last executing test programs: 1m11.942137564s ago: executing program 2 (id=198): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10001000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, r3, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x40}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x68}}, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@dellink={0x30, 0x11, 0x20, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r6, 0x40004, 0x8012}, [@IFLA_MTU={0x8, 0x4, 0x6}, @IFLA_TXQLEN={0x8, 0xd, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24048004}, 0x4c004) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x5, 0x9, 0x4, 0x35}, 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r7}, @call={0x85, 0x0, 0x0, 0x1f}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a3312779a", 0x0, 0x2f00, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d000000000001000000000000000b40"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r10, 0x1, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x94}, 0x40004) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x5, 0x7fc00002}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r11, 0xc0502100, &(0x7f0000000fc0)) r12 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r12, 0x5452, &(0x7f0000000080)=0x1740) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000100)={{&(0x7f0000037000/0x1000)=nil, 0x1000}}) writev(r12, &(0x7f00000002c0)=[{&(0x7f00000000c0)="709f8bfb", 0x4}], 0x1) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0800a000d608000008009f0004000000000000006c090000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1m11.090157775s ago: executing program 2 (id=207): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK/file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan1\x00'}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) setns(0xffffffffffffffff, 0x24020000) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800f00, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRESOCT=r1, @ANYRES32, @ANYRES16=r8], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) r10 = dup(r2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)="c002084eb524", 0x6}, {&(0x7f0000000240)="a43b2eaab400000092e588a84c82af9e9bbb", 0x12}], 0x2) 1m10.097955549s ago: executing program 2 (id=221): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async, rerun: 32) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x0, 0x0, 0x2, 0x0, 0x0) (rerun: 32) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) chdir(&(0x7f00000003c0)='./bus\x00') (async) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) setxattr$incfs_id(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0), &(0x7f0000000140)={'0000000000000000000000000000000', 0x33}, 0x20, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1m9.982069575s ago: executing program 2 (id=224): r0 = socket$kcm(0x1e, 0x4, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x14000851}, 0x20040040) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\b'], 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRESDEC=r0, @ANYRES32, @ANYRES64=r2], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, 0x9}]}, &(0x7f0000000040)=0x10) shutdown(r4, 0x2) socket$inet_udp(0x2, 0x2, 0x0) read(r0, &(0x7f0000000400)=""/180, 0xb4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0xffffffffffffffed, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40, 0x17a00}}, 0x20}, 0x1, 0x8100, 0x0, 0x4055}, 0x1800c85c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000002c0)={r5, 0x6f}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000003c0)={r7, 0x776591e6}, 0x8) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}}}, 0xd) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x474, &(0x7f00000004c0)="$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") mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@redirect_dir_nofollow}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r10 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1) open_by_handle_at(r10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000f800000000000001fb"], 0x200000) r11 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x20) r12 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r12, &(0x7f0000000080)=[{&(0x7f0000000000)=""/57, 0x39}], 0x1, 0x33, 0x2000051b) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r11) sendmsg$NL80211_CMD_SET_KEY(r12, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000004c0)={0x48, r13, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x4c}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x8}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x0, @ANYRESOCT=r9, @ANYRES16=r1, @ANYRES32=r3, @ANYRES32=r8], 0x50}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) 1m9.06694114s ago: executing program 2 (id=239): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$pppoe(0x18, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x1e, &(0x7f0000000000)=0x1000, 0x4) socket$inet6(0xa, 0x3, 0x7f) accept(r0, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000140)=0x80) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x30040, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x109440, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x800452d2, 0xffffffffffffffff) r5 = gettid() pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000000480)={0x1, 0x3, 0x3, 0xe, 0x6, 0x3, 0x0, 0xa2, 0x7fff, 0x1, 0x10000, 0xc4, 0x1ff, 0xfffffff9}) tkill(r5, 0x7) renameat(r2, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000280)='./file1\x00') ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r6 = socket$nl_crypto(0x10, 0x3, 0x15) lsetxattr$trusted_overlay_nlink(&(0x7f0000000300)='./file1\x00', &(0x7f0000000380), &(0x7f00000003c0)={'L+', 0xc3c}, 0x16, 0x2) setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0x3, &(0x7f0000000180)=0x1, 0x4) r7 = userfaultfd(0x1) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x12, r8, 0x73c18000) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x38c}) ioctl$UFFDIO_POISON(r7, 0xc020aa08, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa8f94000) 1m8.477946582s ago: executing program 2 (id=250): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000400)=[{&(0x7f0000001040)="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", 0x42c}, {&(0x7f0000000740)="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", 0x169}], 0x2, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @local}}}], 0x20}, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000f40)=@filter={'filter\x00', 0xe, 0x4, 0x658, [0x0, 0x200008c0, 0x200008f0, 0x20000b8c], 0x0, &(0x7f0000000080), &(0x7f00000008c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0x2, 0x2, [{0x5, 0x0, 0x2, 'wlan0\x00', 'veth0_to_bridge\x00', 'pim6reg1\x00', 'wg1\x00', @local, [0xff, 0xff], @broadcast, [0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@NFLOG={'NFLOG\x00', 0x50, {{0xfffffffa, 0x2, 0x8, 0x1, 0x0, "95237cb1a6537a3097c95ea6b3024f7a29306e23441dc2426fd09ab2f887cb7bb86e421161a9ded4a16f4910f212f374cdac6c8aaceec67509050cf382cf2416"}}}}, {0x5, 0x20, 0x884c, 'batadv0\x00', 'veth0_macvtap\x00', 'veth0_vlan\x00', 'macvtap0\x00', @broadcast, [0x0, 0xff, 0xff, 0x0, 0x0, 0xdef26149345c1b1c], @empty, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xde, 0x10e, 0x186, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'wlan0\x00', 'veth0_to_bond\x00', 0x4, 0x0, 0x4, 0x7, 0x5, 0xa079, {0x81}, {0x2}}}}], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x8}}}], @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x93a6, 0x22f, 0x0, 0x0, "29cc451446d24bc3333124a61c515ca114398c2120abdc49d884cf5aa3347b916ad55a371f03408b9030a2331bb30c95476046eb10ebe7e95230664eeff573ab"}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{0x11, 0x10, 0x88b5, 'hsr0\x00', 'netpci0\x00', 'ip_vti0\x00', 'pimreg\x00', @local, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @broadcast, [0x0, 0x0, 0xff, 0xff], 0x11e, 0x1de, 0x226, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'tunl0\x00', 'geneve0\x00', 0x18, 0x0, 0x7, 0xff, 0xf, 0xa, {0x5}, {0x10}}}}, @quota={{'quota\x00', 0x0, 0x18}, {{0x1, 0x0, 0x6, {0xe}}}}], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0xfc, 0xe, {0x1}}}}, @common=@nflog={'nflog\x00', 0x50, {{0xff, 0x1, 0x758, 0x0, 0x0, "74cfe8c46af0e972de64de7b9bd86a2a551e71c11487c2e12c6aefdbf668e1defbcb9cff76c6cc37a0ecb55b86221e3504056b1848b56509a9c5462d122ec4d3"}}}], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x3, 0x5, {0xa}}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x1, [{0x3, 0x2b, 0x6002, 'veth0_virt_wifi\x00', 'veth0_to_bridge\x00', 'ip6gre0\x00', 'vlan0\x00', @random="1727efd31876", [0xff, 0xff, 0x0, 0xff], @remote, [0xff, 0xff, 0xff, 0x0, 0xff], 0x6e, 0xd6, 0x106, [], [@common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}, @common=@dnat={'dnat\x00', 0x10, {{@remote, 0xffffffffffffffff}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x1}}}}]}]}, 0x6d0) 1m8.428226013s ago: executing program 32 (id=250): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000400)=[{&(0x7f0000001040)="5346f7f875528ef24043c68e04180a332e94ee4784fffee263c06f2d924e8699b6af71aa257b5a316af31628e5148c7012f4d55ce4c29fea9e5b0b61fdf0b2dc866fa81b4e775e235eaebe330e16114548f147b8a966bf1f1fc6c24b9d47d349c87c3f789d2ba608cd25b17b6c80a7f0ceb4a06ff270ff8c9f0d3a19133f1fdfd51b767b8cef1f36e5490c5df5fcb378a6fb6eb5d8aaf7791ce81f61a05e1ebdd1789eb70ac1f3dfed378f6f3e237120052113a75ab977796117f7e7b2d6ee499f51dc070c820d10a0eaef4fc94ddc648bafae070caf70c465267497b3de963df649e113e2060c82b057abfae0798d424c81aeb42796189eb0936a2c547a5c4d6351ed786c75beb926118fb7af49ecc00b545fe2563bd4294a982980afed3f9cf390f304611db4c6d7b64d64f38db5fde5cf7cadb29c697013b710e0218660671d0051ddd7fb7f5eb72a34f469b2e20600000091817eb5b952af43d1a40f4770e7220fcdfe25d3e9747e2af76ece5922724840afdba6f6f9e1d11db8561e8e836413ee04d6e084700ec1ac0e00569f0e4d4844f4710299aabbef615c33e276544669ce074528938ec0cc6d2af1ce7a47a64ad676f08507aa08d4210f979ef4aacfa4d524c9952d4743d65c3c527302942a8880116ce7ebc6c84778346f02c806bb466db7d313d7ebc7ea87823d4a8de0b697929fb3277012327827801f75ca3c5776d1a81acb160007f73148dfaf05ab7eed5a0e603ac468eb2bcd9de5f140758e74c20a9931187e0cbc857aa62a4cec8a62f7e31af3a78cdb8608551cdd68e83aebb3c9e05519184ff996c336553fa6bf16865cd6c4eacf1e360b029cdae41070f5fd183ea0eaae427505d56994ccfd0737aae3abbc45f56710d2e3f2662bf4514044f7fa03cde28fa1783970d3c676cb23cb1923a9feb233267ef663936ccf25f7597a2270724527bf468d22786d0548b25582180b72c51742c4e5c373a1008dd4cfba508e8f3f8ec35e6f1375a11b1fbe2dc09e9fe609e80112c8f5c895c922cd547def707b7252d7afa0030d008b1dd10fd4a56e30237a6e0229fb4562cb8df3d4e64b28e15c075e59554e9d61a6065d49c1e765a49195cf5d6b1e2b6192447817fedfe41fcdf9a4fc5af567906e4b6453da7b97eac255cc253d7bceba09f67da4815438583c6843366b76d9e9277558e48681e9cfa920b47aea0e5c46ef86ea7f1ef534cf7565b24b833ba2cbfe60e6271614850dd68f2a8a6be4f315b83abb8e2699ed8e2a4b3506f9dacbb180c4deeef7489f49faf34cdf4e91a402956564f854d71c892e4aada1c91647ce45d4834d000e8d5be1773ecae388e511228977a69d4cc67fbab60ee1555a219e41eebc31807a87d9cbe88a8b05959e1a988f6ea6ed73a6ac1ec2f3d74d73eaa91a39308e008b7fa1ecc2a020f495750f9936d9c07130d950a777c0d8d131416ef55a4ec041113df65ba4aea92fcb3e2268510f316bd17f04993b647333", 0x42c}, {&(0x7f0000000740)="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", 0x169}], 0x2, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @local}}}], 0x20}, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000f40)=@filter={'filter\x00', 0xe, 0x4, 0x658, [0x0, 0x200008c0, 0x200008f0, 0x20000b8c], 0x0, &(0x7f0000000080), &(0x7f00000008c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0x2, 0x2, [{0x5, 0x0, 0x2, 'wlan0\x00', 'veth0_to_bridge\x00', 'pim6reg1\x00', 'wg1\x00', @local, [0xff, 0xff], @broadcast, [0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@NFLOG={'NFLOG\x00', 0x50, {{0xfffffffa, 0x2, 0x8, 0x1, 0x0, "95237cb1a6537a3097c95ea6b3024f7a29306e23441dc2426fd09ab2f887cb7bb86e421161a9ded4a16f4910f212f374cdac6c8aaceec67509050cf382cf2416"}}}}, {0x5, 0x20, 0x884c, 'batadv0\x00', 'veth0_macvtap\x00', 'veth0_vlan\x00', 'macvtap0\x00', @broadcast, [0x0, 0xff, 0xff, 0x0, 0x0, 0xdef26149345c1b1c], @empty, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xde, 0x10e, 0x186, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'wlan0\x00', 'veth0_to_bond\x00', 0x4, 0x0, 0x4, 0x7, 0x5, 0xa079, {0x81}, {0x2}}}}], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x8}}}], @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x93a6, 0x22f, 0x0, 0x0, "29cc451446d24bc3333124a61c515ca114398c2120abdc49d884cf5aa3347b916ad55a371f03408b9030a2331bb30c95476046eb10ebe7e95230664eeff573ab"}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{0x11, 0x10, 0x88b5, 'hsr0\x00', 'netpci0\x00', 'ip_vti0\x00', 'pimreg\x00', @local, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @broadcast, [0x0, 0x0, 0xff, 0xff], 0x11e, 0x1de, 0x226, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'tunl0\x00', 'geneve0\x00', 0x18, 0x0, 0x7, 0xff, 0xf, 0xa, {0x5}, {0x10}}}}, @quota={{'quota\x00', 0x0, 0x18}, {{0x1, 0x0, 0x6, {0xe}}}}], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0xfc, 0xe, {0x1}}}}, @common=@nflog={'nflog\x00', 0x50, {{0xff, 0x1, 0x758, 0x0, 0x0, "74cfe8c46af0e972de64de7b9bd86a2a551e71c11487c2e12c6aefdbf668e1defbcb9cff76c6cc37a0ecb55b86221e3504056b1848b56509a9c5462d122ec4d3"}}}], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x3, 0x5, {0xa}}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x1, [{0x3, 0x2b, 0x6002, 'veth0_virt_wifi\x00', 'veth0_to_bridge\x00', 'ip6gre0\x00', 'vlan0\x00', @random="1727efd31876", [0xff, 0xff, 0x0, 0xff], @remote, [0xff, 0xff, 0xff, 0x0, 0xff], 0x6e, 0xd6, 0x106, [], [@common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}, @common=@dnat={'dnat\x00', 0x10, {{@remote, 0xffffffffffffffff}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x1}}}}]}]}, 0x6d0) 1m2.778849801s ago: executing program 4 (id=308): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10000, 0x120) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0xb) (async) socket$kcm(0x29, 0x2, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1, 0x0) (async) pread64(r1, &(0x7f00000002c0)=""/124, 0x7c, 0x7) 1m2.74257314s ago: executing program 4 (id=309): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000040), 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000540)={0xe7, 0x0, 0x3, 0x8, 0x5, 0x10001, 0x20000001000, 0xf64, 0x20}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$user(&(0x7f0000000380), 0x0, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) add_key$keyring(&(0x7f00000013c0), &(0x7f0000001400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001400030532bd7000fddbdf25021f48ff", @ANYRES32=r5, @ANYBLOB="080002007f000001"], 0x34}, 0x1, 0x0, 0x0, 0x4004011}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup(r6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10000, @empty, 0x4}], 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e000000ba000000070000000000000080040000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="00000000040000000d00"/28], 0xfcf8) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) socket$inet6(0xa, 0x3, 0x6) 1m1.901628378s ago: executing program 4 (id=318): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x5}, 0x1c) (async) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x5}, 0x1c) listen(r2, 0x10040) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0xfffe, 0x0, 0x80, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x20, 0xca, 0x0, 0x42b, {[@mss={0x2, 0x4, 0x6}]}}}}}}}, 0x0) (async) syz_emit_ethernet(0x3a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0xfffe, 0x0, 0x80, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x20, 0xca, 0x0, 0x42b, {[@mss={0x2, 0x4, 0x6}]}}}}}}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="b19ccccf841132d9ec4cda81a3ef2ca8a18faee1017246ab", 0x18) sendmmsg$alg(r1, &(0x7f00000002c0)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)="0e4a6537d93d75dd45ddd849bdb95df089", 0x11}], 0x1, 0x0, 0x0, 0x81}], 0x1, 0x90) (async) sendmmsg$alg(r1, &(0x7f00000002c0)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)="0e4a6537d93d75dd45ddd849bdb95df089", 0x11}], 0x1, 0x0, 0x0, 0x81}], 0x1, 0x90) recvmmsg(r1, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/12, 0xc}, {&(0x7f0000001c00)=""/4096, 0x1000}], 0x2}, 0x260d}], 0x1, 0x2000, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001, 0x0) ioctl$sock_TIOCINQ(r3, 0x541b, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'veth0_to_hsr\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0200000d06", @ANYRES16=r5, @ANYBLOB="2d090000002000000000020000000800020000000000ecff0100", @ANYRES32=r7, @ANYBLOB="05000d002a000000"], 0x2c}}, 0x4000040) (async) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0200000d06", @ANYRES16=r5, @ANYBLOB="2d090000002000000000020000000800020000000000ecff0100", @ANYRES32=r7, @ANYBLOB="05000d002a000000"], 0x2c}}, 0x4000040) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r8, r10, 0x16, 0x0, @val=@netkit={@void, @value=r10}}, 0x1c) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r8, r10, 0x16, 0x0, @val=@netkit={@void, @value=r10}}, 0x1c) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r13, {0x6, 0x2}, {0x0, 0xfff1}, {0x2, 0x2}}, [{0x8, 0xb, 0x2e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040851}, 0x4041080) (async) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r13, {0x6, 0x2}, {0x0, 0xfff1}, {0x2, 0x2}}, [{0x8, 0xb, 0x2e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040851}, 0x4041080) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r5, 0x200, 0x70bd27, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r10}, @GTPA_LINK={0x8, 0x1, r13}, @GTPA_PEER_ADDR6={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x3b}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m1.050876029s ago: executing program 4 (id=323): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0x500, 0x2, 0x3234564e, 0x7, 0xfffffffe, 0x0, 0x9, 0xfeedcafe, 0x3, 0x1, 0x2, 0x7}}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000080)={'bond0\x00', @ifru_addrs=@in={0x2, 0x4e23, @multicast2}}) 1m0.966902182s ago: executing program 4 (id=325): ioprio_set$pid(0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002180)=ANY=[@ANYBLOB="cc0000001b0001000000000000000000ac1414aa000000000000000000000000fc01000000000000000000000000000000000000000000400000000067000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="03000000000000000000000000000000000000000000000000000000000080000000000000000000ffffffffffffffff0000000000000000fcffffffffffff7b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000a0010002e"], 0xcc}, 0x1, 0x0, 0x0, 0x848}, 0x4000000) (async) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002180)=ANY=[@ANYBLOB="cc0000001b0001000000000000000000ac1414aa000000000000000000000000fc01000000000000000000000000000000000000000000400000000067000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="03000000000000000000000000000000000000000000000000000000000080000000000000000000ffffffffffffffff0000000000000000fcffffffffffff7b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000a0010002e"], 0xcc}, 0x1, 0x0, 0x0, 0x848}, 0x4000000) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000580)=ANY=[], 0x8) (async) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000580)=ANY=[], 0x8) connect$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) (async) connect$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="82", 0x1}, {&(0x7f00000001c0)=' ', 0x1}], 0x2}}], 0x1, 0x4400c800) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="82", 0x1}, {&(0x7f00000001c0)=' ', 0x1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r1, &(0x7f00000002c0)="7ad78b0b3e9f013538c6539535526a61124105767b051ac29610080d6dd72b35c5b0ebbad886ad0449e24ae42cb85c856023b2c9f6a1a71b285c8f8ec0cb4cb917037adfbf2b4ede69731327db01374ec0c096502c11265bc6a3e4a7ca00"/117, 0x75, 0x4003b42, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) 59.999033579s ago: executing program 4 (id=342): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2010480, &(0x7f00000001c0), 0x5, 0x76a, &(0x7f0000000fc0)="$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") (async) r0 = fanotify_init(0x8, 0x40000) (async) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') (async) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x200020, 0x0, 0x28}, 0x18) fanotify_mark(r0, 0x1, 0x8100011, r1, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8ffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r2, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) (async) close_range(r0, r1, 0x0) 59.398559355s ago: executing program 0 (id=348): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) keyctl$clear(0x7, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r5, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r5, &(0x7f0000002e80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="84e483f1353f", 0x6}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r5, &(0x7f0000000200)="0600", 0x2, 0x3b00, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x73682a85, 0x0, 0x0, 0x0, 0x2, 0x3e}, @ptr={0x73682a85, 0x20000000, 0x0, 0xfc, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x1, 0xb8}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) connect$can_j1939(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r8 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0xd}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe4d}, 0x80) bind$can_j1939(r8, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r8, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) bind$can_j1939(r1, &(0x7f0000000140)={0x1d, r7, 0x1, {0x2, 0xff, 0x4}, 0xff}, 0x18) 57.566753606s ago: executing program 0 (id=364): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xa8}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x80) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000001200970228bd70000000000007"], 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r2, 0x3}, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={r2, 0x200}, &(0x7f0000000100)=0x8) socket$alg(0x26, 0x5, 0x0) 57.532374227s ago: executing program 0 (id=365): r0 = shmget(0x1, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/150) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000180)={@initdev, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1ff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x24048034) listen(r1, 0x458000) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000300)=0x0) prlimit64(r5, 0x0, &(0x7f0000000340)={0x2, 0x4}, &(0x7f0000000380)) (async) prlimit64(r5, 0x0, &(0x7f0000000340)={0x2, 0x4}, &(0x7f0000000380)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, r6, 0x0, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x48014}, 0x40) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) (async) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) socket$l2tp6(0xa, 0x2, 0x73) (async) socket$l2tp6(0xa, 0x2, 0x73) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000540)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000540)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r7, 0xc0106418, &(0x7f0000000580)={0x3, 0x5, 0x6, 0xf, 0x4, 0x7}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r1) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x74, r8, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x81}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x32b2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000cd}, 0x4000010) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0xa0081, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000780)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000780)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x3b85, &(0x7f00000007c0)={0x28, 0x2, r10, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x80000001}) r11 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000800)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000840)={0xaa, 0x149}) (async) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000840)={0xaa, 0x149}) r12 = shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_LOCK(r12, 0xb) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e0, &(0x7f0000000880)="14988cfa76f2135ca785a63fe096688debdd99f646e29733ca50f9a5f736c964fca3dd24b93baf21247c72b659b2f76db639a3ab70699b5f783cadc41684f71c83f92e3219f5b4181ebdc0edaf362b50dada4203ce4e91a564c627e856f976a346f4aa24e8eb7a2310114302d35d7aa36a3076") (async) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e0, &(0x7f0000000880)="14988cfa76f2135ca785a63fe096688debdd99f646e29733ca50f9a5f736c964fca3dd24b93baf21247c72b659b2f76db639a3ab70699b5f783cadc41684f71c83f92e3219f5b4181ebdc0edaf362b50dada4203ce4e91a564c627e856f976a346f4aa24e8eb7a2310114302d35d7aa36a3076") r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000940), r1) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x84, r13, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2bd1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0xc080}, 0x890) userfaultfd(0x800) 57.498866953s ago: executing program 0 (id=366): r0 = socket(0x2c, 0x3, 0x10000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000300000061146c4000006b00"/32], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffcce}, 0x94) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x6000}, 0x1c) 57.431692604s ago: executing program 0 (id=367): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000320007ff2cbd7000fedbdf2503"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x17) (async) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x210) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$TIOCCBRK(r1, 0x5428) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x8000, &(0x7f00000006c0)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") 57.426477704s ago: executing program 0 (id=368): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3982, 0x0) sendfile(r0, r1, 0x0, 0x40000000000b946) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x68000, 0x0) 57.056296731s ago: executing program 5 (id=371): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r5, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r5, @ANYBLOB="08000200ac1414aa"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r7 = socket(0x10, 0x803, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0d00000009000000040000000100000000000000", @ANYRES32=r8], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x1, r9, 0x4}, 0x38) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0x0, 0xa}, {0xfff1}}}, 0x24}}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCFLSH(r1, 0x80044704, 0xfffffffffffffffe) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffff0100000003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x855}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c000180060001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 56.793411222s ago: executing program 3 (id=372): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=r0], 0x7c}, 0x1, 0x0, 0x0, 0x20000055}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000040)=0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x65) capset(&(0x7f0000a31000)={0x20071026}, &(0x7f0000000080)) setpriority(0x0, 0x0, 0x9) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x7, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2eafb9fdd672bad09dfb78c7699c74e82fa0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 56.700539883s ago: executing program 1 (id=373): signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001840), 0x3b, 0x11) 56.678496395s ago: executing program 5 (id=374): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x40, 0x7f}, 0x1c) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20040084) (async) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async, rerun: 64) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) futex(&(0x7f0000000040), 0x6, 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r9 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r9) (async) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) syz_open_procfs(r8, &(0x7f0000000200)='maps\x00') (async) setreuid(0xffffffffffffffff, 0x0) (async) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000280)={0x61, 0x7d, 0x2, {{0x0, 0x47, 0x3d, 0x0, {0x10, 0x4, 0x5}, 0xe810000, 0x6, 0x0, 0x9, 0x5, 'maps\x00', 0x5, 'maps\x00', 0x5, 'maps\x00', 0x5, 'proc\x00'}, 0x5, 'task\x00'}}, 0x61) read$FUSE(r9, &(0x7f0000004180)={0x2020}, 0x2020) 56.383115065s ago: executing program 1 (id=375): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42797000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, &(0x7f0000000180)}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000fc0)=[@increfs], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42797000) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, &(0x7f0000000180)}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000fc0)=[@increfs], 0x0, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) 56.261311749s ago: executing program 3 (id=376): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) socket$kcm(0xa, 0x3, 0x3a) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002000000085000000070000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000002380)=""/192}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000680)="e0b9547ed387dbe9abc89b6f5bff", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) read$smackfs_cipsonum(r0, 0x0, 0x0) 56.259763041s ago: executing program 1 (id=377): r0 = syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x4, 0x1299, &(0x7f0000000600)="$eJzs3c1ro0UYAPAnbdqmXdtUXVd3QRz0ogjZbQ+evBTZBbGiVLuggpC1qYakHzShkCJuPXkS/DNEPXoTZP+BXrx4FgSRXjzuQXylTbo2Tb/sJyy/3yXDzDwzz3TeBt7wDu/m698s1OYbpflyM/pyucgvD0T+YYoUfdEfbevxyt1ff3v+vQ8+fGtqevr2TEp3pt6feC2lNPbCzx99/sOLD5pX7v449tNQbIz3bf41+fvGtY3rm/98H9VGqjbS4lIzldO9paVm+V69kuaqjVoppXfrlXKjkqqLjcpKV/t8fWl5uZXKi3OjI8srlUYjlRdbqVZppWYuNVdaqfxpubqYSqVSGh0JTmP2u4dZlkVk2UAMRpZl2XCMxJV4IkZjLIoxHk/GU/F0XI1n4lo8G8/F9e1el503AAAAAAAAAAAAAAAAAAAAPF6OOP+fc/4fAAAAAAAAAAAAAAAAAAAAzt/e8//5CO//BwAAAAAAAAAAAAAAAAAAgAt2xPv/95z/f9X5fwAAAAAAAAAAAAAAAAAAADgPhfbHTEqFiIWvVmdXZ9uf7fqp+ahGPSpxK4rxd2yf/m9rl++8OX37Vto2HjcX7nfi76/O9nfHTwwUYzzXFf+gEz8xHBEppe74oRjZHT8Zxbi6//yT7fn3xBfi5Ze24r9sx5eiGL98EktRj7mIXGf12/FfTKT0xjvTw93xN7b6Haj/nLcFAAAAzlIpPdJ7/77e6dRuL3S3t5s69+ep0zN3yO8De+7P83Ejf1mrZkejtVYr1+uVlRMWBg8eZ/B0I/cUchFRjt01YyN/zGxNfsxxdi63M8pnV6H/BFEnT2Pg8D6n2NPIH/uPuVYrHCfV4+9OJ/n1vTVZMWJXzc2P364dOc6f3+6qKcRZb/d+hb5HK+3rXGbl+vqxL7ZYz7JzzbDnn3G4tVYbOizq4O+M3Dl/J3Fx/tv0y84EAAAAAAAAAACA/2Pfp/+GI6LnecDPemp2Hg/vDu8d+eDZv76AFQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP+yA8cCAAAAAML8rdPo2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICvAgAA//9VqMbB") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x200}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000000)={[{@nolazytime}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0x2d) fcntl$setlease(r6, 0x400, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r9 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8b0b, &(0x7f0000000000)={'virt_wifi0\x00', @random="8dffffff0600"}) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000640)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000018c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010028bd7000ffdbdf250500000008000300", @ANYRES32=r10, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4008040}, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xab7bbb37d210f331}, 0x11, &(0x7f0000000200)={&(0x7f0000001a00)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310f2abd7000fcdbdf25310000000a0001007770616e3400000005003500060000000500360000000000000002004fd6cf14118c0d521024820cf6bca4f3917d8d40900d6d98a0ba11d02209d7e756b421227c0ad8181c1a67f811f2b862377b920fec9bf7b9b478827ffef708303bfa199e52d424bbef8e15cfe072c70a6f85a0553e404f74d43e071f199cacfdf0dee5e7eaf02ed2ddc7658128493eb188e974f4aaeb3ccd3e0c524021ecfcb5cff28e22f906f48726bb898df32946a931d22c8528760307f08876ac", @ANYRES32=r4, @ANYBLOB="0a0001007770616e3000000008000200", @ANYRES32=r10, @ANYBLOB="0500330007000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000010}, 0x8086) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21891d, &(0x7f0000000500)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@test_dummy_encryption_v1, 0x32}]}, 0x1, 0x4e8, &(0x7f0000000f40)="$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") mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x80448, 0x0) openat(r0, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 56.071791696s ago: executing program 3 (id=378): r0 = socket(0x2, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0x81, 0xffffffff, 0x80, 0x0, 0x9, 0x10007e, 0x20000006, 0x50, 0x6, 0x10000, 0x80005, 0x2, 0x8, 0xffffff01, 0x6, 0x1000, 0xfffffffb, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x4, 0x800006, 0x7, 0xe661, 0x4, 0x7, 0x10001, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x6, 0x5, 0x10000001, 0x40], [0x10000007, 0x9, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0x4000f9, 0x9, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x1, 0x1000, 0x5, 0x42f, 0xe, 0x0, 0x78, 0x8001, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x4400, 0x2401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x101, 0x3, 0x44, 0xffff80f1, 0xfffffffd, 0xfffffff8, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x6, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x200009, 0x2, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x40000009, 0x5, 0x7fff, 0x0, 0x4, 0xc303, 0x6, 0x6, 0x5, 0x5, 0x0, 0x5, 0x1, 0x10001, 0x3, 0x303c, 0x8001, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x8001, 0xd, 0x800003, 0x200, 0x400080, 0xffffffff, 0x4, 0x2950bfaf, 0x2, 0xa4, 0x7, 0xa9, 0x5, 0x6, 0x1000ac8, 0xc1, 0x2, 0x1000003, 0x7ff, 0x129, 0x4, 0x1, 0x800, 0x0, 0x5, 0x21c, 0x11fffd, 0x5, 0x2006, 0x80a2ed, 0x4, 0x24], [0x9, 0x40bb33, 0x80000000, 0xe, 0x5, 0x93e, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x9, 0x200, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10002, 0x7f, 0x2, 0x5, 0x1, 0x8, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffe, 0xfffff000, 0x4010080, 0x5, 0xd5c, 0x100, 0xff, 0x7, 0x400000ab, 0x5295, 0x6, 0x226, 0x5, 0x8005, 0x6, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010400000000000000000a00000a0900010073797a31000000000700000000000000090001006d6574610000000044000280080001400000000c080003400000000008000240000000190800014000000009080001400000000b08000140000000120700000000000015080003"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x10004880) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x80) r5 = syz_io_uring_complete(0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map=r8, 0xf, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001900)={@map=r8, r6, 0x12, 0x10, 0x0, @void, @value, @void, @void, r9}, 0x20) r10 = inotify_init1(0x800) inotify_add_watch(r10, &(0x7f0000000240)='.\x00', 0x60000526) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) inotify_add_watch(r10, &(0x7f0000005780)='./file0\x00', 0x9400002f) setxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r5, 0x16, 0x0, @val=@netkit={@void, @value=r5, @void, @void, r9}}, 0x1c) r11 = socket(0x2b, 0x1, 0x1) setsockopt$inet_tcp_int(r11, 0x6, 0x2e, &(0x7f0000000140)=0xffffffbe, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x1, 0x2}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r0, 0x0, 0x0, 0x48890, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) 56.043536527s ago: executing program 5 (id=379): r0 = socket$inet6(0xa, 0x2, 0x3a) dup(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_pidfd_open(r2, 0x0) process_mrelease(r3, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r4, @ANYRESHEX=r5], 0x15) r6 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0) write$smackfs_change_rule(r6, &(0x7f0000001480)=ANY=[@ANYBLOB='^% (@ rxt- L'], 0xe) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f0000000ac0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061121c000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 55.837434645s ago: executing program 3 (id=380): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r2, 0x2, &(0x7f0000000100)={0x1}, 0x0) landlock_restrict_self(r2, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r4}) lseek(r6, 0x2, 0x0) setpgid(r3, r3) setpgid(0x0, r3) tkill(r3, 0x7) wait4(r3, 0x0, 0x0, 0x0) r7 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f00000007c0)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") r8 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)=ANY=[@ANYBLOB="02"], 0x48, 0xffffffffffffffff) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r7, 0xc0506617, &(0x7f0000000700)={@desc={0x1, 0x0, @desc1}, 0x0, r8}) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x123003, 0x0) pwritev(r9, &(0x7f0000000040)=[{&(0x7f00000003c0)="42e8", 0x2}, {0x0, 0xfffffd66}], 0x2, 0x0, 0x1e0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'team0\x00'}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="150c000000000000140012800b0001006c6f7770616e00000400028008000500", @ANYRES16=r1, @ANYBLOB="30478bd8fa99e8725d071751f554dfe20f282a3ccc8b2a9e11beb0a565e18880f9b857e6c24b4c568b0fcd8fb981bd7ac0c816d5dbf9e2839dcd38f16afc312915724305ccf9b44a3cd980c14629ae110d1b25008613d70d53957bba1edc69509a920c3bf3946a3c54e00c6c63404a8b951b325479cd9ac3e002c3366c8daee1f4c073ba2e5e310bc676ad343ec977b6f9ccf9776ef6235c14b138c15ac5b72b1f8e1b83d557750b50af330c413ec9c829226b2287f461796be8cf1c74e81a470b1f92ec6ffd47bfd566fd7388f0bd799fd47b5a02ff155ed735ca629429fb16295c622f9b7d626bf44634e404224be923c1"], 0x3c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100fdffffbf00010000e0000002000000000000000000000000000000000000000000000000000000004e2107944e230020020000003c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c25080000000000020000000000000083000000000000000000000000000000feffffffffffffffff7f00000000000000000002000000fcffffff000000002abd700000000000020000fd2000000000000000480003006465666c61746500"/227], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x20040810) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x6}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400000}}, 0xe8) connect$inet6(r12, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setpriority(0x0, 0x0, 0x7fffffff) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'ip6gretap0\x00', 0x5dcf70ef8daa5d0e}) 55.591059177s ago: executing program 3 (id=381): lsm_set_self_attr(0x64, 0x0, 0x0, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r4, r3, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000400)={@ptr={0x66642a85, 0x1, 0x0, 0x0, 0x2, 0x2d}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000740)=""/236, 0xec, 0x1, 0x25}, @fda={0x66646185, 0x0, 0x1, 0xb4}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'erspan0\x00', {0x4}, 0x40}) lseek(0xffffffffffffffff, 0x1, 0x1) r6 = socket(0x1d, 0x2, 0x6) getsockopt$nfc_llcp(r6, 0x6a, 0x1, 0x0, 0x20000071) r7 = syz_open_procfs(0x0, &(0x7f0000019200)='net/route\x00') pread64(r7, &(0x7f0000000000)=""/102382, 0xffffffffffffffd3, 0x10) 55.504307567s ago: executing program 1 (id=382): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x8, 0x2}, 0x50) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x54}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x274, 0x14, 0x100, 0x70bd29, 0x25dfdbfd, {0x3}, [@INET_DIAG_REQ_BYTECODE={0x13, 0x1, "8ef91badaf4d0909111e647f5924dc"}, @INET_DIAG_REQ_BYTECODE={0x1a, 0x1, "f547781f1d92cba2bf434d4ce7204dfed5e6a12e93fd"}, @INET_DIAG_REQ_BYTECODE={0x4d, 0x1, "8781a9972e4ad158c2ec11c3375e739e76da1ba1de593ab7ba812da2c26c7bf8a65e72947e7913dfe9806394a42ae188aab2f0dfe0cb4a1393618d235dd5846e172025d7c18b5e599d"}, @INET_DIAG_REQ_BYTECODE={0x75, 0x1, "1afc67dc69f691bc95061172f70494cd93786a17480cfd9f13e486e4290daf16b56efa2b9782b1dc6927988186344c89ebac279042c3a9e62c55fc59add108232e304df86c53b9d15f0cc3b4b1fefb101a7463bd9e08505e281337b34bb72c62ddaf4a47296621995f693fdce9cd38ce6a"}, @INET_DIAG_REQ_BYTECODE={0x13, 0x1, "a3531e8e52082b1bc3119d4dfee7c2"}, @INET_DIAG_REQ_BYTECODE={0xa, 0x1, "10dcd8a57ca6"}, @INET_DIAG_REQ_BYTECODE={0x89, 0x1, "0e759e7262006e865ad2220d26773d113b6a768c372d8cc0b2cc183401d047e4d6b5bc86ef6847d022ee72115aa0f24f4701a762801e24ce56b235d620745e58dd2fffb67a96a245eed2eebfca997e4b618f2674d6a5be777168a16d3607257adbd330b9b49ddcf0336b372212b2ee02454394b0b8aea24d9321efb68458c7ae6dcea9fe5a"}, @INET_DIAG_REQ_BYTECODE={0x3e, 0x1, "fc0119e525101231ee0c7f5a430d9f256c366aedfc3e0cfc350e1ccd3c20fa4df4ba4ef3b3f8e3c252da5f2027a7b172f7b02e0b9219b61b3371"}, @INET_DIAG_REQ_BYTECODE={0x2d, 0x1, "9f70438dafcd919838d177ffb9cd8a2fbe545845dd908299119c58e7643aead67c9ee0fad87554abb0"}, @INET_DIAG_REQ_BYTECODE={0x49, 0x1, "cf0ba9ef1dd6a01b36902c716cfcd3a7cb7989bce0a78966df99e4990076ab5925704ba30cf32c27635e20f736a817b4e5ce27f5f01d2d079958d9c56c70bacf17e13dc1da"}]}, 0x274}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) 55.332126466s ago: executing program 1 (id=383): openat$procfs(0xffffffffffffff9c, &(0x7f0000002d80)='/proc/cgroups\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = landlock_create_ruleset(0x0, 0x41, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) landlock_restrict_self(r3, 0x0) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000880)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x5, 0x3a, 'usrjquota=\xb9\xc4\xd7A%S\n\x10i\xcf\x84\x93v\x02\xe4y}\xcbV\xbb\xc1\xd5\x06\v\xdc\xd8\\\xc5\xb3\ag\xa6u\xbe\xf4)\xae\xb6\xfe*\x9d?\xb2C\xf0<\xc9\x820M\x92Tzs\xba\xca\x9d\xad\x17\x1b\x84\xbc\xb3\xd8\xad\f\x17\xbe\x17\xb5}.H\x90\xc7\x0e\xb3y\xd0\xc3\xf0c\x04\xe6\f\x01\x00\x02\xfd_W\x9a\xa7\x81\xfcr\xe9B\x95\x13\x9f\x10\x1b5\xc0\xf9\xb5\xe1\x15Y\x9b$\xa43\xe7F>\xb7\xa1\xb7zw\xac\xc8\x12\x94\xa7\xe5\xcb\xc0g\x865\\\x9e\xca\x8e\xe2\t\xb7\b\x00\x00\x00\x00\x00\x00\x00i7b\xad\x14oVT\xcb\xea\xd3\xad\xa9\x16\xd5\xb2\xa0 \x13^\xf6>\xd4\x8bZzl\x88\xddn\xab\xd6\x12\x1f\x06', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2'}, 0x112) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r6 = fcntl$dupfd(r5, 0x406, r5) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 54.906570798s ago: executing program 5 (id=384): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000bc0)={'filter\x00', 0x7, 0x4, 0x3b8, 0x0, 0x1e8, 0x1e8, 0x2d0, 0x2d0, 0x1e8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x44, 0x2, {0xffffffffffffe8d8}}}}, {{@arp={@remote, @multicast1, 0xff000000, 0xffffff00, 0x3, 0x3, {@mac=@broadcast, {[0x1fe, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x6, 0x2, 0xd9e7, 0x1, 0x2, 0x1000, 'vxcan1\x00', 'macvlan0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x408) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000003c000000060a010400000000000000000100000008000b40fffffffc200004"], 0xb0}}, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000005c001280110001006272696467655f736c6176650000000044000580"], 0x7c}}, 0x0) (async) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) 54.671553189s ago: executing program 5 (id=385): signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001840), 0x3b, 0x11) 53.517148448s ago: executing program 5 (id=386): r0 = syz_ublk_setup_io_uring(0x722e, &(0x7f0000000000)={0x0, 0x2aa4, 0x40, 0x3, 0x307}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_modify_offsets$generic(0x0, r2, 0x34, 0x7) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000140)={0x7ff, r0, 0x0, {0x3, 0x8}}, 0x1) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_EPOLL_WAIT={0x3b, 0x45, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x30002012}], 0x1, 0x0, 0x1, {0x0, r4}}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x117}}, './file0\x00'}) syz_io_uring_submit(r1, r2, r3, &(0x7f00000003c0)=@IORING_OP_STATX={0x15, 0x1, 0x0, r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000380)='./file0\x00', 0x400, 0x100, 0x0, {0x0, r4}}) ioctl$HIDIOCGREPORT(r5, 0x400c4807, &(0x7f0000000440)={0x1, 0x0, 0x9}) bind$netlink(r5, &(0x7f0000000480)={0x10, 0x0, 0x25dfdbfe, 0x10000000}, 0xc) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r5) r7 = syz_ublk_setup_io_uring(0x4717, &(0x7f00000004c0)={0x0, 0xbfe4, 0x1000, 0x2, 0x42, 0x0, r5}, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x0, &(0x7f00000005c0)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r7, 0x18, &(0x7f0000000600)={0xc, r5, 0xa, {0x0, 0xffff}}, 0x1) syz_io_uring_submit$UBLK(r8, r9, r3, &(0x7f0000001640)=@ublk_io_need_get_data_sqe={0x2e, 0x48, 0x0, r5, 0xc0107522, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r4, '\x00', {0x2, 0x345, 0x2, &(0x7f0000000640)=@buf_512="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"}}) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f00000016c0)={0x1, 0x8000}) r12 = syz_open_dev$hiddev(&(0x7f0000001700), 0xffffffffffffffb8, 0xe400) ioctl$HIDIOCGUSAGE(r12, 0xc018480b, &(0x7f0000001740)={0x1, 0x2, 0x200, 0x0, 0x21, 0x7fff}) fsetxattr$security_capability(r12, &(0x7f0000001780), &(0x7f00000017c0)=@v3={0x3000000, [{0x5, 0x8}, {0x3, 0x6}], r6}, 0x18, 0x2) ioctl$XFS_IOC_FSBULKSTAT(r7, 0xc0205865, &(0x7f0000001940)={&(0x7f0000001800)=0x99c10000000, 0x80, &(0x7f0000001840)=[{}], &(0x7f0000001900)}) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000001980)={'tunl0\x00', @remote}) r13 = syz_io_uring_setup(0x6888, &(0x7f00000019c0)={0x0, 0x1e64, 0x1, 0x2, 0x74, 0x0, r0}, &(0x7f0000001a40), &(0x7f0000001a80), &(0x7f0000001ac0)) io_uring_enter(r13, 0x2071, 0x2204, 0xc0, &(0x7f0000001b00)={[0x1]}, 0x8) r14 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001b40)='/sys/power/image_size', 0x400400, 0x1b5) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000001b80), 0x4) close_range(r12, r10, 0x2) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000001bc0)=0xffff, 0x4) syz_ublk_setup_queues(r14, 0x0, &(0x7f0000001c00)={0x0, 0x1a5e, 0x2000, 0x2, 0x0, 0x0, r0}, &(0x7f0000001c80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbf5a, 0x800, 0x0, 0x282, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8f2c, 0x8, 0x0, 0x2b6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x832e, 0x1000, 0x2, 0x33e, 0x0, r14}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11d2, 0x400, 0x1, 0x1c2}}], 0x4, &(0x7f0000002f00)={0x2e, 0x66, 0x0, r14, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xf}, 0x0, r11, '\x00', {0x0, 0x5e5, 0x0, &(0x7f0000001f00)=@buf_512="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"}}, &(0x7f0000002f80)) syz_ublk_add_dev(r5, r8, r2, r3, &(0x7f0000003000)={0x2e, 0x4, 0x0, r14, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, r4, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000002fc0)=@any_dev={0x1, 0xe78, 0x0, 0x0, 0x1000, 0x80000000, 0xffffffffffffffff, 0x0, 0x8}}}, &(0x7f0000003080)=0x0) r17 = syz_io_uring_setup(0x373d, &(0x7f0000003140)={0x0, 0xe945, 0x1000, 0x2, 0x3a1}, &(0x7f00000031c0), &(0x7f0000003200), &(0x7f0000003240)) syz_ublk_setup_queues(r15, r16, &(0x7f00000030c0)={0x0, 0xe697, 0x2, 0x0, 0xa9, 0x0, r7}, &(0x7f0000003280)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6b51, 0x2000, 0x3, 0x330, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa564, 0x2000, 0x1, 0x377, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f2, 0x4, 0x3, 0x2a1, 0x0, r17}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeab6, 0x800, 0x0, 0x179}}], 0x4, &(0x7f0000004500)={0x2e, 0x1, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xd}, 0x0, 0x0, '\x00', {0x0, 0x5c, 0x0, &(0x7f0000003500)=@buf_1k="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"}}, &(0x7f0000004580)) 42.315159926s ago: executing program 1 (id=387): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) io_uring_setup(0x25e, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x30, r4, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) (async) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'gre0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x20, 0x40, 0x7fff, 0x8, {{0x7, 0x4, 0x3, 0x38, 0x1c, 0x64, 0x0, 0x81, 0x29, 0x0, @private=0xa010101, @remote, {[@ra={0x94, 0x4, 0x1}, @noop]}}}}}) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000780)={@private=0xa010101, @private=0xa010100, r6}, 0xc) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000480)={&(0x7f00000002c0), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r4, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xe63}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x10}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x20000091) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='net/softnet_stat\x00') (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e24, 0x23, @mcast2, 0x4}}}, &(0x7f00000006c0)=0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000700)=@assoc_value={r8, 0x2}, 0x8) (async) r9 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_mtu(r9, 0x111, 0xa, &(0x7f0000000000)=0x3, 0x4) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x1800, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) (async) r11 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b7040000020000008500000033000000850000000700000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r10}, &(0x7f0000000080), &(0x7f0000000180)=r12}, 0x20) (async) r13 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r13, &(0x7f0000000080), 0x10) (async) sendmsg$can_bcm(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmsg$can_bcm(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="05000000330100"/16, @ANYRES64=r14, @ANYRES64=r15/1000+60000, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001000000000040e0240278fe39bcbba40e8ddac3"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r12, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 22.981377026s ago: executing program 3 (id=388): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newtaction={0xbc, 0x31, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x1300}, [{0xa8, 0x1, [@m_mirred={0xa4, 0x0, 0x0, 0x0, {{0xb}, {0x24, 0x3, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x0, 0x5}}}]}, {0x56, 0x6, "3996cc3d71df82dcb312ffcfa5ba522a921bb34482a767bbb092f9baa4abbd18422a80a64ade0c8524f0ab23674bb5d1477bcd7d3994ae73c29da9dd0d8c2ed609bad048dc053795792e2cd63ca24272d900"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xbc}}, 0x0) sync() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x101}, 0x1c) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000001c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0xa, 0xa, 0x304, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x240050c0}, 0x4004001) 0s ago: executing program 33 (id=368): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3982, 0x0) sendfile(r0, r1, 0x0, 0x40000000000b946) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x68000, 0x0) kernel console output (not intermixed with test programs): 0001: unknown main item tag 0x0 [ 34.939709][ T4906] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 35.128888][ T4717] Bluetooth: hci4: command tx timeout [ 35.128925][ T4717] Bluetooth: hci1: command tx timeout [ 35.128954][ T4717] Bluetooth: hci0: command tx timeout [ 35.128970][ T4717] Bluetooth: hci3: command tx timeout [ 35.128986][ T4717] Bluetooth: hci2: command tx timeout [ 35.230344][ T4974] syz.3.21 (4974): drop_caches: 2 [ 35.241036][ T4806] binder: undelivered TRANSACTION_ERROR: 29201 [ 35.266798][ T4986] loop1: detected capacity change from 0 to 128 [ 35.382771][ T4997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.408363][ T4997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.481519][ T5008] loop2: detected capacity change from 0 to 1024 [ 35.481874][ T5008] EXT4-fs: Ignoring removed bh option [ 35.483055][ T5008] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 35.534728][ T5008] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.549843][ T5008] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #12: block 7: comm syz.2.33: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 35.555247][ T5008] EXT4-fs (loop2): Remounting filesystem read-only [ 35.555318][ T5008] overlayfs: cleanup of 'work/#9' failed (-30) [ 35.563990][ T5013] loop1: detected capacity change from 0 to 512 [ 35.566992][ T5013] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.569578][ T5013] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 35.583785][ T5013] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.34: invalid indirect mapped block 32768 (level 2) [ 35.583819][ T5013] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 35.620244][ T5013] EXT4-fs (loop1): Remounting filesystem read-only [ 35.621174][ T5013] EXT4-fs (loop1): 1 orphan inode deleted [ 35.621204][ T5013] EXT4-fs (loop1): 1 truncate cleaned up [ 35.796455][ T5017] overlayfs: Failed to link whiteout - disabling whiteout inode sharing(nlink=2, err=4294967266) [ 35.797353][ T5017] overlayfs: cleanup of 'work/#8' failed (-30) [ 35.825418][ T5013] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.868158][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.019540][ T5029] fuse: Unknown parameter 'ˆ~}ƆfÁÊ¡n-’Y{’Æ°˜>™×á&•8úrjÍ1é'bŠ [ 36.019540][ T5029] m [ 36.019540][ T5029] ªªy† !‰*IAVôßúÓ"æNMÚÝ#‘eKš©• Éš†õ¥m§5xî¢84iyä§%ì}ÏãGà¬é@'i?þxCˆøPÙPhUâþà#‡~îyù6÷aáê>‘:üÞòØÚ#>0xffffffffffffffff' [ 36.356682][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.386269][ T5045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.41'. [ 36.386296][ T5045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.41'. [ 36.415388][ T5047] loop4: detected capacity change from 0 to 256 [ 36.416330][ T5045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.41'. [ 36.416346][ T5045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.41'. [ 36.424356][ T5047] FAT-fs (loop4): Directory bread(block 64) failed [ 36.424397][ T5047] FAT-fs (loop4): Directory bread(block 65) failed [ 36.424423][ T5047] FAT-fs (loop4): Directory bread(block 66) failed [ 36.424435][ T5047] FAT-fs (loop4): Directory bread(block 67) failed [ 36.424457][ T5047] FAT-fs (loop4): Directory bread(block 68) failed [ 36.424467][ T5047] FAT-fs (loop4): Directory bread(block 69) failed [ 36.424488][ T5047] FAT-fs (loop4): Directory bread(block 70) failed [ 36.424498][ T5047] FAT-fs (loop4): Directory bread(block 71) failed [ 36.424543][ T5047] FAT-fs (loop4): Directory bread(block 72) failed [ 36.424554][ T5047] FAT-fs (loop4): Directory bread(block 73) failed [ 36.427213][ T5050] binder: 5049:5050 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 36.427226][ T5050] binder: 5050 RLIMIT_NICE not set [ 36.441703][ T5045] netlink: 'syz.2.41': attribute type 11 has an invalid length. [ 36.441734][ T5045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.41'. [ 36.618184][ T5070] Zero length message leads to an empty skb [ 36.648724][ T5090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.649934][ T5090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.700145][ T5095] loop4: detected capacity change from 0 to 128 [ 36.700510][ T5095] EXT4-fs: Ignoring removed i_version option [ 36.707707][ T5095] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 36.802939][ T4715] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.860326][ T5105] loop1: detected capacity change from 0 to 1024 [ 36.862145][ T5105] EXT4-fs: Ignoring removed bh option [ 36.862192][ T5105] EXT4-fs: inline encryption not supported [ 36.863370][ T5105] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 36.866968][ T5105] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 36.881494][ T5105] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 2: comm syz.1.57: lblock 2 mapped to illegal pblock 2 (length 1) [ 36.881539][ T5105] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 36.884382][ T5105] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 36.884429][ T5105] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 48: comm syz.1.57: lblock 0 mapped to illegal pblock 48 (length 1) [ 36.884451][ T5105] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 36.892304][ T5105] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 36.892324][ T5105] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.57: Failed to acquire dquot type 0 [ 36.892337][ T5105] loop1: lost filesystem error report for type 5 error -117 [ 36.892458][ T5105] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 36.892777][ T5105] loop1: lost filesystem error report for type 5 error -117 [ 36.895852][ T5105] EXT4-fs error (device loop1): ext4_evict_inode:267: inode #11: comm syz.1.57: mark_inode_dirty error [ 36.895876][ T5105] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 36.896823][ T5105] EXT4-fs warning (device loop1): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 36.896860][ T5105] EXT4-fs (loop1): 1 orphan inode deleted [ 36.897333][ T5105] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.902489][ T5105] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 1: comm syz.1.57: lblock 1 mapped to illegal pblock 1 (length 1) [ 36.903147][ T5105] Quota error (device loop1): find_next_id: Can't read quota tree block 1 [ 36.908875][ T5105] IPv6: NLM_F_REPLACE set, but no existing node found! [ 36.959205][ T1484] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 36.960127][ T1484] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 36.960151][ T1484] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:8: Failed to release dquot type 0 [ 36.962249][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.962657][ T4712] EXT4-fs error (device loop1): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 36.962674][ T4712] loop1: lost filesystem error report for type 5 error -117 [ 36.963087][ T4712] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 36.963105][ T4712] loop1: lost filesystem error report for type 5 error -117 [ 36.963251][ T4712] EXT4-fs error (device loop1): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 36.963263][ T4712] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 37.208860][ T4728] Bluetooth: hci2: command tx timeout [ 37.208905][ T4728] Bluetooth: hci3: command tx timeout [ 37.208937][ T4728] Bluetooth: hci0: command tx timeout [ 37.208956][ T4728] Bluetooth: hci1: command tx timeout [ 37.208975][ T4728] Bluetooth: hci4: command tx timeout [ 37.338423][ T5121] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 37.338443][ T5121] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 37.339226][ T5121] vhci_hcd vhci_hcd.0: Device attached [ 37.620114][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 37.632618][ T4799] usb 10-1: new low-speed USB device number 2 using vhci_hcd [ 38.012891][ T5121] loop4: detected capacity change from 0 to 8192 [ 38.025024][ T5121] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 38.126799][ T5123] vhci_hcd: connection reset by peer [ 38.133763][ T15] vhci_hcd vhci_hcd.4: stop threads [ 38.133997][ T15] vhci_hcd vhci_hcd.4: release socket [ 38.134239][ T15] vhci_hcd vhci_hcd.4: disconnect device [ 38.148433][ T5137] warning: `syz.2.64' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 38.153813][ T5139] netlink: 'syz.3.62': attribute type 2 has an invalid length. [ 38.227577][ T5145] IPv6: NLM_F_REPLACE set, but no existing node found! [ 38.293234][ T5149] syz.2.67 uses obsolete (PF_INET,SOCK_PACKET) [ 38.296234][ T5151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.296620][ T5151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.443318][ T5156] loop1: detected capacity change from 0 to 512 [ 38.443696][ T5156] vfat: Bad value for 'shortname' [ 38.465522][ T5158] loop0: detected capacity change from 0 to 512 [ 38.481729][ T5158] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.517582][ T5164] syz_tun: entered allmulticast mode [ 38.521665][ T5164] syz_tun: left allmulticast mode [ 38.550235][ T5168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.73'. [ 38.578507][ T5170] loop1: detected capacity change from 0 to 512 [ 38.581378][ T5170] EXT4-fs: Ignoring removed nobh option [ 38.581423][ T5170] EXT4-fs: Ignoring removed orlov option [ 38.584942][ T5170] EXT4-fs error (device loop1): __ext4_iget:5481: inode #11: block 1: comm syz.1.74: invalid block [ 38.587017][ T5170] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 38.587405][ T5170] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.74: couldn't read orphan inode 11 (err -117) [ 38.588939][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 38.588952][ C0] EXT4-fs (loop1): initial error at time 38: __ext4_iget:5481: inode 11: block 1 [ 38.588977][ C0] EXT4-fs (loop1): last error at time 38: __ext4_iget:5481: inode 11: block 1 [ 38.593653][ T5170] loop1: lost filesystem error report for type 5 error -117 [ 38.594618][ T5170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.596465][ T5170] EXT4-fs error (device loop1): htree_dirblock_to_tree:1051: inode #2: comm syz.1.74: Directory hole found for htree leaf block 0 [ 38.688140][ T5172] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 38.916170][ T5174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.75'. [ 38.918543][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.100703][ T5193] loop4: detected capacity change from 0 to 128 [ 39.102398][ T5193] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 39.210518][ T5199] process 'syz.3.83' launched './file0' with NULL argv: empty string added [ 39.237798][ T5206] loop3: detected capacity change from 0 to 512 [ 39.238677][ T5206] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 39.243222][ T5206] EXT4-fs (loop3): 1 truncate cleaned up [ 39.244982][ T5206] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.264767][ T5204] Injecting memory failure for pfn 0x134d92 at process virtual address 0x20000000 [ 39.278726][ T5204] Memory failure: 0x134d92: Sending SIGBUS to syz.4.84:5204 due to hardware memory corruption [ 39.280141][ T5204] Memory failure: 0x134d92: recovery action for dirty LRU page: Recovered [ 39.280195][ T5204] Injecting memory failure for pfn 0x134830 at process virtual address 0x20001000 [ 39.280788][ T5204] Memory failure: 0x134830: recovery action for clean LRU page: Recovered [ 39.280845][ T5204] Injecting memory failure for pfn 0x1167d6 at process virtual address 0x20002000 [ 39.280911][ T5204] Memory failure: 0x1167d6: recovery action for clean LRU page: Recovered [ 39.280958][ T5204] Injecting memory failure for pfn 0x116626 at process virtual address 0x20003000 [ 39.281028][ T5204] Memory failure: 0x116626: recovery action for clean LRU page: Recovered [ 39.281088][ T5204] Injecting memory failure for pfn 0x11d2b2 at process virtual address 0x20004000 [ 39.281186][ T5204] Memory failure: 0x11d2b2: recovery action for clean LRU page: Recovered [ 39.281277][ T5204] Injecting memory failure for pfn 0x11d239 at process virtual address 0x20005000 [ 39.281436][ T5204] Memory failure: 0x11d239: recovery action for clean LRU page: Recovered [ 39.281628][ T5204] Injecting memory failure for pfn 0x116639 at process virtual address 0x20006000 [ 39.283887][ T5204] Memory failure: 0x116639: recovery action for clean LRU page: Recovered [ 39.284301][ T5204] Injecting memory failure for pfn 0x1215af at process virtual address 0x20007000 [ 39.284960][ T5204] Memory failure: 0x1215af: recovery action for clean LRU page: Recovered [ 39.285347][ T5204] Injecting memory failure for pfn 0x11dc4f at process virtual address 0x20008000 [ 39.285979][ T5204] Memory failure: 0x11dc4f: recovery action for clean LRU page: Recovered [ 39.286365][ T5204] Injecting memory failure for pfn 0x12153e at process virtual address 0x20009000 [ 39.287092][ T5204] Memory failure: 0x12153e: recovery action for clean LRU page: Recovered [ 39.287478][ T5204] Injecting memory failure for pfn 0x1212aa at process virtual address 0x2000a000 [ 39.288104][ T5204] Memory failure: 0x1212aa: recovery action for clean LRU page: Recovered [ 39.288479][ T5204] Injecting memory failure for pfn 0x121119 at process virtual address 0x2000b000 [ 39.289123][ T5204] Memory failure: 0x121119: recovery action for clean LRU page: Recovered [ 39.289495][ T5204] Injecting memory failure for pfn 0x1210d6 at process virtual address 0x2000c000 [ 39.290039][ T5204] Memory failure: 0x1210d6: recovery action for clean LRU page: Recovered [ 39.290114][ T4717] Bluetooth: hci4: command tx timeout [ 39.290137][ T4717] Bluetooth: hci1: command tx timeout [ 39.290157][ T4717] Bluetooth: hci0: command tx timeout [ 39.290173][ T4717] Bluetooth: hci3: command tx timeout [ 39.290187][ T4717] Bluetooth: hci2: command tx timeout [ 39.290466][ T5204] Injecting memory failure for pfn 0x1210fa at process virtual address 0x2000d000 [ 39.291011][ T5204] Memory failure: 0x1210fa: recovery action for clean LRU page: Recovered [ 39.291380][ T5204] Injecting memory failure for pfn 0x1210f7 at process virtual address 0x2000e000 [ 39.291988][ T5204] Memory failure: 0x1210f7: recovery action for clean LRU page: Recovered [ 39.292360][ T5204] Injecting memory failure for pfn 0x11fefc at process virtual address 0x2000f000 [ 39.293036][ T5204] Memory failure: 0x11fefc: recovery action for clean LRU page: Recovered [ 39.293403][ T5204] Injecting memory failure for pfn 0x1216e7 at process virtual address 0x20010000 [ 39.294055][ T5204] Memory failure: 0x1216e7: recovery action for clean LRU page: Recovered [ 39.294421][ T5204] Injecting memory failure for pfn 0x121077 at process virtual address 0x20011000 [ 39.295021][ T5204] Memory failure: 0x121077: recovery action for clean LRU page: Recovered [ 39.295386][ T5204] Injecting memory failure for pfn 0x121129 at process virtual address 0x20012000 [ 39.295977][ T5204] Memory failure: 0x121129: recovery action for clean LRU page: Recovered [ 39.296341][ T5204] Injecting memory failure for pfn 0x1216eb at process virtual address 0x20013000 [ 39.296877][ T5204] Memory failure: 0x1216eb: recovery action for clean LRU page: Recovered [ 39.297299][ T5204] Injecting memory failure for pfn 0x12340d at process virtual address 0x20014000 [ 39.297838][ T5204] Memory failure: 0x12340d: recovery action for clean LRU page: Recovered [ 39.298206][ T5204] Injecting memory failure for pfn 0x1210b3 at process virtual address 0x20015000 [ 39.299057][ T5204] Memory failure: 0x1210b3: recovery action for clean LRU page: Recovered [ 39.299493][ T5204] Injecting memory failure for pfn 0x1215ad at process virtual address 0x20016000 [ 39.300042][ T5204] Memory failure: 0x1215ad: recovery action for clean LRU page: Recovered [ 39.300409][ T5204] Injecting memory failure for pfn 0x1e41f1 at process virtual address 0x20017000 [ 39.301005][ T5204] Memory failure: 0x1e41f1: recovery action for clean LRU page: Recovered [ 39.301375][ T5204] Injecting memory failure for pfn 0x121116 at process virtual address 0x20018000 [ 39.301973][ T5204] Memory failure: 0x121116: recovery action for clean LRU page: Recovered [ 39.302341][ T5204] Injecting memory failure for pfn 0x121115 at process virtual address 0x20019000 [ 39.303003][ T5204] Memory failure: 0x121115: recovery action for clean LRU page: Recovered [ 39.303372][ T5204] Injecting memory failure for pfn 0x11eda9 at process virtual address 0x2001a000 [ 39.304332][ T5204] Memory failure: 0x11eda9: recovery action for clean LRU page: Recovered [ 39.304754][ T5204] Injecting memory failure for pfn 0x11fa5e at process virtual address 0x2001b000 [ 39.305373][ T5204] Memory failure: 0x11fa5e: recovery action for clean LRU page: Recovered [ 39.305758][ T5204] Injecting memory failure for pfn 0x11f923 at process virtual address 0x2001c000 [ 39.306359][ T5204] Memory failure: 0x11f923: recovery action for clean LRU page: Recovered [ 39.306738][ T5204] Injecting memory failure for pfn 0x11fa6f at process virtual address 0x2001d000 [ 39.307348][ T5204] Memory failure: 0x11fa6f: recovery action for clean LRU page: Recovered [ 39.307726][ T5204] Injecting memory failure for pfn 0x11fa5c at process virtual address 0x2001e000 [ 39.308316][ T5204] Memory failure: 0x11fa5c: recovery action for clean LRU page: Recovered [ 39.308696][ T5204] Injecting memory failure for pfn 0x11efcc at process virtual address 0x2001f000 [ 39.309407][ T5204] Memory failure: 0x11efcc: recovery action for clean LRU page: Recovered [ 39.309778][ T5204] Injecting memory failure for pfn 0x11d130 at process virtual address 0x20020000 [ 39.310494][ T5204] Memory failure: 0x11d130: recovery action for clean LRU page: Recovered [ 39.310870][ T5204] Injecting memory failure for pfn 0x123a8e at process virtual address 0x20021000 [ 39.311405][ T5204] Memory failure: 0x123a8e: recovery action for clean LRU page: Recovered [ 39.311834][ T5204] Injecting memory failure for pfn 0x12024f at process virtual address 0x20022000 [ 39.312745][ T5204] Memory failure: 0x12024f: recovery action for clean LRU page: Recovered [ 39.313179][ T5204] Injecting memory failure for pfn 0x123a89 at process virtual address 0x20023000 [ 39.313733][ T5204] Memory failure: 0x123a89: recovery action for clean LRU page: Recovered [ 39.314104][ T5204] Injecting memory failure for pfn 0x13386e at process virtual address 0x20024000 [ 39.314767][ T5204] Memory failure: 0x13386e: recovery action for clean LRU page: Recovered [ 39.315142][ T5204] Injecting memory failure for pfn 0x1239a3 at process virtual address 0x20025000 [ 39.315767][ T5204] Memory failure: 0x1239a3: recovery action for clean LRU page: Recovered [ 39.316140][ T5204] Injecting memory failure for pfn 0x1216d5 at process virtual address 0x20026000 [ 39.316753][ T5204] Memory failure: 0x1216d5: recovery action for clean LRU page: Recovered [ 39.317126][ T5204] Injecting memory failure for pfn 0x1215c7 at process virtual address 0x20027000 [ 39.317737][ T5204] Memory failure: 0x1215c7: recovery action for clean LRU page: Recovered [ 39.318110][ T5204] Injecting memory failure for pfn 0x1216f9 at process virtual address 0x20028000 [ 39.318701][ T5204] Memory failure: 0x1216f9: recovery action for clean LRU page: Recovered [ 39.319211][ T5204] Injecting memory failure for pfn 0x1216d9 at process virtual address 0x20029000 [ 39.319836][ T5204] Memory failure: 0x1216d9: recovery action for clean LRU page: Recovered [ 39.320207][ T5204] Injecting memory failure for pfn 0x133dcb at process virtual address 0x2002a000 [ 39.320742][ T5204] Memory failure: 0x133dcb: recovery action for clean LRU page: Recovered [ 39.321168][ T5204] Injecting memory failure for pfn 0x11d040 at process virtual address 0x2002b000 [ 39.321709][ T5204] Memory failure: 0x11d040: recovery action for clean LRU page: Recovered [ 39.322082][ T5204] Injecting memory failure for pfn 0x12113b at process virtual address 0x2002c000 [ 39.322683][ T5204] Memory failure: 0x12113b: recovery action for clean LRU page: Recovered [ 39.323125][ T5204] Injecting memory failure for pfn 0x11fa2f at process virtual address 0x2002d000 [ 39.323724][ T5204] Memory failure: 0x11fa2f: recovery action for clean LRU page: Recovered [ 39.324101][ T5204] Injecting memory failure for pfn 0x11f190 at process virtual address 0x2002e000 [ 39.324755][ T5204] Memory failure: 0x11f190: recovery action for clean LRU page: Recovered [ 39.325131][ T5204] Injecting memory failure for pfn 0x12112b at process virtual address 0x2002f000 [ 39.325727][ T5204] Memory failure: 0x12112b: recovery action for clean LRU page: Recovered [ 39.326098][ T5204] Injecting memory failure for pfn 0x135480 at process virtual address 0x20030000 [ 39.326968][ T5204] Memory failure: 0x135480: recovery action for clean LRU page: Recovered [ 39.327359][ T5204] Injecting memory failure for pfn 0x1361c6 at process virtual address 0x20031000 [ 39.327997][ T5204] Memory failure: 0x1361c6: recovery action for clean LRU page: Recovered [ 39.328369][ T5204] Injecting memory failure for pfn 0x1361c5 at process virtual address 0x20032000 [ 39.329024][ T5204] Memory failure: 0x1361c5: recovery action for clean LRU page: Recovered [ 39.329396][ T5204] Injecting memory failure for pfn 0x135617 at process virtual address 0x20033000 [ 39.330722][ T5204] Memory failure: 0x135617: recovery action for clean LRU page: Recovered [ 39.331120][ T5204] Injecting memory failure for pfn 0x135788 at process virtual address 0x20034000 [ 39.331686][ T5204] Memory failure: 0x135788: recovery action for clean LRU page: Recovered [ 39.332409][ T5204] Injecting memory failure for pfn 0x135618 at process virtual address 0x20035000 [ 39.332961][ T5204] Memory failure: 0x135618: recovery action for clean LRU page: Recovered [ 39.333350][ T5204] Injecting memory failure for pfn 0x11d03c at process virtual address 0x20036000 [ 39.334010][ T5204] Memory failure: 0x11d03c: recovery action for clean LRU page: Recovered [ 39.334387][ T5204] Injecting memory failure for pfn 0x135614 at process virtual address 0x20037000 [ 39.335045][ T5204] Memory failure: 0x135614: recovery action for clean LRU page: Recovered [ 39.335423][ T5204] Injecting memory failure for pfn 0x1165ef at process virtual address 0x20038000 [ 39.376365][ T4718] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.390892][ T5204] Memory failure: 0x1165ef: recovery action for clean LRU page: Recovered [ 39.414021][ T5211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.85'. [ 39.421936][ T5211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.85'. [ 39.480634][ T5216] loop0: detected capacity change from 0 to 512 [ 39.481390][ T5217] loop2: detected capacity change from 0 to 512 [ 39.500719][ T5215] loop0: detected capacity change from 0 to 512 [ 39.502114][ T5217] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.88: invalid indirect mapped block 256 (level 2) [ 39.502132][ T5217] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 39.505041][ T5217] EXT4-fs (loop2): 2 truncates cleaned up [ 39.505487][ T5217] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.531929][ T5215] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.534279][ T5215] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #2: comm syz.0.87: corrupted inode contents [ 39.538247][ T5215] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #2: comm syz.0.87: mark_inode_dirty error [ 39.538528][ T5215] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #2: comm syz.0.87: corrupted inode contents [ 39.543844][ T5215] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.87: mark_inode_dirty error [ 39.625464][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.668877][ T5206] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 39.674352][ T30] audit: type=1326 audit(39.660:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5223 comm="syz.2.89" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffafb77b68 code=0x7ffc0000 [ 39.674390][ T30] audit: type=1326 audit(39.660:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5223 comm="syz.2.89" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffafb77b68 code=0x7ffc0000 [ 39.674410][ T30] audit: type=1326 audit(39.660:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5223 comm="syz.2.89" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffafb77b68 code=0x7ffc0000 [ 39.674427][ T30] audit: type=1326 audit(39.660:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5223 comm="syz.2.89" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffafb77b68 code=0x7ffc0000 [ 39.674592][ T30] audit: type=1326 audit(39.660:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5223 comm="syz.2.89" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffafb5aa2c code=0x7ffc0000 [ 39.676511][ T30] audit: type=1326 audit(39.660:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5223 comm="syz.2.89" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=215 compat=0 ip=0xffffafb7790c code=0x7ffc0000 [ 39.680743][ T5225] loop2: detected capacity change from 0 to 512 [ 39.700026][ T5206] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 39.791993][ T4723] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.895869][ T5232] ext4: Bad value for 'min_batch_time' [ 39.901406][ T4718] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.994939][ T5232] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.995012][ T5232] EXT4-fs: Ignoring removed oldalloc option [ 40.006647][ T5230] fuse: root generation should be zero [ 40.040560][ T5232] ext4: Bad value for 'barrier' [ 40.123195][ T5238] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.93: iget: bad i_size value: 38620345925642 [ 40.123238][ T5238] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 40.128760][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 40.128780][ C1] EXT4-fs (loop0): initial error at time 40: ext4_orphan_get:1397: inode 15 [ 40.128797][ C1] EXT4-fs (loop0): last error at time 40: ext4_orphan_get:1397: inode 15 [ 40.138442][ T5238] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.93: couldn't read orphan inode 15 (err -117) [ 40.138489][ T5238] loop0: lost filesystem error report for type 5 error -117 [ 40.141871][ T5238] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.159593][ T5240] overlayfs: missing 'lowerdir' [ 40.188277][ T5243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.195985][ T5243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.285437][ T39] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm kworker/u8:2: bg 0: block 5: invalid block bitmap [ 40.291029][ T39] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 40.293922][ T39] EXT4-fs (loop0): This should not happen!! Data will be lost [ 40.293922][ T39] [ 40.295837][ T39] EXT4-fs (loop0): Total free blocks count 0 [ 40.296949][ T39] EXT4-fs (loop0): Free/Dirty block details [ 40.298107][ T39] EXT4-fs (loop0): free_blocks=0 [ 40.299410][ T39] EXT4-fs (loop0): dirty_blocks=6256 [ 40.300567][ T39] EXT4-fs (loop0): Block reservation details [ 40.301839][ T39] EXT4-fs (loop0): i_reserved_data_blocks=6256 [ 40.317539][ T39] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 40.328237][ T4718] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 40.412810][ T5251] EXT4-fs: Ignoring removed orlov option [ 40.421542][ T5251] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 40.421652][ T5251] EXT4-fs warning (device loop0): read_mmp_block:111: Error -117 while reading MMP block 0 [ 40.513863][ T5257] FAT-fs (loop1): bogus logical sector size 65535 [ 40.513905][ T5257] FAT-fs (loop1): Can't find a valid FAT filesystem [ 40.518969][ T5257] input: syz0 as /devices/virtual/input/input3 [ 40.523541][ T5257] netlink: 16 bytes leftover after parsing attributes in process `syz.1.99'. [ 40.528579][ T5257] veth1_to_batadv: entered promiscuous mode [ 40.535409][ T5257] veth1_to_batadv: left promiscuous mode [ 40.742162][ T5268] ======================================================= [ 40.742162][ T5268] WARNING: The mand mount option has been deprecated and [ 40.742162][ T5268] and is ignored by this kernel. Remove the mand [ 40.742162][ T5268] option from the mount to silence this warning. [ 40.742162][ T5268] ======================================================= [ 40.742231][ T5268] vfat: Bad value for 'shortname' [ 41.096393][ T5276] vfat: Unknown parameter '00000000000000000000003' [ 41.155340][ T5267] FAT-fs (loop1): error, corrupted file size (i_pos 196, 2097152) [ 41.155376][ T5267] FAT-fs (loop1): Filesystem has been set read-only [ 41.178345][ T5283] EXT4-fs: Ignoring removed bh option [ 41.182012][ T5283] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 41.188302][ T5267] FAT-fs (loop1): error, corrupted file size (i_pos 196, 2097152) [ 41.204443][ T5283] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.322943][ T5288] xt_hashlimit: max too large, truncated to 1048576 [ 41.322992][ T5288] xt_hashlimit: overflow, rate too high: 0 [ 41.324135][ T5288] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.339059][ T5290] netlink: 16 bytes leftover after parsing attributes in process `syz.0.108'. [ 41.342617][ T5290] bond0: entered promiscuous mode [ 41.342944][ T5290] bond_slave_0: entered promiscuous mode [ 41.343058][ T5290] bond_slave_1: entered promiscuous mode [ 41.345489][ T5290] team0: entered promiscuous mode [ 41.345530][ T5290] team_slave_0: entered promiscuous mode [ 41.345599][ T5290] team_slave_1: entered promiscuous mode [ 41.348350][ T5290] hsr1: entered promiscuous mode [ 41.348601][ T5290] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 41.459124][ T5297] netlink: 48 bytes leftover after parsing attributes in process `syz.1.111'. [ 41.609260][ T5306] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.619660][ T5306] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8802c018, mo2=0002] [ 41.620196][ T5306] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 41.627864][ T5306] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.114: bg 0: block 112: padding at end of block bitmap is not set [ 41.632591][ T5306] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 41.632626][ T5306] EXT4-fs (loop4): This should not happen!! Data will be lost [ 41.632626][ T5306] [ 41.632636][ T5306] EXT4-fs (loop4): Total free blocks count 0 [ 41.632645][ T5306] EXT4-fs (loop4): Free/Dirty block details [ 41.632662][ T5306] EXT4-fs (loop4): free_blocks=0 [ 41.632675][ T5306] EXT4-fs (loop4): dirty_blocks=64 [ 41.632682][ T5306] EXT4-fs (loop4): Block reservation details [ 41.632688][ T5306] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 41.633566][ T5306] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm syz.4.114: lblock 0 mapped to illegal pblock 0 (length 1) [ 41.636122][ T5306] No control pipe specified [ 41.650672][ T4715] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 41.651466][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 41.677855][ T5320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.680351][ T5320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.012536][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.133203][ T5341] loop3: AHDI p2 p3 [ 42.133307][ T5341] loop3: p2 size 4076863487 extends beyond EOD, truncated [ 42.255212][ T5347] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 42.774303][ T5362] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 42.779648][ T5358] Injecting memory failure for pfn 0x13b615 at process virtual address 0x201bd000 [ 42.798624][ T5376] Invalid source name [ 42.798651][ T5376] UBIFS error (pid: 5376): cannot open "/dev/loop3", error -22 [ 42.798884][ T4799] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 42.800084][ T5362] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.819525][ T5358] Memory failure: 0x13b615: Sending SIGBUS to syz.4.126:5358 due to hardware memory corruption [ 42.823117][ T5358] Memory failure: 0x13b615: recovery action for dirty LRU page: Recovered [ 42.823157][ T5358] Injecting memory failure for pfn 0x13b616 at process virtual address 0x201be000 [ 42.826266][ T5358] Memory failure: 0x13b616: Sending SIGBUS to syz.4.126:5358 due to hardware memory corruption [ 42.826303][ T5358] Memory failure: 0x13b616: recovery action for dirty LRU page: Recovered [ 42.826325][ T5358] Injecting memory failure for pfn 0x13b617 at process virtual address 0x201bf000 [ 42.831190][ T5358] Memory failure: 0x13b617: Sending SIGBUS to syz.4.126:5358 due to hardware memory corruption [ 42.832858][ T5358] Memory failure: 0x13b617: recovery action for dirty LRU page: Recovered [ 42.865350][ T5377] ieee802154 phy0 wpan0: encryption failed: -22 [ 42.979137][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.987810][ T5382] loop1: p1 p3 < > [ 42.998455][ T5389] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.048119][ T5389] fs-verity (loop3, inode 15): Unrecognized descriptor size: 0 bytes [ 43.051459][ T5395] netlink: 28 bytes leftover after parsing attributes in process `syz.2.134'. [ 43.065171][ T5389] netlink: 'syz.3.133': attribute type 21 has an invalid length. [ 43.065228][ T5389] netlink: 156 bytes leftover after parsing attributes in process `syz.3.133'. [ 43.091916][ T5397] syzkaller0: entered promiscuous mode [ 43.091955][ T5397] syzkaller0: entered allmulticast mode [ 43.106081][ T4723] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.171336][ T4706] udevd[4706]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 43.178556][ T3844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.178591][ T3844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.196572][ T4994] udevd[4994]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 43.215325][ T5408] set_capacity_and_notify: 16 callbacks suppressed [ 43.216614][ T5408] loop0: detected capacity change from 0 to 2048 [ 43.219066][ T5410] netlink: 'syz.2.141': attribute type 4 has an invalid length. [ 43.242770][ T5408] loop0: p3 < > p4 < > [ 43.243122][ T5408] loop0: partition table partially beyond EOD, truncated [ 43.243312][ T5408] loop0: p3 start 4284289 is beyond EOD, truncated [ 43.335109][ T5428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.146'. [ 43.362068][ T5433] tmpfs: Bad value for 'mpol' [ 43.451890][ T5441] loop1: detected capacity change from 0 to 512 [ 43.452182][ T5441] EXT4-fs: quotafile must be on filesystem root [ 43.465402][ T5439] syzkaller0: entered promiscuous mode [ 43.468810][ T5439] syzkaller0: entered allmulticast mode [ 43.570621][ T5442] loop0: detected capacity change from 0 to 128 [ 43.598291][ T5442] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.606389][ T5437] Injecting memory failure for pfn 0x11b000 at process virtual address 0x20000000 [ 43.610160][ T5437] Memory failure: 0x11b000: Failed to invalidate [ 43.610170][ T5437] Memory failure: 0x11b000: dirty LRU page still referenced by 1 users [ 43.610180][ T5437] Memory failure: 0x11b000: recovery action for dirty LRU page: Failed [ 43.636919][ T4718] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.853130][ T4728] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 43.853175][ T4728] Bluetooth: hci4: Injecting HCI hardware error event [ 43.853785][ T4717] Bluetooth: hci4: hardware error 0x00 [ 43.864704][ T5451] fuse: Bad value for 'user_id' [ 43.864730][ T5451] fuse: Bad value for 'user_id' [ 44.013232][ T5458] netlink: 'syz.2.156': attribute type 29 has an invalid length. [ 44.013438][ T5458] netlink: 'syz.2.156': attribute type 29 has an invalid length. [ 44.013937][ T5459] netlink: 52 bytes leftover after parsing attributes in process `syz.2.156'. [ 44.016899][ T5459] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.017197][ T5459] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.036019][ T5458] loop2: detected capacity change from 0 to 4096 [ 44.038492][ T5458] EXT4-fs (loop2): Test dummy encryption mode enabled [ 44.043887][ T5458] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c018, mo2=0003] [ 44.044782][ T5458] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.053379][ T5458] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 44.080580][ T5463] trusted_key: syz.4.157 sent an empty control message without MSG_MORE. [ 44.111906][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.159088][ T5480] loop2: detected capacity change from 0 to 512 [ 44.160021][ T5480] EXT4-fs: Ignoring removed bh option [ 44.161604][ T5480] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.160: corrupted in-inode xattr: e_value size too large [ 44.161642][ T5480] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 44.161803][ T5480] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.160: couldn't read orphan inode 15 (err -117) [ 44.161817][ T5480] loop2: lost filesystem error report for type 5 error -117 [ 44.171744][ T5480] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.190673][ T5480] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #12: comm syz.2.160: corrupted in-inode xattr: bad e_name length [ 44.193947][ T5480] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #12: comm syz.2.160: corrupted in-inode xattr: bad e_name length [ 44.273382][ T5498] loop3: detected capacity change from 0 to 512 [ 44.276266][ T5498] EXT4-fs: Ignoring removed bh option [ 44.286795][ T5498] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.168: corrupted in-inode xattr: e_value size too large [ 44.289529][ T5498] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 44.290297][ T5498] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.168: couldn't read orphan inode 15 (err -117) [ 44.294378][ T5498] loop3: lost filesystem error report for type 5 error -117 [ 44.302620][ T5505] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.303075][ T5505] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.308180][ T5498] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.310882][ T5505] bridge0: entered allmulticast mode [ 44.315555][ T5507] netlink: 'syz.1.169': attribute type 58 has an invalid length. [ 44.315579][ T5507] netlink: 468 bytes leftover after parsing attributes in process `syz.1.169'. [ 44.316490][ T5505] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 44.317055][ T5507] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 44.364261][ T5512] loop4: detected capacity change from 0 to 1024 [ 44.371214][ T5512] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 44.374242][ T5514] loop1: detected capacity change from 0 to 1024 [ 44.375343][ T5514] EXT4-fs: inline encryption not supported [ 44.380267][ T4723] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.382909][ T5514] EXT4-fs (loop1): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 44.400588][ T5514] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.565102][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 44.600345][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.653067][ T5529] Injecting memory failure for pfn 0x13e7dd at process virtual address 0x201dd000 [ 44.656829][ T5529] Memory failure: 0x13e7dd: recovery action for clean LRU page: Recovered [ 44.685285][ T5532] binder: BINDER_SET_CONTEXT_MGR already set [ 44.685311][ T5532] binder: 5530:5532 ioctl 4018620d 20000040 returned -16 [ 44.685443][ T5532] binder: 5530:5532 got transaction to invalid handle, 1 [ 44.685453][ T5532] binder: 5530:5532 cannot find target node [ 44.685464][ T5532] binder: 5530:5532 transaction call to 0:0 failed 9/29201/-22, code 0 size -176-24 line 3236 [ 44.685484][ T5532] binder: 5530:5532 ioctl c0306201 20000880 returned -14 [ 44.705162][ T5538] loop0: detected capacity change from 0 to 512 [ 44.705493][ T5538] EXT4-fs: Ignoring removed bh option [ 44.716121][ T5538] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 44.716164][ T5538] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 44.727570][ T5538] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 44.727988][ T5538] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 44.728926][ T5538] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.733689][ T4813] binder: undelivered TRANSACTION_ERROR: 29201 [ 44.777842][ T5538] syz_tun: entered allmulticast mode [ 44.796666][ T5546] netlink: 32 bytes leftover after parsing attributes in process `syz.1.180'. [ 44.798480][ T5546] netlink: 32 bytes leftover after parsing attributes in process `syz.1.180'. [ 44.803325][ T5546] netlink: 22 bytes leftover after parsing attributes in process `syz.1.180'. [ 44.805522][ T5534] syz_tun: left allmulticast mode [ 44.858070][ T4718] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.970048][ T5552] loop4: detected capacity change from 0 to 8192 [ 45.061809][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.119683][ T5552] loop4: AHDI p1 p2 p3 p4 [ 45.119773][ T5552] loop4: p1 start 65535 is beyond EOD, truncated [ 45.122933][ T5552] loop4: p3 start 1671679 is beyond EOD, truncated [ 45.122969][ T5552] loop4: p4 size 1073741824 extends beyond EOD, truncated [ 45.245334][ T4994] udevd[4994]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 45.251981][ T4706] udevd[4706]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 45.282406][ T5576] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 45.400890][ T5583] netlink: 52 bytes leftover after parsing attributes in process `syz.4.192'. [ 45.400927][ T5583] netlink: 'syz.4.192': attribute type 1 has an invalid length. [ 45.402435][ T5583] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 45.752958][ T5602] EXT4-fs (loop1): bad s_want_extra_isize: 65312 [ 46.008860][ T4717] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 46.074178][ T5627] netlink: 44 bytes leftover after parsing attributes in process `syz.3.199'. [ 46.102805][ T5629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.102988][ T5629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.132938][ T5630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.198'. [ 46.328931][ T4813] atkbd serio0: keyboard reset failed on [ 46.735172][ T5644] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.743380][ T5644] Injecting memory failure for pfn 0x1360a4 at process virtual address 0x20000000 [ 46.746743][ T5644] Memory failure: 0x1360a4: Sending SIGBUS to syz.1.205:5644 due to hardware memory corruption [ 46.746869][ T5644] Memory failure: 0x1360a4: recovery action for dirty LRU page: Recovered [ 46.796287][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.828044][ T5650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.206'. [ 46.828091][ T5650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.206'. [ 47.071326][ T5655] loop1: p1 p2 p3 [ 47.071326][ T5655] p1: [ 47.075085][ T5655] loop1: p3 start 65280 is beyond EOD, truncated [ 47.210452][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 47.501867][ T5682] virtiofs: Unknown parameter 'ÖC—à' [ 47.839611][ T5686] FAT-fs (loop1): Directory bread(block 64) failed [ 47.839654][ T5686] FAT-fs (loop1): Directory bread(block 65) failed [ 47.839703][ T5686] FAT-fs (loop1): Directory bread(block 66) failed [ 47.839719][ T5686] FAT-fs (loop1): Directory bread(block 67) failed [ 47.839748][ T5686] FAT-fs (loop1): Directory bread(block 68) failed [ 47.839762][ T5686] FAT-fs (loop1): Directory bread(block 69) failed [ 47.839786][ T5686] FAT-fs (loop1): Directory bread(block 70) failed [ 47.839797][ T5686] FAT-fs (loop1): Directory bread(block 71) failed [ 47.839819][ T5686] FAT-fs (loop1): Directory bread(block 72) failed [ 47.839829][ T5686] FAT-fs (loop1): Directory bread(block 73) failed [ 47.936177][ T5698] netlink: 'syz.1.220': attribute type 1 has an invalid length. [ 47.938455][ T5689] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 47.954688][ T5698] bond1: entered promiscuous mode [ 47.957002][ T5698] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.961895][ T5693] overlayfs: failed to resolve './file0': -2 [ 48.014311][ T5710] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 48.137484][ T5708] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 48.149942][ T5708] EXT4-fs (loop2): invalid journal inode [ 48.150014][ T5708] EXT4-fs (loop2): can't get journal size [ 48.154356][ T5708] EXT4-fs (loop2): 1 truncate cleaned up [ 48.154940][ T5708] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.162729][ T5708] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-61) [ 48.177897][ T5729] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 48.284479][ T5736] set_capacity_and_notify: 8 callbacks suppressed [ 48.285971][ T5736] loop4: detected capacity change from 0 to 1024 [ 48.556551][ T5739] bridge0: port 3(veth1_to_bridge) entered blocking state [ 48.556652][ T5739] bridge0: port 3(veth1_to_bridge) entered disabled state [ 48.556764][ T5739] veth1_to_bridge: entered allmulticast mode [ 48.557272][ T5739] veth1_to_bridge: entered promiscuous mode [ 48.557338][ T5739] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 48.557525][ T5739] bridge0: port 3(veth1_to_bridge) entered blocking state [ 48.557554][ T5739] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 48.624004][ T5743] loop0: detected capacity change from 0 to 512 [ 48.627827][ T5743] EXT4-fs (loop0): Couldn't mount because of unsupported optional features (b4cc0000) [ 48.749731][ T5742] block nbd0: shutting down sockets [ 48.782475][ T5751] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.790496][ T5752] bond2 (unregistering): Released all slaves [ 48.843521][ T5757] loop0: detected capacity change from 0 to 1024 [ 48.864761][ T5757] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.908192][ T4721] EXT4-fs error (device loop2): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 48.917778][ T4721] EXT4-fs error (device loop2): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 48.946000][ T4718] EXT4-fs error (device loop0): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 48.953040][ T4718] EXT4-fs (loop0): Remounting filesystem read-only [ 48.973207][ T4718] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.094605][ T5777] __nla_validate_parse: 5 callbacks suppressed [ 49.096010][ T5777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.243'. [ 49.215283][ T5786] netlink: 'syz.0.247': attribute type 1 has an invalid length. [ 49.215408][ T5786] netlink: 'syz.0.247': attribute type 1 has an invalid length. [ 49.232684][ T5786] loop0: detected capacity change from 0 to 4096 [ 49.233027][ T5786] EXT4-fs: inline encryption not supported [ 49.235339][ T5786] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 49.235378][ T5786] EXT4-fs (loop0): Test dummy encryption mode enabled [ 49.236774][ T5786] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 49.236806][ T5786] System zones: 0-5 [ 49.240640][ T5786] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.248226][ T5788] loop3: detected capacity change from 0 to 1024 [ 49.275546][ T5788] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 49.278188][ T4718] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.297846][ T5788] syzkaller1: entered promiscuous mode [ 49.297876][ T5788] syzkaller1: entered allmulticast mode [ 49.361734][ T1191] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.486305][ T1191] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.514962][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.551669][ T5794] loop0: detected capacity change from 0 to 2048 [ 49.558138][ T1191] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.574625][ T5794] GPT:first_usable_lbas don't match. [ 49.574647][ T5794] GPT:34 != 290 [ 49.574654][ T5794] GPT: Use GNU Parted to correct GPT errors. [ 49.574695][ T5794] loop0: p1 p2 p3 [ 49.609781][ T5798] bridge0: port 3(macvlan2) entered blocking state [ 49.609867][ T5798] bridge0: port 3(macvlan2) entered disabled state [ 49.609948][ T5798] macvlan2: entered allmulticast mode [ 49.618798][ T5798] macvlan2: left allmulticast mode [ 49.642671][ T1191] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.646455][ T4728] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 49.648428][ T4728] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 49.650106][ T4728] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 49.652239][ T4728] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 49.654139][ T4728] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 49.693482][ T5805] loop4: detected capacity change from 0 to 1024 [ 49.706799][ T5805] EXT4-fs warning (device loop4): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop4. [ 49.940157][ T1191] bridge_slave_1: left allmulticast mode [ 49.941364][ T1191] bridge_slave_1: left promiscuous mode [ 49.941971][ T1191] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.944348][ T1191] bridge_slave_0: left allmulticast mode [ 49.944375][ T1191] bridge_slave_0: left promiscuous mode [ 49.944456][ T1191] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.052540][ T5821] loop1: detected capacity change from 0 to 512 [ 50.070726][ T5821] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.098833][ T1191] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.116102][ T1191] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.145590][ T1191] bond0 (unregistering): Released all slaves [ 50.152675][ T5821] netlink: 56 bytes leftover after parsing attributes in process `syz.1.256'. [ 50.154356][ T5824] netlink: 28 bytes leftover after parsing attributes in process `syz.1.256'. [ 50.154379][ T5824] netlink: 28 bytes leftover after parsing attributes in process `syz.1.256'. [ 50.154633][ T5824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.256'. [ 50.193782][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.548290][ T5840] loop1: detected capacity change from 0 to 128 [ 50.548687][ T5840] ext4: Unknown parameter 'nouser_xattr' [ 50.550051][ T5840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.258'. [ 50.550063][ T5840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.258'. [ 50.550078][ T5840] netlink: 'syz.1.258': attribute type 14 has an invalid length. [ 50.550086][ T5840] netlink: 'syz.1.258': attribute type 13 has an invalid length. [ 50.692808][ T5856] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 50.693230][ T5856] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 50.712594][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.714159][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.715656][ T5799] bridge_slave_0: entered allmulticast mode [ 50.719038][ T5799] bridge_slave_0: entered promiscuous mode [ 50.731521][ T4402] 8021q: adding VLAN 0 to HW filter on device eth0 [ 50.739495][ T5872] loop4: detected capacity change from 0 to 512 [ 50.783950][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.783991][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.784084][ T5799] bridge_slave_1: entered allmulticast mode [ 50.784555][ T5799] bridge_slave_1: entered promiscuous mode [ 50.793721][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.805322][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.825296][ T5876] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 50.830834][ T5799] team0: Port device team_slave_0 added [ 50.923786][ T5799] team0: Port device team_slave_1 added [ 50.927513][ T1191] hsr_slave_0: left promiscuous mode [ 50.928748][ T1191] hsr_slave_1: left promiscuous mode [ 50.929236][ T1191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.929255][ T1191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.930189][ T1191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.930201][ T1191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.940734][ T1191] veth1_macvtap: left promiscuous mode [ 50.940889][ T1191] veth0_macvtap: left promiscuous mode [ 50.940934][ T1191] veth1_vlan: left promiscuous mode [ 50.940965][ T1191] veth0_vlan: left promiscuous mode [ 51.691015][ T4717] Bluetooth: hci3: command tx timeout [ 51.911363][ T5899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.916687][ T5899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.919431][ T5898] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 51.919458][ T5898] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 51.923441][ T5898] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 51.926726][ T5898] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 51.926795][ T5898] System zones: 0-2, 18-18, 34-35 [ 51.927394][ T5898] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.983637][ T1191] team0 (unregistering): Port device team_slave_1 removed [ 51.989715][ T1191] team0 (unregistering): Port device team_slave_0 removed [ 52.046709][ T4402] 8021q: adding VLAN 0 to HW filter on device eth2 [ 52.058739][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.058762][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.059109][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.061421][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.061443][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.061472][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.091068][ T5799] hsr_slave_0: entered promiscuous mode [ 52.092347][ T5799] hsr_slave_1: entered promiscuous mode [ 52.093747][ T5799] debugfs: 'hsr0' already exists in 'hsr' [ 52.094994][ T5799] Cannot create hsr debugfs directory [ 52.154883][ T5799] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 52.158334][ T5799] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 52.160228][ T5799] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 52.162869][ T5799] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 52.164832][ T5799] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 52.167718][ T5799] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 52.169368][ T5799] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 52.171612][ T5799] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 52.269536][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.277609][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.280751][ T3844] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.280811][ T3844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.290341][ T5368] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.290401][ T5368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.290659][ T4723] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 52.381959][ T5916] EXT4-fs (loop3): filesystem too large to mount safely on this system [ 52.400861][ T5916] cgroup: Unknown subsys name 'cpuset' [ 52.561150][ T4402] 8021q: adding VLAN 0 to HW filter on device eth1 [ 52.579699][ T5941] EXT4-fs (loop3): Test dummy encryption mode enabled [ 52.592593][ T5941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.602493][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.790664][ T5799] veth0_vlan: entered promiscuous mode [ 52.799308][ T5799] veth1_vlan: entered promiscuous mode [ 52.823069][ T5799] veth0_macvtap: entered promiscuous mode [ 52.824163][ T5799] veth1_macvtap: entered promiscuous mode [ 52.830523][ T5971] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.844522][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.846640][ T4718] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.847250][ T4723] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.852700][ T5971] EXT4-fs (loop1): Online resizing not supported with bigalloc [ 52.890077][ T5980] sctp: [Deprecated]: syz.3.276 (pid 5980) Use of struct sctp_assoc_value in delayed_ack socket option. [ 52.890077][ T5980] Use struct sctp_sack_info instead [ 52.894623][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.906429][ T5983] sctp: [Deprecated]: syz.3.276 (pid 5983) Use of struct sctp_assoc_value in delayed_ack socket option. [ 52.906429][ T5983] Use struct sctp_sack_info instead [ 52.914951][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.927296][ T1293] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.927351][ T1293] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.927388][ T1293] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.927410][ T1293] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.950124][ T4402] 8021q: adding VLAN 0 to HW filter on device eth3 [ 52.958361][ T5987] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 52.958413][ T5987] System zones: 1-12 [ 52.958712][ T5987] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.278: missing EA_INODE flag [ 52.958726][ T5987] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 52.962479][ T5987] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.278: error while reading EA inode 12 err=-117 [ 52.962499][ T5987] loop1: lost filesystem error report for type 5 error -117 [ 52.962651][ T5987] EXT4-fs (loop1): 1 orphan inode deleted [ 52.963058][ T5987] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.034345][ T5368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.034376][ T5368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.074050][ T3744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.074079][ T3744] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.088827][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.202770][ T6016] set_capacity_and_notify: 6 callbacks suppressed [ 53.215092][ T6016] loop0: detected capacity change from 0 to 512 [ 53.217025][ T6016] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 53.223484][ T6016] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.283: inode has both inline data and extents flags [ 53.223540][ T6016] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 53.224012][ T6016] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.283: couldn't read orphan inode 15 (err -117) [ 53.224042][ T6016] loop0: lost filesystem error report for type 5 error -117 [ 53.234708][ T6022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.234912][ T6022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.242766][ T6016] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.407299][ T6023] loop3: detected capacity change from 0 to 1024 [ 53.411733][ T6023] EXT4-fs: inline encryption not supported [ 53.515166][ T6023] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 53.719658][ T4717] Bluetooth: hci3: command tx timeout [ 53.985378][ T6045] netlink: 16 bytes leftover after parsing attributes in process `syz.3.288'. [ 54.073735][ T6055] netlink: 'syz.4.292': attribute type 1 has an invalid length. [ 54.086055][ T6055] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.099413][ T6056] bond1: (slave geneve2): making interface the new active one [ 54.102864][ T6056] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 54.175959][ T6059] loop4: detected capacity change from 0 to 8192 [ 54.279348][ T6059] loop4: AHDI p1 p2 p3 [ 54.280187][ T6059] loop4: p1 size 16383 extends beyond EOD, truncated [ 54.320625][ T4345] loop4: AHDI p1 p2 p3 [ 54.321776][ T4345] loop4: p1 size 16383 extends beyond EOD, truncated [ 54.358390][ T4706] udevd[4706]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 54.378251][ T4706] udevd[4706]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 54.485788][ T6088] loop3: detected capacity change from 0 to 512 [ 54.609099][ T6101] loop0: detected capacity change from 0 to 512 [ 54.612421][ T6101] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.643205][ T6109] loop3: detected capacity change from 0 to 128 [ 54.857304][ T6113] netlink: 'syz.4.303': attribute type 1 has an invalid length. [ 54.881469][ T6113] bond2: entered promiscuous mode [ 54.881626][ T6113] 8021q: adding VLAN 0 to HW filter on device bond2 [ 54.898120][ T6118] loop1: detected capacity change from 0 to 512 [ 54.901465][ T6118] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 54.910445][ T6118] EXT4-fs (loop1): 1 truncate cleaned up [ 54.943832][ T6123] syzkaller0: entered promiscuous mode [ 54.943869][ T6123] syzkaller0: entered allmulticast mode [ 54.965875][ T6123] tipc: Can't bind to reserved service type 0 [ 55.161072][ T6144] loop4: detected capacity change from 0 to 8 [ 55.169313][ T6144] squashfs image failed sanity check [ 55.253723][ T6156] loop4: detected capacity change from 0 to 512 [ 55.438424][ T6162] netlink: 20 bytes leftover after parsing attributes in process `syz.4.309'. [ 55.726777][ T6177] syz_tun: mtu greater than device maximum [ 55.755433][ T4717] Bluetooth: hci3: command tx timeout [ 55.771360][ T6181] hugetlbfs: syz.3.313 (6181): Using mlock ulimits for SHM_HUGETLB is obsolete [ 56.047049][ T6192] loop0: detected capacity change from 0 to 128 [ 56.140570][ T6198] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 56.147364][ T6198] EXT4-fs (loop5): 1 truncate cleaned up [ 56.201491][ T6196] random: crng reseeded on system resumption [ 56.961228][ T6206] Bluetooth: MGMT ver 1.23 [ 57.124482][ T6223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.124696][ T6223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.179822][ T6225] EXT4-fs: quotafile must be on filesystem root [ 57.209394][ T6225] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.231913][ T6225] EXT4-fs error (device loop0): ext4_read_inline_dir:1494: inode #12: block 5: comm syz.0.327: path /47/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 57.247891][ T6227] syzkaller0: entered promiscuous mode [ 57.247917][ T6227] syzkaller0: entered allmulticast mode [ 57.291545][ T6232] EXT4-fs: inline encryption not supported [ 57.291933][ T6232] EXT4-fs (loop0): ea_inode feature is not supported for Hurd [ 57.344161][ T6234] vfat: Unknown parameter 'nnonumtail' [ 57.415897][ T6239] 9pnet_fd: Insufficient options for proto=fd [ 57.524265][ T6244] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.333: missing EA_INODE flag [ 57.530923][ T6244] EXT4-fs (loop0): Remounting filesystem read-only [ 57.535897][ T6251] syzkaller0: entered promiscuous mode [ 57.535928][ T6251] syzkaller0: entered allmulticast mode [ 57.572697][ T6256] faux_driver vkms: [drm] Unknown color mode 11; guessing buffer size. [ 57.794320][ T4717] Bluetooth: hci3: command tx timeout [ 57.996289][ T6265] EXT4-fs: inline encryption not supported [ 58.016867][ T6271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.019033][ T6271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.026403][ T6265] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 58.026424][ T6265] EXT4-fs (loop1): Test dummy encryption mode enabled [ 58.036361][ T6265] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 58.036412][ T6265] System zones: 0-5 [ 58.041744][ T6265] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 58.126549][ T6277] syzkaller1: entered promiscuous mode [ 58.126579][ T6277] syzkaller1: entered allmulticast mode [ 58.521074][ T6324] capability: warning: `syz.0.345' uses deprecated v2 capabilities in a way that may be insecure [ 58.523502][ T6324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.345'. [ 58.627390][ T6347] binder: 6346:6347 ioctl c0306201 20000080 returned -14 [ 58.631176][ T6347] binder: 6346:6347 ioctl c0306201 200003c0 returned -14 [ 58.632859][ T6347] binder: 6346:6347 got transaction to invalid handle, 1 [ 58.634559][ T6347] binder: 6346:6347 cannot find target node [ 58.635732][ T6347] binder: 6346:6347 transaction async to 0:0 failed 14/29201/-22, code 0 size 112-24 line 3236 [ 58.744523][ T6360] set_capacity_and_notify: 7 callbacks suppressed [ 58.744571][ T6360] loop3: detected capacity change from 0 to 1024 [ 58.744922][ T6360] EXT4-fs: Ignoring removed bh option [ 58.745277][ T6360] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 58.748302][ T6362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.748903][ T6362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.774120][ T4723] EXT4-fs error (device loop3): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /62/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 58.777442][ T4723] EXT4-fs (loop3): Remounting filesystem read-only [ 58.852658][ T6371] fuse: Bad value for 'fd' [ 58.940406][ T6374] loop5: detected capacity change from 0 to 128 [ 59.060932][ T6374] fscrypt (loop5, inode 12): Unsupported log2_data_unit_size in encryption policy: 232 [ 59.870769][ C0] vcan0: j1939_tp_rxtimer: 0x00000000dad5ed09: rx timeout, send abort [ 59.871456][ C0] vcan0: j1939_tp_rxtimer: 0x000000007d7a2208: rx timeout, send abort [ 59.886720][ T6385] ucma_write: process 226 (syz.3.356) changed security contexts after opening file descriptor, this is not allowed. [ 59.943268][ T6403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.945294][ T6403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.363620][ C0] vcan0: j1939_tp_rxtimer: 0x00000000dad5ed09: abort rx timeout. Force session deactivation [ 60.364572][ C0] vcan0: j1939_tp_rxtimer: 0x000000007d7a2208: abort rx timeout. Force session deactivation [ 60.379982][ T4814] binder: undelivered TRANSACTION_ERROR: 29201 [ 60.391956][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 60.392172][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 60.392310][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 60.392430][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 60.392555][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 60.392670][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 60.392779][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 60.392889][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 60.393001][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 60.464528][ T6414] netlink: 16 bytes leftover after parsing attributes in process `syz.0.364'. [ 60.647324][ C0] net_ratelimit: 2005 callbacks suppressed [ 60.647364][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 60.647479][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 60.647599][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 60.647715][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 60.647836][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 60.647961][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 60.648075][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 60.648188][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 60.648295][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 60.648410][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 60.959946][ T6441] netlink: 4 bytes leftover after parsing attributes in process `syz.5.371'. [ 60.966064][ T6441] netlink: 4 bytes leftover after parsing attributes in process `syz.5.371'. [ 61.027072][ T6442] netlink: 16 bytes leftover after parsing attributes in process `syz.5.371'. [ 61.031362][ T6442] netlink: 12 bytes leftover after parsing attributes in process `syz.5.371'. [ 61.040555][ T6442] netlink: 12 bytes leftover after parsing attributes in process `syz.5.371'. [ 61.621800][ T6455] Soft offlining pfn 0x163a71 at process virtual address 0x20071000 [ 61.671382][ T6457] binder: 6456:6457 tried to acquire reference to desc 0, got 1 instead [ 61.671475][ T6457] binder: 6456:6457 tried to acquire reference to desc 0, got 1 instead [ 61.678853][ T6457] binder: 6456:6457 got transaction to invalid handle, 3 [ 61.678882][ T6457] binder: 6456:6457 cannot find target node [ 61.678904][ T6457] binder: 6456:6457 transaction call to 0:0 failed 19/29201/-22, code 0 size 0-22 line 3236 [ 61.713077][ T4799] binder: undelivered TRANSACTION_ERROR: 29201 [ 61.827248][ T6464] loop1: detected capacity change from 0 to 8192 [ 62.286347][ T6475] loop3: detected capacity change from 0 to 128 [ 62.354029][ T6475] netlink: 72 bytes leftover after parsing attributes in process `syz.3.380'. [ 62.437822][ T6472] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 62.439835][ T6472] FAT-fs (loop1): Filesystem has been set read-only [ 62.444506][ T6478] loop5: detected capacity change from 0 to 512 [ 62.458743][ T6461] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 62.525139][ T6470] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 62.698164][ T6486] binder: 6481:6486 ioctl c0306201 20000080 returned -14 [ 62.884681][ T6483] binder: 6481:6483 tried to acquire reference to desc 0, got 1 instead [ 62.884725][ T6483] binder: 6481:6483 ioctl c0306201 200003c0 returned -14 [ 63.297130][ T6499] netlink: 'syz.5.384': attribute type 4 has an invalid length. [ 63.297166][ T6499] netlink: 32 bytes leftover after parsing attributes in process `syz.5.384'. [ 63.391855][ T4799] binder: release 6481:6483 transaction 24 out, still active [ 63.391890][ T4799] binder: undelivered TRANSACTION_COMPLETE [ 63.504838][ T4799] binder: send failed reply for transaction 24, target dead [ 64.330586][ T1593] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.336747][ T1593] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.593913][ C1] net_ratelimit: 66549 callbacks suppressed [ 65.593941][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 65.593950][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 65.594100][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 65.594117][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 65.594228][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 65.594245][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 65.594363][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 65.594396][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 65.594478][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 65.594518][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 66.417498][ T1512] cfg80211: failed to load regulatory.db [ 70.557829][ C0] net_ratelimit: 99328 callbacks suppressed [ 70.557869][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 70.557913][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 70.557991][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 70.558046][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 70.558103][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 70.558162][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 70.558213][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 70.558274][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 70.558323][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 70.558383][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 75.534491][ C0] net_ratelimit: 99671 callbacks suppressed [ 75.534496][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 75.534532][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 75.534616][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 75.534666][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 75.534740][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 75.534781][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 75.534854][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 75.534889][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 75.534977][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 75.534997][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 80.520258][ C0] net_ratelimit: 99373 callbacks suppressed [ 80.520300][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 80.520300][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 80.520413][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 80.520437][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 80.520558][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 80.520560][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 80.520668][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 80.520679][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 80.520779][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 80.520790][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 85.512734][ C0] net_ratelimit: 100870 callbacks suppressed [ 85.512771][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 85.512777][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 85.512897][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 85.512899][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 85.513005][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 85.513006][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 85.513110][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 85.513139][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 85.513217][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 85.513248][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 90.510015][ C1] net_ratelimit: 100678 callbacks suppressed [ 90.510042][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 90.510049][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 90.510172][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 90.510183][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 90.510274][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 90.510301][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 90.510376][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 90.510428][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 90.510493][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 90.510554][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 95.510764][ C1] net_ratelimit: 99885 callbacks suppressed [ 95.510804][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 95.510811][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 95.510926][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 95.510948][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 95.511038][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 95.511065][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 95.511148][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 95.511182][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 95.511259][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 95.511302][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 100.514099][ C0] net_ratelimit: 100426 callbacks suppressed [ 100.514140][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 100.514161][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 100.514256][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 100.514285][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 100.514370][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 100.514395][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 100.514483][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 100.514505][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 100.514603][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 100.514652][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 105.519313][ C1] net_ratelimit: 100371 callbacks suppressed [ 105.519352][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 105.519357][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 105.519482][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 105.519493][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 105.519611][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 105.519614][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 105.519715][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 105.519737][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 105.519820][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 105.519855][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 110.525782][ C1] net_ratelimit: 100318 callbacks suppressed [ 110.525811][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 110.525823][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 110.525943][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 110.525946][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 110.526055][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 110.526059][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 110.526165][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 110.526169][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 110.526279][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 110.526294][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 115.533277][ C1] net_ratelimit: 100436 callbacks suppressed [ 115.533315][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 115.533338][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 115.533439][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 115.533474][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 115.533575][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 115.533629][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 115.533683][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 115.533753][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 115.533835][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 115.533864][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 120.541469][ C0] net_ratelimit: 100699 callbacks suppressed [ 120.541473][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 120.541513][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 120.541601][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 120.541661][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 120.541725][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 120.541785][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 120.541841][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 120.541895][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 120.541949][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 120.542005][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 125.550156][ C1] net_ratelimit: 99781 callbacks suppressed [ 125.550193][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 125.550195][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 125.550303][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 125.550314][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 125.550424][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 125.550428][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 125.550536][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 125.550558][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 125.550673][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 125.550673][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 125.870301][ T1593] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.882412][ T1593] ieee802154 phy1 wpan1: encryption failed: -22 [ 130.559186][ C1] net_ratelimit: 101293 callbacks suppressed [ 130.559200][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 130.559224][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 130.559337][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 130.559347][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 130.559468][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 130.559556][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 130.559589][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 130.559686][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 130.559710][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 130.559821][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 135.568496][ C0] net_ratelimit: 100668 callbacks suppressed [ 135.568507][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 135.568535][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 135.568643][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 135.568658][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 135.568752][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 135.568775][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 135.568863][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 135.568882][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 135.568986][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 135.569001][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 140.578004][ C1] net_ratelimit: 100340 callbacks suppressed [ 140.578022][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 140.578044][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 140.578144][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 140.578195][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 140.578260][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 140.578319][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 140.578388][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 140.578434][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 140.578527][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 140.578565][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 145.587583][ C0] net_ratelimit: 100423 callbacks suppressed [ 145.587626][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 145.587676][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 145.587748][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 145.587810][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 145.587877][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 145.587923][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 145.588007][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 145.588033][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 145.588136][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 145.588142][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 150.597344][ C1] net_ratelimit: 101119 callbacks suppressed [ 150.597381][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 150.597408][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 150.597495][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 150.597564][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 150.597619][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 150.597679][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 150.597740][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 150.597788][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 150.597850][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 150.597903][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 151.704701][ C0] sched: DL replenish lagged too much [ 154.323920][ T4722] Bluetooth: hci1: command 0x0406 tx timeout [ 154.327280][ T4722] Bluetooth: hci0: command 0x0406 tx timeout [ 154.340207][ T4722] Bluetooth: hci2: command 0x0406 tx timeout [ 155.607169][ C0] net_ratelimit: 100789 callbacks suppressed [ 155.607184][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 155.607206][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 155.607317][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 155.607325][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 155.607428][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 155.607446][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 155.607554][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 155.607585][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 155.607681][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 155.607693][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 160.617004][ C0] net_ratelimit: 100891 callbacks suppressed [ 160.617037][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 160.617070][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 160.617153][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 160.617211][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 160.617268][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 160.617325][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 160.617402][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 160.617433][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 160.617532][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 160.617551][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 165.626935][ C0] net_ratelimit: 100458 callbacks suppressed [ 165.626977][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 165.626987][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 165.627105][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 165.627125][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 165.627221][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 165.627237][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 165.627331][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 165.627348][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 165.627439][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 165.627457][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 170.636878][ C0] net_ratelimit: 101077 callbacks suppressed [ 170.636883][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 170.636911][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 170.636993][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 170.637030][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 170.637120][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 170.637141][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 170.637248][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 170.637258][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 170.637362][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 170.637368][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 175.646780][ C0] net_ratelimit: 101284 callbacks suppressed [ 175.646818][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 175.646831][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 175.646940][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 175.646964][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 175.647050][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 175.647075][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 175.647161][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 175.647184][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 175.647274][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 175.647295][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 179.366038][ T4722] Bluetooth: hci3: command 0x0406 tx timeout [ 180.656759][ C0] net_ratelimit: 100507 callbacks suppressed [ 180.656792][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 180.656809][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 180.656921][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 180.656939][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 180.657029][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 180.657063][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 180.657137][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 180.657186][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 180.657244][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 180.657294][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 185.666789][ C0] net_ratelimit: 100436 callbacks suppressed [ 185.666794][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 185.666821][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 185.666918][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 185.666936][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 185.667046][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 185.667062][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 185.667154][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 185.667174][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 185.667262][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 185.667286][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 187.237501][ T1593] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.249689][ T1593] ieee802154 phy1 wpan1: encryption failed: -22 [ 190.676709][ C0] net_ratelimit: 100350 callbacks suppressed [ 190.676746][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 190.676767][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 190.676883][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 190.676906][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 190.676998][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 190.677030][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 190.677126][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 190.677152][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 190.677245][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 190.677262][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 195.686715][ C0] net_ratelimit: 100875 callbacks suppressed [ 195.686723][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 195.686755][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 195.686832][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 195.686872][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 195.686973][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 195.687008][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 195.687083][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 195.687129][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 195.687192][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 195.687239][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 200.696688][ C0] net_ratelimit: 101284 callbacks suppressed [ 200.696729][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 200.696749][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 200.696853][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 200.696887][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 200.696965][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 200.696998][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 200.697073][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 200.697111][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 200.697181][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 200.697223][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 205.706676][ C0] net_ratelimit: 100800 callbacks suppressed [ 205.706712][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 205.706746][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 205.706831][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 205.706877][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 205.706942][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 205.706988][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 205.707051][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 205.707107][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 205.707162][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 205.707236][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 210.716713][ C0] net_ratelimit: 100075 callbacks suppressed [ 210.716725][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 210.716753][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 210.716835][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 210.716877][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 210.716973][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 210.716997][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 210.717084][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 210.717115][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 210.717193][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 210.717232][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 215.726667][ C0] net_ratelimit: 100700 callbacks suppressed [ 215.726674][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 215.726705][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 215.726784][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 215.726888][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 215.726958][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 215.727008][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 215.727102][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 215.727132][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 215.727214][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 215.727257][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 220.736662][ C1] net_ratelimit: 100161 callbacks suppressed [ 220.736701][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 220.736718][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 220.736834][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 220.736851][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 220.736947][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 220.736960][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 220.737057][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 220.737070][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 220.737166][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 220.737178][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 225.746659][ C1] net_ratelimit: 100103 callbacks suppressed [ 225.746691][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 225.746719][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 225.746832][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 225.746844][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 225.746950][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 225.746967][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 225.747059][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 225.747096][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 225.747167][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 225.747221][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 230.756674][ C1] net_ratelimit: 101205 callbacks suppressed [ 230.756709][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 230.756719][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 230.756826][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 230.756847][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 230.756935][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 230.756957][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 230.757045][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 230.757064][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 230.757154][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 230.757174][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 235.766725][ C1] net_ratelimit: 100453 callbacks suppressed [ 235.766726][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 235.766763][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 235.766837][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 235.766892][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 235.766968][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 235.767001][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 235.767077][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 235.767109][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 235.767206][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 235.767215][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:0a:e5:d9:2c:ff:15, vlan:0) [ 237.418367][ T31] INFO: task kworker/0:5:4814 blocked for more than 142 seconds. [ 237.427987][ T31] Tainted: G ** replaying previous printk message ** [ 237.427987][ T31] Tainted: G L syzkaller #0 [ 237.437496][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 237.447025][ T31] task:kworker/0:5 state:D stack:0 pid:4814 tgid:4814 ppid:2 task_flags:0x4208060 flags:0x00000010 [ 237.469289][ T31] Workqueue: events reg_todo [ 237.469307][ T31] Call trace: [ 237.469310][ T31] __switch_to+0x2b0/0x6e0 (T) [ 237.469325][ T31] __schedule+0x1c04/0x2db8 [ 237.469335][ T31] schedule+0x13c/0x20c [ 237.469345][ T31] schedule_preempt_disabled+0x18/0x2c [ 237.469356][ T31] __mutex_lock+0x4fc/0xed0 [ 237.469366][ T31] mutex_lock_nested+0x24/0x30 [ 237.469377][ T31] reg_process_self_managed_hints+0x94/0x1c0 [ 237.469387][ T31] reg_todo+0x60c/0x6a4 [ 237.469395][ T31] process_scheduled_works+0x788/0x10b8 [ 237.469405][ T31] worker_thread+0x798/0xbd0 [ 237.469414][ T31] kthread+0x304/0x3d4 [ 237.469422][ T31] ret_from_fork+0x10/0x20 [ 237.469439][ T31] INFO: task kworker/u8:18:5368 blocked for more than 142 seconds. [ 237.469447][ T31] Tainted: G L syzkaller #0 [ 237.469451][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 237.469455][ T31] task:kworker/u8:18 state:D stack:0 pid:5368 tgid:5368 ppid:2 task_flags:0x4208060 flags:0x00000010 [ 237.469468][ T31] Workqueue: events_power_efficient crda_timeout_work [ 237.469477][ T31] Call trace: [ 237.469480][ T31] __switch_to+0x2b0/0x6e0 (T) [ 237.469491][ T31] __schedule+0x1c04/0x2db8 [ 237.469501][ T31] schedule+0x13c/0x20c [ 237.469510][ T31] schedule_preempt_disabled+0x18/0x2c [ 237.469525][ T31] __mutex_lock+0x4fc/0xed0 [ 237.469535][ T31] mutex_lock_nested+0x24/0x30 [ 237.469545][ T31] rtnl_lock+0x20/0x2c [ 237.469555][ T31] crda_timeout_work+0x20/0x90 [ 237.469564][ T31] process_scheduled_works+0x788/0x10b8 [ 237.469573][ T31] worker_thread+0x798/0xbd0 [ 237.469581][ T31] kthread+0x304/0x3d4 [ 237.469589][ T31] ret_from_fork+0x10/0x20 [ 237.469615][ T31] [ 237.469615][ T31] Showing all locks held in the system: [ 237.469620][ T31] 4 locks held by kworker/0:1/11: [ 237.469624][ T31] #0: ffff0000c002b540 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x734/0x10b8 [ 237.469648][ T31] #1: ffff80008eb37c40 ((work_completion)(&helper->damage_work)){+.+.}-{0:0}, at: process_scheduled_works+0x73c/0x10b8 [ 237.469669][ T31] #2: ffff0000c7151270 (&helper->lock){+.+.}-{4:4}, at: drm_fb_helper_damage_work+0xf4/0x5e4 [ 237.469691][ T31] #3: ffff0000c726e128 (&dev->master_mutex){+.+.}-{4:4}, at: drm_master_internal_acquire+0x24/0x78 [ 237.469715][ T31] 3 locks held by kworker/u8:0/12: [ 237.469720][ T31] 3 locks held by kworker/u8:1/15: [ 237.469726][ T31] 1 lock held by khungtaskd/31: [ 237.469730][ T31] #0: ffff800088bf70c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 [ 237.469754][ T31] 3 locks held by kworker/u8:3/40: [ 237.469759][ T31] 2 locks held by pr/ttyAMA-1/41: [ 237.469766][ T31] 3 locks held by kworker/u8:4/792: [ 237.469776][ T31] 3 locks held by kworker/u8:5/1191: [ 237.469780][ T31] 3 locks held by kworker/u8:6/1273: [ 237.469785][ T31] 3 locks held by kworker/u8:7/1293: [ 237.469790][ T31] #0: ffff0000c004b940 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x734/0x10b8 [ 237.469811][ T31] #1: ffff800094bb7c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x73c/0x10b8 [ 237.469832][ T31] #2: ffff800089cca300 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c [ 237.469853][ T31] 3 locks held by kworker/u8:8/1484: [ 237.469862][ T31] 2 locks held by kworker/u8:9/3427: [ 237.469867][ T31] 3 locks held by kworker/u8:11/3490: [ 237.469872][ T31] 3 locks held by kworker/u8:12/3693: [ 237.469877][ T31] 3 locks held by kworker/u8:13/3744: [ 237.469881][ T31] 3 locks held by kworker/u8:14/3844: [ 237.469886][ T31] 1 lock held by jbd2/nvme0n1p2-/4310: [ 237.469891][ T31] 1 lock held by udevd/4345: [ 237.469897][ T31] 2 locks held by getty/4493: [ 237.469901][ T31] #0: ffff0000ca7160a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 237.469922][ T31] #1: ffff8000923ab2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x348/0xf70 [ 237.469950][ T31] 2 locks held by kworker/0:4/4813: [ 237.469955][ T31] 4 locks held by kworker/0:5/4814: [ 237.469959][ T31] #0: ffff0000c002b540 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x734/0x10b8 [ 237.469979][ T31] #1: ffff8000993a7c40 (reg_work){+.+.}-{0:0}, at: process_scheduled_works+0x73c/0x10b8 [ 237.470000][ T31] #2: ffff800089cca300 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c [ 237.470020][ T31] #3: ffff0000f23d0780 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_process_self_managed_hints+0x94/0x1c0 [ 237.470041][ T31] 2 locks held by kworker/1:6/4816: [ 237.470047][ T31] 4 locks held by kworker/u8:15/5363: [ 237.470052][ T31] 3 locks held by kworker/u8:17/5365: [ 237.470056][ T31] #0: ffff0000ce80d140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x734/0x10b8 [ 237.470077][ T31] #1: ffff80009cc77c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x73c/0x10b8 [ 237.470098][ T31] #2: ffff800089cca300 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c [ 237.470118][ T31] 3 locks held by kworker/u8:18/5368: [ 237.470122][ T31] #0: ffff0000c004b940 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x734/0x10b8 [ 237.470143][ T31] #1: ffff800093787c40 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x73c/0x10b8 [ 237.470163][ T31] #2: ffff800089cca300 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c [ 237.470183][ T31] 3 locks held by kworker/u8:19/5369: [ 237.470188][ T31] 2 locks held by kworker/u8:20/5372: [ 237.470193][ T31] 3 locks held by kworker/u8:21/5373: [ 237.470197][ T31] 1 lock held by syz-executor/5799: [ 237.470202][ T31] 3 locks held by kworker/u8:22/6068: [ 237.470207][ T31] 3 locks held by kworker/u8:24/6070: [ 237.470212][ T31] 3 locks held by kworker/u8:26/6074: [ 237.470217][ T31] 1 lock held by rm/6512: [ 237.470221][ T31] 3 locks held by syz-executor/6515: [ 237.470226][ T31] 3 locks held by kworker/u8:28/6517: [ 237.470230][ T31] [ 237.470233][ T31] ============================================= [ 237.470233][ T31] [ 237.470238][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 237.574660][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT [ 237.576451][ T31] Tainted: [L]=SOFTLOCKUP [ 237.577186][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 237.578763][ T31] Call trace: [ 237.579382][ T31] show_stack+0x2c/0x3c (C) [ 237.580193][ T31] __dump_stack+0x30/0x40 [ 237.580951][ T31] dump_stack_lvl+0x30/0x12c [ 237.581669][ T31] dump_stack+0x1c/0x28 [ 237.582400][ T31] vpanic+0x594/0xaf8 [ 237.583072][ T31] vpanic+0x0/0xaf8 [ 237.583677][ T31] hung_task_panic+0x0/0x2c [ 237.584459][ T31] kthread+0x304/0x3d4 [ 237.585157][ T31] ret_from_fork+0x10/0x20 [ 237.585933][ T31] SMP: stopping secondary CPUs [ 237.586754][ T31] Kernel Offset: disabled [ 237.587423][ T31] CPU features: 0x0a000000,003c0008,27020501,5427fea7 [ 237.588454][ T31] Memory Limit: none [ 238.156898][ T31] Rebooting in 86400 seconds..