last executing test programs: 4m23.935263623s ago: executing program 3 (id=874): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) r2 = syz_io_uring_setup(0x4ed, &(0x7f0000000300)={0x0, 0x502c, 0x0, 0xff7ffffc, 0x274}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x8, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0x2004}}) io_uring_enter(r8, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r8, 0x10, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f0000000380)={'\x00', 0x3, 0x0, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x29, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x7, 0x18, 0x0, 0x0, @binary="0aac0f"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4042806}, 0x84) io_uring_enter(r2, 0xdb4, 0xd070, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r0, &(0x7f0000000000)={0x10000000}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x400) 4m23.034871339s ago: executing program 3 (id=877): r0 = io_uring_setup(0x1f1c, &(0x7f00000005c0)={0x0, 0x17d7, 0xa, 0x3, 0x283}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r6 = socket(0x2a, 0x2, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000000)="f20000000000008508003e6e8f86a32c824a706b81acdfadc6d16ef4d5a280f4247ac655ac2b24b07b829ac6b4ef9c0ea296b7", 0x33, 0x4000053, &(0x7f0000000200)={0x11, 0x8, r8, 0x1, 0x40, 0x6, @broadcast}, 0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x8, {0x6, 0x3, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) shutdown(r2, 0x1) accept4(r1, 0x0, 0x0, 0x800) close_range(r0, 0xffffffffffffffff, 0x0) 4m22.031149388s ago: executing program 3 (id=881): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_getattr(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2010042, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) unshare(0x40020000) 4m20.057836352s ago: executing program 3 (id=886): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x10000000}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x400) 4m18.773822533s ago: executing program 3 (id=889): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_getattr(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$cgroup(0x0, 0x0, &(0x7f00000001c0), 0x2010042, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) unshare(0x40020000) 4m16.433288533s ago: executing program 3 (id=894): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0x200000fff, 0x5) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_pidfd_open(r0, 0x0) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) 4m1.193540543s ago: executing program 32 (id=894): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0x200000fff, 0x5) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_pidfd_open(r0, 0x0) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) 16.283896988s ago: executing program 2 (id=1623): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r4, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r4, 0x0, 0x12, &(0x7f0000000180)=0x101, 0x4) recvmmsg(r4, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 13.394703105s ago: executing program 2 (id=1630): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x398, 0x2a0, 0xffffffff, 0xe0, 0x188, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @timestamp_reply={0xe, 0x0, 0x0, 0xfff, 0x1400, 0x9, 0x3ff, 0xffffffff}}}}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r5 = socket$inet6(0xa, 0x80002, 0x88) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000200)={0xf0000000}) close(0x3) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 13.393292375s ago: executing program 5 (id=1631): close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setrlimit(0x9, &(0x7f0000000040)={0x7, 0x67}) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @empty, 0x8}, 0x1c) r4 = memfd_create(&(0x7f00000001c0)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf1<', 0x3) pwrite64(r4, &(0x7f0000000180)='q', 0x1, 0x100004) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendfile(r5, r4, 0x0, 0xd39a) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005bc0)=ANY=[@ANYRES32=0x0, @ANYRES64=r2], 0x48}}, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x7, &(0x7f0000000280)=0xf78e, 0x4) socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, 0x0, &(0x7f0000000340)) 13.392334835s ago: executing program 4 (id=1632): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000280)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = memfd_create(&(0x7f0000000180)='[\vx\'\xa5)\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\t\x00\x00\x00\x10\xc7\x00^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x99\x83\xcd\b\xd1\x02R\xae\x80\xd2}\xf5\xe4\x9f5\x9b7\xaf\xb7o\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000004840)={0x2020}, 0x2020) semget$private(0x0, 0x4, 0x4f0) read$FUSE(r4, &(0x7f0000002800)={0x2020}, 0x2073) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f00000002c0)=ANY=[]) write$binfmt_script(r3, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\t\t'}, {0x20, '\xb4\xd4\t$3\x95\\\x83\xdc\xc9\xae\xacqt\xd3cY\x0eQ\xcd\xc0\x88\x82\x13\x9b\xb3\xa0\xd0\xdc!\x9f0\xf7C\x8c\xb99\x84\x15\x8e\xdbd\x89\xfeE\xd5V1tW\xdd\xf2\xd0\x9d\xb0?\xf5Na\xe7\xecq\x17\xbca\xe5\xab\xf1]\xe3B\xa7\x9f\xf4\x1c\x19F\x88\x0e%\x91%\xe8\xcb]t\xb9d\xcd\x18\xcc\xa4\xbf\xe1\x0e\xb3\x18\x9e\xab\xaf\xcc\xd9\x9f,\xd8\xc5n_O!\x00\v\xd5\x02\xd5\x9f\xdbL\xbd\xe4\xaa(\xbf\xb4\x9eU\x802\xf7K\x06\xd1E\x01\xa73\xadb\xbcuJ\xce\x87Ft2\xcdO\xfc?\xb71E\x85\r\xfb\xb1\xb6TL'}]}, 0xaf) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x239f, &(0x7f0000000380)=0x0) io_submit(r6, 0x477f, &(0x7f0000000b40)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x7, 0x8, r5, 0x0}]) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1000000004, 0x10000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x3, 0x0, 0x0, 0x6, 0x45, 0x2, 0x7, 0x18}) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7f, 0x0) 12.470951578s ago: executing program 1 (id=1633): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x398, 0x2a0, 0xffffffff, 0xe0, 0x188, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @timestamp_reply={0xe, 0x0, 0x0, 0xfff, 0x1400, 0x9, 0x3ff, 0xffffffff}}}}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r5 = socket$inet6(0xa, 0x80002, 0x88) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000200)={0xf0000000}) close(0x3) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 12.42814853s ago: executing program 2 (id=1634): socket$unix(0x1, 0x0, 0x0) r0 = userfaultfd(0x1) madvise(&(0x7f0000653000/0x4000)=nil, 0x4000, 0x15) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_settime(0xffffffffffffffff, 0x2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40090) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x9, 0x80, 0x0, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x400000000002000, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) 12.42548881s ago: executing program 5 (id=1635): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x398, 0x2a0, 0xffffffff, 0xe0, 0x188, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @timestamp_reply={0xe, 0x0, 0x0, 0xfff, 0x1400, 0x9, 0x3ff, 0xffffffff}}}}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r6 = socket$inet6(0xa, 0x80002, 0x88) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000200)={0xf0000000}) close(0x3) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x9c, 0x0, 0x0, 0xff7ff036}, {0x6, 0x0, 0xfe, 0xfffffffe}]}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000000100)=""/28, 0x1c, 0x0, &(0x7f0000000340)=""/68, 0x44}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000007f000000000000000800000091114f00000000009500000000230000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 11.417158768s ago: executing program 1 (id=1636): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x141) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r3, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f00000014c0)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) close_range(r2, 0xffffffffffffffff, 0x0) r4 = io_uring_setup(0x1c79, 0x0) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10.876211166s ago: executing program 4 (id=1637): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x398, 0x2a0, 0xffffffff, 0xe0, 0x188, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @timestamp_reply={0xe, 0x0, 0x0, 0xfff, 0x1400, 0x9, 0x3ff, 0xffffffff}}}}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r5 = socket$inet6(0xa, 0x80002, 0x88) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000200)={0xf0000000}) 10.872906595s ago: executing program 0 (id=1638): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000280)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = memfd_create(&(0x7f0000000180)='[\vx\'\xa5)\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\t\x00\x00\x00\x10\xc7\x00^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x99\x83\xcd\b\xd1\x02R\xae\x80\xd2}\xf5\xe4\x9f5\x9b7\xaf\xb7o\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000004840)={0x2020}, 0x2020) semget$private(0x0, 0x4, 0x4f0) read$FUSE(0xffffffffffffffff, &(0x7f0000002800)={0x2020}, 0x2073) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f00000002c0)=ANY=[]) write$binfmt_script(r3, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\t\t'}, {0x20, '\xb4\xd4\t$3\x95\\\x83\xdc\xc9\xae\xacqt\xd3cY\x0eQ\xcd\xc0\x88\x82\x13\x9b\xb3\xa0\xd0\xdc!\x9f0\xf7C\x8c\xb99\x84\x15\x8e\xdbd\x89\xfeE\xd5V1tW\xdd\xf2\xd0\x9d\xb0?\xf5Na\xe7\xecq\x17\xbca\xe5\xab\xf1]\xe3B\xa7\x9f\xf4\x1c\x19F\x88\x0e%\x91%\xe8\xcb]t\xb9d\xcd\x18\xcc\xa4\xbf\xe1\x0e\xb3\x18\x9e\xab\xaf\xcc\xd9\x9f,\xd8\xc5n_O!\x00\v\xd5\x02\xd5\x9f\xdbL\xbd\xe4\xaa(\xbf\xb4\x9eU\x802\xf7K\x06\xd1E\x01\xa73\xadb\xbcuJ\xce\x87Ft2\xcdO\xfc?\xb71E\x85\r\xfb\xb1\xb6TL'}]}, 0xaf) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x239f, &(0x7f0000000380)=0x0) io_submit(r5, 0x477f, &(0x7f0000000b40)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x7, 0x8, r4, 0x0}]) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1000000004, 0x10000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x3, 0x0, 0x0, 0x6, 0x45, 0x2, 0x7, 0x18}) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7f, 0x0) 9.720621998s ago: executing program 1 (id=1639): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000280)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = memfd_create(&(0x7f0000000180)='[\vx\'\xa5)\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\t\x00\x00\x00\x10\xc7\x00^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x99\x83\xcd\b\xd1\x02R\xae\x80\xd2}\xf5\xe4\x9f5\x9b7\xaf\xb7o\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000004840)={0x2020}, 0x2020) semget$private(0x0, 0x4, 0x4f0) read$FUSE(r4, &(0x7f0000002800)={0x2020}, 0x2073) write$binfmt_script(r3, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\t\t'}, {0x20, '\xb4\xd4\t$3\x95\\\x83\xdc\xc9\xae\xacqt\xd3cY\x0eQ\xcd\xc0\x88\x82\x13\x9b\xb3\xa0\xd0\xdc!\x9f0\xf7C\x8c\xb99\x84\x15\x8e\xdbd\x89\xfeE\xd5V1tW\xdd\xf2\xd0\x9d\xb0?\xf5Na\xe7\xecq\x17\xbca\xe5\xab\xf1]\xe3B\xa7\x9f\xf4\x1c\x19F\x88\x0e%\x91%\xe8\xcb]t\xb9d\xcd\x18\xcc\xa4\xbf\xe1\x0e\xb3\x18\x9e\xab\xaf\xcc\xd9\x9f,\xd8\xc5n_O!\x00\v\xd5\x02\xd5\x9f\xdbL\xbd\xe4\xaa(\xbf\xb4\x9eU\x802\xf7K\x06\xd1E\x01\xa73\xadb\xbcuJ\xce\x87Ft2\xcdO\xfc?\xb71E\x85\r\xfb\xb1\xb6TL'}]}, 0xaf) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x239f, &(0x7f0000000380)=0x0) io_submit(r6, 0x477f, &(0x7f0000000b40)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x7, 0x8, r5, 0x0}]) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1000000004, 0x10000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x3, 0x0, 0x0, 0x6, 0x45, 0x2, 0x7, 0x18}) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7f, 0x0) 9.688053903s ago: executing program 5 (id=1640): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x398, 0x2a0, 0xffffffff, 0xe0, 0x188, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @timestamp_reply={0xe, 0x0, 0x0, 0xfff, 0x1400, 0x9, 0x3ff, 0xffffffff}}}}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r5 = socket$inet6(0xa, 0x80002, 0x88) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000200)={0xf0000000}) close(0x3) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000000100)=""/28, 0x1c, 0x0, &(0x7f0000000340)=""/68, 0x44}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000007f000000000000000800000091114f00000000009500000000230000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c30500000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0}, 0x94) 9.682106272s ago: executing program 4 (id=1641): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x398, 0x2a0, 0xffffffff, 0xe0, 0x188, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @timestamp_reply={0xe, 0x0, 0x0, 0xfff, 0x1400, 0x9, 0x3ff, 0xffffffff}}}}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r6 = socket$inet6(0xa, 0x80002, 0x88) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000200)={0xf0000000}) close(0x3) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x9c, 0x0, 0x0, 0xff7ff036}, {0x6, 0x0, 0xfe, 0xfffffffe}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000007f000000000000000800000091114f00000000009500000000230000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c30500000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.657920777s ago: executing program 0 (id=1642): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x398, 0x2a0, 0xffffffff, 0xe0, 0x188, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @timestamp_reply={0xe, 0x0, 0x0, 0xfff, 0x1400, 0x9, 0x3ff, 0xffffffff}}}}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r5 = socket$inet6(0xa, 0x80002, 0x88) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000200)={0xf0000000}) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000000100)=""/28, 0x1c, 0x0, &(0x7f0000000340)=""/68, 0x44}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000007f000000000000000800000091114f00000000009500000000230000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c30500000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0}, 0x94) 9.637158674s ago: executing program 2 (id=1643): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000280)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = memfd_create(&(0x7f0000000180)='[\vx\'\xa5)\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\t\x00\x00\x00\x10\xc7\x00^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x99\x83\xcd\b\xd1\x02R\xae\x80\xd2}\xf5\xe4\x9f5\x9b7\xaf\xb7o\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000004840)={0x2020}, 0x2020) read$FUSE(r4, &(0x7f0000002800)={0x2020}, 0x2073) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f00000002c0)=ANY=[]) write$binfmt_script(r3, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\t\t'}, {0x20, '\xb4\xd4\t$3\x95\\\x83\xdc\xc9\xae\xacqt\xd3cY\x0eQ\xcd\xc0\x88\x82\x13\x9b\xb3\xa0\xd0\xdc!\x9f0\xf7C\x8c\xb99\x84\x15\x8e\xdbd\x89\xfeE\xd5V1tW\xdd\xf2\xd0\x9d\xb0?\xf5Na\xe7\xecq\x17\xbca\xe5\xab\xf1]\xe3B\xa7\x9f\xf4\x1c\x19F\x88\x0e%\x91%\xe8\xcb]t\xb9d\xcd\x18\xcc\xa4\xbf\xe1\x0e\xb3\x18\x9e\xab\xaf\xcc\xd9\x9f,\xd8\xc5n_O!\x00\v\xd5\x02\xd5\x9f\xdbL\xbd\xe4\xaa(\xbf\xb4\x9eU\x802\xf7K\x06\xd1E\x01\xa73\xadb\xbcuJ\xce\x87Ft2\xcdO\xfc?\xb71E\x85\r\xfb\xb1\xb6TL'}]}, 0xaf) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x239f, &(0x7f0000000380)=0x0) io_submit(r6, 0x477f, &(0x7f0000000b40)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x7, 0x8, r5, 0x0}]) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1000000004, 0x10000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x3, 0x0, 0x0, 0x6, 0x45, 0x2, 0x7, 0x18}) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7f, 0x0) 6.823650944s ago: executing program 5 (id=1644): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x398, 0x2a0, 0xffffffff, 0xe0, 0x188, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @timestamp_reply={0xe, 0x0, 0x0, 0xfff, 0x1400, 0x9, 0x3ff, 0xffffffff}}}}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r5 = socket$inet6(0xa, 0x80002, 0x88) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000200)={0xf0000000}) close(0x3) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000000100)=""/28, 0x1c, 0x0, &(0x7f0000000340)=""/68, 0x44}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000007f000000000000000800000091114f00000000009500000000230000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c30500000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0}, 0x94) 6.821956084s ago: executing program 0 (id=1645): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x398, 0x2a0, 0xffffffff, 0xe0, 0x188, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @timestamp_reply={0xe, 0x0, 0x0, 0xfff, 0x1400, 0x9, 0x3ff, 0xffffffff}}}}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r4 = socket$inet6(0xa, 0x80002, 0x88) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000200)={0xf0000000}) close(0x3) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000000100)=""/28, 0x1c, 0x0, &(0x7f0000000340)=""/68, 0x44}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000007f000000000000000800000091114f00000000009500000000230000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c30500000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0}, 0x94) 6.820486814s ago: executing program 4 (id=1646): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x64, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, r2, 0x51b0b}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_LOCAL={0x14, 0x6, @remote}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmmsg$inet(r0, 0x0, 0x0, 0x4000080) 6.782114277s ago: executing program 1 (id=1647): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000280)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = memfd_create(&(0x7f0000000180)='[\vx\'\xa5)\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\t\x00\x00\x00\x10\xc7\x00^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x99\x83\xcd\b\xd1\x02R\xae\x80\xd2}\xf5\xe4\x9f5\x9b7\xaf\xb7o\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000004840)={0x2020}, 0x2020) semget$private(0x0, 0x4, 0x4f0) read$FUSE(r4, &(0x7f0000002800)={0x2020}, 0x2073) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f00000002c0)=ANY=[]) write$binfmt_script(r3, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\t\t'}, {0x20, '\xb4\xd4\t$3\x95\\\x83\xdc\xc9\xae\xacqt\xd3cY\x0eQ\xcd\xc0\x88\x82\x13\x9b\xb3\xa0\xd0\xdc!\x9f0\xf7C\x8c\xb99\x84\x15\x8e\xdbd\x89\xfeE\xd5V1tW\xdd\xf2\xd0\x9d\xb0?\xf5Na\xe7\xecq\x17\xbca\xe5\xab\xf1]\xe3B\xa7\x9f\xf4\x1c\x19F\x88\x0e%\x91%\xe8\xcb]t\xb9d\xcd\x18\xcc\xa4\xbf\xe1\x0e\xb3\x18\x9e\xab\xaf\xcc\xd9\x9f,\xd8\xc5n_O!\x00\v\xd5\x02\xd5\x9f\xdbL\xbd\xe4\xaa(\xbf\xb4\x9eU\x802\xf7K\x06\xd1E\x01\xa73\xadb\xbcuJ\xce\x87Ft2\xcdO\xfc?\xb71E\x85\r\xfb\xb1\xb6TL'}]}, 0xaf) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x239f, &(0x7f0000000380)=0x0) io_submit(r5, 0x477f, &(0x7f0000000b40)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x7, 0x8, 0xffffffffffffffff, 0x0}]) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1000000004, 0x10000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x3, 0x0, 0x0, 0x6, 0x45, 0x2, 0x7, 0x18}) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7f, 0x0) 6.752246422s ago: executing program 4 (id=1648): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) clock_adjtime(0xffffffd3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYRES32], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x88031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) recvmsg$unix(r2, 0x0, 0x100) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) waitid(0x1, 0x0, 0x0, 0x80000004, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcb, &(0x7f0000000280)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @local}}, 0x5c) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001f80)={0x14, 0x3b, 0x107, 0x0, 0x0, {0x4, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x20006940}, 0xc000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file1\x00', 0x800011, &(0x7f0000000a00)=ANY=[@ANYRES16=0x0, @ANYRES16=r6, @ANYRESDEC, @ANYRES32, @ANYBLOB="e34fef60310d8cf8b38314a774f0fa06a4f1e0a0d12f3e17794e0670c41c48144163ab7c06110af0ccfe0a945c94e8c446b483c1261b2d1c60bb4c50ee09185715da09b32c95c220be58f921de50529f5ef243c442050f3b0c826e2829f13898c1d3a783dfa7f74798240321a2c203e6b890db4dcbe78c9cf00677c16a9f051ffd869e950f5bc3e5b41fc465cf1e57ddc678583b3f7a123595c246ffe8da4f82090167708b60b99adb182cf5c389b47bb77748350d2b98d429d4f0af73bf4976000000000000000000", @ANYRES16, @ANYRES32], 0x0, 0x32b, &(0x7f0000000340)="$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") 4.753166451s ago: executing program 0 (id=1649): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x398, 0x2a0, 0xffffffff, 0xe0, 0x188, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @timestamp_reply={0xe, 0x0, 0x0, 0xfff, 0x1400, 0x9, 0x3ff, 0xffffffff}}}}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0xf0000000}) close(0x3) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000000100)=""/28, 0x1c, 0x0, &(0x7f0000000340)=""/68, 0x44}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000007f000000000000000800000091114f00000000009500000000230000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c30500000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0}, 0x94) 4.702231812s ago: executing program 2 (id=1650): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x398, 0x2a0, 0xffffffff, 0xe0, 0x188, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @timestamp_reply={0xe, 0x0, 0x0, 0xfff, 0x1400, 0x9, 0x3ff, 0xffffffff}}}}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r5 = socket$inet6(0xa, 0x80002, 0x88) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000200)={0xf0000000}) close(0x3) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000000100)=""/28, 0x1c, 0x0, &(0x7f0000000340)=""/68, 0x44}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000007f000000000000000800000091114f00000000009500000000230000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c30500000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0}, 0x94) 4.68946487s ago: executing program 1 (id=1651): syz_open_dev$ttys(0xc, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x29, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) r5 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) sendto$packet(r4, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r6, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) recvmmsg(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) 3.492461536s ago: executing program 0 (id=1652): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r4, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r4, 0x0, 0x12, &(0x7f0000000180)=0x101, 0x4) recvmmsg(r4, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 3.490635745s ago: executing program 5 (id=1653): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x398, 0x2a0, 0xffffffff, 0xe0, 0x188, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @timestamp_reply={0xe, 0x0, 0x0, 0xfff, 0x1400, 0x9, 0x3ff, 0xffffffff}}}}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r6 = socket$inet6(0xa, 0x80002, 0x88) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000200)={0xf0000000}) close(0x3) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x9c, 0x0, 0x0, 0xff7ff036}, {0x6, 0x0, 0xfe, 0xfffffffe}]}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000000100)=""/28, 0x1c, 0x0, &(0x7f0000000340)=""/68, 0x44}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000007f000000000000000800000091114f00000000009500000000230000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c30500000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0}, 0x94) 3.489638565s ago: executing program 4 (id=1654): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000280)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000004840)={0x2020}, 0x2020) semget$private(0x0, 0x4, 0x4f0) read$FUSE(r3, &(0x7f0000002800)={0x2020}, 0x2073) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f00000002c0)=ANY=[]) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\t\t'}, {0x20, '\xb4\xd4\t$3\x95\\\x83\xdc\xc9\xae\xacqt\xd3cY\x0eQ\xcd\xc0\x88\x82\x13\x9b\xb3\xa0\xd0\xdc!\x9f0\xf7C\x8c\xb99\x84\x15\x8e\xdbd\x89\xfeE\xd5V1tW\xdd\xf2\xd0\x9d\xb0?\xf5Na\xe7\xecq\x17\xbca\xe5\xab\xf1]\xe3B\xa7\x9f\xf4\x1c\x19F\x88\x0e%\x91%\xe8\xcb]t\xb9d\xcd\x18\xcc\xa4\xbf\xe1\x0e\xb3\x18\x9e\xab\xaf\xcc\xd9\x9f,\xd8\xc5n_O!\x00\v\xd5\x02\xd5\x9f\xdbL\xbd\xe4\xaa(\xbf\xb4\x9eU\x802\xf7K\x06\xd1E\x01\xa73\xadb\xbcuJ\xce\x87Ft2\xcdO\xfc?\xb71E\x85\r\xfb\xb1\xb6TL'}]}, 0xaf) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x239f, &(0x7f0000000380)=0x0) io_submit(r5, 0x477f, &(0x7f0000000b40)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x7, 0x8, r4, 0x0}]) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1000000004, 0x10000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x3, 0x0, 0x0, 0x6, 0x45, 0x2, 0x7, 0x18}) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7f, 0x0) 3.45842234s ago: executing program 2 (id=1655): syz_open_dev$ttys(0xc, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x29, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) r5 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) sendto$packet(r4, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r6, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) recvmmsg(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 115.58586ms ago: executing program 0 (id=1656): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000280)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000004840)={0x2020}, 0x2020) semget$private(0x0, 0x4, 0x4f0) read$FUSE(r3, &(0x7f0000002800)={0x2020}, 0x2073) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f00000002c0)=ANY=[]) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\t\t'}, {0x20, '\xb4\xd4\t$3\x95\\\x83\xdc\xc9\xae\xacqt\xd3cY\x0eQ\xcd\xc0\x88\x82\x13\x9b\xb3\xa0\xd0\xdc!\x9f0\xf7C\x8c\xb99\x84\x15\x8e\xdbd\x89\xfeE\xd5V1tW\xdd\xf2\xd0\x9d\xb0?\xf5Na\xe7\xecq\x17\xbca\xe5\xab\xf1]\xe3B\xa7\x9f\xf4\x1c\x19F\x88\x0e%\x91%\xe8\xcb]t\xb9d\xcd\x18\xcc\xa4\xbf\xe1\x0e\xb3\x18\x9e\xab\xaf\xcc\xd9\x9f,\xd8\xc5n_O!\x00\v\xd5\x02\xd5\x9f\xdbL\xbd\xe4\xaa(\xbf\xb4\x9eU\x802\xf7K\x06\xd1E\x01\xa73\xadb\xbcuJ\xce\x87Ft2\xcdO\xfc?\xb71E\x85\r\xfb\xb1\xb6TL'}]}, 0xaf) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x239f, &(0x7f0000000380)=0x0) io_submit(r5, 0x477f, &(0x7f0000000b40)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x7, 0x8, r4, 0x0}]) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1000000004, 0x10000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x3, 0x0, 0x0, 0x6, 0x45, 0x2, 0x7, 0x18}) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7f, 0x0) 71.104502ms ago: executing program 5 (id=1657): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x4000) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x64) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x80802, 0x100) sendfile(r1, r1, 0x0, 0xe3aa6ea) 0s ago: executing program 1 (id=1658): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000280)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = memfd_create(&(0x7f0000000180)='[\vx\'\xa5)\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\t\x00\x00\x00\x10\xc7\x00^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x99\x83\xcd\b\xd1\x02R\xae\x80\xd2}\xf5\xe4\x9f5\x9b7\xaf\xb7o\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) semget$private(0x0, 0x4, 0x4f0) read$FUSE(r4, &(0x7f0000002800)={0x2020}, 0x2073) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f00000002c0)=ANY=[]) write$binfmt_script(r3, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\t\t'}, {0x20, '\xb4\xd4\t$3\x95\\\x83\xdc\xc9\xae\xacqt\xd3cY\x0eQ\xcd\xc0\x88\x82\x13\x9b\xb3\xa0\xd0\xdc!\x9f0\xf7C\x8c\xb99\x84\x15\x8e\xdbd\x89\xfeE\xd5V1tW\xdd\xf2\xd0\x9d\xb0?\xf5Na\xe7\xecq\x17\xbca\xe5\xab\xf1]\xe3B\xa7\x9f\xf4\x1c\x19F\x88\x0e%\x91%\xe8\xcb]t\xb9d\xcd\x18\xcc\xa4\xbf\xe1\x0e\xb3\x18\x9e\xab\xaf\xcc\xd9\x9f,\xd8\xc5n_O!\x00\v\xd5\x02\xd5\x9f\xdbL\xbd\xe4\xaa(\xbf\xb4\x9eU\x802\xf7K\x06\xd1E\x01\xa73\xadb\xbcuJ\xce\x87Ft2\xcdO\xfc?\xb71E\x85\r\xfb\xb1\xb6TL'}]}, 0xaf) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x239f, &(0x7f0000000380)=0x0) io_submit(r6, 0x477f, &(0x7f0000000b40)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x7, 0x8, r5, 0x0}]) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1000000004, 0x10000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x3, 0x0, 0x0, 0x6, 0x45, 0x2, 0x7, 0x18}) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7f, 0x0) kernel console output (not intermixed with test programs): my0 [ 220.263908][ T7137] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 220.786861][ T7159] overlayfs: missing 'workdir' [ 225.983889][ T7218] loop3: detected capacity change from 0 to 1024 [ 225.985378][ T7218] EXT4-fs: Ignoring removed nomblk_io_submit option [ 226.092150][ T7225] overlayfs: missing 'workdir' [ 226.124227][ T7218] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 226.949570][ T4322] EXT4-fs (loop3): unmounting filesystem. [ 229.986427][ T27] kauditd_printk_skb: 32 callbacks suppressed [ 229.986554][ T27] audit: type=1326 audit(229.460:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7260 comm="syz.0.642" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92b77ee8 code=0x7ffc0000 [ 229.991482][ T27] audit: type=1326 audit(229.460:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7260 comm="syz.0.642" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92b77ee8 code=0x7ffc0000 [ 230.009080][ T27] audit: type=1326 audit(229.670:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7260 comm="syz.0.642" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=275 compat=0 ip=0xffff92b77ee8 code=0x7ffc0000 [ 230.012565][ T27] audit: type=1326 audit(229.670:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7260 comm="syz.0.642" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92b77ee8 code=0x7ffc0000 [ 230.029352][ T27] audit: type=1326 audit(229.670:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7260 comm="syz.0.642" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92b77ee8 code=0x7ffc0000 [ 230.049271][ T27] audit: type=1326 audit(229.850:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7260 comm="syz.0.642" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=34 compat=0 ip=0xffff92b77ee8 code=0x7ffc0000 [ 230.052795][ T27] audit: type=1326 audit(229.850:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7260 comm="syz.0.642" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92b77ee8 code=0x7ffc0000 [ 230.057892][ T7258] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.059213][ T7258] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.059374][ T27] audit: type=1326 audit(229.850:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7260 comm="syz.0.642" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92b77ee8 code=0x7ffc0000 [ 230.069128][ T27] audit: type=1326 audit(229.950:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7260 comm="syz.0.642" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffff92b77ee8 code=0x7ffc0000 [ 230.072542][ T27] audit: type=1326 audit(229.950:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7260 comm="syz.0.642" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92b77ee8 code=0x7ffc0000 [ 230.207339][ T7262] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 230.497515][ T7258] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.512619][ T7258] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.593299][ T7281] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 230.819510][ T7258] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.820992][ T7258] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.822606][ T7258] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.824189][ T7258] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.133841][ T7298] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 232.223792][ T7303] loop4: detected capacity change from 0 to 1024 [ 232.225203][ T7303] EXT4-fs: Ignoring removed nomblk_io_submit option [ 233.781896][ T7303] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 235.060064][ T6283] EXT4-fs (loop4): unmounting filesystem. [ 239.129395][ T27] kauditd_printk_skb: 40 callbacks suppressed [ 239.129549][ T27] audit: type=1326 audit(238.520:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7401 comm="syz.1.670" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9977ee8 code=0x7ffc0000 [ 239.222869][ T7413] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 239.332221][ T27] audit: type=1326 audit(238.520:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7401 comm="syz.1.670" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9977ee8 code=0x7ffc0000 [ 239.348234][ T27] audit: type=1326 audit(238.530:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7401 comm="syz.1.670" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=275 compat=0 ip=0xffffb9977ee8 code=0x7ffc0000 [ 239.351766][ T27] audit: type=1326 audit(238.530:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7401 comm="syz.1.670" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9977ee8 code=0x7ffc0000 [ 239.435455][ T27] audit: type=1326 audit(238.530:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7401 comm="syz.1.670" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9977ee8 code=0x7ffc0000 [ 239.438960][ T27] audit: type=1326 audit(238.530:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7401 comm="syz.1.670" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=34 compat=0 ip=0xffffb9977ee8 code=0x7ffc0000 [ 239.490682][ T27] audit: type=1326 audit(238.530:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7401 comm="syz.1.670" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9977ee8 code=0x7ffc0000 [ 239.500779][ T27] audit: type=1326 audit(238.530:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7401 comm="syz.1.670" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9977ee8 code=0x7ffc0000 [ 239.510896][ T27] audit: type=1326 audit(238.530:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7401 comm="syz.1.670" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffffb9977ee8 code=0x7ffc0000 [ 239.516772][ T27] audit: type=1326 audit(238.530:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7401 comm="syz.1.670" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9977ee8 code=0x7ffc0000 [ 241.913369][ T7447] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 243.466667][ T7468] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 244.529961][ T27] kauditd_printk_skb: 54 callbacks suppressed [ 244.529975][ T27] audit: type=1326 audit(243.710:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.0.684" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92b77ee8 code=0x7ffc0000 [ 244.539170][ T27] audit: type=1326 audit(243.710:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.0.684" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=275 compat=0 ip=0xffff92b77ee8 code=0x7ffc0000 [ 244.543627][ T27] audit: type=1326 audit(243.710:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.0.684" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92b77ee8 code=0x7ffc0000 [ 244.547881][ T27] audit: type=1326 audit(243.710:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.0.684" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92b77ee8 code=0x7ffc0000 [ 244.551643][ T27] audit: type=1326 audit(243.710:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.0.684" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=34 compat=0 ip=0xffff92b77ee8 code=0x7ffc0000 [ 244.554959][ T27] audit: type=1326 audit(243.710:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.0.684" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92b77ee8 code=0x7ffc0000 [ 244.558205][ T27] audit: type=1326 audit(243.710:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.0.684" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92b77ee8 code=0x7ffc0000 [ 244.561849][ T27] audit: type=1326 audit(243.710:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.0.684" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffff92b77ee8 code=0x7ffc0000 [ 244.565324][ T27] audit: type=1326 audit(243.710:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.0.684" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92b77ee8 code=0x7ffc0000 [ 244.568924][ T27] audit: type=1326 audit(243.710:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.0.684" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92b77ee8 code=0x7ffc0000 [ 244.687874][ T7489] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 244.845912][ T7492] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 246.947323][ T7511] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 247.343848][ T7528] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 247.840093][ T7536] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 248.485360][ T7543] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 248.813982][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.816269][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 248.906332][ T7553] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.907714][ T7553] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.981238][ T7565] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 249.311988][ T7553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.327320][ T7553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.630077][ T7553] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.631558][ T7553] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.635719][ T7553] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.637112][ T7553] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.580383][ T27] kauditd_printk_skb: 99 callbacks suppressed [ 250.580392][ T27] audit: type=1326 audit(250.560:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7586 comm="syz.1.709" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9977ee8 code=0x7ffc0000 [ 250.591837][ T27] audit: type=1326 audit(250.570:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7586 comm="syz.1.709" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9977ee8 code=0x7ffc0000 [ 250.597052][ T27] audit: type=1326 audit(250.580:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7586 comm="syz.1.709" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=275 compat=0 ip=0xffffb9977ee8 code=0x7ffc0000 [ 250.600477][ T27] audit: type=1326 audit(250.580:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7586 comm="syz.1.709" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9977ee8 code=0x7ffc0000 [ 250.620630][ T27] audit: type=1326 audit(250.580:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7586 comm="syz.1.709" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9977ee8 code=0x7ffc0000 [ 250.631721][ T27] audit: type=1326 audit(250.590:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7586 comm="syz.1.709" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=34 compat=0 ip=0xffffb9977ee8 code=0x7ffc0000 [ 250.641533][ T27] audit: type=1326 audit(250.590:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7586 comm="syz.1.709" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9977ee8 code=0x7ffc0000 [ 250.652187][ T27] audit: type=1326 audit(250.590:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7586 comm="syz.1.709" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9977ee8 code=0x7ffc0000 [ 250.663885][ T27] audit: type=1326 audit(250.590:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7586 comm="syz.1.709" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffffb9977ee8 code=0x7ffc0000 [ 250.682192][ T27] audit: type=1326 audit(250.590:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7586 comm="syz.1.709" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9977ee8 code=0x7ffc0000 [ 250.816898][ T7599] loop0: detected capacity change from 0 to 1024 [ 250.818394][ T7599] EXT4-fs: Ignoring removed nomblk_io_submit option [ 250.862511][ T7599] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 250.876393][ T7595] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.877718][ T7595] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.648377][ T7593] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 251.669839][ T6317] EXT4-fs (loop0): unmounting filesystem. [ 251.691449][ T7595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.730190][ T7595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.714371][ T7614] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 252.890521][ T7595] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.892102][ T7595] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.896311][ T7595] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.897924][ T7595] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.143448][ T7620] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 254.068836][ T7637] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 254.810221][ T7654] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 257.039131][ T7680] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 257.229423][ T27] kauditd_printk_skb: 95 callbacks suppressed [ 257.229438][ T27] audit: type=1326 audit(256.440:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.3.730" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96f77ee8 code=0x7ffc0000 [ 257.234320][ T27] audit: type=1326 audit(256.440:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.3.730" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96f77ee8 code=0x7ffc0000 [ 257.237642][ T27] audit: type=1326 audit(256.460:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.3.730" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=275 compat=0 ip=0xffff96f77ee8 code=0x7ffc0000 [ 257.240984][ T27] audit: type=1326 audit(256.460:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.3.730" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96f77ee8 code=0x7ffc0000 [ 257.244545][ T27] audit: type=1326 audit(256.460:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.3.730" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96f77ee8 code=0x7ffc0000 [ 257.248081][ T27] audit: type=1326 audit(256.460:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.3.730" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=34 compat=0 ip=0xffff96f77ee8 code=0x7ffc0000 [ 257.251534][ T27] audit: type=1326 audit(256.460:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.3.730" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96f77ee8 code=0x7ffc0000 [ 257.254928][ T27] audit: type=1326 audit(256.460:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.3.730" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96f77ee8 code=0x7ffc0000 [ 257.258184][ T27] audit: type=1326 audit(256.470:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.3.730" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffff96f77ee8 code=0x7ffc0000 [ 257.261525][ T27] audit: type=1326 audit(256.470:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.3.730" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96f77ee8 code=0x7ffc0000 [ 260.626208][ T7710] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 260.627425][ T7723] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 262.265814][ T27] kauditd_printk_skb: 45 callbacks suppressed [ 262.265858][ T27] audit: type=1326 audit(261.730:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7754 comm="syz.4.750" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93177ee8 code=0x7ffc0000 [ 262.266206][ T27] audit: type=1326 audit(261.730:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7754 comm="syz.4.750" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93177ee8 code=0x7ffc0000 [ 262.267024][ T27] audit: type=1326 audit(261.750:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7754 comm="syz.4.750" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=275 compat=0 ip=0xffff93177ee8 code=0x7ffc0000 [ 262.267588][ T27] audit: type=1326 audit(261.760:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7754 comm="syz.4.750" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93177ee8 code=0x7ffc0000 [ 262.268054][ T27] audit: type=1326 audit(261.760:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7754 comm="syz.4.750" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93177ee8 code=0x7ffc0000 [ 262.268684][ T27] audit: type=1326 audit(261.760:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7754 comm="syz.4.750" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=34 compat=0 ip=0xffff93177ee8 code=0x7ffc0000 [ 262.269379][ T27] audit: type=1326 audit(261.760:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7754 comm="syz.4.750" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93177ee8 code=0x7ffc0000 [ 262.270059][ T27] audit: type=1326 audit(261.760:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7754 comm="syz.4.750" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93177ee8 code=0x7ffc0000 [ 262.274385][ T27] audit: type=1326 audit(261.770:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7754 comm="syz.4.750" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffff93177ee8 code=0x7ffc0000 [ 262.274667][ T27] audit: type=1326 audit(261.770:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7754 comm="syz.4.750" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93177ee8 code=0x7ffc0000 [ 262.331796][ T7764] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 262.594367][ T4323] Bluetooth: hci4: command 0x0406 tx timeout [ 262.595328][ T4323] Bluetooth: hci3: command 0x0406 tx timeout [ 266.825465][ T7828] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 267.620964][ T27] kauditd_printk_skb: 32 callbacks suppressed [ 267.620977][ T27] audit: type=1326 audit(267.600:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7851 comm="syz.0.772" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92b77ee8 code=0x7ffc0000 [ 267.627513][ T27] audit: type=1326 audit(267.600:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7851 comm="syz.0.772" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92b77ee8 code=0x7ffc0000 [ 267.643889][ T27] audit: type=1326 audit(267.600:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7851 comm="syz.0.772" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=275 compat=0 ip=0xffff92b77ee8 code=0x7ffc0000 [ 267.647530][ T27] audit: type=1326 audit(267.600:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7851 comm="syz.0.772" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92b77ee8 code=0x7ffc0000 [ 267.650940][ T27] audit: type=1326 audit(267.600:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7851 comm="syz.0.772" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92b77ee8 code=0x7ffc0000 [ 267.663353][ T27] audit: type=1326 audit(267.600:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7851 comm="syz.0.772" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=34 compat=0 ip=0xffff92b77ee8 code=0x7ffc0000 [ 267.669527][ T27] audit: type=1326 audit(267.600:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7851 comm="syz.0.772" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92b77ee8 code=0x7ffc0000 [ 267.849875][ T27] audit: type=1326 audit(267.600:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7851 comm="syz.0.772" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92b77ee8 code=0x7ffc0000 [ 267.853482][ T27] audit: type=1326 audit(267.600:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7851 comm="syz.0.772" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffff92b77ee8 code=0x7ffc0000 [ 267.857291][ T27] audit: type=1326 audit(267.600:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7851 comm="syz.0.772" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92b77ee8 code=0x7ffc0000 [ 268.079327][ T7856] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 268.183898][ T7868] loop1: detected capacity change from 0 to 128 [ 268.186474][ T7868] EXT4-fs warning (device loop1): ext4_init_metadata_csum:4556: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 268.188580][ T7868] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 268.246835][ T6785] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 270.083265][ T7893] Device name cannot be null; rc = [-22] [ 272.478888][ T7932] loop4: detected capacity change from 0 to 128 [ 272.480572][ T7932] EXT4-fs warning (device loop4): ext4_init_metadata_csum:4556: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 272.485916][ T7932] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 272.499877][ T6785] udevd[6785]: incorrect jbd checksum on /dev/loop4 [ 272.516461][ T6785] udevd[6785]: incorrect jbd checksum on /dev/loop4 [ 272.562733][ T7933] device syzkaller0 entered promiscuous mode [ 274.336314][ T7954] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 274.982959][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 274.982974][ T27] audit: type=1326 audit(274.670:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7958 comm="syz.1.800" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9977ee8 code=0x7ffc0000 [ 274.987414][ T27] audit: type=1326 audit(274.670:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7958 comm="syz.1.800" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9977ee8 code=0x7ffc0000 [ 274.995445][ T27] audit: type=1326 audit(274.700:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7958 comm="syz.1.800" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=275 compat=0 ip=0xffffb9977ee8 code=0x7ffc0000 [ 274.998804][ T27] audit: type=1326 audit(274.700:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7958 comm="syz.1.800" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9977ee8 code=0x7ffc0000 [ 275.002306][ T27] audit: type=1326 audit(274.700:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7958 comm="syz.1.800" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9977ee8 code=0x7ffc0000 [ 275.023547][ T27] audit: type=1326 audit(274.730:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7958 comm="syz.1.800" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=34 compat=0 ip=0xffffb9977ee8 code=0x7ffc0000 [ 275.036852][ T27] audit: type=1326 audit(274.730:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7958 comm="syz.1.800" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9977ee8 code=0x7ffc0000 [ 275.054920][ T27] audit: type=1326 audit(274.730:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7958 comm="syz.1.800" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9977ee8 code=0x7ffc0000 [ 275.073680][ T27] audit: type=1326 audit(274.750:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7958 comm="syz.1.800" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffffb9977ee8 code=0x7ffc0000 [ 275.077155][ T27] audit: type=1326 audit(274.750:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7958 comm="syz.1.800" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9977ee8 code=0x7ffc0000 [ 275.414017][ T7967] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 275.428332][ T7970] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 275.906211][ T7980] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 276.807107][ T7997] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 278.028854][ T8011] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 278.190224][ T8022] device syzkaller0 entered promiscuous mode [ 278.590283][ T8015] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 278.983972][ T8029] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 283.340066][ T8085] Device name cannot be null; rc = [-22] [ 283.763973][ T8087] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 285.027386][ T8102] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 285.519693][ T27] kauditd_printk_skb: 126 callbacks suppressed [ 285.519709][ T27] audit: type=1326 audit(285.500:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8106 comm="syz.3.831" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96f77ee8 code=0x7ffc0000 [ 285.525123][ T27] audit: type=1326 audit(285.500:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8106 comm="syz.3.831" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96f77ee8 code=0x7ffc0000 [ 285.534101][ T27] audit: type=1326 audit(285.500:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8106 comm="syz.3.831" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=275 compat=0 ip=0xffff96f77ee8 code=0x7ffc0000 [ 285.543834][ T27] audit: type=1326 audit(285.500:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8106 comm="syz.3.831" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96f77ee8 code=0x7ffc0000 [ 285.562961][ T27] audit: type=1326 audit(285.500:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8106 comm="syz.3.831" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96f77ee8 code=0x7ffc0000 [ 285.566210][ T27] audit: type=1326 audit(285.500:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8106 comm="syz.3.831" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=34 compat=0 ip=0xffff96f77ee8 code=0x7ffc0000 [ 285.604244][ T27] audit: type=1326 audit(285.500:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8106 comm="syz.3.831" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96f77ee8 code=0x7ffc0000 [ 285.899864][ T8111] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 285.958414][ T27] audit: type=1326 audit(285.500:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8106 comm="syz.3.831" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96f77ee8 code=0x7ffc0000 [ 285.967504][ T27] audit: type=1326 audit(285.500:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8106 comm="syz.3.831" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffff96f77ee8 code=0x7ffc0000 [ 286.037933][ T27] audit: type=1326 audit(285.500:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8106 comm="syz.3.831" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96f77ee8 code=0x7ffc0000 [ 287.379075][ T8136] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 288.196980][ T8147] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 289.096231][ T8160] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 290.531862][ T8170] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 291.587700][ T8206] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 292.539217][ T8222] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 292.795265][ T8234] Device name cannot be null; rc = [-22] [ 294.036885][ T8245] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 294.734829][ T8261] loop1: detected capacity change from 0 to 1024 [ 294.745993][ T8261] EXT4-fs: Ignoring removed nomblk_io_submit option [ 295.076404][ T8261] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 295.764473][ T27] kauditd_printk_skb: 74 callbacks suppressed [ 295.764506][ T27] audit: type=1326 audit(295.710:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8272 comm="syz.0.864" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92b77ee8 code=0x7ffc0000 [ 295.769021][ T27] audit: type=1326 audit(295.710:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8272 comm="syz.0.864" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92b77ee8 code=0x7ffc0000 [ 295.772384][ T27] audit: type=1326 audit(295.720:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8272 comm="syz.0.864" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=275 compat=0 ip=0xffff92b77ee8 code=0x7ffc0000 [ 295.795667][ T27] audit: type=1326 audit(295.720:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8272 comm="syz.0.864" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92b77ee8 code=0x7ffc0000 [ 295.799169][ T27] audit: type=1326 audit(295.720:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8272 comm="syz.0.864" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92b77ee8 code=0x7ffc0000 [ 295.802571][ T27] audit: type=1326 audit(295.730:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8272 comm="syz.0.864" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=34 compat=0 ip=0xffff92b77ee8 code=0x7ffc0000 [ 295.906333][ T27] audit: type=1326 audit(295.730:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8272 comm="syz.0.864" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92b77ee8 code=0x7ffc0000 [ 295.928982][ T27] audit: type=1326 audit(295.730:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8272 comm="syz.0.864" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92b77ee8 code=0x7ffc0000 [ 295.938312][ T27] audit: type=1326 audit(295.730:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8272 comm="syz.0.864" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffff92b77ee8 code=0x7ffc0000 [ 295.941588][ T27] audit: type=1326 audit(295.730:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8272 comm="syz.0.864" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92b77ee8 code=0x7ffc0000 [ 296.422211][ T8277] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 296.961174][ T8284] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 297.047793][ T6183] EXT4-fs (loop1): unmounting filesystem. [ 297.903841][ T8297] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 299.955843][ T8332] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 299.999333][ T8337] loop0: detected capacity change from 0 to 1024 [ 300.023156][ T8337] EXT4-fs: Ignoring removed nomblk_io_submit option [ 300.833854][ T8337] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 301.379225][ T27] kauditd_printk_skb: 32 callbacks suppressed [ 301.379239][ T27] audit: type=1326 audit(301.100:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8351 comm="syz.3.881" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96f77ee8 code=0x7ffc0000 [ 301.384233][ T27] audit: type=1326 audit(301.100:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8351 comm="syz.3.881" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96f77ee8 code=0x7ffc0000 [ 301.389665][ T27] audit: type=1326 audit(301.120:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8351 comm="syz.3.881" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=275 compat=0 ip=0xffff96f77ee8 code=0x7ffc0000 [ 301.395999][ T27] audit: type=1326 audit(301.120:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8351 comm="syz.3.881" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96f77ee8 code=0x7ffc0000 [ 301.399621][ T27] audit: type=1326 audit(301.120:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8351 comm="syz.3.881" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96f77ee8 code=0x7ffc0000 [ 301.411033][ T27] audit: type=1326 audit(301.120:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8351 comm="syz.3.881" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=34 compat=0 ip=0xffff96f77ee8 code=0x7ffc0000 [ 301.414770][ T27] audit: type=1326 audit(301.120:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8351 comm="syz.3.881" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96f77ee8 code=0x7ffc0000 [ 301.418074][ T27] audit: type=1326 audit(301.120:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8351 comm="syz.3.881" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96f77ee8 code=0x7ffc0000 [ 301.421474][ T27] audit: type=1326 audit(301.130:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8351 comm="syz.3.881" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffff96f77ee8 code=0x7ffc0000 [ 301.425123][ T27] audit: type=1326 audit(301.130:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8351 comm="syz.3.881" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96f77ee8 code=0x7ffc0000 [ 302.049413][ T8358] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 302.746620][ T8366] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 304.117220][ T6317] EXT4-fs (loop0): unmounting filesystem. [ 304.812913][ T8383] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 306.443260][ T8399] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 306.843331][ T8401] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 308.554979][ T8424] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 308.556377][ T27] kauditd_printk_skb: 76 callbacks suppressed [ 308.556402][ T27] audit: type=1326 audit(307.800:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8415 comm="syz.4.896" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93177ee8 code=0x7ffc0000 [ 308.561178][ T27] audit: type=1326 audit(307.800:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8415 comm="syz.4.896" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93177ee8 code=0x7ffc0000 [ 308.712599][ T27] audit: type=1326 audit(307.810:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8415 comm="syz.4.896" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=275 compat=0 ip=0xffff93177ee8 code=0x7ffc0000 [ 308.798145][ T8433] loop2: detected capacity change from 0 to 1024 [ 308.798467][ T27] audit: type=1326 audit(307.810:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8415 comm="syz.4.896" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93177ee8 code=0x7ffc0000 [ 308.800204][ T8433] EXT4-fs: Ignoring removed nomblk_io_submit option [ 308.851444][ T27] audit: type=1326 audit(307.810:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8415 comm="syz.4.896" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93177ee8 code=0x7ffc0000 [ 308.855299][ T27] audit: type=1326 audit(307.810:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8415 comm="syz.4.896" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=34 compat=0 ip=0xffff93177ee8 code=0x7ffc0000 [ 308.858490][ T27] audit: type=1326 audit(307.810:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8415 comm="syz.4.896" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93177ee8 code=0x7ffc0000 [ 308.861818][ T27] audit: type=1326 audit(307.810:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8415 comm="syz.4.896" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93177ee8 code=0x7ffc0000 [ 308.873001][ T27] audit: type=1326 audit(307.810:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8415 comm="syz.4.896" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffff93177ee8 code=0x7ffc0000 [ 308.876807][ T27] audit: type=1326 audit(307.810:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8415 comm="syz.4.896" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93177ee8 code=0x7ffc0000 [ 308.893649][ T8433] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 310.123290][ T5123] EXT4-fs (loop2): unmounting filesystem. [ 310.283000][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.284040][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 312.470724][ T8489] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 312.626586][ T8487] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 313.549342][ T8511] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 313.875207][ T27] kauditd_printk_skb: 32 callbacks suppressed [ 313.875229][ T27] audit: type=1326 audit(313.830:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8515 comm="syz.2.913" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95b77ee8 code=0x7ffc0000 [ 313.879945][ T27] audit: type=1326 audit(313.830:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8515 comm="syz.2.913" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95b77ee8 code=0x7ffc0000 [ 313.891044][ T27] audit: type=1326 audit(313.840:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8515 comm="syz.2.913" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=275 compat=0 ip=0xffff95b77ee8 code=0x7ffc0000 [ 313.967274][ T27] audit: type=1326 audit(313.840:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8515 comm="syz.2.913" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95b77ee8 code=0x7ffc0000 [ 314.051315][ T27] audit: type=1326 audit(313.840:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8515 comm="syz.2.913" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95b77ee8 code=0x7ffc0000 [ 314.065402][ T27] audit: type=1326 audit(313.840:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8515 comm="syz.2.913" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=34 compat=0 ip=0xffff95b77ee8 code=0x7ffc0000 [ 314.068828][ T27] audit: type=1326 audit(313.840:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8515 comm="syz.2.913" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95b77ee8 code=0x7ffc0000 [ 314.072287][ T27] audit: type=1326 audit(313.840:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8515 comm="syz.2.913" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95b77ee8 code=0x7ffc0000 [ 314.102936][ T27] audit: type=1326 audit(313.840:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8515 comm="syz.2.913" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffff95b77ee8 code=0x7ffc0000 [ 314.110643][ T27] audit: type=1326 audit(313.840:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8515 comm="syz.2.913" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95b77ee8 code=0x7ffc0000 [ 314.284563][ T8528] Device name cannot be null; rc = [-22] [ 314.502113][ T8522] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 316.875871][ T8539] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 319.264871][ T27] kauditd_printk_skb: 46 callbacks suppressed [ 319.264886][ T27] audit: type=1326 audit(318.900:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8562 comm="syz.2.922" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95b77ee8 code=0x7ffc0000 [ 319.269185][ T27] audit: type=1326 audit(318.900:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8562 comm="syz.2.922" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95b77ee8 code=0x7ffc0000 [ 319.272535][ T27] audit: type=1326 audit(319.100:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8562 comm="syz.2.922" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=275 compat=0 ip=0xffff95b77ee8 code=0x7ffc0000 [ 319.293687][ T8551] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 319.347557][ T27] audit: type=1326 audit(319.100:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8562 comm="syz.2.922" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95b77ee8 code=0x7ffc0000 [ 319.351024][ T27] audit: type=1326 audit(319.100:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8562 comm="syz.2.922" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95b77ee8 code=0x7ffc0000 [ 319.422261][ T27] audit: type=1326 audit(319.200:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8562 comm="syz.2.922" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=34 compat=0 ip=0xffff95b77ee8 code=0x7ffc0000 [ 319.433751][ T27] audit: type=1326 audit(319.200:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8562 comm="syz.2.922" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95b77ee8 code=0x7ffc0000 [ 319.436829][ T27] audit: type=1326 audit(319.200:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8562 comm="syz.2.922" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95b77ee8 code=0x7ffc0000 [ 319.439948][ T27] audit: type=1326 audit(319.200:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8562 comm="syz.2.922" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffff95b77ee8 code=0x7ffc0000 [ 319.462771][ T27] audit: type=1326 audit(319.200:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8562 comm="syz.2.922" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95b77ee8 code=0x7ffc0000 [ 319.495800][ T8569] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 321.929248][ T4323] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 321.946574][ T4323] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 322.216141][ T4323] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 322.217708][ T4323] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 322.219981][ T4323] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 322.221385][ T4323] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 324.081872][ T8628] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 325.242638][ T4323] Bluetooth: hci5: command 0x0409 tx timeout [ 325.424410][ T8607] chnl_net:caif_netlink_parms(): no params data found [ 325.450153][ T8607] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.451401][ T8607] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.453225][ T8607] device bridge_slave_0 entered promiscuous mode [ 325.455425][ T8607] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.456567][ T8607] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.458097][ T8607] device bridge_slave_1 entered promiscuous mode [ 325.464988][ T8607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.467583][ T8607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.477851][ T8607] team0: Port device team_slave_0 added [ 325.479774][ T8607] team0: Port device team_slave_1 added [ 325.485645][ T8607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.486714][ T8607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.490902][ T8607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.493530][ T8607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.497779][ T8607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.501769][ T8607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.544184][ T8607] device hsr_slave_0 entered promiscuous mode [ 325.616000][ T8607] device hsr_slave_1 entered promiscuous mode [ 326.003642][ T8607] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 326.010293][ T8607] Cannot create hsr debugfs directory [ 326.161188][ T8607] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 326.909654][ T8607] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 327.053220][ T8607] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 328.313799][ T4323] Bluetooth: hci5: command 0x041b tx timeout [ 328.337256][ T8607] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 328.885343][ T8607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.890348][ T8607] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.894935][ T5641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 328.896499][ T5641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 328.907696][ T5641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 328.909655][ T5641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 328.965359][ T5641] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.966596][ T5641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.981494][ T5641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 328.984396][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 328.986018][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 328.987529][ T4550] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.988716][ T4550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.434851][ T4333] Bluetooth: hci5: command 0x040f tx timeout [ 331.370150][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 331.389085][ T8607] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 331.390765][ T8607] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 333.679198][ T4323] Bluetooth: hci5: command 0x0419 tx timeout [ 333.715375][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 333.717376][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 333.719676][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 333.721466][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 333.725949][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 333.727869][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 333.729516][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 333.731361][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 333.737539][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 333.768855][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 333.772597][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 335.735792][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 335.737290][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 335.743674][ T8607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.991683][ T27] kauditd_printk_skb: 37 callbacks suppressed [ 335.991707][ T27] audit: type=1326 audit(335.900:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.2.955" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95b77ee8 code=0x7ffc0000 [ 336.018018][ T27] audit: type=1326 audit(335.900:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.2.955" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95b77ee8 code=0x7ffc0000 [ 336.021727][ T27] audit: type=1326 audit(335.930:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.2.955" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=275 compat=0 ip=0xffff95b77ee8 code=0x7ffc0000 [ 336.175391][ T27] audit: type=1326 audit(335.930:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.2.955" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95b77ee8 code=0x7ffc0000 [ 336.190583][ T27] audit: type=1326 audit(335.930:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.2.955" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95b77ee8 code=0x7ffc0000 [ 336.218536][ T27] audit: type=1326 audit(335.940:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.2.955" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=34 compat=0 ip=0xffff95b77ee8 code=0x7ffc0000 [ 336.227780][ T27] audit: type=1326 audit(335.940:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.2.955" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95b77ee8 code=0x7ffc0000 [ 336.246226][ T27] audit: type=1326 audit(335.940:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.2.955" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95b77ee8 code=0x7ffc0000 [ 336.249714][ T27] audit: type=1326 audit(335.940:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.2.955" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffff95b77ee8 code=0x7ffc0000 [ 336.253593][ T27] audit: type=1326 audit(335.940:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.2.955" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95b77ee8 code=0x7ffc0000 [ 336.278377][ T8790] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 341.093602][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 341.101465][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 341.159299][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 341.161018][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 341.174162][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 341.194832][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 341.199673][ T8607] device veth0_vlan entered promiscuous mode [ 341.206336][ T8607] device veth1_vlan entered promiscuous mode [ 341.218221][ T5704] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 341.219858][ T5704] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 341.221287][ T5704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 341.222797][ T5704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 341.274590][ T8607] device veth0_macvtap entered promiscuous mode [ 341.286871][ T8607] device veth1_macvtap entered promiscuous mode [ 341.316355][ T8607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.317619][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 341.319150][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 341.320611][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 341.338728][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 341.344884][ T8607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.354152][ T8607] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.355552][ T8607] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.357021][ T8607] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.358476][ T8607] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.663942][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 342.665657][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 343.103615][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.104892][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.106213][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 343.116235][ T4664] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.123696][ T4664] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.128151][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 344.926637][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 344.926650][ T27] audit: type=1326 audit(344.910:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8894 comm="syz.5.928" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b177ee8 code=0x7ffc0000 [ 344.931441][ T27] audit: type=1326 audit(344.910:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8894 comm="syz.5.928" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b177ee8 code=0x7ffc0000 [ 345.015834][ T27] audit: type=1326 audit(344.910:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8894 comm="syz.5.928" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=275 compat=0 ip=0xffff9b177ee8 code=0x7ffc0000 [ 345.100999][ T27] audit: type=1326 audit(344.910:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8894 comm="syz.5.928" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b177ee8 code=0x7ffc0000 [ 345.123361][ T8898] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 345.135159][ T27] audit: type=1326 audit(344.910:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8894 comm="syz.5.928" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b177ee8 code=0x7ffc0000 [ 346.471034][ T27] audit: type=1326 audit(344.910:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8894 comm="syz.5.928" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=34 compat=0 ip=0xffff9b177ee8 code=0x7ffc0000 [ 346.559439][ T27] audit: type=1326 audit(344.910:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8894 comm="syz.5.928" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b177ee8 code=0x7ffc0000 [ 346.563725][ T27] audit: type=1326 audit(344.910:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8894 comm="syz.5.928" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b177ee8 code=0x7ffc0000 [ 346.567233][ T27] audit: type=1326 audit(344.910:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8894 comm="syz.5.928" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffff9b177ee8 code=0x7ffc0000 [ 346.570565][ T27] audit: type=1326 audit(344.910:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8894 comm="syz.5.928" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b177ee8 code=0x7ffc0000 [ 348.147614][ T8931] batman_adv: batadv0: Adding interface: dummy0 [ 348.148763][ T8931] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.152739][ T8931] batman_adv: batadv0: Interface activated: dummy0 [ 348.157027][ T8929] batadv0: mtu less than device minimum [ 348.159659][ T8929] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 348.162633][ T8929] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 348.165710][ T8929] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 348.168674][ T8929] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 348.171778][ T8929] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 348.174785][ T8929] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 348.177729][ T8929] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 348.180763][ T8929] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 348.183787][ T8929] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 351.149950][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 351.150028][ T27] audit: type=1326 audit(351.090:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8960 comm="syz.1.984" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9977ee8 code=0x7ffc0000 [ 351.174690][ T27] audit: type=1326 audit(351.090:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8960 comm="syz.1.984" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9977ee8 code=0x7ffc0000 [ 351.178537][ T27] audit: type=1326 audit(351.100:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8960 comm="syz.1.984" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=275 compat=0 ip=0xffffb9977ee8 code=0x7ffc0000 [ 351.602901][ T8973] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 351.869404][ T27] audit: type=1326 audit(351.110:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8960 comm="syz.1.984" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9977ee8 code=0x7ffc0000 [ 351.877001][ T27] audit: type=1326 audit(351.110:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8960 comm="syz.1.984" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9977ee8 code=0x7ffc0000 [ 351.882318][ T27] audit: type=1326 audit(351.110:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8960 comm="syz.1.984" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=34 compat=0 ip=0xffffb9977ee8 code=0x7ffc0000 [ 351.886069][ T27] audit: type=1326 audit(351.110:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8960 comm="syz.1.984" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9977ee8 code=0x7ffc0000 [ 351.889566][ T27] audit: type=1326 audit(351.110:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8960 comm="syz.1.984" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9977ee8 code=0x7ffc0000 [ 351.902597][ T27] audit: type=1326 audit(351.110:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8960 comm="syz.1.984" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffffb9977ee8 code=0x7ffc0000 [ 351.906479][ T27] audit: type=1326 audit(351.110:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8960 comm="syz.1.984" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9977ee8 code=0x7ffc0000 [ 354.961466][ T9023] net_ratelimit: 12 callbacks suppressed [ 354.961477][ T9023] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:85:08:00:3e:6e [ 355.069666][ T9018] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 364.363311][ T9177] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:85:08:00:3e:6e [ 366.440967][ T9220] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:85:08:00:3e:6e [ 366.709081][ T9210] team0 (unregistering): Port device team_slave_0 removed [ 366.712194][ T9210] team0 (unregistering): Failed to send options change via netlink (err -105) [ 366.736026][ T9210] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 366.741380][ T9210] team0 (unregistering): Port device team_slave_1 removed [ 369.967832][ T9283] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:85:08:00:3e:6e [ 370.268846][ T9280] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1035'. [ 372.560583][ T9316] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1040'. [ 372.565968][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 372.567051][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 374.156963][ T9326] team0 (unregistering): Port device team_slave_0 removed [ 374.168415][ T9326] team0 (unregistering): Port device team_slave_1 removed [ 374.271776][ T9342] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1044'. [ 374.273645][ T9348] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1043'. [ 374.276005][ T9349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1045'. [ 374.499866][ T9360] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:85:08:00:3e:6e [ 376.095915][ T6898] bond0: (slave wlan1): Releasing backup interface [ 376.324582][ T9371] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1047'. [ 378.867518][ T9422] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:85:08:00:3e:6e [ 379.215597][ T9422] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1056'. [ 380.487176][ T9428] team0 (unregistering): Port device team_slave_0 removed [ 380.489664][ T9428] team0 (unregistering): Port device team_slave_1 removed [ 381.574762][ T9455] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1061'. [ 382.533077][ T9482] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:85:08:00:3e:6e [ 382.857731][ T6898] device hsr_slave_0 left promiscuous mode [ 383.689873][ T6898] device hsr_slave_1 left promiscuous mode [ 383.883523][ T6898] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.887593][ T6898] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.889818][ T6898] device bridge_slave_1 left promiscuous mode [ 383.890855][ T6898] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.475804][ T9512] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:85:08:00:3e:6e [ 385.643689][ T6898] device bridge_slave_0 left promiscuous mode [ 385.644755][ T6898] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.193286][ T6898] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.413333][ T6898] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.833797][ T6898] bond0 (unregistering): Released all slaves [ 390.158574][ T9515] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1071'. [ 390.186339][ T9516] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1070'. [ 391.554657][ T9545] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1073'. [ 392.277730][ T9544] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1072'. [ 392.280164][ T9555] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:85:08:00:3e:6e [ 392.284109][ T9555] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1075'. [ 392.526951][ T9562] loop4: detected capacity change from 0 to 1024 [ 392.528446][ T9562] EXT4-fs: Ignoring removed nomblk_io_submit option [ 393.118744][ T9574] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1077'. [ 393.303825][ T9562] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 393.449671][ T6283] EXT4-fs (loop4): unmounting filesystem. [ 393.566513][ T9577] loop2: detected capacity change from 0 to 32768 [ 393.595914][ T9577] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.1080 (9577) [ 394.515368][ T9577] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 394.517265][ T9577] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 394.518753][ T9577] BTRFS info (device loop2): setting nodatasum [ 394.519730][ T9577] BTRFS info (device loop2): using free space tree [ 394.959927][ T9605] loop0: detected capacity change from 0 to 32768 [ 394.974562][ T9605] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.1085 (9605) [ 396.255030][ T9635] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1087'. [ 396.573707][ T9577] BTRFS error (device loop2): open_ctree failed: -12 [ 397.585761][ T9672] loop4: detected capacity change from 0 to 1024 [ 397.587727][ T9672] EXT4-fs: Ignoring removed nomblk_io_submit option [ 397.659599][ T9672] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 398.411338][ T9693] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:85:08:00:3e:6e [ 398.670729][ T6283] EXT4-fs (loop4): unmounting filesystem. [ 398.723317][ T9693] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1097'. [ 401.233979][ T9723] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1102'. [ 402.075035][ T9722] loop5: detected capacity change from 0 to 32768 [ 402.928201][ T9722] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.1103 (9722) [ 402.979965][ T9722] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 402.981657][ T9722] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 403.004750][ T9722] BTRFS info (device loop5): setting nodatasum [ 403.005713][ T9722] BTRFS info (device loop5): using free space tree [ 403.433371][ T9770] loop1: detected capacity change from 0 to 1024 [ 403.434748][ T9770] EXT4-fs: Ignoring removed nomblk_io_submit option [ 403.470826][ T9770] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 403.577739][ T6183] EXT4-fs (loop1): unmounting filesystem. [ 403.970898][ T9722] BTRFS info (device loop5): enabling ssd optimizations [ 404.019232][ T9766] loop0: detected capacity change from 0 to 32768 [ 404.101913][ T9766] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.1109 (9766) [ 405.042283][ T8607] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 405.800583][ T9795] loop2: detected capacity change from 0 to 32768 [ 405.820245][ T9795] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.1114 (9795) [ 406.304180][ T9811] loop1: detected capacity change from 0 to 32768 [ 406.308561][ T9811] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.1115 (9811) [ 406.310689][ T9795] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 406.312508][ T9795] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 406.315618][ T9701] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 10 scanned by udevd (9701) [ 406.323196][ T9795] BTRFS info (device loop2): setting nodatasum [ 406.324701][ T9795] BTRFS info (device loop2): using free space tree [ 406.341799][ T9839] loop4: detected capacity change from 0 to 1024 [ 406.344848][ T9601] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 406.377688][ T9556] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by udevd (9556) [ 406.448628][ T9795] BTRFS info (device loop2): enabling ssd optimizations [ 406.723633][ T9874] loop0: detected capacity change from 0 to 1024 [ 406.725058][ T9874] EXT4-fs: Ignoring removed nomblk_io_submit option [ 406.777946][ T5123] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 407.245963][ T9874] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 408.296263][ T6317] EXT4-fs (loop0): unmounting filesystem. [ 409.643557][ T9903] loop5: detected capacity change from 0 to 32768 [ 409.650073][ T9903] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.1128 (9903) [ 409.659700][ T9903] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 409.662426][ T9903] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 409.666378][ T9903] BTRFS info (device loop5): setting nodatasum [ 409.667550][ T9903] BTRFS info (device loop5): using free space tree [ 409.742688][ T9929] loop2: detected capacity change from 0 to 32768 [ 409.747074][ T9903] BTRFS info (device loop5): enabling ssd optimizations [ 409.759304][ T9929] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.1135 (9929) [ 409.817339][ T9701] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (9701) [ 410.715548][ T8607] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 410.743763][ T9967] loop2: detected capacity change from 0 to 32768 [ 410.757348][ T9967] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.1139 (9967) [ 410.810012][ T9974] loop0: detected capacity change from 0 to 1024 [ 410.811562][ T9974] EXT4-fs: Ignoring removed nomblk_io_submit option [ 410.885397][ T9966] loop1: detected capacity change from 0 to 32768 [ 410.966947][ T9974] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 411.017287][ T9966] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.1138 (9966) [ 411.037910][ T9966] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 411.042651][ T9966] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 411.049238][ T9556] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 411.051954][ T9966] BTRFS info (device loop1): setting nodatasum [ 411.058304][ T9966] BTRFS info (device loop1): using free space tree [ 411.666033][T10008] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:85:08:00:3e:6e [ 411.882369][ T6317] EXT4-fs (loop0): unmounting filesystem. [ 411.936421][ T9966] BTRFS info (device loop1): enabling ssd optimizations [ 412.462133][ T6183] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 412.762916][T10017] loop2: detected capacity change from 0 to 32768 [ 412.829828][T10017] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.1146 (10017) [ 412.854386][T10017] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 412.855992][T10017] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 412.857648][T10017] BTRFS info (device loop2): setting nodatasum [ 412.858616][T10017] BTRFS info (device loop2): using free space tree [ 413.259496][T10017] BTRFS info (device loop2): enabling ssd optimizations [ 413.824338][T10076] loop0: detected capacity change from 0 to 1024 [ 413.825850][T10076] EXT4-fs: Ignoring removed nomblk_io_submit option [ 414.331442][ T5123] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 414.479229][T10076] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 414.842286][ T6317] EXT4-fs (loop0): unmounting filesystem. [ 415.215785][T10070] loop5: detected capacity change from 0 to 32768 [ 415.219869][T10070] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.1155 (10070) [ 415.291431][T10070] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 415.295580][T10070] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 415.298259][T10070] BTRFS info (device loop5): setting nodatasum [ 415.301405][T10070] BTRFS info (device loop5): using free space tree [ 415.857216][T10070] BTRFS info (device loop5): enabling ssd optimizations [ 416.197407][ T8607] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 416.298597][T10125] loop1: detected capacity change from 0 to 32768 [ 416.721146][T10125] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.1166 (10125) [ 416.755104][T10125] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 416.765389][T10125] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 416.767192][T10125] BTRFS info (device loop1): setting nodatasum [ 416.779540][T10125] BTRFS info (device loop1): using free space tree [ 417.535826][T10183] loop5: detected capacity change from 0 to 1024 [ 417.537207][T10183] EXT4-fs: Ignoring removed nomblk_io_submit option [ 417.589685][T10183] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 418.227843][T10218] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1176'. [ 418.733372][ T8607] EXT4-fs (loop5): unmounting filesystem. [ 418.791460][T10125] BTRFS error (device loop1): open_ctree failed: -22 [ 418.808710][T10223] loop0: detected capacity change from 0 to 1024 [ 420.398956][T10253] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1185'. [ 420.848193][T10259] loop2: detected capacity change from 0 to 1024 [ 420.849689][T10259] EXT4-fs: Ignoring removed nomblk_io_submit option [ 422.522073][T10278] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1192'. [ 422.525433][T10259] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 423.026172][ T5123] EXT4-fs (loop2): unmounting filesystem. [ 423.109135][T10298] loop0: detected capacity change from 0 to 1024 [ 424.156922][T10322] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1198'. [ 424.788732][T10331] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1201'. [ 424.884433][T10320] loop5: detected capacity change from 0 to 32768 [ 425.279640][T10320] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.1199 (10320) [ 425.310630][T10320] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 425.338922][T10320] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 425.340538][T10320] BTRFS info (device loop5): setting nodatasum [ 425.347982][T10320] BTRFS info (device loop5): using free space tree [ 425.471122][T10320] BTRFS info (device loop5): enabling ssd optimizations [ 425.569078][T10373] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1204'. [ 426.711548][T10388] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1209'. [ 427.597087][ T8607] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 428.163343][T10415] loop0: detected capacity change from 0 to 32768 [ 428.169095][T10415] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.1214 (10415) [ 428.182003][T10415] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 428.185447][T10415] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 428.187307][T10415] BTRFS info (device loop0): setting nodatasum [ 428.188419][T10415] BTRFS info (device loop0): using free space tree [ 428.278085][T10429] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1215'. [ 428.608999][T10420] loop2: detected capacity change from 0 to 32768 [ 428.628489][T10420] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.1216 (10420) [ 428.761375][T10448] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1217'. [ 429.239327][T10462] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1218'. [ 429.387340][T10415] BTRFS info (device loop0): enabling ssd optimizations [ 429.445738][T10465] loop4: detected capacity change from 0 to 1024 [ 429.560529][ T9701] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (9701) [ 429.900901][ T6317] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 430.302902][T10480] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1220'. [ 430.724895][T10484] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1223'. [ 430.766853][T10493] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1224'. [ 431.114465][T10509] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1222'. [ 431.780632][T10532] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1227'. [ 431.868131][T10535] loop0: detected capacity change from 0 to 1024 [ 432.389578][T10544] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1230'. [ 433.093238][T10556] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1233'. [ 433.136361][T10558] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1234'. [ 433.277530][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 433.278584][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 433.708291][T10569] loop2: detected capacity change from 0 to 1024 [ 434.200641][T10581] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1239'. [ 434.797333][T10585] loop5: detected capacity change from 0 to 32768 [ 434.820031][T10585] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.1241 (10585) [ 434.860709][T10587] loop4: detected capacity change from 0 to 32768 [ 434.870468][T10587] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.1240 (10587) [ 435.201521][T10585] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 435.203650][T10585] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 435.238548][ T9701] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by udevd (9701) [ 435.289477][T10585] BTRFS info (device loop5): setting nodatasum [ 435.290459][T10585] BTRFS info (device loop5): using free space tree [ 435.326555][T10585] BTRFS info (device loop5): enabling ssd optimizations [ 436.217618][T10634] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1247'. [ 436.895655][T10645] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1250'. [ 436.998210][T10647] loop4: detected capacity change from 0 to 1024 [ 437.480162][T10656] loop0: detected capacity change from 0 to 1024 [ 437.802543][T10654] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1253'. [ 437.890114][T10661] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1254'. [ 437.968146][ T8607] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 439.085503][T10683] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1256'. [ 439.642562][T10685] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1259'. [ 440.500894][T10700] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1262'. [ 441.450634][T10714] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1269'. [ 441.643238][T10719] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1268'. [ 441.824703][T10721] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1270'. [ 442.450420][T10728] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1273'. [ 442.891812][T10727] loop1: detected capacity change from 0 to 32768 [ 442.908096][T10727] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.1271 (10727) [ 443.045623][T10727] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 443.047307][T10727] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 443.048783][T10727] BTRFS info (device loop1): setting nodatasum [ 443.049807][T10727] BTRFS info (device loop1): using free space tree [ 443.058105][T10746] loop5: detected capacity change from 0 to 1024 [ 443.059507][T10746] EXT4-fs: Ignoring removed nomblk_io_submit option [ 443.338540][T10746] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 444.180109][T10780] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1282'. [ 444.193510][ T8607] EXT4-fs (loop5): unmounting filesystem. [ 444.219417][T10727] BTRFS info (device loop1): enabling ssd optimizations [ 444.249636][T10764] loop4: detected capacity change from 0 to 32768 [ 444.268247][T10764] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.1280 (10764) [ 444.654015][ T9527] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 444.848140][ T6183] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 445.079849][T10795] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1284'. [ 445.090754][T10794] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1285'. [ 445.453655][ T4323] Bluetooth: hci5: command 0x0406 tx timeout [ 445.535807][T10799] loop5: detected capacity change from 0 to 32768 [ 445.548819][T10799] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.1287 (10799) [ 445.557573][T10799] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 445.559687][T10799] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 445.561619][T10799] BTRFS info (device loop5): setting nodatasum [ 445.562794][T10799] BTRFS info (device loop5): using free space tree [ 445.883500][T10812] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1288'. [ 446.627521][T10825] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1289'. [ 446.706279][T10799] BTRFS info (device loop5): enabling ssd optimizations [ 447.133070][T10847] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 447.598596][T10854] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1296'. [ 447.856879][T10867] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1298'. [ 448.145329][ T8607] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 448.430322][T10877] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1300'. [ 449.158169][T10875] loop4: detected capacity change from 0 to 32768 [ 449.165215][T10875] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.1301 (10875) [ 449.263092][T10883] loop5: detected capacity change from 0 to 32768 [ 449.279729][T10875] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 449.553235][T10883] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz.5.1299 (10883) [ 449.558290][T10875] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 449.559878][T10875] BTRFS info (device loop4): setting nodatasum [ 449.560808][T10875] BTRFS info (device loop4): using free space tree [ 449.650071][ T9701] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by udevd (9701) [ 449.876591][T10890] loop0: detected capacity change from 0 to 32768 [ 449.882168][T10890] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.1304 (10890) [ 449.947288][T10875] BTRFS info (device loop4): enabling ssd optimizations [ 450.783453][ T9556] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by udevd (9556) [ 450.847628][T10932] loop0: detected capacity change from 0 to 1024 [ 450.849141][T10932] EXT4-fs: Ignoring removed nomblk_io_submit option [ 450.941251][ T6283] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 450.952073][T10932] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 451.732413][ T6317] EXT4-fs (loop0): unmounting filesystem. [ 452.402380][T10953] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1313'. [ 452.579770][T10955] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1312'. [ 452.728433][T10931] loop1: detected capacity change from 0 to 32768 [ 452.745090][T10917] loop2: detected capacity change from 0 to 32768 [ 452.746804][T10917] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.1308 (10917) [ 452.751024][T10931] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.1310 (10931) [ 452.754278][T10917] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 452.755842][T10917] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 452.757492][T10917] BTRFS info (device loop2): setting nodatasum [ 452.758518][T10917] BTRFS info (device loop2): using free space tree [ 453.810843][T10917] BTRFS error (device loop2): open_ctree failed: -12 [ 453.923412][T10993] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1317'. [ 454.055249][T10994] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1319'. [ 454.121185][ T9701] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by udevd (9701) [ 454.133745][T10987] loop4: detected capacity change from 0 to 32768 [ 454.139237][T10987] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 454.142107][T10987] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 454.144046][T10987] BTRFS info (device loop4): setting nodatasum [ 454.145109][T10987] BTRFS info (device loop4): using free space tree [ 454.158863][ T9601] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (9601) [ 454.225260][T10987] BTRFS info (device loop4): enabling ssd optimizations [ 454.362196][T11000] loop2: detected capacity change from 0 to 32768 [ 454.367662][T11000] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.1322 (11000) [ 454.713338][T11023] loop1: detected capacity change from 0 to 1024 [ 454.714734][T11023] EXT4-fs: Ignoring removed nomblk_io_submit option [ 454.793327][T11023] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 455.575357][ T6283] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 455.595130][T11036] loop5: detected capacity change from 0 to 1024 [ 455.626146][ T6183] EXT4-fs (loop1): unmounting filesystem. [ 455.742729][ T9556] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop4 scanned by udevd (9556) [ 455.888579][T11048] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1326'. [ 456.060883][T11050] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1329'. [ 456.232245][ T9701] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 457.186152][T11070] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1331'. [ 457.467127][T11073] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1332'. [ 457.906913][T11076] loop2: detected capacity change from 0 to 1024 [ 457.908398][T11076] EXT4-fs: Ignoring removed nomblk_io_submit option [ 457.912165][T11061] loop4: detected capacity change from 0 to 32768 [ 457.917167][T11061] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 457.918837][T11061] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 458.012644][T11061] BTRFS info (device loop4): setting nodatasum [ 458.015330][T11061] BTRFS info (device loop4): using free space tree [ 458.053030][T11076] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 458.977793][ T5123] EXT4-fs (loop2): unmounting filesystem. [ 459.902538][T11061] BTRFS info (device loop4): enabling ssd optimizations [ 460.044778][ T6283] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 460.184987][T11107] loop1: detected capacity change from 0 to 32768 [ 460.218400][T11107] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.1342 (11107) [ 460.247215][T11107] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 460.249184][T11107] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 460.250842][T11107] BTRFS info (device loop1): setting nodatasum [ 460.251922][T11107] BTRFS info (device loop1): using free space tree [ 460.258375][T11126] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.259650][T11126] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.283637][T11126] batman_adv: batadv0: Interface deactivated: dummy0 [ 460.701728][T11107] BTRFS info (device loop1): enabling ssd optimizations [ 460.703208][T11128] loop2: detected capacity change from 0 to 32768 [ 460.706044][T11128] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.1347 (11128) [ 460.816810][ T9556] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 461.501499][ T6183] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 461.909244][T11164] loop4: detected capacity change from 0 to 32768 [ 461.942040][T11164] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.1351 (11164) [ 461.965914][T11164] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 461.967579][T11164] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 461.969222][T11164] BTRFS info (device loop4): setting nodatasum [ 461.970147][T11164] BTRFS info (device loop4): using free space tree [ 462.327389][T11172] loop2: detected capacity change from 0 to 32768 [ 462.329796][T11172] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.1353 (11172) [ 462.340824][ T9556] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 10 scanned by udevd (9556) [ 462.385286][ T9701] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 462.435552][T11178] loop0: detected capacity change from 0 to 32768 [ 462.435821][T11126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.437994][T11164] BTRFS info (device loop4): enabling ssd optimizations [ 462.439511][T11178] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.1354 (11178) [ 462.487957][T11126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.491768][ T9601] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 463.281986][ T6283] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 463.478047][T11207] loop2: detected capacity change from 0 to 32768 [ 463.479807][T11207] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.1355 (11207) [ 463.484268][T11207] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 463.485790][T11207] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 463.490567][T11207] BTRFS info (device loop2): setting nodatasum [ 463.491769][T11207] BTRFS info (device loop2): using free space tree [ 463.574362][T11126] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.576770][T11126] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.578374][T11126] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.579869][T11126] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.630345][T11207] BTRFS info (device loop2): enabling ssd optimizations [ 463.635285][T11218] loop4: detected capacity change from 0 to 32768 [ 463.654539][T11218] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.1356 (11218) [ 463.761543][ T9701] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by udevd (9701) [ 464.085573][T11181] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1352'. [ 464.087233][T11210] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1357'. [ 464.207152][ T5123] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 464.598986][T11240] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1358'. [ 464.696535][T11237] loop1: detected capacity change from 0 to 32768 [ 464.699876][T11237] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.1359 (11237) [ 464.707257][T11237] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 464.709971][T11237] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 464.715957][T11237] BTRFS info (device loop1): setting nodatasum [ 464.717591][T11237] BTRFS info (device loop1): using free space tree [ 464.726301][T11237] BTRFS info (device loop1): enabling ssd optimizations [ 464.809488][T11267] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1362'. [ 465.574165][ T6183] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 465.716949][T11283] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1365'. [ 466.130794][T11290] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1366'. [ 466.357281][T11271] loop2: detected capacity change from 0 to 32768 [ 466.375365][T11271] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.1361 (11271) [ 466.378558][T11271] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 466.380293][T11271] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 466.381979][T11271] BTRFS info (device loop2): setting nodatasum [ 466.383854][T11271] BTRFS info (device loop2): using free space tree [ 466.444509][T11287] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1367'. [ 466.494760][T11298] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1368'. [ 466.533149][T11271] BTRFS info (device loop2): enabling ssd optimizations [ 466.672030][T11295] loop4: detected capacity change from 0 to 32768 [ 466.675896][T11295] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.1369 (11295) [ 467.169186][T11312] loop0: detected capacity change from 0 to 32768 [ 467.171402][T11312] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.1370 (11312) [ 467.218490][ T9556] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by udevd (9556) [ 467.293187][ T5123] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 467.394127][T11324] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1371'. [ 467.581783][ T9701] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 467.708392][T11329] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1372'. [ 468.570341][T11335] loop5: detected capacity change from 0 to 32768 [ 468.640049][T11335] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.1375 (11335) [ 468.656613][T11335] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 468.658253][T11335] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 468.659747][T11335] BTRFS info (device loop5): setting nodatasum [ 468.660730][T11335] BTRFS info (device loop5): using free space tree [ 469.049205][T11335] BTRFS info (device loop5): enabling ssd optimizations [ 469.150260][T11362] loop1: detected capacity change from 0 to 32768 [ 469.155211][T11362] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.1379 (11362) [ 469.158570][T11346] loop2: detected capacity change from 0 to 32768 [ 469.160392][T11346] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.1374 (11346) [ 469.810188][ T8607] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 470.268356][T11387] __nla_validate_parse: 2 callbacks suppressed [ 470.268367][T11387] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1383'. [ 470.299264][ T9701] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by udevd (9701) [ 470.330362][ T9527] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (9527) [ 470.726444][T11393] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1385'. [ 470.878106][T11397] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1384'. [ 471.039583][T11384] loop2: detected capacity change from 0 to 32768 [ 471.041424][T11384] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.1381 (11384) [ 471.046737][T11384] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 471.049473][T11384] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 471.051033][T11384] BTRFS info (device loop2): setting nodatasum [ 471.051944][T11384] BTRFS info (device loop2): using free space tree [ 472.186626][T11384] BTRFS info (device loop2): enabling ssd optimizations [ 472.989321][ T5123] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 473.148711][T11452] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1395'. [ 473.452244][T11455] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1393'. [ 473.487342][T11438] loop5: detected capacity change from 0 to 32768 [ 473.494804][T11438] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.1391 (11438) [ 473.503198][T11438] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 473.508094][T11438] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 473.511876][T11438] BTRFS info (device loop5): setting nodatasum [ 473.515242][T11438] BTRFS info (device loop5): using free space tree [ 473.549556][T11450] loop0: detected capacity change from 0 to 32768 [ 473.554753][T11450] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.1394 (11450) [ 473.559932][T11454] loop2: detected capacity change from 0 to 32768 [ 473.583629][T11454] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.1396 (11454) [ 474.573248][T11484] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1397'. [ 474.792020][T11438] BTRFS info (device loop5): enabling ssd optimizations [ 474.892510][ T9527] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by udevd (9527) [ 475.315725][T11479] loop0: detected capacity change from 0 to 32768 [ 475.317654][T11479] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.1399 (11479) [ 475.437076][ T9556] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (9556) [ 475.751977][ T8607] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 475.906401][T11499] loop1: detected capacity change from 0 to 32768 [ 475.907998][T11499] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.1401 (11499) [ 475.919696][T11499] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 475.921405][T11499] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 475.923210][T11499] BTRFS info (device loop1): setting nodatasum [ 475.924177][T11499] BTRFS info (device loop1): using free space tree [ 476.219867][T11497] loop2: detected capacity change from 0 to 32768 [ 476.283495][T11497] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.1402 (11497) [ 476.846263][T11526] loop4: detected capacity change from 0 to 32768 [ 476.849856][T11510] loop5: detected capacity change from 0 to 32768 [ 476.855235][T11526] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.1407 (11526) [ 476.857194][T11510] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz.5.1404 (11510) [ 476.987113][T11499] BTRFS info (device loop1): enabling ssd optimizations [ 477.402191][ T9556] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (9556) [ 477.801533][ T9701] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by udevd (9701) [ 477.807321][T11535] loop0: detected capacity change from 0 to 32768 [ 477.905361][T11535] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.1409 (11535) [ 477.916103][ T9601] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by udevd (9601) [ 477.945959][ T6183] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 478.374335][ T9527] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop1 scanned by udevd (9527) [ 479.057564][T11580] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1416'. [ 479.538044][T11572] loop0: detected capacity change from 0 to 32768 [ 479.544058][T11572] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 479.649155][T11588] loop5: detected capacity change from 0 to 32768 [ 479.657901][T11588] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10 [ 479.666427][ T9556] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 480.173746][T11584] loop2: detected capacity change from 0 to 32768 [ 480.194672][T11586] loop1: detected capacity change from 0 to 32768 [ 480.221430][T11584] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 480.313684][T11599] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1422'. [ 480.723789][T11604] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1421'. [ 480.905132][ T9701] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by udevd (9701) [ 480.911783][T11586] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 480.913573][T11586] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 480.915192][T11586] BTRFS info (device loop1): setting nodatasum [ 480.916112][T11586] BTRFS info (device loop1): using free space tree [ 481.330516][T11618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 481.338653][T11618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 481.629615][ T9527] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (9527) [ 481.719271][T11624] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1423'. [ 482.923795][T11586] BTRFS error (device loop1): open_ctree failed: -12 [ 484.872216][T11687] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1437'. [ 484.895973][T11691] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1438'. [ 485.438192][T11702] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1441'. [ 485.636564][T11709] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1440'. [ 487.518866][T11726] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1443'. [ 488.631221][T11743] loop5: detected capacity change from 0 to 128 [ 489.255073][T11743] FAT-fs (loop5): bogus sectors per cluster 0 [ 489.256104][T11743] FAT-fs (loop5): Can't find a valid FAT filesystem [ 489.634005][T11762] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1454'. [ 489.671281][T11761] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1453'. [ 489.681921][ T9556] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 490.424838][T11767] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1452'. [ 492.679111][T11791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.442502][T11809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.451449][T11809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.855706][T11799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 494.598070][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 494.602098][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.923883][T11871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 496.933354][T11871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 497.221842][T11855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 497.691546][T11874] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1477'. [ 498.660354][T11886] loop5: detected capacity change from 0 to 128 [ 498.671798][T11892] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1483'. [ 498.757742][T11886] FAT-fs (loop5): bogus sectors per cluster 0 [ 498.758785][T11886] FAT-fs (loop5): Can't find a valid FAT filesystem [ 499.817123][T11911] loop4: detected capacity change from 0 to 128 [ 499.999556][T11911] FAT-fs (loop4): bogus sectors per cluster 0 [ 500.000564][T11911] FAT-fs (loop4): Can't find a valid FAT filesystem [ 501.197407][T11923] loop1: detected capacity change from 0 to 128 [ 501.197849][T11927] loop2: detected capacity change from 0 to 128 [ 501.242922][T11923] FAT-fs (loop1): bogus sectors per cluster 0 [ 501.242955][T11927] FAT-fs (loop2): bogus sectors per cluster 0 [ 501.243912][T11923] FAT-fs (loop1): Can't find a valid FAT filesystem [ 501.244998][T11927] FAT-fs (loop2): Can't find a valid FAT filesystem [ 501.423930][ T9556] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 503.024934][T11949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 503.030766][T11949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 503.146460][T11944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 503.814974][T11970] loop4: detected capacity change from 0 to 128 [ 504.154560][T11970] FAT-fs (loop4): bogus sectors per cluster 0 [ 504.155737][T11970] FAT-fs (loop4): Can't find a valid FAT filesystem [ 504.642464][T11976] loop5: detected capacity change from 0 to 128 [ 504.742850][T11976] FAT-fs (loop5): bogus sectors per cluster 0 [ 504.743783][T11976] FAT-fs (loop5): Can't find a valid FAT filesystem [ 504.794117][T11983] loop1: detected capacity change from 0 to 128 [ 504.948705][T11983] FAT-fs (loop1): bogus sectors per cluster 0 [ 504.949705][T11983] FAT-fs (loop1): Can't find a valid FAT filesystem [ 504.962818][ T9556] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 506.424829][T11997] loop5: detected capacity change from 0 to 128 [ 506.807206][T12001] loop4: detected capacity change from 0 to 128 [ 506.841176][T11997] FAT-fs (loop5): bogus sectors per cluster 0 [ 506.842161][T11997] FAT-fs (loop5): Can't find a valid FAT filesystem [ 506.874011][T12001] FAT-fs (loop4): bogus sectors per cluster 0 [ 506.874983][T12001] FAT-fs (loop4): Can't find a valid FAT filesystem [ 507.579348][T12011] loop2: detected capacity change from 0 to 128 [ 507.592907][T12011] FAT-fs (loop2): bogus sectors per cluster 0 [ 507.593860][T12011] FAT-fs (loop2): Can't find a valid FAT filesystem [ 507.630569][ T9527] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 509.729835][T12053] loop5: detected capacity change from 0 to 128 [ 509.858366][T12053] FAT-fs (loop5): bogus sectors per cluster 0 [ 509.859315][T12053] FAT-fs (loop5): Can't find a valid FAT filesystem [ 510.314556][T12063] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1518'. [ 510.705556][T12075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.715005][T12075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 511.190737][T12068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 511.229262][T12076] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1520'. [ 512.272203][T12085] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1523'. [ 512.285081][T12094] loop1: detected capacity change from 0 to 128 [ 512.537271][T12096] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1525'. [ 512.706302][T12094] FAT-fs (loop1): bogus sectors per cluster 0 [ 512.707341][T12094] FAT-fs (loop1): Can't find a valid FAT filesystem [ 513.468657][T12106] loop2: detected capacity change from 0 to 128 [ 513.471425][T12106] FAT-fs (loop2): bogus sectors per cluster 0 [ 513.472484][T12106] FAT-fs (loop2): Can't find a valid FAT filesystem [ 513.899111][ T9701] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 513.975873][T11608] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 514.485189][T12121] loop5: detected capacity change from 0 to 128 [ 514.488731][T12121] FAT-fs (loop5): bogus sectors per cluster 0 [ 514.489757][T12121] FAT-fs (loop5): Can't find a valid FAT filesystem [ 515.529197][T12135] loop4: detected capacity change from 0 to 128 [ 515.531676][T12135] FAT-fs (loop4): bogus sectors per cluster 0 [ 515.532604][T12135] FAT-fs (loop4): Can't find a valid FAT filesystem [ 516.053807][T12146] loop5: detected capacity change from 0 to 128 [ 516.069952][T12146] FAT-fs (loop5): bogus sectors per cluster 0 [ 516.070974][T12146] FAT-fs (loop5): Can't find a valid FAT filesystem [ 516.833045][T12153] loop1: detected capacity change from 0 to 128 [ 516.928216][T12159] loop0: detected capacity change from 0 to 128 [ 517.133237][T11608] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 517.137287][T12159] FAT-fs (loop0): bogus sectors per cluster 0 [ 517.137290][T12153] FAT-fs (loop1): bogus sectors per cluster 0 [ 517.137319][T12153] FAT-fs (loop1): Can't find a valid FAT filesystem [ 517.138191][T12159] FAT-fs (loop0): Can't find a valid FAT filesystem [ 517.162206][ T9527] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 518.332427][T12182] loop2: detected capacity change from 0 to 128 [ 518.578988][T12182] FAT-fs (loop2): bogus sectors per cluster 0 [ 518.579953][T12182] FAT-fs (loop2): Can't find a valid FAT filesystem [ 519.297533][T12192] loop0: detected capacity change from 0 to 128 [ 519.389216][T12192] FAT-fs (loop0): bogus sectors per cluster 0 [ 519.389244][T12192] FAT-fs (loop0): Can't find a valid FAT filesystem [ 520.337473][T12204] loop4: detected capacity change from 0 to 128 [ 520.344684][T12204] FAT-fs (loop4): bogus sectors per cluster 0 [ 520.345641][T12204] FAT-fs (loop4): Can't find a valid FAT filesystem [ 522.218467][T12239] loop4: detected capacity change from 0 to 128 [ 522.412845][T12239] FAT-fs (loop4): bogus sectors per cluster 0 [ 522.413761][T12239] FAT-fs (loop4): Can't find a valid FAT filesystem [ 523.005600][T12240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 523.031650][T12240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 523.215307][T12228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 524.044989][T12257] loop5: detected capacity change from 0 to 128 [ 524.059893][T12257] FAT-fs (loop5): bogus sectors per cluster 0 [ 524.060835][T12257] FAT-fs (loop5): Can't find a valid FAT filesystem [ 524.094590][ T9556] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 526.607338][T12278] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1565'. [ 526.689514][T12280] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1566'. [ 528.712730][T12319] loop1: detected capacity change from 0 to 128 [ 529.143062][T12321] loop4: detected capacity change from 0 to 128 [ 529.159523][T12319] FAT-fs (loop1): bogus sectors per cluster 0 [ 529.159539][T12321] FAT-fs (loop4): bogus sectors per cluster 0 [ 529.160433][T12319] FAT-fs (loop1): Can't find a valid FAT filesystem [ 529.161382][T12321] FAT-fs (loop4): Can't find a valid FAT filesystem [ 529.542645][T12328] loop0: detected capacity change from 0 to 128 [ 529.550813][T12328] FAT-fs (loop0): bogus sectors per cluster 0 [ 529.551984][T12328] FAT-fs (loop0): Can't find a valid FAT filesystem [ 529.563570][ T9556] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 529.727083][T12331] loop2: detected capacity change from 0 to 128 [ 530.158588][T12332] loop5: detected capacity change from 0 to 128 [ 530.164628][T12331] FAT-fs (loop2): bogus sectors per cluster 0 [ 530.165626][T12331] FAT-fs (loop2): Can't find a valid FAT filesystem [ 530.222903][T12332] FAT-fs (loop5): bogus sectors per cluster 0 [ 530.223931][T12332] FAT-fs (loop5): Can't find a valid FAT filesystem [ 530.579577][T12335] loop4: detected capacity change from 0 to 32768 [ 530.585245][T12335] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 530.586704][T12335] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 530.600452][T12335] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 530.603740][ T4369] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 530.604932][ T4369] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 530.629481][ T4369] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 24ms [ 530.631797][ T4369] gfs2: fsid=syz:syz.0: jid=0: Done [ 530.633235][T12335] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 531.206734][T12335] gfs2: fsid=syz:syz.0: found 1 quota changes [ 531.657489][T12348] loop5: detected capacity change from 0 to 128 [ 531.657495][T12351] loop1: detected capacity change from 0 to 128 [ 531.682433][T12351] FAT-fs (loop1): bogus sectors per cluster 0 [ 531.683524][T12351] FAT-fs (loop1): Can't find a valid FAT filesystem [ 531.687396][T12348] FAT-fs (loop5): bogus sectors per cluster 0 [ 531.688365][T12348] FAT-fs (loop5): Can't find a valid FAT filesystem [ 531.691024][T12347] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 531.691024][T12347] inode = 11 2339 [ 531.691024][T12347] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 532.023712][T12347] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 532.026423][T12347] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:12347 [gfs2_quotad] gfs2_quota_sync+0x2cc/0x500 [ 532.104857][T12347] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 532.108372][T12347] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 532.125627][T12347] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 532.132416][T12347] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 532.134632][T12347] gfs2: fsid=syz:syz.0: File system withdrawn [ 532.138856][T12347] CPU: 0 PID: 12347 Comm: gfs2_quotad Not tainted syzkaller #0 [ 532.140037][T12347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 532.141763][T12347] Call trace: [ 532.142283][T12347] dump_backtrace+0x1c0/0x1ec [ 532.143153][T12347] show_stack+0x2c/0x3c [ 532.143858][T12347] __dump_stack+0x30/0x40 [ 532.144537][T12347] dump_stack_lvl+0xf4/0x15c [ 532.145254][T12347] dump_stack+0x1c/0x5c [ 532.145926][T12347] gfs2_withdraw+0xfa4/0x1390 [ 532.146721][T12347] gfs2_consist_inode_i+0xf0/0x10c [ 532.147550][T12347] gfs2_inode_refresh+0x918/0xd64 [ 532.148326][T12347] inode_go_instantiate+0x4c/0x68 [ 532.149140][T12347] gfs2_instantiate+0x178/0x2b4 [ 532.149878][T12347] gfs2_glock_wait+0x1b4/0x298 [ 532.150701][T12347] gfs2_glock_nq+0x8bc/0x11c4 [ 532.151447][T12347] do_sync+0x41c/0xaec [ 532.152051][T12347] gfs2_quota_sync+0x2cc/0x500 [ 532.152826][T12347] gfs2_quotad+0x2d8/0x500 [ 532.153553][T12347] kthread+0x250/0x2d8 [ 532.154239][T12347] ret_from_fork+0x10/0x20 [ 532.174174][T12362] loop1: detected capacity change from 0 to 32768 [ 532.184574][T12362] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 532.185745][T12362] CPU: 1 PID: 12362 Comm: syz.1.1585 Not tainted syzkaller #0 [ 532.186932][T12362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 532.188672][T12362] Call trace: [ 532.189216][T12362] dump_backtrace+0x1c0/0x1ec [ 532.190032][T12362] show_stack+0x2c/0x3c [ 532.190737][T12362] __dump_stack+0x30/0x40 [ 532.191410][T12362] dump_stack_lvl+0xf4/0x15c [ 532.192117][T12362] dump_stack+0x1c/0x5c [ 532.192724][T12362] sysfs_create_dir_ns+0x244/0x264 [ 532.193508][T12362] kobject_add_internal+0x598/0xb08 [ 532.194341][T12362] kobject_init_and_add+0x124/0x190 [ 532.195191][T12362] gfs2_sys_fs_add+0x200/0x41c [ 532.195957][T12362] gfs2_fill_super+0xdec/0x194c [ 532.196771][T12362] get_tree_bdev+0x358/0x544 [ 532.197496][T12362] gfs2_get_tree+0x54/0x1b4 [ 532.198208][T12362] vfs_get_tree+0x90/0x274 [ 532.198928][T12362] do_new_mount+0x228/0x810 [ 532.199655][T12362] path_mount+0x5bc/0xe80 [ 532.200373][T12362] __arm64_sys_mount+0x49c/0x59c [ 532.201118][T12362] invoke_syscall+0x98/0x2b4 [ 532.201800][T12362] el0_svc_common+0x138/0x258 [ 532.202478][T12362] do_el0_svc+0x58/0x130 [ 532.203089][T12362] el0_svc+0x58/0x128 [ 532.203643][T12362] el0t_64_sync_handler+0x84/0xf0 [ 532.204445][T12362] el0t_64_sync+0x18c/0x190 [ 532.205233][T12362] kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 532.207321][T12362] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 532.410161][ T6283] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 532.412692][ T6283] CPU: 0 PID: 6283 Comm: syz-executor Not tainted syzkaller #0 [ 532.413820][ T6283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 532.415355][ T6283] Call trace: [ 532.415824][ T6283] dump_backtrace+0x1c0/0x1ec [ 532.416554][ T6283] show_stack+0x2c/0x3c [ 532.417211][ T6283] __dump_stack+0x30/0x40 [ 532.417920][ T6283] dump_stack_lvl+0xf4/0x15c [ 532.418698][ T6283] dump_stack+0x1c/0x5c [ 532.419397][ T6283] gfs2_assert_warn_i+0x16c/0x26c [ 532.420111][ T6283] gfs2_quota_cleanup+0x464/0x668 [ 532.420906][ T6283] gfs2_put_super+0x1f0/0x760 [ 532.421650][ T6283] generic_shutdown_super+0x130/0x324 [ 532.422470][ T6283] kill_block_super+0x70/0xdc [ 532.423258][ T6283] gfs2_kill_sb+0xc0/0xd4 [ 532.424040][ T6283] deactivate_locked_super+0xac/0x120 [ 532.424958][ T6283] deactivate_super+0xe4/0x104 [ 532.425778][ T6283] cleanup_mnt+0x390/0x418 [ 532.426535][ T6283] __cleanup_mnt+0x20/0x30 [ 532.427242][ T6283] task_work_run+0x1ec/0x278 [ 532.427892][ T6283] do_notify_resume+0x1fa0/0x2aa4 [ 532.428627][ T6283] el0_svc+0x98/0x128 [ 532.429189][ T6283] el0t_64_sync_handler+0x84/0xf0 [ 532.429988][ T6283] el0t_64_sync+0x18c/0x190 [ 532.462613][ T9527] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 532.543434][ T9601] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 533.102258][T12374] loop2: detected capacity change from 0 to 4096 [ 533.117293][T12374] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 533.129777][T12374] ntfs3: loop2: mft corrupted [ 533.130699][T12374] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 533.550054][T12374] ntfs3: loop2: Failed to load $AttrDef -> 0 [ 534.358925][T12394] loop5: detected capacity change from 0 to 128 [ 534.830730][T12394] FAT-fs (loop5): bogus sectors per cluster 0 [ 534.831669][T12394] FAT-fs (loop5): Can't find a valid FAT filesystem [ 535.290784][T12409] x_tables: ip_tables: osf match: only valid for protocol 6 [ 535.325805][T12408] process 'syz.4.1596' launched '/dev/fd/5' with NULL argv: empty string added [ 535.355092][T12408] serio: Serial port ptm0 [ 535.943065][T12410] x_tables: ip_tables: osf match: only valid for protocol 6 [ 535.961747][T12408] mmap: syz.4.1596 (12408) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 537.023211][T12419] x_tables: ip_tables: osf match: only valid for protocol 6 [ 537.567048][T12428] x_tables: ip_tables: osf match: only valid for protocol 6 [ 539.183542][T12443] x_tables: ip_tables: osf match: only valid for protocol 6 [ 539.764123][T12444] x_tables: ip_tables: osf match: only valid for protocol 6 [ 539.765685][T12442] x_tables: ip_tables: osf match: only valid for protocol 6 [ 539.863046][T12445] x_tables: ip_tables: osf match: only valid for protocol 6 [ 541.477838][T12456] x_tables: ip_tables: osf match: only valid for protocol 6 [ 542.705975][T12462] 8021q: adding VLAN 0 to HW filter on device bond1 [ 543.143330][T12471] 8021q: adding VLAN 0 to HW filter on device bond1 [ 543.147124][T12462] bond1: (slave vlan2): Opening slave failed [ 543.163783][T12471] bond1: (slave vlan2): Opening slave failed [ 543.260611][T12475] serio: Serial port ptm0 [ 544.077483][T12484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1613'. [ 544.090961][T12488] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1615'. [ 544.092341][T12488] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 544.183618][T12492] serio: Serial port ptm0 [ 545.104593][T12507] x_tables: ip_tables: osf match: only valid for protocol 6 [ 545.919316][T12519] x_tables: ip_tables: osf match: only valid for protocol 6 [ 545.922934][T12520] x_tables: ip_tables: osf match: only valid for protocol 6 [ 546.591684][T12514] device ip6gre1 entered promiscuous mode [ 547.833006][T12537] x_tables: ip_tables: osf match: only valid for protocol 6 [ 549.031406][T12549] loop1: detected capacity change from 0 to 128 [ 549.233282][T12549] FAT-fs (loop1): bogus sectors per cluster 0 [ 549.234259][T12549] FAT-fs (loop1): Can't find a valid FAT filesystem [ 549.563873][ T9556] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 549.974279][T12556] x_tables: ip_tables: osf match: only valid for protocol 6 [ 550.153700][T12564] serio: Serial port ptm0 [ 550.634562][T12573] x_tables: ip_tables: osf match: only valid for protocol 6 [ 551.588637][T12583] x_tables: ip_tables: osf match: only valid for protocol 6 [ 552.383356][T12594] serio: Serial port ptm0 [ 552.513178][T12595] x_tables: ip_tables: osf match: only valid for protocol 6 [ 553.732975][T12611] x_tables: ip_tables: osf match: only valid for protocol 6 [ 553.933027][T12610] x_tables: ip_tables: osf match: only valid for protocol 6 [ 554.313542][T12612] serio: Serial port ptm0 [ 555.805391][T12621] serio: Serial port ptm0 [ 556.076938][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 556.077983][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 556.133353][T12628] device ip6gre1 entered promiscuous mode [ 556.135209][ T4538] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 556.136708][ T4538] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 556.599436][T12638] loop4: detected capacity change from 0 to 128 [ 557.143004][T12639] x_tables: ip_tables: osf match: only valid for protocol 6 [ 557.243257][T12637] x_tables: ip_tables: osf match: only valid for protocol 6 [ 558.144848][ T4538] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 558.149945][T12638] FAT-fs (loop4): bogus sectors per cluster 0 [ 558.150983][T12638] FAT-fs (loop4): Can't find a valid FAT filesystem [ 558.164473][ T4538] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 558.672979][T12650] x_tables: ip_tables: osf match: only valid for protocol 6 [ 558.753072][T12651] x_tables: ip_tables: osf match: only valid for protocol 6 [ 559.384606][ T4369] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 560.493088][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 560.632999][T12668] x_tables: ip_tables: osf match: only valid for protocol 6 [ 562.743481][T12670] serio: Serial port ptm0 [ 563.117947][T12680] serio: Serial port ptm1 [ 563.163026][T12347] ================================================================== [ 563.164413][T12347] BUG: KASAN: use-after-free in __lock_acquire+0x104/0x6800 [ 563.165644][T12347] Read of size 8 at addr ffff0000e9200bb0 by task gfs2_quotad/12347 [ 563.166902][T12347] [ 563.167310][T12347] CPU: 0 PID: 12347 Comm: gfs2_quotad Not tainted syzkaller #0 [ 563.168462][T12347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 563.170060][T12347] Call trace: [ 563.170587][T12347] dump_backtrace+0x1c0/0x1ec [ 563.171400][T12347] show_stack+0x2c/0x3c [ 563.172104][T12347] __dump_stack+0x30/0x40 [ 563.172843][T12347] dump_stack_lvl+0xf4/0x15c [ 563.173672][T12347] print_address_description+0x88/0x218 [ 563.174526][T12347] print_report+0x50/0x68 [ 563.175205][T12347] kasan_report+0xa8/0xfc [ 563.175894][T12347] __asan_report_load8_noabort+0x2c/0x38 [ 563.176725][T12347] __lock_acquire+0x104/0x6800 [ 563.177466][T12347] lock_acquire+0x20c/0x63c [ 563.178207][T12347] _raw_spin_lock_irqsave+0x6c/0xb0 [ 563.179064][T12347] finish_wait+0xc8/0x1ac [ 563.179726][T12347] gfs2_quotad+0x390/0x500 [ 563.180416][T12347] kthread+0x250/0x2d8 [ 563.181057][T12347] ret_from_fork+0x10/0x20 [ 563.181686][T12347] [ 563.182073][T12347] Allocated by task 12650: [ 563.182782][T12347] kasan_set_track+0x4c/0x80 [ 563.183583][T12347] kasan_save_alloc_info+0x24/0x30 [ 563.184428][T12347] __kasan_kmalloc+0xa0/0xb8 [ 563.185184][T12347] __kmalloc+0xec/0x178 [ 563.185843][T12347] iovec_from_user+0x94/0x5dc [ 563.186631][T12347] __import_iovec+0x84/0x470 [ 563.187304][T12347] import_iovec+0x88/0xa4 [ 563.188007][T12347] copy_msghdr_from_user+0x344/0x4d0 [ 563.188743][T12347] __sys_sendmmsg+0x314/0x834 [ 563.189455][T12347] __arm64_sys_sendmmsg+0xa0/0xbc [ 563.190295][T12347] invoke_syscall+0x98/0x2b4 [ 563.191079][T12347] el0_svc_common+0x138/0x258 [ 563.191850][T12347] do_el0_svc+0x58/0x130 [ 563.192551][T12347] el0_svc+0x58/0x128 [ 563.193172][T12347] el0t_64_sync_handler+0x84/0xf0 [ 563.193949][T12347] el0t_64_sync+0x18c/0x190 [ 563.194650][T12347] [ 563.195032][T12347] Freed by task 12650: [ 563.195619][T12347] kasan_set_track+0x4c/0x80 [ 563.196453][T12347] kasan_save_free_info+0x38/0x5c [ 563.197301][T12347] ____kasan_slab_free+0x148/0x1b0 [ 563.198065][T12347] __kasan_slab_free+0x18/0x28 [ 563.198857][T12347] slab_free_freelist_hook+0x16c/0x1e8 [ 563.199736][T12347] __kmem_cache_free+0xbc/0x218 [ 563.200456][T12347] kfree+0xd0/0x1a8 [ 563.201139][T12347] __sys_sendmmsg+0x354/0x834 [ 563.201889][T12347] __arm64_sys_sendmmsg+0xa0/0xbc [ 563.202636][T12347] invoke_syscall+0x98/0x2b4 [ 563.203334][T12347] el0_svc_common+0x138/0x258 [ 563.204063][T12347] do_el0_svc+0x58/0x130 [ 563.204721][T12347] el0_svc+0x58/0x128 [ 563.205385][T12347] el0t_64_sync_handler+0x84/0xf0 [ 563.206270][T12347] el0t_64_sync+0x18c/0x190 [ 563.207012][T12347] [ 563.207391][T12347] The buggy address belongs to the object at ffff0000e9200000 [ 563.207391][T12347] which belongs to the cache kmalloc-8k of size 8192 [ 563.209502][T12347] The buggy address is located 2992 bytes inside of [ 563.209502][T12347] 8192-byte region [ffff0000e9200000, ffff0000e9202000) [ 563.211743][T12347] [ 563.212145][T12347] The buggy address belongs to the physical page: [ 563.213248][T12347] page:0000000093bf69c7 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x129200 [ 563.214890][T12347] head:0000000093bf69c7 order:3 compound_mapcount:0 compound_pincount:0 [ 563.216163][T12347] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 563.217373][T12347] raw: 05ffc00000010200 fffffc0003779400 dead000000000003 ffff0000c0002c00 [ 563.218697][T12347] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 563.220010][T12347] page dumped because: kasan: bad access detected [ 563.221013][T12347] [ 563.221373][T12347] Memory state around the buggy address: [ 563.222222][T12347] ffff0000e9200a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 563.223490][T12347] ffff0000e9200b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 563.224758][T12347] >ffff0000e9200b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 563.225965][T12347] ^ [ 563.226886][T12347] ffff0000e9200c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 563.228240][T12347] ffff0000e9200c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 563.229614][T12347] ================================================================== [ 563.230967][T12347] Disabling lock debugging due to kernel taint [ 563.231992][T12347] INFO: trying to register non-static key. [ 563.232884][T12347] The code is fine but needs lockdep annotation, or maybe [ 563.234042][T12347] you didn't initialize this object before use? [ 563.235025][T12347] turning off the locking correctness validator. [ 563.236000][T12347] CPU: 0 PID: 12347 Comm: gfs2_quotad Tainted: G B syzkaller #0 [ 563.237364][T12347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 563.238912][T12347] Call trace: [ 563.239458][T12347] dump_backtrace+0x1c0/0x1ec [ 563.240276][T12347] show_stack+0x2c/0x3c [ 563.240950][T12347] __dump_stack+0x30/0x40 [ 563.241733][T12347] dump_stack_lvl+0xf4/0x15c [ 563.242439][T12347] dump_stack+0x1c/0x5c [ 563.243037][T12347] assign_lock_key+0x230/0x264 [ 563.243752][T12347] register_lock_class+0x1ac/0x694 [ 563.244500][T12347] __lock_acquire+0x164/0x6800 [ 563.245226][T12347] lock_acquire+0x20c/0x63c [ 563.245998][T12347] _raw_spin_lock_irqsave+0x6c/0xb0 [ 563.246828][T12347] finish_wait+0xc8/0x1ac [ 563.247474][T12347] gfs2_quotad+0x390/0x500 [ 563.248183][T12347] kthread+0x250/0x2d8 [ 563.248808][T12347] ret_from_fork+0x10/0x20 [ 563.249577][T12347] list_del corruption. prev->next should be ffff8000219a7d98, but was 0000000000000000. (prev=ffff0000e9200bd8) [ 563.251581][T12347] ------------[ cut here ]------------ [ 563.252419][T12347] kernel BUG at lib/list_debug.c:61! [ 563.253221][T12347] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 563.254548][T12347] Modules linked in: [ 563.255284][T12347] CPU: 0 PID: 12347 Comm: gfs2_quotad Tainted: G B syzkaller #0 [ 563.256880][T12347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 563.258520][T12347] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 563.259671][T12347] pc : __list_del_entry_valid+0x13c/0x158 [ 563.260642][T12347] lr : __list_del_entry_valid+0x13c/0x158 [ 563.261570][T12347] sp : ffff8000219a7c70 [ 563.262297][T12347] x29: ffff8000219a7c70 x28: 0000000000000000 x27: 0000000000000bb8 [ 563.263571][T12347] x26: 0000000000001770 x25: dfff800000000000 x24: dfff800000000000 [ 563.264867][T12347] x23: ffff0000e92007c0 x22: dfff800000000000 x21: ffff0000e9200bd8 [ 563.266212][T12347] x20: ffff0000e9200bd8 x19: ffff8000219a7d98 x18: ffff800011b8bf60 [ 563.267506][T12347] x17: 20747562202c3839 x16: ffff8000082eee68 x15: 0000000000000000 [ 563.268796][T12347] x14: 0000000000000001 x13: 1fffe00033ea87a3 x12: 0000000000ff0100 [ 563.269994][T12347] x11: ff00800008311550 x10: 0000000000000000 x9 : 180ae4f4af721a00 [ 563.271286][T12347] x8 : 180ae4f4af721a00 x7 : 0000000000000001 x6 : 0000000000000001 [ 563.272596][T12347] x5 : ffff8000219a7738 x4 : ffff8000152f4cc0 x3 : ffff80000853854c [ 563.273798][T12347] x2 : 0000000000000001 x1 : 0000000100000001 x0 : 000000000000006d [ 563.275143][T12347] Call trace: [ 563.275643][T12347] __list_del_entry_valid+0x13c/0x158 [ 563.276531][T12347] finish_wait+0xd4/0x1ac [ 563.277244][T12347] gfs2_quotad+0x390/0x500 [ 563.277953][T12347] kthread+0x250/0x2d8 [ 563.278611][T12347] ret_from_fork+0x10/0x20 [ 563.279301][T12347] Code: 91340000 aa1303e1 aa1503e3 95c1c904 (d4210000) [ 563.280479][T12347] ---[ end trace 0000000000000000 ]--- [ 563.567571][T12347] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 563.568644][T12347] SMP: stopping secondary CPUs [ 563.569387][T12347] Kernel Offset: disabled [ 563.570065][T12347] CPU features: 0x080000,000f0097,a65bfea7 [ 563.570922][T12347] Memory Limit: none [ 563.853834][T12347] Rebooting in 86400 seconds..