last executing test programs: 59.135010144s ago: executing program 0 (id=25): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='yeah', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 58.266999163s ago: executing program 0 (id=43): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r1, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r3, r2, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e24, 0x20, @loopback, 0xfffffe01}}}, 0x108) getsockopt$inet6_buf(r4, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) 58.232396394s ago: executing program 0 (id=44): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x804, &(0x7f0000000500)={[{@shortname_winnt}, {@shortname_lower}, {@utf8}, {@utf8}, {@shortname_mixed}, {@shortname_lower}, {@rodir}, {@shortname_mixed}, {@fat=@nocase}, {@shortname_winnt}, {@uni_xlate}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@shortname_lower}, {@shortname_win95}, {@shortname_lower}]}, 0x1, 0x27b, &(0x7f0000000280)="$eJzs3cFqK1UYAOB/mqRJdJEsXInQAV24Kq1P0CIVxIKgZKEutNgUpAmFFgJVMXblE/gEPo8b8QV8AC93d7u43LmkM0nTyyQlvWlT7v2+TQ//+f85/5kZ2tWc/vBB//jw5Ozo4tf/otFIYm0nduIyiXasxdjvUerfJ+VxAOCRu8yyeJrl6nno/GZGbUZlde3emwMA7sX03/9V9wIAPIyvv/n2i939/b2v0rQR0f9j0Eki/5nP7x7FT9GLbmxFK55HZBP5+LPP9/eimo6046P+cNAZVfa//7u4/u7/EVf129GKdnn9dpqbqh8OOrV4p1h/pxfdL/+KVrxXXv9JSX101uPjD6f634xW/PNjnEQvDovexvW/bafpp9mfz375bhQd1SfDQac+ySuyKw/6YAAAAAAAAAAAAAAAAAAAAAAAeKNtphPtm+fvjA/+nzM/53yg4dT5PFtpmmZJnn9dX433q1Fd5d4BAAAAAAAAAAAAAAAAAADgsTg7//n4oNfrni51MP6sv2QqXtyM1CPi7mttLFoVlaK1XhKx2Fq1qF9V3p5cWXAXzVE/3dOkGst7BMkk0pye2oh8rVGkmQ+mIq+9eiOuBuO36/ggue3hNspekiUMspLXrzKzav3VSLPYQUlyc87q6+/eqeesNWMqiYja5GbOv05tuffw4X4HAQAAAAAAAAAAAAAAAAAAueuPfksmL1bQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACswPX//19gMCyKZ+VkldGgGkVkxVsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgLfAyAAD//0MUZ+o=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 58.16995059s ago: executing program 0 (id=46): r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x6) fchdir(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) 58.039673727s ago: executing program 0 (id=47): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000040)='rpc_pipefs\x00', 0x800800, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2403, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 58.011153997s ago: executing program 0 (id=48): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r2], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x8000) ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f0000000000)={'dummy0\x00', 0x1}) 42.95954632s ago: executing program 32 (id=48): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r2], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x8000) ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f0000000000)={'dummy0\x00', 0x1}) 16.679614431s ago: executing program 2 (id=906): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x2b, 0x7fffffff, 0x19401804, 0x2, 0xfffe, 0x6, 0xcccb, 0x0, 0x0, 0x1, 0x8001}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20842, 0x110) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000020, 0x11, r3, 0xa64c000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) 13.524344596s ago: executing program 2 (id=944): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0xe000}, 0x5}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setns(0xc9, 0x0) r3 = socket(0x8, 0x2, 0x0) setsockopt(r3, 0x108, 0x42020054, &(0x7f0000000000)="010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000", 0x54) 13.523984402s ago: executing program 2 (id=945): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000100000000000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x9}, 0x94) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r2, 0x3, 0x0, @val=@iter={0x0}}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) sendto$inet6(r3, 0x0, 0x0, 0x240088d1, &(0x7f0000000400)={0xa, 0x2, 0x3ff, @loopback, 0xffffff1f}, 0x1c) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x7f, 0x3f381aebd606354e, 0x4, "", [{{0x9, 0x4, 0x0, 0xf1, 0x22, 0x2, 0x6, 0x0, 0xd, {{0x5}, {0x5, 0x24, 0x0, 0x9276}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x1, 0xf, 0x7}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x5f, 0xc, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x5, 0x9, 0x8}}}}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 12.996355677s ago: executing program 2 (id=952): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x200700, &(0x7f0000000680)={[{@data_err_ignore}, {@prjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@stripe={'stripe', 0x3d, 0x9}}, {@inode_readahead_blks}, {@nodelalloc}, {@debug}]}, 0x1, 0x488, &(0x7f00000001c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x85b400, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000004200)={0x2020}, 0x2020) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, 0x0, 0x0) mkdirat(r0, 0x0, 0x9) 12.887440886s ago: executing program 2 (id=953): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) socket$vsock_stream(0x28, 0x1, 0x0) accept4$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000180)=0x1c, 0x800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 12.731137827s ago: executing program 2 (id=954): r0 = socket$inet_tcp(0x2, 0x1, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x303}, "1234567812345678", "12345678123456781234567812345678", "12345678", "1234567812345678"}, 0x28) sendto$inet(r1, &(0x7f0000000300)='\x00', 0x1000, 0x40, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000400), 0x4000, 0x1d40, 0x0, 0x0) 12.690056499s ago: executing program 33 (id=954): r0 = socket$inet_tcp(0x2, 0x1, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x303}, "1234567812345678", "12345678123456781234567812345678", "12345678", "1234567812345678"}, 0x28) sendto$inet(r1, &(0x7f0000000300)='\x00', 0x1000, 0x40, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000400), 0x4000, 0x1d40, 0x0, 0x0) 4.816404157s ago: executing program 5 (id=1121): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000140)={0x1d, r4, 0x3, {}, 0xfd}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 4.596489667s ago: executing program 5 (id=1128): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[], 0x40000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r2, 0x0) r3 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r3, &(0x7f0000000240)=""/242, 0xf2, 0x0, 0x0, 0x0) 4.533076637s ago: executing program 5 (id=1129): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x26020480) r3 = openat$cgroup_procs(r2, &(0x7f0000000800)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000240), 0x12) pread64(r1, &(0x7f0000000340)=""/69, 0x45, 0x3) 3.333492438s ago: executing program 6 (id=1139): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x42}, 0x48) close(r0) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x4) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) shutdown(r1, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0xe0, 0x0, 0xffffffffffffff5c) 3.264434508s ago: executing program 6 (id=1140): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3000408, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000100)=ANY=[], 0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000008c0)={0xc0}) mknodat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x200, 0xe) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 3.183001958s ago: executing program 6 (id=1142): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r3, &(0x7f00000029c0), 0x400006d, 0x20000004) 2.52350075s ago: executing program 4 (id=1154): prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000640)=@nat={'nat\x00', 0x670, 0x5, 0x500, 0x228, 0x0, 0xffffffff, 0x0, 0x228, 0x468, 0x468, 0xffffffff, 0x468, 0x468, 0x5, 0x0, {[{{@ip={@multicast2, @local, 0xff000000, 0xffffff00, 'macsec0\x00', 'wg1\x00', {0xff}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "9401d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0x0, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e26, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @icmp_id=0x65}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x2}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'nicvf0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x8, "c81f"}}, @common=@ttl={{0x28}, {0x2, 0x6}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @multicast2, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x560) 1.627758573s ago: executing program 6 (id=1156): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3000408, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000034c0)={0x0, 0x0, &(0x7f0000003480)={&(0x7f0000000000)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x850c081d989709a5}, 0x40000) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) mknodat$null(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x1000, 0x103) 1.576827299s ago: executing program 6 (id=1158): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x1007}]}) timer_create(0x2, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.499597342s ago: executing program 5 (id=1160): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x6, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x7c, 0x2c, 0xca7, 0x70bd25, 0x400000, {0x0, 0x0, 0x0, r5, {0x7, 0x4}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x8, 0xf, 0x3, 0x2, 0x7ae, 0x9, 0xb11, 0x65, [{0x8002, 0x2000401, 0x5, 0x6}, {0x0, 0x7f, 0x8, 0xfffffffd}, {0x3ff, 0xe, 0x76800, 0xd}]}}]}}, @TCA_CHAIN={0x8, 0xb, 0xff}]}, 0x7c}}, 0x20040054) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 1.468122318s ago: executing program 4 (id=1161): socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) kexec_load(0x2, 0x0, 0x0, 0x1) r2 = socket$inet(0x2, 0xa, 0xfffffffd) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x4e22, @empty}, {0xfffffffffffffffe, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, 0x48, {0x2, 0x0, @broadcast}, 'ip6gretap0\x00'}) close(0x3) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000280)="80ef", 0x2}], 0x1) 1.456958335s ago: executing program 3 (id=1162): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="000400001052000024000e00d2630000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x24004814) r1 = syz_open_dev$usbfs(0x0, 0x74, 0x8581) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="060000000400000002", @ANYRES32, @ANYRESOCT=r1, @ANYRES32, @ANYBLOB], 0x50) r2 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8}) ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, &(0x7f0000000000)={0x980901, 0x7, @name="82ff07000000000000fb0000000000000000000000000000000000006f00"}) 1.412342116s ago: executing program 3 (id=1163): unshare(0x6a040000) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast2}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) connect$pppl2tp(r2, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0xffff, 0x2, 0x0, {0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400}}}, 0x32) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000140)=0x1) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000380)=0x1) 1.411820645s ago: executing program 1 (id=1164): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc_mnt/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000280)='1\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000300)='1\x00', 0x1) r2 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @rand_addr=0x100000a}}) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x8922, &(0x7f0000000200)={'lo\x00', {0x2, 0x0, @rand_addr=0xff}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x1c, &(0x7f0000000400)=@raw=[@generic={0xbf, 0x6, 0x1}, @generic={0xb7, 0x2}, @generic={0x7b, 0xa, 0x2, 0xfff8}, @generic={0x7b, 0xa, 0x2, 0xfff0}, @generic={0x7b, 0xa, 0x2, 0xffe8}, @generic={0x7b, 0xa, 0x2, 0xffe0}, @generic={0x7b, 0xa, 0x2, 0xffd8}, @generic={0x7b, 0xa, 0x2, 0xffd0}, @generic={0x7b, 0xa, 0x2, 0xffc8}, @generic={0x7b, 0xa, 0x2, 0xffc0}, @generic={0xb7, 0x2, 0x0, 0x0, 0x2}, @generic={0x73, 0xa, 0x2, 0xffc0}, @generic={0xb7, 0x2, 0x0, 0x0, 0x1}, @generic={0x63, 0xa, 0x2, 0xffc8}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x63, 0xa, 0x2, 0xffcc}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x63, 0xa, 0x2, 0xffd0}, @generic={0xbf, 0x1, 0x6}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0xb7, 0x0, 0x0, 0x0, 0x2}, @generic={0x95}], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x0, 0x36, 0x0, &(0x7f00000005c0)="001122334455001122334456080045000028000000004006f8ce0a0000010a00000200500050000000000000000050022000b82b0000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.378354382s ago: executing program 4 (id=1165): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = socket(0x28, 0x801, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) r1 = fanotify_init(0xf00, 0x181000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r1, 0x5, 0x4800003e, r2, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x90000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) tee(r3, r0, 0x80000003, 0xc) write$binfmt_script(r4, &(0x7f0000000340)={'#! ', './file0'}, 0xb) 1.349248493s ago: executing program 5 (id=1166): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$6lowpan_enable(r0, &(0x7f0000000400)='1', 0x1) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x13}, @hci_ev_le_conn_complete={{}, {0x0, 0xc8, 0x0, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}}, 0x16) nanosleep(&(0x7f0000000a00)={0x0, 0x10000000}, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000000200)='connect aa:aa:aa:aa:aa:10 1', 0x1b) nanosleep(&(0x7f0000000a00)={0x0, 0x10000000}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt(r2, 0x1, 0x19, &(0x7f0000000600)='bt0\x00', 0x4) sendto$inet6(r2, &(0x7f0000000700)='\x00', 0x1, 0x0, &(0x7f0000000800)={0xa, 0x0, 0x0, @mcast2}, 0x1c) write$6lowpan_control(r1, &(0x7f0000000900)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) 1.348570702s ago: executing program 1 (id=1167): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000080)=0x10000) ioctl$TUNSETLINK(r1, 0x400454cd, 0x27) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000200)={@val={0x0, 0x805}, @void, @x25={0x0, 0x0, 0x1}}, 0x7) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000008d40)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20008c80], 0x0, 0x0, &(0x7f0000008c80)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) 1.309445846s ago: executing program 3 (id=1168): r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, 0x0, 0x0) accept4$x25(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)={0x48, r2, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {0x8}, @device_b, @device_a, @initial, {0x0, 0x400}}, @delba={0x3, 0x2, {{0x0, 0x1, 0x1}, 0x3, {0xbd, 0x6}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x19, &(0x7f0000000a00)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.25527187s ago: executing program 4 (id=1169): socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) listen(r1, 0x2) accept4(r1, 0x0, 0x0, 0x80800) 1.251688776s ago: executing program 1 (id=1170): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0x6, 0x3, 0x7d, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x0, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0xfffffffe, 0x7, 0x5, 0x80000001, 0x18e, 0x200006, 0x7, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x4, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xe84, 0x8, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0x9, 0x2, 0x1, 0xfdffdffc, 0x2, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000049, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0x8, 0x3], [0x7, 0x9, 0x4, 0x5, 0xfffffffd, 0xff, 0x80000004, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x7, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x100b, 0x5, 0x2000008, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x8, 0x10000, 0x4, 0x5, 0xfffe, 0xa620, 0x1ccc, 0x5, 0x1, 0x6, 0x14c, 0x60aa, 0x6, 0xa, 0x1000, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x1622, 0x7, 0xaf, 0x20000008, 0x1, 0x226, 0x3, 0x5, 0x0, 0x16b, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x4, 0x30, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.22748452s ago: executing program 3 (id=1171): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, r2) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) 1.225112154s ago: executing program 1 (id=1172): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044081}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 1.146317132s ago: executing program 1 (id=1173): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r1, 0x6, 0x0, 0x50d4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0xe6c11ffe4afd7b0e, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r3, r2, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_buf(r5, 0x1, 0x5, 0x0, 0x0) 1.146046512s ago: executing program 1 (id=1174): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x5c}}, 0x0) 1.145763277s ago: executing program 4 (id=1175): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x12, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.137920972s ago: executing program 3 (id=1176): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f00000001c0), &(0x7f0000000280)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 1.031508659s ago: executing program 3 (id=1177): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"a2e3ad214fc752f91b25060987f70e06d038e7ff7fc6e5539b325d078b089b3b08386e090890e0878f0e1ac6e7049b334d959b429a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31303b305d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c0428918246d9e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff13d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1ccab2689bee59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae23034202210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ecdf5e08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xc4062, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x3c, r2, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 94.216919ms ago: executing program 6 (id=1178): inotify_init1(0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x3) close(0x3) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000000c0)={r1, 0x1, 0x0, 0x2000}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) 37.63173ms ago: executing program 5 (id=1179): r0 = io_uring_setup(0x136a, &(0x7f0000019080)={0x0, 0x1f89, 0x0, 0x5, 0x288}) sched_setscheduler(0x0, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2042, 0x19d) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) mremap(&(0x7f000033a000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) syz_io_uring_setup(0xefe, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) tee(r2, r1, 0xfffffffffffffc01, 0x0) 0s ago: executing program 4 (id=1180): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000240), &(0x7f0000000340)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x30, 0x3a, 0x0, @remote, @local, {[], @dest_unreach={0x1, 0x3, 0x0, 0xf2, '\x00', {0x4, 0x6, '\x00', 0xd, 0x33, 0xff, @local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}}}}}}}, 0x0) kernel console output (not intermixed with test programs): 25] hsr_slave_0: left promiscuous mode [ 39.329082][ T5325] hsr_slave_1: left promiscuous mode [ 39.333058][ T5326] netlink: 'syz.1.174': attribute type 6 has an invalid length. [ 39.334788][ T5326] netlink: 'syz.1.174': attribute type 7 has an invalid length. [ 39.336433][ T5326] netlink: 'syz.1.174': attribute type 11 has an invalid length. [ 39.338252][ T5326] netlink: 'syz.1.174': attribute type 15 has an invalid length. [ 39.339778][ T5326] netlink: 'syz.1.174': attribute type 16 has an invalid length. [ 39.341265][ T5326] netlink: 'syz.1.174': attribute type 21 has an invalid length. [ 39.342781][ T5326] netlink: 'syz.1.174': attribute type 25 has an invalid length. [ 39.343677][ T5325] hsr0 (unregistering): left promiscuous mode [ 39.530359][ T30] audit: type=1326 audit(39.500:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5329 comm="syz.4.176" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa03792a8 code=0x0 [ 39.934635][ T5345] loop2: detected capacity change from 0 to 512 [ 39.940393][ T5345] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 39.952513][ T5345] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 39.956707][ T5345] EXT4-fs (loop2): 1 truncate cleaned up [ 39.958484][ T5345] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.823769][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.013257][ T5381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.194'. [ 41.017680][ T5381] ipvlan2: entered allmulticast mode [ 41.018888][ T5381] geneve0: entered allmulticast mode [ 41.289797][ T5395] loop2: detected capacity change from 0 to 4096 [ 41.295474][ T5395] EXT4-fs: inline encryption not supported [ 41.296616][ T5395] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.316915][ T5395] EXT4-fs (loop2): Test dummy encryption mode enabled [ 41.317129][ T5395] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 41.323161][ T5395] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0043] [ 41.323196][ T5395] System zones: 0-5 [ 41.324045][ T5395] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.366838][ T5395] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 41.383458][ T5395] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 41.425009][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.585120][ T5416] loop3: detected capacity change from 0 to 4096 [ 41.585471][ T5416] EXT4-fs: inline encryption not supported [ 41.588147][ T5416] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 41.588178][ T5416] EXT4-fs (loop3): Test dummy encryption mode enabled [ 41.602256][ T5416] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002] [ 41.602333][ T5416] System zones: 0-5 [ 41.603900][ T5416] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.718083][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.945249][ T5436] loop2: detected capacity change from 0 to 4096 [ 41.955757][ T5436] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.011374][ T30] audit: type=1400 audit(41.980:3): lsm=SMACK fn=smack_inode_rename action=denied subject="_" object="l" requested=rw pid=5434 comm="syz.2.217" name="file1" dev="loop2" ino=15 [ 42.032204][ T5440] 8021q: adding VLAN 0 to HW filter on device bond2 [ 42.039537][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.140861][ T5440] bond2: (slave geneve2): making interface the new active one [ 42.144879][ T5440] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 42.701998][ T5472] fuse: fd is not a fuse device [ 42.735625][ T5475] fuse: fd is not a fuse device [ 42.902366][ T5486] overlayfs: failed to resolve './file0': -2 [ 43.764107][ T5506] loop2: detected capacity change from 0 to 512 [ 43.766742][ T5506] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 43.769730][ T5506] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 43.769787][ T5506] System zones: 1-12 [ 43.772762][ T5506] EXT4-fs (loop2): 1 truncate cleaned up [ 43.773249][ T5506] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.802652][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.089565][ T5544] Bluetooth: MGMT ver 1.23 [ 45.784927][ T5587] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 47.425720][ T5613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.428441][ T5613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.434385][ T4717] Bluetooth: hci1: unknown advertising packet type: 0x17 [ 47.434420][ T4717] Bluetooth: hci1: Dropping invalid advertising data [ 47.435059][ T4717] Bluetooth: hci1: Malformed LE Event: 0x02 [ 47.470385][ T5615] netlink: 16 bytes leftover after parsing attributes in process `syz.4.288'. [ 47.515778][ T5619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.290'. [ 47.516793][ T5619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.290'. [ 47.516805][ T5619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.290'. [ 47.633845][ T5629] fuse: fd is not a fuse device [ 47.977741][ T5641] input: syz1 as /devices/virtual/input/input2 [ 48.017448][ T4713] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 48.019479][ T4713] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 48.020581][ T4713] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 48.021863][ T4713] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 48.022327][ T4713] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 48.202052][ T5643] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.203841][ T5643] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.205474][ T5643] bridge_slave_0: entered allmulticast mode [ 48.208733][ T5643] bridge_slave_0: entered promiscuous mode [ 48.211458][ T5643] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.213028][ T5643] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.214752][ T5643] bridge_slave_1: entered allmulticast mode [ 48.216465][ T5643] bridge_slave_1: entered promiscuous mode [ 48.228173][ T5643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.231344][ T5643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.240440][ T5643] team0: Port device team_slave_0 added [ 48.242971][ T5643] team0: Port device team_slave_1 added [ 48.251450][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.253036][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.258987][ T5643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.261898][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.263473][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.263495][ T5643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.286147][ T5643] hsr_slave_0: entered promiscuous mode [ 48.291548][ T5643] hsr_slave_1: entered promiscuous mode [ 48.294432][ T5643] debugfs: 'hsr0' already exists in 'hsr' [ 48.296914][ T5643] Cannot create hsr debugfs directory [ 48.348002][ T5011] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.411383][ T5011] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.460691][ T5011] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.513489][ T5011] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.623333][ T5011] bridge_slave_1: left allmulticast mode [ 48.624953][ T5011] bridge_slave_1: left promiscuous mode [ 48.626783][ T5011] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.634115][ T5011] bridge_slave_0: left allmulticast mode [ 48.635536][ T5011] bridge_slave_0: left promiscuous mode [ 48.636944][ T5011] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.660068][ T5576] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 48.828856][ T5011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 48.858726][ T5011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.884689][ T5011] bond0 (unregistering): Released all slaves [ 48.897581][ T5643] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 48.907663][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.908039][ T5643] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 48.913812][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.930618][ T5643] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 48.946715][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.948720][ T5643] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 48.953073][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.107143][ T5643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.116183][ T5713] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 49.155783][ T5711] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 49.156483][ T5711] netlink: 40 bytes leftover after parsing attributes in process `syz.1.316'. [ 49.166547][ T5643] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.176596][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.176676][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.180418][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.180461][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.205529][ T5011] hsr_slave_0: left promiscuous mode [ 49.208327][ T5011] hsr_slave_1: left promiscuous mode [ 49.208655][ T5011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.208672][ T5011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.212346][ T5011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.212375][ T5011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.231874][ T5011] veth1_macvtap: left promiscuous mode [ 49.231928][ T5011] veth0_macvtap: left promiscuous mode [ 49.231994][ T5011] veth1_vlan: left promiscuous mode [ 49.232062][ T5011] veth0_vlan: left promiscuous mode [ 49.332262][ T5011] team0 (unregistering): Port device team_slave_1 removed [ 49.339194][ T5011] team0 (unregistering): Port device team_slave_0 removed [ 49.397729][ T4400] 8021q: adding VLAN 0 to HW filter on device eth0 [ 49.551322][ T5759] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 49.659823][ T5643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.720744][ T4400] 8021q: adding VLAN 0 to HW filter on device eth1 [ 49.823206][ T5790] fuse: fd is not a fuse device [ 49.834814][ T5643] veth0_vlan: entered promiscuous mode [ 49.842792][ T5643] veth1_vlan: entered promiscuous mode [ 49.861654][ T5643] veth0_macvtap: entered promiscuous mode [ 49.865334][ T5643] veth1_macvtap: entered promiscuous mode [ 49.878703][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.884210][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.927059][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.927222][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.927255][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.927271][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.969257][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.969291][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.005350][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.005387][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.027071][ T4717] Bluetooth: hci5: command tx timeout [ 50.045135][ T5807] netlink: 12 bytes leftover after parsing attributes in process `syz.4.334'. [ 50.082400][ T4400] 8021q: adding VLAN 0 to HW filter on device eth2 [ 50.082467][ T5812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.335'. [ 50.181570][ T5825] fuse: fd is not a fuse device [ 50.385185][ T4400] 8021q: adding VLAN 0 to HW filter on device eth3 [ 50.448233][ T5858] syz_tun: entered allmulticast mode [ 50.453084][ T5857] syz_tun: left allmulticast mode [ 50.671746][ T5877] binder: 5876:5877 tried to acquire reference to desc 0, got 1 instead [ 50.671855][ T5877] binder: 5876:5877 got transaction with invalid parent offset or type [ 50.671955][ T5877] binder: 5876:5877 transaction call to 5876:0 failed 7/29201/-22, code 0 size 80-24 line 3617 [ 50.682240][ T4811] binder: undelivered TRANSACTION_ERROR: 29201 [ 50.781490][ T5886] loop3: detected capacity change from 0 to 1024 [ 50.793696][ T5886] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.823606][ T5886] evm: overlay not supported [ 50.901366][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.966078][ T5896] validate_nla: 5 callbacks suppressed [ 50.966577][ T5896] netlink: 'syz.5.359': attribute type 1 has an invalid length. [ 51.166810][ T5902] FAULT_INJECTION: forcing a failure. [ 51.166810][ T5902] name failslab, interval 1, probability 0, space 0, times 0 [ 51.166849][ T5902] CPU: 1 UID: 0 PID: 5902 Comm: syz.3.361 Not tainted syzkaller #0 PREEMPT [ 51.166863][ T5902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 51.166869][ T5902] Call trace: [ 51.166872][ T5902] show_stack+0x2c/0x3c (C) [ 51.166893][ T5902] __dump_stack+0x30/0x40 [ 51.166906][ T5902] dump_stack_lvl+0xd8/0x12c [ 51.166917][ T5902] dump_stack+0x1c/0x28 [ 51.166929][ T5902] should_fail_ex+0x41c/0x590 [ 51.166938][ T5902] should_failslab+0xc4/0x120 [ 51.166947][ T5902] kmem_cache_alloc_noprof+0x94/0x5d8 [ 51.166957][ T5902] prepare_creds+0x34/0x7d0 [ 51.166969][ T5902] copy_creds+0xd8/0x7b0 [ 51.166981][ T5902] copy_process+0xb1c/0x32e8 [ 51.166990][ T5902] kernel_clone+0x234/0x9fc [ 51.166999][ T5902] __arm64_sys_clone+0x168/0x1d4 [ 51.167008][ T5902] invoke_syscall+0x98/0x244 [ 51.167021][ T5902] el0_svc_common+0xec/0x23c [ 51.167032][ T5902] do_el0_svc+0x4c/0x5c [ 51.167044][ T5902] el0_svc+0x64/0x260 [ 51.167054][ T5902] el0t_64_sync_handler+0x44/0x104 [ 51.167065][ T5902] el0t_64_sync+0x198/0x19c [ 51.306159][ T5908] netlink: 64 bytes leftover after parsing attributes in process `syz.4.363'. [ 51.320489][ T5909] netlink: 8 bytes leftover after parsing attributes in process `syz.5.364'. [ 51.322798][ T5909] netlink: 8 bytes leftover after parsing attributes in process `syz.5.364'. [ 51.446516][ T5915] bridge0: port 1(syz_tun) entered blocking state [ 51.446620][ T5915] bridge0: port 1(syz_tun) entered disabled state [ 51.450367][ T5915] syz_tun: entered allmulticast mode [ 51.453899][ T5915] syz_tun: entered promiscuous mode [ 51.454457][ T5915] bridge0: port 1(syz_tun) entered blocking state [ 51.454502][ T5915] bridge0: port 1(syz_tun) entered forwarding state [ 51.478653][ T5921] loop5: detected capacity change from 0 to 1024 [ 51.493078][ T5921] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.618698][ T5643] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.931938][ T5963] loop5: detected capacity change from 0 to 256 [ 51.944998][ T5963] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 52.028752][ T5969] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779264) [ 52.028783][ T5969] FAT-fs (loop5): Filesystem has been set read-only [ 52.029096][ T5969] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 52.029117][ T5969] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 52.087011][ T5962] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 52.107380][ T4717] Bluetooth: hci5: command tx timeout [ 52.379884][ T5988] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 52.382746][ T5988] overlayfs: failed to set xattr on upper [ 52.383992][ T5988] overlayfs: ...falling back to redirect_dir=nofollow. [ 52.385464][ T5988] overlayfs: ...falling back to uuid=null. [ 52.654690][ T5997] __nla_validate_parse: 7 callbacks suppressed [ 52.656177][ T5997] netlink: 12 bytes leftover after parsing attributes in process `syz.5.401'. [ 53.002244][ T6020] loop2: detected capacity change from 0 to 256 [ 53.004902][ T6011] FAULT_INJECTION: forcing a failure. [ 53.004902][ T6011] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 53.005241][ T6011] CPU: 1 UID: 0 PID: 6011 Comm: syz.3.407 Not tainted syzkaller #0 PREEMPT [ 53.005257][ T6011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 53.005263][ T6011] Call trace: [ 53.005267][ T6011] show_stack+0x2c/0x3c (C) [ 53.005293][ T6011] __dump_stack+0x30/0x40 [ 53.005310][ T6011] dump_stack_lvl+0xd8/0x12c [ 53.005323][ T6011] dump_stack+0x1c/0x28 [ 53.005335][ T6011] should_fail_ex+0x41c/0x590 [ 53.005344][ T6011] should_fail+0x14/0x24 [ 53.005351][ T6011] should_fail_usercopy+0x20/0x30 [ 53.005360][ T6011] arch_do_signal_or_restart+0xf80/0x444c [ 53.005372][ T6011] exit_to_user_mode_loop+0x70/0x17c [ 53.005384][ T6011] el0_svc+0x18c/0x260 [ 53.005395][ T6011] el0t_64_sync_handler+0x44/0x104 [ 53.005405][ T6011] el0t_64_sync+0x198/0x19c [ 53.024819][ T6020] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 53.294863][ T4717] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 53.294896][ T4717] CPU: 1 UID: 0 PID: 4717 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT [ 53.294913][ T4717] Tainted: [L]=SOFTLOCKUP [ 53.294917][ T4717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 53.294924][ T4717] Workqueue: hci4 hci_rx_work [ 53.294944][ T4717] Call trace: [ 53.294947][ T4717] show_stack+0x2c/0x3c (C) [ 53.294967][ T4717] __dump_stack+0x30/0x40 [ 53.294980][ T4717] dump_stack_lvl+0xd8/0x12c [ 53.294992][ T4717] dump_stack+0x1c/0x28 [ 53.295003][ T4717] sysfs_warn_dup+0x9c/0xb8 [ 53.295017][ T4717] sysfs_create_dir_ns+0x190/0x1f4 [ 53.295028][ T4717] kobject_add_internal+0x290/0x6f0 [ 53.295042][ T4717] kobject_add_varg+0x9c/0xe8 [ 53.295053][ T4717] kobject_add+0x110/0x1c8 [ 53.295064][ T4717] device_add+0x394/0x9e0 [ 53.295073][ T4717] hci_conn_add_sysfs+0xbc/0x1e8 [ 53.295083][ T4717] le_conn_complete_evt+0xc68/0x10f8 [ 53.295097][ T4717] hci_le_conn_complete_evt+0x114/0x3d8 [ 53.295109][ T4717] hci_le_meta_evt+0x2b0/0x46c [ 53.295118][ T4717] hci_event_packet+0x4c0/0x9c8 [ 53.295127][ T4717] hci_rx_work+0x2f4/0xd78 [ 53.295137][ T4717] process_scheduled_works+0x788/0x10b8 [ 53.295149][ T4717] worker_thread+0x798/0xbd0 [ 53.295160][ T4717] kthread+0x304/0x3d4 [ 53.295169][ T4717] ret_from_fork+0x10/0x20 [ 53.295197][ T4717] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 53.295212][ T4717] Bluetooth: hci4: failed to register connection device [ 53.368062][ T6042] loop3: detected capacity change from 0 to 512 [ 53.374564][ T6047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.421'. [ 53.383779][ T6047] bond1: entered promiscuous mode [ 53.383942][ T6042] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.389358][ T6047] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.418504][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.427597][ T6047] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.430913][ T6047] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 53.433434][ T6047] bond1: (slave sit1): Error -95 calling set_mac_address [ 53.466184][ T6053] loop3: detected capacity change from 0 to 8192 [ 53.709525][ T6085] xt_hashlimit: max too large, truncated to 1048576 [ 53.744763][ T6091] lo: entered promiscuous mode [ 53.753060][ T6091] tunl0: entered promiscuous mode [ 53.755047][ T6091] gre0: entered promiscuous mode [ 53.760202][ T6091] gretap0: entered promiscuous mode [ 53.762586][ T6091] erspan0: entered promiscuous mode [ 53.764088][ T6091] ip_vti0: entered promiscuous mode [ 53.765246][ T6091] ip6_vti0: entered promiscuous mode [ 53.766417][ T6091] sit0: entered promiscuous mode [ 53.768093][ T6091] ip6tnl0: entered promiscuous mode [ 53.769126][ T6091] ip6gre0: entered promiscuous mode [ 53.771050][ T6091] syz_tun: entered promiscuous mode [ 53.773508][ T6091] ip6gretap0: entered promiscuous mode [ 53.775380][ T6091] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.775585][ T6091] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.776267][ T6091] bridge0: entered promiscuous mode [ 53.778346][ T6091] vcan0: entered promiscuous mode [ 53.779195][ T6091] bond0: entered promiscuous mode [ 53.779205][ T6091] bond_slave_0: entered promiscuous mode [ 53.779271][ T6091] bond_slave_1: entered promiscuous mode [ 53.780429][ T6091] team0: entered promiscuous mode [ 53.780439][ T6091] team_slave_0: entered promiscuous mode [ 53.780496][ T6091] team_slave_1: entered promiscuous mode [ 53.781533][ T6091] dummy0: entered promiscuous mode [ 53.782702][ T6091] nlmon0: entered promiscuous mode [ 53.785313][ T6091] batadv0: entered promiscuous mode [ 53.786581][ T6091] vxcan0: entered promiscuous mode [ 53.793900][ T6091] vxcan1: entered promiscuous mode [ 53.795425][ T6091] veth0: entered promiscuous mode [ 53.798790][ T6091] veth1: entered promiscuous mode [ 53.800533][ T6091] wg0: entered promiscuous mode [ 53.801779][ T6091] wg1: entered promiscuous mode [ 53.802856][ T6091] wg2: entered promiscuous mode [ 53.807261][ T6091] veth0_to_bridge: entered promiscuous mode [ 53.813478][ T6091] veth1_to_bridge: entered promiscuous mode [ 53.817311][ T6091] veth0_to_bond: entered promiscuous mode [ 53.820419][ T6091] veth1_to_bond: entered promiscuous mode [ 53.823487][ T6091] veth0_to_team: entered promiscuous mode [ 53.827135][ T6091] veth1_to_team: entered promiscuous mode [ 53.830283][ T6091] veth0_to_batadv: entered promiscuous mode [ 53.832985][ T6091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.834579][ T6091] batadv_slave_0: entered promiscuous mode [ 53.837132][ T6091] veth1_to_batadv: entered promiscuous mode [ 53.839754][ T6091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.839816][ T6091] batadv_slave_1: entered promiscuous mode [ 53.840893][ T6091] xfrm0: entered promiscuous mode [ 53.841753][ T6091] veth0_to_hsr: entered promiscuous mode [ 53.843566][ T6091] veth1_to_hsr: entered promiscuous mode [ 53.847386][ T6091] hsr0: entered promiscuous mode [ 53.849977][ T6091] veth1_virt_wifi: entered promiscuous mode [ 53.851338][ T6091] veth0_virt_wifi: entered promiscuous mode [ 53.852440][ T6091] virt_wifi0: entered promiscuous mode [ 53.854947][ T6091] vlan0: entered promiscuous mode [ 53.856592][ T6091] vlan1: entered promiscuous mode [ 53.897582][ T6091] macvlan0: entered promiscuous mode [ 53.936728][ T6091] macvlan1: entered promiscuous mode [ 53.937720][ T6091] ipvlan0: entered promiscuous mode [ 53.937775][ T6091] ipvlan1: entered promiscuous mode [ 53.976753][ T6091] macvtap0: entered promiscuous mode [ 53.978033][ T6091] macsec0: entered promiscuous mode [ 53.979940][ T6091] geneve0: entered promiscuous mode [ 53.981100][ T6091] geneve1: entered promiscuous mode [ 53.982888][ T6091] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 53.984808][ T6091] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 53.986534][ T6091] netdevsim netdevsim5 netdevsim2: entered promiscuous mode [ 53.988824][ T6091] netdevsim netdevsim5 netdevsim3: entered promiscuous mode [ 54.017975][ T6091] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 54.047709][ T6091] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 54.056740][ T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.076829][ T4124] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.076884][ T4124] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.076937][ T4124] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.187572][ T4717] Bluetooth: hci5: command tx timeout [ 54.194057][ T6113] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 54.198653][ T30] audit: type=1326 audit(54.170:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6112 comm="syz.5.447" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffab7792a8 code=0x0 [ 54.838351][ T4717] Bluetooth: to_multiplier 17277 > 3200 [ 55.021742][ T6154] overlayfs: failed to clone upperpath [ 55.046399][ T6157] fuse: fd is not a fuse device [ 55.217748][ T6174] fuse: fd is not a fuse device [ 55.370905][ T6188] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input3 [ 55.401572][ T6190] netlink: 'syz.3.479': attribute type 11 has an invalid length. [ 55.537036][ T6210] batman_adv: batadv0: Adding interface: veth0 [ 55.538255][ T6210] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.543186][ T6210] batman_adv: batadv0: Interface activated: veth0 [ 55.548491][ T6210] batman_adv: batadv0: Interface deactivated: veth0 [ 55.549842][ T6210] batman_adv: batadv0: Removing interface: veth0 [ 55.781686][ T6230] loop5: detected capacity change from 0 to 512 [ 55.784541][ T6230] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 55.803056][ T6230] EXT4-fs (loop5): 1 truncate cleaned up [ 55.804650][ T6230] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.266834][ T4717] Bluetooth: hci5: command tx timeout [ 56.474511][ T6245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.497'. [ 56.476889][ T6245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.497'. [ 56.603207][ T6254] loop3: detected capacity change from 0 to 256 [ 56.629220][ T6254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.501'. [ 56.661551][ T5643] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.753326][ T6269] netlink: 'syz.2.508': attribute type 4 has an invalid length. [ 56.812017][ T6275] netlink: 'syz.4.510': attribute type 10 has an invalid length. [ 56.815366][ T6275] bridge0: port 1(syz_tun) entered disabled state [ 56.821884][ T6275] syz_tun: left allmulticast mode [ 56.821994][ T6275] bridge0: port 1(syz_tun) entered disabled state [ 56.871521][ T6282] loop0: detected capacity change from 0 to 2049 [ 56.890480][ T6282] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 56.892642][ T6282] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 56.894204][ T6282] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 56.895507][ T6282] loop0: [ 56.899252][ T4344] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 56.899284][ T4344] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 56.899293][ T4344] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 56.899318][ T4344] loop0: [ 56.907898][ T4717] Bluetooth: hci1: command tx timeout [ 56.907982][ T4717] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 56.908010][ T4717] Bluetooth: hci4: Injecting HCI hardware error event [ 56.908388][ T4717] Bluetooth: hci4: hardware error 0x00 [ 57.176553][ T6317] netlink: 20 bytes leftover after parsing attributes in process `syz.2.526'. [ 57.178971][ T6317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.526'. [ 57.203316][ T6322] loop2: detected capacity change from 0 to 512 [ 57.229882][ T6322] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.246088][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.418439][ T6340] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 57.418475][ T6340] overlayfs: failed to set xattr on upper [ 57.418776][ T6340] overlayfs: ...falling back to redirect_dir=nofollow. [ 57.418788][ T6340] overlayfs: ...falling back to uuid=null. [ 58.369965][ T6375] loop5: detected capacity change from 0 to 4096 [ 58.370465][ T6375] EXT4-fs: Ignoring removed nobh option [ 58.383940][ T6375] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.708001][ T6382] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 58.709137][ T6382] overlayfs: failed to set xattr on upper [ 58.709150][ T6382] overlayfs: ...falling back to redirect_dir=nofollow. [ 58.709155][ T6382] overlayfs: ...falling back to uuid=null. [ 58.768096][ T6388] bond1: entered allmulticast mode [ 58.771004][ T6388] dvmrp6: entered allmulticast mode [ 58.773178][ T6387] bond1: left allmulticast mode [ 58.791153][ T6390] binder: 6389:6390 tried to acquire reference to desc 0, got 1 instead [ 58.792985][ T6390] binder: 6389:6390 unknown command 0 [ 58.793008][ T6390] binder: 6389:6390 ioctl c0306201 20000880 returned -22 [ 58.894327][ T5643] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.007720][ T6412] overlayfs: failed to clone upperpath [ 59.024118][ T6414] fuse: fd is not a fuse device [ 59.146939][ T4717] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 59.162363][ T6435] sctp: [Deprecated]: syz.4.572 (pid 6435) Use of int in maxseg socket option. [ 59.162363][ T6435] Use struct sctp_assoc_value instead [ 59.370954][ T132] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.435755][ T132] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.503472][ T132] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.582429][ T132] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.687306][ T132] bridge_slave_1: left allmulticast mode [ 59.687339][ T132] bridge_slave_1: left promiscuous mode [ 59.688678][ T132] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.693647][ T132] bridge_slave_0: left allmulticast mode [ 59.693678][ T132] bridge_slave_0: left promiscuous mode [ 59.693743][ T132] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.802995][ T132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.819432][ T132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 59.830692][ T132] bond0 (unregistering): Released all slaves [ 59.943568][ T4400] 8021q: adding VLAN 0 to HW filter on device eth4 [ 60.056400][ T132] hsr_slave_0: left promiscuous mode [ 60.060585][ T132] hsr_slave_1: left promiscuous mode [ 60.060924][ T132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.060949][ T132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.061387][ T132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.061397][ T132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.071088][ T132] veth1_macvtap: left promiscuous mode [ 60.071135][ T132] veth0_macvtap: left promiscuous mode [ 60.071896][ T132] veth1_vlan: left promiscuous mode [ 60.071940][ T132] veth0_vlan: left promiscuous mode [ 60.159952][ T4713] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.170429][ T6481] loop3: detected capacity change from 0 to 512 [ 60.171714][ T4713] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.175028][ T6481] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 60.177141][ T4713] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.181825][ T4713] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.184300][ T4713] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.191947][ T6481] EXT4-fs (loop3): 1 truncate cleaned up [ 60.195985][ T6481] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.246231][ T6490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.577'. [ 60.291491][ T132] team0 (unregistering): Port device team_slave_1 removed [ 60.296534][ T132] team0 (unregistering): Port device team_slave_0 removed [ 60.340463][ T4400] 8021q: adding VLAN 0 to HW filter on device eth5 [ 60.356075][ T6490] bond2: entered promiscuous mode [ 60.356216][ T6490] 8021q: adding VLAN 0 to HW filter on device bond2 [ 60.412857][ T6490] 8021q: adding VLAN 0 to HW filter on device bond2 [ 60.418396][ T6490] bond2: (slave sit1): The slave device specified does not support setting the MAC address [ 60.420805][ T6490] bond2: (slave sit1): Error -95 calling set_mac_address [ 60.540622][ T6523] gadgetfs: bound to dummy_udc driver [ 60.603413][ T6475] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.606846][ T6475] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.606938][ T6475] bridge_slave_0: entered allmulticast mode [ 60.607397][ T6475] bridge_slave_0: entered promiscuous mode [ 60.608787][ T6475] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.608810][ T6475] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.608899][ T6475] bridge_slave_1: entered allmulticast mode [ 60.609911][ T6475] bridge_slave_1: entered promiscuous mode [ 60.620884][ T6475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.622067][ T6475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.632595][ T6475] team0: Port device team_slave_0 added [ 60.634248][ T6475] team0: Port device team_slave_1 added [ 60.643805][ T6475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.643834][ T6475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.648007][ T6475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.648778][ T6475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.648785][ T6475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.648797][ T6475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.685164][ T6475] hsr_slave_0: entered promiscuous mode [ 60.687823][ T6475] hsr_slave_1: entered promiscuous mode [ 60.688486][ T6475] debugfs: 'hsr0' already exists in 'hsr' [ 60.688502][ T6475] Cannot create hsr debugfs directory [ 60.796994][ T931] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 60.798116][ C0] gadgetfs: connected [ 60.801198][ T931] gadgetfs: disconnected [ 61.066115][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.148628][ T6565] warning: `syz.1.590' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 61.193008][ T6571] loop5: detected capacity change from 0 to 1024 [ 61.206993][ T6571] EXT4-fs: Ignoring removed oldalloc option [ 61.207026][ T6571] EXT4-fs: inline encryption not supported [ 61.207044][ T6571] EXT4-fs: Ignoring removed i_version option [ 61.208094][ T6571] EXT4-fs (loop5): stripe (59979) is not aligned with cluster size (16), stripe is disabled [ 61.231649][ T6571] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 61.351265][ T6475] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.370471][ T6591] Soft offlining pfn 0x15ea00 at process virtual address 0x20000000 [ 61.394736][ T6475] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 61.395088][ T6475] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.400512][ T6475] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 61.401024][ T6475] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.410211][ T6475] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 61.415418][ T6591] Soft offline: 0x15ea00: thp split failed [ 61.421142][ T6475] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.432308][ T6475] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 61.439822][ T5643] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 61.493487][ T6606] Unable to extract alua_access_type [ 61.536559][ T6475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.561591][ T6475] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.569435][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.569550][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.587959][ T132] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.588005][ T132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.795315][ T6635] tipc: Started in network mode [ 61.796486][ T6635] tipc: Node identity ac1414aa, cluster identity 4711 [ 61.800343][ T6635] tipc: New replicast peer: 172.20.20.187 [ 61.802839][ T6635] tipc: Enabled bearer , priority 10 [ 61.879543][ T6475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.884782][ T6645] fuse: fd is not a fuse device [ 61.921188][ T6475] veth0_vlan: entered promiscuous mode [ 61.937545][ T6475] veth1_vlan: entered promiscuous mode [ 61.974340][ T6475] veth0_macvtap: entered promiscuous mode [ 61.979558][ T6475] veth1_macvtap: entered promiscuous mode [ 61.993483][ T6475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.999643][ T6475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.032977][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.038337][ T39] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.038512][ T39] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.038535][ T39] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.062398][ T132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.062433][ T132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.090463][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.090493][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.267166][ T4713] Bluetooth: hci3: command tx timeout [ 62.331443][ T6679] bridge_slave_0: left allmulticast mode [ 62.333494][ T6679] bridge_slave_0: left promiscuous mode [ 62.334952][ T6679] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.338351][ T6679] bridge_slave_1: left allmulticast mode [ 62.338380][ T6679] bridge_slave_1: left promiscuous mode [ 62.338454][ T6679] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.359699][ T6679] bond0: (slave bond_slave_0): Releasing backup interface [ 62.390781][ T6679] bond0: (slave bond_slave_1): Releasing backup interface [ 62.422298][ T6679] team0: Port device team_slave_0 removed [ 62.424861][ T6679] team0: Port device team_slave_1 removed [ 62.425642][ T6679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.425656][ T6679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.427739][ T6679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.427749][ T6679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.429521][ T6679] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 62.451418][ T6685] team0: Mode changed to "loadbalance" [ 62.454007][ T6679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.611'. [ 62.454606][ T6679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.611'. [ 62.807646][ T931] tipc: Node number set to 2886997162 [ 62.940028][ T6764] netlink: 'syz.4.625': attribute type 2 has an invalid length. [ 62.941498][ T6764] netlink: 11575 bytes leftover after parsing attributes in process `syz.4.625'. [ 62.943697][ T6764] netlink: 12 bytes leftover after parsing attributes in process `syz.4.625'. [ 62.990330][ T6771] binder: 6769:6771 ioctl c0306201 20000080 returned -14 [ 62.993710][ T6771] binder: 6769:6771 tried to acquire reference to desc 0, got 1 instead [ 62.995730][ T6771] binder: 6769:6771 ioctl c0306201 200003c0 returned -14 [ 62.997895][ T6771] binder: 6769:6771 got transaction with invalid parent offset or type [ 62.999835][ T6771] binder: 6769:6771 transaction call to 6769:0 failed 18/29201/-22, code 0 size 96-24 line 3617 [ 63.002536][ T931] binder: undelivered TRANSACTION_ERROR: 29201 [ 63.039753][ T6775] fuse: fd is not a fuse device [ 63.228542][ T6802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.231887][ T6802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.280674][ T4803] IPVS: starting estimator thread 0... [ 63.339003][ T6816] syzkaller0: entered promiscuous mode [ 63.339038][ T6816] syzkaller0: entered allmulticast mode [ 63.365249][ T6820] overlayfs: failed to clone upperpath [ 63.366988][ T6809] IPVS: using max 60 ests per chain, 144000 per kthread [ 63.397316][ T6823] binder: 6822:6823 ioctl c0306201 20000080 returned -14 [ 63.399865][ T6823] binder: 6822:6823 tried to acquire reference to desc 0, got 1 instead [ 63.400053][ T6823] binder: 6822:6823 ioctl c0306201 200003c0 returned -14 [ 63.400678][ T6823] binder: 6822:6823 got transaction with invalid parent offset or type [ 63.400716][ T6823] binder: 6822:6823 transaction call to 6822:0 failed 23/29201/-22, code 0 size 112-24 line 3617 [ 63.401191][ T4721] binder: undelivered TRANSACTION_ERROR: 29201 [ 63.439579][ T6827] fuse: fd is not a fuse device [ 63.459943][ T6830] fuse: fd is not a fuse device [ 63.571404][ T6848] netlink: 'syz.2.657': attribute type 4 has an invalid length. [ 63.597294][ T6850] binder: 6849:6850 tried to acquire reference to desc 0, got 1 instead [ 63.597466][ T6850] binder: 6849:6850 got transaction with invalid offsets ptr [ 63.597493][ T6850] binder: 6849:6850 transaction async to 6849:0 failed 29/29201/-14, code 0 size 33-86 line 3447 [ 63.597695][ T4721] binder: undelivered TRANSACTION_ERROR: 29201 [ 63.851961][ T6872] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 63.959506][ T6888] TC_ACT_REPEAT abuse ? [ 64.110767][ T40] syzkaller0: tun_net_xmit 76 [ 64.111944][ T40] syzkaller0: tun_net_xmit 48 [ 64.123568][ T6903] syzkaller0: tun_net_xmit 28 [ 64.346884][ T4713] Bluetooth: hci3: command tx timeout [ 64.507861][ T1594] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.509348][ T26] cfg80211: failed to load regulatory.db [ 64.511062][ T1594] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.690197][ T6931] netlink: 100 bytes leftover after parsing attributes in process `syz.3.687'. [ 64.703414][ T6935] fuse: fd is not a fuse device [ 64.871823][ T6959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.698'. [ 64.890503][ T6959] veth2: entered allmulticast mode [ 64.895545][ T6959] bond3: (slave veth3): Enslaving as an active interface with an up link [ 64.910355][ T6959] bond3: entered promiscuous mode [ 64.910387][ T6959] veth3: entered promiscuous mode [ 64.910492][ T6959] bond3: entered allmulticast mode [ 64.910507][ T6959] veth3: entered allmulticast mode [ 64.911021][ T6959] 8021q: adding VLAN 0 to HW filter on device bond3 [ 64.955128][ T6966] bridge_slave_0: left allmulticast mode [ 64.956282][ T6966] bridge_slave_0: left promiscuous mode [ 64.958293][ T6966] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.301652][ T7011] netlink: 76 bytes leftover after parsing attributes in process `syz.1.720'. [ 65.366640][ T7015] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 65.454436][ T7023] TC_ACT_REPEAT abuse ? [ 65.469519][ T7026] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 65.502843][ T7028] 0: reclassify loop, rule prio 0, protocol 03 [ 65.785789][ T7052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.737'. [ 66.290066][ T7074] netlink: 'syz.2.746': attribute type 1 has an invalid length. [ 66.430093][ T4713] Bluetooth: hci3: command tx timeout [ 66.539902][ T7084] 9pnet_fd: p9_fd_create_tcp (7084): problem connecting socket to 127.0.0.1 [ 66.772362][ T7105] netlink: 24 bytes leftover after parsing attributes in process `syz.3.759'. [ 66.825287][ T7109] netlink: 'syz.3.762': attribute type 3 has an invalid length. [ 66.827786][ T7109] netlink: 'syz.3.762': attribute type 3 has an invalid length. [ 66.859448][ T7098] geneve2: entered promiscuous mode [ 66.860662][ T5012] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 35793 - 0 [ 66.860722][ T5012] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 35793 - 0 [ 66.860749][ T5012] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 35793 - 0 [ 66.860763][ T5012] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 35793 - 0 [ 66.999394][ T7126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.769'. [ 67.007351][ T7126] 8021q: adding VLAN 0 to HW filter on device bond4 [ 67.019688][ T7126] 8021q: adding VLAN 0 to HW filter on device bond4 [ 67.027834][ T7126] bond4: (slave gre1): The slave device specified does not support setting the MAC address [ 67.028304][ T7126] bond4: (slave gre1): Error -95 calling set_mac_address [ 67.414741][ T7132] macvlan2: entered promiscuous mode [ 67.415434][ T7132] macvlan2: entered allmulticast mode [ 67.415659][ T7132] bond4: (slave macvlan2): Error -98 calling set_mac_address [ 67.550117][ T7153] binder: 7152:7153 tried to acquire reference to desc 0, got 1 instead [ 67.552164][ T7153] binder: 7152:7153 ioctl c0306201 200006c0 returned -14 [ 67.558740][ T4803] binder: undelivered transaction 34, process died. [ 67.619120][ T7160] binder: 7159:7160 tried to acquire reference to desc 0, got 1 instead [ 67.621668][ T26] binder: release 7159:7160 transaction 39 out, still active [ 67.621704][ T26] binder: undelivered TRANSACTION_COMPLETE [ 67.631935][ T26] binder: send failed reply for transaction 39, target dead [ 68.092274][ T7216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.092471][ T7216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.473781][ T7232] netlink: 'syz.1.806': attribute type 1 has an invalid length. [ 68.486048][ T7232] 8021q: adding VLAN 0 to HW filter on device bond5 [ 68.493353][ T7232] vlan3: entered allmulticast mode [ 68.494533][ T7232] bond5: entered allmulticast mode [ 68.499942][ T7232] bond5: (slave geneve2): making interface the new active one [ 68.501423][ T7232] geneve2: entered allmulticast mode [ 68.503100][ T7232] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 68.506867][ T4713] Bluetooth: hci3: command tx timeout [ 68.906498][ T7256] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 69.101993][ T7271] file system registered [ 69.139506][ T4709] ffs_data_put(): freeing [ 69.546841][ T4713] Bluetooth: hci1: command tx timeout [ 69.682064][ T7304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.682284][ T7304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.450144][ T7303] Set syz1 is full, maxelem 65536 reached [ 70.599107][ T30] audit: type=1326 audit(70.570:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7325 comm="syz.1.841" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf5792a8 code=0x7fc00000 [ 70.606984][ T30] audit: type=1326 audit(70.570:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7325 comm="syz.1.841" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffaf5792a8 code=0x7fc00000 [ 70.818219][ T7329] netlink: 12 bytes leftover after parsing attributes in process `syz.5.842'. [ 71.076973][ T7329] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.338125][ T7352] loop3: detected capacity change from 0 to 512 [ 71.345152][ T7352] EXT4-fs: Ignoring removed oldalloc option [ 71.352860][ T7352] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 71.360664][ T7352] EXT4-fs (loop3): 1 truncate cleaned up [ 71.362305][ T7352] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.387612][ T4713] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 71.402420][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.499916][ T7360] loop3: detected capacity change from 0 to 8192 [ 71.503843][ T7360] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 71.652163][ T7363] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 71.654398][ T7363] overlayfs: failed to set xattr on upper [ 71.655905][ T7363] overlayfs: ...falling back to redirect_dir=nofollow. [ 71.657575][ T7363] overlayfs: ...falling back to uuid=null. [ 72.020116][ T7347] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 72.020196][ T7347] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 72.034870][ T7347] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 72.039002][ T7347] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 72.039038][ T7347] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 72.041765][ T7347] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 72.043428][ T7347] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 72.043482][ T7347] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 72.047502][ T7347] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 72.060067][ T7347] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 72.060103][ T7347] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 72.063499][ T7347] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 72.065183][ T7347] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 72.065420][ T7347] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 72.068448][ T7382] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 72.069260][ T7347] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 72.113119][ T7385] binder: 7384:7385 tried to acquire reference to desc 0, got 1 instead [ 72.113285][ T7385] binder: tried to use weak ref as strong ref [ 72.113305][ T7385] binder: 7384:7385 got transaction with invalid handle, 0 [ 72.113321][ T7385] binder: 7385:7384 translate handle failed [ 72.113361][ T7385] binder: 7384:7385 transaction call to 7384:0 failed 48/29201/-22, code 0 size 72-24 line 3571 [ 72.113846][ T26] binder: undelivered TRANSACTION_ERROR: 29201 [ 72.133959][ T7387] capability: warning: `syz.2.862' uses deprecated v2 capabilities in a way that may be insecure [ 72.208687][ T7394] loop5: detected capacity change from 0 to 512 [ 72.212204][ T7394] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 72.225516][ T7394] EXT4-fs (loop5): 1 truncate cleaned up [ 72.227850][ T7394] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.329083][ T7398] syzkaller0: entered promiscuous mode [ 72.334262][ T7398] syzkaller0: entered allmulticast mode [ 72.361256][ T5643] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.541517][ T7414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.874'. [ 72.755558][ T7423] binder: 7422:7423 tried to acquire reference to desc 0, got 1 instead [ 72.758134][ T7423] binder: 7422:7423 got transaction with out-of-order buffer fixup [ 72.760916][ T7423] binder: 7423:7422 failed to fixup parent [ 72.762499][ T7423] binder: 7422:7423 transaction call to 7422:0 failed 55/29201/-22, code 0 size 120-24 line 3717 [ 72.765497][ T10] binder: undelivered TRANSACTION_ERROR: 29201 [ 72.868342][ T7427] netlink: 12 bytes leftover after parsing attributes in process `syz.5.880'. [ 72.873861][ T7427] netlink: 12 bytes leftover after parsing attributes in process `syz.5.880'. [ 72.886843][ T12] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.886882][ T12] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.886903][ T12] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.886918][ T12] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.913416][ T7378] Set syz1 is full, maxelem 65536 reached [ 73.155944][ T7437] Injecting memory failure for pfn 0x12129f at process virtual address 0x20000000 [ 73.169989][ T7437] Memory failure: 0x12129f: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.170063][ T7437] Memory failure: 0x12129f: recovery action for dirty LRU page: Recovered [ 73.170080][ T7437] Injecting memory failure for pfn 0x16ff04 at process virtual address 0x20001000 [ 73.170153][ T7437] Memory failure: 0x16ff04: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.170173][ T7437] Memory failure: 0x16ff04: recovery action for dirty LRU page: Recovered [ 73.170181][ T7437] Injecting memory failure for pfn 0x15599b at process virtual address 0x20002000 [ 73.170218][ T7437] Memory failure: 0x15599b: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.170235][ T7437] Memory failure: 0x15599b: recovery action for dirty LRU page: Recovered [ 73.170244][ T7437] Injecting memory failure for pfn 0x1664e6 at process virtual address 0x20003000 [ 73.170275][ T7437] Memory failure: 0x1664e6: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.170292][ T7437] Memory failure: 0x1664e6: recovery action for dirty LRU page: Recovered [ 73.170300][ T7437] Injecting memory failure for pfn 0x16f148 at process virtual address 0x20004000 [ 73.170329][ T7437] Memory failure: 0x16f148: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.170345][ T7437] Memory failure: 0x16f148: recovery action for dirty LRU page: Recovered [ 73.170353][ T7437] Injecting memory failure for pfn 0x16ebd7 at process virtual address 0x20005000 [ 73.170381][ T7437] Memory failure: 0x16ebd7: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.170397][ T7437] Memory failure: 0x16ebd7: recovery action for dirty LRU page: Recovered [ 73.170405][ T7437] Injecting memory failure for pfn 0x1664ec at process virtual address 0x20006000 [ 73.170433][ T7437] Memory failure: 0x1664ec: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.170449][ T7437] Memory failure: 0x1664ec: recovery action for dirty LRU page: Recovered [ 73.170457][ T7437] Injecting memory failure for pfn 0x166e8e at process virtual address 0x20007000 [ 73.170483][ T7437] Memory failure: 0x166e8e: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.170499][ T7437] Memory failure: 0x166e8e: recovery action for dirty LRU page: Recovered [ 73.170506][ T7437] Injecting memory failure for pfn 0x13f54d at process virtual address 0x20008000 [ 73.170532][ T7437] Memory failure: 0x13f54d: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.170548][ T7437] Memory failure: 0x13f54d: recovery action for dirty LRU page: Recovered [ 73.171671][ T7437] Injecting memory failure for pfn 0x15bc2a at process virtual address 0x20009000 [ 73.171777][ T7437] Memory failure: 0x15bc2a: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.171802][ T7437] Memory failure: 0x15bc2a: recovery action for dirty LRU page: Recovered [ 73.171815][ T7437] Injecting memory failure for pfn 0x15bc0f at process virtual address 0x2000a000 [ 73.171974][ T7437] Memory failure: 0x15bc0f: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.171994][ T7437] Memory failure: 0x15bc0f: recovery action for dirty LRU page: Recovered [ 73.172003][ T7437] Injecting memory failure for pfn 0x16ff2f at process virtual address 0x2000b000 [ 73.172035][ T7437] Memory failure: 0x16ff2f: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.172052][ T7437] Memory failure: 0x16ff2f: recovery action for dirty LRU page: Recovered [ 73.172060][ T7437] Injecting memory failure for pfn 0x11fe7c at process virtual address 0x2000c000 [ 73.172090][ T7437] Memory failure: 0x11fe7c: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.172107][ T7437] Memory failure: 0x11fe7c: recovery action for dirty LRU page: Recovered [ 73.172115][ T7437] Injecting memory failure for pfn 0x15f250 at process virtual address 0x2000d000 [ 73.172142][ T7437] Memory failure: 0x15f250: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.172158][ T7437] Memory failure: 0x15f250: recovery action for dirty LRU page: Recovered [ 73.172165][ T7437] Injecting memory failure for pfn 0x162df2 at process virtual address 0x2000e000 [ 73.172191][ T7437] Memory failure: 0x162df2: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.172207][ T7437] Memory failure: 0x162df2: recovery action for dirty LRU page: Recovered [ 73.172215][ T7437] Injecting memory failure for pfn 0x15bc2c at process virtual address 0x2000f000 [ 73.172241][ T7437] Memory failure: 0x15bc2c: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.172257][ T7437] Memory failure: 0x15bc2c: recovery action for dirty LRU page: Recovered [ 73.172264][ T7437] Injecting memory failure for pfn 0x16ebd4 at process virtual address 0x20010000 [ 73.172290][ T7437] Memory failure: 0x16ebd4: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.172305][ T7437] Memory failure: 0x16ebd4: recovery action for dirty LRU page: Recovered [ 73.172313][ T7437] Injecting memory failure for pfn 0x164a39 at process virtual address 0x20011000 [ 73.172338][ T7437] Memory failure: 0x164a39: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.172353][ T7437] Memory failure: 0x164a39: recovery action for dirty LRU page: Recovered [ 73.172361][ T7437] Injecting memory failure for pfn 0x1216a0 at process virtual address 0x20012000 [ 73.172387][ T7437] Memory failure: 0x1216a0: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.172402][ T7437] Memory failure: 0x1216a0: recovery action for dirty LRU page: Recovered [ 73.172410][ T7437] Injecting memory failure for pfn 0x1427c5 at process virtual address 0x20013000 [ 73.172437][ T7437] Memory failure: 0x1427c5: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.172460][ T7437] Memory failure: 0x1427c5: recovery action for dirty LRU page: Recovered [ 73.172467][ T7437] Injecting memory failure for pfn 0x16fffb at process virtual address 0x20014000 [ 73.172493][ T7437] Memory failure: 0x16fffb: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.172508][ T7437] Memory failure: 0x16fffb: recovery action for dirty LRU page: Recovered [ 73.172515][ T7437] Injecting memory failure for pfn 0x1634fb at process virtual address 0x20015000 [ 73.172541][ T7437] Memory failure: 0x1634fb: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.172557][ T7437] Memory failure: 0x1634fb: recovery action for dirty LRU page: Recovered [ 73.172565][ T7437] Injecting memory failure for pfn 0x1639fb at process virtual address 0x20016000 [ 73.172592][ T7437] Memory failure: 0x1639fb: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.172609][ T7437] Memory failure: 0x1639fb: recovery action for dirty LRU page: Recovered [ 73.172616][ T7437] Injecting memory failure for pfn 0x11ff70 at process virtual address 0x20017000 [ 73.172641][ T7437] Memory failure: 0x11ff70: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.172656][ T7437] Memory failure: 0x11ff70: recovery action for dirty LRU page: Recovered [ 73.172663][ T7437] Injecting memory failure for pfn 0x1216a1 at process virtual address 0x20018000 [ 73.172689][ T7437] Memory failure: 0x1216a1: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.173857][ T7437] Memory failure: 0x1216a1: recovery action for dirty LRU page: Recovered [ 73.173869][ T7437] Injecting memory failure for pfn 0x1634fa at process virtual address 0x20019000 [ 73.174364][ T7437] Memory failure: 0x1634fa: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.174389][ T7437] Memory failure: 0x1634fa: recovery action for dirty LRU page: Recovered [ 73.174399][ T7437] Injecting memory failure for pfn 0x1703a6 at process virtual address 0x2001a000 [ 73.174442][ T7437] Memory failure: 0x1703a6: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.174459][ T7437] Memory failure: 0x1703a6: recovery action for dirty LRU page: Recovered [ 73.174468][ T7437] Injecting memory failure for pfn 0x168c2b at process virtual address 0x2001b000 [ 73.174499][ T7437] Memory failure: 0x168c2b: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.174515][ T7437] Memory failure: 0x168c2b: recovery action for dirty LRU page: Recovered [ 73.174523][ T7437] Injecting memory failure for pfn 0x15c28e at process virtual address 0x2001c000 [ 73.174551][ T7437] Memory failure: 0x15c28e: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.174566][ T7437] Memory failure: 0x15c28e: recovery action for dirty LRU page: Recovered [ 73.174574][ T7437] Injecting memory failure for pfn 0x16fff8 at process virtual address 0x2001d000 [ 73.174601][ T7437] Memory failure: 0x16fff8: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.174616][ T7437] Memory failure: 0x16fff8: recovery action for dirty LRU page: Recovered [ 73.174624][ T7437] Injecting memory failure for pfn 0x1649b6 at process virtual address 0x2001e000 [ 73.174650][ T7437] Memory failure: 0x1649b6: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.174665][ T7437] Memory failure: 0x1649b6: recovery action for dirty LRU page: Recovered [ 73.174672][ T7437] Injecting memory failure for pfn 0x1664e1 at process virtual address 0x2001f000 [ 73.174698][ T7437] Memory failure: 0x1664e1: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.174713][ T7437] Memory failure: 0x1664e1: recovery action for dirty LRU page: Recovered [ 73.174721][ T7437] Injecting memory failure for pfn 0x13d0f5 at process virtual address 0x20020000 [ 73.174746][ T7437] Memory failure: 0x13d0f5: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.174761][ T7437] Memory failure: 0x13d0f5: recovery action for dirty LRU page: Recovered [ 73.174769][ T7437] Injecting memory failure for pfn 0x164a37 at process virtual address 0x20021000 [ 73.174794][ T7437] Memory failure: 0x164a37: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.174809][ T7437] Memory failure: 0x164a37: recovery action for dirty LRU page: Recovered [ 73.174816][ T7437] Injecting memory failure for pfn 0x11f941 at process virtual address 0x20022000 [ 73.174854][ T7437] Memory failure: 0x11f941: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.174870][ T7437] Memory failure: 0x11f941: recovery action for dirty LRU page: Recovered [ 73.176033][ T7437] Injecting memory failure for pfn 0x1427c9 at process virtual address 0x20023000 [ 73.176072][ T7437] Memory failure: 0x1427c9: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.176090][ T7437] Memory failure: 0x1427c9: recovery action for dirty LRU page: Recovered [ 73.176099][ T7437] Injecting memory failure for pfn 0x13d0ed at process virtual address 0x20024000 [ 73.176130][ T7437] Memory failure: 0x13d0ed: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.176147][ T7437] Memory failure: 0x13d0ed: recovery action for dirty LRU page: Recovered [ 73.176155][ T7437] Injecting memory failure for pfn 0x15bc29 at process virtual address 0x20025000 [ 73.176185][ T7437] Memory failure: 0x15bc29: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.176201][ T7437] Memory failure: 0x15bc29: recovery action for dirty LRU page: Recovered [ 73.176209][ T7437] Injecting memory failure for pfn 0x16dec7 at process virtual address 0x20026000 [ 73.176237][ T7437] Memory failure: 0x16dec7: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.176253][ T7437] Memory failure: 0x16dec7: recovery action for dirty LRU page: Recovered [ 73.176260][ T7437] Injecting memory failure for pfn 0x15bcd2 at process virtual address 0x20027000 [ 73.176288][ T7437] Memory failure: 0x15bcd2: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.176303][ T7437] Memory failure: 0x15bcd2: recovery action for dirty LRU page: Recovered [ 73.176310][ T7437] Injecting memory failure for pfn 0x1664e4 at process virtual address 0x20028000 [ 73.176337][ T7437] Memory failure: 0x1664e4: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.176353][ T7437] Memory failure: 0x1664e4: recovery action for dirty LRU page: Recovered [ 73.176360][ T7437] Injecting memory failure for pfn 0x13d0e3 at process virtual address 0x20029000 [ 73.176386][ T7437] Memory failure: 0x13d0e3: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.176401][ T7437] Memory failure: 0x13d0e3: recovery action for dirty LRU page: Recovered [ 73.176409][ T7437] Injecting memory failure for pfn 0x1425d9 at process virtual address 0x2002a000 [ 73.179406][ T7437] Memory failure: 0x1425d9: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.179432][ T7437] Memory failure: 0x1425d9: recovery action for dirty LRU page: Recovered [ 73.179445][ T7437] Injecting memory failure for pfn 0x166ed1 at process virtual address 0x2002b000 [ 73.179479][ T7437] Memory failure: 0x166ed1: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.179497][ T7437] Memory failure: 0x166ed1: recovery action for dirty LRU page: Recovered [ 73.179506][ T7437] Injecting memory failure for pfn 0x16fffe at process virtual address 0x2002c000 [ 73.179537][ T7437] Memory failure: 0x16fffe: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.179555][ T7437] Memory failure: 0x16fffe: recovery action for dirty LRU page: Recovered [ 73.179563][ T7437] Injecting memory failure for pfn 0x16f14b at process virtual address 0x2002d000 [ 73.179590][ T7437] Memory failure: 0x16f14b: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.179606][ T7437] Memory failure: 0x16f14b: recovery action for dirty LRU page: Recovered [ 73.179613][ T7437] Injecting memory failure for pfn 0x16f153 at process virtual address 0x2002e000 [ 73.179638][ T7437] Memory failure: 0x16f153: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.179657][ T7437] Memory failure: 0x16f153: recovery action for dirty LRU page: Recovered [ 73.179665][ T7437] Injecting memory failure for pfn 0x13f40c at process virtual address 0x2002f000 [ 73.179839][ T7437] Memory failure: 0x13f40c: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.179857][ T7437] Memory failure: 0x13f40c: recovery action for dirty LRU page: Recovered [ 73.179865][ T7437] Injecting memory failure for pfn 0x16f14e at process virtual address 0x20030000 [ 73.179891][ T7437] Memory failure: 0x16f14e: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.179906][ T7437] Memory failure: 0x16f14e: recovery action for dirty LRU page: Recovered [ 73.179913][ T7437] Injecting memory failure for pfn 0x1633ef at process virtual address 0x20031000 [ 73.179936][ T7437] Memory failure: 0x1633ef: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.179951][ T7437] Memory failure: 0x1633ef: recovery action for dirty LRU page: Recovered [ 73.179958][ T7437] Injecting memory failure for pfn 0x16f149 at process virtual address 0x20032000 [ 73.179980][ T7437] Memory failure: 0x16f149: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.179994][ T7437] Memory failure: 0x16f149: recovery action for dirty LRU page: Recovered [ 73.180001][ T7437] Injecting memory failure for pfn 0x16ff0b at process virtual address 0x20033000 [ 73.180023][ T7437] Memory failure: 0x16ff0b: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.180037][ T7437] Memory failure: 0x16ff0b: recovery action for dirty LRU page: Recovered [ 73.180044][ T7437] Injecting memory failure for pfn 0x16fd1a at process virtual address 0x20034000 [ 73.180065][ T7437] Memory failure: 0x16fd1a: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.180079][ T7437] Memory failure: 0x16fd1a: recovery action for dirty LRU page: Recovered [ 73.180086][ T7437] Injecting memory failure for pfn 0x16fd19 at process virtual address 0x20035000 [ 73.180107][ T7437] Memory failure: 0x16fd19: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.180121][ T7437] Memory failure: 0x16fd19: recovery action for dirty LRU page: Recovered [ 73.180128][ T7437] Injecting memory failure for pfn 0x16fd18 at process virtual address 0x20036000 [ 73.180150][ T7437] Memory failure: 0x16fd18: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.180164][ T7437] Memory failure: 0x16fd18: recovery action for dirty LRU page: Recovered [ 73.180170][ T7437] Injecting memory failure for pfn 0x16fd17 at process virtual address 0x20037000 [ 73.180191][ T7437] Memory failure: 0x16fd17: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.180205][ T7437] Memory failure: 0x16fd17: recovery action for dirty LRU page: Recovered [ 73.180212][ T7437] Injecting memory failure for pfn 0x16fd16 at process virtual address 0x20038000 [ 73.180233][ T7437] Memory failure: 0x16fd16: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.180247][ T7437] Memory failure: 0x16fd16: recovery action for dirty LRU page: Recovered [ 73.180253][ T7437] Injecting memory failure for pfn 0x16fd15 at process virtual address 0x20039000 [ 73.180274][ T7437] Memory failure: 0x16fd15: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.180288][ T7437] Memory failure: 0x16fd15: recovery action for dirty LRU page: Recovered [ 73.180295][ T7437] Injecting memory failure for pfn 0x16fd14 at process virtual address 0x2003a000 [ 73.180316][ T7437] Memory failure: 0x16fd14: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.180330][ T7437] Memory failure: 0x16fd14: recovery action for dirty LRU page: Recovered [ 73.180337][ T7437] Injecting memory failure for pfn 0x16fd13 at process virtual address 0x2003b000 [ 73.180358][ T7437] Memory failure: 0x16fd13: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.187380][ T7437] Memory failure: 0x16fd13: recovery action for dirty LRU page: Recovered [ 73.187405][ T7437] Injecting memory failure for pfn 0x16fd12 at process virtual address 0x2003c000 [ 73.187486][ T7437] Memory failure: 0x16fd12: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.187508][ T7437] Memory failure: 0x16fd12: recovery action for dirty LRU page: Recovered [ 73.187516][ T7437] Injecting memory failure for pfn 0x16fd11 at process virtual address 0x2003d000 [ 73.187549][ T7437] Memory failure: 0x16fd11: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.187567][ T7437] Memory failure: 0x16fd11: recovery action for dirty LRU page: Recovered [ 73.187576][ T7437] Injecting memory failure for pfn 0x16fd10 at process virtual address 0x2003e000 [ 73.187605][ T7437] Memory failure: 0x16fd10: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.187621][ T7437] Memory failure: 0x16fd10: recovery action for dirty LRU page: Recovered [ 73.187629][ T7437] Injecting memory failure for pfn 0x16fd0f at process virtual address 0x2003f000 [ 73.187653][ T7437] Memory failure: 0x16fd0f: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.187668][ T7437] Memory failure: 0x16fd0f: recovery action for dirty LRU page: Recovered [ 73.187675][ T7437] Injecting memory failure for pfn 0x16fd0e at process virtual address 0x20040000 [ 73.187698][ T7437] Memory failure: 0x16fd0e: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.187713][ T7437] Memory failure: 0x16fd0e: recovery action for dirty LRU page: Recovered [ 73.187720][ T7437] Injecting memory failure for pfn 0x16fd0d at process virtual address 0x20041000 [ 73.187742][ T7437] Memory failure: 0x16fd0d: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.187757][ T7437] Memory failure: 0x16fd0d: recovery action for dirty LRU page: Recovered [ 73.187764][ T7437] Injecting memory failure for pfn 0x16fd0c at process virtual address 0x20042000 [ 73.187792][ T7437] Memory failure: 0x16fd0c: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.187807][ T7437] Memory failure: 0x16fd0c: recovery action for dirty LRU page: Recovered [ 73.187814][ T7437] Injecting memory failure for pfn 0x16fd0b at process virtual address 0x20043000 [ 73.187842][ T7437] Memory failure: 0x16fd0b: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.187859][ T7437] Memory failure: 0x16fd0b: recovery action for dirty LRU page: Recovered [ 73.187867][ T7437] Injecting memory failure for pfn 0x16fd0a at process virtual address 0x20044000 [ 73.193296][ T7437] Memory failure: 0x16fd0a: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.193326][ T7437] Memory failure: 0x16fd0a: recovery action for dirty LRU page: Recovered [ 73.193338][ T7437] Injecting memory failure for pfn 0x16fd09 at process virtual address 0x20045000 [ 73.193575][ T7437] Memory failure: 0x16fd09: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.193593][ T7437] Memory failure: 0x16fd09: recovery action for dirty LRU page: Recovered [ 73.193601][ T7437] Injecting memory failure for pfn 0x16fd08 at process virtual address 0x20046000 [ 73.193640][ T7437] Memory failure: 0x16fd08: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.193655][ T7437] Memory failure: 0x16fd08: recovery action for dirty LRU page: Recovered [ 73.193663][ T7437] Injecting memory failure for pfn 0x16fd07 at process virtual address 0x20047000 [ 73.193689][ T7437] Memory failure: 0x16fd07: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.193704][ T7437] Memory failure: 0x16fd07: recovery action for dirty LRU page: Recovered [ 73.193711][ T7437] Injecting memory failure for pfn 0x16fd06 at process virtual address 0x20048000 [ 73.193734][ T7437] Memory failure: 0x16fd06: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.193749][ T7437] Memory failure: 0x16fd06: recovery action for dirty LRU page: Recovered [ 73.193756][ T7437] Injecting memory failure for pfn 0x16fd05 at process virtual address 0x20049000 [ 73.193778][ T7437] Memory failure: 0x16fd05: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.193793][ T7437] Memory failure: 0x16fd05: recovery action for dirty LRU page: Recovered [ 73.193800][ T7437] Injecting memory failure for pfn 0x16fd04 at process virtual address 0x2004a000 [ 73.193824][ T7437] Memory failure: 0x16fd04: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.193846][ T7437] Memory failure: 0x16fd04: recovery action for dirty LRU page: Recovered [ 73.193855][ T7437] Injecting memory failure for pfn 0x16fd03 at process virtual address 0x2004b000 [ 73.193883][ T7437] Memory failure: 0x16fd03: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.193897][ T7437] Memory failure: 0x16fd03: recovery action for dirty LRU page: Recovered [ 73.193904][ T7437] Injecting memory failure for pfn 0x16fd02 at process virtual address 0x2004c000 [ 73.193926][ T7437] Memory failure: 0x16fd02: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.193940][ T7437] Memory failure: 0x16fd02: recovery action for dirty LRU page: Recovered [ 73.193947][ T7437] Injecting memory failure for pfn 0x16fd01 at process virtual address 0x2004d000 [ 73.193968][ T7437] Memory failure: 0x16fd01: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.193982][ T7437] Memory failure: 0x16fd01: recovery action for dirty LRU page: Recovered [ 73.193989][ T7437] Injecting memory failure for pfn 0x16fd00 at process virtual address 0x2004e000 [ 73.194010][ T7437] Memory failure: 0x16fd00: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.194025][ T7437] Memory failure: 0x16fd00: recovery action for dirty LRU page: Recovered [ 73.194032][ T7437] Injecting memory failure for pfn 0x16ff3f at process virtual address 0x2004f000 [ 73.194054][ T7437] Memory failure: 0x16ff3f: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.194068][ T7437] Memory failure: 0x16ff3f: recovery action for dirty LRU page: Recovered [ 73.194075][ T7437] Injecting memory failure for pfn 0x16ff3e at process virtual address 0x20050000 [ 73.194096][ T7437] Memory failure: 0x16ff3e: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.194110][ T7437] Memory failure: 0x16ff3e: recovery action for dirty LRU page: Recovered [ 73.194117][ T7437] Injecting memory failure for pfn 0x16ff3d at process virtual address 0x20051000 [ 73.194138][ T7437] Memory failure: 0x16ff3d: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.194152][ T7437] Memory failure: 0x16ff3d: recovery action for dirty LRU page: Recovered [ 73.194159][ T7437] Injecting memory failure for pfn 0x16ff3c at process virtual address 0x20052000 [ 73.194181][ T7437] Memory failure: 0x16ff3c: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.194194][ T7437] Memory failure: 0x16ff3c: recovery action for dirty LRU page: Recovered [ 73.194201][ T7437] Injecting memory failure for pfn 0x16ff3b at process virtual address 0x20053000 [ 73.194223][ T7437] Memory failure: 0x16ff3b: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.194236][ T7437] Memory failure: 0x16ff3b: recovery action for dirty LRU page: Recovered [ 73.194243][ T7437] Injecting memory failure for pfn 0x16ff3a at process virtual address 0x20054000 [ 73.194264][ T7437] Memory failure: 0x16ff3a: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.194278][ T7437] Memory failure: 0x16ff3a: recovery action for dirty LRU page: Recovered [ 73.194285][ T7437] Injecting memory failure for pfn 0x16ff36 at process virtual address 0x20055000 [ 73.199851][ T7437] Memory failure: 0x16ff36: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.199875][ T7437] Memory failure: 0x16ff36: recovery action for dirty LRU page: Recovered [ 73.199884][ T7437] Injecting memory failure for pfn 0x166ed9 at process virtual address 0x20056000 [ 73.200180][ T7437] Memory failure: 0x166ed9: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.200196][ T7437] Memory failure: 0x166ed9: recovery action for dirty LRU page: Recovered [ 73.200203][ T7437] Injecting memory failure for pfn 0x16fffd at process virtual address 0x20057000 [ 73.200231][ T7437] Memory failure: 0x16fffd: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.200245][ T7437] Memory failure: 0x16fffd: recovery action for dirty LRU page: Recovered [ 73.200252][ T7437] Injecting memory failure for pfn 0x16ff37 at process virtual address 0x20058000 [ 73.200277][ T7437] Memory failure: 0x16ff37: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.200292][ T7437] Memory failure: 0x16ff37: recovery action for dirty LRU page: Recovered [ 73.200299][ T7437] Injecting memory failure for pfn 0x16ff38 at process virtual address 0x20059000 [ 73.200322][ T7437] Memory failure: 0x16ff38: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.200336][ T7437] Memory failure: 0x16ff38: recovery action for dirty LRU page: Recovered [ 73.200343][ T7437] Injecting memory failure for pfn 0x16ff39 at process virtual address 0x2005a000 [ 73.200365][ T7437] Memory failure: 0x16ff39: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.200379][ T7437] Memory failure: 0x16ff39: recovery action for dirty LRU page: Recovered [ 73.200386][ T7437] Injecting memory failure for pfn 0x16ff09 at process virtual address 0x2005b000 [ 73.200408][ T7437] Memory failure: 0x16ff09: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.200422][ T7437] Memory failure: 0x16ff09: recovery action for dirty LRU page: Recovered [ 73.200429][ T7437] Injecting memory failure for pfn 0x16ff27 at process virtual address 0x2005c000 [ 73.200450][ T7437] Memory failure: 0x16ff27: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.200464][ T7437] Memory failure: 0x16ff27: recovery action for dirty LRU page: Recovered [ 73.200471][ T7437] Injecting memory failure for pfn 0x16ff2a at process virtual address 0x2005d000 [ 73.200493][ T7437] Memory failure: 0x16ff2a: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.200507][ T7437] Memory failure: 0x16ff2a: recovery action for dirty LRU page: Recovered [ 73.200514][ T7437] Injecting memory failure for pfn 0x16ff1a at process virtual address 0x2005e000 [ 73.200537][ T7437] Memory failure: 0x16ff1a: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.200553][ T7437] Memory failure: 0x16ff1a: recovery action for dirty LRU page: Recovered [ 73.200560][ T7437] Injecting memory failure for pfn 0x16ff1e at process virtual address 0x2005f000 [ 73.200584][ T7437] Memory failure: 0x16ff1e: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.200598][ T7437] Memory failure: 0x16ff1e: recovery action for dirty LRU page: Recovered [ 73.200605][ T7437] Injecting memory failure for pfn 0x16ff03 at process virtual address 0x20060000 [ 73.200626][ T7437] Memory failure: 0x16ff03: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.200640][ T7437] Memory failure: 0x16ff03: recovery action for dirty LRU page: Recovered [ 73.200647][ T7437] Injecting memory failure for pfn 0x16ff1c at process virtual address 0x20061000 [ 73.200668][ T7437] Memory failure: 0x16ff1c: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.200683][ T7437] Memory failure: 0x16ff1c: recovery action for dirty LRU page: Recovered [ 73.200689][ T7437] Injecting memory failure for pfn 0x16ff23 at process virtual address 0x20062000 [ 73.201540][ T7437] Memory failure: 0x16ff23: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.201564][ T7437] Memory failure: 0x16ff23: recovery action for dirty LRU page: Recovered [ 73.201575][ T7437] Injecting memory failure for pfn 0x16ff20 at process virtual address 0x20063000 [ 73.201612][ T7437] Memory failure: 0x16ff20: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.201629][ T7437] Memory failure: 0x16ff20: recovery action for dirty LRU page: Recovered [ 73.201637][ T7437] Injecting memory failure for pfn 0x13f407 at process virtual address 0x20064000 [ 73.201664][ T7437] Memory failure: 0x13f407: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.201680][ T7437] Memory failure: 0x13f407: recovery action for dirty LRU page: Recovered [ 73.201688][ T7437] Injecting memory failure for pfn 0x155a02 at process virtual address 0x20065000 [ 73.201713][ T7437] Memory failure: 0x155a02: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.201729][ T7437] Memory failure: 0x155a02: recovery action for dirty LRU page: Recovered [ 73.201736][ T7437] Injecting memory failure for pfn 0x1425da at process virtual address 0x20066000 [ 73.201759][ T7437] Memory failure: 0x1425da: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.201774][ T7437] Memory failure: 0x1425da: recovery action for dirty LRU page: Recovered [ 73.201781][ T7437] Injecting memory failure for pfn 0x15bc89 at process virtual address 0x20067000 [ 73.203741][ T7437] Memory failure: 0x15bc89: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.203763][ T7437] Memory failure: 0x15bc89: recovery action for dirty LRU page: Recovered [ 73.203774][ T7437] Injecting memory failure for pfn 0x16e6e4 at process virtual address 0x20068000 [ 73.213912][ T7437] Memory failure: 0x16e6e4: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.213937][ T7437] Memory failure: 0x16e6e4: recovery action for dirty LRU page: Recovered [ 73.213947][ T7437] Injecting memory failure for pfn 0x15bc8e at process virtual address 0x20069000 [ 73.214514][ T7437] Memory failure: 0x15bc8e: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.214533][ T7437] Memory failure: 0x15bc8e: recovery action for dirty LRU page: Recovered [ 73.214542][ T7437] Injecting memory failure for pfn 0x13f408 at process virtual address 0x2006a000 [ 73.214574][ T7437] Memory failure: 0x13f408: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.214590][ T7437] Memory failure: 0x13f408: recovery action for dirty LRU page: Recovered [ 73.214598][ T7437] Injecting memory failure for pfn 0x15bc83 at process virtual address 0x2006b000 [ 73.214624][ T7437] Memory failure: 0x15bc83: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.214639][ T7437] Memory failure: 0x15bc83: recovery action for dirty LRU page: Recovered [ 73.214646][ T7437] Injecting memory failure for pfn 0x165db7 at process virtual address 0x2006c000 [ 73.214671][ T7437] Memory failure: 0x165db7: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.214685][ T7437] Memory failure: 0x165db7: recovery action for dirty LRU page: Recovered [ 73.214692][ T7437] Injecting memory failure for pfn 0x16ffff at process virtual address 0x2006d000 [ 73.214715][ T7437] Memory failure: 0x16ffff: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.214730][ T7437] Memory failure: 0x16ffff: recovery action for dirty LRU page: Recovered [ 73.214737][ T7437] Injecting memory failure for pfn 0x15bc8c at process virtual address 0x2006e000 [ 73.214759][ T7437] Memory failure: 0x15bc8c: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.214773][ T7437] Memory failure: 0x15bc8c: recovery action for dirty LRU page: Recovered [ 73.214780][ T7437] Injecting memory failure for pfn 0x16ff06 at process virtual address 0x2006f000 [ 73.214803][ T7437] Memory failure: 0x16ff06: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.214817][ T7437] Memory failure: 0x16ff06: recovery action for dirty LRU page: Recovered [ 73.214824][ T7437] Injecting memory failure for pfn 0x16ff24 at process virtual address 0x20070000 [ 73.214858][ T7437] Memory failure: 0x16ff24: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.221637][ T7437] Memory failure: 0x16ff24: recovery action for dirty LRU page: Recovered [ 73.221650][ T7437] Injecting memory failure for pfn 0x1600c6 at process virtual address 0x20071000 [ 73.224950][ T7437] Memory failure: 0x1600c6: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.224973][ T7437] Memory failure: 0x1600c6: recovery action for dirty LRU page: Recovered [ 73.224984][ T7437] Injecting memory failure for pfn 0x16fff6 at process virtual address 0x20072000 [ 73.225025][ T7437] Memory failure: 0x16fff6: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.225042][ T7437] Memory failure: 0x16fff6: recovery action for dirty LRU page: Recovered [ 73.225050][ T7437] Injecting memory failure for pfn 0x13f45e at process virtual address 0x20073000 [ 73.225077][ T7437] Memory failure: 0x13f45e: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.225092][ T7437] Memory failure: 0x13f45e: recovery action for dirty LRU page: Recovered [ 73.225100][ T7437] Injecting memory failure for pfn 0x15bc8f at process virtual address 0x20074000 [ 73.225124][ T7437] Memory failure: 0x15bc8f: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.225139][ T7437] Memory failure: 0x15bc8f: recovery action for dirty LRU page: Recovered [ 73.225146][ T7437] Injecting memory failure for pfn 0x155a0a at process virtual address 0x20075000 [ 73.225170][ T7437] Memory failure: 0x155a0a: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.225185][ T7437] Memory failure: 0x155a0a: recovery action for dirty LRU page: Recovered [ 73.225192][ T7437] Injecting memory failure for pfn 0x15599a at process virtual address 0x20076000 [ 73.225215][ T7437] Memory failure: 0x15599a: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.225229][ T7437] Memory failure: 0x15599a: recovery action for dirty LRU page: Recovered [ 73.225236][ T7437] Injecting memory failure for pfn 0x16f154 at process virtual address 0x20077000 [ 73.225258][ T7437] Memory failure: 0x16f154: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.225272][ T7437] Memory failure: 0x16f154: recovery action for dirty LRU page: Recovered [ 73.225279][ T7437] Injecting memory failure for pfn 0x16f155 at process virtual address 0x20078000 [ 73.225303][ T7437] Memory failure: 0x16f155: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.225317][ T7437] Memory failure: 0x16f155: recovery action for dirty LRU page: Recovered [ 73.225324][ T7437] Injecting memory failure for pfn 0x16f156 at process virtual address 0x20079000 [ 73.225345][ T7437] Memory failure: 0x16f156: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.225359][ T7437] Memory failure: 0x16f156: recovery action for dirty LRU page: Recovered [ 73.225366][ T7437] Injecting memory failure for pfn 0x16f157 at process virtual address 0x2007a000 [ 73.225387][ T7437] Memory failure: 0x16f157: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.225401][ T7437] Memory failure: 0x16f157: recovery action for dirty LRU page: Recovered [ 73.225408][ T7437] Injecting memory failure for pfn 0x16f158 at process virtual address 0x2007b000 [ 73.225430][ T7437] Memory failure: 0x16f158: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.225444][ T7437] Memory failure: 0x16f158: recovery action for dirty LRU page: Recovered [ 73.225450][ T7437] Injecting memory failure for pfn 0x16f159 at process virtual address 0x2007c000 [ 73.231834][ T7437] Memory failure: 0x16f159: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.231864][ T7437] Memory failure: 0x16f159: recovery action for dirty LRU page: Recovered [ 73.231878][ T7437] Injecting memory failure for pfn 0x16f15a at process virtual address 0x2007d000 [ 73.232014][ T7437] Memory failure: 0x16f15a: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.232033][ T7437] Memory failure: 0x16f15a: recovery action for dirty LRU page: Recovered [ 73.232042][ T7437] Injecting memory failure for pfn 0x16f15b at process virtual address 0x2007e000 [ 73.232073][ T7437] Memory failure: 0x16f15b: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.232089][ T7437] Memory failure: 0x16f15b: recovery action for dirty LRU page: Recovered [ 73.232097][ T7437] Injecting memory failure for pfn 0x16f15c at process virtual address 0x2007f000 [ 73.232123][ T7437] Memory failure: 0x16f15c: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.232138][ T7437] Memory failure: 0x16f15c: recovery action for dirty LRU page: Recovered [ 73.232145][ T7437] Injecting memory failure for pfn 0x16f15d at process virtual address 0x20080000 [ 73.232169][ T7437] Memory failure: 0x16f15d: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.232183][ T7437] Memory failure: 0x16f15d: recovery action for dirty LRU page: Recovered [ 73.232190][ T7437] Injecting memory failure for pfn 0x16f15e at process virtual address 0x20081000 [ 73.232213][ T7437] Memory failure: 0x16f15e: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.232227][ T7437] Memory failure: 0x16f15e: recovery action for dirty LRU page: Recovered [ 73.232234][ T7437] Injecting memory failure for pfn 0x16f15f at process virtual address 0x20082000 [ 73.232256][ T7437] Memory failure: 0x16f15f: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.232270][ T7437] Memory failure: 0x16f15f: recovery action for dirty LRU page: Recovered [ 73.232277][ T7437] Injecting memory failure for pfn 0x16f160 at process virtual address 0x20083000 [ 73.232299][ T7437] Memory failure: 0x16f160: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.232313][ T7437] Memory failure: 0x16f160: recovery action for dirty LRU page: Recovered [ 73.232319][ T7437] Injecting memory failure for pfn 0x16f161 at process virtual address 0x20084000 [ 73.232341][ T7437] Memory failure: 0x16f161: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.232355][ T7437] Memory failure: 0x16f161: recovery action for dirty LRU page: Recovered [ 73.232362][ T7437] Injecting memory failure for pfn 0x16f162 at process virtual address 0x20085000 [ 73.232383][ T7437] Memory failure: 0x16f162: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.232397][ T7437] Memory failure: 0x16f162: recovery action for dirty LRU page: Recovered [ 73.232403][ T7437] Injecting memory failure for pfn 0x16f163 at process virtual address 0x20086000 [ 73.232425][ T7437] Memory failure: 0x16f163: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.232439][ T7437] Memory failure: 0x16f163: recovery action for dirty LRU page: Recovered [ 73.232445][ T7437] Injecting memory failure for pfn 0x16f164 at process virtual address 0x20087000 [ 73.232467][ T7437] Memory failure: 0x16f164: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.232480][ T7437] Memory failure: 0x16f164: recovery action for dirty LRU page: Recovered [ 73.232487][ T7437] Injecting memory failure for pfn 0x16f165 at process virtual address 0x20088000 [ 73.232508][ T7437] Memory failure: 0x16f165: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.232522][ T7437] Memory failure: 0x16f165: recovery action for dirty LRU page: Recovered [ 73.232529][ T7437] Injecting memory failure for pfn 0x16f166 at process virtual address 0x20089000 [ 73.232550][ T7437] Memory failure: 0x16f166: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.232564][ T7437] Memory failure: 0x16f166: recovery action for dirty LRU page: Recovered [ 73.232571][ T7437] Injecting memory failure for pfn 0x16f167 at process virtual address 0x2008a000 [ 73.232592][ T7437] Memory failure: 0x16f167: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.232606][ T7437] Memory failure: 0x16f167: recovery action for dirty LRU page: Recovered [ 73.232613][ T7437] Injecting memory failure for pfn 0x16f168 at process virtual address 0x2008b000 [ 73.232634][ T7437] Memory failure: 0x16f168: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.232648][ T7437] Memory failure: 0x16f168: recovery action for dirty LRU page: Recovered [ 73.232655][ T7437] Injecting memory failure for pfn 0x16f169 at process virtual address 0x2008c000 [ 73.232676][ T7437] Memory failure: 0x16f169: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.232690][ T7437] Memory failure: 0x16f169: recovery action for dirty LRU page: Recovered [ 73.232697][ T7437] Injecting memory failure for pfn 0x16f16a at process virtual address 0x2008d000 [ 73.232719][ T7437] Memory failure: 0x16f16a: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.232732][ T7437] Memory failure: 0x16f16a: recovery action for dirty LRU page: Recovered [ 73.235597][ T7437] Injecting memory failure for pfn 0x16f16b at process virtual address 0x2008e000 [ 73.235645][ T7437] Memory failure: 0x16f16b: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.235664][ T7437] Memory failure: 0x16f16b: recovery action for dirty LRU page: Recovered [ 73.235673][ T7437] Injecting memory failure for pfn 0x16f16c at process virtual address 0x2008f000 [ 73.235702][ T7437] Memory failure: 0x16f16c: Sending SIGBUS to syz.5.884:7437 due to hardware memory corruption [ 73.235718][ T7437] Memory failure: 0x16f16c: recovery action for dirty LRU page: Recovered [ 73.308771][ T4713] Bluetooth: hci1: command 0x0c1a tx timeout [ 73.357993][ T7445] binder: 7444:7445 tried to acquire reference to desc 0, got 1 instead [ 73.361503][ T4721] binder: release 7444:7445 transaction 60 out, still active [ 73.361516][ T4721] binder: undelivered TRANSACTION_COMPLETE [ 73.376191][ T4721] binder: send failed reply for transaction 60, target dead [ 73.412647][ T7447] loop2: detected capacity change from 0 to 512 [ 73.412965][ T7447] EXT4-fs: Ignoring removed oldalloc option [ 73.415632][ T7447] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 73.432685][ T7447] EXT4-fs (loop2): 1 truncate cleaned up [ 73.433216][ T7447] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.460992][ T4713] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 73.485136][ T6475] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.679617][ T7455] binder: 7454:7455 tried to acquire reference to desc 0, got 1 instead [ 73.687025][ T7455] binder: 7454:7455 unknown command 0 [ 73.687035][ T7455] binder: 7454:7455 ioctl c0306201 20000180 returned -22 [ 73.821883][ T7463] overlayfs: failed to clone upperpath [ 73.840296][ T7460] loop3: detected capacity change from 0 to 4096 [ 73.871996][ T7460] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.961051][ T7468] netlink: 'syz.5.898': attribute type 6 has an invalid length. [ 73.961089][ T7468] netlink: 8 bytes leftover after parsing attributes in process `syz.5.898'. [ 74.106447][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.107454][ T4713] Bluetooth: hci3: command 0x0c1a tx timeout [ 74.107480][ T4713] Bluetooth: hci5: command 0x0405 tx timeout [ 74.107497][ T4713] Bluetooth: hci2: command 0x0c1a tx timeout [ 74.107514][ T4713] Bluetooth: hci0: command 0x0c1a tx timeout [ 74.618914][ T30] audit: type=1326 audit(74.590:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7508 comm="syz.1.913" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf5792a8 code=0x0 [ 75.408838][ T4713] Bluetooth: hci1: command 0x0c1a tx timeout [ 76.187494][ T4713] Bluetooth: hci0: command 0x0c1a tx timeout [ 76.187535][ T4713] Bluetooth: hci2: command 0x0c1a tx timeout [ 76.187563][ T4713] Bluetooth: hci5: command 0x0405 tx timeout [ 76.187583][ T4713] Bluetooth: hci3: command 0x0c1a tx timeout [ 76.361626][ T7557] syzkaller0: entered promiscuous mode [ 76.361663][ T7557] syzkaller0: entered allmulticast mode [ 76.365872][ T7560] netlink: 32 bytes leftover after parsing attributes in process `syz.1.927'. [ 76.384963][ T7560] netlink: 32 bytes leftover after parsing attributes in process `syz.1.927'. [ 76.409437][ T7563] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 76.409459][ T7563] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 76.410142][ T7563] vhci_hcd vhci_hcd.0: Device attached [ 76.678364][ T4721] usb 9-1: SetAddress Request (2) to port 0 [ 76.678427][ T4721] usb 9-1: new SuperSpeed USB device number 2 using vhci_hcd [ 77.103746][ T7594] loop5: detected capacity change from 0 to 8 [ 77.109647][ T7594] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 77.111795][ T7594] unable to read xattr id index table [ 77.115184][ T7594] SQUASHFS error: zlib decompression failed, data probably corrupt [ 77.115222][ T7594] SQUASHFS error: Failed to read block 0x9b: -5 [ 77.115231][ T7594] SQUASHFS error: Unable to read metadata cache entry [99] [ 77.115239][ T7594] SQUASHFS error: Unable to read inode 0x127 [ 77.346288][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.941'. [ 77.365077][ T7615] netlink: 12 bytes leftover after parsing attributes in process `syz.4.943'. [ 77.405392][ T7621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.407715][ T7621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.466730][ T4717] Bluetooth: hci1: command 0x0c1a tx timeout [ 77.524904][ T7625] ipt_rpfilter: unknown options [ 77.702102][ T7637] netlink: 'syz.4.950': attribute type 13 has an invalid length. [ 77.771245][ T4717] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 77.928341][ T7643] loop2: detected capacity change from 0 to 512 [ 77.935474][ T7643] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a066c018, mo2=0002] [ 77.935546][ T7643] System zones: 1-12 [ 77.943933][ T7643] EXT4-fs warning (device loop2): ext4_xattr_inode_get:546: inode #11: comm syz.2.952: ea_inode file size=0 entry size=6 [ 77.950358][ T7643] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.952: iget: bad extra_isize 90 (inode size 256) [ 77.953805][ T7643] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 77.954609][ T7643] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.952: error while reading EA inode 11 err=-117 [ 77.958812][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 77.958828][ C0] EXT4-fs (loop2): initial error at time 77: ext4_xattr_inode_iget:441: inode 11 [ 77.958849][ C0] EXT4-fs (loop2): last error at time 77: ext4_xattr_inode_iget:441: inode 11 [ 77.963865][ T7643] loop2: lost filesystem error report for type 5 error -117 [ 77.968772][ T7643] EXT4-fs (loop2): 1 orphan inode deleted [ 77.969288][ T7643] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.985625][ T6475] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 77.991190][ T6475] EXT4-fs error (device loop2): ext4_lookup:1785: inode #11: comm syz-executor: iget: bad extra_isize 90 (inode size 256) [ 77.994077][ T6475] EXT4-fs error (device loop2): ext4_lookup:1785: inode #11: comm syz-executor: iget: bad extra_isize 90 (inode size 256) [ 78.178827][ T6475] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.256097][ T4713] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.258224][ T4713] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.259620][ T4713] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.261459][ T4713] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.263057][ T4713] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.267727][ T4714] Bluetooth: hci5: command 0x0405 tx timeout [ 78.267762][ T4714] Bluetooth: hci0: command 0x0c1a tx timeout [ 78.442686][ T7646] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.444174][ T7646] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.444277][ T7646] bridge_slave_0: entered allmulticast mode [ 78.447696][ T7646] bridge_slave_0: entered promiscuous mode [ 78.449810][ T7646] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.451368][ T7646] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.453122][ T7646] bridge_slave_1: entered allmulticast mode [ 78.454700][ T7646] bridge_slave_1: entered promiscuous mode [ 78.465954][ T7646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.469042][ T7646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.483031][ T7646] team0: Port device team_slave_0 added [ 78.485104][ T7646] team0: Port device team_slave_1 added [ 78.506018][ T7646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.506050][ T7646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.506062][ T7646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.506562][ T7646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.506568][ T7646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.506579][ T7646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.529777][ T7646] hsr_slave_0: entered promiscuous mode [ 78.530389][ T7646] hsr_slave_1: entered promiscuous mode [ 78.530979][ T7646] debugfs: 'hsr0' already exists in 'hsr' [ 78.530992][ T7646] Cannot create hsr debugfs directory [ 79.398948][ T7563] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 79.401449][ T7646] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 79.413084][ T7566] vhci_hcd: connection reset by peer [ 79.415802][ T5011] vhci_hcd vhci_hcd.3: stop threads [ 79.417980][ T5011] vhci_hcd vhci_hcd.3: release socket [ 79.420507][ T5011] vhci_hcd vhci_hcd.3: disconnect device [ 79.427965][ T7646] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.430657][ T7646] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 79.463103][ T7646] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.463433][ T7646] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 79.480564][ T7646] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.483034][ T7646] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 79.486506][ T7646] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.518782][ T7646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.524072][ T7646] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.535973][ T5011] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.536017][ T5011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.536577][ T5011] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.536603][ T5011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.544683][ T7646] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.592454][ T7738] tipc: Failed to remove unknown binding: 66,0,0/0:3670355949/3670355950 [ 79.594574][ T7738] tipc: Failed to remove unknown binding: 66,0,0/0:3670355949/3670355950 [ 79.667546][ T7750] batadv_slave_0: Caught tx_queue_len zero misconfig [ 79.698688][ T7756] loop5: detected capacity change from 0 to 4096 [ 79.700244][ T7756] EXT4-fs: Ignoring removed orlov option [ 79.701537][ T7756] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.704211][ T7756] EXT4-fs (loop5): Test dummy encryption mode enabled [ 79.719783][ T7756] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.759177][ T7646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.875020][ T5643] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.916315][ T7646] veth0_vlan: entered promiscuous mode [ 79.922475][ T7646] veth1_vlan: entered promiscuous mode [ 79.932532][ T7646] veth0_macvtap: entered promiscuous mode [ 79.935379][ T7646] veth1_macvtap: entered promiscuous mode [ 79.942354][ T7646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.945442][ T7646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.991605][ T5011] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.996219][ T5011] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.996263][ T5011] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.996284][ T5011] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.016000][ T5013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.016031][ T5013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.114192][ T5011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.114222][ T5011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.225608][ T7796] batman_adv: batadv0: Adding interface: veth0 [ 80.225636][ T7796] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.225663][ T7796] batman_adv: batadv0: Interface activated: veth0 [ 80.241965][ T7796] batman_adv: batadv0: Interface deactivated: veth0 [ 80.256524][ T7796] batman_adv: batadv0: Removing interface: veth0 [ 80.349746][ T4717] Bluetooth: hci3: command tx timeout [ 80.578396][ T7806] loop3: detected capacity change from 0 to 512 [ 80.579842][ T7806] EXT4-fs (loop3): Test dummy encryption mode enabled [ 80.581371][ T7806] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 80.584167][ T7806] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.1004: bad orphan inode 131083 [ 80.586159][ T7806] loop3: lost filesystem error report for type 5 error -117 [ 80.594107][ T7806] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.620386][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.887738][ T7828] fuse: fd is not a fuse device [ 81.054145][ T7844] lo: Caught tx_queue_len zero misconfig [ 81.054179][ T7844] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 81.105638][ T7848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1020'. [ 81.176059][ T7850] 8021q: adding VLAN 0 to HW filter on device bond6 [ 81.211520][ T7855] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1023'. [ 81.259376][ T7860] syzkaller0: entered promiscuous mode [ 81.259409][ T7860] syzkaller0: entered allmulticast mode [ 81.261554][ T7860] TC_ACT_REPEAT abuse ? [ 81.359643][ T7867] overlayfs: failed to clone upperpath [ 81.453124][ T7871] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1030'. [ 81.708386][ T4721] usb 9-1: device descriptor read/8, error -110 [ 81.799018][ T4717] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 81.799986][ T4717] Bluetooth: hci2: Injecting HCI hardware error event [ 81.802045][ T4713] Bluetooth: hci2: hardware error 0x00 [ 82.059314][ T7889] binder: 7888:7889 tried to acquire reference to desc 0, got 1 instead [ 82.061178][ T7889] binder: 7888:7889 got transaction with invalid offset (0, min 0 max 15) or object. [ 82.063371][ T7889] binder: 7888:7889 transaction call to 7888:0 failed 72/29201/-22, code 0 size 15-24 line 3524 [ 82.065937][ T4803] binder: undelivered TRANSACTION_ERROR: 29201 [ 82.100282][ T4721] usb usb9-port1: attempt power cycle [ 82.198192][ T7903] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 82.437345][ T4717] Bluetooth: hci3: command tx timeout [ 82.665469][ T4721] usb usb9-port1: unable to enumerate USB device [ 82.679191][ T7919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1051'. [ 82.679223][ T7919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1051'. [ 82.783900][ T4344] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 82.783938][ T4344] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 82.783960][ T4344] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 82.783985][ T4344] loop0: [ 82.860389][ T7933] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.903293][ T7948] loop6: detected capacity change from 0 to 128 [ 82.914394][ T7948] FAT-fs (loop6): bogus sectors per cluster 0 [ 82.914424][ T7948] FAT-fs (loop6): Can't find a valid FAT filesystem [ 82.931779][ T7933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.938196][ T7933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.113373][ T7942] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.157482][ T5013] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.157868][ T132] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.157894][ T132] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.285652][ T7981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1073'. [ 83.364913][ T7997] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1078'. [ 83.368386][ T7997] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1078'. [ 83.370505][ T7997] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1078'. [ 83.414712][ T4400] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.457949][ T8008] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 83.457975][ T8008] IPv6: NLM_F_CREATE should be set when creating new route [ 83.501577][ T8009] loop6: detected capacity change from 0 to 4096 [ 83.519910][ T8009] EXT4-fs (loop6): Test dummy encryption mode enabled [ 83.528094][ T8009] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.598861][ T8015] binder: BINDER_SET_CONTEXT_MGR already set [ 83.598886][ T8015] binder: 8014:8015 ioctl 4018620d 0 returned -16 [ 83.607364][ T8015] binder: 8014:8015 DecRefs 0 refcount change on invalid ref 1 ret -22 [ 83.607394][ T8015] binder: 8014:8015 unknown command 0 [ 83.607417][ T8015] binder: 8014:8015 ioctl c0306201 20000180 returned -22 [ 83.763088][ T8027] overlayfs: failed to clone upperpath [ 83.772408][ T8027] overlayfs: failed to clone upperpath [ 83.788195][ T8030] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1090'. [ 83.946832][ T4713] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 84.036814][ T5011] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.056792][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.056845][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.056869][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.072721][ T7646] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.117828][ T8045] fuse: fd is not a fuse device [ 84.511615][ T4713] Bluetooth: hci3: command tx timeout [ 85.118073][ T8067] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 85.119675][ T8067] overlayfs: failed to set xattr on upper [ 85.121645][ T8067] overlayfs: ...falling back to redirect_dir=nofollow. [ 85.123173][ T8067] overlayfs: ...falling back to uuid=null. [ 85.150034][ T8064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1098'. [ 85.155367][ T8069] FAULT_INJECTION: forcing a failure. [ 85.155367][ T8069] name failslab, interval 1, probability 0, space 0, times 0 [ 85.165986][ T8069] CPU: 0 UID: 0 PID: 8069 Comm: syz.3.1100 Tainted: G L syzkaller #0 PREEMPT [ 85.166013][ T8069] Tainted: [L]=SOFTLOCKUP [ 85.166017][ T8069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 85.166023][ T8069] Call trace: [ 85.166027][ T8069] show_stack+0x2c/0x3c (C) [ 85.166051][ T8069] __dump_stack+0x30/0x40 [ 85.166065][ T8069] dump_stack_lvl+0xd8/0x12c [ 85.166077][ T8069] dump_stack+0x1c/0x28 [ 85.166088][ T8069] should_fail_ex+0x41c/0x590 [ 85.166098][ T8069] should_failslab+0xc4/0x120 [ 85.166107][ T8069] __kmalloc_node_track_caller_noprof+0x108/0x6d4 [ 85.166119][ T8069] kvasprintf+0x110/0x1e4 [ 85.166132][ T8069] kvasprintf_const+0x154/0x2e4 [ 85.166144][ T8069] kobject_set_name_vargs+0xd8/0x1c0 [ 85.166158][ T8069] dev_set_name+0xe8/0x13c [ 85.166171][ T8069] nfc_allocate_device+0x19c/0x474 [ 85.166183][ T8069] nci_allocate_device+0x1a4/0x348 [ 85.166194][ T8069] virtual_ncidev_open+0x7c/0x1a0 [ 85.166207][ T8069] misc_open+0x2dc/0x338 [ 85.166220][ T8069] chrdev_open+0x398/0x3e8 [ 85.166231][ T8069] do_dentry_open+0x5c4/0xfc0 [ 85.166243][ T8069] vfs_open+0x44/0x2dc [ 85.166254][ T8069] path_openat+0x21fc/0x2a60 [ 85.166264][ T8069] do_file_open+0x1c8/0x2e8 [ 85.166274][ T8069] do_sys_openat2+0x114/0x1e8 [ 85.166286][ T8069] do_sys_open+0xb0/0xe0 [ 85.166298][ T8069] __arm64_sys_openat+0xa8/0xc4 [ 85.166309][ T8069] invoke_syscall+0x98/0x244 [ 85.166322][ T8069] el0_svc_common+0xec/0x23c [ 85.166334][ T8069] do_el0_svc+0x4c/0x5c [ 85.166345][ T8069] el0_svc+0x64/0x260 [ 85.166355][ T8069] el0t_64_sync_handler+0x44/0x104 [ 85.166365][ T8069] el0t_64_sync+0x198/0x19c [ 85.655287][ T8091] netlink: 'syz.1.1107': attribute type 1 has an invalid length. [ 85.678514][ T8091] veth4: entered allmulticast mode [ 85.685799][ T8091] bond7: (slave veth5): Enslaving as an active interface with a down link [ 85.697407][ T8091] bond7: entered promiscuous mode [ 85.698758][ T8091] bond7: entered allmulticast mode [ 85.700143][ T8091] 8021q: adding VLAN 0 to HW filter on device bond7 [ 85.731048][ T8101] netlink: 'syz.1.1108': attribute type 11 has an invalid length. [ 85.813535][ T8112] binder: 8111:8112 tried to acquire reference to desc 0, got 1 instead [ 85.813781][ T8112] binder: 8111:8112 got transaction with invalid handle, 3 [ 85.814243][ T8112] binder: 8112:8111 translate handle failed [ 85.814286][ T8112] binder: 8111:8112 transaction call to 8111:0 failed 79/29201/-22, code 0 size 72-24 line 3571 [ 85.814724][ T4838] binder: undelivered TRANSACTION_ERROR: 29201 [ 86.110880][ T8019] IPVS: starting estimator thread 0... [ 86.153704][ T8138] mmap: syz.3.1116 (8138) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 86.174959][ T8153] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1121'. [ 86.217416][ T8150] IPVS: using max 60 ests per chain, 144000 per kthread [ 86.248919][ T8164] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 86.253457][ T8164] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 86.346629][ T8167] loop3: detected capacity change from 0 to 512 [ 86.367536][ T8167] EXT4-fs: inline encryption not supported [ 86.586839][ T4713] Bluetooth: hci3: command tx timeout [ 86.889400][ T8167] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 86.923876][ T8167] EXT4-fs (loop3): 1 truncate cleaned up [ 86.925613][ T8167] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.120561][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.473026][ T8266] tipc: Started in network mode [ 87.473061][ T8266] tipc: Node identity 1000001, cluster identity 4369 [ 87.473088][ T8266] tipc: Node number set to 16777217 [ 87.473280][ T8266] tipc: Cannot configure node identity twice [ 87.486584][ T8266] tipc: Enabling of bearer rejected, failed to enable media [ 87.675660][ T8292] ip_tables: iptables: counters copy to user failed while replacing table [ 87.680349][ T8290] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 88.129137][ T8306] binder: 8305:8306 tried to acquire reference to desc 0, got 1 instead [ 88.132601][ T8306] binder: 8305:8306 ioctl c0306201 200006c0 returned -14 [ 88.134524][ T4838] binder: release 8305:8306 transaction 84 out, still active [ 88.136087][ T4838] binder: undelivered TRANSACTION_COMPLETE [ 88.138451][ T4838] binder: undelivered TRANSACTION_COMPLETE [ 88.143790][ T8310] binder: 8309:8310 tried to acquire reference to desc 0, got 1 instead [ 88.143975][ T8310] binder: 8309:8310 got transaction with invalid offset (48, min 48 max 64) or object. [ 88.144017][ T8310] binder: 8309:8310 transaction call to 8309:0 failed 96/29201/-22, code 0 size 64-24 line 3524 [ 88.144230][ T8019] binder: undelivered TRANSACTION_ERROR: 29201 [ 88.156825][ T4838] binder: send failed reply for transaction 84, target dead [ 88.156857][ T4838] binder: undelivered transaction 91, process died. [ 88.201191][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1147'. [ 88.209589][ T8316] binder: 8315:8316 tried to acquire reference to desc 0, got 1 instead [ 88.210951][ T8316] binder: 8315:8316 ioctl c0306201 0 returned -14 [ 88.211179][ T8316] binder: 8315:8316 got transaction with invalid data ptr [ 88.211207][ T8316] binder: 8315:8316 transaction call to 8315:0 failed 103/29201/-14, code 0 size 252-0 line 3742 [ 88.211687][ T8019] binder: undelivered TRANSACTION_ERROR: 29201 [ 88.261336][ T8322] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1151'. [ 88.290516][ T4838] IPVS: starting estimator thread 0... [ 88.397556][ T8325] IPVS: using max 60 ests per chain, 144000 per kthread [ 88.402612][ T8327] loop3: detected capacity change from 0 to 128 [ 88.408907][ T8327] FAT-fs (loop3): Directory bread(block 1048) failed [ 88.408935][ T8327] FAT-fs (loop3): Directory bread(block 1049) failed [ 88.408953][ T8327] FAT-fs (loop3): Directory bread(block 1050) failed [ 88.408969][ T8327] FAT-fs (loop3): Directory bread(block 1051) failed [ 88.408985][ T8327] FAT-fs (loop3): Directory bread(block 1052) failed [ 88.408999][ T8327] FAT-fs (loop3): Directory bread(block 1053) failed [ 88.409013][ T8327] FAT-fs (loop3): Directory bread(block 1054) failed [ 88.409027][ T8327] FAT-fs (loop3): Directory bread(block 1055) failed [ 88.423883][ T8327] FAT-fs (loop3): FAT read failed (blocknr 128) [ 88.570883][ T8334] Cannot find del_set index 2 as target [ 89.305851][ T8337] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 89.323340][ T8339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1157'. [ 89.373712][ T30] audit: type=1326 audit(89.340:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8342 comm="syz.6.1158" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7f792a8 code=0x0 [ 89.381919][ T8341] Bluetooth: (null): Too short H5 packet [ 89.704413][ T8379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1172'. [ 89.711241][ T8379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1172'. [ 89.714467][ T8379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1172'. [ 89.776605][ T8391] netlink: 'syz.1.1174': attribute type 11 has an invalid length. [ 89.865811][ T8391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.867989][ T8391] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.870913][ T8391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.888948][ T8391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.891176][ T8391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.893782][ T8391] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 89.897833][ T8391] veth1_vlan: left promiscuous mode [ 89.899239][ T8391] veth0_vlan: left promiscuous mode [ 89.900901][ T8391] veth0_vlan: entered promiscuous mode [ 89.902627][ T8391] veth1_vlan: entered promiscuous mode [ 89.905278][ T8391] veth1_macvtap: left promiscuous mode [ 89.906935][ T8391] veth0_macvtap: left promiscuous mode [ 89.908435][ T8391] veth0_macvtap: entered promiscuous mode [ 90.777005][ T8391] veth1_macvtap: entered promiscuous mode [ 90.779938][ T8391] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.793368][ T8391] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.798347][ T8391] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.822168][ T8391] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.870433][ T8391] 8021q: adding VLAN 0 to HW filter on device bond2 [ 90.873597][ T8391] 8021q: adding VLAN 0 to HW filter on device bond3 [ 90.893400][ T8391] 8021q: adding VLAN 0 to HW filter on device bond4 [ 90.894093][ T8391] 8021q: adding VLAN 0 to HW filter on device bond5 [ 90.932546][ T8391] 8021q: adding VLAN 0 to HW filter on device bond6 [ 90.934847][ T8391] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 90.947585][ T5013] IPv6: BUG: Address 2001::1 on device lo is missing its host route. [ 90.950962][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.951020][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.026841][ T39] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.027434][ T39] bond7: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 91.027564][ T39] bond7: (slave veth5): making interface the new active one [ 91.027578][ T39] veth5: entered promiscuous mode [ 91.027654][ T39] veth5: entered allmulticast mode [ 91.028435][ T39] bond7: active interface up! [ 91.028712][ T39] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.029052][ T39] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.626747][ T4717] Bluetooth: hci5: command 0x0405 tx timeout [ 93.706694][ T4713] Bluetooth: hci5: command 0x0405 tx timeout