcd.1: disconnect device [ 47.035101][ T5708] netlink: 'syz.2.176': attribute type 16 has an invalid length. [ 47.035119][ T5708] netlink: 156 bytes leftover after parsing attributes in process `syz.2.176'. [ 47.145425][ T5716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.145622][ T5716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.176006][ T5717] netlink: 16 bytes leftover after parsing attributes in process `syz.2.177'. [ 47.451002][ T5719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.179'. [ 47.683846][ T5734] loop0: detected capacity change from 0 to 512 [ 47.686532][ T5734] EXT4-fs: Invalid want_extra_isize 4 [ 47.802256][ T5745] loop4: detected capacity change from 0 to 512 [ 47.806380][ T5745] EXT4-fs warning (device loop4): read_mmp_block:110: Error -117 while reading MMP block 0 [ 47.850830][ T5745] loop4: detected capacity change from 0 to 512 [ 47.851626][ T5745] EXT4-fs warning (device loop4): read_mmp_block:110: Error -117 while reading MMP block 0 [ 47.996142][ T5759] could not allocate digest TFM handle crc32-pclmul [ 47.998383][ T5730] loop1: detected capacity change from 0 to 8192 [ 48.017305][ T5762] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 48.144516][ T5770] FAULT_INJECTION: forcing a failure. [ 48.144516][ T5770] name failslab, interval 1, probability 0, space 0, times 0 [ 48.144538][ T5770] CPU: 0 UID: 0 PID: 5770 Comm: syz.2.193 Tainted: G L syzkaller #0 PREEMPT [ 48.144549][ T5770] Tainted: [L]=SOFTLOCKUP [ 48.144552][ T5770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 48.144557][ T5770] Call trace: [ 48.144560][ T5770] show_stack+0x2c/0x3c (C) [ 48.144578][ T5770] __dump_stack+0x30/0x40 [ 48.144589][ T5770] dump_stack_lvl+0xd8/0x12c [ 48.144599][ T5770] dump_stack+0x1c/0x28 [ 48.144608][ T5770] should_fail_ex+0x418/0x58c [ 48.144616][ T5770] should_failslab+0xc4/0x120 [ 48.144624][ T5770] kmem_cache_alloc_noprof+0x94/0x5d4 [ 48.144633][ T5770] __kernfs_new_node+0xf0/0x7d8 [ 48.144643][ T5770] kernfs_new_node+0xe8/0x130 [ 48.144652][ T5770] __kernfs_create_file+0x60/0x2e0 [ 48.144661][ T5770] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 48.144671][ T5770] internal_create_group+0x550/0xb30 [ 48.144679][ T5770] internal_create_groups+0x64/0x138 [ 48.144686][ T5770] sysfs_create_groups+0x2c/0x3c [ 48.144693][ T5770] device_add_attrs+0xdc/0x4e4 [ 48.144702][ T5770] device_add+0x420/0x9e0 [ 48.144710][ T5770] rfkill_register+0x144/0x7bc [ 48.144721][ T5770] nfc_register_device+0x140/0x350 [ 48.144730][ T5770] nci_register_device+0x6b8/0x7e4 [ 48.144737][ T5770] virtual_ncidev_open+0x120/0x1a0 [ 48.144746][ T5770] misc_open+0x2dc/0x338 [ 48.144753][ T5770] chrdev_open+0x398/0x3e8 [ 48.144762][ T5770] do_dentry_open+0x5c4/0xfbc [ 48.144772][ T5770] vfs_open+0x44/0x2dc [ 48.144784][ T5770] path_openat+0x1084/0x18f0 [ 48.144794][ T5770] do_file_open+0x1c8/0x2e8 [ 48.144802][ T5770] do_sys_openat2+0x114/0x1e8 [ 48.144813][ T5770] do_sys_open+0xb0/0xe0 [ 48.144822][ T5770] __arm64_sys_openat+0xa8/0xc4 [ 48.144832][ T5770] invoke_syscall+0x98/0x244 [ 48.144842][ T5770] el0_svc_common+0xec/0x23c [ 48.144852][ T5770] do_el0_svc+0x4c/0x5c [ 48.144861][ T5770] el0_svc+0x60/0x1d8 [ 48.144868][ T5770] el0t_64_sync_handler+0x44/0x104 [ 48.144876][ T5770] el0t_64_sync+0x198/0x19c [ 48.247337][ T5790] loop2: detected capacity change from 0 to 1024 [ 48.257626][ T5790] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8043c01c, mo2=0002] [ 48.259638][ T5790] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 48.291873][ T5790] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8043c01c, mo2=0002] [ 48.291931][ T5790] EXT4-fs warning (device loop2): ext4_multi_mount_protect:324: MMP interval 1666 higher than expected, please wait. [ 48.291931][ T5790] [ 48.336150][ T5793] overlay: filesystem on ./file0 is read-only [ 48.375015][ T30] audit: type=1400 audit(48.350:3): lsm=SMACK fn=smack_file_fcntl action=denied subject="w" object="_" requested=w pid=5789 comm="syz.2.195" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10626 [ 48.398488][ T5797] trusted_key: encrypted_key: insufficient parameters specified [ 48.399114][ T5800] trusted_key: encrypted_key: insufficient parameters specified [ 48.421367][ T5800] FAULT_INJECTION: forcing a failure. [ 48.421367][ T5800] name failslab, interval 1, probability 0, space 0, times 0 [ 48.421396][ T5800] CPU: 1 UID: 0 PID: 5800 Comm: syz.4.196 Tainted: G L syzkaller #0 PREEMPT [ 48.421414][ T5800] Tainted: [L]=SOFTLOCKUP [ 48.421417][ T5800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 48.421422][ T5800] Call trace: [ 48.421426][ T5800] show_stack+0x2c/0x3c (C) [ 48.421447][ T5800] __dump_stack+0x30/0x40 [ 48.421458][ T5800] dump_stack_lvl+0xd8/0x12c [ 48.421468][ T5800] dump_stack+0x1c/0x28 [ 48.421477][ T5800] should_fail_ex+0x418/0x58c [ 48.421485][ T5800] should_failslab+0xc4/0x120 [ 48.421493][ T5800] __kmalloc_noprof+0x108/0x6c8 [ 48.421501][ T5800] sk_prot_alloc+0xc4/0x1e8 [ 48.421511][ T5800] sk_alloc+0x44/0x320 [ 48.421518][ T5800] __netlink_create+0x78/0x23c [ 48.421528][ T5800] netlink_create+0x3b4/0x610 [ 48.421538][ T5800] __sock_create+0x31c/0x670 [ 48.421547][ T5800] __sys_socket_create+0xc0/0x11c [ 48.421556][ T5800] __sys_socket+0x44/0xec [ 48.421565][ T5800] __arm64_sys_socket+0x84/0x9c [ 48.421574][ T5800] invoke_syscall+0x98/0x244 [ 48.421584][ T5800] el0_svc_common+0xec/0x23c [ 48.421593][ T5800] do_el0_svc+0x4c/0x5c [ 48.421603][ T5800] el0_svc+0x60/0x1d8 [ 48.421611][ T5800] el0t_64_sync_handler+0x44/0x104 [ 48.421618][ T5800] el0t_64_sync+0x198/0x19c [ 48.437019][ T5804] netlink: 40 bytes leftover after parsing attributes in process `syz.0.200'. [ 48.527356][ T5813] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 49.068672][ T5790] EXT4-fs warning (device loop2): ext4_multi_mount_protect:327: MMP startup interrupted, failing mount [ 49.068672][ T5790] [ 49.139342][ T4725] EXT4-fs error (device loop2): ext4_readdir:280: inode #11: block 32: comm syz-executor: path /42/file1/lost+found: bad entry in directory: directory entry overrun - offset=12, inode=16777218, rec_len=196620, size=1024 fake=1 [ 49.209170][ T4725] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.242452][ T5822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.207'. [ 49.271326][ T4726] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 49.271977][ T4726] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 49.272278][ T4726] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 49.272765][ T4726] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 49.273341][ T4726] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 49.321294][ T5831] loop2: detected capacity change from 0 to 1024 [ 49.336462][ T5831] FAULT_INJECTION: forcing a failure. [ 49.336462][ T5831] name failslab, interval 1, probability 0, space 0, times 0 [ 49.336486][ T5831] CPU: 0 UID: 0 PID: 5831 Comm: syz.2.210 Tainted: G L syzkaller #0 PREEMPT [ 49.336501][ T5831] Tainted: [L]=SOFTLOCKUP [ 49.336505][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 49.336510][ T5831] Call trace: [ 49.336513][ T5831] show_stack+0x2c/0x3c (C) [ 49.336535][ T5831] __dump_stack+0x30/0x40 [ 49.336550][ T5831] dump_stack_lvl+0xd8/0x12c [ 49.336561][ T5831] dump_stack+0x1c/0x28 [ 49.336573][ T5831] should_fail_ex+0x418/0x58c [ 49.336582][ T5831] should_failslab+0xc4/0x120 [ 49.336591][ T5831] __kmalloc_noprof+0x108/0x6c8 [ 49.336600][ T5831] security_sk_alloc+0x60/0x35c [ 49.336614][ T5831] sk_prot_alloc+0xe0/0x1e8 [ 49.336624][ T5831] sk_alloc+0x44/0x320 [ 49.336632][ T5831] can_create+0x19c/0x530 [ 49.336644][ T5831] __sock_create+0x31c/0x670 [ 49.336655][ T5831] __sys_socket_create+0xc0/0x11c [ 49.336666][ T5831] __sys_socket+0x44/0xec [ 49.336676][ T5831] __arm64_sys_socket+0x84/0x9c [ 49.336688][ T5831] invoke_syscall+0x98/0x244 [ 49.336700][ T5831] el0_svc_common+0xec/0x23c [ 49.336712][ T5831] do_el0_svc+0x4c/0x5c [ 49.336723][ T5831] el0_svc+0x60/0x1d8 [ 49.336731][ T5831] el0t_64_sync_handler+0x44/0x104 [ 49.336740][ T5831] el0t_64_sync+0x198/0x19c [ 49.413646][ T5840] dlm: plock device version mismatch: kernel (1.2.0), user (1869670251.552346378.528026997) [ 49.478486][ T5854] netlink: 28 bytes leftover after parsing attributes in process `syz.2.215'. [ 49.487172][ T5851] netlink: 28 bytes leftover after parsing attributes in process `syz.0.214'. [ 49.487195][ T5851] netlink: 28 bytes leftover after parsing attributes in process `syz.0.214'. [ 49.487208][ T5851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.214'. [ 49.498723][ T5824] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.557137][ T5863] device-mapper: table: 248:1: writecache: Invalid optional argument (-EINVAL) [ 49.557158][ T5863] device-mapper: ioctl: error adding target to table [ 49.557872][ T5860] bond1: entered allmulticast mode [ 49.558150][ T5860] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.608289][ T5875] loop1: detected capacity change from 0 to 256 [ 49.657735][ T5879] No such timeout policy "syz1" [ 49.659203][ T30] audit: type=1326 audit(49.630:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5878 comm="syz.0.223" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa97a228 code=0x7ffc0000 [ 49.659228][ T30] audit: type=1326 audit(49.630:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5878 comm="syz.0.223" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa97a228 code=0x7ffc0000 [ 49.675925][ T30] audit: type=1326 audit(49.630:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5878 comm="syz.0.223" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa97a228 code=0x7ffc0000 [ 49.675958][ T30] audit: type=1326 audit(49.640:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5878 comm="syz.0.223" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa97a228 code=0x7ffc0000 [ 49.675981][ T30] audit: type=1326 audit(49.640:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5878 comm="syz.0.223" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=226 compat=0 ip=0xffffaa97a228 code=0x7ffc0000 [ 49.675999][ T30] audit: type=1326 audit(49.640:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5878 comm="syz.0.223" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa97a228 code=0x7ffc0000 [ 49.676015][ T30] audit: type=1326 audit(49.640:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5878 comm="syz.0.223" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa97a228 code=0x7ffc0000 [ 49.676031][ T30] audit: type=1326 audit(49.640:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5878 comm="syz.0.223" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa97a228 code=0x7ffc0000 [ 49.715172][ T4723] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.769269][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.769857][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.769922][ T5824] bridge_slave_0: entered allmulticast mode [ 49.775911][ T5824] bridge_slave_0: entered promiscuous mode [ 49.814957][ T40] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.832904][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.832973][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.833074][ T5824] bridge_slave_1: entered allmulticast mode [ 49.833527][ T5824] bridge_slave_1: entered promiscuous mode [ 49.861813][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.877437][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.919767][ T40] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.958426][ T5824] team0: Port device team_slave_0 added [ 49.959630][ T5824] team0: Port device team_slave_1 added [ 49.988987][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.989004][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.989021][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.992747][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.992756][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.992772][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.085209][ T40] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.101929][ T5824] hsr_slave_0: entered promiscuous mode [ 50.103474][ T5824] hsr_slave_1: entered promiscuous mode [ 50.104293][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 50.104308][ T5824] Cannot create hsr debugfs directory [ 50.165036][ T5913] fuse: Unknown parameter 'f¡' [ 50.187571][ T40] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.293899][ T5824] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 50.307972][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.308491][ T5824] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 50.314036][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.314588][ T5824] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 50.315849][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.316330][ T5824] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 50.317490][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.406788][ T40] bridge_slave_1: left allmulticast mode [ 50.406818][ T40] bridge_slave_1: left promiscuous mode [ 50.407437][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.416213][ T40] bridge_slave_0: left allmulticast mode [ 50.416232][ T40] bridge_slave_0: left promiscuous mode [ 50.416328][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.494204][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.512101][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.551503][ T40] bond0 (unregistering): Released all slaves [ 50.568591][ T5936] ip6erspan0: entered allmulticast mode [ 50.597750][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.603933][ T40] tipc: Left network mode [ 50.609531][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.629298][ T3272] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.629329][ T3272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.629879][ T3272] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.629900][ T3272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.831002][ T4405] 8021q: adding VLAN 0 to HW filter on device eth0 [ 50.958727][ T40] hsr_slave_0: left promiscuous mode [ 50.959168][ T40] hsr_slave_1: left promiscuous mode [ 50.959582][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.959600][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.960313][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.994849][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.080294][ T40] veth1_macvtap: left promiscuous mode [ 51.082230][ T40] veth0_macvtap: left promiscuous mode [ 51.085308][ T40] veth1_vlan: left promiscuous mode [ 51.085794][ T40] veth0_vlan: left promiscuous mode [ 51.300594][ T4716] Bluetooth: hci5: command tx timeout [ 51.364248][ T40] team0 (unregistering): Port device team_slave_1 removed [ 51.368228][ T40] team0 (unregistering): Port device team_slave_0 removed [ 51.436089][ T4405] 8021q: adding VLAN 0 to HW filter on device eth1 [ 51.438850][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.557330][ T6014] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 51.608958][ T5824] veth0_vlan: entered promiscuous mode [ 51.619674][ T5824] veth1_vlan: entered promiscuous mode [ 51.641014][ T5824] veth0_macvtap: entered promiscuous mode [ 51.642193][ T5824] veth1_macvtap: entered promiscuous mode [ 51.652749][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.663739][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.700088][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.700105][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.716585][ T3131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.716599][ T3131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.731791][ T3702] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.732167][ T3702] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.732189][ T3702] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.732208][ T3702] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.748427][ T6031] netlink: 'syz.0.245': attribute type 30 has an invalid length. [ 51.757497][ T6031] netlink: 'syz.0.245': attribute type 30 has an invalid length. [ 51.759574][ T3131] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.759772][ T3131] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.759888][ T3131] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.782313][ T40] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.796410][ T4405] 8021q: adding VLAN 0 to HW filter on device eth2 [ 51.873888][ T6054] loop2: detected capacity change from 0 to 256 [ 51.876084][ T6054] vfat: Unknown parameter 'noumtail' [ 51.926303][ T6057] loop0: detected capacity change from 0 to 256 [ 51.935142][ T6057] vfat: Unknown parameter 'nnonumtail' [ 51.938498][ T6046] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 51.979526][ T6060] loop4: detected capacity change from 0 to 4096 [ 52.057075][ T6060] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.096033][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.117091][ T6083] tipc: Started in network mode [ 52.117111][ T6083] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 52.117225][ T6083] tipc: Enabled bearer , priority 0 [ 52.190174][ T4405] 8021q: adding VLAN 0 to HW filter on device eth3 [ 52.598798][ T6099] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.646180][ T4714] EXT4-fs error (device loop1): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 52.649679][ T4714] EXT4-fs error (device loop1): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 52.696920][ T6108] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.779472][ T6112] set_capacity_and_notify: 3 callbacks suppressed [ 52.779486][ T6112] loop2: detected capacity change from 0 to 512 [ 52.791746][ T6112] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 52.791767][ T6112] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 52.797053][ T6112] EXT4-fs (loop2): 1 truncate cleaned up [ 52.797551][ T6112] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.828982][ T4725] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.894803][ T6123] netlink: 'syz.4.263': attribute type 2 has an invalid length. [ 52.959528][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.034641][ T6137] loop2: detected capacity change from 0 to 512 [ 53.037857][ T6137] EXT4-fs: Ignoring removed nobh option [ 53.075033][ T4726] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.078227][ T6137] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 53.078746][ T4726] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.079529][ T4726] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.079894][ T4726] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.080228][ T4726] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.091339][ T6137] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 53.095437][ T6137] EXT4-fs (loop2): Remounting filesystem read-only [ 53.095589][ T6137] EXT4-fs (loop2): 1 truncate cleaned up [ 53.096048][ T6137] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.115179][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.118420][ T6137] __nla_validate_parse: 7 callbacks suppressed [ 53.118437][ T6137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.269'. [ 53.174251][ T6150] netlink: 'syz.2.269': attribute type 10 has an invalid length. [ 53.185657][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.200766][ T6150] macvlan1: entered promiscuous mode [ 53.200785][ T6150] macvlan1: entered allmulticast mode [ 53.204959][ T6150] veth1_vlan: entered allmulticast mode [ 53.206578][ T6150] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 53.209258][ T6137] netlink: 'syz.2.269': attribute type 4 has an invalid length. [ 53.209274][ T6137] netlink: 156 bytes leftover after parsing attributes in process `syz.2.269'. [ 53.236396][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.238415][ T4725] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.247900][ T4916] tipc: Node number set to 43690 [ 53.259909][ T6138] rxe_eth0 speed is unknown, defaulting to 1000 [ 53.380562][ T4716] Bluetooth: hci5: command tx timeout [ 53.424047][ T13] bridge_slave_1: left allmulticast mode [ 53.424066][ T13] bridge_slave_1: left promiscuous mode [ 53.424138][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.425706][ T13] bridge_slave_0: left allmulticast mode [ 53.425781][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.441406][ T4774] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 53.503116][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.521756][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.551400][ T13] bond0 (unregistering): Released all slaves [ 53.593996][ T6138] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.594028][ T6138] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.594107][ T6138] bridge_slave_0: entered allmulticast mode [ 53.595456][ T6138] bridge_slave_0: entered promiscuous mode [ 53.599007][ T4774] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 53.604846][ T4774] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.604958][ T4774] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 53.604984][ T4774] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.605678][ T6138] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.606041][ T6138] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.606114][ T6138] bridge_slave_1: entered allmulticast mode [ 53.607865][ T6138] bridge_slave_1: entered promiscuous mode [ 53.645465][ T6138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.657306][ T4774] cxacru 1-1:1.0: usbatm_usb_probe: bind failed: -19! [ 53.687381][ T6138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.700158][ T6138] team0: Port device team_slave_0 added [ 53.708279][ T6138] team0: Port device team_slave_1 added [ 53.748867][ T6138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.748880][ T6138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.748895][ T6138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.749775][ T6138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.749782][ T6138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.749797][ T6138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.762427][ T6138] hsr_slave_0: entered promiscuous mode [ 53.762747][ T6138] hsr_slave_1: entered promiscuous mode [ 53.763033][ T6138] debugfs: 'hsr0' already exists in 'hsr' [ 53.763044][ T6138] Cannot create hsr debugfs directory [ 53.806978][ T4405] 8021q: adding VLAN 0 to HW filter on device eth4 [ 53.975775][ T13] hsr_slave_0: left promiscuous mode [ 53.976039][ T13] hsr_slave_1: left promiscuous mode [ 53.976311][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.976323][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.976655][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.976666][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.980262][ T13] veth1_macvtap: left promiscuous mode [ 53.980289][ T13] veth0_macvtap: left promiscuous mode [ 53.985037][ T13] veth1_vlan: left promiscuous mode [ 53.985079][ T13] veth0_vlan: left promiscuous mode [ 54.119675][ T13] team0 (unregistering): Port device team_slave_1 removed [ 54.129768][ T13] team0 (unregistering): Port device team_slave_0 removed [ 54.177380][ T6203] netlink: 'syz.2.275': attribute type 10 has an invalid length. [ 54.177687][ T6204] netlink: 'syz.2.275': attribute type 10 has an invalid length. [ 54.202573][ T4405] 8021q: adding VLAN 0 to HW filter on device eth5 [ 54.216064][ T6203] netlink: 'syz.2.275': attribute type 10 has an invalid length. [ 54.216145][ T6203] netlink: 'syz.2.275': attribute type 10 has an invalid length. [ 54.216207][ T6203] netlink: 'syz.2.275': attribute type 10 has an invalid length. [ 54.233038][ T6138] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 54.237756][ T6138] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 54.243425][ T6138] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 54.248653][ T6138] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 54.249124][ T6138] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 54.256049][ T6138] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 54.257322][ T6138] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 54.262012][ T6138] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 54.336620][ T6138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.336932][ T6216] netlink: 20 bytes leftover after parsing attributes in process `syz.2.277'. [ 54.347387][ T6138] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.351321][ T3272] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.351367][ T3272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.356697][ T3272] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.356723][ T3272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.424640][ T6231] netlink: 20 bytes leftover after parsing attributes in process `syz.2.279'. [ 54.478859][ T6244] loop2: detected capacity change from 0 to 512 [ 54.487029][ T6244] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 54.487051][ T6244] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 54.494507][ T6244] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 54.494548][ T6244] System zones: 1-12 [ 54.497940][ T4405] 8021q: adding VLAN 0 to HW filter on device eth6 [ 54.504574][ T6244] EXT4-fs (loop2): 1 truncate cleaned up [ 54.505083][ T6244] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.549399][ T4725] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.639588][ T6138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.767156][ T6138] veth0_vlan: entered promiscuous mode [ 54.769509][ T6138] veth1_vlan: entered promiscuous mode [ 54.776064][ T4405] 8021q: adding VLAN 0 to HW filter on device eth7 [ 54.798892][ T6302] psci: CPU1 killed (polled 0 ms) [ 54.826267][ T6138] veth0_macvtap: entered promiscuous mode [ 54.827693][ T6138] veth1_macvtap: entered promiscuous mode [ 54.854841][ T6138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.864374][ T6138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.869905][ T6310] loop2: detected capacity change from 0 to 128 [ 54.942859][ T2577] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.942895][ T2577] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.942911][ T2577] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.942927][ T2577] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.048360][ T2577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.048379][ T2577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.090625][ T4716] Bluetooth: hci0: command tx timeout [ 55.105718][ T3833] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.105734][ T3833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.139387][ T6320] loop5: detected capacity change from 0 to 512 [ 55.196251][ T6320] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.234847][ T6302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.287'. [ 55.254174][ T6330] netlink: 40 bytes leftover after parsing attributes in process `syz.6.267'. [ 55.297408][ T6329] loop6: detected capacity change from 0 to 4096 [ 55.318289][ T6329] ext4: Unknown parameter '/dev/random' [ 55.357837][ T5824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.391512][ T4716] Bluetooth: hci5: command tx timeout [ 55.498694][ T6336] netlink: 24 bytes leftover after parsing attributes in process `syz.5.290'. [ 55.818004][ T6352] overlayfs: failed lookup in lower (newroot/69, name='file0', err=-40): overlapping layers [ 55.898424][ T6364] synth uevent: /devices/pci0000:00/0000:00:02.0: unknown uevent action string [ 55.898461][ T6364] nvme 0000:00:02.0: uevent: failed to send synthetic uevent: -22 [ 55.914468][ T6361] loop6: detected capacity change from 0 to 2048 [ 55.949952][ T6361] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.009822][ T6361] EXT4-fs error (device loop6): ext4_validate_block_bitmap:436: comm syz.6.297: bg 0: block 2: invalid block bitmap [ 56.022628][ T6361] fs-verity (loop6, inode 13): ext4_end_enable_verity() failed with err -28 [ 56.105461][ T6138] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.169256][ T6380] netlink: 228 bytes leftover after parsing attributes in process `syz.2.302'. [ 56.175616][ T6378] loop5: detected capacity change from 0 to 128 [ 56.183395][ T6378] ext4: Unknown parameter 'hash' [ 56.226223][ T4916] usb 1-1: USB disconnect, device number 2 [ 56.241727][ T6380] loop2: detected capacity change from 0 to 512 [ 56.273620][ T6387] binder: 6385:6387 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 56.285869][ T6380] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.309610][ T6387] binder: 6385:6387 Acquire 1 refcount change on invalid ref 0 ret -22 [ 56.309680][ T6390] binder: 6385:6390 got transaction to invalid handle, 1 [ 56.309749][ T6390] binder: 6385:6390 cannot find target node [ 56.309764][ T6390] binder: 6385:6390 transaction call to 0:0 failed 2/29201/-22, code 0 size 104-24 line 3253 [ 56.321188][ T10] binder: undelivered TRANSACTION_ERROR: 29201 [ 56.333818][ T6380] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 56.334170][ T6380] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 56.334184][ T6380] EXT4-fs (loop2): This should not happen!! Data will be lost [ 56.334184][ T6380] [ 56.334192][ T6380] EXT4-fs (loop2): Total free blocks count 0 [ 56.334199][ T6380] EXT4-fs (loop2): Free/Dirty block details [ 56.334212][ T6380] EXT4-fs (loop2): free_blocks=65280 [ 56.334224][ T6380] EXT4-fs (loop2): dirty_blocks=33 [ 56.334230][ T6380] EXT4-fs (loop2): Block reservation details [ 56.334237][ T6380] EXT4-fs (loop2): i_reserved_data_blocks=33 [ 56.467787][ T4725] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.796279][ T6415] Bluetooth: MGMT ver 1.23 [ 56.994473][ T6420] binder: 6414:6420 BC_ACQUIRE_DONE node 3 has no pending acquire request [ 57.034238][ T6421] Injecting memory failure for pfn 0x13ab7c at process virtual address 0x20000000 [ 57.035588][ T6423] Injecting memory failure for pfn 0x13ab7c at process virtual address 0x20000000 [ 57.037956][ T6421] Memory failure: 0x13ab7c: Sending SIGBUS to syz.4.314:6421 due to hardware memory corruption [ 57.037999][ T6421] Memory failure: 0x13ab7c: recovery action for dirty LRU page: Recovered [ 57.038037][ T6423] Memory failure: 0x13ab7c: Sending SIGBUS to syz.4.314:6423 due to hardware memory corruption [ 57.038120][ T6423] Memory failure: 0x13ab7c: recovery action for already poisoned page: Failed [ 57.038529][ T6421] Injecting memory failure for pfn 0x13abb3 at process virtual address 0x20001000 [ 57.038587][ T6421] Memory failure: 0x13abb3: keeping poisoned page in swap cache [ 57.038706][ T6421] Memory failure: 0x13abb3: recovery action for clean swapcache page: Recovered [ 57.038724][ T6421] Injecting memory failure for pfn 0x13abb2 at process virtual address 0x20002000 [ 57.038748][ T6421] Memory failure: 0x13abb2: keeping poisoned page in swap cache [ 57.038767][ T6421] Memory failure: 0x13abb2: recovery action for clean swapcache page: Recovered [ 57.038781][ T6421] Injecting memory failure for pfn 0x13abb1 at process virtual address 0x20003000 [ 57.038798][ T6421] Memory failure: 0x13abb1: keeping poisoned page in swap cache [ 57.040177][ T6421] Memory failure: 0x13abb1: recovery action for clean swapcache page: Recovered [ 57.040197][ T6421] Injecting memory failure for pfn 0x216bf1 at process virtual address 0x20004000 [ 57.077738][ T6421] Memory failure: 0x216bf1: unhandlable page. [ 57.077756][ T6421] Memory failure: 0x216bf1: recovery action for reserved kernel page: Ignored [ 57.132158][ T4726] Bluetooth: hci0: command tx timeout [ 57.134530][ T6428] loop4: detected capacity change from 0 to 512 [ 57.135930][ T6428] EXT4-fs: Ignoring removed bh option [ 57.135965][ T6428] ext4: Unknown parameter 'nouser_xattr' [ 57.244764][ T6430] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 57.244781][ T6430] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c01c, mo2=0002] [ 57.244819][ T6430] System zones: 1-12 [ 57.244913][ T6430] EXT4-fs (loop6): couldn't mount RDWR because of unsupported optional features (80) [ 57.244922][ T6430] EXT4-fs (loop6): Skipping orphan cleanup due to unknown ROCOMPAT features [ 57.248525][ T6430] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 57.308511][ T6433] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 57.389668][ T6430] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #2: block 3: comm syz.6.318: lblock 0 mapped to illegal pblock 3 (length 1) [ 57.395100][ T6430] EXT4-fs warning (device loop6): dx_probe:791: inode #2: lblock 0: comm syz.6.318: error -EUCLEAN reading directory block [ 57.451738][ T4726] Bluetooth: hci5: command tx timeout [ 57.477731][ T6138] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.645416][ T6442] random: crng reseeded on system resumption [ 57.672914][ T6442] FAULT_INJECTION: forcing a failure. [ 57.672914][ T6442] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 57.672937][ T6442] CPU: 0 UID: 0 PID: 6442 Comm: syz.0.321 Tainted: G L syzkaller #0 PREEMPT [ 57.672950][ T6442] Tainted: [L]=SOFTLOCKUP [ 57.672953][ T6442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 57.672959][ T6442] Call trace: [ 57.672962][ T6442] show_stack+0x2c/0x3c (C) [ 57.672981][ T6442] __dump_stack+0x30/0x40 [ 57.672994][ T6442] dump_stack_lvl+0xd8/0x12c [ 57.673006][ T6442] dump_stack+0x1c/0x28 [ 57.673017][ T6442] should_fail_ex+0x418/0x58c [ 57.673026][ T6442] should_fail_alloc_page+0xec/0x10c [ 57.673036][ T6442] prepare_alloc_pages+0x194/0x484 [ 57.673045][ T6442] __alloc_frozen_pages_noprof+0x180/0x578 [ 57.673054][ T6442] alloc_pages_mpol+0x1fc/0x3d0 [ 57.673065][ T6442] alloc_frozen_pages_noprof+0xc4/0x10c [ 57.673075][ T6442] alloc_pages_noprof+0x30/0x148 [ 57.673085][ T6442] get_free_pages_noprof+0x1c/0xbc [ 57.673093][ T6442] get_zeroed_page_noprof+0x18/0x24 [ 57.673102][ T6442] get_image_page+0x30/0x1f8 [ 57.673112][ T6442] alloc_rtree_node+0x48/0xac [ 57.673120][ T6442] memory_bm_create+0x3ec/0x60c [ 57.673129][ T6442] create_basic_memory_bitmaps+0x88/0x34c [ 57.673138][ T6442] snapshot_open+0x18c/0x270 [ 57.673147][ T6442] misc_open+0x2dc/0x338 [ 57.673156][ T6442] chrdev_open+0x398/0x3e8 [ 57.673167][ T6442] do_dentry_open+0x5c4/0xfbc [ 57.673178][ T6442] vfs_open+0x44/0x2dc [ 57.673189][ T6442] path_openat+0x1084/0x18f0 [ 57.673200][ T6442] do_file_open+0x1c8/0x2e8 [ 57.673210][ T6442] do_sys_openat2+0x114/0x1e8 [ 57.673221][ T6442] do_sys_open+0xb0/0xe0 [ 57.673233][ T6442] __arm64_sys_openat+0xa8/0xc4 [ 57.673245][ T6442] invoke_syscall+0x98/0x244 [ 57.673257][ T6442] el0_svc_common+0xec/0x23c [ 57.673269][ T6442] do_el0_svc+0x4c/0x5c [ 57.673280][ T6442] el0_svc+0x60/0x1d8 [ 57.673289][ T6442] el0t_64_sync_handler+0x44/0x104 [ 57.673297][ T6442] el0t_64_sync+0x198/0x19c [ 57.821715][ T6453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.322'. [ 57.821760][ T6453] netlink: 48 bytes leftover after parsing attributes in process `syz.0.322'. [ 57.969020][ T6443] infiniband syz2: set active [ 57.975906][ T6443] infiniband syz2: added bond_slave_0 [ 58.217829][ T6459] __nla_validate_parse: 1 callbacks suppressed [ 58.217847][ T6459] netlink: 4 bytes leftover after parsing attributes in process `syz.5.323'. [ 58.228111][ T6443] RDS/IB: syz2: added [ 58.228138][ T6443] smc: adding ib device syz2 with port count 1 [ 58.228151][ T6443] smc: ib device syz2 port 1 has no pnetid [ 58.347276][ T6466] netlink: 64 bytes leftover after parsing attributes in process `syz.4.326'. [ 58.396468][ T6466] syzkaller1: entered promiscuous mode [ 58.396487][ T6466] syzkaller1: entered allmulticast mode [ 58.430000][ T6466] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.530214][ T6473] set_capacity_and_notify: 2 callbacks suppressed [ 58.530231][ T6473] loop4: detected capacity change from 0 to 128 [ 58.539314][ T6473] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 58.539338][ T6473] FAT-fs (loop4): data area starts beyond volume (36 > 6) [ 58.539347][ T6473] FAT-fs (loop4): Can't find a valid FAT filesystem [ 59.589514][ T4726] Bluetooth: hci0: command 0x040f tx timeout [ 59.589635][ T4716] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 59.786585][ T6483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.331'. [ 59.803279][ T6487] loop0: detected capacity change from 0 to 512 [ 59.804426][ T6483] team0: Port device team_slave_0 removed [ 59.814899][ T6487] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 59.841464][ T6489] loop2: detected capacity change from 0 to 512 [ 59.841965][ T6489] EXT4-fs: Ignoring removed i_version option [ 59.848214][ T6489] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.848243][ T6489] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 59.860779][ T6489] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c128, mo2=0003] [ 59.860809][ T6489] System zones: 0-1, 18-18, 34-34, 36-36 [ 59.860921][ T6489] EXT4-fs (loop2): orphan cleanup on readonly fs [ 59.863616][ T6487] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 59.883283][ T6489] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.333: bg 0: block 64: padding at end of block bitmap is not set [ 59.883307][ T6489] loop2: lost filesystem error report for type 5 error -117 [ 59.890386][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 59.890404][ C0] EXT4-fs (loop2): initial error at time 59: ext4_validate_block_bitmap:445 [ 59.890417][ C0] EXT4-fs (loop2): last error at time 59: ext4_validate_block_bitmap:445 [ 59.900458][ T6489] EXT4-fs (loop2): Remounting filesystem read-only [ 59.900645][ T6489] __quota_error: 19 callbacks suppressed [ 59.900652][ T6489] Quota error (device loop2): write_blk: dquota write failed [ 59.900704][ T6489] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 59.901076][ T6489] EXT4-fs (loop2): 1 truncate cleaned up [ 59.910237][ T6491] netlink: 8 bytes leftover after parsing attributes in process `syz.5.330'. [ 59.916904][ T6489] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 59.959254][ T4725] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.971489][ T6491] device-mapper: table: 248:1: writecache: Origin data device lookup failed (-ENOENT) [ 59.971510][ T6491] device-mapper: ioctl: error adding target to table [ 60.029182][ T6499] loop0: detected capacity change from 0 to 256 [ 60.044483][ T6499] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 60.163934][ T6505] loop2: detected capacity change from 0 to 2048 [ 60.179471][ T6502] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 60.179488][ T6502] FAT-fs (loop0): Filesystem has been set read-only [ 60.189504][ T6508] loop5: detected capacity change from 0 to 1024 [ 60.215294][ T6505] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.218018][ T6508] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.278835][ T6508] syzkaller1: entered promiscuous mode [ 60.278854][ T6508] syzkaller1: entered allmulticast mode [ 60.356759][ T6515] loop9: detected capacity change from 0 to 524288000 [ 60.417849][ T5824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.553420][ T6523] netlink: 48 bytes leftover after parsing attributes in process `syz.5.341'. [ 60.743320][ T6524] netlink: 4 bytes leftover after parsing attributes in process `syz.6.340'. [ 60.773985][ T6524] veth3: entered promiscuous mode [ 60.809645][ T6523] FAULT_INJECTION: forcing a failure. [ 60.809645][ T6523] name failslab, interval 1, probability 0, space 0, times 0 [ 60.809668][ T6523] CPU: 0 UID: 0 PID: 6523 Comm: syz.5.341 Tainted: G L syzkaller #0 PREEMPT [ 60.809682][ T6523] Tainted: [L]=SOFTLOCKUP [ 60.809686][ T6523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 60.809692][ T6523] Call trace: [ 60.809695][ T6523] show_stack+0x2c/0x3c (C) [ 60.809717][ T6523] __dump_stack+0x30/0x40 [ 60.809732][ T6523] dump_stack_lvl+0xd8/0x12c [ 60.809743][ T6523] dump_stack+0x1c/0x28 [ 60.809755][ T6523] should_fail_ex+0x418/0x58c [ 60.809764][ T6523] should_failslab+0xc4/0x120 [ 60.809773][ T6523] kmem_cache_alloc_noprof+0x94/0x5d4 [ 60.809783][ T6523] __kernfs_new_node+0xf0/0x7d8 [ 60.809798][ T6523] kernfs_new_node+0xe8/0x130 [ 60.809808][ T6523] kernfs_create_link+0x98/0x1e4 [ 60.809820][ T6523] sysfs_do_create_link_sd+0x8c/0x120 [ 60.809829][ T6523] sysfs_create_link+0x74/0x94 [ 60.809837][ T6523] device_create_sys_dev_entry+0x124/0x198 [ 60.809850][ T6523] device_add+0x64c/0x9e0 [ 60.809860][ T6523] device_register+0x28/0x38 [ 60.809869][ T6523] tty_register_device_attr+0x31c/0x600 [ 60.809881][ T6523] tty_register_device+0x3c/0x50 [ 60.809891][ T6523] gsm_activate_mux+0xdc/0x284 [ 60.809903][ T6523] gsmld_ioctl+0xea8/0x1414 [ 60.809913][ T6523] tty_ioctl+0x8a8/0xcb8 [ 60.809923][ T6523] __arm64_sys_ioctl+0x154/0x1cc [ 60.809932][ T6523] invoke_syscall+0x98/0x244 [ 60.809945][ T6523] el0_svc_common+0xec/0x23c [ 60.809957][ T6523] do_el0_svc+0x4c/0x5c [ 60.809968][ T6523] el0_svc+0x60/0x1d8 [ 60.809977][ T6523] el0t_64_sync_handler+0x44/0x104 [ 60.809985][ T6523] el0t_64_sync+0x198/0x19c [ 60.932985][ T6531] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 60.936761][ T6529] loop4: detected capacity change from 0 to 4096 [ 61.038185][ T4725] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 61.102860][ T4725] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.154490][ T6537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.346'. [ 61.176016][ T6537] device-mapper: table: 248:2: writecache: Invalid optional argument (-EINVAL) [ 61.176035][ T6537] device-mapper: ioctl: error adding target to table [ 61.217209][ T6545] loop2: detected capacity change from 0 to 512 [ 61.222711][ T6545] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 61.251002][ T6545] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 61.368405][ T6548] loop0: detected capacity change from 0 to 512 [ 61.368896][ T6548] /dev/loop0: Can't open blockdev [ 61.397222][ T30] audit: type=1326 audit(61.370:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6552 comm="syz.6.350" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8817a228 code=0x7ffc0000 [ 61.397248][ T30] audit: type=1326 audit(61.370:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6552 comm="syz.6.350" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8817a228 code=0x7ffc0000 [ 61.397751][ T30] audit: type=1326 audit(61.370:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6552 comm="syz.6.350" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=190 compat=0 ip=0xffff8817a228 code=0x7ffc0000 [ 61.397890][ T30] audit: type=1326 audit(61.370:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6552 comm="syz.6.350" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8817a228 code=0x7ffc0000 [ 61.419208][ T30] audit: type=1326 audit(61.390:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6552 comm="syz.6.350" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=33 compat=0 ip=0xffff8817a228 code=0x7ffc0000 [ 61.429594][ T30] audit: type=1326 audit(61.400:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6552 comm="syz.6.350" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8817a228 code=0x7ffc0000 [ 61.429617][ T30] audit: type=1326 audit(61.400:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6552 comm="syz.6.350" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8817a228 code=0x7ffc0000 [ 61.443162][ T30] audit: type=1326 audit(61.420:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6552 comm="syz.6.350" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8817a228 code=0x7ffc0000 [ 61.610540][ T4716] Bluetooth: hci0: command 0x040f tx timeout [ 61.627560][ T6574] netlink: 56 bytes leftover after parsing attributes in process `syz.0.354'. [ 61.769803][ T6579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.357'. [ 61.992204][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.361'. [ 62.018853][ T6593] Could not find key with description: [syz] [ 62.018865][ T6593] process_request_key_err: No key [ 62.018870][ T6593] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 62.018875][ T6593] One or more global auth toks could not properly register; rc = [-2] [ 62.018891][ T6593] Error validating options; rc = [-2] [ 62.019055][ T6592] ecryptfs_verify_version: Minor version number mismatch. Expected [4]; got [0] [ 62.019063][ T6592] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 62.019069][ T6592] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 62.019073][ T6592] One or more global auth toks could not properly register; rc = [-22] [ 62.019084][ T6592] Error validating options; rc = [-22] [ 62.196183][ T6594] veth3: entered promiscuous mode [ 62.296916][ T6599] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.329144][ T6599] EXT4-fs (loop0): resizing filesystem from 256 to 0 blocks [ 62.329164][ T6599] EXT4-fs warning (device loop0): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 62.352095][ T4719] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.380214][ T6605] 9p: Bad value for 'rfdno' [ 62.386487][ T6605] fuse: Bad value for 'user_id' [ 62.386497][ T6605] fuse: Bad value for 'user_id' [ 62.430215][ T6605] 0x0000000000ec-0x0000000000f2 : "" [ 62.455918][ T6605] ftl_cs: FTL header corrupt! [ 62.533486][ T6612] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 62.659992][ T6617] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 62.727406][ T6617] EXT4-fs error (device loop5): ext4_acquire_dquot:7070: comm syz.5.369: Failed to acquire dquot type 0 [ 63.334436][ T6645] IPVS: length: 4096 != 24 [ 63.442029][ T6656] __nla_validate_parse: 2 callbacks suppressed [ 63.442046][ T6656] netlink: 64 bytes leftover after parsing attributes in process `syz.5.377'. [ 63.524649][ T6662] netlink: 156 bytes leftover after parsing attributes in process `syz.6.379'. [ 63.541981][ T6662] netlink: 8 bytes leftover after parsing attributes in process `syz.6.379'. [ 63.613318][ T6667] set_capacity_and_notify: 5 callbacks suppressed [ 63.613341][ T6667] loop5: detected capacity change from 0 to 8 [ 63.638646][ T6667] squashfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 63.645930][ T6668] netlink: 64 bytes leftover after parsing attributes in process `syz.0.381'. [ 63.698904][ T4716] Bluetooth: hci0: command 0x040f tx timeout [ 63.866000][ T1499] cfg80211: failed to load regulatory.db [ 63.944055][ T6677] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 64.084314][ T6687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.385'. [ 64.278672][ T6696] netlink: 40 bytes leftover after parsing attributes in process `syz.0.388'. [ 64.315731][ T6705] rxe_eth0 speed is unknown, defaulting to 1000 [ 64.617475][ T1592] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.617513][ T1592] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.988009][ T6728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.394'. [ 65.088046][ T6732] FAULT_INJECTION: forcing a failure. [ 65.088046][ T6732] name failslab, interval 1, probability 0, space 0, times 0 [ 65.088069][ T6732] CPU: 0 UID: 0 PID: 6732 Comm: syz.4.395 Tainted: G L syzkaller #0 PREEMPT [ 65.088082][ T6732] Tainted: [L]=SOFTLOCKUP [ 65.088085][ T6732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 65.088091][ T6732] Call trace: [ 65.088094][ T6732] show_stack+0x2c/0x3c (C) [ 65.088113][ T6732] __dump_stack+0x30/0x40 [ 65.088125][ T6732] dump_stack_lvl+0xd8/0x12c [ 65.088137][ T6732] dump_stack+0x1c/0x28 [ 65.088148][ T6732] should_fail_ex+0x418/0x58c [ 65.088157][ T6732] should_failslab+0xc4/0x120 [ 65.088166][ T6732] kmem_cache_alloc_noprof+0x94/0x5d4 [ 65.088176][ T6732] do_getname+0x48/0x234 [ 65.088185][ T6732] getname_flags+0x2c/0x3c [ 65.088193][ T6732] do_sys_openat2+0xd0/0x1e8 [ 65.088205][ T6732] do_sys_open+0xb0/0xe0 [ 65.088216][ T6732] __arm64_sys_openat+0xa8/0xc4 [ 65.088228][ T6732] invoke_syscall+0x98/0x244 [ 65.088240][ T6732] el0_svc_common+0xec/0x23c [ 65.088252][ T6732] do_el0_svc+0x4c/0x5c [ 65.088263][ T6732] el0_svc+0x60/0x1d8 [ 65.088271][ T6732] el0t_64_sync_handler+0x44/0x104 [ 65.088280][ T6732] el0t_64_sync+0x198/0x19c [ 65.195522][ T6732] 9p: Bad value for 'rq' [ 65.211598][ T4716] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 65.211627][ T4716] Bluetooth: hci5: Injecting HCI hardware error event [ 65.212922][ T4716] Bluetooth: hci5: hardware error 0x00 [ 65.309156][ T6739] loop2: detected capacity change from 0 to 1024 [ 65.337532][ T6739] EXT4-fs mount: 4 callbacks suppressed [ 65.337550][ T6739] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 65.376582][ T6739] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #15: block 3: comm syz.2.396: lblock 3 mapped to illegal pblock 3 (length 2) [ 65.394417][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 65.394430][ T30] audit: type=1400 audit(65.370:57): lsm=SMACK fn=smack_inode_permission action=denied subject="_" object="l" requested=w pid=6741 comm="syz.4.398" name="file0" dev="tmpfs" ino=491 [ 65.458255][ T4725] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 65.688018][ T6760] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 65.688031][ T6760] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 65.688037][ T6760] overlayfs: missing 'lowerdir' [ 66.173715][ T6773] netlink: 112 bytes leftover after parsing attributes in process `syz.5.408'. [ 66.174382][ T6773] netlink: 4 bytes leftover after parsing attributes in process `syz.5.408'. [ 66.343804][ T6770] loop4: detected capacity change from 0 to 8192 [ 66.372070][ T6770] loop4: RDSK (0) [ 66.372070][ T6770] AHDI p2 p3 p4 [ 66.372756][ T6770] loop4: p2 start 67108614 is beyond EOD, truncated [ 66.372774][ T6770] loop4: p3 size 55780 extends beyond EOD, truncated [ 66.768269][ T4733] udevd[4733]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 66.851415][ T6802] netlink: 4 bytes leftover after parsing attributes in process `syz.5.413'. [ 67.144976][ T6817] overlayfs: missing 'lowerdir' [ 67.215108][ T6823] random: crng reseeded on system resumption [ 67.293483][ T4716] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 67.352655][ T6830] loop0: detected capacity change from 0 to 8 [ 67.762049][ T6851] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 67.878683][ T6862] macsec0: entered promiscuous mode [ 67.889936][ T6858] macsec0: left promiscuous mode [ 67.894377][ T6864] loop0: detected capacity change from 0 to 1024 [ 67.912744][ T6864] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 67.912807][ T6864] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 67.913159][ T6864] EXT4-fs error (device loop0): ext4_get_journal_inode:5928: inode #32: comm syz.0.429: iget: special inode unallocated [ 67.913189][ T6864] fserror_report: 1 callbacks suppressed [ 67.913197][ T6864] loop0: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 67.914102][ T6864] EXT4-fs (loop0): Remounting filesystem read-only [ 67.914168][ T6864] EXT4-fs (loop0): no journal found [ 67.914174][ T6864] EXT4-fs (loop0): can't get journal size [ 67.914637][ T6864] EXT4-fs (loop0): filesystem is read-only [ 67.915041][ T6864] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 68.000287][ T4719] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.090053][ T6879] loop0: detected capacity change from 0 to 512 [ 68.117456][ T6879] EXT4-fs: Ignoring removed i_version option [ 68.122821][ T6879] EXT4-fs: test_dummy_encryption requires encrypt feature [ 68.148209][ T6878] loop7: detected capacity change from 0 to 7 [ 68.158786][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 68.158860][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 68.167163][ T6890] loop4: detected capacity change from 0 to 128 [ 68.180662][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 68.180705][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 68.185434][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 68.185463][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 68.187646][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 68.187670][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 68.187774][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 68.187792][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 68.187857][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 68.187875][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 68.187931][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 68.187949][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 68.187966][ T6878] ldm_validate_partition_table(): Disk read failed. [ 68.188010][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 68.188028][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 68.188111][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 68.188141][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 68.188251][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 68.188268][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 68.188354][ T6878] Dev loop7: unable to read RDB block 0 [ 68.188596][ T6878] loop7: unable to read partition table [ 68.188658][ T6878] loop7: partition table beyond EOD, truncated [ 68.188666][ T6878] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 68.241577][ T6879] ldm_validate_partition_table(): Disk read failed. [ 68.243557][ T6879] Dev loop7: unable to read RDB block 0 [ 68.262179][ T6890] loop4: detected capacity change from 0 to 1024 [ 68.264454][ T6879] loop7: unable to read partition table [ 68.264525][ T6879] loop7: partition table beyond EOD, truncated [ 68.278573][ T6890] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.436210][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.599196][ T6956] loop4: detected capacity change from 0 to 512 [ 69.609041][ T6956] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 69.626101][ T6956] EXT4-fs (loop4): 1 truncate cleaned up [ 69.626774][ T6956] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.697983][ T6954] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.448: invalid indirect mapped block 2185560079 (level 0) [ 69.716435][ T6954] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.448: invalid indirect mapped block 65535 (level 2) [ 69.724933][ T6954] EXT4-fs error (device loop4): __ext4_get_inode_loc:4916: comm syz.4.448: Invalid inode table block 0 in block_group 0 [ 69.744246][ T3353] Bluetooth: hci3: Frame reassembly failed (-84) [ 69.745930][ T6954] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 69.746358][ T6954] EXT4-fs error (device loop4): ext4_splice_branch:479: inode #13: comm syz.4.448: mark_inode_dirty error [ 69.746641][ T6954] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.448: bg 0: block 46: invalid block bitmap [ 69.747016][ T6954] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 69.748056][ T6954] EXT4-fs error (device loop4): __ext4_get_inode_loc:4916: comm syz.4.448: Invalid inode table block 0 in block_group 0 [ 69.769879][ T6954] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 69.773087][ T6954] EXT4-fs error (device loop4): ext4_truncate:4721: inode #13: comm syz.4.448: mark_inode_dirty error [ 70.443825][ T7000] No control pipe specified [ 70.484228][ T6999] loop5: detected capacity change from 0 to 512 [ 70.495573][ T6999] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 70.495584][ T6999] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 70.516677][ T6999] EXT4-fs (loop5): 1 truncate cleaned up [ 70.517099][ T6999] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.552828][ T6997] syz.5.458 (pid 6997) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 70.563006][ T7006] 9p: Bad value for 'rfdno' [ 70.634277][ T5824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.708926][ T7017] sit1: entered promiscuous mode [ 70.708943][ T7017] sit1: entered allmulticast mode [ 71.093863][ T7027] loop2: detected capacity change from 0 to 512 [ 71.114615][ T7034] FAULT_INJECTION: forcing a failure. [ 71.114615][ T7034] name failslab, interval 1, probability 0, space 0, times 0 [ 71.114640][ T7034] CPU: 0 UID: 0 PID: 7034 Comm: syz.5.466 Tainted: G L syzkaller #0 PREEMPT [ 71.114653][ T7034] Tainted: [L]=SOFTLOCKUP [ 71.114657][ T7034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 71.114663][ T7034] Call trace: [ 71.114666][ T7034] show_stack+0x2c/0x3c (C) [ 71.114688][ T7034] __dump_stack+0x30/0x40 [ 71.114701][ T7034] dump_stack_lvl+0xd8/0x12c [ 71.114712][ T7034] dump_stack+0x1c/0x28 [ 71.114724][ T7034] should_fail_ex+0x418/0x58c [ 71.114733][ T7034] should_failslab+0xc4/0x120 [ 71.114742][ T7034] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 71.114751][ T7034] sock_alloc_inode+0x30/0x180 [ 71.114761][ T7034] alloc_inode+0x68/0x198 [ 71.114772][ T7034] sock_alloc+0x4c/0x204 [ 71.114782][ T7034] __sock_create+0x108/0x670 [ 71.114792][ T7034] __sys_socket_create+0xc0/0x11c [ 71.114803][ T7034] __sys_socket+0x44/0xec [ 71.114813][ T7034] __arm64_sys_socket+0x84/0x9c [ 71.114824][ T7034] invoke_syscall+0x98/0x244 [ 71.114836][ T7034] el0_svc_common+0xec/0x23c [ 71.114847][ T7034] do_el0_svc+0x4c/0x5c [ 71.114859][ T7034] el0_svc+0x60/0x1d8 [ 71.114868][ T7034] el0t_64_sync_handler+0x44/0x104 [ 71.114876][ T7034] el0t_64_sync+0x198/0x19c [ 71.114888][ T7034] socket: no more sockets [ 71.184641][ T7042] validate_nla: 61 callbacks suppressed [ 71.184655][ T7042] netlink: 'syz.0.468': attribute type 15 has an invalid length. [ 71.205767][ T7027] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.214186][ T7042] vxlan2: entered promiscuous mode [ 71.214201][ T7042] vxlan2: entered allmulticast mode [ 71.218033][ T3702] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 31488 - 0 [ 71.218126][ T3702] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 31488 - 0 [ 71.218189][ T3702] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 31488 - 0 [ 71.218229][ T3702] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 31488 - 0 [ 71.279742][ T4725] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.366041][ T7055] __nla_validate_parse: 3 callbacks suppressed [ 71.366056][ T7055] netlink: 28 bytes leftover after parsing attributes in process `syz.2.470'. [ 71.451307][ T7062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.474'. [ 71.451657][ T7063] netlink: 52 bytes leftover after parsing attributes in process `syz.6.472'. [ 71.451703][ T7063] netlink: 52 bytes leftover after parsing attributes in process `syz.6.472'. [ 71.451740][ T7063] netlink: 52 bytes leftover after parsing attributes in process `syz.6.472'. [ 71.451769][ T7063] netlink: 52 bytes leftover after parsing attributes in process `syz.6.472'. [ 71.451795][ T7063] netlink: 52 bytes leftover after parsing attributes in process `syz.6.472'. [ 71.451822][ T7063] netlink: 52 bytes leftover after parsing attributes in process `syz.6.472'. [ 71.451847][ T7063] netlink: 52 bytes leftover after parsing attributes in process `syz.6.472'. [ 71.451872][ T7063] netlink: 52 bytes leftover after parsing attributes in process `syz.6.472'. [ 71.505665][ T7062] loop0: detected capacity change from 0 to 512 [ 71.510609][ T7062] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 71.521777][ T7062] EXT4-fs (loop0): 1 truncate cleaned up [ 71.522229][ T7062] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.634608][ T4719] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.828339][ T4716] Bluetooth: hci3: command 0x1003 tx timeout [ 71.828509][ T4726] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 72.179930][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.187000][ T7094] loop0: detected capacity change from 0 to 512 [ 72.196621][ T7094] ext3: Unknown parameter 'subj_role' [ 72.540752][ T7119] syz.2.483 (7119): /proc/7105/oom_adj is deprecated, please use /proc/7105/oom_score_adj instead. [ 72.541878][ T7120] loop2: detected capacity change from 0 to 256 [ 72.597879][ T7117] loop5: detected capacity change from 0 to 256 [ 72.615028][ T7126] ip_tables: iptables: counters copy to user failed while replacing table [ 72.848701][ T7133] : renamed from virt_wifi0 [ 73.296779][ T7149] loop0: detected capacity change from 0 to 256 [ 73.317749][ T7147] FAULT_INJECTION: forcing a failure. [ 73.317749][ T7147] name fail_futex, interval 1, probability 0, space 0, times 1 [ 73.317778][ T7147] CPU: 0 UID: 0 PID: 7147 Comm: syz.4.491 Tainted: G L syzkaller #0 PREEMPT [ 73.317792][ T7147] Tainted: [L]=SOFTLOCKUP [ 73.317795][ T7147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 73.317801][ T7147] Call trace: [ 73.317805][ T7147] show_stack+0x2c/0x3c (C) [ 73.317833][ T7147] __dump_stack+0x30/0x40 [ 73.317848][ T7147] dump_stack_lvl+0xd8/0x12c [ 73.317860][ T7147] dump_stack+0x1c/0x28 [ 73.317871][ T7147] should_fail_ex+0x418/0x58c [ 73.317880][ T7147] should_fail+0x14/0x24 [ 73.317888][ T7147] get_futex_key+0x1ec/0x12b0 [ 73.317899][ T7147] futex_wake+0x10c/0x594 [ 73.317910][ T7147] do_futex+0x2c4/0x378 [ 73.317920][ T7147] __arm64_sys_futex+0x2e4/0x418 [ 73.317931][ T7147] invoke_syscall+0x98/0x244 [ 73.317943][ T7147] el0_svc_common+0xec/0x23c [ 73.317955][ T7147] do_el0_svc+0x4c/0x5c [ 73.317966][ T7147] el0_svc+0x60/0x1d8 [ 73.317975][ T7147] el0t_64_sync_handler+0x44/0x104 [ 73.317983][ T7147] el0t_64_sync+0x198/0x19c [ 73.357144][ T7150] loop5: detected capacity change from 0 to 512 [ 73.376652][ T7150] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 73.523213][ T7157] loop4: detected capacity change from 0 to 1024 [ 73.543085][ T7157] EXT4-fs: Ignoring removed bh option [ 73.553950][ T7157] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 73.627757][ T7157] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.529650][ T7205] overlayfs: missing 'lowerdir' [ 74.544007][ T7205] overlayfs: missing 'lowerdir' [ 74.556267][ T7205] overlayfs: missing 'lowerdir' [ 74.556724][ T7205] overlayfs: missing 'lowerdir' [ 74.556896][ T7205] overlayfs: missing 'lowerdir' [ 74.557052][ T7205] overlayfs: missing 'lowerdir' [ 74.565594][ T7205] overlayfs: missing 'lowerdir' [ 74.569438][ T7205] overlayfs: missing 'lowerdir' [ 74.569617][ T7205] overlayfs: missing 'lowerdir' [ 74.569770][ T7205] overlayfs: missing 'lowerdir' [ 74.569923][ T7205] overlayfs: missing 'lowerdir' [ 74.570082][ T7205] overlayfs: missing 'lowerdir' [ 74.585954][ T7205] overlayfs: missing 'lowerdir' [ 74.586205][ T7205] overlayfs: missing 'lowerdir' [ 74.588401][ T7205] overlayfs: missing 'lowerdir' [ 74.588575][ T7205] overlayfs: missing 'lowerdir' [ 74.588727][ T7205] overlayfs: missing 'lowerdir' [ 74.588883][ T7205] overlayfs: missing 'lowerdir' [ 74.589035][ T7205] overlayfs: missing 'lowerdir' [ 74.589192][ T7205] overlayfs: missing 'lowerdir' [ 74.599013][ T7205] overlayfs: missing 'lowerdir' [ 74.603095][ T7205] overlayfs: missing 'lowerdir' [ 74.607922][ T7205] overlayfs: missing 'lowerdir' [ 74.609691][ T7205] overlayfs: missing 'lowerdir' [ 74.614546][ T7205] overlayfs: missing 'lowerdir' [ 74.617262][ T7205] overlayfs: missing 'lowerdir' [ 74.617490][ T7205] overlayfs: missing 'lowerdir' [ 74.617709][ T7205] overlayfs: missing 'lowerdir' [ 74.617849][ T7205] overlayfs: missing 'lowerdir' [ 74.634864][ T7209] set_capacity_and_notify: 1 callbacks suppressed [ 74.634876][ T7209] loop0: detected capacity change from 0 to 512 [ 74.635675][ T7205] overlayfs: missing 'lowerdir' [ 74.636469][ T7205] overlayfs: missing 'lowerdir' [ 74.636669][ T7210] netlink: 'syz.2.507': attribute type 1 has an invalid length. [ 74.651254][ T7205] overlayfs: missing 'lowerdir' [ 74.653983][ T7205] overlayfs: missing 'lowerdir' [ 74.655724][ T7209] EXT4-fs (loop0): Test dummy encryption mode enabled [ 74.656719][ T7209] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e066e02d, mo2=0002] [ 74.656757][ T7209] System zones: 1-12 [ 74.657391][ T7209] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.695827][ T7207] EXT4-fs error (device loop0): htree_dirblock_to_tree:1051: inode #2: comm syz.0.509: Directory hole found for htree leaf block 0 [ 74.698647][ T7207] EXT4-fs (loop0): Remounting filesystem read-only [ 74.897677][ T7217] binder: 7216:7217 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 75.367051][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.414809][ T4719] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 75.558854][ T7230] loop4: detected capacity change from 0 to 1024 [ 75.815103][ T7230] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 75.825821][ T7230] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 75.826257][ T7230] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.891393][ T7231] netlink: 'syz.4.513': attribute type 2 has an invalid length. [ 75.960054][ T7240] vxcan1: tx address claim with dest, not broadcast [ 76.121105][ T7246] loop0: detected capacity change from 0 to 512 [ 76.803410][ T7210] 8021q: adding VLAN 0 to HW filter on device bond2 [ 76.819116][ T7244] FAULT_INJECTION: forcing a failure. [ 76.819116][ T7244] name fail_futex, interval 1, probability 0, space 0, times 0 [ 76.819137][ T7244] CPU: 0 UID: 0 PID: 7244 Comm: syz.0.516 Tainted: G L syzkaller #0 PREEMPT [ 76.819149][ T7244] Tainted: [L]=SOFTLOCKUP [ 76.819152][ T7244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 76.819157][ T7244] Call trace: [ 76.819160][ T7244] show_stack+0x2c/0x3c (C) [ 76.819180][ T7244] __dump_stack+0x30/0x40 [ 76.819191][ T7244] dump_stack_lvl+0xd8/0x12c [ 76.819201][ T7244] dump_stack+0x1c/0x28 [ 76.819210][ T7244] should_fail_ex+0x418/0x58c [ 76.819218][ T7244] should_fail+0x14/0x24 [ 76.819224][ T7244] get_futex_key+0x1ec/0x12b0 [ 76.819235][ T7244] futex_wake+0x10c/0x594 [ 76.819244][ T7244] do_futex+0x2c4/0x378 [ 76.819253][ T7244] mm_exit_exec_release+0x190/0x27c [ 76.819261][ T7244] exit_mm+0x50/0x1f0 [ 76.819271][ T7244] do_exit+0x524/0x1a74 [ 76.819280][ T7244] do_group_exit+0x198/0x238 [ 76.819287][ T7244] get_signal+0xfb0/0x1094 [ 76.819295][ T7244] arch_do_signal_or_restart+0x288/0x444c [ 76.819305][ T7244] exit_to_user_mode_loop+0x70/0x17c [ 76.819315][ T7244] el0_svc+0x12c/0x1d8 [ 76.819323][ T7244] el0t_64_sync_handler+0x44/0x104 [ 76.819330][ T7244] el0t_64_sync+0x198/0x19c [ 76.887778][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.024201][ T7260] __nla_validate_parse: 28 callbacks suppressed [ 77.024217][ T7260] netlink: 4 bytes leftover after parsing attributes in process `syz.6.520'. [ 77.024724][ T7260] netlink: 4 bytes leftover after parsing attributes in process `syz.6.520'. [ 77.065685][ T7270] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 77.073865][ T7255] loop5: detected capacity change from 0 to 4096 [ 77.078788][ T7255] EXT4-fs: Ignoring removed orlov option [ 77.091893][ T7255] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.097626][ T7265] netdevsim netdevsim4: Firmware load for './file0/file0/..' refused, path contains '..' component [ 77.120226][ T7261] overlayfs: failed to resolve './bus': -2 [ 77.184177][ T7276] loop2: detected capacity change from 0 to 256 [ 77.203993][ T5824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.645727][ T7284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.527'. [ 77.699730][ T30] audit: type=1326 audit(77.670:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7281 comm="syz.5.526" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d57a228 code=0x0 [ 77.768961][ T7288] netlink: 'syz.6.528': attribute type 10 has an invalid length. [ 78.005863][ T7296] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.348546][ T7312] bridge0: port 3(veth1_to_bridge) entered blocking state [ 78.349452][ T7312] bridge0: port 3(veth1_to_bridge) entered disabled state [ 78.349562][ T7312] veth1_to_bridge: entered allmulticast mode [ 78.364441][ T7312] veth1_to_bridge: entered promiscuous mode [ 78.364548][ T7312] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 78.364728][ T7312] bridge0: port 3(veth1_to_bridge) entered blocking state [ 78.364760][ T7312] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 78.651993][ T7318] loop5: detected capacity change from 0 to 8 [ 78.847494][ T7322] loop0: detected capacity change from 0 to 512 [ 78.884352][ T7322] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.537: corrupted in-inode xattr: invalid ea_ino [ 78.884383][ T7322] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 78.884508][ T7322] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.537: couldn't read orphan inode 15 (err -117) [ 78.884521][ T7322] loop0: lost filesystem error report for type 5 error -117 [ 78.885216][ T7322] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.972953][ T4719] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.070880][ T7325] netlink: 4 bytes leftover after parsing attributes in process `syz.6.538'. [ 79.756000][ T7345] loop5: detected capacity change from 0 to 512 [ 79.757920][ T7343] loop0: detected capacity change from 0 to 256 [ 79.781736][ T7345] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 79.793415][ T7345] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a046c128, mo2=0002] [ 79.793458][ T7345] System zones: 1-12 [ 79.793547][ T7345] EXT4-fs (loop5): orphan cleanup on readonly fs [ 79.793999][ T7345] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 79.794012][ T7345] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 79.818784][ T7345] EXT4-fs (loop5): 1 truncate cleaned up [ 79.827700][ T7347] netlink: 8 bytes leftover after parsing attributes in process `syz.6.545'. [ 79.870278][ T7345] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.192133][ T7351] netlink: 92 bytes leftover after parsing attributes in process `syz.5.544'. [ 80.326967][ T7356] loop0: detected capacity change from 0 to 128 [ 80.355186][ T7356] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.379474][ T7365] netlink: 16 bytes leftover after parsing attributes in process `syz.6.549'. [ 80.379493][ T7365] netlink: 16 bytes leftover after parsing attributes in process `syz.6.549'. [ 80.379501][ T7365] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 80.436407][ T4719] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.616397][ T5824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.873674][ T7368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.550'. [ 80.909536][ T7368] veth5: entered promiscuous mode [ 80.923265][ T7377] loop0: detected capacity change from 0 to 1024 [ 81.070492][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 81.070678][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 81.070793][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 81.070906][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 81.071047][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 81.071157][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 81.071264][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 81.071379][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 81.071487][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 82.070373][ C0] net_ratelimit: 9660 callbacks suppressed [ 82.070389][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 82.070499][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 82.070615][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 82.070720][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 82.070824][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 82.070933][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 82.071037][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 82.071141][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 82.071245][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 82.071357][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 87.080434][ C0] net_ratelimit: 49126 callbacks suppressed [ 87.080452][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 87.080562][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 87.080667][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 87.080772][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 87.080875][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 87.080978][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 87.081081][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 87.081183][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 87.081301][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 87.081416][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 87.260361][ C0] sched: DL replenish lagged too much [ 92.090600][ C0] net_ratelimit: 33101 callbacks suppressed [ 92.090617][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 92.090721][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 92.090827][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 92.091145][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 92.091248][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 92.091359][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 92.091699][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 92.091801][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 92.091904][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 92.092226][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 97.100391][ C0] net_ratelimit: 32370 callbacks suppressed [ 97.100409][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 97.100515][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 97.100619][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 97.100730][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 97.100941][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 97.101154][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 97.101253][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 97.101362][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 97.101472][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 97.101681][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 102.110466][ C0] net_ratelimit: 35462 callbacks suppressed [ 102.110483][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 102.110594][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 102.110814][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 102.111044][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 102.111155][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 102.111259][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 102.111382][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 102.111601][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 102.111827][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 102.111930][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 107.120407][ C0] net_ratelimit: 34655 callbacks suppressed [ 107.120424][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 107.120537][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 107.120760][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 107.120969][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 107.121068][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 107.121168][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 107.121270][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 107.121502][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 107.121727][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 107.121825][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 111.373462][ T4716] Bluetooth: hci2: command 0x0406 tx timeout [ 112.130488][ C0] net_ratelimit: 34763 callbacks suppressed [ 112.130505][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.130609][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 112.130712][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 112.130817][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.131024][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 112.131238][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.131344][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 112.131455][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 112.131559][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.131775][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 117.140671][ C0] net_ratelimit: 34589 callbacks suppressed [ 117.140688][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 117.140896][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.140995][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 117.141095][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 117.141197][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.141412][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 117.141643][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.141742][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 117.141842][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 117.141943][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 122.150378][ C0] net_ratelimit: 34315 callbacks suppressed [ 122.150395][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 122.150629][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 122.150762][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 122.150864][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 122.150967][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 122.151170][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 122.151391][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 122.151504][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 122.151611][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 122.151715][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.160353][ C0] net_ratelimit: 35269 callbacks suppressed [ 127.160372][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 127.160609][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 127.160725][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.160828][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 127.160931][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 127.161036][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.161290][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 127.161535][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 127.161643][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.161743][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 129.421904][ T1592] ieee802154 phy0 wpan0: encryption failed: -22 [ 129.431465][ T1592] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.170459][ C0] net_ratelimit: 36524 callbacks suppressed [ 132.170475][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 132.170696][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 132.170806][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.171143][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 132.171252][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 132.171368][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.171595][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 132.171806][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 132.171919][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.172031][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 137.180417][ C0] net_ratelimit: 36606 callbacks suppressed [ 137.180434][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 137.180548][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.180756][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 137.180969][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 137.181073][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.181172][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 137.181272][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 137.181386][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.181603][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 137.181806][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 142.190453][ C0] net_ratelimit: 37076 callbacks suppressed [ 142.190470][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 142.190589][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.190799][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 142.191019][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 142.191125][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.191224][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 142.191324][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 142.191440][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.191656][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 142.191859][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 147.200351][ C0] net_ratelimit: 36184 callbacks suppressed [ 147.200369][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 147.200573][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 147.200682][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.200783][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 147.200892][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 147.200995][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.201427][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 147.201622][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 147.201726][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.201832][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 152.210413][ C0] net_ratelimit: 30677 callbacks suppressed [ 152.210430][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 152.210537][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.210636][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.210742][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.210842][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 152.210942][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 152.211045][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.211478][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 152.211670][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 152.211786][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.220371][ C0] net_ratelimit: 34017 callbacks suppressed [ 157.220388][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 157.220497][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.220598][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 157.220700][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 157.220819][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.221218][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 157.221415][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 157.221522][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.221620][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.221720][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 162.230409][ C0] net_ratelimit: 35336 callbacks suppressed [ 162.230427][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 162.230628][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 162.230737][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.230837][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.230937][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 162.231036][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.231143][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 162.231243][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 162.231352][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 162.231462][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.240384][ C0] net_ratelimit: 36311 callbacks suppressed [ 167.240400][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 167.240509][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.240609][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.240708][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 167.240822][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.240928][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 167.241027][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 167.241127][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 167.241229][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.241653][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 172.250352][ C0] net_ratelimit: 36393 callbacks suppressed [ 172.250369][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 172.250476][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.250586][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 172.250685][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 172.250785][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 172.250888][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.251310][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 172.251528][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 172.251634][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.251732][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.260415][ C0] net_ratelimit: 36376 callbacks suppressed [ 177.260432][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 177.260631][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 177.260736][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.260835][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.260933][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 177.261048][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.261146][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 177.261245][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 177.261361][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 177.261483][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.972606][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 57s! [ 180.972644][ C0] Showing busy workqueues and worker pools: [ 180.972649][ C0] workqueue events: flags=0x100 [ 180.972701][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=24 refcnt=25 [ 180.972718][ C0] in-flight: 10:xfrm_state_gc_task for 57s ,9:reg_todo for 57s [ 180.972756][ C0] pending: 7*nsim_dev_hwstats_traffic_work, 2*psi_avgs_work, vmstat_shepherd, psi_avgs_work, 6*ovs_dp_masks_rebalance, drm_fb_helper_damage_work, 3*psi_avgs_work, key_garbage_collector [ 180.972836][ C0] workqueue events_unbound: flags=0x2 [ 180.972841][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=29 refcnt=30 [ 180.972854][ C0] in-flight: 3451:nsim_dev_trap_report_work for 62s ,3585:nsim_dev_trap_report_work for 39s ,3131:cfg80211_wiphy_work for 97s cfg80211_wiphy_work ,3702:cfg80211_wiphy_work for 90s cfg80211_wiphy_work ,3833:cfg80211_wiphy_work for 57s cfg80211_wiphy_work ,13:cfg80211_wiphy_work for 67s ,41:toggle_allocation_gate for 45s ,134:nsim_dev_trap_report_work for 56s ,40:cfg80211_wiphy_work for 88s cfg80211_wiphy_work ,3272:cfg80211_wiphy_work for 96s cfg80211_wiphy_work [ 180.973005][ C0] pending: nsim_dev_trap_report_work, cfg80211_wiphy_work, flush_memcg_stats_dwork, 3*nsim_dev_trap_report_work, cfg80211_wiphy_work, 4*macvlan_process_broadcast, crng_reseed, 2*macvlan_process_broadcast [ 180.973065][ C0] workqueue events_power_efficient: flags=0x82 [ 180.973070][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=13 refcnt=14 [ 180.973083][ C0] in-flight: 3749:gc_worker for 54s ,1159:neigh_periodic_work for 75s [ 180.973115][ C0] pending: wg_ratelimiter_gc_entries, crda_timeout_work, 2*neigh_managed_work, fb_flashcursor, reg_check_chans_work, do_cache_clean, neigh_periodic_work, 3*check_lifetime [ 180.973174][ C0] workqueue events_dfl_long: flags=0x2 [ 180.973179][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=6 refcnt=7 [ 180.973192][ C0] pending: 6*defense_work_handler [ 180.973208][ C0] workqueue mm_percpu_wq: flags=0x108 [ 180.973213][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 180.973227][ C0] pending: vmstat_update [ 180.973245][ C0] workqueue writeback: flags=0x4a [ 180.973249][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 180.973261][ C0] in-flight: 2577:wb_workfn for 69s [ 180.973319][ C0] workqueue mld: flags=0x40108 [ 180.973323][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=50 [ 180.973344][ C0] pending: mld_ifc_work [ 180.973355][ C0] inactive: 48*mld_ifc_work [ 180.973375][ C0] workqueue ipv6_addrconf: flags=0x6000a [ 180.973380][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=10 MAYDAY [ 180.973393][ C0] pending: addrconf_verify_work [ 180.973402][ C0] inactive: 5*addrconf_verify_work [ 180.973414][ C0] workqueue krxrpcd: flags=0x2001a [ 180.973419][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=5 [ 180.973434][ C0] pending: rxrpc_peer_keepalive_worker [ 180.973447][ C0] inactive: rxrpc_peer_keepalive_worker [ 180.973462][ C0] workqueue bat_events: flags=0x6000a [ 180.973466][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=45 MAYDAY [ 180.973479][ C0] in-flight: 2854(RESCUER):batadv_tt_purge for 12s [ 180.973494][ C0] pending: mayday_cursor_func [ 180.973504][ C0] inactive: 3*batadv_tt_purge, batadv_bla_periodic_work, 3*batadv_dat_purge, 3*batadv_bla_periodic_work, 3*batadv_mcast_mla_update, batadv_dat_purge, 2*batadv_mcast_mla_update, 9*batadv_iv_send_outstanding_bat_ogm_packet, 3*batadv_purge_orig, batadv_iv_send_outstanding_bat_ogm_packet, batadv_purge_orig, 5*batadv_iv_send_outstanding_bat_ogm_packet, batadv_purge_orig, batadv_tt_purge, batadv_bla_periodic_work, batadv_dat_purge [ 180.973631][ C0] workqueue hci2: flags=0x20012 [ 180.973636][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=5 [ 180.973650][ C0] in-flight: 4726:hci_cmd_sync_work for 72s [ 180.973667][ C0] inactive: hci_cmd_sync_work [ 180.973678][ C0] workqueue hci4: flags=0x20012 [ 180.973683][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=4 [ 180.973697][ C0] in-flight: 4716:hci_cmd_sync_work for 15s [ 180.973716][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 180.973720][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 180.973735][ C0] pending: 2*wg_packet_tx_worker, wg_packet_encrypt_worker [ 180.973754][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 180.973758][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 180.973772][ C0] pending: 2*wg_packet_tx_worker, wg_packet_encrypt_worker [ 180.973790][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 180.973795][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 180.973809][ C0] pending: 2*wg_packet_tx_worker, wg_packet_encrypt_worker [ 180.973831][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 180.973835][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 180.973850][ C0] pending: 2*wg_packet_tx_worker, wg_packet_encrypt_worker [ 180.973867][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 180.973871][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 180.973885][ C0] pending: 2*wg_packet_tx_worker, wg_packet_encrypt_worker [ 180.973903][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 180.973908][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 180.973922][ C0] pending: 2*wg_packet_tx_worker, wg_packet_encrypt_worker [ 180.973942][ C0] workqueue krds_cp_wq#0/0: flags=0x20002 [ 180.973947][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=4 [ 180.973959][ C0] pending: rds_send_worker [ 180.973970][ C0] workqueue krds_cp_wq#0/1: flags=0x20002 [ 180.973975][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=4 [ 180.973987][ C0] pending: rds_send_worker [ 180.973997][ C0] workqueue krds_cp_wq#0/2: flags=0x20002 [ 180.974002][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=4 [ 180.974014][ C0] pending: rds_send_worker [ 180.974025][ C0] workqueue krds_cp_wq#0/3: flags=0x20002 [ 180.974029][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=4 [ 180.974041][ C0] pending: rds_send_worker [ 180.974052][ C0] workqueue krds_cp_wq#0/4: flags=0x20002 [ 180.974057][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=4 [ 180.974069][ C0] pending: rds_shutdown_worker [ 180.974080][ C0] workqueue krds_cp_wq#1/0: flags=0x20002 [ 180.974085][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=4 [ 180.974097][ C0] pending: rds_send_worker [ 180.974108][ C0] workqueue krds_cp_wq#1/2: flags=0x20002 [ 180.974112][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=4 [ 180.974125][ C0] pending: rds_send_worker [ 180.974135][ C0] workqueue krds_cp_wq#1/4: flags=0x20002 [ 180.974139][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=4 [ 180.974151][ C0] in-flight: 3191:rds_send_worker for 51s [ 180.974173][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 180.974177][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 180.974191][ C0] pending: 2*wg_packet_tx_worker, wg_packet_encrypt_worker [ 180.974209][ C0] workqueue wg-kex-wg1: flags=0x6 [ 180.974213][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 180.974225][ C0] in-flight: 3353:wg_packet_handshake_send_worker for 46s [ 180.974244][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 180.974248][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 180.974263][ C0] pending: 2*wg_packet_tx_worker, wg_packet_encrypt_worker [ 180.974280][ C0] workqueue wg-kex-wg2: flags=0x124 [ 180.974284][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 180.974298][ C0] pending: wg_packet_handshake_receive_worker [ 180.974311][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 180.974315][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 180.974330][ C0] pending: 2*wg_packet_tx_worker, wg_packet_encrypt_worker [ 180.974355][ C0] workqueue hci0: flags=0x20012 [ 180.974360][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=4 [ 180.974374][ C0] pending: hci_conn_timeout [ 180.974387][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 180.974392][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 180.974405][ C0] pending: 2*wg_packet_tx_worker, wg_packet_encrypt_worker [ 180.974423][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 180.974427][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 180.974441][ C0] pending: 2*wg_packet_tx_worker, wg_packet_encrypt_worker [ 180.974459][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 180.974464][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 180.974478][ C0] pending: 2*wg_packet_tx_worker, wg_packet_encrypt_worker [ 180.974498][ C0] workqueue bond2: flags=0x2000a [ 180.974503][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=6 MAYDAY [ 180.974515][ C0] pending: bond_mii_monitor [ 180.974526][ C0] inactive: bond_alb_monitor [ 180.974538][ C0] pool 2: cpus=0 node=0 flags=0x0 nice=0 hung=57s workers=8 idle: 4822 4916 4774 865 4912 4875 [ 180.974586][ C0] pool 8: cpus=0-1 flags=0x6 nice=0 hung=12s workers=16 manager: 12 [ 180.974602][ C0] pool 9: cpus=0-1 node=0 flags=0x4 nice=-20 hung=9s workers=8 idle: 4728 4729 51 4727 4717 4721 [ 180.974644][ C0] Showing backtraces of busy workers in stalled worker pools: [ 180.974650][ C0] pool 2: [ 180.974653][ C0] task:kworker/0:0 state:R running task stack:0 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00000010 [ 180.974668][ C0] Workqueue: events reg_todo [ 180.974676][ C0] Call trace: [ 180.974679][ C0] __switch_to+0x2b4/0x6e4 (T) [ 180.974692][ C0] __schedule+0x135c/0x2b00 [ 180.974702][ C0] preempt_schedule_common+0xd4/0x190 [ 180.974712][ C0] preempt_schedule+0x60/0x78 [ 180.974722][ C0] __local_bh_enable_ip+0x16c/0x234 [ 180.974731][ C0] _raw_spin_unlock_bh+0x3c/0x4c [ 180.974739][ C0] reg_todo+0x608/0x6a4 [ 180.974746][ C0] process_scheduled_works+0x91c/0x1250 [ 180.974756][ C0] worker_thread+0x798/0xbd0 [ 180.974765][ C0] kthread+0x304/0x3d4 [ 180.974773][ C0] ret_from_fork+0x10/0x20 [ 182.270624][ C0] net_ratelimit: 36420 callbacks suppressed [ 182.270642][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 182.270834][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 182.270940][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.271041][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.271155][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 182.271254][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.271361][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 182.271467][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 182.271569][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 182.271672][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.280681][ C0] net_ratelimit: 36470 callbacks suppressed [ 187.280698][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 187.280890][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 187.280996][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.281095][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.281202][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 187.281311][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.281424][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 187.281524][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 187.281624][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 187.281726][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.150380][ T1592] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.162461][ T1592] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.290573][ C0] net_ratelimit: 36460 callbacks suppressed [ 192.290591][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 192.290795][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 192.290903][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.291025][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.291124][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 192.291223][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.291322][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 192.291430][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 192.291530][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 192.291643][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.300380][ C0] net_ratelimit: 36442 callbacks suppressed [ 197.300397][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.300503][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.300613][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 197.300715][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.300815][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 197.300915][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 197.301015][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 197.301118][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.301539][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 197.301741][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 202.310577][ C0] net_ratelimit: 36438 callbacks suppressed [ 202.310593][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 202.310815][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 202.310921][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.311019][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.311118][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 202.311217][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.311316][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 202.311442][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 202.311557][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 202.311663][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.320589][ C0] net_ratelimit: 36480 callbacks suppressed [ 207.320607][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 207.320802][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 207.320909][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.321009][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.321115][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 207.321214][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.321321][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 207.321435][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 207.321538][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 207.321640][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.052957][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 87s! [ 211.052998][ C0] Showing busy workqueues and worker pools: [ 211.053003][ C0] workqueue events: flags=0x100 [ 211.053010][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=24 refcnt=25 [ 211.053026][ C0] in-flight: 10:xfrm_state_gc_task for 87s ,9:reg_todo for 87s [ 211.053062][ C0] pending: 7*nsim_dev_hwstats_traffic_work, 2*psi_avgs_work, vmstat_shepherd, psi_avgs_work, 6*ovs_dp_masks_rebalance, drm_fb_helper_damage_work, 3*psi_avgs_work, key_garbage_collector [ 211.053143][ C0] workqueue events_unbound: flags=0x2 [ 211.053148][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=31 refcnt=32 [ 211.053162][ C0] in-flight: 3451:nsim_dev_trap_report_work for 92s ,3585:nsim_dev_trap_report_work for 69s ,3131:cfg80211_wiphy_work for 127s cfg80211_wiphy_work ,3702:cfg80211_wiphy_work for 120s cfg80211_wiphy_work ,3833:cfg80211_wiphy_work for 87s cfg80211_wiphy_work ,13:cfg80211_wiphy_work for 98s ,41:toggle_allocation_gate for 75s ,134:nsim_dev_trap_report_work for 86s ,40:cfg80211_wiphy_work for 119s cfg80211_wiphy_work ,3272:cfg80211_wiphy_work for 126s cfg80211_wiphy_work [ 211.053315][ C0] pending: nsim_dev_trap_report_work, cfg80211_wiphy_work, flush_memcg_stats_dwork, 3*nsim_dev_trap_report_work, cfg80211_wiphy_work, 4*macvlan_process_broadcast, crng_reseed, 4*macvlan_process_broadcast [ 211.053386][ C0] workqueue events_power_efficient: flags=0x82 [ 211.053391][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=16 refcnt=17 [ 211.053404][ C0] in-flight: 3749:gc_worker for 84s ,1159:neigh_periodic_work for 105s [ 211.053436][ C0] pending: wg_ratelimiter_gc_entries, crda_timeout_work, 2*neigh_managed_work, fb_flashcursor, reg_check_chans_work, do_cache_clean, neigh_periodic_work, 6*check_lifetime [ 211.053496][ C0] workqueue events_dfl_long: flags=0x2 [ 211.053501][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=6 refcnt=7 [ 211.053514][ C0] pending: 6*defense_work_handler [ 211.053530][ C0] workqueue mm_percpu_wq: flags=0x108 [ 211.053534][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 211.053549][ C0] pending: vmstat_update [ 211.053568][ C0] workqueue writeback: flags=0x4a [ 211.053573][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 211.053585][ C0] in-flight: 2577:wb_workfn for 99s [ 211.053641][ C0] workqueue mld: flags=0x40108 [ 211.053645][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=50 [ 211.053660][ C0] pending: mld_ifc_work [ 211.053670][ C0] inactive: 48*mld_ifc_work [ 211.053690][ C0] workqueue ipv6_addrconf: flags=0x6000a [ 211.053695][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=11 MAYDAY [ 211.053707][ C0] in-flight: 2822(RESCUER):addrconf_verify_work for 5s [ 211.053724][ C0] pending: mayday_cursor_func [ 211.053734][ C0] inactive: 5*addrconf_verify_work [ 211.053747][ C0] workqueue krxrpcd: flags=0x2001a [ 211.053751][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=4 [ 211.053768][ C0] pending: rxrpc_peer_keepalive_worker [ 211.053785][ C0] workqueue bat_events: flags=0x6000a [ 211.053789][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=44 MAYDAY [ 211.053802][ C0] in-flight: 2854(RESCUER):batadv_tt_purge for 1s [ 211.053817][ C0] pending: mayday_cursor_func [ 211.053827][ C0] inactive: batadv_tt_purge, batadv_bla_periodic_work, 3*batadv_dat_purge, 3*batadv_bla_periodic_work, 3*batadv_mcast_mla_update, batadv_dat_purge, 2*batadv_mcast_mla_update, 9*batadv_iv_send_outstanding_bat_ogm_packet, 3*batadv_purge_orig, batadv_iv_send_outstanding_bat_ogm_packet, batadv_purge_orig, 5*batadv_iv_send_outstanding_bat_ogm_packet, batadv_purge_orig, batadv_tt_purge, batadv_bla_periodic_work, batadv_dat_purge, batadv_tt_purge [ 211.053959][ C0] workqueue hci2: flags=0x20012 [ 211.053964][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=5 [ 211.053978][ C0] in-flight: 4726:hci_cmd_sync_work for 102s [ 211.053996][ C0] inactive: hci_cmd_sync_work [ 211.054008][ C0] workqueue hci4: flags=0x20012 [ 211.054012][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=4 [ 211.054026][ C0] in-flight: 4728:hci_cmd_work for 13s [ 211.054042][ C0] workqueue hci4: flags=0x20012 [ 211.054046][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=4 [ 211.054060][ C0] in-flight: 4716:hci_cmd_sync_work for 45s [ 211.054079][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 211.054084][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 211.054098][ C0] pending: 2*wg_packet_tx_worker, wg_packet_encrypt_worker [ 211.054117][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 211.054121][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 211.054135][ C0] pending: 2*wg_packet_tx_worker, wg_packet_encrypt_worker [ 211.054153][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 211.054157][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 211.054172][ C0] pending: 2*wg_packet_tx_worker, wg_packet_encrypt_worker [ 211.054194][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 211.054199][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 211.054213][ C0] pending: 2*wg_packet_tx_worker, wg_packet_encrypt_worker [ 211.054231][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 211.054235][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 211.054249][ C0] pending: 2*wg_packet_tx_worker, wg_packet_encrypt_worker [ 211.054267][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 211.054272][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 211.054286][ C0] pending: 2*wg_packet_tx_worker, wg_packet_encrypt_worker [ 211.054308][ C0] workqueue krds_cp_wq#0/0: flags=0x20002 [ 211.054312][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=4 [ 211.054325][ C0] pending: rds_send_worker [ 211.054341][ C0] workqueue krds_cp_wq#0/1: flags=0x20002 [ 211.054347][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=4 [ 211.054361][ C0] pending: rds_send_worker [ 211.054371][ C0] workqueue krds_cp_wq#0/2: flags=0x20002 [ 211.054376][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=4 [ 211.054388][ C0] pending: rds_send_worker [ 211.054398][ C0] workqueue krds_cp_wq#0/3: flags=0x20002 [ 211.054403][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=4 [ 211.054415][ C0] pending: rds_send_worker [ 211.054426][ C0] workqueue krds_cp_wq#0/4: flags=0x20002 [ 211.054430][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=4 [ 211.054443][ C0] pending: rds_shutdown_worker [ 211.054455][ C0] workqueue krds_cp_wq#1/0: flags=0x20002 [ 211.054459][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=4 [ 211.054472][ C0] pending: rds_send_worker [ 211.054483][ C0] workqueue krds_cp_wq#1/2: flags=0x20002 [ 211.054487][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=4 [ 211.054499][ C0] pending: rds_send_worker [ 211.054510][ C0] workqueue krds_cp_wq#1/4: flags=0x20002 [ 211.054515][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=4 [ 211.054527][ C0] in-flight: 3191:rds_send_worker for 81s [ 211.054548][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 211.054553][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 211.054567][ C0] pending: 2*wg_packet_tx_worker, wg_packet_encrypt_worker [ 211.054584][ C0] workqueue wg-kex-wg1: flags=0x6 [ 211.054588][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 211.054600][ C0] in-flight: 3353:wg_packet_handshake_send_worker for 76s [ 211.054620][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 211.054624][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 211.054638][ C0] pending: 2*wg_packet_tx_worker, wg_packet_encrypt_worker [ 211.054655][ C0] workqueue wg-kex-wg2: flags=0x124 [ 211.054660][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 211.054674][ C0] pending: wg_packet_handshake_receive_worker [ 211.054687][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 211.054691][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 211.054705][ C0] pending: 2*wg_packet_tx_worker, wg_packet_encrypt_worker [ 211.054724][ C0] workqueue hci0: flags=0x20012 [ 211.054728][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=4 [ 211.054742][ C0] pending: hci_cmd_sync_work [ 211.054755][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 211.054760][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 211.054774][ C0] pending: 2*wg_packet_tx_worker, wg_packet_encrypt_worker [ 211.054791][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 211.054796][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 211.054810][ C0] pending: 2*wg_packet_tx_worker, wg_packet_encrypt_worker [ 211.054828][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 211.054832][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 211.054846][ C0] pending: 2*wg_packet_tx_worker, wg_packet_encrypt_worker [ 211.054866][ C0] workqueue bond2: flags=0x2000a [ 211.054870][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=6 MAYDAY [ 211.054883][ C0] pending: bond_mii_monitor [ 211.054894][ C0] inactive: bond_alb_monitor [ 211.054906][ C0] pool 2: cpus=0 node=0 flags=0x0 nice=0 hung=87s workers=8 idle: 4822 4916 4774 865 4912 4875 [ 211.054954][ C0] pool 8: cpus=0-1 flags=0x6 nice=0 hung=1s workers=16 manager: 12 [ 211.054970][ C0] pool 9: cpus=0-1 node=0 flags=0x4 nice=-20 hung=13s workers=8 idle: 4729 51 4727 4717 4721 [ 211.055008][ C0] Showing backtraces of busy workers in stalled worker pools: [ 211.055013][ C0] pool 2: [ 211.055017][ C0] task:kworker/0:0 state:R running task stack:0 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00000010 [ 211.055032][ C0] Workqueue: events reg_todo [ 211.055040][ C0] Call trace: [ 211.055043][ C0] __switch_to+0x2b4/0x6e4 (T) [ 211.055056][ C0] __schedule+0x135c/0x2b00 [ 211.055066][ C0] preempt_schedule_common+0xd4/0x190 [ 211.055077][ C0] preempt_schedule+0x60/0x78 [ 211.055086][ C0] __local_bh_enable_ip+0x16c/0x234 [ 211.055095][ C0] _raw_spin_unlock_bh+0x3c/0x4c [ 211.055104][ C0] reg_todo+0x608/0x6a4 [ 211.055111][ C0] process_scheduled_works+0x91c/0x1250 [ 211.055121][ C0] worker_thread+0x798/0xbd0 [ 211.055130][ C0] kthread+0x304/0x3d4 [ 211.055139][ C0] ret_from_fork+0x10/0x20 [ 212.330346][ C0] net_ratelimit: 36452 callbacks suppressed [ 212.330363][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.330471][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.330583][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 212.330683][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.330783][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 212.330882][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 212.330982][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 212.331085][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.331512][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 212.331713][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 217.340441][ C0] net_ratelimit: 36267 callbacks suppressed [ 217.340457][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.341012][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 217.341204][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 217.341310][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.341422][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.341533][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 217.341632][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.341731][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 217.341861][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 217.341967][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5e:7d:6f:3c:db:0b, vlan:0) [ 222.000337][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 222.717060][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4715/1:b..l [ 222.718560][ C0] rcu: (detected by 0, t=10502 jiffies, g=21845, q=1033 ncpus=1) [ 222.720037][ C0] task:syz-executor state:R running task stack:0 pid:4715 tgid:4715 ppid:4713 task_flags:0x400140 flags:0x00000000 [ 222.722590][ C0] Call trace: [ 222.723187][ C0] __switch_to+0x2b4/0x6e4 (T) [ 222.724078][ C0] __schedule+0x135c/0x2b00 [ 222.724944][ C0] preempt_schedule_irq+0x74/0x174 [ 222.725888][ C0] raw_irqentry_exit_cond_resched+0x30/0x40 [ 222.726971][ C0] irqentry_exit_to_kernel_mode_preempt+0x44/0x54 [ 222.728171][ C0] arm64_exit_to_kernel_mode_preempt+0x1c/0x38 [ 222.729349][ C0] el1_interrupt+0x4c/0x60 [ 222.730192][ C0] el1h_64_irq_handler+0x18/0x24 [ 222.731136][ C0] el1h_64_irq+0x78/0x7c [ 222.731944][ C0] write_comp_data+0x74/0x84 (P) [ 222.732865][ C0] __sanitizer_cov_trace_const_cmp4+0x28/0x34 [ 222.734000][ C0] __page_table_check_zero+0xb4/0x40c [ 222.734977][ C0] __free_frozen_pages+0xb00/0xbd0 [ 222.735913][ C0] free_frozen_pages+0x14/0x20 [ 222.736798][ C0] __free_slab+0x11c/0x1b4 [ 222.737602][ C0] free_slab+0x2c/0x154 [ 222.738379][ C0] discard_slab+0x48/0x90 [ 222.739210][ C0] __slab_free+0x1a0/0x1d0 [ 222.740037][ C0] ___cache_free+0x80/0x94 [ 222.740880][ C0] qlist_free_all+0xb4/0x120 [ 222.741710][ C0] kasan_quarantine_reduce+0x118/0x124 [ 222.742718][ C0] __kasan_kmalloc+0x2c/0xb4 [ 222.743559][ C0] __kmalloc_noprof+0x34c/0x6c8 [ 222.744441][ C0] tomoyo_encode2+0x10c/0x330 [ 222.745307][ C0] tomoyo_encode+0x34/0x50 [ 222.746112][ C0] tomoyo_realpath_from_path+0x488/0x4dc [ 222.747131][ C0] tomoyo_check_open_permission+0x1c4/0x394 [ 222.748204][ C0] tomoyo_file_open+0x78/0xcc [ 222.749062][ C0] security_file_open+0xbc/0x258 [ 222.750007][ C0] do_dentry_open+0x2a8/0xfbc [ 222.750884][ C0] vfs_open+0x44/0x2dc [ 222.751631][ C0] path_openat+0x1084/0x18f0 [ 222.752488][ C0] do_file_open+0x1c8/0x2e8 [ 222.753318][ C0] do_sys_openat2+0x114/0x1e8 [ 222.754186][ C0] do_sys_open+0xb0/0xe0 [ 222.754973][ C0] __arm64_sys_openat+0xa8/0xc4 [ 222.755868][ C0] invoke_syscall+0x98/0x244 [ 222.756716][ C0] el0_svc_common+0xec/0x23c [ 222.757582][ C0] do_el0_svc+0x4c/0x5c [ 222.758362][ C0] el0_svc+0x60/0x1d8 [ 222.759108][ C0] el0t_64_sync_handler+0x44/0x104 [ 222.760071][ C0] el0t_64_sync+0x198/0x19c [ 222.760900][ C0] rcu: rcu_preempt kthread starved for 6993 jiffies! g21845 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 222.762979][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 222.764903][ C0] rcu: RCU grace-period kthread stack dump: [ 222.766019][ C0] task:rcu_preempt state:R running task stack:0 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00000010 [ 222.768504][ C0] Call trace: [ 222.769100][ C0] __switch_to+0x2b4/0x6e4 (T) [ 222.769934][ C0] __schedule+0x135c/0x2b00 [ 222.770759][ C0] schedule+0x13c/0x20c [ 222.771540][ C0] schedule_timeout+0x13c/0x28c [ 222.772449][ C0] rcu_gp_fqs_loop+0x260/0xde8 [ 222.773317][ C0] rcu_gp_kthread+0x148/0x230 [ 222.774178][ C0] kthread+0x304/0x3d4 [ 222.774939][ C0] ret_from_fork+0x10/0x20 [ 222.775748][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 222.776883][ C0] CPU: 0 UID: 0 PID: 2854 Comm: kworker/R-bat_e Tainted: G L syzkaller #0 PREEMPT [ 222.778892][ C0] Tainted: [L]=SOFTLOCKUP [ 222.779689][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 222.781550][ C0] Workqueue: bat_events batadv_tt_purge [ 222.782609][ C0] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 222.784016][ C0] pc : ip6table_mangle_hook+0x1c/0x5c4 [ 222.785023][ C0] lr : nf_hook_slow+0xc8/0x224 [ 222.785904][ C0] sp : ffff80008f7e6c90 [ 222.786680][ C0] x29: ffff80008f7e6c90 x28: ffff0000f1ba0810 x27: 1fffe0001e374100 [ 222.788168][ C0] x26: dfff800000000000 x25: ffff80008588b090 x24: ffff80008aaff100 [ 222.789624][ C0] x23: ffff0000f1ba0808 x22: 0000000000000000 x21: ffff80008f7e6da0 [ 222.791101][ C0] x20: ffff0000f1ba0800 x19: ffff00018a72c140 x18: ffff80011b876000 [ 222.792597][ C0] x17: 0000000000020010 x16: 0038dd8600000000 x15: 0000000000000001 [ 222.794054][ C0] x14: 000000000470eca2 x13: 0000000000000009 x12: 0000000000000009 [ 222.795562][ C0] x11: 000000004cbcf016 x10: 0000000000000003 x9 : ffff80008f7e6bf0 [ 222.797053][ C0] x8 : 0000000000000000 x7 : ffff8000859c0490 x6 : 0000000000000000 [ 222.798499][ C0] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff800085001218 [ 222.799965][ C0] x2 : ffff80008f7e6da0 x1 : ffff00018a72c140 x0 : ffff0000cb653d80 [ 222.801487][ C0] Call trace: [ 222.802095][ C0] ip6table_mangle_hook+0x1c/0x5c4 (P) [ 222.803131][ C0] nf_hook_slow+0xc8/0x224 [ 222.803985][ C0] NF_HOOK+0x4c4/0x63c [ 222.804765][ C0] br_nf_forward_ip+0x540/0x6ac [ 222.805694][ C0] br_nf_forward+0x614/0x14e4 [ 222.806606][ C0] nf_hook_slow+0xc8/0x224 [ 222.807442][ C0] NF_HOOK+0x1ec/0x394 [ 222.808201][ C0] __br_forward+0x2d8/0x43c [ 222.809028][ C0] deliver_clone+0x70/0xcc [ 222.809835][ C0] maybe_deliver+0x98/0x128 [ 222.810701][ C0] br_flood+0x28c/0x5c0 [ 222.811466][ C0] br_handle_frame_finish+0xd78/0x14c4 [ 222.812455][ C0] br_nf_hook_thresh+0x344/0x3e8 [ 222.813337][ C0] br_nf_pre_routing_finish_ipv6+0x7ac/0xaa4 [ 222.814401][ C0] br_nf_pre_routing_ipv6+0x2c4/0x5f8 [ 222.815400][ C0] br_nf_pre_routing+0x6e0/0x1168 [ 222.816330][ C0] br_handle_frame+0xeb0/0x10dc [ 222.817261][ C0] __netif_receive_skb_core+0x848/0x2a3c [ 222.818323][ C0] __netif_receive_skb_one_core+0x70/0x110 [ 222.819436][ C0] __netif_receive_skb+0x34/0x128 [ 222.820408][ C0] process_backlog+0x588/0x14e0 [ 222.821286][ C0] __napi_poll+0xb4/0x328 [ 222.822150][ C0] net_rx_action+0x5b0/0xc14 [ 222.823008][ C0] handle_softirqs+0x324/0xcbc [ 222.823900][ C0] __do_softirq+0x14/0x20 [ 222.824711][ C0] ____do_softirq+0x10/0x1c [ 222.825533][ C0] call_on_irq_stack+0x30/0x48 [ 222.826393][ C0] do_softirq_own_stack+0x1c/0x28 [ 222.827314][ C0] do_softirq+0x90/0xf8 [ 222.828072][ C0] __local_bh_enable_ip+0x190/0x234 [ 222.829032][ C0] _raw_spin_unlock_bh+0x3c/0x4c [ 222.829925][ C0] batadv_tt_purge+0x3e4/0x7b4 [ 222.830769][ C0] process_scheduled_works+0x91c/0x1250 [ 222.831755][ C0] rescuer_thread+0x68c/0xd90 [ 222.832593][ C0] kthread+0x304/0x3d4 [ 222.833328][ C0] ret_from_fork+0x10/0x20