last executing test programs: 5m15.464591084s ago: executing program 4 (id=55): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x90}, 0x1, 0x0, 0x0, 0x20040000}, 0x24000810) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000180)=""/88, 0x58}], 0x1, 0x3c, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) 5m14.450283668s ago: executing program 4 (id=60): unshare(0x6a040000) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000100)='map_files\x00') socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) getdents64(r2, 0x0, 0x0) 5m14.312873001s ago: executing program 1 (id=65): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x38}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118, 0x0, r3}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x200, 0x4003bfff, 0x2b8, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r4}}], 0x1, 0x0, 0x0) 5m13.779311254s ago: executing program 4 (id=69): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5m13.374928544s ago: executing program 1 (id=70): socket(0x10, 0x803, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}}, 0x20000004) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r1, 0x388, 0xffefffffff6f0000) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b45, 0x8000000000001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x37, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x18000000, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}}], {0x14, 0x10}}, 0x98}}, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) 5m13.182431339s ago: executing program 4 (id=73): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000480)='usbip-vudc.0', 0xc) 5m12.876740976s ago: executing program 4 (id=74): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0xffffffffffffffff, 0xfff}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x54c, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1}}}}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m12.433925006s ago: executing program 1 (id=76): socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118, 0x0, r3}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x200, 0x4003bfff, 0x2b8, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r4}}], 0x1, 0x0, 0x0) 5m11.186684317s ago: executing program 1 (id=85): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x60, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000}}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 5m10.906564194s ago: executing program 1 (id=89): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x2, 0x8, {0x6, 0x9, 0x0, 0x80000000000000ff, 0x3, 0x0, 0x7fffffff, 0x58, 0x3, 0x8000, 0x9, r2, r3, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf9, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x00\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r4, &(0x7f0000000100)=""/134, 0x86) getdents64(r4, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000010ec0)="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", 0x2000, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x10, 0x0, 0x8}, 0x0, 0x0, 0x0, 0x0}) 5m10.029645935s ago: executing program 1 (id=90): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20040084) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 5m9.833919909s ago: executing program 4 (id=91): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000011000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000034001a800600000002000000280005802400"], 0x54}}, 0x0) 4m56.003541643s ago: executing program 32 (id=86): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r2) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 4m55.498654846s ago: executing program 33 (id=88): r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) listen(r0, 0x800) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local}) write$tun(r1, 0x0, 0x78) 4m54.998676808s ago: executing program 34 (id=90): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20040084) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 4m53.996512902s ago: executing program 35 (id=91): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000011000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000034001a800600000002000000280005802400"], 0x54}}, 0x0) 3m56.067358991s ago: executing program 8 (id=223): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000), 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) 3m55.871799975s ago: executing program 8 (id=227): socket(0x10, 0x803, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r0, 0x0, 0x20000004) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xffefffffff6f0000) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b45, 0x8000000000001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x37, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x18000000, {0x1}}], {0x14, 0x10}}, 0x5c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) 3m53.751174177s ago: executing program 8 (id=234): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x54c, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1}}}}}]}}]}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m52.237347593s ago: executing program 5 (id=243): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0x8, 0xf}, {0xf, 0xffe0}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008"], 0xa4}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004800c"], 0x34}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m52.145963765s ago: executing program 5 (id=245): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0xd, 0x0, 0x3, 0xe, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x2, 0x6, 0xb}, @sadb_address={0x5, 0x5, 0x0, 0x20, 0x0, @in6={0xa, 0x4e22, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3ff}}, @sadb_lifetime={0x4, 0x3, 0x6, 0x7, 0x2, 0x1000}]}, 0x70}, 0x1, 0x7}, 0x0) inotify_init1(0x800) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0x11, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0xffffffffffffffc2, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount$bind(0x0, &(0x7f0000000180)='./cgroup\x00', 0x0, 0x2108cff, 0x0) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) r8 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x8100, &(0x7f0000001dc0)={0x0, 0x84, 0x40000, {r5}}, 0x20) mprotect(&(0x7f000097f000/0x4000)=nil, 0x4000, 0x1000009) getsockopt$inet6_buf(r1, 0x29, 0x6, 0xffffffffffffffff, &(0x7f0000000080)=0xfffffffffffffec4) 3m50.350530759s ago: executing program 5 (id=249): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x38, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r2, 0x308c3, 0xc4a48b7f26be2e0b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) sendmmsg$inet(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0}}], 0x1, 0x4880) 3m49.438998081s ago: executing program 8 (id=253): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000480)=ANY=[], 0xb) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) pipe2(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r6, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3m49.298855024s ago: executing program 5 (id=255): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) unshare(0x42000000) 3m47.457010048s ago: executing program 8 (id=260): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0xd, 0x0, 0x3, 0xe, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x2, 0x6, 0xb}, @sadb_address={0x5, 0x5, 0x0, 0x20, 0x0, @in6={0xa, 0x4e22, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3ff}}, @sadb_lifetime={0x4, 0x3, 0x6, 0x7, 0x2, 0x1000}]}, 0x70}, 0x1, 0x7}, 0x0) inotify_init1(0x800) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0x11, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0xffffffffffffffc2, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) fchdir(0xffffffffffffffff) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount$bind(0x0, &(0x7f0000000180)='./cgroup\x00', 0x0, 0x2108cff, 0x0) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) r8 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x8100, &(0x7f0000001dc0)={0x0, 0x84, 0x40000, {r5}}, 0x20) mprotect(&(0x7f000097f000/0x4000)=nil, 0x4000, 0x1000009) getsockopt$inet6_buf(r1, 0x29, 0x6, 0xffffffffffffffff, &(0x7f0000000080)=0xfffffffffffffec4) 3m47.339020772s ago: executing program 5 (id=262): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x200, 0x4003bfff, 0x2b8, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r3}}], 0x1, 0x0, 0x0) 3m45.420394158s ago: executing program 8 (id=265): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) 3m45.346342689s ago: executing program 5 (id=266): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x38, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r2, 0x308c3, 0xc4a48b7f26be2e0b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) sendmmsg$inet(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)}}], 0x1, 0x4880) 3m29.896897152s ago: executing program 36 (id=266): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x38, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r2, 0x308c3, 0xc4a48b7f26be2e0b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) sendmmsg$inet(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)}}], 0x1, 0x4880) 3m29.887753462s ago: executing program 37 (id=265): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) 2m49.613368185s ago: executing program 0 (id=363): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x300884c, &(0x7f00000005c0), 0x1, 0x515, &(0x7f0000000b40)="$eJzs3V9oHHkdAPDvbJOY6+W6FQ7U49Cg4B2eJm2T63kcyB34j3optfFFGyhJu01CN9mQbLSJoBWLFHzxSYRK0T4oiGJ87JuKoMWiD4WiL6VIQS20harPkdnd6YVk02zbdCdJPx+Yzm9+2+zvO/PNbGZ+O/ObAJ5ZvRHxdkTsiojXIqLYqC80pjhbn9L/NzawNJFOSSwvD99LIomIQwNLE9l7JY358403eDUift+ZxNi5te3OLSyeHi2XS7ON5f7q1Ez/3MLipyanRsdL46XpgTff+PTBgdcHDw5s2rreHD029cvK0Fs/u334Nx/++CfuJfF29DReW7kem6U3ehvbpDNeWPlCEvH1zW4sZ90ryklHjoHQsj+/8fIP844BAGi/QuPYv6N2/F+MXVE/eOu+NnK/GLf+st7PHRq5+O92xgkAAAA8vuXljzTmAAAAwM6VOPcHAACAHS67DuDQwNJENrXr2oPbX2hXS6znzjsRsbee/+z+7vorHY17erujMyJ2/yeJlbf1Jqvu+X0c1c9F9MY3/lg9+4NT6RRP6T5stqalf+QdAXnqGsw7AvL00pfzjoA8/fV83hGQp2t38o6APB0dzjsC8nT4YN4RkKcL9/KOgN++Ux8AcG3/X6E25l/Wy7O6/yctP/eEbd8tRPRG969W1un/aa+s/29sTf9f4UH/3651+v/2tNjG5a9d/1Cz+i9+Nc3/8FjW//fJkR+X0vbT+ROvGC25852Ilzqa5T95kP9knfwXW2zjD1cHm/b0/25Pmv+f/yLNdzbJf3st/zTilWie/0zy8PFZ+09Nlkv76v82beOj9//5v2b1039L83/lM9n+n05p+9l3ATx96f6/e538b/T5v7fFNi5N3mra0zvck+b/lW89PP+F213JV2q/jF2NmjOj1ers/oiu5N219QcedQs8W7JtlG3DNP+vfqz53/8P1ubNP//T34n3t9jmu8cKbzWrH/x1mv/vf97+n580/yc32P/X+/v/YqttXL852qx+4rNp/o9ekn8AAAAAAAAAeDKFiOiJpND3oFwo9PXVn+H9YuwulCtz1ddOVeanT0btWdl7o7OQXelVrC8n6fL+xvVA2fKBVcsDjetFzhefqy33naiUT+a98gAAALDD9UTcOPbdyx94ftX5/7+K9fN/AAAAYPtLz/9f/snFC2n5v60O5AMAAABsK+n5//3v3b0Szv8BAABgx+rpdv4PAAAAO132/f+RoaE4MjS0nD33b7oyPnl6YubNA/v6puZP9J2ozM70jVcq47UR+6Y2ft9ypTKz//WYP9NfLc1V++cWFo9PVeanq8drz409Xupsw7oBGzv398sjeccAAAC0T8864/+/sGLs/n0RsScirhY735eN9Q8AAABsfT0RN770o2/+aW5h8fRouVyaVXjUwvK3I7ZAGAprCtlFJlslnm1ZyPkDCgAA2HTvHfTnHQkAAAAAAAAAAAAAAAAAAAA8u9oxnFje6wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD28f8AAAD//0FW/Wk=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x1, 0x3}, 0x3}}, 0x10) connect$tipc(0xffffffffffffffff, &(0x7f0000000600)=@name={0x1e, 0x2, 0x2, {{0x1, 0xa}, 0x4}}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x200000, &(0x7f0000000540)={[{@dioread_nolock}, {@resuid}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@noblock_validity}]}, 0x3, 0x480, &(0x7f0000000a40)="$eJzs3M9vFFUcAPDvTLsFBGxF/MEPtYrGBrWlgMrBgxpNPGBiogeMp6YtBCnU0JoIIQrG4MkYE+/Go/+CJ70YoxcTr3o3JMT0AnhxzezOtLtld8u2225lP59k4L2dmX3f78683TfzdhtAzxrO/kkidkTEHxExWK3WbzBc/e/mwqXJWwuXJpMol9/+O6lsd2Ph0mSxabHf9rwykkaknyWxr0G7cxcunpmYmZk+n9fH5s9+MDZ34eJzp89OnJo+NX3u8LFjR4+Mv/jC4ecbBz7QXp5ZTDf2fjy7f88b73715vEv6vJflkeHDLda+VS53OHmumtnTTnp72IgtKUvIrLDVar0/8Hoi6WDNxivf9rV4IB1VS6Xy9ubr75cBu5iSdTXdXnoFcUHfXb9WyzLBwEvr9/wo+uuv1K9AMryvpkv1TX9kebblJZd33bScEScuPzPN9kSbd+HaPMmCABARPyQjX+ebTT+S+PBmu3uzeeGhiLivojYFRH3R8TuiHggorLtQxHxcGXPWBw7rWT5JMnt45/02poSXEE2/nspn9uqH/8tZjDUl9d2VvIvJSdPz0wfyl+TkShtyerjLdr48bXfv2y2rnb8ly1Z+8VYMI/jWv+W+n2mJuYn1pJzretXIvb2F7nW5p8szgQkEbEnIvauso3TB7/b32zdyvm30IF5pvK3EU9Xj//lWKjPv5C0np8c2xoz04fGirPidr/8dvWtJs1XXvgTB1eZfwdkx/+ehuf/Yv5DSe187Vz7bVz98/Om1zSrPf8Hkncq5eIK6KOJ+fnz4xEDyfFq0LWPH17at6gX22f5jxxo3P93xdIrsS8ispP4kYh4NCIey2N/PCKeiIgDLfL/+dUn32+4Il3j+d8BWf5TbR3/pcJALH+kcaHvzE/f1zU6tFTM87/V+vgfrZRG8kfu5P3vTuJa3dkMAAAA/z9pROyIJB1dLKfp6Gj1+/K7I9KZ2bn5Z07OfnhuqvobgaEopcWdrsGa+6Hj+WV9tX4lIqpfLSjWH8nvG3/dt61SH52cnZnqdvLQ47Y36f+Zv/q6HR2w7vxeC3qX/g+9q1H/39qFOICN5/MfeleD/r+tG3EAG6/R5/8nrXf5d71iATbWsv5v2g96SPvX/7++ty6BABuuaf+/m//yD1Dh/j/0pLltsfKP5FsWimda5e6bpZBEREefMEqbIq+1F8pJw4MbaVYobYYIFdah0N33JQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE75LwAA//8YzNth") write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) 2m46.92889848s ago: executing program 0 (id=369): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@private=0xa010100, {0x0, 0xe839, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x19e}, {0x4, 0x6, 0x0, 0xfffffffffffffffe}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x70}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8040880}, 0x2014) 2m44.875770409s ago: executing program 0 (id=371): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$eJzs3M9vFFUcAPDvzLYgP1sRf4CoVWJs/NHSgsrBi0YTDxhN9IDH2hZCWKihNRFCpBqDFxND1LPxaOJf4M2LUU8mXvVuSIhyAT3VzOwM7C67pYXtLnQ/n2SX92Ze+963b97Mm3m7BNC3RrK3JGJrRPwREUO1bGOBkdo/Vy+fnf738tnpJJaW3v47yctduXx2uixa/tyWIjOaRqSfJkUljeZPnzk+Va3Oniry4wsn3h+fP33muWMnpo7OHp09OXnw4IH9Ey++MPn8Mq3fuOI4s7iu7P5obs+u19+98Mb04Qvv/fJ91t6txf76ODplJAv8n6Vc3eYvs7cnO11Zj22rSycDPWwIq1KJiKy7BvPxPxSVuN55Q/HaJz1tHLCmsmvTMlfRxSVgHUtihcViZQWBu0V5oc/uf8tXl6Yed4RLL9dugLK4rxav2p6BSIsyg033t500EhGHF//7JnvFGj2HAACo9/n014fi2VbzvzQeqCu3vVhDGY6IeyNiR0TcFxE7I+L+iLzsgxHxUNuaNrTc2rw0dOP8J714y8GtQDb/e6lY22qc/5Wzv8pwpchty+MfTI4cq87uK/4mozG4MctPLFPHj6/+/kW7ffXzv+yV1V/OBYt2XBxoekA3M7UwlU9KO+DSxxG7B1rFn1xbCchu/XdFxO7V/ertZeLY09/taVfo5vEvowPrTEvfRjxV6//FaIq/lCy/Pjl+T1Rn942XR8WNfv3t/Fvt6r+t+Dsg6//Njcd/c5HhpH69dn71dZz/87O29zS3evxvSN7J+6U8q3w4tbBwaiJiQ3Iozzdsn7z+s2W+LJ/FP7q39fjfUUtsyt4ejojsIH4kIh6NiMeKtj8eEU9ExN5l4v/5lfb77oT+n2l5/rt2/Df1/+oTleM//dCu/pX1/4E8NVpsyc9/N7HSBt7O3w4AAADuFmn+GfgkHbuWTtOxsdpn+HfG5rQ6N7/wzJG5D07O1D4rPxyDafmka6jueehEslj8xlp+snhWXO7fXzw3/qqyKc+PTc9VZ3ocO/S7LW3Gf+avSq9bB6y5Vutoky3Xaxu+yAasA83jP23Mnnuzm40Busr3taF/3WT8p91qB9B9rv/Qv1qN/3NNeWsBsD65/kP/Mv6hfxn/0L+Mf+hLt/O9/n5OZKfMO6AZ1aGiH7tfe6S9jl1iLRKt/58mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAu9X/AQAA//9l+OT1") chdir(&(0x7f0000000400)='./file0\x00') lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) 2m44.569940507s ago: executing program 0 (id=377): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) epoll_create1(0x80000) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x1000000000, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2m43.260324768s ago: executing program 0 (id=383): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) dup(0xffffffffffffffff) r3 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") sched_setscheduler(0x0, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001440)=@newtfilter={0x484, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbba, {0x0, 0x0, 0x0, r6, {0x4, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_bpf={{0x8}, {0x458, 0x2, [@TCA_BPF_FLAGS_GEN={0x8}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x8, 0xe, 0xe, 0x32, {0x4, 0x0, 0x382, 0x40, 0x8, 0x3}, {0x9, 0x2, 0x8, 0x9, 0xf5, 0x1d1}, 0x7, 0xb860, 0x4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x100, 0xa17, 0xb34, 0xca5f, 0x1ce1, 0x8, 0xffff, 0xffffffff, 0x0, 0xffffffff, 0x6, 0x80000000, 0x7, 0x4000000, 0x5, 0x1, 0x0, 0x4, 0xb, 0x7fffffff, 0x2, 0xfffffe00, 0xfffffffa, 0x8, 0x5, 0x9, 0x200008, 0x4, 0x6, 0x3, 0x7, 0x8, 0x6, 0x9, 0x3720, 0xffff0000, 0x7, 0xbe8c, 0xe, 0x9, 0x5, 0xa, 0x7, 0x7, 0x7, 0xb, 0x1ff, 0x6, 0x3ff, 0x5, 0x2, 0x400, 0x3, 0x2, 0x2, 0x0, 0x1, 0xec45, 0x8, 0x2, 0x401, 0x5, 0x0, 0x7, 0x18a, 0x2, 0x0, 0x7, 0x3ff, 0x9, 0x2, 0x7ff, 0x5e1f, 0x1, 0x10000, 0x6, 0x3, 0x4, 0x7f, 0x8, 0x0, 0x20000, 0xff, 0xfffffffb, 0x9, 0x0, 0x2, 0x6, 0x101, 0x4, 0xe0c0, 0x9, 0xdc2e, 0x187, 0x70ce, 0x3, 0x3, 0x1, 0x2, 0x3, 0x10, 0x4, 0x8, 0x0, 0xd, 0x5, 0x7f, 0x5790, 0x10, 0x2, 0x9, 0x1, 0xfffffffb, 0x9, 0xe, 0xfffffffb, 0x6, 0x18, 0x86da, 0x7, 0x4, 0x1c, 0x4, 0xd, 0xb, 0xfffff7da, 0xfbda, 0x86c5, 0x473, 0x4, 0x80, 0x6, 0x7ffffffc, 0xfffffff7, 0x7, 0x5, 0xe, 0xfff, 0xffffffff, 0x10001, 0x5, 0x9, 0x8, 0x80000000, 0x9, 0xffff253b, 0x6c9, 0x4, 0x3b3, 0x2, 0x4, 0x4, 0x2, 0x4, 0x88f4, 0x7, 0x3cc, 0x1, 0xf7, 0xf3f, 0x0, 0x1ff, 0x2, 0x2, 0x10000007, 0x9, 0x1, 0x5, 0x0, 0x40004, 0x759, 0x8, 0x101, 0x0, 0x94e4, 0x4, 0x9, 0x7, 0x6, 0x3, 0x1a, 0x0, 0x4, 0x3, 0x2, 0x6, 0x9, 0x247d, 0x5, 0x5, 0xca, 0x600, 0x9, 0x3ca, 0xd6a5, 0x3ff, 0x9, 0x8, 0x8, 0x3, 0x7fffffff, 0x5, 0x10000, 0x8, 0x101, 0x3, 0x815, 0x9, 0xfffffff7, 0x800, 0x4, 0x2, 0x6, 0x4, 0x2, 0x0, 0x0, 0xfffffffc, 0x1, 0x7, 0x5, 0x8, 0xd, 0x7, 0x2, 0x4, 0xffffffff, 0x3, 0x8003, 0x8, 0x2, 0xffffff81, 0x8, 0x1, 0x9, 0x40, 0x2, 0xfffffffd, 0x9, 0x5, 0x6, 0x4, 0xa3f, 0x2, 0x7fffffff, 0x1, 0x0, 0x2, 0x7, 0x0, 0x1000, 0x0, 0x5, 0x739, 0x401, 0x1]}]}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x484}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) 2m30.202720644s ago: executing program 0 (id=399): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c40)=@newtfilter={0x860, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x830, 0x2, [@TCA_BASIC_POLICE={0x424, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x80}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0xe}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x6b9a, 0x9, 0x5, 0x4, 0x4, 0x289, 0xd1, 0x9, 0x0, 0x8, 0x3, 0x7, 0x5, 0x19e, 0x3ff, 0x10001, 0x4, 0x2, 0x4, 0x0, 0x1000, 0x2, 0x5, 0x6, 0x0, 0x6, 0x2, 0x50e, 0x7f, 0x3, 0xf, 0x7fff, 0x3, 0x6, 0x9, 0xfffff8b3, 0xfffffffe, 0xffff, 0xccc0, 0x7f, 0x8, 0x65a, 0x3, 0x3, 0xd9, 0xffff, 0xa3a, 0x5, 0x5, 0x5, 0x400, 0x3, 0xff, 0x5, 0x6, 0x1, 0x8802, 0x80000000, 0x5, 0xb911, 0xa000004, 0x69e4, 0x7, 0x3, 0x8, 0x8, 0x80000001, 0x4, 0x4, 0x3, 0x1, 0x2, 0xd, 0x2, 0x2, 0x2, 0x2, 0x917, 0x2, 0xa7, 0x7, 0x8, 0x1, 0x7, 0xc3, 0x5, 0x1, 0x1, 0x9, 0x5, 0x4, 0xb, 0x7, 0x9, 0x63, 0xfffffe00, 0x2040, 0x6, 0x90c7, 0x3, 0x1000, 0x8, 0x8, 0x698c, 0x7ff, 0x1, 0x9, 0x8001, 0x7e9, 0x2, 0x6, 0x2c, 0x10, 0x2, 0x0, 0x1, 0xb, 0x8, 0x200, 0x8000, 0x4, 0x9, 0x80000009, 0x2, 0x3, 0xfffffdc8, 0xfff, 0x6, 0xe, 0x1, 0x80, 0x1, 0xa9, 0x6, 0x3, 0x2de, 0x3, 0x1, 0x4, 0x101, 0x6, 0x1000, 0x0, 0x5, 0x0, 0x3, 0x9, 0x16c, 0x1, 0x8000, 0x1, 0x8, 0x9, 0x7, 0x99, 0x3, 0x8, 0x8, 0x4b81, 0x7fffffff, 0x10000, 0x7, 0x5, 0x3, 0x8, 0xffff, 0x401, 0x2a53, 0x9, 0x40, 0x7, 0xd80, 0xfff, 0x8, 0x0, 0x4, 0x29, 0x9, 0x8, 0x7ff, 0x2, 0x8, 0x7f, 0x0, 0x401, 0x7, 0x8, 0x7ff, 0x800, 0x1, 0x6, 0xffffffff, 0x3, 0xff, 0x0, 0x8, 0x7, 0x6, 0x9, 0x5, 0xffffffff, 0xdba, 0xdf5, 0x6, 0x1, 0x4, 0xf8, 0x800, 0x9, 0x5, 0x1, 0x9, 0x2, 0x7, 0x7, 0x5, 0x432, 0x9, 0x5, 0x2, 0x2, 0x6, 0x4, 0x8, 0xa, 0x5, 0x6e06, 0x44, 0x4, 0x8, 0x2, 0xd, 0x2, 0x8, 0x7, 0xfffff001, 0x4, 0x6, 0x7f, 0x4, 0x800, 0x10, 0x10001, 0x1ff, 0x7, 0x9, 0xfffff1f7, 0x1, 0xb94, 0x80000001, 0x4, 0x6, 0x3, 0x6, 0x8001]}]}, @TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x98, 0xa, 0x3, 0x4, 0x5299, 0x4, 0x3, 0xffff949e, 0x100, 0x3, 0xe05, 0x0, 0x4, 0xfffff001, 0x8001, 0x1ff, 0x6, 0x2, 0x7, 0x80000000, 0x10001, 0x81, 0x1, 0x2, 0x40, 0x1, 0x0, 0x93, 0x2, 0x0, 0x7, 0x80000001, 0x1, 0x9, 0xe2a, 0x1, 0x9, 0x4, 0x2, 0xfff, 0x1ff, 0x5, 0x1, 0x7, 0x80000000, 0x4, 0x6, 0xfffffff7, 0x8001, 0x0, 0x800, 0x8, 0x83, 0x7f, 0x0, 0x10, 0x3, 0x0, 0x8, 0x6, 0xfffffffc, 0xfffffe00, 0x3, 0x9, 0x5a93, 0x1000, 0x300000, 0x9, 0x73, 0x2, 0xf, 0x2, 0x0, 0x2, 0x60, 0x1ff, 0x3ff, 0x4, 0x7, 0x1, 0x9df, 0x1ff, 0x0, 0x7, 0x8, 0x4ab, 0x76, 0x3, 0x3e, 0x1, 0x7, 0x3, 0x80000000, 0x0, 0x9, 0x7, 0x64de, 0xffff, 0x800, 0x10001, 0xfffffffe, 0x5, 0x66, 0x1, 0x148dc91a, 0xf2, 0x6, 0x400, 0x5, 0x8, 0x100, 0x10000, 0x7, 0xb, 0x8, 0x4, 0x7, 0x5a, 0x9, 0x5, 0x6, 0x101, 0x3, 0x7, 0x200, 0x8, 0xfffffffe, 0x8, 0x5, 0xfffffffc, 0x1, 0xb, 0x6, 0x9, 0x0, 0x7, 0x6, 0xf78, 0x5, 0x4, 0x1, 0x9, 0x7, 0x1, 0x46b, 0x9, 0x2, 0x9, 0xde48, 0xa00, 0x6, 0x2, 0x200, 0x9, 0xc5, 0xcfb, 0xa, 0x8, 0x1, 0x2cb, 0x7, 0x3e4, 0x7, 0x5, 0x7ff, 0xfb49, 0x8, 0x0, 0xfd, 0xfffffff8, 0x7, 0x8f71, 0x400, 0x9, 0x2, 0x1e1, 0x20000000, 0x4, 0x7, 0x7, 0x0, 0x7fffffff, 0x2357, 0x200, 0x9, 0x2, 0x2, 0x7c, 0x6, 0xfffffc00, 0x6, 0x8, 0x3, 0x3ff, 0x6, 0x0, 0x9, 0x0, 0x2, 0x12000000, 0x85, 0xf, 0x101, 0x10001, 0x8, 0x2, 0x4, 0xa7, 0x2, 0x8, 0x0, 0xffffffff, 0x8, 0x5, 0x2, 0x10000, 0x3, 0x9, 0x18, 0x4, 0x2, 0x1ff, 0x80000000, 0x7ff, 0x5, 0x8, 0x10, 0x40, 0xfff, 0x6, 0x7, 0x80000001, 0x3, 0x9, 0x1, 0x8, 0x0, 0x2ee257b4, 0xc, 0x0, 0x10000, 0x40, 0x8, 0x9, 0x0, 0xa03, 0xb7, 0x73, 0x3, 0x7, 0x0, 0x3, 0x2d, 0x8, 0xffffa942, 0x3]}]}]}}]}, 0x860}, 0x1, 0x0, 0x0, 0x8044}, 0x4040050) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002140)=ANY=[@ANYBLOB="3c0200001900010029bd7000fbdbdf25fe880000000000000000000000000001ff020000000000000000000000000001000000004e2100000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff0000000000000000000000000000000005000000000000000000000000200000040000000400000000000000000000000100020200"], 0x23c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 2m13.545403436s ago: executing program 38 (id=399): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c40)=@newtfilter={0x860, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x830, 0x2, [@TCA_BASIC_POLICE={0x424, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x80}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0xe}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x6b9a, 0x9, 0x5, 0x4, 0x4, 0x289, 0xd1, 0x9, 0x0, 0x8, 0x3, 0x7, 0x5, 0x19e, 0x3ff, 0x10001, 0x4, 0x2, 0x4, 0x0, 0x1000, 0x2, 0x5, 0x6, 0x0, 0x6, 0x2, 0x50e, 0x7f, 0x3, 0xf, 0x7fff, 0x3, 0x6, 0x9, 0xfffff8b3, 0xfffffffe, 0xffff, 0xccc0, 0x7f, 0x8, 0x65a, 0x3, 0x3, 0xd9, 0xffff, 0xa3a, 0x5, 0x5, 0x5, 0x400, 0x3, 0xff, 0x5, 0x6, 0x1, 0x8802, 0x80000000, 0x5, 0xb911, 0xa000004, 0x69e4, 0x7, 0x3, 0x8, 0x8, 0x80000001, 0x4, 0x4, 0x3, 0x1, 0x2, 0xd, 0x2, 0x2, 0x2, 0x2, 0x917, 0x2, 0xa7, 0x7, 0x8, 0x1, 0x7, 0xc3, 0x5, 0x1, 0x1, 0x9, 0x5, 0x4, 0xb, 0x7, 0x9, 0x63, 0xfffffe00, 0x2040, 0x6, 0x90c7, 0x3, 0x1000, 0x8, 0x8, 0x698c, 0x7ff, 0x1, 0x9, 0x8001, 0x7e9, 0x2, 0x6, 0x2c, 0x10, 0x2, 0x0, 0x1, 0xb, 0x8, 0x200, 0x8000, 0x4, 0x9, 0x80000009, 0x2, 0x3, 0xfffffdc8, 0xfff, 0x6, 0xe, 0x1, 0x80, 0x1, 0xa9, 0x6, 0x3, 0x2de, 0x3, 0x1, 0x4, 0x101, 0x6, 0x1000, 0x0, 0x5, 0x0, 0x3, 0x9, 0x16c, 0x1, 0x8000, 0x1, 0x8, 0x9, 0x7, 0x99, 0x3, 0x8, 0x8, 0x4b81, 0x7fffffff, 0x10000, 0x7, 0x5, 0x3, 0x8, 0xffff, 0x401, 0x2a53, 0x9, 0x40, 0x7, 0xd80, 0xfff, 0x8, 0x0, 0x4, 0x29, 0x9, 0x8, 0x7ff, 0x2, 0x8, 0x7f, 0x0, 0x401, 0x7, 0x8, 0x7ff, 0x800, 0x1, 0x6, 0xffffffff, 0x3, 0xff, 0x0, 0x8, 0x7, 0x6, 0x9, 0x5, 0xffffffff, 0xdba, 0xdf5, 0x6, 0x1, 0x4, 0xf8, 0x800, 0x9, 0x5, 0x1, 0x9, 0x2, 0x7, 0x7, 0x5, 0x432, 0x9, 0x5, 0x2, 0x2, 0x6, 0x4, 0x8, 0xa, 0x5, 0x6e06, 0x44, 0x4, 0x8, 0x2, 0xd, 0x2, 0x8, 0x7, 0xfffff001, 0x4, 0x6, 0x7f, 0x4, 0x800, 0x10, 0x10001, 0x1ff, 0x7, 0x9, 0xfffff1f7, 0x1, 0xb94, 0x80000001, 0x4, 0x6, 0x3, 0x6, 0x8001]}]}, @TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x98, 0xa, 0x3, 0x4, 0x5299, 0x4, 0x3, 0xffff949e, 0x100, 0x3, 0xe05, 0x0, 0x4, 0xfffff001, 0x8001, 0x1ff, 0x6, 0x2, 0x7, 0x80000000, 0x10001, 0x81, 0x1, 0x2, 0x40, 0x1, 0x0, 0x93, 0x2, 0x0, 0x7, 0x80000001, 0x1, 0x9, 0xe2a, 0x1, 0x9, 0x4, 0x2, 0xfff, 0x1ff, 0x5, 0x1, 0x7, 0x80000000, 0x4, 0x6, 0xfffffff7, 0x8001, 0x0, 0x800, 0x8, 0x83, 0x7f, 0x0, 0x10, 0x3, 0x0, 0x8, 0x6, 0xfffffffc, 0xfffffe00, 0x3, 0x9, 0x5a93, 0x1000, 0x300000, 0x9, 0x73, 0x2, 0xf, 0x2, 0x0, 0x2, 0x60, 0x1ff, 0x3ff, 0x4, 0x7, 0x1, 0x9df, 0x1ff, 0x0, 0x7, 0x8, 0x4ab, 0x76, 0x3, 0x3e, 0x1, 0x7, 0x3, 0x80000000, 0x0, 0x9, 0x7, 0x64de, 0xffff, 0x800, 0x10001, 0xfffffffe, 0x5, 0x66, 0x1, 0x148dc91a, 0xf2, 0x6, 0x400, 0x5, 0x8, 0x100, 0x10000, 0x7, 0xb, 0x8, 0x4, 0x7, 0x5a, 0x9, 0x5, 0x6, 0x101, 0x3, 0x7, 0x200, 0x8, 0xfffffffe, 0x8, 0x5, 0xfffffffc, 0x1, 0xb, 0x6, 0x9, 0x0, 0x7, 0x6, 0xf78, 0x5, 0x4, 0x1, 0x9, 0x7, 0x1, 0x46b, 0x9, 0x2, 0x9, 0xde48, 0xa00, 0x6, 0x2, 0x200, 0x9, 0xc5, 0xcfb, 0xa, 0x8, 0x1, 0x2cb, 0x7, 0x3e4, 0x7, 0x5, 0x7ff, 0xfb49, 0x8, 0x0, 0xfd, 0xfffffff8, 0x7, 0x8f71, 0x400, 0x9, 0x2, 0x1e1, 0x20000000, 0x4, 0x7, 0x7, 0x0, 0x7fffffff, 0x2357, 0x200, 0x9, 0x2, 0x2, 0x7c, 0x6, 0xfffffc00, 0x6, 0x8, 0x3, 0x3ff, 0x6, 0x0, 0x9, 0x0, 0x2, 0x12000000, 0x85, 0xf, 0x101, 0x10001, 0x8, 0x2, 0x4, 0xa7, 0x2, 0x8, 0x0, 0xffffffff, 0x8, 0x5, 0x2, 0x10000, 0x3, 0x9, 0x18, 0x4, 0x2, 0x1ff, 0x80000000, 0x7ff, 0x5, 0x8, 0x10, 0x40, 0xfff, 0x6, 0x7, 0x80000001, 0x3, 0x9, 0x1, 0x8, 0x0, 0x2ee257b4, 0xc, 0x0, 0x10000, 0x40, 0x8, 0x9, 0x0, 0xa03, 0xb7, 0x73, 0x3, 0x7, 0x0, 0x3, 0x2d, 0x8, 0xffffa942, 0x3]}]}]}}]}, 0x860}, 0x1, 0x0, 0x0, 0x8044}, 0x4040050) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002140)=ANY=[@ANYBLOB="3c0200001900010029bd7000fbdbdf25fe880000000000000000000000000001ff020000000000000000000000000001000000004e2100000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff0000000000000000000000000000000005000000000000000000000000200000040000000400000000000000000000000100020200"], 0x23c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 15.364202609s ago: executing program 3 (id=987): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xfc, {"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", 0xff7d}}, 0x1006) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) getgroups(0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 7.836271481s ago: executing program 6 (id=1014): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x20008004) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./my_debugfs\x00', 0x4) mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_debugfs/usb/devices\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020) 7.698794584s ago: executing program 6 (id=1016): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x30}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118, 0x0, r3}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x200, 0x4003bfff, 0x2b8, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r4}}], 0x1, 0x0, 0x0) 7.270380024s ago: executing program 9 (id=1018): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x20, r0, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x4}]}, 0x20}}, 0x0) 7.250016974s ago: executing program 9 (id=1019): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000480)=ANY=[], 0xb) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) pipe2(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r6, @ANYBLOB="080026009409000008"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 6.63446794s ago: executing program 6 (id=1022): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) epoll_create1(0x80000) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x1000000000, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x0, 0x0, &(0x7f00000049c0), 0x0, 0x0, 0x0}) 6.530718212s ago: executing program 2 (id=1024): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0xd, 0x0, 0x3, 0xe, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x2, 0x6, 0xb}, @sadb_address={0x5, 0x5, 0x0, 0x20, 0x0, @in6={0xa, 0x4e22, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3ff}}, @sadb_lifetime={0x4, 0x3, 0x6, 0x7, 0x2, 0x1000}]}, 0x70}, 0x1, 0x7}, 0x0) inotify_init1(0x800) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000000)=0x11, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') 5.222441044s ago: executing program 2 (id=1025): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket(0x200000000000011, 0x2, 0xd) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0xb8, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x248) 5.153094736s ago: executing program 3 (id=1026): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 5.110758237s ago: executing program 7 (id=1027): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/dlm/cluster/comms/2/addr\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)="020052487f00000100"/32, 0x20) 5.110312197s ago: executing program 6 (id=1028): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.093491937s ago: executing program 9 (id=1029): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0xf, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_INDEX={0x6}]}, 0x1c}}, 0x24000044) 3.971363424s ago: executing program 9 (id=1030): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x2c, r0, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_SEQ={0x4}]}]}, 0x2c}}, 0x0) 3.886852806s ago: executing program 7 (id=1031): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000480)=ANY=[], 0xb) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) pipe2(0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r6, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3.880666576s ago: executing program 2 (id=1032): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x20008004) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='binfmt_misc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_debugfs/usb/devices\x00', 0x2, 0x0) read$FUSE(r4, &(0x7f00000021c0)={0x2020}, 0x2020) 3.834264817s ago: executing program 3 (id=1033): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_io_uring(0x467c, 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x200, 0x4003bfff, 0x2b8, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r3}}], 0x1, 0x0, 0x0) 2.90116227s ago: executing program 9 (id=1034): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x30}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118, 0x0, r3}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x200, 0x4003bfff, 0x2b8, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r4}}], 0x1, 0x0, 0x0) 2.757003313s ago: executing program 7 (id=1035): close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x44000) 2.624099246s ago: executing program 7 (id=1036): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0xd, 0x0, 0x3, 0xe, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x2, 0x6, 0xb}, @sadb_address={0x5, 0x5, 0x0, 0x20, 0x0, @in6={0xa, 0x4e22, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3ff}}, @sadb_lifetime={0x4, 0x3, 0x6, 0x7, 0x2, 0x1000}]}, 0x70}, 0x1, 0x7}, 0x0) inotify_init1(0x800) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000000)=0x11, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') 2.568229098s ago: executing program 2 (id=1037): getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x2) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0xd) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0x7) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000280)=0x1e) 2.566724588s ago: executing program 6 (id=1038): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x200, 0x4003bfff, 0x2b8, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r3}}], 0x1, 0x0, 0x0) 2.521295629s ago: executing program 2 (id=1039): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) epoll_create1(0x80000) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x1000000000, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x0, 0x0, &(0x7f00000049c0), 0x0, 0x0, 0x0}) 1.351952837s ago: executing program 7 (id=1040): recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, 0x0}, 0x17bc}], 0x1, 0x40012030, 0x0) r0 = socket$kcm(0x21, 0x2, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x1bd) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x4008, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) syz_emit_ethernet(0x3a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) sendto$inet6(r5, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) 1.21001542s ago: executing program 3 (id=1041): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/dlm/cluster/comms/2/addr\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)="020052487f0000010000000000000000", 0x10) 835.85358ms ago: executing program 3 (id=1042): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x30, r0, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, 0x30}}, 0x0) 759.923371ms ago: executing program 3 (id=1043): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) lseek(0xffffffffffffffff, 0x2, 0x1) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket(0x200000000000011, 0x2, 0xd) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0xb8, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x248) 1.73913ms ago: executing program 6 (id=1044): socket(0x10, 0x803, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}}, 0x20000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xffefffffff6f0000) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b45, 0x8000000000001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x37, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x18000000, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}}], {0x14, 0x10}}, 0x98}}, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) 1.1209ms ago: executing program 7 (id=1045): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000480)=ANY=[], 0xb) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) pipe2(0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r6, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 320.32µs ago: executing program 9 (id=1046): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa2}, [@ldst={0x7}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xd1, &(0x7f0000000440)=""/209, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fanotify_init(0x200, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r4, 0x161, 0x40000867, r5, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x22060, 0x0) clock_adjtime(0x1, &(0x7f0000000540)={0x6, 0x9, 0xfffffffffffffffb, 0x7fff, 0xfffffffffffffffd, 0x10001, 0xffffffffba8372f8, 0xfc84, 0x100000000, 0x1, 0x6, 0x4e3, 0x1ff, 0x2, 0x7, 0x80000000, 0x7, 0x4, 0x7, 0x5, 0x80000000, 0x0, 0x5, 0xffff, 0x0, 0xfffffffffffffffb}) fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000000040), 0x0, 0x0, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000001c0)={0x400000000000009b, &(0x7f0000000480)}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) 0s ago: executing program 2 (id=1047): close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x44000) kernel console output (not intermixed with test programs): y added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.381870][ T4728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.383576][ T4728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.387381][ T4728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.388996][ T4728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.390616][ T4728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.392310][ T4728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.393940][ T4728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.396904][ T4728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.403437][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.405300][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.423843][ T4738] device veth1_vlan entered promiscuous mode [ 77.449700][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.451080][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.462288][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.464020][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.465771][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.467884][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.469663][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.472468][ T4733] device veth0_macvtap entered promiscuous mode [ 77.474627][ T4728] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.476947][ T4728] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.478528][ T4728] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.480088][ T4728] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.488805][ T4733] device veth1_macvtap entered promiscuous mode [ 77.501160][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.502944][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.504896][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.508164][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.517178][ T4738] device veth0_macvtap entered promiscuous mode [ 77.523460][ T4599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.524911][ T4599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.532127][ T4733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.533881][ T4733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.536427][ T4733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.538316][ T4733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.540010][ T4733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.541608][ T4733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.543176][ T4733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.544834][ T4733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.547623][ T4733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.549419][ T4733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.552013][ T4733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.553837][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.556033][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.557554][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.559196][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.568222][ T4738] device veth1_macvtap entered promiscuous mode [ 77.590486][ T4733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.592391][ T4733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.594106][ T4733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.598439][ T4733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.600128][ T4733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.601799][ T4733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.603381][ T4733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.605075][ T4733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.608187][ T4733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.609814][ T4733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.615120][ T4733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.618994][ T4733] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.620570][ T4733] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.622163][ T4733] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.623597][ T4733] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.739691][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.741464][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.743164][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.754505][ T4738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.757122][ T4738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.758705][ T4738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.760458][ T4738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.762115][ T4738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.763736][ T4738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.765257][ T4738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.767107][ T4738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.768765][ T4738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.770561][ T4738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.772151][ T4738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.773866][ T4738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.776804][ T4738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.839086][ T4935] process 'syz.5.104' launched './file2' with NULL argv: empty string added [ 78.096589][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.098436][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.110646][ T4738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.112985][ T4738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.114883][ T4738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.126120][ T4738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.128290][ T4738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.130229][ T4738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.132174][ T4738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.134185][ T4738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.136267][ T4738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.138555][ T4738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.140370][ T4738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.142330][ T4738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.144934][ T4738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.153313][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.155215][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.160812][ T326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.162562][ T326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.183847][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.190437][ T4608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.194094][ T4608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.236614][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.241199][ T4738] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.242747][ T4738] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.244402][ T4738] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.253148][ T4738] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.270767][ T4396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.272303][ T326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.273988][ T326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.275533][ T4396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.278836][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.280497][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.383588][ T4396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.453390][ T4396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.455055][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.472476][ T4608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.474002][ T4608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.476829][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.615351][ C0] sched: RT throttling activated [ 81.233206][ T4988] binder: 4987:4988 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 81.236964][ T4988] binder: 4987:4988 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 81.238367][ T4988] binder: 4987:4988 unknown command 0 [ 81.239290][ T4988] binder: 4987:4988 ioctl c0306201 200004c0 returned -22 [ 81.240915][ T4988] binder: 4987:4988 got reply transaction with no transaction stack [ 81.242272][ T4988] binder_debug: 2 callbacks suppressed [ 81.242284][ T4988] binder: 4987:4988 transaction reply to 0:0 failed 19/29201/-71, size 0-0 line 2963 [ 81.244844][ T4986] loop6: detected capacity change from 0 to 512 [ 81.245177][ T4988] binder: 4987:4988 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 81.249500][ T4988] binder: 4988 RLIMIT_NICE not set [ 81.258257][ T4986] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 85.457457][ T4728] EXT4-fs (loop6): unmounting filesystem. [ 85.494915][ T5035] binder: 5034:5035 got reply transaction with no transaction stack [ 85.496744][ T5035] binder: 5034:5035 transaction reply to 0:0 failed 22/29201/-71, size 0-0 line 2963 [ 85.504268][ T5035] binder: 5034:5035 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 85.556124][ T5035] binder: 5035 RLIMIT_NICE not set [ 85.563206][ T4681] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.697312][ T4681] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.813758][ T7] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 86.170536][ T4681] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.257253][ T4681] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.285726][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 86.288959][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.291047][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.293488][ T7] usb 1-1: New USB device found, idVendor=054c, idProduct=1000, bcdDevice= 0.00 [ 86.298409][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.311121][ T7] usb 1-1: config 0 descriptor?? [ 87.636536][ T4681] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.866454][ T4681] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.017326][ T4681] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.126925][ T4681] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.486960][ T5056] loop5: detected capacity change from 0 to 7 [ 88.490300][ T4774] Dev loop5: unable to read RDB block 7 [ 88.491321][ T4774] loop5: unable to read partition table [ 88.492385][ T4774] loop5: partition table beyond EOD, truncated [ 88.512840][ T5056] Dev loop5: unable to read RDB block 7 [ 88.513888][ T5056] loop5: unable to read partition table [ 88.514948][ T5056] loop5: partition table beyond EOD, truncated [ 88.528541][ T5056] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 89.662839][ T7] usbhid 1-1:0.0: can't add hid device: -71 [ 89.862294][ T7] usbhid: probe of 1-1:0.0 failed with error -71 [ 89.865908][ T7] usb 1-1: USB disconnect, device number 6 [ 89.907770][ T4681] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.963683][ T5092] loop0: detected capacity change from 0 to 512 [ 90.621999][ T5092] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 90.623685][ T5092] System zones: 1-12 [ 90.631415][ T4681] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.634592][ T5092] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.127: missing EA_INODE flag [ 90.638043][ T5092] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.127: error while reading EA inode 12 err=-117 [ 90.640635][ T5092] EXT4-fs (loop0): 1 orphan inode deleted [ 90.644851][ T5092] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 91.138671][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 91.172362][ T5109] loop7: detected capacity change from 0 to 512 [ 91.176896][ T4681] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.273241][ T5109] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 93.219051][ T4681] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.525467][ T4375] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 94.575927][ T4733] EXT4-fs (loop7): unmounting filesystem. [ 94.622062][ T5156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.624436][ T5156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.115288][ T5167] fuse: Bad value for 'fd' [ 95.121426][ T5167] using random self ethernet address [ 95.122811][ T5167] using random host ethernet address [ 95.298183][ T4681] netdevsim netdevsim12 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.909731][ T5187] binder: 5171:5187 ioctl c018620c 20000540 returned -1 [ 95.922093][ T5188] binder: 5180:5188 ioctl c018620c 20000540 returned -1 [ 95.972999][ T5196] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 95.975230][ T5196] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 95.978093][ T5196] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 95.980063][ T5196] device bridge_slave_0 left promiscuous mode [ 95.984458][ T5196] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.028907][ T5196] device bridge_slave_1 left promiscuous mode [ 96.030316][ T5196] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.062339][ T5195] loop5: detected capacity change from 0 to 7 [ 96.064990][ T5195] Dev loop5: unable to read RDB block 7 [ 96.066331][ T5195] loop5: unable to read partition table [ 96.067620][ T5195] loop5: partition table beyond EOD, truncated [ 96.069202][ T5195] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 96.071568][ T5196] bond0: (slave bond_slave_0): Releasing backup interface [ 96.111076][ T5196] bond0: (slave bond_slave_1): Releasing backup interface [ 96.150076][ T5196] team0: Port device team_slave_0 removed [ 96.159716][ T5196] team0: Port device team_slave_1 removed [ 96.161080][ T5196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.162476][ T5196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.164278][ T5196] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.166149][ T5196] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.174890][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 96.180740][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.182302][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.186770][ T5197] device bridge_slave_0 left promiscuous mode [ 96.188038][ T5197] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.251918][ T5197] device bridge_slave_1 left promiscuous mode [ 96.253108][ T5197] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.297223][ T5197] bond0: (slave bond_slave_0): Releasing backup interface [ 96.349140][ T5197] bond0: (slave bond_slave_1): Releasing backup interface [ 96.394754][ T5197] team0: Port device team_slave_0 removed [ 96.403262][ T5197] team0: Port device team_slave_1 removed [ 96.405121][ T5197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.407021][ T5197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.408857][ T5197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.410008][ T5197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.431451][ T5205] team0: Port device xfrm0 added [ 96.532948][ T4681] tipc: Left network mode [ 97.875079][ T5233] loop7: detected capacity change from 0 to 512 [ 97.888662][ T5233] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 99.618809][ T5172] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 99.653550][ T4733] EXT4-fs (loop7): unmounting filesystem. [ 103.137348][ T5293] loop7: detected capacity change from 0 to 512 [ 105.657462][ T5305] loop5: detected capacity change from 0 to 512 [ 105.659737][ T5293] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 105.775760][ T5305] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 105.777368][ T5305] System zones: 1-12 [ 105.779078][ T5305] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.163: missing EA_INODE flag [ 105.791866][ T5305] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.163: error while reading EA inode 12 err=-117 [ 105.802021][ T5305] EXT4-fs (loop5): 1 orphan inode deleted [ 105.803039][ T5305] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 107.425432][ T4721] EXT4-fs (loop5): unmounting filesystem. [ 108.394117][ T5318] loop0: detected capacity change from 0 to 512 [ 109.544809][ T5318] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 109.546651][ T5318] System zones: 1-12 [ 109.617450][ T5318] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.164: missing EA_INODE flag [ 109.620521][ T5318] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.164: error while reading EA inode 12 err=-117 [ 109.622885][ T5318] EXT4-fs (loop0): 1 orphan inode deleted [ 109.623934][ T5318] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 110.397245][ T5335] device syzkaller0 entered promiscuous mode [ 110.408567][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 110.420332][ T4733] EXT4-fs (loop7): unmounting filesystem. [ 112.710542][ T5389] loop7: detected capacity change from 0 to 512 [ 112.713943][ T5389] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 112.723688][ T5389] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 112.742966][ T5389] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 112.764758][ T5389] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:477: comm syz.7.177: Invalid block bitmap block 0 in block_group 0 [ 112.768809][ T5389] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 112.773584][ T5389] EXT4-fs error (device loop7): ext4_clear_blocks:883: inode #11: comm syz.7.177: attempt to clear invalid blocks 983261 len 1 [ 112.808752][ T5389] EXT4-fs error (device loop7): __ext4_get_inode_loc:4520: comm syz.7.177: Invalid inode table block 0 in block_group 0 [ 112.812120][ T5389] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 112.813896][ T5389] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 112.820867][ T5389] EXT4-fs error (device loop7): __ext4_get_inode_loc:4520: comm syz.7.177: Invalid inode table block 0 in block_group 0 [ 112.841894][ T5389] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 112.860848][ T5389] EXT4-fs error (device loop7): ext4_truncate:4325: inode #11: comm syz.7.177: mark_inode_dirty error [ 112.875737][ T5389] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 112.882708][ T5389] EXT4-fs error (device loop7): __ext4_get_inode_loc:4520: comm syz.7.177: Invalid inode table block 0 in block_group 0 [ 112.891984][ T5389] EXT4-fs (loop7): 1 truncate cleaned up [ 112.893057][ T5389] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 114.059161][ T4733] EXT4-fs (loop7): unmounting filesystem. [ 115.937089][ T5453] device syzkaller0 entered promiscuous mode [ 115.941589][ T5454] tipc: Started in network mode [ 115.942524][ T5454] tipc: Node identity b614d615d913, cluster identity 4711 [ 115.943941][ T5454] tipc: Enabled bearer , priority 0 [ 117.643229][ T5500] loop6: detected capacity change from 0 to 512 [ 117.662345][ T5500] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 117.863691][ T4375] tipc: Node number set to 1862784533 [ 117.886782][ T5438] tipc: Resetting bearer [ 117.926650][ T5438] tipc: Disabling bearer [ 118.478205][ T5570] binder: 5569:5570 ioctl 4018620d 0 returned -22 [ 118.479901][ T5570] binder: tried to use weak ref as strong ref [ 118.481268][ T5570] binder: 5569:5570 Acquire 1 refcount change on invalid ref 0 ret -22 [ 118.483330][ T5570] binder: 5569:5570 got transaction to invalid handle, 1 [ 118.484687][ T5570] binder: 5570:5569 cannot find target node [ 118.491367][ T5570] binder: 5569:5570 transaction call to 0:0 failed 25/29201/-22, size 72-24 line 3062 [ 118.505832][ T4728] EXT4-fs (loop6): unmounting filesystem. [ 118.545152][ T5577] loop6: detected capacity change from 0 to 512 [ 118.548788][ T5578] binder: 5569:5578 got transaction to invalid handle, 3 [ 118.550121][ T5578] binder: 5578:5569 cannot find target node [ 118.551291][ T5578] binder: 5569:5578 transaction call to 0:0 failed 26/29201/-22, size 0-0 line 3062 [ 118.593079][ T5577] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 119.691072][ T4380] binder: undelivered TRANSACTION_ERROR: 29201 [ 119.735536][ T4380] binder: undelivered TRANSACTION_ERROR: 29201 [ 119.831936][ T5594] loop8: detected capacity change from 0 to 512 [ 120.098379][ T5594] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 120.105245][ T5594] System zones: 1-12 [ 120.110541][ T5594] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #12: comm syz.8.213: missing EA_INODE flag [ 120.113123][ T5594] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.213: error while reading EA inode 12 err=-117 [ 120.116281][ T5594] EXT4-fs (loop8): 1 orphan inode deleted [ 120.117463][ T5594] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 120.640586][ T4728] EXT4-fs (loop6): unmounting filesystem. [ 121.012167][ T5621] loop6: detected capacity change from 0 to 512 [ 121.070212][ T4738] EXT4-fs (loop8): unmounting filesystem. [ 121.093352][ T5621] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 121.268584][ T5644] binder: 5642:5644 ioctl c0306201 0 returned -14 [ 121.270214][ T5644] binder: 5642:5644 got transaction to invalid handle, 1 [ 121.271614][ T5644] binder: 5644:5642 cannot find target node [ 121.272511][ T5644] binder: 5642:5644 transaction call to 0:0 failed 30/29201/-22, size 72-24 line 3062 [ 121.357301][ T5651] binder: 5642:5651 got transaction to invalid handle, 3 [ 121.358857][ T5651] binder: 5651:5642 cannot find target node [ 121.360054][ T5651] binder: 5642:5651 transaction call to 0:0 failed 31/29201/-22, size 0-0 line 3062 [ 123.158901][ T4728] EXT4-fs (loop6): unmounting filesystem. [ 123.588911][ T5682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.591707][ T5682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.889340][ T5690] loop6: detected capacity change from 0 to 512 [ 123.986841][ T5690] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 124.960252][ T4728] EXT4-fs (loop6): unmounting filesystem. [ 125.019841][ T5709] binder: 5708:5709 ioctl c0306201 0 returned -14 [ 125.039249][ T5709] binder: 5708:5709 got transaction to invalid handle, 1 [ 125.055579][ T5709] binder_debug: 2 callbacks suppressed [ 125.055595][ T5709] binder: 5709:5708 cannot find target node [ 125.058784][ T5709] binder: 5708:5709 transaction call to 0:0 failed 35/29201/-22, size 72-24 line 3062 [ 125.207064][ T5718] binder: 5708:5718 got transaction to invalid handle, 3 [ 125.208522][ T5718] binder: 5718:5708 cannot find target node [ 125.209706][ T5718] binder: 5708:5718 transaction call to 0:0 failed 36/29201/-22, size 0-0 line 3062 [ 126.656201][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.657423][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.751940][ T5724] netlink: 84 bytes leftover after parsing attributes in process `syz.7.247'. [ 126.807123][ T4378] binder: undelivered TRANSACTION_ERROR: 29201 [ 126.830352][ T5732] loop7: detected capacity change from 0 to 512 [ 126.836525][ T4378] binder: undelivered TRANSACTION_ERROR: 29201 [ 126.867296][ T5732] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 127.862829][ T5752] loop0: detected capacity change from 0 to 512 [ 127.933127][ T5752] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 128.002616][ T4733] EXT4-fs (loop7): unmounting filesystem. [ 129.888175][ T5778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.890429][ T5778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.550742][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 131.726690][ T4681] device hsr_slave_0 left promiscuous mode [ 131.757484][ T5791] binder: 5789:5791 ioctl c0306201 0 returned -14 [ 131.770802][ T4681] device hsr_slave_1 left promiscuous mode [ 131.777425][ T5791] binder: 5789:5791 got transaction to invalid handle, 1 [ 131.778835][ T5791] binder: 5791:5789 cannot find target node [ 131.785445][ T5791] binder: 5789:5791 transaction call to 0:0 failed 40/29201/-22, size 72-24 line 3062 [ 131.855557][ T4681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.858107][ T4681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.862349][ T5800] binder: 5789:5800 got transaction to invalid handle, 3 [ 131.863945][ T5800] binder: 5800:5789 cannot find target node [ 131.865004][ T5800] binder: 5789:5800 transaction call to 0:0 failed 41/29201/-22, size 0-0 line 3062 [ 131.871466][ T4681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.872981][ T4681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.874644][ T4681] device bridge_slave_1 left promiscuous mode [ 131.880262][ T4681] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.980566][ T4681] device bridge_slave_0 left promiscuous mode [ 131.982841][ T4681] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.184048][ T4681] device hsr_slave_0 left promiscuous mode [ 132.256797][ T4681] device hsr_slave_1 left promiscuous mode [ 132.462696][ T4681] device hsr_slave_0 left promiscuous mode [ 132.671414][ T4681] device hsr_slave_1 left promiscuous mode [ 132.735739][ T4378] binder: undelivered TRANSACTION_ERROR: 29201 [ 132.795516][ T4378] binder: undelivered TRANSACTION_ERROR: 29201 [ 132.817629][ T4681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.819260][ T4681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.821599][ T4681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.822959][ T4681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.824440][ T4681] device bridge_slave_1 left promiscuous mode [ 132.827810][ T5812] loop0: detected capacity change from 0 to 512 [ 132.841090][ T4681] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.881066][ T5816] loop6: detected capacity change from 0 to 512 [ 132.921478][ T4681] device bridge_slave_0 left promiscuous mode [ 132.922749][ T4681] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.928039][ T5812] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 133.029257][ T5816] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 133.695606][ T4681] device veth1_macvtap left promiscuous mode [ 133.696991][ T4681] device veth0_macvtap left promiscuous mode [ 133.699102][ T4681] device veth1_vlan left promiscuous mode [ 133.700367][ T4681] device veth0_vlan left promiscuous mode [ 133.743296][ T4728] EXT4-fs (loop6): unmounting filesystem. [ 133.868231][ T4681] device veth1_macvtap left promiscuous mode [ 133.869326][ T4681] device veth0_macvtap left promiscuous mode [ 133.870441][ T4681] device veth1_vlan left promiscuous mode [ 133.871868][ T4681] device veth0_vlan left promiscuous mode [ 134.020873][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 134.036464][ T4681] device veth1_macvtap left promiscuous mode [ 134.037524][ T4681] device veth0_macvtap left promiscuous mode [ 134.038523][ T4681] device veth1_vlan left promiscuous mode [ 134.040142][ T4681] device veth0_vlan left promiscuous mode [ 136.218235][ T4681] team0 (unregistering): Port device team_slave_1 removed [ 136.387259][ T4681] team0 (unregistering): Port device team_slave_0 removed [ 136.545832][ T4681] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.746403][ T4681] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.286820][ T4681] bond0 (unregistering): Released all slaves [ 142.657337][ T4681] bond0 (unregistering): Released all slaves [ 145.017794][ T4681] team0 (unregistering): Port device team_slave_1 removed [ 145.189933][ T4681] team0 (unregistering): Port device team_slave_0 removed [ 145.346895][ T4681] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.546399][ T4681] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.137251][ T4681] bond0 (unregistering): Released all slaves [ 147.310942][ T4335] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 147.312816][ T4335] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 147.314329][ T4335] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 147.318221][ T4335] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 147.319740][ T4335] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 147.321297][ T4335] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 147.422730][ T5823] netlink: 12 bytes leftover after parsing attributes in process `syz.7.270'. [ 147.599911][ T4335] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 147.603100][ T4335] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 147.604851][ T4335] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 147.611640][ T4338] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 147.613118][ T4338] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 147.614529][ T4335] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 147.616688][ T5857] binder: 5852:5857 got transaction to invalid handle, 1 [ 147.617814][ T5857] binder: 5857:5852 cannot find target node [ 147.688863][ T5863] ip_tables: iptables: counters copy to user failed while replacing table [ 148.470083][ T5857] binder: 5852:5857 transaction call to 0:0 failed 45/29201/-22, size 72-24 line 3062 [ 148.612127][ T5865] binder: 5852:5865 got transaction to invalid handle, 3 [ 148.613466][ T5865] binder: 5865:5852 cannot find target node [ 148.614458][ T5865] binder: 5852:5865 transaction call to 0:0 failed 46/29201/-22, size 0-0 line 3062 [ 148.819876][ T3901] binder: undelivered TRANSACTION_ERROR: 29201 [ 148.838988][ T3901] binder: undelivered TRANSACTION_ERROR: 29201 [ 148.921771][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 149.001010][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.002486][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.007123][ T5837] device bridge_slave_0 entered promiscuous mode [ 149.013695][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.018785][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.022728][ T5837] device bridge_slave_1 entered promiscuous mode [ 149.356151][ T4332] Bluetooth: hci0: command 0x0409 tx timeout [ 149.916889][ T5898] loop0: detected capacity change from 0 to 512 [ 149.999885][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 150.038628][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.053627][ T5901] fuse: Bad value for 'fd' [ 150.064857][ T5898] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 150.153412][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.162355][ T5837] team0: Port device team_slave_0 added [ 150.163786][ T5907] loop7: detected capacity change from 0 to 512 [ 150.198925][ T5837] team0: Port device team_slave_1 added [ 150.203958][ T5907] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 150.274388][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.283019][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.289489][ T5858] device bridge_slave_0 entered promiscuous mode [ 150.296519][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.297758][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.302913][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.316291][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.318260][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.321082][ T5858] device bridge_slave_1 entered promiscuous mode [ 150.636894][ T4332] Bluetooth: hci2: command 0x0409 tx timeout [ 151.032296][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.035107][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.037923][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 151.096575][ T5858] team0: Port device team_slave_0 added [ 151.109808][ T5858] team0: Port device team_slave_1 added [ 151.136052][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.137305][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.141418][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.173782][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.174997][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.193922][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.270869][ T5858] device hsr_slave_0 entered promiscuous mode [ 151.334517][ T4733] EXT4-fs (loop7): unmounting filesystem. [ 151.356560][ T5858] device hsr_slave_1 entered promiscuous mode [ 151.368319][ T5931] netlink: 20 bytes leftover after parsing attributes in process `syz.7.285'. [ 151.376587][ T5931] loop7: detected capacity change from 0 to 1024 [ 151.378644][ T5931] EXT4-fs: Ignoring removed mblk_io_submit option [ 151.379818][ T5931] EXT4-fs: Ignoring removed bh option [ 151.446501][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.447762][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.452363][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.454353][ T4332] Bluetooth: hci0: command 0x041b tx timeout [ 151.475608][ T5931] EXT4-fs (loop7): can't mount with commit=9, fs mounted w/o journal [ 151.574910][ T5937] ip_tables: iptables: counters copy to user failed while replacing table [ 152.576757][ T5837] device hsr_slave_0 entered promiscuous mode [ 152.695907][ T5837] device hsr_slave_1 entered promiscuous mode [ 152.708691][ T5931] loop7: detected capacity change from 0 to 40427 [ 152.715722][ T4335] Bluetooth: hci2: command 0x041b tx timeout [ 152.717256][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.717465][ T5931] F2FS-fs (loop7): Corrupted extension count (64 + 1 > 64) [ 152.718620][ T5837] Cannot create hsr debugfs directory [ 152.719942][ T5931] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 152.740000][ T5931] F2FS-fs (loop7): invalid crc value [ 152.743575][ T5931] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 153.586577][ T4332] Bluetooth: hci0: command 0x040f tx timeout [ 153.596254][ T4332] Bluetooth: hci1: command 0x0406 tx timeout [ 153.729179][ T5931] F2FS-fs (loop7): Start checkpoint disabled! [ 153.859713][ T5959] netlink: 84 bytes leftover after parsing attributes in process `syz.0.289'. [ 153.870272][ T5931] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 153.871442][ T5931] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 153.885058][ T5956] binder: 5955:5956 got transaction to invalid handle, 1 [ 153.925490][ T5956] binder: 5956:5955 cannot find target node [ 153.926562][ T5956] binder: 5955:5956 transaction call to 0:0 failed 50/29201/-22, size 72-24 line 3062 [ 153.966350][ T5961] loop0: detected capacity change from 0 to 128 [ 153.973338][ T5843] udevd[5843]: incorrect ext4 checksum on /dev/loop0 [ 153.981149][ T5961] EXT4-fs (loop0): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 154.046533][ T5967] binder: 5955:5967 got transaction to invalid handle, 3 [ 154.047849][ T5967] binder: 5967:5955 cannot find target node [ 154.048997][ T5967] binder: 5955:5967 transaction call to 0:0 failed 51/29201/-22, size 0-0 line 3062 [ 154.187230][ T5971] syz.0.290: attempt to access beyond end of device [ 154.187230][ T5971] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 154.705957][ T4378] binder: undelivered TRANSACTION_ERROR: 29201 [ 154.735415][ T4378] binder: undelivered TRANSACTION_ERROR: 29201 [ 154.804144][ T4332] Bluetooth: hci2: command 0x040f tx timeout [ 154.830257][ T5989] ip_tables: iptables: counters copy to user failed while replacing table [ 154.930479][ T5998] loop0: detected capacity change from 0 to 512 [ 155.013139][ T5998] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 155.102828][ T5983] loop6: detected capacity change from 0 to 32768 [ 155.109410][ T5983] XFS (loop6): Mounting V5 Filesystem [ 155.120412][ T5983] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 155.123889][ T5983] XFS (loop6): Tail block (0x29) overwrite detected. Updated to 0x30 [ 155.696202][ T4335] Bluetooth: hci0: command 0x0419 tx timeout [ 155.829171][ T5983] XFS (loop6): Ending clean mount [ 156.105299][ T6025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.107693][ T6025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.144313][ T5983] XFS (loop6): Metadata corruption detected at xfs_dinode_verify+0x258/0xe54, inode 0x1803 dinode [ 156.146249][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 156.147336][ T5983] XFS (loop6): Unmount and run xfs_repair [ 156.148270][ T5983] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 156.149594][ T5983] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00 INA............. [ 156.151622][ T5983] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 156.160998][ T5983] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d 4.Xh....4.Xh...= [ 156.165983][ T5983] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20 4.Xh...=....... [ 156.167629][ T5983] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 156.169175][ T5983] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1 ..............=. [ 156.170767][ T5983] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04 ....n..-........ [ 156.173362][ T5983] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06 ................ [ 156.183992][ T6027] loop0: detected capacity change from 0 to 128 [ 156.190283][ T5983] XFS (loop6): Metadata corruption detected at xfs_dinode_verify+0x258/0xe54, inode 0x1803 dinode [ 156.193097][ T5983] XFS (loop6): Unmount and run xfs_repair [ 156.194079][ T5983] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 156.195217][ T5983] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00 INA............. [ 156.198820][ T5983] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 156.200355][ T5983] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d 4.Xh....4.Xh...= [ 156.201770][ T5983] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20 4.Xh...=....... [ 156.203232][ T5983] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 156.204592][ T5983] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1 ..............=. [ 156.209506][ T6027] EXT4-fs (loop0): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 156.209559][ T5983] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04 ....n..-........ [ 156.212776][ T5983] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06 ................ [ 156.230614][ T4728] XFS (loop6): Unmounting Filesystem [ 156.242085][ T5964] udevd[5964]: incorrect ext4 checksum on /dev/loop0 [ 156.409103][ T6029] syz.0.296: attempt to access beyond end of device [ 156.409103][ T6029] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 156.885438][ T4332] Bluetooth: hci2: command 0x0419 tx timeout [ 157.013739][ T4681] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.327065][ T4681] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.410306][ T4681] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.414422][ T5837] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 157.416883][ T6038] loop0: detected capacity change from 0 to 32768 [ 157.420711][ T6038] XFS (loop0): Mounting V5 Filesystem [ 157.428514][ T6038] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 157.432191][ T6038] XFS (loop0): Tail block (0x29) overwrite detected. Updated to 0x30 [ 157.441780][ T6038] XFS (loop0): Ending clean mount [ 157.458770][ T6038] XFS (loop0): Metadata corruption detected at xfs_dinode_verify+0x258/0xe54, inode 0x1803 dinode [ 157.461208][ T6038] XFS (loop0): Unmount and run xfs_repair [ 157.462431][ T6038] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 157.464000][ T6038] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00 INA............. [ 157.466701][ T6038] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 157.468389][ T6038] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d 4.Xh....4.Xh...= [ 157.470236][ T6038] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20 4.Xh...=....... [ 157.471826][ T6038] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 157.473381][ T6038] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1 ..............=. [ 157.479348][ T6038] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04 ....n..-........ [ 157.481081][ T6038] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06 ................ [ 157.492819][ T4333] XFS (loop0): Unmounting Filesystem [ 157.527832][ T4681] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.530930][ T5837] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 157.586575][ T5837] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 157.627611][ T5837] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 157.693724][ T5858] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 157.732339][ T5858] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 157.877638][ T5858] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 157.886369][ T6048] loop0: detected capacity change from 0 to 32768 [ 157.902066][ T6048] XFS (loop0): Mounting V5 Filesystem [ 157.974753][ T6060] fuse: Bad value for 'fd' [ 158.258501][ T6048] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 158.262265][ T5858] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 158.264232][ T6048] XFS (loop0): Tail block (0x29) overwrite detected. Updated to 0x30 [ 158.271403][ T6048] XFS (loop0): Ending clean mount [ 158.294107][ T6048] XFS (loop0): Metadata corruption detected at xfs_dinode_verify+0x258/0xe54, inode 0x1803 dinode [ 158.297992][ T6048] XFS (loop0): Unmount and run xfs_repair [ 158.303603][ T6048] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 158.305043][ T6048] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00 INA............. [ 158.309016][ T6048] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 158.310705][ T6048] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d 4.Xh....4.Xh...= [ 158.317482][ T6048] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20 4.Xh...=....... [ 158.319193][ T6048] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 158.320710][ T6048] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1 ..............=. [ 158.322238][ T6048] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04 ....n..-........ [ 158.323912][ T6048] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06 ................ [ 158.340486][ T4333] XFS (loop0): Unmounting Filesystem [ 158.391511][ T4681] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.468111][ T4681] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.476059][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.484127][ T5025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 158.489297][ T5025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.492521][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.497688][ T5782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.499765][ T5782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.501325][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.502694][ T5782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.510653][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.512188][ T5782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 158.521260][ T5782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.523172][ T5782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.524790][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.526168][ T5782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.537297][ T5782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 158.539511][ T5782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 158.541469][ T5782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 158.543506][ T5782] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.545621][ T5782] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 158.549118][ T5282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 158.552114][ T5282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 158.663470][ T4681] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.677314][ T5282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 158.679036][ T5282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.682472][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.688534][ T5282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 158.691793][ T5282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 158.693518][ T5282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 158.697039][ T5282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 158.702294][ T6064] ip_tables: iptables: counters copy to user failed while replacing table [ 158.704341][ T5837] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 160.152625][ T6076] using random self ethernet address [ 160.153665][ T6076] using random host ethernet address [ 160.163275][ T6075] loop6: detected capacity change from 0 to 128 [ 160.174108][ T6075] EXT4-fs (loop6): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 160.268992][ T4681] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.982057][ T5965] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 161.005743][ T5025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 161.007616][ T5025] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 161.009131][ T5025] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.010442][ T5025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.012204][ T5025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 161.014158][ T5025] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 161.016115][ T5025] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.017414][ T5025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.019048][ T5025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.020941][ T5025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 161.022982][ T5025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 161.024844][ T5025] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 161.027407][ T5025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 161.029042][ T5025] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 161.030758][ T5025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 161.032360][ T5025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 161.034146][ T5025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 161.108834][ T6076] udc dummy_udc.0: failed to start g1: -4 [ 161.109991][ T6076] configfs-gadget.g1: probe of gadget.0 failed with error -4 [ 161.112703][ T6076] UDC core: g1: couldn't find an available UDC or it's busy [ 161.114826][ T5025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 161.145033][ T5025] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.147178][ T5025] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 161.296913][ T6081] syz.6.304: attempt to access beyond end of device [ 161.296913][ T6081] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 161.566187][ T5858] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 161.658576][ T6089] loop0: detected capacity change from 0 to 128 [ 161.669479][ T6089] EXT4-fs (loop0): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 161.745178][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.126371][ T6096] ip_tables: iptables: counters copy to user failed while replacing table [ 163.120594][ T4996] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 163.122064][ T4996] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 163.218077][ T6104] nvmet: adding nsid 1 to subsystem testsubsys [ 163.229895][ T4996] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 163.231686][ T4996] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 163.239261][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.339458][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 163.341317][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 163.413903][ T6118] syz.0.306: attempt to access beyond end of device [ 163.413903][ T6118] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 163.687630][ T5430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 163.689428][ T5430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 163.691731][ T5430] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 163.693193][ T5430] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 163.696026][ T5858] device veth0_vlan entered promiscuous mode [ 163.699217][ T5858] device veth1_vlan entered promiscuous mode [ 163.709053][ T4681] tipc: Left network mode [ 163.710532][ T5858] device veth0_macvtap entered promiscuous mode [ 163.723931][ T6123] loop0: detected capacity change from 0 to 128 [ 163.724321][ T5858] device veth1_macvtap entered promiscuous mode [ 163.728441][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 163.730230][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 163.731844][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 163.733585][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 163.735141][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 163.742362][ T6123] EXT4-fs (loop0): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 163.745110][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 163.759763][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.761546][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.763202][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.772430][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.777673][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.781927][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.787288][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.793241][ T5430] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 163.795143][ T5430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 163.802770][ T5965] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 163.905140][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.907451][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.909368][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.911115][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.912744][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.914499][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.989269][ T6139] syz.0.312: attempt to access beyond end of device [ 163.989269][ T6139] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 164.251689][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.253739][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 164.256673][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 164.263684][ T5858] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.265323][ T5858] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.266997][ T5858] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.268511][ T5858] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.413882][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 164.424104][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 164.442631][ T4977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.444146][ T4977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.455076][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 164.464380][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 164.467153][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 164.471683][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.472331][ T5837] device veth0_vlan entered promiscuous mode [ 164.473167][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.476567][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 164.478372][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 164.482796][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 164.504849][ T5837] device veth1_vlan entered promiscuous mode [ 164.526408][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 164.528260][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 164.529989][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 164.532037][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 164.534996][ T5837] device veth0_macvtap entered promiscuous mode [ 164.575244][ T5837] device veth1_macvtap entered promiscuous mode [ 164.583824][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.586225][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.587917][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.589726][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.591416][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.593150][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.594796][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.596550][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.599005][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.605155][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 164.607668][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 164.609242][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 164.610723][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 165.457579][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.459410][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.460982][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.462591][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.464149][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.485429][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.487103][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.488816][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.491291][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.502107][ T5837] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.503682][ T5837] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.505450][ T5837] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.507031][ T5837] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.629182][ T6159] loop6: detected capacity change from 0 to 512 [ 166.002468][ T6159] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 166.003968][ T6159] System zones: 1-12 [ 166.012300][ T6159] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #12: comm syz.6.314: missing EA_INODE flag [ 166.015575][ T4377] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 166.036142][ T6159] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.314: error while reading EA inode 12 err=-117 [ 166.038420][ T6159] EXT4-fs (loop6): 1 orphan inode deleted [ 166.039410][ T6159] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 166.196744][ T4377] usb 1-1: Using ep0 maxpacket: 8 [ 166.199059][ T4377] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.200883][ T4377] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 166.277652][ T6193] syz.7.317: attempt to access beyond end of device [ 166.277652][ T6193] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 166.537317][ T4377] usb 1-1: New USB device found, idVendor=054c, idProduct=1000, bcdDevice= 0.00 [ 166.539060][ T4377] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.556913][ T4377] usb 1-1: config 0 descriptor?? [ 166.654911][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 166.657067][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 166.808866][ T4995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.810699][ T4995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.896261][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 167.108232][ T6211] syz.7.319: attempt to access beyond end of device [ 167.108232][ T6211] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 167.389384][ T6210] loop3: detected capacity change from 0 to 128 [ 167.401726][ T6210] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 167.416041][ T6107] udevd[6107]: incorrect ext4 checksum on /dev/loop3 [ 167.607027][ T6214] syz.3.320: attempt to access beyond end of device [ 167.607027][ T6214] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 167.897929][ T4377] usbhid 1-1:0.0: can't add hid device: -71 [ 167.899187][ T4377] usbhid: probe of 1-1:0.0 failed with error -71 [ 167.906029][ T4377] usb 1-1: USB disconnect, device number 8 [ 167.940689][ T6217] loop3: detected capacity change from 0 to 128 [ 167.995654][ T6217] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 167.997464][ T4996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.013212][ T4996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.014825][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 168.019698][ T5964] udevd[5964]: incorrect ext4 checksum on /dev/loop3 [ 168.119185][ T6224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.121470][ T6224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.262428][ T6226] syz.3.323: attempt to access beyond end of device [ 168.262428][ T6226] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 170.375440][ T6253] ip_tables: iptables: counters copy to user failed while replacing table [ 170.653135][ T6257] loop3: detected capacity change from 0 to 512 [ 170.700488][ T6257] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.327: inode #1: comm syz.3.327: iget: illegal inode # [ 170.736628][ T6257] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.327: error while reading EA inode 1 err=-117 [ 170.747471][ T6257] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 170.762706][ T6257] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.327: inode #1: comm syz.3.327: iget: illegal inode # [ 170.777365][ T6257] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.327: error while reading EA inode 1 err=-117 [ 170.784926][ T6257] EXT4-fs (loop3): 1 orphan inode deleted [ 170.791400][ T6257] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 171.036690][ T5858] EXT4-fs (loop3): unmounting filesystem. [ 171.708558][ T6283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.710944][ T6283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.002217][ T6270] loop9: detected capacity change from 0 to 32768 [ 172.160536][ T6293] loop9: detected capacity change from 0 to 128 [ 172.169012][ T6293] EXT4-fs (loop9): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 172.417206][ T6296] syz.7.342: attempt to access beyond end of device [ 172.417206][ T6296] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 172.672659][ T6299] syz.9.332: attempt to access beyond end of device [ 172.672659][ T6299] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 173.213032][ T6310] syz.7.333: attempt to access beyond end of device [ 173.213032][ T6310] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 173.654296][ T6320] ip_tables: iptables: counters copy to user failed while replacing table [ 174.478429][ T4728] EXT4-fs (loop6): unmounting filesystem. [ 174.849174][ T6337] syz.7.336: attempt to access beyond end of device [ 174.849174][ T6337] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 175.128329][ T6335] loop3: detected capacity change from 0 to 512 [ 175.452725][ T6339] loop9: detected capacity change from 0 to 512 [ 175.877231][ T6339] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 175.878808][ T6339] System zones: 1-12 [ 175.882310][ T6339] EXT4-fs error (device loop9): ext4_xattr_inode_iget:401: inode #12: comm syz.9.339: missing EA_INODE flag [ 175.885042][ T6339] EXT4-fs error (device loop9): ext4_xattr_inode_iget:406: comm syz.9.339: error while reading EA inode 12 err=-117 [ 175.888378][ T6339] EXT4-fs (loop9): 1 orphan inode deleted [ 175.889543][ T6339] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 176.083650][ T6335] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 176.085705][ T6335] System zones: 1-12 [ 176.092346][ T6335] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.337: missing EA_INODE flag [ 176.096105][ T6335] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.337: error while reading EA inode 12 err=-117 [ 176.099734][ T6335] EXT4-fs (loop3): 1 orphan inode deleted [ 176.100976][ T6335] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 176.682841][ T5837] EXT4-fs (loop9): unmounting filesystem. [ 178.003632][ T5858] EXT4-fs (loop3): unmounting filesystem. [ 179.818509][ T6401] loop6: detected capacity change from 0 to 512 [ 179.820894][ T6400] loop9: detected capacity change from 0 to 512 [ 180.071763][ T6401] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 180.073275][ T6401] System zones: 1-12 [ 180.074629][ T6400] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 180.076476][ T6400] System zones: 1-12 [ 180.078701][ T6400] EXT4-fs error (device loop9): ext4_xattr_inode_iget:401: inode #12: comm syz.9.343: missing EA_INODE flag [ 180.079126][ T6401] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #12: comm syz.6.344: missing EA_INODE flag [ 180.080961][ T6400] EXT4-fs error (device loop9): ext4_xattr_inode_iget:406: comm syz.9.343: error while reading EA inode 12 err=-117 [ 180.084835][ T6401] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.344: error while reading EA inode 12 err=-117 [ 180.085041][ T6400] EXT4-fs (loop9): 1 orphan inode deleted [ 180.088137][ T6400] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 180.119342][ T6401] EXT4-fs (loop6): 1 orphan inode deleted [ 180.120439][ T6401] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 180.517333][ T6432] loop3: detected capacity change from 0 to 512 [ 180.630099][ T6432] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 180.632043][ T6432] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 180.934448][ T6432] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.348: Invalid block bitmap block 0 in block_group 0 [ 180.938800][ T6432] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 180.941270][ T6432] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.348: attempt to clear invalid blocks 983261 len 1 [ 180.944697][ T6432] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz.3.348: Invalid inode table block 0 in block_group 0 [ 180.951836][ T6432] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 180.954857][ T6432] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 180.957473][ T6432] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz.3.348: Invalid inode table block 0 in block_group 0 [ 180.960248][ T6432] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 180.962478][ T6432] EXT4-fs error (device loop3): ext4_truncate:4325: inode #11: comm syz.3.348: mark_inode_dirty error [ 180.964838][ T6432] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 180.967436][ T6432] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz.3.348: Invalid inode table block 0 in block_group 0 [ 180.970275][ T6432] EXT4-fs (loop3): 1 truncate cleaned up [ 180.971316][ T6432] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 181.724342][ T5858] EXT4-fs (loop3): unmounting filesystem. [ 181.852841][ T5837] EXT4-fs (loop9): unmounting filesystem. [ 181.888611][ T6428] tipc: Started in network mode [ 181.889666][ T6428] tipc: Node identity 8e4f1391db94, cluster identity 4711 [ 181.890963][ T6428] tipc: Enabled bearer , priority 0 [ 181.962673][ T4728] EXT4-fs (loop6): unmounting filesystem. [ 181.983794][ T6417] tipc: Resetting bearer [ 182.005659][ T6407] tipc: Resetting bearer [ 182.082593][ T6454] ip_tables: iptables: counters copy to user failed while replacing table [ 182.217337][ T6456] loop9: detected capacity change from 0 to 512 [ 183.202387][ T6456] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 183.204304][ T6456] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 183.237853][ T6459] loop3: detected capacity change from 0 to 512 [ 184.226007][ T6407] tipc: Disabling bearer [ 184.232377][ T6459] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.354: inode #1: comm syz.3.354: iget: illegal inode # [ 184.235048][ T6459] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.354: error while reading EA inode 1 err=-117 [ 184.239647][ T6459] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.354: inode #1: comm syz.3.354: iget: illegal inode # [ 184.242716][ T6456] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:477: comm syz.9.353: Invalid block bitmap block 0 in block_group 0 [ 184.253173][ T6459] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.354: error while reading EA inode 1 err=-117 [ 184.255936][ T6459] EXT4-fs (loop3): 1 orphan inode deleted [ 184.258033][ T6459] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 184.331843][ T6456] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 184.333785][ T6456] EXT4-fs error (device loop9): ext4_clear_blocks:883: inode #11: comm syz.9.353: attempt to clear invalid blocks 983261 len 1 [ 184.337398][ T6456] EXT4-fs error (device loop9): __ext4_get_inode_loc:4520: comm syz.9.353: Invalid inode table block 0 in block_group 0 [ 184.339940][ T6456] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 184.341925][ T6456] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 184.343640][ T6456] EXT4-fs error (device loop9): __ext4_get_inode_loc:4520: comm syz.9.353: Invalid inode table block 0 in block_group 0 [ 184.346838][ T6456] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 184.376015][ T6456] EXT4-fs error (device loop9): ext4_truncate:4325: inode #11: comm syz.9.353: mark_inode_dirty error [ 184.381516][ T6456] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 184.383233][ T6456] EXT4-fs error (device loop9): __ext4_get_inode_loc:4520: comm syz.9.353: Invalid inode table block 0 in block_group 0 [ 184.385766][ T6456] EXT4-fs (loop9): 1 truncate cleaned up [ 184.386702][ T6456] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 184.523098][ T6469] loop0: detected capacity change from 0 to 512 [ 184.830042][ T6469] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 184.831668][ T6469] System zones: 1-12 [ 184.835674][ T6469] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.355: missing EA_INODE flag [ 184.841085][ T6469] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.355: error while reading EA inode 12 err=-117 [ 184.844686][ T6469] EXT4-fs (loop0): 1 orphan inode deleted [ 184.845923][ T6469] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 185.346493][ T5837] EXT4-fs (loop9): unmounting filesystem. [ 185.362164][ T5858] EXT4-fs (loop3): unmounting filesystem. [ 185.545575][ T4332] Bluetooth: hci6: command 0x0406 tx timeout [ 185.546702][ T4332] Bluetooth: hci7: command 0x0406 tx timeout [ 185.568167][ T6482] loop3: detected capacity change from 0 to 128 [ 185.573201][ T6482] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 186.664474][ T6493] loop6: detected capacity change from 0 to 512 [ 186.672219][ T5508] tipc: Node number set to 1440420753 [ 187.045405][ T6498] loop9: detected capacity change from 0 to 512 [ 187.048959][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 187.170112][ T6510] loop3: detected capacity change from 0 to 512 [ 187.174594][ T6498] EXT4-fs error (device loop9): ext4_xattr_inode_iget:401: comm syz.9.357: inode #1: comm syz.9.357: iget: illegal inode # [ 187.177754][ T6493] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: comm syz.6.359: inode #1: comm syz.6.359: iget: illegal inode # [ 187.185014][ T6498] EXT4-fs error (device loop9): ext4_xattr_inode_iget:406: comm syz.9.357: error while reading EA inode 1 err=-117 [ 187.195629][ T6493] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.359: error while reading EA inode 1 err=-117 [ 187.198815][ T6498] EXT4-fs error (device loop9): ext4_xattr_inode_iget:401: comm syz.9.357: inode #1: comm syz.9.357: iget: illegal inode # [ 187.209174][ T6498] EXT4-fs error (device loop9): ext4_xattr_inode_iget:406: comm syz.9.357: error while reading EA inode 1 err=-117 [ 187.285824][ T6517] fuse: Bad value for 'fd' [ 187.376654][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.378000][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.508420][ T6493] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: comm syz.6.359: inode #1: comm syz.6.359: iget: illegal inode # [ 187.511618][ T6498] EXT4-fs (loop9): 1 orphan inode deleted [ 187.512187][ T6510] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 187.512669][ T6498] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 187.547678][ T6493] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.359: error while reading EA inode 1 err=-117 [ 187.608770][ T6493] EXT4-fs (loop6): 1 orphan inode deleted [ 187.609872][ T6493] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 187.612707][ T6522] loop0: detected capacity change from 0 to 512 [ 187.641857][ T5837] EXT4-fs (loop9): unmounting filesystem. [ 188.165633][ T6522] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 189.023535][ T4728] EXT4-fs (loop6): unmounting filesystem. [ 189.048871][ T5858] EXT4-fs (loop3): unmounting filesystem. [ 190.097759][ T6545] loop6: detected capacity change from 0 to 512 [ 190.230027][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 190.255601][ T6544] ip_tables: iptables: counters copy to user failed while replacing table [ 191.196746][ T6548] loop9: detected capacity change from 0 to 2048 [ 191.230803][ T6548] NILFS (loop9): invalid segment: Magic number mismatch [ 191.232093][ T6548] NILFS (loop9): trying rollback from an earlier position [ 191.416242][ T6554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.418432][ T6554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.085081][ T6545] EXT4-fs: failed to create workqueue [ 192.086118][ T6545] EXT4-fs (loop6): mount failed [ 192.113536][ T6548] NILFS (loop9): recovery complete [ 192.221760][ T6558] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 192.260209][ T6557] netlink: 14 bytes leftover after parsing attributes in process `syz.7.370'. [ 192.358150][ T6566] loop0: detected capacity change from 0 to 512 [ 192.407354][ T6566] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.371: inode #1: comm syz.0.371: iget: illegal inode # [ 192.413116][ T6566] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.371: error while reading EA inode 1 err=-117 [ 192.434231][ T6566] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.371: inode #1: comm syz.0.371: iget: illegal inode # [ 192.452782][ T6572] netlink: 16 bytes leftover after parsing attributes in process `syz.9.372'. [ 192.460418][ T6566] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.371: error while reading EA inode 1 err=-117 [ 192.473027][ T6566] EXT4-fs (loop0): 1 orphan inode deleted [ 192.480872][ T6566] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 192.584033][ T6584] netlink: 16 bytes leftover after parsing attributes in process `syz.9.374'. [ 192.656965][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 192.682692][ T6591] binder: 6590:6591 tried to acquire reference to desc 0, got 1 instead [ 192.687166][ T4681] device hsr_slave_0 left promiscuous mode [ 192.771254][ T6595] fuse: Bad value for 'fd' [ 193.049406][ T4681] device hsr_slave_1 left promiscuous mode [ 193.073108][ T6597] syz.7.379: attempt to access beyond end of device [ 193.073108][ T6597] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 193.124660][ T6600] binder: 6590:6600 got transaction to invalid handle, 3 [ 193.130455][ T6600] binder: 6600:6590 cannot find target node [ 193.134719][ T6600] binder: 6590:6600 transaction call to 0:0 failed 56/29201/-22, size 0-0 line 3062 [ 193.390874][ T6605] fuse: Bad value for 'fd' [ 193.564730][ T6607] fuse: Bad value for 'fd' [ 193.828962][ T4681] device hsr_slave_0 left promiscuous mode [ 193.895232][ T6609] syz.6.382: attempt to access beyond end of device [ 193.895232][ T6609] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 193.948394][ T4681] device hsr_slave_1 left promiscuous mode [ 194.090034][ T4380] binder: undelivered TRANSACTION_ERROR: 29201 [ 194.999931][ T6616] loop0: detected capacity change from 0 to 512 [ 195.087439][ T6616] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 195.088852][ T6616] System zones: 1-12 [ 195.205730][ T4681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.207142][ T4681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.234014][ T4681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.234138][ T6629] loop6: detected capacity change from 0 to 64 [ 195.235846][ T4681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.239101][ T6628] loop3: detected capacity change from 0 to 512 [ 195.276207][ T6616] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.383: missing EA_INODE flag [ 195.288626][ T6616] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.383: error while reading EA inode 12 err=-117 [ 195.290281][ T4681] device bridge_slave_1 left promiscuous mode [ 195.291378][ T6616] EXT4-fs (loop0): 1 orphan inode deleted [ 195.292986][ T6616] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 195.298689][ T4681] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.357700][ T6628] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.387: inode #1: comm syz.3.387: iget: illegal inode # [ 195.360943][ T6628] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.387: error while reading EA inode 1 err=-117 [ 195.363442][ T4681] device bridge_slave_0 left promiscuous mode [ 195.364720][ T4681] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.366734][ T6628] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.387: inode #1: comm syz.3.387: iget: illegal inode # [ 195.369253][ T6628] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.387: error while reading EA inode 1 err=-117 [ 195.386347][ T6628] EXT4-fs (loop3): 1 orphan inode deleted [ 195.387497][ T6628] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 195.444925][ T6636] loop6: detected capacity change from 0 to 128 [ 195.470135][ T6636] EXT4-fs (loop6): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 195.482366][ T5858] EXT4-fs (loop3): unmounting filesystem. [ 195.502064][ T5964] udevd[5964]: incorrect ext4 checksum on /dev/loop6 [ 195.545618][ T4681] device veth1_macvtap left promiscuous mode [ 195.546727][ T4681] device veth0_macvtap left promiscuous mode [ 195.547802][ T4681] device veth1_vlan left promiscuous mode [ 195.548853][ T4681] device veth0_vlan left promiscuous mode [ 195.635692][ T4681] device veth1_macvtap left promiscuous mode [ 195.636993][ T4681] device veth0_macvtap left promiscuous mode [ 195.638099][ T4681] device veth1_vlan left promiscuous mode [ 195.639078][ T4681] device veth0_vlan left promiscuous mode [ 195.680679][ T6643] loop6: detected capacity change from 0 to 512 [ 195.693088][ T6643] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 195.694762][ T6643] System zones: 1-12 [ 195.696008][ T6643] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #12: comm syz.6.390: missing EA_INODE flag [ 195.698331][ T6643] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.390: error while reading EA inode 12 err=-117 [ 195.700507][ T6643] EXT4-fs (loop6): 1 orphan inode deleted [ 195.701459][ T6643] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 196.344988][ T6642] udc dummy_udc.0: failed to start g1: -4 [ 196.346198][ T6642] configfs-gadget.g1: probe of gadget.0 failed with error -4 [ 196.347815][ T6642] UDC core: g1: couldn't find an available UDC or it's busy [ 196.570884][ T6654] ip_tables: iptables: counters copy to user failed while replacing table [ 197.732638][ T6658] fuse: Bad value for 'fd' [ 200.671675][ T6668] netlink: 20 bytes leftover after parsing attributes in process `syz.3.396'. [ 200.678056][ T6668] loop3: detected capacity change from 0 to 1024 [ 200.703057][ T6668] EXT4-fs: Ignoring removed mblk_io_submit option [ 200.704283][ T6668] EXT4-fs: Ignoring removed bh option [ 200.723043][ T6668] EXT4-fs (loop3): can't mount with commit=9, fs mounted w/o journal [ 200.868168][ T6668] loop3: detected capacity change from 0 to 40427 [ 200.875280][ T6668] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 200.877913][ T6668] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 200.889832][ T6668] F2FS-fs (loop3): invalid crc value [ 200.893202][ T6668] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 200.923838][ T6668] F2FS-fs (loop3): Start checkpoint disabled! [ 200.929415][ T6668] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 200.930617][ T6668] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 201.166512][ T4681] bond0 (unregistering): Released all slaves [ 204.447482][ T4681] team0 (unregistering): Port device team_slave_1 removed [ 204.607601][ T4681] team0 (unregistering): Port device team_slave_0 removed [ 204.776396][ T4681] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.986379][ T4681] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.506912][ T4681] bond0 (unregistering): Released all slaves [ 207.017792][ T4728] EXT4-fs (loop6): unmounting filesystem. [ 207.039261][ T6695] loop6: detected capacity change from 0 to 128 [ 207.055436][ T6695] EXT4-fs (loop6): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 207.131325][ T6698] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 207.222523][ T6702] device syzkaller0 entered promiscuous mode [ 208.143268][ T6737] loop6: detected capacity change from 0 to 512 [ 209.150674][ T6737] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 209.152082][ T6737] System zones: 1-12 [ 209.153403][ T6737] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #12: comm syz.6.408: missing EA_INODE flag [ 209.155378][ T6737] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.408: error while reading EA inode 12 err=-117 [ 209.157490][ T6737] EXT4-fs (loop6): 1 orphan inode deleted [ 209.158452][ T6737] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 209.413049][ T6745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.667008][ T6767] ip_tables: iptables: counters copy to user failed while replacing table [ 220.939489][ T4728] EXT4-fs (loop6): unmounting filesystem. [ 221.019729][ T6778] loop9: detected capacity change from 0 to 512 [ 221.188027][ T6778] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 221.287068][ T5837] EXT4-fs (loop9): unmounting filesystem. [ 221.958986][ T6803] ip_tables: iptables: counters copy to user failed while replacing table [ 222.092361][ T6812] loop9: detected capacity change from 0 to 512 [ 222.635136][ T6812] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 222.636906][ T6812] System zones: 1-12 [ 222.642719][ T6812] EXT4-fs error (device loop9): ext4_xattr_inode_iget:401: inode #12: comm syz.9.424: missing EA_INODE flag [ 222.645775][ T6812] EXT4-fs error (device loop9): ext4_xattr_inode_iget:406: comm syz.9.424: error while reading EA inode 12 err=-117 [ 222.650592][ T6812] EXT4-fs (loop9): 1 orphan inode deleted [ 222.651767][ T6812] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 223.682755][ T6821] netlink: 20 bytes leftover after parsing attributes in process `syz.3.428'. [ 223.740113][ T5837] EXT4-fs (loop9): unmounting filesystem. [ 223.781084][ T4332] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 223.790218][ T4332] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 223.791965][ T4332] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 223.793869][ T4332] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 223.795264][ T4332] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 223.797166][ T4332] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 223.867384][ T6823] chnl_net:caif_netlink_parms(): no params data found [ 223.922086][ T6823] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.923460][ T6823] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.925009][ T6823] device bridge_slave_0 entered promiscuous mode [ 223.927584][ T6823] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.928983][ T6823] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.930579][ T6823] device bridge_slave_1 entered promiscuous mode [ 223.941783][ T6823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.944469][ T6823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.952351][ T6823] team0: Port device team_slave_0 added [ 223.954483][ T6823] team0: Port device team_slave_1 added [ 223.960489][ T6823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.963908][ T6823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.968777][ T6823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.979292][ T6823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.985528][ T6823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.995668][ T6823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.107230][ T6823] device hsr_slave_0 entered promiscuous mode [ 224.125862][ T6823] device hsr_slave_1 entered promiscuous mode [ 224.156244][ T6823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.157720][ T6823] Cannot create hsr debugfs directory [ 224.291015][ T6848] loop9: detected capacity change from 0 to 512 [ 224.296822][ T6848] EXT4-fs: Ignoring removed i_version option [ 224.297844][ T6848] EXT4-fs: Ignoring removed oldalloc option [ 224.324958][ T6848] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 224.670164][ T5837] EXT4-fs (loop9): unmounting filesystem. [ 224.695740][ T6873] fuse: Bad value for 'fd' [ 224.723129][ T6875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.017029][ T4335] Bluetooth: hci3: command 0x0409 tx timeout [ 226.488960][ T6905] netlink: 20 bytes leftover after parsing attributes in process `syz.9.443'. [ 226.499081][ T6905] loop9: detected capacity change from 0 to 1024 [ 226.510107][ T6905] EXT4-fs: Ignoring removed mblk_io_submit option [ 226.513430][ T6905] EXT4-fs: Ignoring removed bh option [ 226.537056][ T6905] EXT4-fs (loop9): can't mount with commit=9, fs mounted w/o journal [ 226.742859][ T6823] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 226.812316][ T6823] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 226.847335][ T6823] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 226.899835][ T6823] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 227.020232][ T6905] loop9: detected capacity change from 0 to 40427 [ 227.037374][ T6905] F2FS-fs (loop9): Corrupted extension count (64 + 1 > 64) [ 227.038659][ T6905] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 227.060393][ T6905] F2FS-fs (loop9): invalid crc value [ 227.067097][ T6823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.069643][ T6905] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 227.113185][ T6823] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.120492][ T5025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 227.122111][ T5025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 227.123494][ T5025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 227.125114][ T5025] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 227.137446][ T5025] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.138667][ T5025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.145725][ T6905] F2FS-fs (loop9): Start checkpoint disabled! [ 227.151011][ T5025] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 227.157146][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 227.159005][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 227.160466][ T4681] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.161716][ T4681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.175958][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 227.177703][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 227.184026][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 227.186782][ T6905] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 227.188098][ T6905] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 227.194350][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 227.204911][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 227.260246][ T6823] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 227.261934][ T6823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 227.305725][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 227.407832][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 227.410795][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 227.414674][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 227.424739][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 227.438463][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 227.463929][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 227.747096][ T5025] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 227.748614][ T5025] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 227.752167][ T6823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.783388][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 227.785190][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 227.800606][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 227.802633][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 227.804544][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 227.808306][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 227.833518][ T6823] device veth0_vlan entered promiscuous mode [ 227.850995][ T6823] device veth1_vlan entered promiscuous mode [ 228.076362][ T4332] Bluetooth: hci3: command 0x041b tx timeout [ 228.160733][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 228.162597][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 228.198805][ T6533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 228.200573][ T6533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 228.203202][ T6823] device veth0_macvtap entered promiscuous mode [ 228.217574][ T6823] device veth1_macvtap entered promiscuous mode [ 228.236626][ T6823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.242611][ T6823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.247601][ T6823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.251449][ T6823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.255266][ T6823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.259491][ T6823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.263145][ T6823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.272400][ T6823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.277096][ T6823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.281122][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 228.283218][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 228.284953][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 228.287359][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 228.292370][ T6823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.299477][ T6823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.304537][ T6823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.314043][ T6823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.325320][ T6823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.331806][ T6823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.338982][ T6823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.345129][ T6823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.349934][ T6823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.359726][ T6823] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.363435][ T6823] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.368079][ T6823] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.371780][ T6823] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.378922][ T5029] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 228.380865][ T5029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 228.435792][ T4994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.437293][ T4994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.438956][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 228.447454][ T5417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.449031][ T5417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.452591][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 228.674875][ T6988] loop2: detected capacity change from 0 to 512 [ 228.703311][ T6988] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 228.758263][ T6988] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 228.961736][ T7007] Quota error (device loop2): do_check_range: Getting block 4128768 out of range 0-5 [ 229.278473][ T7016] netlink: 20 bytes leftover after parsing attributes in process `syz.3.460'. [ 229.541646][ T6823] EXT4-fs (loop2): unmounting filesystem. [ 230.144798][ T7052] ip_tables: iptables: counters copy to user failed while replacing table [ 230.205859][ T4332] Bluetooth: hci3: command 0x040f tx timeout [ 231.488231][ T7070] loop2: detected capacity change from 0 to 512 [ 231.530644][ T7070] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.472: inode #1: comm syz.2.472: iget: illegal inode # [ 231.539626][ T7070] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.472: error while reading EA inode 1 err=-117 [ 231.549604][ T7070] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.472: inode #1: comm syz.2.472: iget: illegal inode # [ 231.559180][ T7070] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.472: error while reading EA inode 1 err=-117 [ 231.568188][ T7070] EXT4-fs (loop2): 1 orphan inode deleted [ 231.573569][ T7070] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 231.701650][ T6823] EXT4-fs (loop2): unmounting filesystem. [ 231.805964][ T7092] ip_tables: iptables: counters copy to user failed while replacing table [ 231.949891][ T7109] netlink: 20 bytes leftover after parsing attributes in process `syz.2.479'. [ 231.958176][ T7109] loop2: detected capacity change from 0 to 1024 [ 231.981642][ T7109] EXT4-fs: Ignoring removed mblk_io_submit option [ 231.990877][ T7109] EXT4-fs: Ignoring removed bh option [ 232.039890][ T7109] EXT4-fs (loop2): can't mount with commit=9, fs mounted w/o journal [ 232.236079][ T4335] Bluetooth: hci3: command 0x0419 tx timeout [ 232.393116][ T7109] loop2: detected capacity change from 0 to 40427 [ 232.398968][ T7109] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 232.400235][ T7109] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 232.404776][ T7109] F2FS-fs (loop2): invalid crc value [ 232.466598][ T7139] ip_tables: iptables: counters copy to user failed while replacing table [ 233.526275][ T7109] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 233.569978][ T7109] F2FS-fs (loop2): Start checkpoint disabled! [ 233.605880][ T7109] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 233.607116][ T7109] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 234.204348][ T7170] loop6: detected capacity change from 0 to 512 [ 234.232229][ T7170] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 234.253065][ T7176] Set syz1 is full, maxelem 256 reached [ 234.302687][ T4728] EXT4-fs (loop6): unmounting filesystem. [ 234.549787][ T7190] ip_tables: iptables: counters copy to user failed while replacing table [ 234.670015][ T7194] ip_tables: iptables: counters copy to user failed while replacing table [ 234.671042][ T7199] netlink: 20 bytes leftover after parsing attributes in process `syz.6.498'. [ 234.686133][ T7199] loop6: detected capacity change from 0 to 1024 [ 234.689068][ T7199] EXT4-fs: Ignoring removed mblk_io_submit option [ 234.692480][ T7199] EXT4-fs: Ignoring removed bh option [ 234.710302][ T7199] EXT4-fs (loop6): can't mount with commit=9, fs mounted w/o journal [ 235.345721][ T7199] loop6: detected capacity change from 0 to 40427 [ 235.347803][ T7199] F2FS-fs (loop6): Corrupted extension count (64 + 1 > 64) [ 235.349033][ T7199] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 235.358261][ T7199] F2FS-fs (loop6): invalid crc value [ 235.361041][ T7199] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 235.392543][ T7199] F2FS-fs (loop6): Start checkpoint disabled! [ 235.411514][ T7199] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 235.413007][ T7199] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 236.352790][ T7268] ip_tables: iptables: counters copy to user failed while replacing table [ 236.471083][ T7275] ip_tables: iptables: counters copy to user failed while replacing table [ 236.672378][ T7291] netlink: 20 bytes leftover after parsing attributes in process `syz.6.518'. [ 237.806502][ T7341] tipc: Enabling of bearer rejected, failed to enable media [ 237.808514][ T7341] device syzkaller0 entered promiscuous mode [ 238.275871][ T7356] ip_tables: iptables: counters copy to user failed while replacing table [ 238.334180][ T7359] ip_tables: iptables: counters copy to user failed while replacing table [ 239.777209][ T7398] /dev/loop0: Can't open blockdev [ 239.800262][ T7400] netlink: 20 bytes leftover after parsing attributes in process `syz.2.542'. [ 242.503139][ T7473] netlink: 20 bytes leftover after parsing attributes in process `syz.2.556'. [ 243.001943][ T7498] ip_tables: iptables: counters copy to user failed while replacing table [ 244.489815][ T7541] /dev/loop0: Can't open blockdev [ 245.305151][ T7574] ip_tables: iptables: counters copy to user failed while replacing table [ 246.032783][ T7594] tipc: Enabling of bearer rejected, failed to enable media [ 246.035184][ T7594] device syzkaller0 entered promiscuous mode [ 246.491924][ T7610] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.493508][ T7610] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.006965][ T7610] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.067672][ T7610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.695791][ T7610] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.697351][ T7610] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.698910][ T7610] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.700419][ T7610] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.917316][ T7618] tipc: Enabled bearer , priority 10 [ 248.557355][ T7644] netlink: 'syz.3.590': attribute type 10 has an invalid length. [ 248.591675][ T7644] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 248.796045][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.797241][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.008733][ T7670] device syzkaller0 entered promiscuous mode [ 249.252539][ T7682] /dev/loop0: Can't open blockdev [ 249.362766][ T7687] ip_tables: iptables: counters copy to user failed while replacing table [ 254.239933][ T7822] ip_tables: iptables: counters copy to user failed while replacing table [ 254.451509][ T7827] device syzkaller0 entered promiscuous mode [ 255.123325][ T7847] Bluetooth: hci5: Frame reassembly failed (-90) [ 256.556199][ T4338] Bluetooth: hci4: command 0x1003 tx timeout [ 256.557644][ T4332] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 257.261766][ T4338] Bluetooth: hci5: command 0x1003 tx timeout [ 257.264166][ T4335] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 259.870864][ T7921] ip_tables: iptables: counters copy to user failed while replacing table [ 259.974369][ T7932] ip_tables: iptables: counters copy to user failed while replacing table [ 262.723849][ T7991] ip_tables: iptables: counters copy to user failed while replacing table [ 262.755682][ T7993] /dev/loop0: Can't open blockdev [ 262.858368][ T8003] ip_tables: iptables: counters copy to user failed while replacing table [ 263.570457][ T8009] FAULT_INJECTION: forcing a failure. [ 263.570457][ T8009] name failslab, interval 1, probability 0, space 0, times 0 [ 263.573151][ T8009] CPU: 0 PID: 8009 Comm: syz.9.663 Not tainted syzkaller #0 [ 263.574395][ T8009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 263.576136][ T8009] Call trace: [ 263.576714][ T8009] dump_backtrace+0x1c4/0x1f0 [ 263.577595][ T8009] show_stack+0x2c/0x3c [ 263.578375][ T8009] __dump_stack+0x30/0x40 [ 263.579188][ T8009] dump_stack_lvl+0xf4/0x15c [ 263.580044][ T8009] dump_stack+0x1c/0x5c [ 263.580792][ T8009] should_fail_ex+0x3cc/0x524 [ 263.581669][ T8009] __should_failslab+0xc0/0x11c [ 263.582558][ T8009] should_failslab+0x10/0x28 [ 263.583450][ T8009] kmem_cache_alloc+0x88/0x310 [ 263.584294][ T8009] __kernfs_new_node+0xec/0x5fc [ 263.585164][ T8009] kernfs_new_node+0x120/0x230 [ 263.586073][ T8009] kernfs_create_dir_ns+0x58/0x138 [ 263.587040][ T8009] sysfs_create_dir_ns+0x120/0x264 [ 263.588009][ T8009] kobject_add_internal+0x5a8/0xb18 [ 263.588985][ T8009] kobject_add+0x144/0x20c [ 263.589761][ T8009] device_add+0x3dc/0xe4c [ 263.590532][ T8009] netdev_register_kobject+0x170/0x2f4 [ 263.591439][ T8009] register_netdevice+0xf28/0x1650 [ 263.592303][ T8009] vif_add+0x4bc/0x1120 [ 263.593054][ T8009] ip_mroute_setsockopt+0xb5c/0xce0 [ 263.593956][ T8009] do_ip_setsockopt+0x41c/0x2464 [ 263.594796][ T8009] ip_setsockopt+0x68/0x134 [ 263.595568][ T8009] raw_setsockopt+0xd8/0x288 [ 263.596351][ T8009] sock_common_setsockopt+0xb0/0xcc [ 263.597324][ T8009] __sys_setsockopt+0x2fc/0x50c [ 263.598202][ T8009] __arm64_sys_setsockopt+0xc0/0xdc [ 263.599109][ T8009] invoke_syscall+0x98/0x290 [ 263.599882][ T8009] el0_svc_common+0x13c/0x258 [ 263.600718][ T8009] do_el0_svc+0x5c/0x134 [ 263.601463][ T8009] el0_svc+0x58/0x128 [ 263.602179][ T8009] el0t_64_sync_handler+0x84/0xf0 [ 263.603085][ T8009] el0t_64_sync+0x18c/0x190 [ 263.609325][ T8009] kobject_add_internal failed for pimreg (error: -12 parent: net) [ 263.747428][ T8024] device syzkaller0 entered promiscuous mode [ 266.846404][ T8070] ip_tables: iptables: counters copy to user failed while replacing table [ 268.872723][ T8086] /dev/loop0: Can't open blockdev [ 271.355443][ T4335] Bluetooth: hci2: command 0x0406 tx timeout [ 271.356655][ T4332] Bluetooth: hci0: command 0x0406 tx timeout [ 278.078325][ T8109] binder: 8108:8109 tried to acquire reference to desc 0, got 1 instead [ 278.086315][ T8109] binder: 8108:8109 got transaction with invalid data ptr [ 278.087611][ T8109] binder: 8108:8109 transaction call to 8108:0 failed 61/29201/-14, size 0-24 line 3350 [ 278.147988][ T8116] binder: 8108:8116 got transaction to invalid handle, 3 [ 278.149223][ T8116] binder: 8116:8108 cannot find target node [ 278.150218][ T8116] binder: 8108:8116 transaction call to 0:0 failed 62/29201/-22, size 0-0 line 3062 [ 278.165247][ T8120] /dev/loop0: Can't open blockdev [ 279.417966][ T4377] binder: undelivered TRANSACTION_ERROR: 29201 [ 279.531530][ T8156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.701'. [ 279.596175][ T4377] binder: undelivered TRANSACTION_ERROR: 29201 [ 279.650329][ T8165] 9pnet_fd: Insufficient options for proto=fd [ 280.131270][ T8180] device syzkaller0 entered promiscuous mode [ 281.462113][ T8200] binder: 8196:8200 tried to acquire reference to desc 0, got 1 instead [ 281.489913][ T8200] binder: 8196:8200 got transaction with invalid data ptr [ 281.491203][ T8200] binder: 8196:8200 transaction call to 8196:0 failed 67/29201/-14, size 0-24 line 3350 [ 281.579061][ T8214] binder: 8196:8214 got transaction to invalid handle, 3 [ 281.580308][ T8214] binder: 8214:8196 cannot find target node [ 281.581348][ T8214] binder: 8196:8214 transaction call to 0:0 failed 68/29201/-22, size 0-0 line 3062 [ 281.616969][ T8208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.714'. [ 281.682031][ T8223] 9pnet_fd: Insufficient options for proto=fd [ 282.335868][ T113] binder: undelivered TRANSACTION_ERROR: 29201 [ 282.373974][ T8250] 9pnet_fd: Insufficient options for proto=fd [ 282.385505][ T113] binder: undelivered TRANSACTION_ERROR: 29201 [ 283.403919][ T8268] /dev/loop0: Can't open blockdev [ 283.418787][ T8265] device syzkaller0 entered promiscuous mode [ 283.515601][ T4338] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 283.721932][ T8288] 9pnet_fd: Insufficient options for proto=fd [ 283.798948][ T8290] 9pnet_fd: Insufficient options for proto=fd [ 284.321047][ T8307] binder: 8306:8307 tried to acquire reference to desc 0, got 1 instead [ 284.390175][ T8314] binder: 8306:8314 got transaction to invalid handle, 3 [ 284.391796][ T8314] binder: 8314:8306 cannot find target node [ 284.392974][ T8314] binder: 8306:8314 transaction call to 0:0 failed 74/29201/-22, size 0-0 line 3062 [ 285.594052][ T24] binder: release 8306:8307 transaction 73 out, still active [ 285.847915][ T24] binder: undelivered TRANSACTION_COMPLETE [ 285.933428][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 285.934798][ T24] binder: send failed reply for transaction 73, target dead [ 286.355537][ T8356] device syzkaller0 entered promiscuous mode [ 289.673180][ T8407] /dev/loop0: Can't open blockdev [ 293.847094][ T8498] ip_tables: iptables: counters copy to user failed while replacing table [ 294.342163][ T8500] netlink: 16 bytes leftover after parsing attributes in process `syz.9.770'. [ 294.514908][ T8507] ip_tables: iptables: counters copy to user failed while replacing table [ 298.150795][ T8596] tipc: Started in network mode [ 298.151890][ T8596] tipc: Node identity 720807572eff, cluster identity 4711 [ 298.155129][ T8596] tipc: Enabled bearer , priority 0 [ 298.166631][ T8596] tipc: Resetting bearer [ 298.174419][ T8601] 9pnet_fd: Insufficient options for proto=fd [ 298.296507][ T8595] tipc: Disabling bearer [ 298.677298][ T8610] binder: 8605:8610 tried to acquire reference to desc 0, got 1 instead [ 299.770208][ T4375] binder: release 8605:8610 transaction 79 out, still active [ 299.771621][ T4375] binder: undelivered TRANSACTION_COMPLETE [ 299.772826][ T4375] binder: send failed reply for transaction 86 to 8605:8615 [ 299.774514][ T4375] binder: undelivered TRANSACTION_COMPLETE [ 299.778497][ T4375] binder: undelivered TRANSACTION_ERROR: 29189 [ 299.779848][ T4375] binder: send failed reply for transaction 79, target dead [ 300.189936][ T8666] netlink: 16 bytes leftover after parsing attributes in process `syz.3.802'. [ 303.492365][ T5168] Bluetooth: hci4: Frame reassembly failed (-84) [ 303.608933][ T8719] binder: 8718:8719 tried to acquire reference to desc 0, got 1 instead [ 304.452310][ T4375] binder: release 8718:8719 transaction 91 out, still active [ 304.453781][ T4375] binder: undelivered TRANSACTION_COMPLETE [ 304.454742][ T4375] binder: send failed reply for transaction 98 to 8718:8723 [ 304.461812][ T4375] binder: undelivered TRANSACTION_COMPLETE [ 305.517711][ T4332] Bluetooth: hci4: command 0x1003 tx timeout [ 305.535528][ T4338] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 305.643583][ T8758] 9pnet_fd: Insufficient options for proto=fd [ 305.855719][ T8764] ip_tables: iptables: counters copy to user failed while replacing table [ 306.235970][ T8772] 9pnet_fd: Insufficient options for proto=fd [ 306.300738][ T8775] 9pnet_fd: Insufficient options for proto=fd [ 307.204968][ T8794] binder: 8793:8794 tried to acquire reference to desc 0, got 1 instead [ 307.364785][ T8805] netlink: 16 bytes leftover after parsing attributes in process `syz.7.826'. [ 307.455477][ T4335] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 307.456966][ T4338] Bluetooth: hci5: command 0x1003 tx timeout [ 307.672106][ T8814] device syzkaller0 entered promiscuous mode [ 309.178146][ T5083] binder_debug: 2 callbacks suppressed [ 309.178160][ T5083] binder: release 8793:8794 transaction 103 out, still active [ 309.180654][ T5083] binder: undelivered TRANSACTION_COMPLETE [ 309.181799][ T5083] binder: send failed reply for transaction 110 to 8793:8803 [ 309.183234][ T5083] binder: undelivered TRANSACTION_COMPLETE [ 309.184253][ T5083] binder: undelivered TRANSACTION_ERROR: 29189 [ 309.205463][ T5083] binder: send failed reply for transaction 103, target dead [ 309.240415][ T8845] 9pnet_fd: Insufficient options for proto=fd [ 309.698713][ T8856] ip_tables: iptables: counters copy to user failed while replacing table [ 310.236447][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.237683][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.443766][ T8882] device syzkaller0 entered promiscuous mode [ 310.616941][ T8886] netlink: 16 bytes leftover after parsing attributes in process `syz.9.845'. [ 310.852432][ T8891] binder: 8890:8891 tried to acquire reference to desc 0, got 1 instead [ 311.889370][ T24] binder: release 8890:8891 transaction 115 out, still active [ 311.890712][ T24] binder: undelivered TRANSACTION_COMPLETE [ 311.891791][ T24] binder: send failed reply for transaction 122 to 8890:8896 [ 311.893139][ T24] binder: undelivered TRANSACTION_COMPLETE [ 312.101647][ T8908] 9pnet_fd: Insufficient options for proto=fd [ 312.961888][ T8934] device syzkaller0 entered promiscuous mode [ 313.251055][ T8951] binder: 8950:8951 tried to acquire reference to desc 0, got 1 instead [ 313.883463][ T8979] netlink: 16 bytes leftover after parsing attributes in process `syz.9.863'. [ 314.188516][ T8993] 9pnet_fd: Insufficient options for proto=fd [ 314.513928][ T9003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.872'. [ 314.640997][ T9000] device syzkaller0 entered promiscuous mode [ 315.778335][ T9048] binder: 9047:9048 tried to acquire reference to desc 0, got 1 instead [ 316.379913][ T9072] device syzkaller0 entered promiscuous mode [ 316.611590][ T9077] netlink: 16 bytes leftover after parsing attributes in process `syz.9.884'. [ 316.624559][ T113] binder_debug: 8 callbacks suppressed [ 316.624571][ T113] binder: release 9047:9048 transaction 139 out, still active [ 316.627792][ T113] binder: undelivered TRANSACTION_COMPLETE [ 316.629056][ T113] binder: send failed reply for transaction 146 to 9047:9050 [ 316.630710][ T113] binder: undelivered TRANSACTION_COMPLETE [ 316.632097][ T113] binder: undelivered TRANSACTION_ERROR: 29189 [ 316.640678][ T113] binder: send failed reply for transaction 139, target dead [ 319.002016][ T9130] binder: 9129:9130 tried to acquire reference to desc 0, got 1 instead [ 319.074595][ T9131] binder: 9129:9131 ioctl c0306201 0 returned -14 [ 319.123576][ T9133] device syzkaller0 entered promiscuous mode [ 319.746873][ T9149] netlink: 16 bytes leftover after parsing attributes in process `syz.2.901'. [ 320.316562][ T4335] Bluetooth: hci4: command 0x1003 tx timeout [ 320.317888][ T4332] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 321.114390][ T4379] binder: release 9129:9130 transaction 151 out, still active [ 321.187043][ T4379] binder: undelivered TRANSACTION_COMPLETE [ 321.287497][ T4379] binder: send failed reply for transaction 151, target dead [ 322.726859][ T9208] ip_tables: iptables: counters copy to user failed while replacing table [ 322.843016][ T9210] netlink: 16 bytes leftover after parsing attributes in process `syz.6.918'. [ 323.049116][ T4681] Bluetooth: hci4: Frame reassembly failed (-84) [ 323.053290][ T9214] Bluetooth: hci4: Frame reassembly failed (-84) [ 323.061517][ T9215] binder: 9213:9215 tried to acquire reference to desc 0, got 1 instead [ 323.142191][ T9222] binder: 9213:9222 ioctl c0306201 0 returned -14 [ 323.555731][ T9235] tipc: Started in network mode [ 323.558324][ T9235] tipc: Node identity 2e049431d40f, cluster identity 4711 [ 323.560832][ T9235] tipc: Enabled bearer , priority 0 [ 323.564385][ T9235] device syzkaller0 entered promiscuous mode [ 323.578985][ T9235] tipc: Resetting bearer [ 323.583664][ T9234] tipc: Resetting bearer [ 323.625903][ T9234] tipc: Disabling bearer [ 323.711927][ T9241] netlink: 20 bytes leftover after parsing attributes in process `syz.3.925'. [ 323.885519][ T4375] binder: release 9213:9215 transaction 162 out, still active [ 323.935473][ T4375] binder: undelivered TRANSACTION_COMPLETE [ 323.955606][ T4375] binder: send failed reply for transaction 162, target dead [ 325.116404][ T4332] Bluetooth: hci4: command 0x1003 tx timeout [ 325.117710][ T4335] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 327.089756][ T9282] tipc: Enabled bearer , priority 0 [ 327.100444][ T9282] device syzkaller0 entered promiscuous mode [ 327.146913][ T9282] tipc: Resetting bearer [ 327.220600][ T9281] tipc: Resetting bearer [ 327.266176][ T9281] tipc: Disabling bearer [ 327.373610][ T9296] netlink: 8 bytes leftover after parsing attributes in process `syz.6.934'. [ 327.631555][ T9301] binder: 9299:9301 tried to acquire reference to desc 0, got 1 instead [ 327.726347][ T9307] binder: 9299:9307 ioctl c0306201 0 returned -14 [ 328.574611][ T4378] binder: release 9299:9301 transaction 173 out, still active [ 328.655108][ T9313] netlink: 8 bytes leftover after parsing attributes in process `syz.9.940'. [ 328.735664][ T4378] binder: undelivered TRANSACTION_COMPLETE [ 330.147979][ T4378] binder: send failed reply for transaction 173, target dead [ 331.839685][ T9353] binder: 9352:9353 tried to acquire reference to desc 0, got 1 instead [ 332.079009][ T9357] netlink: 4 bytes leftover after parsing attributes in process `syz.7.948'. [ 332.761170][ T4375] binder: send failed reply for transaction 184 to 9352:9353 [ 332.776129][ T4375] binder: undelivered TRANSACTION_COMPLETE [ 332.777266][ T4375] binder: undelivered TRANSACTION_ERROR: 29189 [ 332.847921][ T9365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.953'. [ 333.216544][ T9388] 9pnet_fd: Insufficient options for proto=fd [ 334.183499][ T9403] 9pnet_fd: Insufficient options for proto=fd [ 335.301916][ T9423] binder: 9418:9423 tried to acquire reference to desc 0, got 1 instead [ 336.270176][ T4379] binder: release 9418:9423 transaction 195 out, still active [ 336.468963][ T9442] 9pnet_fd: Insufficient options for proto=fd [ 336.578051][ T4379] binder: undelivered TRANSACTION_COMPLETE [ 338.045545][ T4379] binder: send failed reply for transaction 195, target dead [ 338.256584][ T9464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.969'. [ 338.379583][ T9466] netlink: 4 bytes leftover after parsing attributes in process `syz.7.976'. [ 338.387465][ T9466] netlink: 4 bytes leftover after parsing attributes in process `syz.7.976'. [ 338.670935][ T9472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.975'. [ 338.677308][ T9472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.975'. [ 341.107116][ T9492] binder: 9489:9492 tried to acquire reference to desc 0, got 1 instead [ 341.213464][ T9500] 9pnet_fd: Insufficient options for proto=fd [ 341.283856][ T9506] device syzkaller0 entered promiscuous mode [ 341.943513][ T24] binder: release 9489:9492 transaction 206 out, still active [ 341.976481][ T24] binder: undelivered TRANSACTION_COMPLETE [ 342.015585][ T24] binder: send failed reply for transaction 206, target dead [ 343.064176][ T9535] device syzkaller0 entered promiscuous mode [ 346.809378][ T9567] tipc: Enabled bearer , priority 0 [ 346.817287][ T9567] device syzkaller0 entered promiscuous mode [ 346.826426][ T9567] tipc: Resetting bearer [ 346.831862][ T9566] tipc: Resetting bearer [ 346.908425][ T9574] binder: BINDER_SET_CONTEXT_MGR already set [ 346.909653][ T9574] binder: 9571:9574 ioctl 4018620d 20004a80 returned -16 [ 346.914606][ T9574] binder: tried to use weak ref as strong ref [ 346.936298][ T9574] binder: 9571:9574 Acquire 1 refcount change on invalid ref 0 ret -22 [ 346.939599][ T9574] binder: 9571:9574 got transaction to invalid handle, 1 [ 346.940777][ T9574] binder: 9574:9571 cannot find target node [ 346.941798][ T9574] binder: 9571:9574 transaction call to 0:0 failed 215/29201/-22, size 72-24 line 3062 [ 346.949030][ T9566] tipc: Disabling bearer [ 347.906191][ T3901] binder: undelivered TRANSACTION_ERROR: 29201 [ 348.155563][ T4332] Bluetooth: hci3: command 0x0406 tx timeout [ 349.237293][ T9632] tipc: Started in network mode [ 349.238244][ T9632] tipc: Node identity 4ad54f248097, cluster identity 4711 [ 349.268207][ T9632] tipc: Enabled bearer , priority 0 [ 349.276111][ T9632] device syzkaller0 entered promiscuous mode [ 349.298574][ T9632] tipc: Resetting bearer [ 349.316770][ T9631] tipc: Resetting bearer [ 349.525909][ T9631] tipc: Disabling bearer [ 350.520180][ T9684] binder: 9683:9684 tried to acquire reference to desc 0, got 1 instead [ 352.048065][ T9712] tipc: Enabled bearer , priority 0 [ 352.092256][ T4379] binder: send failed reply for transaction 220 to 9683:9684 [ 352.112592][ T9714] ip_tables: iptables: counters copy to user failed while replacing table [ 353.119310][ T4378] tipc: Node number set to 4195062833 [ 353.135886][ T9712] device syzkaller0 entered promiscuous mode [ 353.141716][ T9712] tipc: Resetting bearer [ 353.157890][ T9710] tipc: Resetting bearer [ 353.167998][ T4379] binder: undelivered TRANSACTION_COMPLETE [ 353.169081][ T4379] binder: undelivered TRANSACTION_ERROR: 29189 [ 353.258449][ T9710] tipc: Disabling bearer [ 355.768970][ T9756] binder: 9755:9756 tried to acquire reference to desc 0, got 1 instead [ 355.803390][ T9759] 9pnet_fd: Insufficient options for proto=fd [ 356.621513][ T9793] ip_tables: iptables: counters copy to user failed while replacing table [ 356.793554][ T4379] binder: release 9755:9756 transaction 231 out, still active [ 357.131064][ T28] INFO: task syz-executor:4333 blocked for more than 143 seconds. [ 357.138424][ T28] Not tainted syzkaller #0 [ 357.140578][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 357.144204][ T28] task:syz-executor state:D stack:0 pid:4333 ppid:1 flags:0x00000009 [ 357.147137][ T28] Call trace: [ 357.147680][ T28] __switch_to+0x2f4/0x550 [ 357.150696][ T28] __schedule+0xdb4/0x1a6c [ 357.151569][ T28] schedule+0xc4/0x170 [ 357.153576][ T28] rwsem_down_write_slowpath+0xba8/0x12cc [ 357.195707][ T28] down_write+0x84/0x88 [ 357.196408][ T28] deactivate_super+0xdc/0x104 [ 357.197374][ T28] cleanup_mnt+0x3a8/0x430 [ 357.198189][ T28] __cleanup_mnt+0x20/0x30 [ 357.199193][ T28] task_work_run+0x1f4/0x280 [ 357.200264][ T28] do_notify_resume+0x20f8/0x2c84 [ 357.201118][ T28] el0_svc+0x98/0x128 [ 357.201999][ T28] el0t_64_sync_handler+0x84/0xf0 [ 357.203076][ T28] el0t_64_sync+0x18c/0x190 [ 357.203982][ T28] [ 357.203982][ T28] Showing all locks held in the system: [ 357.298787][ T28] 1 lock held by rcu_tasks_kthre/12: [ 357.305182][ T28] #0: ffff800015577db0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xc48 [ 357.316550][ T28] 1 lock held by rcu_tasks_trace/13: [ 357.667916][ T28] #0: ffff8000155785d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xc48 [ 357.681876][ T4379] binder: undelivered TRANSACTION_COMPLETE [ 357.770847][ T28] 1 lock held by khungtaskd/28: [ 357.775599][ T28] #0: ffff800015577440 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 [ 357.787971][ T28] 2 locks held by getty/4084: [ 357.794973][ T28] #0: ffff0000d626f098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 357.874008][ T28] #1: ffff80001fa362f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x2e8/0xfa8 [ 357.882006][ T28] 1 lock held by syz-executor/4333: [ 357.885486][ T28] #0: ffff0000cc7d60e0 (&type->s_umount_key#30){++++}-{3:3}, at: deactivate_super+0xdc/0x104 [ 357.890789][ T28] 2 locks held by kworker/1:5/4379: [ 357.892163][ T28] #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc [ 357.901168][ T28] #1: ffff800020dc7c40 (binder_deferred_work){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc [ 357.904663][ T28] 2 locks held by ext4lazyinit/6624: [ 357.908958][ T28] 2 locks held by udevd/8110: [ 357.909907][ T28] 1 lock held by udevd/8113: [ 357.916929][ T28] 1 lock held by udevd/8132: [ 357.918980][ T28] 1 lock held by udevd/8143: [ 357.920038][ T28] 1 lock held by syz.3.1043/9781: [ 357.922210][ T28] #0: ffff0000f5f34410 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: sock_close+0x74/0x1ec [ 357.928637][ T28] 1 lock held by syz.6.1044/9811: [ 357.931916][ T28] #0: ffff0000cfde12b8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid+0x44/0x120 [ 357.937069][ T28] 2 locks held by cmp/9814: [ 357.940358][ T28] [ 357.940797][ T28] ============================================= [ 357.940797][ T28] [ 357.946679][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 357.947913][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 357.949278][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 357.951036][ T28] Call trace: [ 357.951608][ T28] dump_backtrace+0x1c4/0x1f0 [ 357.952436][ T28] show_stack+0x2c/0x3c [ 357.953182][ T28] __dump_stack+0x30/0x40 [ 357.953902][ T28] dump_stack_lvl+0xf4/0x15c [ 357.954679][ T28] dump_stack+0x1c/0x5c [ 357.955366][ T28] panic+0x2f8/0x7ac [ 357.956052][ T28] hung_task_panic+0x0/0x2c [ 357.956890][ T28] kthread+0x254/0x2e0 [ 357.957622][ T28] ret_from_fork+0x10/0x20 [ 357.958425][ T28] SMP: stopping secondary CPUs [ 357.959282][ T28] Kernel Offset: disabled [ 357.960007][ T28] CPU features: 0x0a0000,000f0097,a65bfea7 [ 357.961010][ T28] Memory Limit: none [ 358.176022][ T28] Rebooting in 86400 seconds..