last executing test programs: 8.779071678s ago: executing program 0 (id=789): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000880)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x4, 0x3, 0x7, 0xc, 0x54, @mcast1, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x1, 0x80, 0x3fd, 0x1}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c61"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 7.844123972s ago: executing program 0 (id=794): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000fdffffff000000000000000185000000d40000001801000020756c25000000000020200000bfa100000010000007010000f8ffffffb702278815300000b703000000000000850000007b0000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x4], 0x0, [0x2, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}]}}]}, 0x94}, 0x1, 0x7a00}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, 0x0, 0x0) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000080)=0x19, 0x4) socket(0x10, 0x80002, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x4b, 0x4d, 0xd, 0x40, 0x451, 0x5416, 0x100, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="000010c20800"}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0500f000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a010400000000000000000100000008000b40000000000900010073797a300000000014000480100001800a000100726564697200000014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000440)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x8, 0x3a, 0x0, @private2, @mcast2, {[], @echo_request}}}}}, 0x0) 6.299911865s ago: executing program 2 (id=812): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) fanotify_init(0x20, 0x800) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r3) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000400)='X\x00\x00', 0x3}], 0x1) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000003100)) r4 = socket$l2tp(0x2, 0x2, 0x73) r5 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r5}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) close(0x3) 5.469749065s ago: executing program 3 (id=814): syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x600, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 5.403882847s ago: executing program 3 (id=815): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)="c1e220a182cfa0a8442859", 0xb}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000100)=0x98b, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x80000002, r5}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$binder(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x884, &(0x7f0000000200)={[{@max={'max', 0x3d, 0x1}}]}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, r7}, 0x14) r9 = openat$binfmt_register(0xffffff9c, &(0x7f0000005480), 0x1, 0x0) write$binfmt_register(r9, &(0x7f0000000280)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x100000002, 0x3a, 'Ui\xe7\xc7\x10\xd8t*Y\xed{ot\x1b\x1a\xde*\xb0d.', 0x3a, 'dont_appraise', 0x3a, './file0', 0x3a, [0x43, 0x43]}, 0x4a) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts-cbc-aes-neon\x00'}, 0x58) 5.335744543s ago: executing program 2 (id=817): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x7, 'vlan0\x00', {0xa}, 0x1fb}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8080) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f00000000c0)=0x8) getpid() mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x442, 0x40) r4 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r4, 0x0, 0x0) bind$netlink(r4, &(0x7f0000000480)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) r5 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000980)={0x1, @pix={0x8, 0x5, 0x47524247, 0x1, 0xc8, 0xa45, 0x2, 0x3, 0x0, 0x3, 0x2, 0x7}}) r6 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000009dc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40044}}, {{&(0x7f0000000700)=@file={0x0, './file1\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000002ac0)=[@rights={{0x14, 0x1, 0x1, [r7]}}, @cred={{0x1c, 0x1, 0x2, {r6}}}], 0x38, 0x40000}}], 0x2, 0x20000050) ptrace(0x10, r0) waitid(0x1, r0, 0x0, 0x61000006, 0x0) 4.8837957s ago: executing program 4 (id=821): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x8, 0x80000001, 0x7}, 0x42}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc8c0}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) r7 = socket(0x11, 0x800000002, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x0, @private=0xf30a4000}}) 4.229708098s ago: executing program 3 (id=822): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x17, 0xfffffffffffffffe, 0x64) r1 = socket(0x2b, 0x80801, 0x8) socket$inet6(0xa, 0xa, 0x1) setsockopt$inet6_mtu(r1, 0x29, 0x1e, &(0x7f00000000c0)=0x5, 0x4) shutdown(r1, 0x1) 4.15585798s ago: executing program 0 (id=824): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2eb, 0x282) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f0000000040)={0x0, 0x0, {0xb, 0x1, 0x7, 0x6}}) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020702500000000002020207b1bf8ff00000000bda1000000000000a7010000f8ffffffb702000008000000b7030000000000007209000006000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x810}, 0x40800) 4.114364805s ago: executing program 3 (id=826): openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config/usb_gadget/g1/UDC\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000380)='dummy_udc.0', 0xb) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='\n', 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300300001900010000000000000000001c140000fe00000100000000140012000a00f5d6a6c4b0639b11374230874419"], 0x30}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbbc59a1b7447f53fe76bb1121121be6cc815dd6003000000206cfffe8000000000000000080000000000aa000c000000007349384346f85bc22c22054aad9b3be48b4a62590e51bf97e2431e1c1b5b2a1adf9da6ae757747180e8be950a5484efc9339223b13f0c6605cb51463e1afe677187bc8f04bb4803af5d35160e591d3194faf817715c2f4529a02ed32c7e7a8ce3f0f"], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0500000000"], 0x34}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext3\x00', &(0x7f0000000600)='./file1\x00', 0x0, &(0x7f0000000000)={[{@bsdgroups}, {@user_xattr}]}, 0x1, 0x5d7, &(0x7f0000000c80)="$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") 3.987128496s ago: executing program 0 (id=827): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x2400, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x22}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}}, 0x0) 3.787898753s ago: executing program 2 (id=828): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r0, &(0x7f0000000200)={0x1d, r1}, 0x10) close(r0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)={0x28, r4, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x28}}, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, 0x800000}) 3.023131442s ago: executing program 4 (id=829): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r0, 0x407, 0x4) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000200)='c', 0x1}, {&(0x7f0000001300)="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", 0xd01}], 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000019008111e0020f060d8107040a60000000000000001455a12a0009000a000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b61602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1, 0x0, 0x17}, 0x51) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x2b0, 0xffffffff, 0x0, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x218, 0x218, 0x218, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'ipvlan0\x00', 'nr0\x00', {}, {}, 0x2f, 0x2}, 0x74000002, 0x70, 0xd0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x7, 0x11, 0x0, 0x5], 0x1, 0x5}, {0x0, [0x1, 0x1, 0x4, 0x6, 0x20], 0x3, 0x6}}}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00', {0xff}, {}, 0x16}, 0x287, 0x70, 0xb0, 0x2000000}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x3, {0x100008}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) 3.017765415s ago: executing program 1 (id=830): socket(0x11, 0x3, 0x0) (async) r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40100, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40100, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x40, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r3, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="020195ff002d3922ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f00000001c0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1200000069000100"], 0x18}, 0x1, 0x0, 0x0, 0x8041}, 0x4000) 2.971885178s ago: executing program 2 (id=831): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c4000000190001002dbd700000000000fe88fffa000000000000000000000001ac14142500000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001"], 0xc4}, 0x1, 0x0, 0x0, 0x4080}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0xffffffff}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180), 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000240), 0x3, 0x2) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 2.95890747s ago: executing program 3 (id=832): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x37, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x10, 0x0, &(0x7f0000000180)=[@request_death], 0x50, 0x0, &(0x7f0000000500)="b6eb87326432ec24b52e946042d382512c731ba74640f446e51e92783f5124c981211d727b67549e0b07ac875210cdd524df4d4ccf21c8af21d9bad85b760f491ad7d9d106b8417e43ef8d9bec28b481"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000640)=[@dead_binder_done], 0x0, 0x0, 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_hsr\x00', 0x4}, 0x18) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000024c0)=@newtaction={0xb4, 0x30, 0x58f, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80, 0x5, 0x5, 0x1, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @local, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r7, 0x3, {0x1, 0xff, 0x2}, 0xff}, 0x18) 2.944092595s ago: executing program 0 (id=833): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)="c1e220a182cfa0a8442859", 0xb}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000100)=0x98b, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x80000002, r5}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$binder(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x884, &(0x7f0000000200)={[{@max={'max', 0x3d, 0x1}}]}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0), 0x14) r8 = openat$binfmt_register(0xffffff9c, &(0x7f0000005480), 0x1, 0x0) write$binfmt_register(r8, &(0x7f0000000280)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x100000002, 0x3a, 'Ui\xe7\xc7\x10\xd8t*Y\xed{ot\x1b\x1a\xde*\xb0d.', 0x3a, 'dont_appraise', 0x3a, './file0', 0x3a, [0x43, 0x43]}, 0x4a) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts-cbc-aes-neon\x00'}, 0x58) 2.839957682s ago: executing program 4 (id=834): r0 = syz_clone(0x20200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) waitid(0x1, r0, 0x0, 0x61000006, 0x0) 2.839571399s ago: executing program 1 (id=835): r0 = epoll_create1(0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = socket(0x2, 0x80805, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001480)={'vxcan0\x00', 0x0}) sendmmsg$inet(r4, &(0x7f0000001800)=[{{&(0x7f0000001300)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000001440)=[{&(0x7f0000001340)="3dd0a4e173", 0x5}, {&(0x7f0000001380)="2f74779f083d320ac321fc0feca30d61b0bc7191af77bf4314e70a326ab38358164c2a449a9d743efe9862c5c76b34f777cbebe19c65d8d30cf85c9a4e5301917a017ba37fa55efc0c7caa47291b88fb2aabc811c6065a02437979dfade436436c1c9f59a4702214cb7123d17a26e485a8a79882fff3fe9e5fc75fe43a48d9554c6a12926f56526edb4c204e8a2e2b16bfba52a9765c1d20216f151855787ff86de92deae7831a4da3e18233df2ea08ba0e5cec9", 0xb4}], 0x2, &(0x7f00000014c0)=[@ip_retopts={{0x28, 0x0, 0x7, {[@generic={0x86, 0x4, "d307"}, @generic={0x82, 0x12, "071ff41a1e0c695a9593d1912995aeca"}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1d}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast1, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6cff97e7}}, @ip_retopts={{0x24, 0x0, 0x7, {[@noop, @ra={0x94, 0x4, 0x1}, @generic={0x86, 0xd, "2d14b45440e14171c80f57"}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x18, 0x0, 0x7, {[@noop, @ra={0x94, 0x4}]}}}, @ip_retopts={{0x84, 0x0, 0x7, {[@lsrr={0x83, 0xf, 0x99, [@dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102]}, @generic={0x83, 0x12, "01932a67f00386da5aacaa7fa7361645"}, @ra={0x94, 0x4}, @timestamp={0x44, 0x14, 0x1a, 0x0, 0x7, [0x10, 0x9, 0x6, 0xffffffff]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x34, 0x53, 0x3, 0x0, [{@loopback, 0x9}, {@multicast1, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x32}, {@private=0xa010101, 0x2}, {@local, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x170}}, {{&(0x7f0000001640)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000001780)=[{&(0x7f0000001680)="d7eb3f32b1bdcbe5e12c8fa26cb1014cdbc34a20dbd973513206c7ecbd126fcc6ba1a5d56f8f9361acf4f38105581c99136e8711f9a73a8cc98a22ebc5b919ae6048b2bf930ddf68f6f80b8bb418eafda89958ec48ede08765b7d3b049ac524801f0ad8d5e5e95d2f35543e27b45f23fbcdb6c47adc00650b11ef5491ebea6ce790a0d5cbdb7e6da491602bfa21c9f5e39518c960900628a08ef6ca35101ac5d12d1f33ca4a40b19fbbcdd9d4c314678927737b10dfa", 0xb6}, {&(0x7f0000001740)="0cd6ebe16515e6ea1580ecc9dc984c", 0xf}], 0x2, &(0x7f00000017c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x18}}], 0x2, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000300)={r3, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040)={r3, 0xb}, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000011c0)={r3, @in6={{0xa, 0x4e23, 0x3f6c, @remote, 0x7f}}, [0x6, 0x4b20, 0x8, 0x3, 0x3c7, 0x1, 0x2, 0x2, 0xb18, 0x81, 0x808000000000000, 0x80000001, 0x8, 0xfffffffffffffffc, 0x10001]}, &(0x7f00000012c0)=0x100) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000010380), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r6, &(0x7f0000000000)={0x20002004}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000019c0)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000020000000000001104000000000000f4000000000000000400000000020000000000001202000000020000000008000e030000000000000000005f"], 0x0, 0x54}, 0x28) r7 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) setresuid(0xee00, 0xee00, 0x0) write$UHID_INPUT(r7, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) r8 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r6}, 0x8) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000280)='./file0\x00', 0x0, 0x4000, r8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x14, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="a54bb60bf0ebd72beb1ac22fb6fcf27125ef06f0441c2c5adb66d03c7f2b89d5aa49ee041c0b3801157714cae6ed693009880f0bd14e9182117daed5c28dd793e858581a7156364bcc9cda55697a35f346679d6b8b58f45ffd5ebe86d6c6ec09b24d07bff8f97e76f95cb60edfdf1fc47b39c0d96b2343fe57fd2e7a3d351083ca8e0b00b5b0986ecdc798a1d83b28773b519be5d88f0855a16fd9f537d23baaf62930"], &(0x7f0000000000)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x1f00, 0x4, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe34, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 2.832661637s ago: executing program 4 (id=836): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1802000080ffffff00000000000000008500000036000000850000000800000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a80)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xe67, &(0x7f0000000500)=ANY=[], 0x0) setregid(0xee00, 0x0) setresgid(0xee00, 0x0, 0xee00) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') r4 = getpid() fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r7, 0x0) sendmmsg$unix(r3, &(0x7f0000000300)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000000c0)="adb7e79f4dd238764457f20c2774b5394e37791d958f4c49673e1d5c56fcf146a8a2843e8f282a26b91923d7b6eeaeaf9139a535e61eb784403498c1e5493033ade27231b9148251f458a7495e1b835b7820d9d97176a07cb5d630c5faee1031b3562ac2a0e862929f8686e763ada0323f1acfe9ae6ddf9c776d31", 0x7b}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="9c00004082a5ffc70507b13802000000", @ANYRES32=r4, @ANYRES32, @ANYRES32=r5, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r7], 0x38, 0x4000}}], 0x1, 0x4) 1.883267845s ago: executing program 3 (id=837): socket$inet(0x2, 0x5, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b40)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb01001800000000000000180000fa177da6134554a4e8c85e0000000c00000002000000000000080100000009000000000000060400000000612e30305f4419b71ea2be6e2e0061692e000dd554740b002b59453670ddf8a81b80d03f4fbeb8d75ee798d1a21a5328b28d38be254eb3fad1c90cbd5f7ce7e62b9dde2cda6a92dc7edffb7b1e8fc9cadcd63ffa65777822ff77d448e1d2ce5669c4c149262455100e"], &(0x7f0000001ac0)=""/85, 0x3c, 0x55, 0x1}, 0x28) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x483, 0x2000000, 0x0, 0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') mmap$IORING_OFF_CQ_RING(0x0, 0x94d, 0x8, 0x4013, r9, 0x8000000) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000108fdffffff0000000000000000", @ANYRESHEX=r2, @ANYRES16=r0], 0x44}}, 0x0) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r12 = dup(r10) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) syz_ublk_setup_queues(r12, r8, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x257}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8, 0x0, 0x146, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x8c, 0x2, 0x0, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0x1, 0x9d7c}}], 0x1, &(0x7f0000001000)={0x2e, 0x4c, 0x0, r12, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r7, '\x00', {0xffff, 0x5, 0x0, 0x0}}, 0x0) 1.850840596s ago: executing program 1 (id=838): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x1d7, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x4, 0x8}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000000c80)={0xc, {"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", 0x1000}}, 0x1006) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x10041, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010020000000000000000c0000000c00000002000000010000"], &(0x7f0000001f80)=""/218, 0x26, 0xda, 0x2}, 0x28) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/sem\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000180)=""/73, 0xfffffdef, 0x55) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) r6 = syz_io_uring_setup(0x55b, &(0x7f0000000280)={0x0, 0xfffa, 0x1000, 0x1, 0x2d9}, &(0x7f0000000300), &(0x7f0000000380), &(0x7f00000003c0)) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x5, 0x5, 0xfffffdff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xd, 0x9, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ppoll(&(0x7f0000000200)=[{r5, 0x3}, {r4, 0x8016}, {r0, 0x4020}, {r3, 0x92}, {r8, 0x16208}, {r3, 0x8000}, {r5, 0x1001}], 0x7, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f0000000340)={[0x2]}, 0x8) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r6, 0x25, &(0x7f00000000c0)={0x1, r0, 0x0, {0x31, 0x100000000}}, 0x1) 1.566515378s ago: executing program 4 (id=839): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) 1.518366326s ago: executing program 1 (id=840): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001300)={0x3c, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x65}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x2080) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000280)=ANY=[@ANYBLOB="00fcffffff01000001"]) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x6, 0x4, 0xf, 0x40000, 0xffffffffffffffff, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0x9361, 0x0) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000200)="e8b2e21f3c393ff24a9d598c27c2bfa72a9c1bf1772ef9e527c60955e1423eab5c733a0f7ee9617946de3004d1899eaa7366eaebb273efe49ad676d90e11f6acc50fd589db08c3c05b8f93f11b264eccd5b90befe11d19cae29d1105d28db095cada0532c40340449f5e559599089ebfbf0f103e686df5fa9ccc0019172313ad3aa1947f79996c182f862d9c73014453b1fe9daea675f364c74931679803216d4eb53fec874985b1191f50c1a5666a7258a890a807b037979133f4b500c0cb6fe768fca1f5015e179988edb7e8e97fef523b5a48eeb535f34b1cea58ceefc457225c28d4759a0f46991589", 0xeb, 0x4000800, &(0x7f0000000340)={0x2, 0x0, @multicast1, 0x1}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x20, &(0x7f0000000380)={&(0x7f0000000280)=""/181, 0xb5, 0x0, &(0x7f0000000340)=""/37, 0x25}}, 0x10) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x2000000009, 0x3, 0x80000002, 0x48cd, 0x5, 0xc}) r6 = add_key$user(&(0x7f0000000080), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000200)='\x00', 0x1, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r7, r6}, &(0x7f00000000c0)=""/67, 0x43, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0xb, &(0x7f0000000080)=@raw=[@generic={0x5, 0x9, 0xd, 0x3, 0x1}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xb}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @map_val={0x18, 0x2, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}], &(0x7f0000000140)='syzkaller\x00', 0x0, 0xb5, &(0x7f0000000180)=""/181, 0x41100, 0x40, '\x00', r4, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) 1.450789251s ago: executing program 2 (id=841): write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0xea60}, 0x2, 0xab4, 0x7}, 0x18) socket$igmp(0x2, 0x3, 0x2) socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, 0x0, 0x0) sendmsg$rds(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@mask_fadd={0x58, 0x118, 0x8, {{0xfffffffc, 0x1}, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x200010000000}}], 0x58}, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='dummy_hcd.0', 0xb) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="64000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a30000000001c0007800c00028008000140000000000c000180080001c0ac1414bb05000500020000000500010006"], 0x64}}, 0x0) 1.446638609s ago: executing program 0 (id=842): openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000380)='dummy_udc.0', 0xb) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='\n', 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300300001900010000000000000000001c140000fe00000100000000140012000a00f5d6a6c4b0639b11374230874419"], 0x30}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbbc59a1b7447f53fe76bb1121121be6cc815dd6003000000206cfffe8000000000000000080000000000aa000c000000007349384346f85bc22c22054aad9b3be48b4a62590e51bf97e2431e1c1b5b2a1adf9da6ae757747180e8be950a5484efc9339223b13f0c6605cb51463e1afe677187bc8f04bb4803af5d35160e591d3194faf817715c2f4529a02ed32c7e7a8ce3f0f"], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0500000000"], 0x34}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext3\x00', &(0x7f0000000600)='./file1\x00', 0x0, &(0x7f0000000000)={[{@bsdgroups}, {@user_xattr}]}, 0x1, 0x5d7, &(0x7f0000000c80)="$eJzs3V2IXGcZAOB3ZmdSu4luK7Waaput1Tb2Zza7W4KpBcmFF9qm1P5cGYlLMtmEnc3EnQl2txY2FKGCkVC90isFQcWLiKAgXhTEeil4p5QKFlECoViKolFHzpmZZTY7u5Pt/px0z/PA2f3ON+fs9555+56Z8/XMJIDcGk1+FCL2RMSrETHSXl2+wWj718XJS6eSpRCt1tNvFtLtXpi8dKq7aXe/3cmPYsSHkl+/idhdXjluY35hZqpWq8511seas2fHGvMLD52enZquTlfPTEyOHzwwcXD84KFNO9YfPf/y515//vGrF64M/+C1vfv+mcS7p/NY73FsltEY7Twn5fho7wOFiE9v9mAZGYqIUkR8IOtAWLejv//Gs938ldP6H4mhdC1iePLoWyNx4dGsYwS2Tiu12qNDrWt0dwB2hIKShpzqvtIn17/dZbvee8zslIvgd7Erh9sXgC905nYuLuW/FMXONuUtur7f97eI0Wjef+mzd38tWdJLz23874+IxfORTtStrP9COjd2S2e7eyJif0R8LCI+HhH3RsR9Gxz7mS8m+f/Tt3r7tvP8w/Xn/xMRUYmI+yPigYh4MCIe2uDYtx9J8r/7S7198p8fd3w+6wjI0u9eyjoC0vP/gVKp3/m/uHzT9wz4UyPXdtw9YIdW+v8VF9/o7XP+z4+nns46ArL0xMGsIyBL330z6wh45XD7Ym7l638xbu/ZLml/sH2pGHuT9+4R8eGI+EhE3BkRd0XEvu79RNfpq48l21eqvX0rX/+LlzdyfKztyuGIR3vu7brYk/+OW4Y6a+9N5wPKhZOna9UDEfG+dE6ofFOyPr7GGF9f/PVj/fp/cmeS/0890Z3/S5Zk/HQucEnxcumm5fudmGpObfS4abtyPuKOUr/8Fzp3ArXv62tFxNg7HOPF/T/9bb/+Tz6V5P/eB9fOP1up9b32PG6//HcV1r4/cyw9H4x1zworvRi3XejX/+TVJP9v/FH+s5PU//Da+U/P/0v36zbWP0bp4uVv9u2fTfL/l1+9k/P/rsIzaYC7On3PTTWbc+MRuwqPr+yfWH/MO1X3+eg+X0n+99/T//X//Z19kic0qez/RsT/IuJfEfHviLgaEf+JiL9HxFtrjPnLlx/5Rb/+yWeT/P/1VfWfnST/JwbUf2FZ/a+/8Z27Dn2l39g//H6S/+HK4Pp/OA1mf6fH+7/BrjdBWccJAAAAAAAAwOYopt+BVyhWltrFYqXS/g6/22K4WKs3mg+crJ87cyI6nwctF7t3eo303A863vmsaHd94pr1yYi4NSJeGro5Xa8cr9dOZH3wkFN7Il7/2ZeP79q9Sv0nXhvKOkpgKyT1f/LbQ4tJ+211Du9en1n/Lkn9//jt2fRzWeof8kX9Q36pf8gv9Q/5pf4hv9Q/5Jf6h/xS/5Bf6h/yq7f+gXx68siRZGl1v/fzTH369Myps4cmDlRmzx2vHK/Pna1M1+vT6Sd2Zgf/vVq9fnb84Tj33Fiz2miONeYXjs3Wz51pHku/N/pYtbwNxwQM9o8/f+Hnt+575Q+FiFh85OZ0iZ7vzlarsLO59If8KmUdAJCZ9D1+IesogCwNOgWs+o9/H938WIDtUcw6ACAz9+01/w95Zf4f8sv8P+SX9/iA+X/IH/P/kF/Vucb8wsxUrbaikXVkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD51JhfmJmq1apzGho3TON83BBhbEajdGOEsVrj/wEAAP//LCZEbA==") 1.441331282s ago: executing program 4 (id=843): openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000380)='dummy_udc.0', 0xb) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='\n', 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300300001900010000000000000000001c140000fe00000100000000140012000a00f5d6a6c4b0639b11374230874419"], 0x30}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbbc59a1b7447f53fe76bb1121121be6cc815dd6003000000206cfffe8000000000000000080000000000aa000c000000007349384346f85bc22c22054aad9b3be48b4a62590e51bf97e2431e1c1b5b2a1adf9da6ae757747180e8be950a5484efc9339223b13f0c6605cb51463e1afe677187bc8f04bb4803af5d35160e591d3194faf817715c2f4529a02ed32c7e7a8ce3f0f"], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0500000000"], 0x34}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext3\x00', &(0x7f0000000600)='./file1\x00', 0x0, &(0x7f0000000000)={[{@bsdgroups}, {@user_xattr}]}, 0x1, 0x5d7, &(0x7f0000000c80)="$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") 1.379846158s ago: executing program 1 (id=844): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x8100, &(0x7f0000000280)={&(0x7f00000024c0)=@newtaction={0xb4, 0x30, 0x58f, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80, 0x5, 0x5, 0x1, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @local, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 359.986508ms ago: executing program 1 (id=845): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000240)={r3, 0x0, 0x47, 0x9, 0x5, 0x8}, &(0x7f0000000280)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="3000000000080500000000000000000008000005050003000600000004000480060002409100000004000480040002"], 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000800) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000004c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010027bd7000fddbdf250c00000018000380140003800c00018008000100080000000400018018000180140061647600"], 0x44}, 0x1, 0x0, 0x0, 0x881}, 0x8000) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000011000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="000000000000000024001a80200004801c"], 0x44}}, 0x0) r13 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r13) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r14 = socket$kcm(0x11, 0x3, 0x0) r15 = socket(0x400000000010, 0x3, 0x0) r16 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r17, {0x1, 0x4}, {}, {0x8, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x10000, 0x40, 0x6, 0x4, 0xffffffff}, 0x8, 0x75, [{0x200, 0xffffff19, 0x3, 0x2, 0x101, 0x5}]}, [{0xfffff960, 0x8, 0x9, 0x9, 0x5, 0x81}, {0x10001, 0x2, 0x1, 0x8, 0xffff5cdb, 0x3d}, {0xf, 0x1, 0x10001, 0x1, 0x3, 0x6}, {0x9, 0xff, 0x10001, 0x0, 0x4, 0x78f}, {0x96, 0x7fffffff, 0xc, 0xfffffffe, 0x3, 0x8}, {0x0, 0xc44, 0x2, 0x7ff, 0x5, 0xc}, {0x7f, 0x7, 0x2, 0x9, 0x7, 0x6b}, {0xfe, 0x2, 0x7, 0x40, 0x0, 0x1}, {0x4, 0x6, 0x2, 0x8, 0x9, 0xfffffff7}, {0x80, 0x3, 0x7, 0x0, 0x2, 0x8}, {0x7ff, 0x8, 0x7fff, 0xa, 0x102a00, 0x1}, {0x2, 0x7, 0x9, 0x1, 0xaea6, 0x4}, {0x3, 0xf, 0xfffffff4, 0x4dd, 0x7, 0x9}, {0x1, 0x240, 0x7fff, 0x5, 0x2e7f, 0xed}, {0x7, 0x8, 0x401, 0x2, 0x4c, 0x3}, {0x7, 0x3, 0xae, 0x8, 0x1, 0xa}, {0x9, 0x4, 0x0, 0x0, 0x7, 0xfffffc00}, {0x200, 0xff, 0x7, 0x6, 0x0, 0xfffffffe}, {0x100, 0x7, 0x6, 0x8, 0x3}, {0x8001, 0x80, 0x6d9, 0x4, 0x5, 0x5}, {0xfffffffd, 0x7f, 0x5, 0x1, 0x4}, {0x24, 0xfffffff7, 0x0, 0x5, 0x6, 0xa}, {0x7, 0x3, 0x3, 0xfffffff9, 0xe40, 0xff}, {0x3, 0x40, 0xc3, 0x3, 0x6, 0x7}, {0x6f4, 0x5, 0x8, 0x4, 0x1, 0xff}, {0x0, 0x4, 0xff, 0x5971f7f6, 0x1, 0x7f}, {0xdbc, 0x9, 0x1cdb, 0x5, 0x429, 0x5}, {0xfffffffd, 0x6, 0x7, 0x9, 0x3, 0x9}, {0x8, 0x4, 0x9, 0xd, 0x0, 0x81}, {0x3, 0x1, 0xffff, 0x80000000, 0x3, 0xfffffff7}, {0x8, 0x0, 0xd, 0x1ff, 0x7ff, 0x5}, {0x2, 0x0, 0x2, 0x7fffffff, 0x7, 0x9}, {0x3, 0x9, 0xc, 0x2, 0x5, 0xae5}, {0x33992c94, 0x80, 0x0, 0x548c, 0x7, 0x2}, {0x7, 0xfffffff8, 0x9, 0x8000000, 0xf}, {0x401, 0x200, 0x4, 0x5, 0x800, 0xc62}, {0xd, 0x8001, 0x4e, 0x1, 0x7, 0x10001}, {0x0, 0x4, 0x2, 0xa530, 0x8, 0x1}, {0xf, 0xb, 0x2, 0x10000, 0x1, 0x2}, {0x5, 0x8, 0x4, 0x4, 0x0, 0xf8c}, {0x7, 0x2, 0x7, 0x6, 0x3, 0x80}, {0x5, 0x38, 0x7, 0x2, 0x1a00000, 0x6}, {0x571, 0x3, 0x95d, 0x9, 0x1000, 0x5}, {0x7, 0x0, 0x200, 0x0, 0x5, 0x10}, {0x4, 0xb0, 0x1, 0x4, 0x9, 0x1}, {0x8, 0x8, 0x101, 0x32, 0x3ff, 0x7}, {0x1, 0x4, 0x9c, 0x1, 0x7, 0x100}, {0x2, 0xfffffffc, 0x7, 0xfa1, 0x5, 0x1000}, {0x1, 0x40000001, 0xc, 0xdcc, 0x5, 0xa}, {0x7, 0x2, 0xffff, 0x8, 0x5, 0xa}, {0xb751, 0x10001, 0x420, 0x7, 0x9, 0x3}, {0x5, 0x9, 0x7966, 0xc, 0x0, 0x9}, {0x4, 0x2, 0x2, 0x7, 0xfffffff7}, {0xfffffffb, 0x4, 0x4, 0x4, 0x1, 0xf}, {0x8, 0x6, 0x4, 0x0, 0x4, 0x3}, {0xe, 0x5f67, 0x3, 0x8, 0x69, 0xdf}, {0x7f, 0x9, 0x2, 0x2a, 0x5, 0x9}, {0x0, 0x400, 0xa33d0a0d, 0x0, 0x8, 0x8}, {0x0, 0x3, 0x9, 0x9, 0x7, 0x6}, {0x9, 0x1, 0x6, 0x7fff, 0x0, 0xfffffff5}, {0x8, 0x8, 0x2, 0x7, 0x7, 0x4}, {0xff, 0x5, 0x23522536, 0x5, 0x7ff, 0x9}, {0x2, 0x0, 0x6, 0x0, 0x8, 0x1ff}, {0x4, 0x7ea6b718, 0x4, 0xa, 0x76c, 0x8001}, {0x9, 0x8, 0x7, 0x0, 0xd, 0xffffffff}, {0x7, 0x1, 0x9, 0xffffffff, 0x0, 0x4}, {0x2, 0x3, 0x1cb973da, 0x8, 0x5, 0x2}, {0x2, 0x1ff, 0x7, 0xf, 0x8, 0x8001}, {0x4, 0x897a, 0x6, 0x1, 0xf93a}, {0x8, 0xffffffff, 0x5, 0x3, 0xfffffff5, 0x1}, {0x6f, 0x5, 0x6, 0x9, 0xf, 0x8}, {0x4, 0xffffffff, 0x10001, 0x40, 0x708, 0xf}, {0xb4, 0x1, 0x1000, 0xd, 0x77, 0x3}, {0x3, 0xfffff800, 0x4, 0x9, 0x2, 0x5c}, {0x4, 0x2, 0x6, 0x6, 0x2, 0x5}, {0xb, 0x1, 0x40, 0x1, 0x9, 0x1}, {0x2, 0x1, 0xd7, 0x1, 0xffff, 0x8}, {0xdecf, 0x86ac, 0x9, 0x81, 0x3, 0x4}, {0x7, 0xbd1, 0xb0, 0x3, 0x8, 0x1}, {0x2, 0x42a6, 0x5, 0x7, 0x1, 0x5}, {0x9, 0xc, 0x5, 0x6958, 0x7ff, 0x9}, {0x12a, 0x401, 0x8001, 0x8264, 0x7a80, 0x56cc}, {0x0, 0x3ff, 0x1, 0x7, 0xcb, 0xffffff2c}, {0x7d, 0x200, 0x5, 0xdba, 0x3, 0xfffffffd}, {0x3ff, 0x2c446a3, 0x3, 0x3, 0x40, 0xc}, {0x7, 0x81, 0x5, 0x8, 0xf0000000, 0x9}, {0x3, 0x0, 0x6, 0x8000, 0x1000, 0x6}, {0x1, 0x8000, 0x8, 0xe, 0x6, 0x10000}, {0x0, 0x6, 0x3, 0x8, 0x3, 0x7}, {0x9, 0x0, 0xffffffff, 0xfffffffe, 0x1, 0x1}, {0x4011a031, 0x7, 0x6, 0x0, 0x5, 0xfffffffe}, {0x180, 0xffff, 0x2, 0x9, 0x6, 0x7f}, {0x0, 0x9, 0xa4, 0x2, 0x6, 0x290}, {0x2, 0x9, 0x9f0, 0x9, 0x1, 0xc}, {0x3, 0x7, 0x101, 0x0, 0x0, 0xa8}, {0xffffffc2, 0x58b, 0x2, 0x4, 0x2}, {0x101, 0x4, 0xffffffff, 0x7, 0x1, 0x6}, {0x1, 0x7, 0x4, 0x1, 0x10000, 0x4}, {0x9, 0x1, 0x0, 0x7, 0x16a, 0x9}, {0xe8cb, 0x228, 0x5, 0x5, 0x1, 0x60000000}, {0x7, 0x400, 0xfffffffb, 0x1000, 0x9, 0xfffffff9}, {0xfffffffe, 0x401, 0x9, 0x12, 0x5, 0x80000000}, {0x8, 0xa570, 0x80, 0x3, 0x6, 0x5446}, {0x4, 0xfff, 0xec, 0xe1e, 0x8ee, 0x4}, {0xffffffff, 0x290, 0x6, 0xc, 0x401, 0x3}, {0x8, 0x4e5b, 0xfff, 0xfffffffe, 0x10000, 0xfffffffd}, {0x2, 0x6, 0x9, 0x5, 0x4, 0x9}, {0x3, 0x0, 0x400, 0x2, 0x1, 0x1}, {0x7, 0x6, 0x1, 0xf, 0x7, 0xb391}, {0x3, 0x1000, 0x6, 0x5, 0x80000000, 0x80000000}, {0xd, 0x6187, 0x7, 0xfffffffa, 0x1, 0x8}, {0x6, 0x2, 0x1000, 0x99, 0x8, 0x6}, {0x14e7, 0x9, 0x0, 0x1, 0x7fffffff}, {0x7, 0x4, 0x8, 0xa6, 0x2, 0x8}, {0x2, 0x3, 0xd, 0x9, 0x9, 0x39}, {0xfff, 0x1, 0x6, 0x9, 0x2, 0x9}, {0x0, 0x3abc0b25, 0x7f, 0xfffffffa, 0x57fd}, {0x6, 0x2, 0x3, 0x6, 0x5a87298a, 0x106}, {0x10000, 0x0, 0x8, 0x0, 0x0, 0x80000000}, {0x3c, 0x120000, 0x81, 0x2, 0x6}, {0xd, 0x10001, 0x6, 0x1, 0x3, 0x547}, {0x1, 0x8, 0x6, 0x1, 0x6, 0x200}, {0xa506, 0x3, 0x9, 0x3, 0x0, 0x5}, {0x7fff, 0x6, 0x1, 0x9, 0x1ff, 0x1}, {0x9, 0x407e135f, 0x0, 0x5, 0x6}, {0x0, 0x5, 0x272, 0x4, 0x0, 0xe}, {0xfffffffb, 0x1, 0x4, 0x7, 0x0, 0x3}, {0x8, 0xfffffff8, 0x8, 0x2, 0x1300000, 0x80000001}], [{0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x15b618ba19bd88fd}, {}, {0x2}, {0xdce5abc8a6e8d113}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x2}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0xe86eac2b022541d9}, {0x3}, {0x6, 0x1}, {0x1}, {0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x5}, {0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x5}, {0x3, 0x1}, {0x2, 0x3}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x4}, {0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x5}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x889f0d205037cd24}, {0x5}, {0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0xd122595bc897e202, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1}, {0x7}, {0x5}, {0x5}, {0x3, 0x1}, {0x4}, {0x2, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r14, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r7, 0x17}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x4000880) 0s ago: executing program 2 (id=846): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0x10013}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x44050) r1 = syz_open_dev$video(&(0x7f0000000140), 0x7fffffff, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f00000000c0)) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x1412, 0x100, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4004801) munlock(&(0x7f0000002000/0x1000)=nil, 0xffffffffdfffdfff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.96' (ED25519) to the list of known hosts. [ 28.703340][ T4695] cgroup: Unknown subsys name 'net' [ 28.823336][ T4695] cgroup: Unknown subsys name 'cpuset' [ 28.825367][ T4695] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.014714][ T4695] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 29.839158][ T4712] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.841542][ T4712] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.843174][ T4712] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.844838][ T4712] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.846470][ T4712] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.852790][ T4715] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.855661][ T4715] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.860231][ T4715] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.863917][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.865730][ T4719] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.867333][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.868736][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.870105][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.871925][ T4719] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.876062][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.876433][ T4723] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.876639][ T4723] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.876872][ T4723] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.877304][ T4712] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.877541][ T4712] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.878428][ T4711] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.891292][ T4715] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.891568][ T4715] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.891929][ T4715] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.892755][ T4715] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.165368][ T4721] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.165609][ T4721] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.165674][ T4721] bridge_slave_0: entered allmulticast mode [ 30.166152][ T4721] bridge_slave_0: entered promiscuous mode [ 30.167546][ T4721] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.167568][ T4721] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.167654][ T4721] bridge_slave_1: entered allmulticast mode [ 30.168073][ T4721] bridge_slave_1: entered promiscuous mode [ 30.194165][ T4721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.195138][ T4721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.209530][ T4721] team0: Port device team_slave_0 added [ 30.211789][ T4721] team0: Port device team_slave_1 added [ 30.230127][ T4721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.231464][ T4721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.237774][ T4721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.243454][ T4721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.244776][ T4721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.246498][ T4721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.280452][ T4721] hsr_slave_0: entered promiscuous mode [ 30.280840][ T4721] hsr_slave_1: entered promiscuous mode [ 30.307114][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.307192][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.307249][ T4709] bridge_slave_0: entered allmulticast mode [ 30.307687][ T4709] bridge_slave_0: entered promiscuous mode [ 30.308509][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.308532][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.308579][ T4709] bridge_slave_1: entered allmulticast mode [ 30.308981][ T4709] bridge_slave_1: entered promiscuous mode [ 30.314171][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.314198][ T4708] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.314248][ T4708] bridge_slave_0: entered allmulticast mode [ 30.314785][ T4708] bridge_slave_0: entered promiscuous mode [ 30.315571][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.315591][ T4708] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.315671][ T4708] bridge_slave_1: entered allmulticast mode [ 30.316066][ T4708] bridge_slave_1: entered promiscuous mode [ 30.330955][ T4708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.335443][ T4708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.349428][ T4709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.350486][ T4709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.359859][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.361145][ T4717] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.362138][ T4717] bridge_slave_0: entered allmulticast mode [ 30.362566][ T4717] bridge_slave_0: entered promiscuous mode [ 30.371895][ T4708] team0: Port device team_slave_0 added [ 30.375769][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.377200][ T4717] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.378905][ T4717] bridge_slave_1: entered allmulticast mode [ 30.380654][ T4717] bridge_slave_1: entered promiscuous mode [ 30.388093][ T4709] team0: Port device team_slave_0 added [ 30.389465][ T4709] team0: Port device team_slave_1 added [ 30.391146][ T4708] team0: Port device team_slave_1 added [ 30.412668][ T4707] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.412776][ T4707] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.412872][ T4707] bridge_slave_0: entered allmulticast mode [ 30.413287][ T4707] bridge_slave_0: entered promiscuous mode [ 30.418400][ T4717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.420027][ T4717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.429185][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.429207][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.429235][ T4708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.432327][ T4707] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.432383][ T4707] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.432433][ T4707] bridge_slave_1: entered allmulticast mode [ 30.432827][ T4707] bridge_slave_1: entered promiscuous mode [ 30.439865][ T4707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.440775][ T4707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.446684][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.447953][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.452208][ T4709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.452787][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.452794][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.452810][ T4709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.463312][ T4709] hsr_slave_0: entered promiscuous mode [ 30.463670][ T4709] hsr_slave_1: entered promiscuous mode [ 30.463889][ T4709] debugfs: 'hsr0' already exists in 'hsr' [ 30.463922][ T4709] Cannot create hsr debugfs directory [ 30.464765][ T4717] team0: Port device team_slave_0 added [ 30.467326][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.467334][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.467348][ T4708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.475389][ T4707] team0: Port device team_slave_0 added [ 30.478640][ T4717] team0: Port device team_slave_1 added [ 30.482295][ T4707] team0: Port device team_slave_1 added [ 30.508956][ T4708] hsr_slave_0: entered promiscuous mode [ 30.509279][ T4708] hsr_slave_1: entered promiscuous mode [ 30.509484][ T4708] debugfs: 'hsr0' already exists in 'hsr' [ 30.509493][ T4708] Cannot create hsr debugfs directory [ 30.512538][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.512546][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.512559][ T4717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.513135][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.513142][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.513155][ T4717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.524432][ T4717] hsr_slave_0: entered promiscuous mode [ 30.524734][ T4717] hsr_slave_1: entered promiscuous mode [ 30.524932][ T4717] debugfs: 'hsr0' already exists in 'hsr' [ 30.524941][ T4717] Cannot create hsr debugfs directory [ 30.537784][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.537804][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.537817][ T4707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.538424][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.538430][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.538440][ T4707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.563276][ T4707] hsr_slave_0: entered promiscuous mode [ 30.563599][ T4707] hsr_slave_1: entered promiscuous mode [ 30.564092][ T4707] debugfs: 'hsr0' already exists in 'hsr' [ 30.564101][ T4707] Cannot create hsr debugfs directory [ 30.592530][ T4721] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.595870][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.612122][ T4721] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.614844][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.616546][ T4721] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.618938][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.628859][ T4721] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.631012][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.675917][ T4709] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.679178][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.684791][ T4709] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.687854][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.691106][ T4709] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.693366][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.700031][ T4709] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.702576][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.703437][ T4721] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.703466][ T4721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.703596][ T4721] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.703624][ T4721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.731601][ T4721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.733023][ T4707] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.735181][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.738691][ T4707] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.740915][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.741416][ T4707] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.744221][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.746468][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.746516][ T4709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.746585][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.746613][ T4709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.747874][ T4707] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.750067][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.760819][ T1726] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.762795][ T1726] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.765649][ T1726] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.767274][ T1726] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.788921][ T4721] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.796446][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.796494][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.799484][ T4717] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.801754][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.804231][ T1726] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.804267][ T1726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.812649][ T4717] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.815042][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.816754][ T4717] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.818847][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.820363][ T4717] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.822483][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.848254][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.854091][ T4708] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.856465][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.858107][ T4708] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.860166][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.867351][ T4708] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.869437][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.869773][ T4708] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.871400][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.883965][ T4709] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.889282][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.889327][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.896697][ T4707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.916329][ T1726] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.916364][ T1726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.927526][ T4707] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.935630][ T1726] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.935674][ T1726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.936016][ T1726] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.936034][ T1726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.950903][ T4717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.967393][ T4708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.973069][ T4717] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.990568][ T130] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.990610][ T130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.996311][ T4708] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.998264][ T4744] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.998310][ T4744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.025292][ T1726] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.025332][ T1726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.028801][ T1726] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.028838][ T1726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.116141][ T4721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.156501][ T4721] veth0_vlan: entered promiscuous mode [ 31.164421][ T4721] veth1_vlan: entered promiscuous mode [ 31.181803][ T4721] veth0_macvtap: entered promiscuous mode [ 31.185057][ T4721] veth1_macvtap: entered promiscuous mode [ 31.194046][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.196429][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.200667][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.200770][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.200823][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.205287][ T130] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.241017][ T4707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.267124][ T4744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.267151][ T4744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.276664][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.288725][ T4708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.306971][ T1726] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.307001][ T1726] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.316859][ T4709] veth0_vlan: entered promiscuous mode [ 31.320217][ T4717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.324958][ T4708] veth0_vlan: entered promiscuous mode [ 31.336640][ T4708] veth1_vlan: entered promiscuous mode [ 31.339152][ T4709] veth1_vlan: entered promiscuous mode [ 31.351553][ T4708] veth0_macvtap: entered promiscuous mode [ 31.358450][ T4717] veth0_vlan: entered promiscuous mode [ 31.367546][ T4721] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.374387][ T4708] veth1_macvtap: entered promiscuous mode [ 31.384523][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.398423][ T4888] loop0: detected capacity change from 0 to 512 [ 31.399932][ T4888] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.400248][ T4888] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 31.405222][ T4717] veth1_vlan: entered promiscuous mode [ 31.410122][ T4888] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 31.410701][ T4888] EXT4-fs (loop0): 1 truncate cleaned up [ 31.411169][ T4888] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.418723][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.422343][ T39] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.422488][ T39] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.422513][ T39] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.422535][ T39] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.446229][ T4717] veth0_macvtap: entered promiscuous mode [ 31.448635][ T4717] veth1_macvtap: entered promiscuous mode [ 31.455220][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.457863][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.475674][ T4744] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.475930][ T4744] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.475966][ T4744] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.475987][ T4744] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.484222][ T4707] veth0_vlan: entered promiscuous mode [ 31.509021][ T4744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.509049][ T4744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.512851][ T4709] veth0_macvtap: entered promiscuous mode [ 31.515107][ T4709] veth1_macvtap: entered promiscuous mode [ 31.521347][ T4707] veth1_vlan: entered promiscuous mode [ 31.527583][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.528913][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.539227][ T130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.539252][ T130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.543877][ T4744] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.543926][ T4744] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.544045][ T4744] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.544068][ T4744] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.862660][ T4719] Bluetooth: hci0: command tx timeout [ 31.880584][ T130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.880612][ T130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.899692][ T4744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.899722][ T4744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.900622][ T4707] veth0_macvtap: entered promiscuous mode [ 31.907037][ T4707] veth1_macvtap: entered promiscuous mode [ 31.923290][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.925602][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.932127][ T4715] Bluetooth: hci2: command tx timeout [ 31.932285][ T4715] Bluetooth: hci1: command tx timeout [ 31.932359][ T4715] Bluetooth: hci3: command tx timeout [ 31.935433][ T4719] Bluetooth: hci4: command tx timeout [ 31.937909][ T4744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.937938][ T4744] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.944496][ T4744] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.944551][ T4744] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.944576][ T4744] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.944593][ T4744] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.951019][ T4744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.951056][ T4744] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.008779][ T130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.010609][ T4744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.012911][ T4744] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.015942][ T130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.270922][ T4905] fuse: Bad value for 'fd' [ 32.427871][ T4721] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.742193][ T40] Bluetooth: Error in BCSP hdr checksum [ 34.082240][ T4711] Bluetooth: hci1: command tx timeout [ 34.083869][ T4711] Bluetooth: hci4: command tx timeout [ 34.085213][ T4711] Bluetooth: hci3: command tx timeout [ 34.085407][ T4711] Bluetooth: hci2: command tx timeout [ 34.089426][ T4712] Bluetooth: hci0: command tx timeout [ 34.320712][ T4945] loop4: detected capacity change from 0 to 1024 [ 34.323153][ T4945] EXT4-fs: Invalid want_extra_isize 7 [ 34.612150][ T4949] faux_driver vkms: [drm] Unknown color mode 43; guessing buffer size. [ 35.372338][ T4715] Bluetooth: hci5: command 0x1003 tx timeout [ 35.373020][ T4719] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 36.049832][ T4956] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 36.049883][ T4956] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 36.092437][ T4715] Bluetooth: hci2: command tx timeout [ 36.092468][ T4715] Bluetooth: hci3: command tx timeout [ 36.092495][ T4715] Bluetooth: hci4: command tx timeout [ 36.092513][ T4715] Bluetooth: hci1: command tx timeout [ 36.092855][ T4719] Bluetooth: hci0: command tx timeout [ 36.115092][ T4956] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 36.115118][ T4956] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 36.131473][ T4987] syz.4.21 uses obsolete (PF_INET,SOCK_PACKET) [ 36.165239][ T4956] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 36.165262][ T4956] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 36.202617][ T4956] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 36.202647][ T4956] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 36.232708][ T4956] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 36.232736][ T4956] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 36.875976][ T5044] fuse: Bad value for 'fd' [ 36.978204][ T5053] fuse: Bad value for 'fd' [ 37.706889][ T5066] loop3: detected capacity change from 0 to 1024 [ 38.040794][ T5066] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 38.040872][ T5066] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 38.041230][ T5066] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.27: Failed to acquire dquot type 0 [ 38.041374][ T5066] loop3: lost filesystem error report for type 5 error -5 [ 38.047805][ T5066] EXT4-fs (loop3): 1 truncate cleaned up [ 38.048277][ T5066] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.018811][ T5099] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 40.142054][ T9] IPVS: starting estimator thread 0... [ 40.223116][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.243829][ T5104] IPVS: using max 60 ests per chain, 144000 per kthread [ 41.013289][ T5114] ptrace attach of ""[5124] was attempted by "ci-upstream-gce-arm64/syz-executor exec"[5114] [ 41.454456][ T5131] trusted_key: syz.3.40 sent an empty control message without MSG_MORE. [ 43.175490][ T5157] loop2: detected capacity change from 0 to 1024 [ 43.212773][ T5157] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 43.212816][ T5157] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 43.212843][ T5157] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.46: Failed to acquire dquot type 0 [ 43.212863][ T5157] loop2: lost filesystem error report for type 5 error -5 [ 43.220261][ T5157] EXT4-fs (loop2): 1 truncate cleaned up [ 43.223061][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 43.223073][ C0] EXT4-fs (loop2): initial error at time 43: ext4_acquire_dquot:7041 [ 43.223089][ C0] EXT4-fs (loop2): last error at time 43: ext4_acquire_dquot:7041 [ 43.229569][ T5157] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.044481][ T4816] IPVS: starting estimator thread 0... [ 44.049854][ T5174] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 44.049919][ T5174] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 44.049930][ T5174] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.46: Failed to acquire dquot type 0 [ 44.082985][ T5178] vlan2: entered promiscuous mode [ 44.084301][ T5178] hsr0: entered promiscuous mode [ 44.084431][ T5178] vlan2: entered allmulticast mode [ 44.084439][ T5178] hsr0: entered allmulticast mode [ 44.084446][ T5178] hsr_slave_0: entered allmulticast mode [ 44.084456][ T5178] hsr_slave_1: entered allmulticast mode [ 44.097044][ T5178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.51'. [ 44.099807][ T5178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.51'. [ 44.103279][ T5178] hsr_slave_0: left promiscuous mode [ 44.104938][ T5178] hsr_slave_1: left promiscuous mode [ 44.132075][ T5176] IPVS: using max 61 ests per chain, 146400 per kthread [ 44.206375][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.134721][ T5192] ptrace attach of ""[5193] was attempted by "ci-upstream-gce-arm64/syz-executor exec"[5192] [ 45.714214][ T5198] loop0: detected capacity change from 0 to 128 [ 45.721715][ T5198] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.722860][ T5197] loop2: detected capacity change from 0 to 1024 [ 45.743428][ T5197] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 45.743472][ T5197] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 45.743493][ T5197] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.56: Failed to acquire dquot type 0 [ 45.743509][ T5197] loop2: lost filesystem error report for type 5 error -5 [ 45.745526][ T5197] EXT4-fs (loop2): 1 truncate cleaned up [ 45.749350][ T5197] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.919980][ T5202] overlayfs: missing 'lowerdir' [ 46.208850][ T5206] loop4: detected capacity change from 0 to 128 [ 46.220323][ T5206] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.587470][ T5217] overlayfs: missing 'lowerdir' [ 46.608654][ T5214] overlayfs: missing 'lowerdir' [ 46.743134][ T5213] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 46.743178][ T5213] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 46.743196][ T5213] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.56: Failed to acquire dquot type 0 [ 46.954091][ T4721] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.954999][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.119004][ T4707] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.642116][ T5238] overlayfs: missing 'lowerdir' [ 49.137184][ T5257] loop4: detected capacity change from 0 to 1024 [ 49.379699][ T5257] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 49.382032][ T5257] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 49.384266][ T5257] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.70: Failed to acquire dquot type 0 [ 49.420223][ T5257] loop4: lost filesystem error report for type 5 error -5 [ 49.421992][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 49.422009][ C1] EXT4-fs (loop4): initial error at time 49: ext4_acquire_dquot:7041 [ 49.422022][ C1] EXT4-fs (loop4): last error at time 49: ext4_acquire_dquot:7041 [ 49.439281][ T5257] EXT4-fs (loop4): 1 truncate cleaned up [ 49.446407][ T5257] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.230479][ T5276] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 50.230707][ T5276] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 50.230764][ T5276] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.70: Failed to acquire dquot type 0 [ 50.423344][ T4794] IPVS: starting estimator thread 0... [ 50.425477][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.542051][ T5277] IPVS: using max 61 ests per chain, 146400 per kthread [ 50.543885][ T5283] loop4: detected capacity change from 0 to 1024 [ 50.561830][ T5283] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 50.561885][ T5283] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 50.561895][ T5283] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.76: Failed to acquire dquot type 0 [ 50.561907][ T5283] loop4: lost filesystem error report for type 5 error -5 [ 50.571980][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 50.571994][ C0] EXT4-fs (loop4): initial error at time 50: ext4_acquire_dquot:7041 [ 50.572010][ C0] EXT4-fs (loop4): last error at time 50: ext4_acquire_dquot:7041 [ 50.755645][ T5283] EXT4-fs (loop4): 1 truncate cleaned up [ 50.757395][ T5283] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.061031][ T5295] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 51.061187][ T5295] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 51.061246][ T5295] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.76: Failed to acquire dquot type 0 [ 51.534376][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.440494][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 52.501907][ T5323] syzkaller0: entered promiscuous mode [ 52.501937][ T5323] syzkaller0: entered allmulticast mode [ 52.563323][ T5323] tipc: Started in network mode [ 52.564340][ T5323] tipc: Node identity f6c434611c3c, cluster identity 4711 [ 52.565982][ T5323] tipc: Enabled bearer , priority 0 [ 52.582849][ T5322] tipc: Resetting bearer [ 52.587918][ T5322] tipc: Disabling bearer [ 52.797325][ T24] usb 1-1: Dual-Role OTG device on HNP port [ 52.798337][ T24] usb 1-1: New USB device found, idVendor=1234, idProduct=0000, bcdDevice= 7.02 [ 52.798354][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.802138][ C1] configfs-gadget.g1 gadget.0: Using interface 0 [ 52.839354][ T24] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 2 vid 0x1234 pid 0x0000 [ 53.813313][ T5352] syzkaller0: entered promiscuous mode [ 53.814560][ T5352] syzkaller0: entered allmulticast mode [ 53.825972][ T5352] tipc: Enabled bearer , priority 0 [ 54.058495][ T5349] tipc: Resetting bearer [ 54.064964][ T5349] tipc: Disabling bearer [ 54.813243][ T5375] Soft offlining pfn 0x1223d2 at process virtual address 0x20ffe000 [ 54.823612][ T5375] Soft offlining pfn 0x11e91e at process virtual address 0x20fff000 [ 55.205753][ T5381] loop4: detected capacity change from 0 to 512 [ 55.208444][ T5381] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 55.213601][ T24] usb 1-1: USB disconnect, device number 2 [ 55.224289][ T24] usblp0: removed [ 56.423996][ T5400] Soft offlining pfn 0x136dc5 at process virtual address 0x20ffe000 [ 56.426312][ T5400] Soft offlining pfn 0x132cd1 at process virtual address 0x20fff000 [ 56.746551][ T5408] Soft offlining pfn 0x1359f3 at process virtual address 0x20ffe000 [ 56.748918][ T5408] Soft offlining pfn 0x1359e2 at process virtual address 0x20fff000 [ 57.300741][ T5417] Soft offlining pfn 0x131d80 at process virtual address 0x20ffe000 [ 57.302628][ T5417] Soft offlining pfn 0x133ed8 at process virtual address 0x20fff000 [ 58.098104][ T5432] syzkaller0: entered promiscuous mode [ 58.099393][ T5432] syzkaller0: entered allmulticast mode [ 58.500916][ T5438] syz_tun: entered allmulticast mode [ 58.509255][ T5441] Soft offlining pfn 0x1331ee at process virtual address 0x20ffe000 [ 58.511056][ T5441] Soft offlining pfn 0x1356a1 at process virtual address 0x20fff000 [ 59.049615][ T5446] fuse: Bad value for 'fd' [ 59.588411][ T5458] fuse: Bad value for 'fd' [ 59.592136][ T5462] Soft offlining pfn 0x1355eb at process virtual address 0x20ffe000 [ 59.593039][ T5462] Soft offlining pfn 0x1355ea at process virtual address 0x20fff000 [ 59.614635][ T4940] Bluetooth: Error in BCSP hdr checksum [ 60.720933][ T5482] ======================================================= [ 60.720933][ T5482] WARNING: The mand mount option has been deprecated and [ 60.720933][ T5482] and is ignored by this kernel. Remove the mand [ 60.720933][ T5482] option from the mount to silence this warning. [ 60.720933][ T5482] ======================================================= [ 60.737880][ T5482] overlayfs: overlapping lowerdir path [ 61.396896][ T4712] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 61.744257][ T5499] Soft offlining pfn 0x134784 at process virtual address 0x20ffe000 [ 61.749080][ T5499] Soft offlining pfn 0x134786 at process virtual address 0x20fff000 [ 61.878250][ T5501] syz_tun: entered allmulticast mode [ 62.124998][ T5503] xt_CT: You must specify a L4 protocol and not use inversions on it [ 63.362549][ T5517] fuse: Bad value for 'fd' [ 63.588453][ T4719] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 64.047693][ T5534] Soft offlining pfn 0x1331da at process virtual address 0x20ffe000 [ 64.049154][ T5534] Soft offlining pfn 0x1331dc at process virtual address 0x20fff000 [ 64.416963][ T5539] Soft offlining pfn 0x11d9e2 at process virtual address 0x20ffe000 [ 64.418499][ T5539] Soft offlining pfn 0x11d9e4 at process virtual address 0x20fff000 [ 64.612728][ T1594] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.612758][ T1594] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.629419][ T26] cfg80211: failed to load regulatory.db [ 64.952637][ T5546] Soft offlining pfn 0x11d95f at process virtual address 0x20ffe000 [ 64.953967][ T5546] Soft offlining pfn 0x1357f0 at process virtual address 0x20fff000 [ 65.611151][ T5556] Soft offlining pfn 0x134600 at process virtual address 0x20ffe000 [ 65.612875][ T5556] Soft offlining pfn 0x132dbf at process virtual address 0x20fff000 [ 66.276426][ T4816] IPVS: starting estimator thread 0... [ 66.298881][ T5576] xt_CT: You must specify a L4 protocol and not use inversions on it [ 66.585820][ T5578] Soft offlining pfn 0x120e21 at process virtual address 0x20ffe000 [ 66.587035][ T5578] Soft offlining pfn 0x120e22 at process virtual address 0x20fff000 [ 66.615291][ T5577] loop2: detected capacity change from 0 to 7 [ 66.620792][ T5577] Dev loop2: unable to read RDB block 7 [ 66.620806][ T5577] loop2: AHDI p1 p2 p3 [ 66.620816][ T5577] loop2: partition table partially beyond EOD, truncated [ 66.620900][ T5577] loop2: p1 start 1601398130 is beyond EOD, truncated [ 66.620910][ T5577] loop2: p2 start 1702059890 is beyond EOD, truncated [ 66.630920][ T5572] IPVS: using max 60 ests per chain, 144000 per kthread [ 66.698064][ T5584] loop4: detected capacity change from 0 to 1024 [ 66.716916][ T5586] xt_CT: You must specify a L4 protocol and not use inversions on it [ 66.754542][ T5584] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 66.754596][ T5584] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 66.754620][ T5584] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.155: Failed to acquire dquot type 0 [ 66.754641][ T5584] loop4: lost filesystem error report for type 5 error -5 [ 66.755669][ T5584] EXT4-fs (loop4): 1 truncate cleaned up [ 66.756192][ T5584] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.059647][ T5593] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 67.059804][ T5593] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 67.059864][ T5593] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.155: Failed to acquire dquot type 0 [ 67.136980][ T4340] Dev loop2: unable to read RDB block 7 [ 67.137008][ T4340] loop2: AHDI p1 p2 p3 [ 67.138357][ T4340] loop2: partition table partially beyond EOD, truncated [ 67.138477][ T4340] loop2: p1 start 1601398130 is beyond EOD, truncated [ 67.138488][ T4340] loop2: p2 start 1702059890 is beyond EOD, truncated [ 67.155760][ T4340] Dev loop2: unable to read RDB block 7 [ 67.158321][ T4340] loop2: AHDI p1 p2 p3 [ 67.159284][ T4340] loop2: partition table partially beyond EOD, truncated [ 67.160781][ T4340] loop2: p1 start 1601398130 is beyond EOD, truncated [ 67.160824][ T4340] loop2: p2 start 1702059890 is beyond EOD, truncated [ 67.389249][ T5600] syz_tun: entered allmulticast mode [ 67.620755][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.934463][ T5607] Soft offlining pfn 0x1207fd at process virtual address 0x20ffe000 [ 67.936047][ T5607] Soft offlining pfn 0x11fe57 at process virtual address 0x20fff000 [ 68.083372][ T5612] Soft offlining pfn 0x1207c0 at process virtual address 0x20ffe000 [ 68.086284][ T5612] Soft offlining pfn 0x13684b at process virtual address 0x20fff000 [ 68.244629][ T5616] syzkaller0: entered promiscuous mode [ 68.244659][ T5616] syzkaller0: entered allmulticast mode [ 69.031682][ T5632] Soft offlining pfn 0x133df6 at process virtual address 0x20ffe000 [ 69.032909][ T5632] Soft offlining pfn 0x133df8 at process virtual address 0x20fff000 [ 69.545440][ T5644] Soft offlining pfn 0x131c24 at process virtual address 0x20ffe000 [ 69.547516][ T5644] Soft offlining pfn 0x1337e3 at process virtual address 0x20fff000 [ 70.090632][ T5651] syz_tun: entered allmulticast mode [ 70.313621][ T5650] loop3: detected capacity change from 0 to 512 [ 70.315586][ T5650] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 70.328597][ T5657] syzkaller0: entered promiscuous mode [ 70.328628][ T5657] syzkaller0: entered allmulticast mode [ 70.940625][ T5669] Soft offlining pfn 0x131c8b at process virtual address 0x20ffe000 [ 70.963169][ T5669] Soft offlining pfn 0x131c8d at process virtual address 0x20fff000 [ 71.624902][ T5681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.181'. [ 73.758807][ T5706] xt_CT: You must specify a L4 protocol and not use inversions on it [ 74.055500][ T5709] loop2: detected capacity change from 0 to 7 [ 74.060994][ T5709] Dev loop2: unable to read RDB block 7 [ 74.061023][ T5709] loop2: AHDI p1 p2 p3 [ 74.061040][ T5709] loop2: partition table partially beyond EOD, truncated [ 74.061215][ T5709] loop2: p1 start 1601398130 is beyond EOD, truncated [ 74.061246][ T5709] loop2: p2 start 1702059890 is beyond EOD, truncated [ 74.880892][ T5727] xt_CT: You must specify a L4 protocol and not use inversions on it [ 74.980005][ T5728] Soft offlining pfn 0x11ea11 at process virtual address 0x20ffe000 [ 74.982220][ T5728] Soft offlining pfn 0x1363e0 at process virtual address 0x20fff000 [ 75.029335][ T5729] loop2: detected capacity change from 0 to 7 [ 75.117137][ T5729] Dev loop2: unable to read RDB block 7 [ 75.117168][ T5729] loop2: AHDI p1 p2 p3 [ 75.117183][ T5729] loop2: partition table partially beyond EOD, truncated [ 75.117274][ T5729] loop2: p1 start 1601398130 is beyond EOD, truncated [ 75.117293][ T5729] loop2: p2 start 1702059890 is beyond EOD, truncated [ 75.159697][ T5733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.195'. [ 76.499493][ T5745] Soft offlining pfn 0x133cb6 at process virtual address 0x20ffe000 [ 76.503782][ T5745] Soft offlining pfn 0x135414 at process virtual address 0x20fff000 [ 77.197630][ T5755] loop4: detected capacity change from 0 to 128 [ 77.221226][ T5755] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.247887][ T5761] loop2: detected capacity change from 0 to 1024 [ 77.298154][ T5755] overlayfs: missing 'lowerdir' [ 77.637031][ T4707] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.651180][ T5761] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 77.665289][ T5761] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 77.665326][ T5761] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.202: Failed to acquire dquot type 0 [ 77.665342][ T5761] loop2: lost filesystem error report for type 5 error -5 [ 77.670072][ T5761] EXT4-fs (loop2): 1 truncate cleaned up [ 77.670551][ T5761] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.677245][ T5767] loop3: detected capacity change from 0 to 1024 [ 77.685114][ T5767] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 77.685156][ T5767] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 77.685166][ T5767] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.204: Failed to acquire dquot type 0 [ 77.685177][ T5767] loop3: lost filesystem error report for type 5 error -5 [ 77.685686][ T5767] EXT4-fs (loop3): 1 truncate cleaned up [ 77.686204][ T5767] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.030633][ T5776] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 78.030678][ T5776] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 78.030705][ T5776] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.202: Failed to acquire dquot type 0 [ 78.326187][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.643373][ T5789] Soft offlining pfn 0x11ecbd at process virtual address 0x20ffe000 [ 78.644902][ T5789] Soft offlining pfn 0x11ecbf at process virtual address 0x20fff000 [ 78.704708][ T5791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.209'. [ 78.787463][ T5794] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 78.787510][ T5794] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 78.787536][ T5794] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.204: Failed to acquire dquot type 0 [ 80.090200][ T5796] Zero length message leads to an empty skb [ 80.166084][ T5803] loop0: detected capacity change from 0 to 1024 [ 80.176719][ T5803] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 80.176756][ T5803] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 80.176777][ T5803] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.211: Failed to acquire dquot type 0 [ 80.176795][ T5803] loop0: lost filesystem error report for type 5 error -5 [ 80.179492][ T5803] EXT4-fs (loop0): 1 truncate cleaned up [ 80.179967][ T5803] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.598945][ T5811] netlink: 12 bytes leftover after parsing attributes in process `syz.4.213'. [ 80.636116][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.604938][ T26] IPVS: starting estimator thread 0... [ 81.692486][ T5818] IPVS: using max 55 ests per chain, 132000 per kthread [ 81.948019][ T5813] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.211: Failed to acquire dquot type 0 [ 81.994625][ T4721] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.738651][ T5832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.217'. [ 82.936841][ T5837] netlink: 12 bytes leftover after parsing attributes in process `syz.4.220'. [ 83.656461][ T5839] netlink: 12 bytes leftover after parsing attributes in process `syz.2.219'. [ 86.300940][ T5846] Soft offlining pfn 0x11e8dd at process virtual address 0x20ffe000 [ 86.307311][ T5846] Soft offlining pfn 0x11e8db at process virtual address 0x20fff000 [ 86.558765][ T5850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.223'. [ 86.563727][ T5852] loop2: detected capacity change from 0 to 1024 [ 86.650251][ T5852] __quota_error: 2 callbacks suppressed [ 86.650308][ T5852] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 86.650342][ T5852] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 86.650351][ T5852] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.222: Failed to acquire dquot type 0 [ 86.650363][ T5852] loop2: lost filesystem error report for type 5 error -5 [ 86.652009][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 86.652022][ C0] EXT4-fs (loop2): initial error at time 86: ext4_acquire_dquot:7041 [ 86.652037][ C0] EXT4-fs (loop2): last error at time 86: ext4_acquire_dquot:7041 [ 86.662313][ T5852] EXT4-fs (loop2): 1 truncate cleaned up [ 86.662766][ T5852] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.925736][ T5861] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 87.925780][ T5861] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 87.925806][ T5861] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.222: Failed to acquire dquot type 0 [ 88.181596][ T5872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.227'. [ 88.185635][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.870022][ T5887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.232'. [ 91.236272][ T5900] loop0: detected capacity change from 0 to 1024 [ 91.329602][ T5905] Soft offlining pfn 0x132ded at process virtual address 0x20ffe000 [ 91.331172][ T5905] Soft offlining pfn 0x131c85 at process virtual address 0x20fff000 [ 91.362267][ T5900] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 91.364488][ T5900] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 91.577737][ T5900] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.235: Failed to acquire dquot type 0 [ 91.603846][ T5900] loop0: lost filesystem error report for type 5 error -5 [ 91.606607][ T5900] EXT4-fs (loop0): 1 truncate cleaned up [ 91.610021][ T5900] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.827858][ T5914] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 91.827916][ T5914] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 91.827949][ T5914] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.235: Failed to acquire dquot type 0 [ 92.009612][ T5916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.238'. [ 92.043644][ T5918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.239'. [ 92.100226][ T4721] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.250515][ T5932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.244'. [ 93.433479][ T5935] fuse: Unknown parameter '0x00000000000000a00000000000000000000000000000000000000000' [ 93.832852][ T5940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.245'. [ 94.449721][ T5951] netlink: 12 bytes leftover after parsing attributes in process `syz.4.248'. [ 95.901014][ T5964] loop4: detected capacity change from 0 to 1024 [ 96.064921][ T5964] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 96.064967][ T5964] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 96.064989][ T5964] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.252: Failed to acquire dquot type 0 [ 96.065007][ T5964] loop4: lost filesystem error report for type 5 error -5 [ 96.071513][ T5964] EXT4-fs (loop4): 1 truncate cleaned up [ 96.072846][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 96.072859][ C0] EXT4-fs (loop4): initial error at time 96: ext4_acquire_dquot:7041 [ 96.072877][ C0] EXT4-fs (loop4): last error at time 96: ext4_acquire_dquot:7041 [ 96.078557][ T5964] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.638221][ T5975] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 96.638269][ T5975] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 96.638293][ T5975] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.252: Failed to acquire dquot type 0 [ 96.652746][ T5977] loop2: detected capacity change from 0 to 7 [ 96.655014][ T5977] Dev loop2: unable to read RDB block 7 [ 96.655030][ T5977] loop2: AHDI p1 p2 p3 [ 96.655039][ T5977] loop2: partition table partially beyond EOD, truncated [ 96.655107][ T5977] loop2: p1 start 1601398130 is beyond EOD, truncated [ 96.655116][ T5977] loop2: p2 start 1702059890 is beyond EOD, truncated [ 96.802929][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.810540][ T5981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.254'. [ 96.833318][ T5984] syzkaller0: entered promiscuous mode [ 96.834513][ T5984] syzkaller0: entered allmulticast mode [ 96.880341][ T4340] Dev loop2: unable to read RDB block 7 [ 96.881520][ T4340] loop2: AHDI p1 p2 p3 [ 96.883234][ T4340] loop2: partition table partially beyond EOD, truncated [ 96.884301][ T4340] loop2: p1 start 1601398130 is beyond EOD, truncated [ 96.884324][ T4340] loop2: p2 start 1702059890 is beyond EOD, truncated [ 97.872508][ T5991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.258'. [ 98.140804][ T5994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.259'. [ 98.800792][ T6006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.263'. [ 99.182677][ T6008] loop2: detected capacity change from 0 to 7 [ 99.184520][ T6008] Dev loop2: unable to read RDB block 7 [ 99.184572][ T6008] loop2: AHDI p1 p2 p3 [ 99.184584][ T6008] loop2: partition table partially beyond EOD, truncated [ 99.184655][ T6008] loop2: p1 start 1601398130 is beyond EOD, truncated [ 99.184666][ T6008] loop2: p2 start 1702059890 is beyond EOD, truncated [ 99.928955][ T6016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.264'. [ 100.057489][ T6018] Soft offlining pfn 0x132f43 at process virtual address 0x20ffe000 [ 100.060051][ T6018] Soft offlining pfn 0x132f41 at process virtual address 0x20fff000 [ 100.655115][ T6027] xt_CT: You must specify a L4 protocol and not use inversions on it [ 100.835530][ T6029] loop2: detected capacity change from 0 to 7 [ 100.928365][ T6029] Dev loop2: unable to read RDB block 7 [ 100.928492][ T6029] loop2: AHDI p1 p2 p3 [ 100.928548][ T6029] loop2: partition table partially beyond EOD, truncated [ 100.929434][ T6029] loop2: p1 start 1601398130 is beyond EOD, truncated [ 100.929513][ T6029] loop2: p2 start 1702059890 is beyond EOD, truncated [ 101.046948][ T6032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.268'. [ 108.441117][ T6109] xt_CT: You must specify a L4 protocol and not use inversions on it [ 108.556144][ T6112] netlink: 12 bytes leftover after parsing attributes in process `syz.1.289'. [ 108.780249][ T6113] loop2: detected capacity change from 0 to 7 [ 108.791173][ T6113] Dev loop2: unable to read RDB block 7 [ 108.791205][ T6113] loop2: AHDI p1 p2 p3 [ 108.791228][ T6113] loop2: partition table partially beyond EOD, truncated [ 108.791313][ T6113] loop2: p1 start 1601398130 is beyond EOD, truncated [ 108.791322][ T6113] loop2: p2 start 1702059890 is beyond EOD, truncated [ 109.534969][ T4340] Dev loop2: unable to read RDB block 7 [ 109.535009][ T4340] loop2: AHDI p1 p2 p3 [ 109.535019][ T4340] loop2: partition table partially beyond EOD, truncated [ 109.535177][ T4340] loop2: p1 start 1601398130 is beyond EOD, truncated [ 109.535188][ T4340] loop2: p2 start 1702059890 is beyond EOD, truncated [ 110.658334][ T6127] xt_CT: You must specify a L4 protocol and not use inversions on it [ 111.922779][ T6130] loop2: detected capacity change from 0 to 7 [ 111.927363][ T6130] Dev loop2: unable to read RDB block 7 [ 111.927394][ T6130] loop2: AHDI p1 p2 p3 [ 111.927419][ T6130] loop2: partition table partially beyond EOD, truncated [ 111.927504][ T6130] loop2: p1 start 1601398130 is beyond EOD, truncated [ 111.927524][ T6130] loop2: p2 start 1702059890 is beyond EOD, truncated [ 111.967011][ T4340] Dev loop2: unable to read RDB block 7 [ 111.967044][ T4340] loop2: AHDI p1 p2 p3 [ 111.967053][ T4340] loop2: partition table partially beyond EOD, truncated [ 111.967131][ T4340] loop2: p1 start 1601398130 is beyond EOD, truncated [ 111.967141][ T4340] loop2: p2 start 1702059890 is beyond EOD, truncated [ 111.977005][ T6136] netlink: 12 bytes leftover after parsing attributes in process `syz.2.296'. [ 113.057231][ T6148] overlayfs: failed to resolve './file1/file0': -2 [ 113.369805][ T6134] loop2: detected capacity change from 0 to 7 [ 113.370811][ T6134] Dev loop2: unable to read RDB block 7 [ 113.370838][ T6134] loop2: AHDI p1 p2 p3 [ 113.370852][ T6134] loop2: partition table partially beyond EOD, truncated [ 113.370940][ T6134] loop2: p1 start 1601398130 is beyond EOD, truncated [ 113.370951][ T6134] loop2: p2 start 1702059890 is beyond EOD, truncated [ 114.873378][ T6176] Bluetooth: MGMT ver 1.23 [ 115.141529][ T6187] xt_CT: You must specify a L4 protocol and not use inversions on it [ 115.143333][ T6186] xt_CT: You must specify a L4 protocol and not use inversions on it [ 115.317697][ T6192] loop2: detected capacity change from 0 to 7 [ 115.435253][ T6192] Dev loop2: unable to read RDB block 7 [ 115.435471][ T6192] loop2: AHDI p1 p2 p3 [ 115.435535][ T6192] loop2: partition table partially beyond EOD, truncated [ 115.436652][ T6192] loop2: p1 start 1601398130 is beyond EOD, truncated [ 115.436722][ T6192] loop2: p2 start 1702059890 is beyond EOD, truncated [ 116.624419][ T4340] Dev loop2: unable to read RDB block 7 [ 116.624452][ T4340] loop2: AHDI p1 p2 p3 [ 116.624475][ T4340] loop2: partition table partially beyond EOD, truncated [ 116.624563][ T4340] loop2: p1 start 1601398130 is beyond EOD, truncated [ 116.624582][ T4340] loop2: p2 start 1702059890 is beyond EOD, truncated [ 116.659639][ T6208] syzkaller0: entered promiscuous mode [ 116.659666][ T6208] syzkaller0: entered allmulticast mode [ 117.100228][ T6215] UDC core: g1: couldn't find an available UDC or it's busy [ 119.576408][ T6239] loop0: detected capacity change from 0 to 512 [ 119.580213][ T6239] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 119.604004][ T6247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.330'. [ 120.668821][ T6255] UDC core: g1: couldn't find an available UDC or it's busy [ 120.851877][ T6265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.336'. [ 121.928473][ T6273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.338'. [ 125.221023][ T6292] syz_tun: entered allmulticast mode [ 125.247093][ T6294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.344'. [ 126.192259][ T1594] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.192307][ T1594] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.340535][ T6286] loop4: detected capacity change from 0 to 512 [ 127.342477][ T6286] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 127.560746][ T6318] netlink: 12 bytes leftover after parsing attributes in process `syz.3.351'. [ 133.464655][ T6384] netlink: 12 bytes leftover after parsing attributes in process `syz.3.370'. [ 133.465960][ T6383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.369'. [ 138.354467][ T6413] loop2: detected capacity change from 0 to 512 [ 138.397190][ T6413] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 142.562076][ T4802] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 142.713578][ T4802] usb 1-1: Dual-Role OTG device on HNP port [ 142.715039][ T4802] usb 1-1: New USB device found, idVendor=1234, idProduct=0000, bcdDevice= 7.02 [ 142.716815][ T4802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.721830][ C1] configfs-gadget.g1 gadget.0: Using interface 0 [ 143.064117][ T4802] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 2 vid 0x1234 pid 0x0000 [ 143.068580][ T4802] usb 1-1: USB disconnect, device number 3 [ 143.072593][ T4802] usblp0: removed [ 144.852013][ T4801] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 145.744881][ T6450] loop4: detected capacity change from 0 to 512 [ 145.746791][ T6450] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 146.219487][ T6454] loop2: detected capacity change from 0 to 512 [ 146.257220][ T6454] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 148.004795][ T6479] loop4: detected capacity change from 0 to 512 [ 148.005741][ T6479] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 150.663172][ T6499] loop4: detected capacity change from 0 to 512 [ 151.149022][ T6499] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 151.379915][ T4802] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 151.563492][ T4802] usb 1-1: Dual-Role OTG device on HNP port [ 151.565673][ T4802] usb 1-1: New USB device found, idVendor=1234, idProduct=0000, bcdDevice= 7.02 [ 151.570696][ T4802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.667674][ C1] configfs-gadget.g1 gadget.0: Using interface 0 [ 151.682180][ T4802] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 2 vid 0x1234 pid 0x0000 [ 151.696987][ T6508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.400'. [ 152.697593][ T4794] usb 1-1: USB disconnect, device number 5 [ 152.714689][ T4794] usblp0: removed [ 153.934466][ T6515] loop3: detected capacity change from 0 to 512 [ 154.272821][ T6515] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 155.971491][ T6517] loop0: detected capacity change from 0 to 512 [ 156.049757][ T6535] loop2: detected capacity change from 0 to 512 [ 156.078959][ T6517] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 156.186163][ T6535] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 157.911680][ T6571] xt_CT: You must specify a L4 protocol and not use inversions on it [ 158.093431][ T6573] loop2: detected capacity change from 0 to 7 [ 158.873911][ T6573] Dev loop2: unable to read RDB block 7 [ 158.874119][ T6573] loop2: AHDI p1 p2 p3 [ 158.874246][ T6573] loop2: partition table partially beyond EOD, truncated [ 158.875723][ T6573] loop2: p1 start 1601398130 is beyond EOD, truncated [ 158.875830][ T6573] loop2: p2 start 1702059890 is beyond EOD, truncated [ 159.739556][ T6584] loop3: detected capacity change from 0 to 512 [ 159.797424][ T6585] loop0: detected capacity change from 0 to 512 [ 159.917656][ T6584] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 159.920166][ T6585] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 160.062325][ T6580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.418'. [ 160.536668][ T6595] xt_CT: You must specify a L4 protocol and not use inversions on it [ 160.702042][ T6599] loop2: detected capacity change from 0 to 7 [ 160.867705][ T6599] Dev loop2: unable to read RDB block 7 [ 160.867736][ T6599] loop2: AHDI p1 p2 p3 [ 160.867758][ T6599] loop2: partition table partially beyond EOD, truncated [ 160.867866][ T6599] loop2: p1 start 1601398130 is beyond EOD, truncated [ 160.867884][ T6599] loop2: p2 start 1702059890 is beyond EOD, truncated [ 161.977928][ T4340] Dev loop2: unable to read RDB block 7 [ 161.977959][ T4340] loop2: AHDI p1 p2 p3 [ 161.977981][ T4340] loop2: partition table partially beyond EOD, truncated [ 161.978070][ T4340] loop2: p1 start 1601398130 is beyond EOD, truncated [ 161.978088][ T4340] loop2: p2 start 1702059890 is beyond EOD, truncated [ 163.592042][ T4802] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 163.753564][ T4802] usb 1-1: Dual-Role OTG device on HNP port [ 163.754906][ T4802] usb 1-1: New USB device found, idVendor=1234, idProduct=0000, bcdDevice= 7.02 [ 163.756956][ T4802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.860685][ C1] configfs-gadget.g1 gadget.0: Using interface 0 [ 163.865512][ T4802] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 2 vid 0x1234 pid 0x0000 [ 164.876007][ T4794] usb 1-1: USB disconnect, device number 7 [ 164.878535][ T4794] usblp0: removed [ 164.892343][ T6622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.427'. [ 166.261269][ T6630] xt_CT: You must specify a L4 protocol and not use inversions on it [ 166.392246][ T4801] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 166.400209][ T6633] xt_CT: You must specify a L4 protocol and not use inversions on it [ 166.473470][ T6634] loop2: detected capacity change from 0 to 7 [ 166.553353][ T4801] usb 1-1: Dual-Role OTG device on HNP port [ 166.554700][ T4801] usb 1-1: New USB device found, idVendor=1234, idProduct=0000, bcdDevice= 7.02 [ 166.556476][ T4801] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.710382][ T6634] Dev loop2: unable to read RDB block 7 [ 166.710405][ T6634] loop2: AHDI p1 p2 p3 [ 166.710417][ T6634] loop2: partition table partially beyond EOD, truncated [ 166.710511][ T6634] loop2: p1 start 1601398130 is beyond EOD, truncated [ 166.710573][ T6634] loop2: p2 start 1702059890 is beyond EOD, truncated [ 166.773661][ C0] configfs-gadget.g1 gadget.0: Using interface 0 [ 166.782280][ T4801] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 2 vid 0x1234 pid 0x0000 [ 166.806192][ T6639] xt_CT: You must specify a L4 protocol and not use inversions on it [ 167.196554][ T4340] Dev loop2: unable to read RDB block 7 [ 167.196591][ T4340] loop2: AHDI p1 p2 p3 [ 167.196799][ T4340] loop2: partition table partially beyond EOD, truncated [ 167.196934][ T4340] loop2: p1 start 1601398130 is beyond EOD, truncated [ 167.196960][ T4340] loop2: p2 start 1702059890 is beyond EOD, truncated [ 167.362013][ T6646] loop3: detected capacity change from 0 to 512 [ 167.362762][ T4794] usb 1-1: USB disconnect, device number 8 [ 167.365566][ T4794] usblp0: removed [ 167.385107][ T6646] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 167.501459][ T6648] fuse: Bad value for 'fd' [ 168.237022][ T6658] loop4: detected capacity change from 0 to 512 [ 168.267052][ T6658] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 168.816769][ T6663] xt_CT: You must specify a L4 protocol and not use inversions on it [ 168.818461][ T6664] xt_CT: You must specify a L4 protocol and not use inversions on it [ 168.822801][ T6666] netlink: 12 bytes leftover after parsing attributes in process `syz.3.436'. [ 169.625178][ T6672] loop0: detected capacity change from 0 to 512 [ 169.686392][ T6672] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 171.139253][ T6688] xt_CT: You must specify a L4 protocol and not use inversions on it [ 171.286615][ T6686] loop3: detected capacity change from 0 to 512 [ 171.320726][ T6691] loop2: detected capacity change from 0 to 7 [ 171.738096][ T6691] Dev loop2: unable to read RDB block 7 [ 171.738141][ T6691] loop2: AHDI p1 p2 p3 [ 171.738165][ T6691] loop2: partition table partially beyond EOD, truncated [ 171.738266][ T6691] loop2: p1 start 1601398130 is beyond EOD, truncated [ 171.738286][ T6691] loop2: p2 start 1702059890 is beyond EOD, truncated [ 171.882745][ T6686] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 172.868062][ T6694] loop4: detected capacity change from 0 to 512 [ 172.962596][ T6685] loop2: detected capacity change from 0 to 512 [ 172.974765][ T6694] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 172.976547][ T6685] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 173.474209][ T6704] loop3: detected capacity change from 0 to 512 [ 173.493624][ T6704] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 174.305707][ T6712] fuse: Bad value for 'fd' [ 176.005600][ T6743] overlayfs: overlapping lowerdir path [ 177.971621][ T6752] loop2: detected capacity change from 0 to 512 [ 178.059479][ T6752] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 178.088256][ T6763] loop0: detected capacity change from 0 to 512 [ 178.090922][ T6763] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 178.634339][ T6772] fuse: Bad value for 'fd' [ 179.508634][ T6784] fuse: Bad value for 'fd' [ 179.575717][ T6789] overlayfs: overlapping lowerdir path [ 180.112005][ T6799] loop3: detected capacity change from 0 to 512 [ 180.123989][ T6799] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 181.542999][ T6822] loop4: detected capacity change from 0 to 512 [ 181.543616][ T6822] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 181.565002][ T30] audit: type=1326 audit(181.530:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6823 comm="syz.2.482" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff96979028 code=0x0 [ 181.599143][ T6827] overlayfs: overlapping lowerdir path [ 181.648092][ T6839] input: syz0 as /devices/virtual/input/input2 [ 181.661038][ T30] audit: type=1326 audit(181.630:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6823 comm="syz.2.482" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff96979028 code=0x0 [ 181.690047][ T6845] FAULT_INJECTION: forcing a failure. [ 181.690047][ T6845] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 181.692886][ T6845] CPU: 0 UID: 0 PID: 6845 Comm: syz.3.489 Not tainted syzkaller #0 PREEMPT [ 181.692901][ T6845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 181.692908][ T6845] Call trace: [ 181.692912][ T6845] show_stack+0x2c/0x3c (C) [ 181.692934][ T6845] __dump_stack+0x30/0x40 [ 181.692945][ T6845] dump_stack_lvl+0xd8/0x12c [ 181.692955][ T6845] dump_stack+0x1c/0x28 [ 181.692964][ T6845] should_fail_ex+0x41c/0x590 [ 181.692975][ T6845] should_fail+0x14/0x24 [ 181.692985][ T6845] should_fail_usercopy+0x20/0x30 [ 181.692995][ T6845] _inline_copy_from_user+0x3c/0x174 [ 181.693006][ T6845] parse_command+0xc0/0x250 [ 181.693015][ T6845] bm_entry_write+0x74/0x23c [ 181.693025][ T6845] do_loop_readv_writev+0x24c/0x3dc [ 181.693033][ T6845] vfs_writev+0x2c8/0x630 [ 181.693040][ T6845] do_pwritev+0x11c/0x224 [ 181.693047][ T6845] __arm64_sys_pwritev+0xa4/0xbc [ 181.693054][ T6845] invoke_syscall+0x98/0x244 [ 181.693064][ T6845] el0_svc_common+0xec/0x23c [ 181.693073][ T6845] do_el0_svc+0x4c/0x5c [ 181.693083][ T6845] el0_svc+0x64/0x260 [ 181.693093][ T6845] el0t_64_sync_handler+0x48/0x148 [ 181.693102][ T6845] el0t_64_sync+0x198/0x19c [ 181.751490][ T6849] loop3: detected capacity change from 0 to 256 [ 181.751959][ T6849] vfat: Bad value for 'utf8' [ 181.759762][ T6849] tmpfs: Bad value for 'mpol' [ 181.768400][ T6851] FAULT_INJECTION: forcing a failure. [ 181.768400][ T6851] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.768437][ T6851] CPU: 1 UID: 0 PID: 6851 Comm: syz.4.492 Not tainted syzkaller #0 PREEMPT [ 181.768449][ T6851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 181.768456][ T6851] Call trace: [ 181.768460][ T6851] show_stack+0x2c/0x3c (C) [ 181.768478][ T6851] __dump_stack+0x30/0x40 [ 181.768489][ T6851] dump_stack_lvl+0xd8/0x12c [ 181.768499][ T6851] dump_stack+0x1c/0x28 [ 181.768509][ T6851] should_fail_ex+0x41c/0x590 [ 181.768520][ T6851] should_fail+0x14/0x24 [ 181.768529][ T6851] should_fail_usercopy+0x20/0x30 [ 181.768539][ T6851] semctl_info+0x248/0x4a8 [ 181.768547][ T6851] __arm64_sys_semctl+0x208/0x46c [ 181.768554][ T6851] invoke_syscall+0x98/0x244 [ 181.768564][ T6851] el0_svc_common+0xec/0x23c [ 181.768574][ T6851] do_el0_svc+0x4c/0x5c [ 181.768583][ T6851] el0_svc+0x64/0x260 [ 181.768593][ T6851] el0t_64_sync_handler+0x48/0x148 [ 181.768603][ T6851] el0t_64_sync+0x198/0x19c [ 181.816794][ T6857] netlink: 12 bytes leftover after parsing attributes in process `syz.4.495'. [ 181.826119][ T6859] FAULT_INJECTION: forcing a failure. [ 181.826119][ T6859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.828726][ T6859] CPU: 0 UID: 0 PID: 6859 Comm: syz.0.497 Not tainted syzkaller #0 PREEMPT [ 181.828744][ T6859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 181.828750][ T6859] Call trace: [ 181.828754][ T6859] show_stack+0x2c/0x3c (C) [ 181.828775][ T6859] __dump_stack+0x30/0x40 [ 181.828787][ T6859] dump_stack_lvl+0xd8/0x12c [ 181.828797][ T6859] dump_stack+0x1c/0x28 [ 181.828806][ T6859] should_fail_ex+0x41c/0x590 [ 181.828817][ T6859] should_fail+0x14/0x24 [ 181.828826][ T6859] should_fail_usercopy+0x20/0x30 [ 181.828840][ T6859] simple_read_from_buffer+0xc4/0x238 [ 181.828850][ T6859] proc_fail_nth_read+0x1a8/0x248 [ 181.828858][ T6859] vfs_read+0x230/0x8c8 [ 181.828868][ T6859] ksys_read+0x12c/0x228 [ 181.828877][ T6859] __arm64_sys_read+0x7c/0x90 [ 181.828884][ T6859] invoke_syscall+0x98/0x244 [ 181.828894][ T6859] el0_svc_common+0xec/0x23c [ 181.828903][ T6859] do_el0_svc+0x4c/0x5c [ 181.828913][ T6859] el0_svc+0x64/0x260 [ 181.828922][ T6859] el0t_64_sync_handler+0x48/0x148 [ 181.828932][ T6859] el0t_64_sync+0x198/0x19c [ 182.923312][ T6886] FAULT_INJECTION: forcing a failure. [ 182.923312][ T6886] name failslab, interval 1, probability 0, space 0, times 1 [ 182.923350][ T6886] CPU: 1 UID: 0 PID: 6886 Comm: syz.4.503 Not tainted syzkaller #0 PREEMPT [ 182.923362][ T6886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 182.923368][ T6886] Call trace: [ 182.923371][ T6886] show_stack+0x2c/0x3c (C) [ 182.923389][ T6886] __dump_stack+0x30/0x40 [ 182.923399][ T6886] dump_stack_lvl+0xd8/0x12c [ 182.923409][ T6886] dump_stack+0x1c/0x28 [ 182.923418][ T6886] should_fail_ex+0x41c/0x590 [ 182.923429][ T6886] should_failslab+0xc4/0x120 [ 182.923437][ T6886] kmem_cache_alloc_lru_noprof+0x98/0x5dc [ 182.923446][ T6886] sock_alloc_inode+0x30/0x180 [ 182.923456][ T6886] alloc_inode+0x68/0x198 [ 182.923465][ T6886] sock_alloc+0x4c/0x204 [ 182.923473][ T6886] __sock_create+0x108/0x670 [ 182.923480][ T6886] sock_create_kern+0x4c/0x64 [ 182.923488][ T6886] mptcp_subflow_create_socket+0xe4/0x61c [ 182.923496][ T6886] __mptcp_nmpc_sk+0x138/0x57c [ 182.923505][ T6886] mptcp_listen+0x100/0x410 [ 182.923515][ T6886] __sys_listen_socket+0x100/0x128 [ 182.923523][ T6886] __sys_listen+0xa8/0x10c [ 182.923531][ T6886] __arm64_sys_listen+0x5c/0x74 [ 182.923539][ T6886] invoke_syscall+0x98/0x244 [ 182.923549][ T6886] el0_svc_common+0xec/0x23c [ 182.923558][ T6886] do_el0_svc+0x4c/0x5c [ 182.923568][ T6886] el0_svc+0x64/0x260 [ 182.923577][ T6886] el0t_64_sync_handler+0x48/0x148 [ 182.923586][ T6886] el0t_64_sync+0x198/0x19c [ 182.923645][ T6886] socket: no more sockets [ 183.084574][ T6902] FAULT_INJECTION: forcing a failure. [ 183.084574][ T6902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.084614][ T6902] CPU: 1 UID: 0 PID: 6902 Comm: syz.3.510 Not tainted syzkaller #0 PREEMPT [ 183.084628][ T6902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 183.084634][ T6902] Call trace: [ 183.084638][ T6902] show_stack+0x2c/0x3c (C) [ 183.084660][ T6902] __dump_stack+0x30/0x40 [ 183.084674][ T6902] dump_stack_lvl+0xd8/0x12c [ 183.084683][ T6902] dump_stack+0x1c/0x28 [ 183.084693][ T6902] should_fail_ex+0x41c/0x590 [ 183.084707][ T6902] should_fail+0x14/0x24 [ 183.084717][ T6902] should_fail_usercopy+0x20/0x30 [ 183.084727][ T6902] _inline_copy_from_user+0x3c/0x174 [ 183.084738][ T6902] copy_msghdr_from_user+0xb8/0x194 [ 183.084748][ T6902] ___sys_sendmsg+0x14c/0x224 [ 183.084756][ T6902] __sys_sendmmsg+0x204/0x580 [ 183.084765][ T6902] __arm64_sys_sendmmsg+0xa4/0xc0 [ 183.084773][ T6902] invoke_syscall+0x98/0x244 [ 183.084784][ T6902] el0_svc_common+0xec/0x23c [ 183.084794][ T6902] do_el0_svc+0x4c/0x5c [ 183.084803][ T6902] el0_svc+0x64/0x260 [ 183.084815][ T6902] el0t_64_sync_handler+0x48/0x148 [ 183.084824][ T6902] el0t_64_sync+0x198/0x19c [ 183.164431][ T30] audit: type=1326 audit(183.130:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6909 comm="syz.1.515" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ed79028 code=0x0 [ 183.254427][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 183.260113][ T9] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 183.282849][ T6920] fido_id[6920]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 183.727739][ T6929] loop4: detected capacity change from 0 to 512 [ 183.729294][ T6929] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 184.397220][ T6963] Soft offlining pfn 0x1392ea at process virtual address 0x20ffe000 [ 184.398076][ T6963] Soft offlining pfn 0x1392ec at process virtual address 0x20fff000 [ 184.682935][ T6977] FAULT_INJECTION: forcing a failure. [ 184.682935][ T6977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.682974][ T6977] CPU: 0 UID: 0 PID: 6977 Comm: syz.0.534 Not tainted syzkaller #0 PREEMPT [ 184.682988][ T6977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 184.682994][ T6977] Call trace: [ 184.682998][ T6977] show_stack+0x2c/0x3c (C) [ 184.683018][ T6977] __dump_stack+0x30/0x40 [ 184.683031][ T6977] dump_stack_lvl+0xd8/0x12c [ 184.683041][ T6977] dump_stack+0x1c/0x28 [ 184.683050][ T6977] should_fail_ex+0x41c/0x590 [ 184.683062][ T6977] should_fail+0x14/0x24 [ 184.683071][ T6977] should_fail_usercopy+0x20/0x30 [ 184.683081][ T6977] _inline_copy_from_user+0x3c/0x174 [ 184.683092][ T6977] copy_msghdr_from_user+0xb8/0x194 [ 184.683102][ T6977] ___sys_sendmsg+0x14c/0x224 [ 184.683110][ T6977] __sys_sendmsg+0x158/0x204 [ 184.683122][ T6977] __arm64_sys_sendmsg+0x80/0x94 [ 184.683130][ T6977] invoke_syscall+0x98/0x244 [ 184.683140][ T6977] el0_svc_common+0xec/0x23c [ 184.683150][ T6977] do_el0_svc+0x4c/0x5c [ 184.683159][ T6977] el0_svc+0x64/0x260 [ 184.683169][ T6977] el0t_64_sync_handler+0x48/0x148 [ 184.683179][ T6977] el0t_64_sync+0x198/0x19c [ 185.120585][ T6996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.542'. [ 185.503443][ T7017] Soft offlining pfn 0x131f12 at process virtual address 0x20ffe000 [ 185.504856][ T7017] Soft offlining pfn 0x13501e at process virtual address 0x20fff000 [ 185.670167][ T7014] loop0: detected capacity change from 0 to 512 [ 185.671796][ T7014] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 185.707222][ T7023] tipc: Enabling of bearer rejected, failed to enable media [ 185.757170][ T7025] Bluetooth: hci0: unsupported parameter 255 [ 185.757197][ T7025] Bluetooth: hci0: unsupported parameter 255 [ 185.782207][ T7029] FAULT_INJECTION: forcing a failure. [ 185.782207][ T7029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.782238][ T7029] CPU: 1 UID: 0 PID: 7029 Comm: syz.2.554 Not tainted syzkaller #0 PREEMPT [ 185.782252][ T7029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 185.782259][ T7029] Call trace: [ 185.782262][ T7029] show_stack+0x2c/0x3c (C) [ 185.782282][ T7029] __dump_stack+0x30/0x40 [ 185.782294][ T7029] dump_stack_lvl+0xd8/0x12c [ 185.782304][ T7029] dump_stack+0x1c/0x28 [ 185.782313][ T7029] should_fail_ex+0x41c/0x590 [ 185.782325][ T7029] should_fail+0x14/0x24 [ 185.782335][ T7029] should_fail_usercopy+0x20/0x30 [ 185.782345][ T7029] _inline_copy_from_user+0x3c/0x174 [ 185.782354][ T7029] __arm64_sys_io_uring_setup+0x1b8/0x288 [ 185.782363][ T7029] invoke_syscall+0x98/0x244 [ 185.782373][ T7029] el0_svc_common+0xec/0x23c [ 185.782383][ T7029] do_el0_svc+0x4c/0x5c [ 185.782392][ T7029] el0_svc+0x64/0x260 [ 185.782402][ T7029] el0t_64_sync_handler+0x48/0x148 [ 185.782411][ T7029] el0t_64_sync+0x198/0x19c [ 185.790769][ T7031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.555'. [ 185.797436][ T7032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.555'. [ 185.945461][ T7040] openvswitch: netlink: Flow key attr not present in new flow. [ 185.948777][ T7040] fuse: fd is not a fuse device [ 186.305383][ T7048] tipc: Enabling of bearer rejected, failed to enable media [ 186.342315][ T7048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.560'. [ 186.752484][ T7075] loop4: detected capacity change from 0 to 512 [ 186.764175][ T7075] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 187.418852][ T1594] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.418896][ T1594] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.710116][ T7084] Soft offlining pfn 0x13993a at process virtual address 0x20ffe000 [ 187.714328][ T7084] Soft offlining pfn 0x13931e at process virtual address 0x20fff000 [ 187.954362][ T7090] overlayfs: failed to clone upperpath [ 187.999465][ T7099] loop2: detected capacity change from 0 to 1024 [ 188.001390][ T7099] EXT4-fs: Ignoring removed mblk_io_submit option [ 188.018224][ T7099] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8002c018, mo2=0002] [ 188.020487][ T7099] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 188.058377][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 188.101765][ T7110] xt_CT: You must specify a L4 protocol and not use inversions on it [ 188.515567][ T30] audit: type=1326 audit(188.490:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7117 comm="syz.1.583" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ed79028 code=0x7ffc0000 [ 188.519594][ T30] audit: type=1326 audit(188.490:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7117 comm="syz.1.583" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=136 compat=0 ip=0xffff9ed79028 code=0x7ffc0000 [ 188.532050][ T30] audit: type=1326 audit(188.500:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7117 comm="syz.1.583" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ed79028 code=0x7ffc0000 [ 188.532088][ T30] audit: type=1326 audit(188.500:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7117 comm="syz.1.583" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ed79028 code=0x7ffc0000 [ 188.810163][ T7139] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 188.961296][ T7152] FAULT_INJECTION: forcing a failure. [ 188.961296][ T7152] name failslab, interval 1, probability 0, space 0, times 0 [ 188.961333][ T7152] CPU: 0 UID: 0 PID: 7152 Comm: syz.0.596 Not tainted syzkaller #0 PREEMPT [ 188.961346][ T7152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 188.961352][ T7152] Call trace: [ 188.961355][ T7152] show_stack+0x2c/0x3c (C) [ 188.961375][ T7152] __dump_stack+0x30/0x40 [ 188.961386][ T7152] dump_stack_lvl+0xd8/0x12c [ 188.961396][ T7152] dump_stack+0x1c/0x28 [ 188.961405][ T7152] should_fail_ex+0x41c/0x590 [ 188.961416][ T7152] should_failslab+0xc4/0x120 [ 188.961424][ T7152] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 188.961433][ T7152] __alloc_skb+0x1f0/0x610 [ 188.961443][ T7152] netlink_alloc_large_skb+0xd4/0x114 [ 188.961451][ T7152] netlink_sendmsg+0x4c4/0x948 [ 188.961459][ T7152] __sock_sendmsg+0xc8/0x17c [ 188.961467][ T7152] ____sys_sendmsg+0x3d0/0x6c8 [ 188.961475][ T7152] ___sys_sendmsg+0x198/0x224 [ 188.961484][ T7152] __sys_sendmsg+0x158/0x204 [ 188.961492][ T7152] __arm64_sys_sendmsg+0x80/0x94 [ 188.961501][ T7152] invoke_syscall+0x98/0x244 [ 188.961511][ T7152] el0_svc_common+0xec/0x23c [ 188.961520][ T7152] do_el0_svc+0x4c/0x5c [ 188.961529][ T7152] el0_svc+0x64/0x260 [ 188.961539][ T7152] el0t_64_sync_handler+0x48/0x148 [ 188.961549][ T7152] el0t_64_sync+0x198/0x19c [ 189.022265][ T7153] Soft offlining pfn 0x1351cd at process virtual address 0x20ffe000 [ 189.031097][ T7153] Soft offlining pfn 0x1351cb at process virtual address 0x20fff000 [ 189.220174][ T7157] netlink: 'syz.0.598': attribute type 2 has an invalid length. [ 189.260439][ T7161] FAULT_INJECTION: forcing a failure. [ 189.260439][ T7161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.264039][ T7161] CPU: 0 UID: 0 PID: 7161 Comm: syz.4.601 Not tainted syzkaller #0 PREEMPT [ 189.264064][ T7161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 189.264070][ T7161] Call trace: [ 189.264074][ T7161] show_stack+0x2c/0x3c (C) [ 189.264098][ T7161] __dump_stack+0x30/0x40 [ 189.264111][ T7161] dump_stack_lvl+0xd8/0x12c [ 189.264121][ T7161] dump_stack+0x1c/0x28 [ 189.264131][ T7161] should_fail_ex+0x41c/0x590 [ 189.264143][ T7161] should_fail+0x14/0x24 [ 189.264153][ T7161] should_fail_usercopy+0x20/0x30 [ 189.264163][ T7161] simple_read_from_buffer+0xc4/0x238 [ 189.264173][ T7161] proc_fail_nth_read+0x1a8/0x248 [ 189.264181][ T7161] vfs_read+0x230/0x8c8 [ 189.264192][ T7161] ksys_read+0x12c/0x228 [ 189.264204][ T7161] __arm64_sys_read+0x7c/0x90 [ 189.264211][ T7161] invoke_syscall+0x98/0x244 [ 189.264221][ T7161] el0_svc_common+0xec/0x23c [ 189.264231][ T7161] do_el0_svc+0x4c/0x5c [ 189.264240][ T7161] el0_svc+0x64/0x260 [ 189.264250][ T7161] el0t_64_sync_handler+0x48/0x148 [ 189.264260][ T7161] el0t_64_sync+0x198/0x19c [ 189.333977][ T7169] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 189.364470][ T7176] FAULT_INJECTION: forcing a failure. [ 189.364470][ T7176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.367113][ T7176] CPU: 0 UID: 0 PID: 7176 Comm: syz.0.607 Not tainted syzkaller #0 PREEMPT [ 189.367130][ T7176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 189.367135][ T7176] Call trace: [ 189.367138][ T7176] show_stack+0x2c/0x3c (C) [ 189.367157][ T7176] __dump_stack+0x30/0x40 [ 189.367168][ T7176] dump_stack_lvl+0xd8/0x12c [ 189.367177][ T7176] dump_stack+0x1c/0x28 [ 189.367187][ T7176] should_fail_ex+0x41c/0x590 [ 189.367198][ T7176] should_fail+0x14/0x24 [ 189.367207][ T7176] should_fail_usercopy+0x20/0x30 [ 189.367217][ T7176] simple_read_from_buffer+0xc4/0x238 [ 189.367226][ T7176] proc_fail_nth_read+0x1a8/0x248 [ 189.367234][ T7176] vfs_read+0x230/0x8c8 [ 189.367244][ T7176] ksys_read+0x12c/0x228 [ 189.367254][ T7176] __arm64_sys_read+0x7c/0x90 [ 189.367261][ T7176] invoke_syscall+0x98/0x244 [ 189.367271][ T7176] el0_svc_common+0xec/0x23c [ 189.367280][ T7176] do_el0_svc+0x4c/0x5c [ 189.367290][ T7176] el0_svc+0x64/0x260 [ 189.367300][ T7176] el0t_64_sync_handler+0x48/0x148 [ 189.367309][ T7176] el0t_64_sync+0x198/0x19c [ 189.381758][ T7178] 9pnet_fd: Insufficient options for proto=fd [ 189.403885][ T7182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.608'. [ 189.704758][ T7211] loop4: detected capacity change from 0 to 128 [ 189.723256][ T7213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.620'. [ 189.811371][ T7223] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 189.819390][ T7225] xt_CT: You must specify a L4 protocol and not use inversions on it [ 189.819672][ T7223] netlink: 'syz.4.625': attribute type 12 has an invalid length. [ 189.819684][ T7223] netlink: 'syz.4.625': attribute type 29 has an invalid length. [ 189.819694][ T7223] netlink: 148 bytes leftover after parsing attributes in process `syz.4.625'. [ 189.834969][ T7223] netlink: 60 bytes leftover after parsing attributes in process `syz.4.625'. [ 190.410934][ T7239] capability: warning: `syz.2.630' uses 32-bit capabilities (legacy support in use) [ 190.425760][ T30] audit: type=1326 audit(190.400:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7240 comm="syz.4.631" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bb79028 code=0x7ffc0000 [ 190.430674][ T30] audit: type=1326 audit(190.400:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7240 comm="syz.4.631" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bb79028 code=0x7ffc0000 [ 190.436427][ T30] audit: type=1326 audit(190.410:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7240 comm="syz.4.631" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=136 compat=0 ip=0xffff9bb79028 code=0x7ffc0000 [ 190.440768][ T30] audit: type=1326 audit(190.410:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7240 comm="syz.4.631" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bb79028 code=0x7ffc0000 [ 190.447296][ T30] audit: type=1326 audit(190.420:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7240 comm="syz.4.631" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bb79028 code=0x7ffc0000 [ 190.469401][ T7245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.632'. [ 190.745132][ T7262] loop0: detected capacity change from 0 to 1024 [ 190.758809][ T7262] EXT4-fs: Ignoring removed bh option [ 190.759180][ T7262] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 190.769008][ T7262] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.785138][ T7262] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #12: block 7: comm syz.0.639: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 190.799536][ T7262] EXT4-fs (loop0): Remounting filesystem read-only [ 190.801610][ T7262] evm: overlay not supported [ 190.848662][ T7276] loop2: detected capacity change from 0 to 512 [ 190.850037][ T7276] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 190.862381][ T7274] netlink: 24 bytes leftover after parsing attributes in process `syz.1.641'. [ 190.868000][ T7276] EXT4-fs (loop2): 1 truncate cleaned up [ 190.868437][ T7276] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.936094][ T7279] fuse: fd is not a fuse device [ 190.999807][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.021757][ T7291] FAULT_INJECTION: forcing a failure. [ 191.021757][ T7291] name failslab, interval 1, probability 0, space 0, times 0 [ 191.021792][ T7291] CPU: 1 UID: 0 PID: 7291 Comm: syz.2.644 Not tainted syzkaller #0 PREEMPT [ 191.021807][ T7291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 191.021814][ T7291] Call trace: [ 191.021818][ T7291] show_stack+0x2c/0x3c (C) [ 191.021836][ T7291] __dump_stack+0x30/0x40 [ 191.021853][ T7291] dump_stack_lvl+0xd8/0x12c [ 191.021863][ T7291] dump_stack+0x1c/0x28 [ 191.021873][ T7291] should_fail_ex+0x41c/0x590 [ 191.021885][ T7291] should_failslab+0xc4/0x120 [ 191.021894][ T7291] kmem_cache_alloc_noprof+0x94/0x5d8 [ 191.021903][ T7291] sk_prot_alloc+0x60/0x1e8 [ 191.021914][ T7291] sk_alloc+0x44/0x3ac [ 191.021924][ T7291] inet6_create+0x620/0xfc8 [ 191.021934][ T7291] __sock_create+0x31c/0x670 [ 191.021942][ T7291] sock_create_kern+0x4c/0x64 [ 191.021950][ T7291] mptcp_subflow_create_socket+0xe4/0x61c [ 191.021961][ T7291] __mptcp_nmpc_sk+0x138/0x57c [ 191.021971][ T7291] mptcp_listen+0x100/0x410 [ 191.021981][ T7291] __sys_listen_socket+0x100/0x128 [ 191.021989][ T7291] __sys_listen+0xa8/0x10c [ 191.021997][ T7291] __arm64_sys_listen+0x5c/0x74 [ 191.022005][ T7291] invoke_syscall+0x98/0x244 [ 191.022014][ T7291] el0_svc_common+0xec/0x23c [ 191.022024][ T7291] do_el0_svc+0x4c/0x5c [ 191.022033][ T7291] el0_svc+0x64/0x260 [ 191.022043][ T7291] el0t_64_sync_handler+0x48/0x148 [ 191.022052][ T7291] el0t_64_sync+0x198/0x19c [ 191.065497][ T7296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.648'. [ 191.141683][ T7301] netlink: 12 bytes leftover after parsing attributes in process `syz.1.649'. [ 191.424963][ T7298] af_packet: tpacket_rcv: packet too big, clamped from 64521 to 3956. macoff=92 [ 191.448791][ T7307] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 191.545804][ T4721] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.679931][ T7334] loop3: detected capacity change from 0 to 256 [ 191.717105][ T30] audit: type=1326 audit(191.690:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7335 comm="syz.4.659" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bb79028 code=0x7ffc0000 [ 191.907891][ T7365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.910046][ T7365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.235854][ T7376] loop2: detected capacity change from 0 to 512 [ 192.239293][ T7376] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 192.245903][ T7376] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.259882][ T7376] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 192.264687][ T7376] EXT4-fs (loop2): Remounting filesystem read-only [ 192.274736][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.437718][ T7397] xt_CT: You must specify a L4 protocol and not use inversions on it [ 192.439846][ T7399] FAULT_INJECTION: forcing a failure. [ 192.439846][ T7399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.439875][ T7399] CPU: 1 UID: 0 PID: 7399 Comm: syz.2.681 Not tainted syzkaller #0 PREEMPT [ 192.439887][ T7399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 192.439892][ T7399] Call trace: [ 192.439895][ T7399] show_stack+0x2c/0x3c (C) [ 192.439914][ T7399] __dump_stack+0x30/0x40 [ 192.439925][ T7399] dump_stack_lvl+0xd8/0x12c [ 192.439934][ T7399] dump_stack+0x1c/0x28 [ 192.439943][ T7399] should_fail_ex+0x41c/0x590 [ 192.439954][ T7399] should_fail+0x14/0x24 [ 192.439964][ T7399] should_fail_usercopy+0x20/0x30 [ 192.439974][ T7399] __arm64_sys_rt_sigpending+0xf0/0x254 [ 192.439983][ T7399] invoke_syscall+0x98/0x244 [ 192.439992][ T7399] el0_svc_common+0x19c/0x23c [ 192.440002][ T7399] do_el0_svc+0x4c/0x5c [ 192.440011][ T7399] el0_svc+0x64/0x260 [ 192.440022][ T7399] el0t_64_sync_handler+0x48/0x148 [ 192.440031][ T7399] el0t_64_sync+0x198/0x19c [ 192.475162][ T7401] xt_hashlimit: size too large, truncated to 1048576 [ 192.481041][ T7402] loop2: detected capacity change from 0 to 512 [ 192.514546][ T7402] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 192.517148][ T7402] EXT4-fs (loop2): Remounting filesystem read-only [ 192.521991][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 192.522006][ C1] EXT4-fs (loop2): initial error at time 192: ext4_mb_generate_buddy:1317 [ 192.522020][ C1] EXT4-fs (loop2): last error at time 192: ext4_mb_generate_buddy:1317 [ 192.534260][ T7402] EXT4-fs (loop2): 1 truncate cleaned up [ 192.534779][ T7402] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.554757][ T130] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 192.554788][ T130] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 192.554824][ T130] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 192.579569][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.903980][ T7411] FAULT_INJECTION: forcing a failure. [ 192.903980][ T7411] name failslab, interval 1, probability 0, space 0, times 0 [ 192.909098][ T7411] CPU: 1 UID: 0 PID: 7411 Comm: syz.4.686 Not tainted syzkaller #0 PREEMPT [ 192.909119][ T7411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 192.909126][ T7411] Call trace: [ 192.909130][ T7411] show_stack+0x2c/0x3c (C) [ 192.909155][ T7411] __dump_stack+0x30/0x40 [ 192.909167][ T7411] dump_stack_lvl+0xd8/0x12c [ 192.909178][ T7411] dump_stack+0x1c/0x28 [ 192.909188][ T7411] should_fail_ex+0x41c/0x590 [ 192.909199][ T7411] should_failslab+0xc4/0x120 [ 192.909207][ T7411] __kmalloc_noprof+0x108/0x6b8 [ 192.909216][ T7411] tomoyo_encode2+0x10c/0x330 [ 192.909225][ T7411] tomoyo_encode+0x34/0x50 [ 192.909232][ T7411] tomoyo_realpath_from_path+0x488/0x4dc [ 192.909240][ T7411] tomoyo_path_perm+0x218/0x460 [ 192.909247][ T7411] tomoyo_path_truncate+0x28/0x38 [ 192.909255][ T7411] security_path_truncate+0x140/0x2c0 [ 192.909266][ T7411] vfs_truncate+0x3ac/0x458 [ 192.909276][ T7411] ksys_truncate+0xe8/0x190 [ 192.909284][ T7411] __arm64_sys_truncate+0x5c/0x74 [ 192.909293][ T7411] invoke_syscall+0x98/0x244 [ 192.909303][ T7411] el0_svc_common+0xec/0x23c [ 192.909313][ T7411] do_el0_svc+0x4c/0x5c [ 192.909322][ T7411] el0_svc+0x64/0x260 [ 192.909333][ T7411] el0t_64_sync_handler+0x48/0x148 [ 192.909342][ T7411] el0t_64_sync+0x198/0x19c [ 192.935898][ T7411] ERROR: Out of memory at tomoyo_realpath_from_path. [ 192.998458][ T7416] loop0: detected capacity change from 0 to 1024 [ 193.023832][ T7416] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 193.105288][ T7416] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 1: comm syz.0.687: lblock 1 mapped to illegal pblock 1 (length 5) [ 193.111627][ T7416] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 5 with error 117 [ 193.111673][ T7416] EXT4-fs (loop0): This should not happen!! Data will be lost [ 193.111673][ T7416] [ 193.115386][ T7424] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 8: comm syz.0.687: lblock 8 mapped to illegal pblock 8 (length 8) [ 193.123470][ T7424] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 193.123517][ T7424] EXT4-fs (loop0): This should not happen!! Data will be lost [ 193.123517][ T7424] [ 193.134745][ T7416] netlink: 44 bytes leftover after parsing attributes in process `syz.0.687'. [ 193.204291][ T7436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.694'. [ 193.271713][ T7437] loop2: detected capacity change from 0 to 512 [ 193.280313][ T7437] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 194.138227][ T7445] tipc: Enabling of bearer rejected, failed to enable media [ 194.144789][ T4721] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 194.145543][ T4721] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 194.379795][ T7468] loop4: detected capacity change from 0 to 512 [ 194.393942][ T7468] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.401327][ T7468] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.707: iget: bad i_size value: 2533274857506816 [ 194.416004][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.744445][ T7477] warning: `syz.3.710' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 194.761889][ T7481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.711'. [ 194.854784][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 194.855923][ T30] audit: type=1326 audit(194.830:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7485 comm="syz.3.713" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff9fd79028 code=0x0 [ 194.870478][ T7487] IPVS: set_ctl: invalid protocol: 0 172.30.1.5:20003 [ 195.332229][ T7495] Invalid ELF header magic: != ELF [ 195.354003][ T7497] overlayfs: failed to clone lowerpath [ 195.355849][ T7497] overlayfs: failed to clone lowerpath [ 195.363015][ T7497] netlink: 'syz.1.718': attribute type 10 has an invalid length. [ 195.365347][ T7497] syz_tun: entered promiscuous mode [ 195.367896][ T7497] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 195.371918][ T130] bond0: (slave bond_slave_0): interface is now down [ 195.371949][ T130] bond0: (slave bond_slave_1): interface is now down [ 195.392487][ T130] bond0: (slave bond_slave_0): interface is now down [ 195.392514][ T130] bond0: (slave bond_slave_1): interface is now down [ 195.392531][ T130] bond0: (slave syz_tun): interface is now down [ 195.394490][ T130] bond0: now running without any active interface! [ 195.411782][ T7501] netlink: 24 bytes leftover after parsing attributes in process `syz.0.720'. [ 195.471766][ T7510] netlink: 'syz.0.720': attribute type 1 has an invalid length. [ 195.491081][ T7510] 8021q: adding VLAN 0 to HW filter on device bond1 [ 195.498990][ T7510] netlink: 48 bytes leftover after parsing attributes in process `syz.0.720'. [ 195.523643][ T7523] netlink: 140 bytes leftover after parsing attributes in process `syz.2.725'. [ 195.739971][ T7568] Cannot find del_set index 0 as target [ 195.764179][ T7571] FAULT_INJECTION: forcing a failure. [ 195.764179][ T7571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.764214][ T7571] CPU: 1 UID: 0 PID: 7571 Comm: syz.2.735 Not tainted syzkaller #0 PREEMPT [ 195.764227][ T7571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 195.764234][ T7571] Call trace: [ 195.764238][ T7571] show_stack+0x2c/0x3c (C) [ 195.764259][ T7571] __dump_stack+0x30/0x40 [ 195.764274][ T7571] dump_stack_lvl+0xd8/0x12c [ 195.764285][ T7571] dump_stack+0x1c/0x28 [ 195.764295][ T7571] should_fail_ex+0x41c/0x590 [ 195.764306][ T7571] should_fail+0x14/0x24 [ 195.764316][ T7571] should_fail_usercopy+0x20/0x30 [ 195.764326][ T7571] _inline_copy_from_user+0x3c/0x174 [ 195.764336][ T7571] do_ipt_set_ctl+0x664/0xc38 [ 195.764344][ T7571] nf_setsockopt+0xa0/0xe4 [ 195.764355][ T7571] ip_setsockopt+0x118/0x128 [ 195.764363][ T7571] udp_setsockopt+0xa8/0xc0 [ 195.764371][ T7571] sock_common_setsockopt+0xb0/0xcc [ 195.764379][ T7571] do_sock_setsockopt+0x1f0/0x330 [ 195.764388][ T7571] __sys_setsockopt+0x104/0x170 [ 195.764396][ T7571] __arm64_sys_setsockopt+0xc0/0xdc [ 195.764404][ T7571] invoke_syscall+0x98/0x244 [ 195.764414][ T7571] el0_svc_common+0xec/0x23c [ 195.764424][ T7571] do_el0_svc+0x4c/0x5c [ 195.764433][ T7571] el0_svc+0x64/0x260 [ 195.764443][ T7571] el0t_64_sync_handler+0x48/0x148 [ 195.764453][ T7571] el0t_64_sync+0x198/0x19c [ 195.804616][ T7578] Cannot find del_set index 0 as target [ 195.860504][ T7587] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 195.860536][ T7587] overlayfs: failed to set xattr on upper [ 195.861001][ T7587] overlayfs: ...falling back to redirect_dir=nofollow. [ 195.861023][ T7587] overlayfs: ...falling back to uuid=null. [ 195.877642][ T7587] overlayfs: failed to resolve './file0/file1': -2 [ 195.986845][ T7605] overlayfs: missing 'lowerdir' [ 196.075073][ T7616] syz.3.749: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0 [ 196.075170][ T7616] CPU: 1 UID: 0 PID: 7616 Comm: syz.3.749 Not tainted syzkaller #0 PREEMPT [ 196.075181][ T7616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 196.075187][ T7616] Call trace: [ 196.075190][ T7616] show_stack+0x2c/0x3c (C) [ 196.075211][ T7616] __dump_stack+0x30/0x40 [ 196.075225][ T7616] dump_stack_lvl+0xd8/0x12c [ 196.075237][ T7616] dump_stack+0x1c/0x28 [ 196.075248][ T7616] warn_alloc+0x1bc/0x1d0 [ 196.075259][ T7616] __vmalloc_node_range_noprof+0x120/0x105c [ 196.075272][ T7616] __vmalloc_node_noprof+0xec/0x14c [ 196.075283][ T7616] vmalloc_noprof+0x3c/0x4c [ 196.075294][ T7616] dvb_dmxdev_set_buffer_size+0xc8/0x1b0 [ 196.075304][ T7616] dvb_demux_do_ioctl+0x3e0/0x4bc [ 196.075312][ T7616] dvb_usercopy+0x2a4/0x4d4 [ 196.075320][ T7616] dvb_demux_ioctl+0x3c/0x54 [ 196.075328][ T7616] __arm64_sys_ioctl+0x14c/0x1c4 [ 196.075342][ T7616] invoke_syscall+0x98/0x244 [ 196.075354][ T7616] el0_svc_common+0xec/0x23c [ 196.075366][ T7616] do_el0_svc+0x4c/0x5c [ 196.075377][ T7616] el0_svc+0x64/0x260 [ 196.075390][ T7616] el0t_64_sync_handler+0x48/0x148 [ 196.075401][ T7616] el0t_64_sync+0x198/0x19c [ 196.075415][ T7616] Mem-Info: [ 196.075423][ T7616] active_anon:23 inactive_anon:9959 isolated_anon:0 [ 196.075423][ T7616] active_file:3396 inactive_file:13924 isolated_file:0 [ 196.075423][ T7616] unevictable:768 dirty:616 writeback:0 [ 196.075423][ T7616] slab_reclaimable:9322 slab_unreclaimable:88433 [ 196.075423][ T7616] mapped:33531 shmem:5119 pagetables:1304 [ 196.075423][ T7616] sec_pagetables:0 bounce:0 [ 196.075423][ T7616] kernel_misc_reclaimable:0 [ 196.075423][ T7616] free:1482836 free_pcp:4983 free_cma:7616 [ 196.075448][ T7616] Node 0 active_anon:92kB inactive_anon:39836kB active_file:13584kB inactive_file:55696kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:134124kB dirty:2464kB writeback:0kB shmem:20576kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9496kB pagetables:5216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 196.075473][ T7616] Node 0 DMA free:3077888kB boost:0kB min:20356kB low:25444kB high:30532kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 196.075504][ T7616] lowmem_reserve[]: 0 0 3651 3651 3651 [ 196.075547][ T7616] Node 0 Normal free:2852956kB boost:0kB min:24696kB low:30868kB high:37040kB reserved_highatomic:0KB free_highatomic:0KB active_anon:92kB inactive_anon:39936kB active_file:13584kB inactive_file:55696kB unevictable:3072kB writepending:2464kB zspages:0kB present:5242880kB managed:3739372kB mlocked:0kB bounce:0kB free_pcp:19912kB local_pcp:16652kB free_cma:0kB [ 196.075578][ T7616] lowmem_reserve[]: 0 0 0 0 0 [ 196.075619][ T7616] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 196.082898][ T7616] Node 0 Normal: 310*4kB (UE) 256*8kB (UME) 235*16kB (UE) 773*32kB (UM) 445*64kB (UME) 50*128kB (UME) 20*256kB (UM) 7*512kB (UM) 4*1024kB (UM) 3*2048kB (ME) 675*4096kB (UM) = 2850408kB [ 196.083091][ T7616] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 196.083102][ T7616] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 196.083112][ T7616] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 196.083122][ T7616] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 196.083132][ T7616] 22860 total pagecache pages [ 196.083139][ T7616] 0 pages in swap cache [ 196.083146][ T7616] Free swap = 124996kB [ 196.083153][ T7616] Total swap = 124996kB [ 196.083160][ T7616] 2097152 pages RAM [ 196.083167][ T7616] 0 pages HighMem/MovableOnly [ 196.083173][ T7616] 392261 pages reserved [ 196.083180][ T7616] 8192 pages cma reserved [ 196.083187][ T7616] 54 pages hwpoisoned [ 196.182428][ T30] audit: type=1400 audit(196.150:27): lsm=SMACK fn=smack_task_setnice action=denied subject="w" object="_" requested=w pid=7626 comm="syz.3.753" opid=4717 ocomm="syz-executor" [ 196.182472][ T30] audit: type=1400 audit(196.150:28): lsm=SMACK fn=smack_task_setnice action=denied subject="w" object="_" requested=w pid=7626 comm="syz.3.753" opid=6915 ocomm="syz.3.514" [ 196.182489][ T30] audit: type=1400 audit(196.150:29): lsm=SMACK fn=smack_task_setnice action=denied subject="w" object="_" requested=w pid=7626 comm="syz.3.753" opid=7626 ocomm="syz.3.753" [ 197.153969][ T7650] xt_CT: You must specify a L4 protocol and not use inversions on it [ 197.168446][ T7651] overlayfs: missing 'lowerdir' [ 197.228109][ T7655] loop3: detected capacity change from 0 to 512 [ 197.243944][ T7655] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.760: Unrecognised inode hash code 255 [ 197.243986][ T7655] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.760: Corrupt directory, running e2fsck is recommended [ 197.261601][ T7655] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 197.263055][ T7664] loop2: detected capacity change from 0 to 256 [ 197.265699][ T7655] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.760: corrupted in-inode xattr: invalid ea_ino [ 197.274203][ T7655] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 197.282020][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 197.282044][ C0] EXT4-fs (loop3): initial error at time 197: ext4_iget_extra_inode:5180: inode 15 [ 197.282079][ C0] EXT4-fs (loop3): last error at time 197: ext4_iget_extra_inode:5180: inode 15 [ 197.308499][ T7655] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.760: couldn't read orphan inode 15 (err -117) [ 197.311064][ T7655] loop3: lost filesystem error report for type 5 error -117 [ 197.490138][ T7655] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.499357][ T7664] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 197.813859][ T7679] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.760: Unrecognised inode hash code 255 [ 197.814595][ T7679] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.760: Corrupt directory, running e2fsck is recommended [ 197.815193][ T7679] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 4: comm syz.3.760: path /153/file0: bad entry in directory: directory entry overrun - offset=512, inode=4294967295, rec_len=1024, size=1024 fake=0 [ 197.924238][ T7683] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 198.286448][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.544050][ T7727] loop2: detected capacity change from 0 to 256 [ 198.674872][ T7730] loop3: detected capacity change from 0 to 512 [ 198.775341][ T7730] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 199.925303][ T7742] loop4: detected capacity change from 0 to 8192 [ 199.990970][ T7742] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 200.703947][ T7752] xt_CT: You must specify a L4 protocol and not use inversions on it [ 200.868256][ T7762] loop2: detected capacity change from 0 to 7 [ 201.034174][ T7762] Dev loop2: unable to read RDB block 7 [ 201.034209][ T7762] loop2: AHDI p1 p2 p3 [ 201.034224][ T7762] loop2: partition table partially beyond EOD, truncated [ 201.034322][ T7762] loop2: p1 start 1601398130 is beyond EOD, truncated [ 201.034341][ T7762] loop2: p2 start 1702059890 is beyond EOD, truncated [ 201.114121][ T7772] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.786'. [ 202.367935][ T7781] loop4: detected capacity change from 0 to 512 [ 202.409115][ T7781] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 203.345335][ T7799] syz_tun: left allmulticast mode [ 203.354799][ T7800] pimreg: entered allmulticast mode [ 203.366755][ T7800] vlan2: entered promiscuous mode [ 203.366780][ T7800] bridge0: entered promiscuous mode [ 203.425708][ T7802] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.427523][ T7810] loop4: detected capacity change from 0 to 128 [ 203.438142][ T7811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.799'. [ 203.500839][ T7810] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 203.516705][ T4707] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 203.544469][ T7802] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.367479][ T7823] tipc: Enabling of bearer rejected, failed to enable media [ 204.453892][ T7802] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.552222][ T4794] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 204.568681][ T7802] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.648653][ T7836] tipc: Enabling of bearer rejected, failed to enable media [ 204.670113][ T7838] tipc: Started in network mode [ 204.670148][ T7838] tipc: Node identity 867e05aa8718, cluster identity 4711 [ 204.670571][ T7838] tipc: Enabled bearer , priority 0 [ 204.675551][ T7837] tipc: Disabling bearer [ 204.689935][ T1726] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.693327][ T1726] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.695929][ T1726] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.699638][ T1726] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.703608][ T4794] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 204.703634][ T4794] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 204.703659][ T4794] usb 1-1: New USB device found, idVendor=0451, idProduct=5416, bcdDevice= 1.00 [ 204.703673][ T4794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.713134][ T4794] usb 1-1: config 0 descriptor?? [ 205.636558][ T4816] usb 1-1: USB disconnect, device number 9 [ 206.947702][ T7899] syzkaller0: entered promiscuous mode [ 206.947736][ T7899] syzkaller0: entered allmulticast mode [ 207.400545][ T7918] loop3: detected capacity change from 0 to 512 [ 207.407235][ T7918] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 208.167646][ T7924] 9p: Bad value for 'rfdno' [ 208.184890][ T7923] Cannot find del_set index 0 as target [ 208.196489][ T7927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.831'. [ 208.289213][ T7932] binder: 7930:7932 ioctl c0306201 20000080 returned -14 [ 208.289656][ T7932] binder: 7930:7932 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 208.289670][ T7932] binder: 7932 RLIMIT_NICE not set [ 208.303564][ T7935] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0 [ 208.305534][ T7932] binder: 7930:7932 ioctl 8933 20000300 returned -22 [ 209.291254][ T7945] netlink: 36 bytes leftover after parsing attributes in process `syz.3.837'. [ 209.665525][ T7955] tipc: Enabling of bearer rejected, failed to enable media [ 209.893000][ T7965] dummy_hcd dummy_hcd.0: remove, state 4 [ 209.893491][ T7965] usb usb1: USB disconnect, device number 1 [ 210.921561][ T7977] netlink: 'syz.1.845': attribute type 2 has an invalid length. [ 211.065152][ T7965] dummy_hcd dummy_hcd.0: stopped [ 211.065229][ T7965] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 211.178182][ T7968] Unable to handle kernel paging request at virtual address dfff800000000000 [ 211.178453][ T7968] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 211.178521][ T7968] Mem abort info: [ 211.178566][ T7968] ESR = 0x0000000096000005 [ 211.178641][ T7968] EC = 0x25: DABT (current EL), IL = 32 bits [ 211.178691][ T7968] SET = 0, FnV = 0 [ 211.178755][ T7968] EA = 0, S1PTW = 0 [ 211.178799][ T7968] FSC = 0x05: level 1 translation fault [ 211.178909][ T7968] Data abort info: [ 211.178956][ T7968] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 211.179013][ T7968] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 211.179090][ T7968] GCS = 0, Overlay = 0, DirtyBit = 0 [ 211.179139][ T7968] [dfff800000000000] address between user and kernel address ranges [ 211.179248][ T7968] Internal error: Oops: 0000000096000005 [#1] SMP [ 211.192529][ T7968] Modules linked in: [ 211.193149][ T7968] CPU: 1 UID: 0 PID: 7968 Comm: syz.0.842 Not tainted syzkaller #0 PREEMPT [ 211.194575][ T7968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 211.196229][ T7968] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 211.197505][ T7968] pc : dummy_udc_stop+0x84/0x180 [ 211.198347][ T7968] lr : dummy_udc_stop+0x54/0x180 [ 211.199164][ T7968] sp : ffff800093d27820 [ 211.199915][ T7968] x29: ffff800093d27820 x28: 1fffe000191f2401 x27: ffff0000c8f92008 [ 211.201307][ T7968] x26: 1fffe000191f2400 x25: dfff800000000000 x24: 1fffe000191f24a0 [ 211.202662][ T7968] x23: ffff0000c8f92501 x22: ffff800087331f58 x21: dfff800000000000 [ 211.204007][ T7968] x20: 0000000000000003 x19: 0000000000000000 x18: 1fffe00035bc9e28 [ 211.205362][ T7968] x17: 0000000000000003 x16: ffff800088b07000 x15: ffff800088bbd060 [ 211.206754][ T7968] x14: ffff0001ade4f14c x13: 0000000000000001 x12: 0000000000000000 [ 211.208122][ T7968] x11: 0000000000000000 x10: 0000000000080000 x9 : 00000000000006a8 [ 211.209487][ T7968] x8 : 0000000000000000 x7 : ffff8000835aed5c x6 : 0000000000000000 [ 211.210897][ T7968] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000835b54f0 [ 211.212302][ T7968] x2 : 0000000000000003 x1 : ffff0000ca251d40 x0 : 0000000000000000 [ 211.213691][ T7968] Call trace: [ 211.214297][ T7968] dummy_udc_stop+0x84/0x180 (P) [ 211.215191][ T7968] gadget_unbind_driver+0x204/0x790 [ 211.216112][ T7968] device_remove+0xc4/0x134 [ 211.216870][ T7968] device_release_driver_internal+0x124/0x20c [ 211.217910][ T7968] driver_detach+0x124/0x1b4 [ 211.218627][ T7968] bus_remove_driver+0x124/0x22c [ 211.219440][ T7968] driver_unregister+0x78/0xac [ 211.220199][ T7968] usb_gadget_unregister_driver+0x50/0x78 [ 211.221102][ T7968] unregister_gadget+0x4c/0xc0 [ 211.221894][ T7968] gadget_dev_desc_UDC_store+0x120/0x22c [ 211.222824][ T7968] configfs_write_iter+0x27c/0x354 [ 211.223712][ T7968] vfs_write+0x51c/0xa0c [ 211.224550][ T7968] ksys_write+0x12c/0x228 [ 211.225284][ T7968] __arm64_sys_write+0x7c/0x90 [ 211.226096][ T7968] invoke_syscall+0x98/0x244 [ 211.226861][ T7968] el0_svc_common+0xec/0x23c [ 211.227613][ T7968] do_el0_svc+0x4c/0x5c [ 211.228336][ T7968] el0_svc+0x64/0x260 [ 211.229121][ T7968] el0t_64_sync_handler+0x48/0x148 [ 211.230125][ T7968] el0t_64_sync+0x198/0x19c [ 211.231051][ T7968] Code: aa1303e0 97579c24 f9400273 d343fe68 (38756908) [ 211.232430][ T7968] ---[ end trace 0000000000000000 ]--- [ 211.502229][ T7968] Kernel panic - not syncing: Oops: Fatal exception [ 211.503300][ T7968] SMP: stopping secondary CPUs [ 211.504142][ T7968] Kernel Offset: disabled [ 211.504845][ T7968] CPU features: 0x14000000,003c0008,27020501,5427fea7 [ 211.506061][ T7968] Memory Limit: none [ 211.759985][ T7968] Rebooting in 86400 seconds..