last executing test programs: 2m24.391855776s ago: executing program 4 (id=106): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r1, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=""/173, 0xad}, 0x76fc5092}], 0x1, 0x40000100, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) 2m23.431896175s ago: executing program 4 (id=113): r0 = socket$inet6(0xa, 0x5, 0x0) setreuid(0x0, 0xee01) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x6e23, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x100000b}, 0x1c) listen(r2, 0xb) listen(r0, 0x50) 2m23.38032284s ago: executing program 4 (id=117): setresgid(0x0, 0x0, 0xee01) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x40000c4) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r2 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @broadcast}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r2, &(0x7f0000000140)='\b\x00\f=\x00'/14, 0x5ee, 0x80, &(0x7f0000000040)={0x2, 0x4e21, @private=0xa010100}, 0x10) 2m23.193961039s ago: executing program 4 (id=119): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x3, &(0x7f0000000280)={[{@debug}, {@nobarrier}, {@norecovery}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x8, 0x624, &(0x7f0000004580)="$eJzs3c9vVNUeAPDvve20pX3vtZCX98SFNDEGEqWlBQwxJsKeEPyxc1VpIUihhNZokcSS4MbEuHFh4sqF+F8oiVsXbl24cWVIiDFdgCEy5k7vlNt2pj+mnd7Sfj7JpefcM3PPuWW+PWfOnHsngD1rMPsnjTgYEdeTiP5CWWfkhYMLj5v/89aFbEuiWn37jyRufZLMFY+V5D/78if/3R/Jz2nEgY6V9U7P3rwyNjk5cSPPD89cvT48PXvz6OWrY5cmLk1cG3119NTJEydPjRzb1PkVqz575/0P+z879+63Xz9ORr779VwSp+NJ/oDsvJY/t3tTNWe/s8GoLnhU3J/9Xk9t8tg7xcP++uvkqWT5Dnasi/nrsRIR/4/+6Cj8b/bHp2+W2jigrapJ1PsoYM9JWor/nq1vCLDN6uOA+nv7+XQ9b97S9g5KgG3x4MzCBMBC/Fcioj4P1rkwNxg9tbmB3vlkyTxPEhGbm5lbkNXx04/n7mRbLJuHazBtCGyhudv1We68/1+Mv4f5CKGnluudT5fEf1rYsv1vtVj/4LJ8o3l4oD3mbkfEc3n/3xWF+E9qsTkQzeN/sBD/77VYv/gHAAAAAACArXPvTES8Ulj/t/j5W7q4/qerwfqfvog4vQX1r/35X3o/TyRbUB1Q8OBMxOvROP5zAx157t+19QCV5OLlyYljEfGfiDgSle4sP7LsuMUVwkc/P/BVs/qL6/+yLau/vhYwP9L9zmUX4o6PzYxt9ryBiAe3I56vrf89lO9Zuv4n6/+TBv1/Ft/X11nHgZfunm9Wtnb8A+1S/SbicMP+/+lwO1n9/hzDtfHAcH1UsNILH3/xfbP6xT+UJ+v/e1eP/+6keL+e6Y0dvysijs92VpuVtzr+70re6agfP/PR2MzMjZGIruTsyv2jG2sz7Fb1eKjHSxb/R15cff5vcfxfiMN9ETG3zjr/96Tvt2Zl+n8oTxb/46v3/wNL+/+NJ0bvDvzQpPrk/Lr6/xO1Pv1Ivsf8HxStvB/HegO0lOYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDMujYh/RZIOLabTdGgooi8i/hu96eTU9MzLF6c+uDaeldW+/z+tf9Nv/0I+qX///0BEVCIiy4/m+Xr58YjYHxFfduyr5YcuTE2Ol33yAAAAAAAAAAAAAAAAAAAAsEP01a75r3Yvv/4/83tH2a0D2q4z/yneYe/pbPmZ1e4tbQiw7VqPf+BZt/74r7S1HcD2ax7/jx5Xa7a1OcA2Mv6HvavF+PdxAewC+n/Yq9Y5p9fT7nYAZdD/AwAAAADArrL/0L1fkoiYe21fbct05WUW+8PulpbdAKA01vDC3tU5VXYLgLJ4jw8ki6m/Gl7s33z1f9KeBgEAAAAAAAAAAAAAKxw+6Pp/2KtWv/7f2n7YzVa5/r9R8LtdAOwizb/6Q98Pu533+ECyxh8C1/8DAAAAAAAAAAAAwA7Qc/PK2OTkxI3p2dUTXbH2Y9qYqDQqeqOFA3aXeRZZYm6szNrbk3jSniNXIsp91W1RIt3wWdRvwVFi40v+uwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACz6JwAA//8tkCr+") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_clone(0x2a000000, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001740)=@newtfilter={0x87c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xe, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xfffffff8, 0x7, 0xd9bb00, 0x6, 0x0, 0xfffffff9, 0x1, 0x2f1a, 0x706, 0x8d17, 0x1, 0x3, 0x2bce, 0x1, 0x3a12, 0x6, 0x2, 0x7, 0x4, 0x4, 0x2, 0x80000000, 0x5, 0x0, 0x380000, 0x6, 0x800, 0x4, 0x3ff, 0x4, 0x2, 0x8, 0x3ff, 0x29efb0b9, 0x4, 0x9, 0x39, 0x6, 0x0, 0x710f, 0x8, 0x5, 0x2, 0x7, 0xa4c, 0x9, 0x410a2d4c, 0x4ac, 0x316, 0x4, 0x5, 0x0, 0x2, 0x5, 0x7, 0x4, 0x7, 0x401, 0x2, 0x5b2b67f1, 0x5, 0x80000001, 0x2006, 0x66ef, 0x8, 0x40, 0xc, 0x1511, 0x9, 0x4, 0x91, 0x0, 0x9, 0x7, 0x6, 0x6, 0x2, 0x377, 0x7, 0x0, 0x3ff, 0xe, 0xffffa593, 0x33, 0xffff, 0x8, 0x1ff, 0x1, 0x1, 0x2, 0x3, 0x7, 0x4, 0x2, 0x3, 0x0, 0x10000000, 0x5, 0x800, 0x6, 0x3, 0x7ff, 0x5, 0x800000, 0x0, 0x2, 0xd3e1, 0x10, 0x6, 0x1ff, 0x9, 0x0, 0x40000, 0x9, 0xf, 0x2, 0x9, 0x1, 0xc5a9, 0x9, 0xe1, 0x2, 0xa, 0x3, 0xe1fc, 0x7, 0x7e900000, 0x1424, 0x4, 0x1, 0x8, 0x4, 0x2e4, 0x4, 0x15, 0x1000, 0x7, 0xd6f, 0x8, 0x166, 0x6, 0x200, 0x0, 0xa, 0x0, 0x101, 0x1, 0x6, 0x10001, 0x6, 0xc2, 0x2, 0xffffff00, 0x6, 0x3, 0x2, 0x5, 0x80, 0x400, 0x0, 0x7, 0x2, 0x4, 0xa, 0x0, 0x6, 0xe, 0x8000, 0x100, 0x8, 0x3, 0x4ff7dc7d, 0x6, 0x9, 0x9294, 0xa, 0xa8, 0x5, 0x371, 0x7, 0x9, 0x6, 0x4, 0x800, 0x3, 0x0, 0x2, 0x10000, 0x7f, 0x7f, 0x587e048d, 0x8, 0x8, 0x400, 0x7f, 0x2981, 0x6564960f, 0xa95, 0x3, 0x90b4, 0x4, 0x28, 0x8, 0xfffffb06, 0x400, 0x9, 0x7, 0x2, 0xffffffff, 0x4, 0x3, 0x6, 0x0, 0xfffffffb, 0x6, 0x8, 0xfff, 0x0, 0x2, 0x6, 0x7ff, 0x3, 0xff, 0x7ff, 0x5, 0x0, 0x7fffffff, 0x0, 0x0, 0x6, 0x3ff, 0x9, 0x8, 0x0, 0x1195, 0x48, 0x1009, 0x7, 0x3, 0x7f, 0x7, 0x0, 0x7, 0x100, 0x8, 0xffff8000, 0x52, 0x9, 0x2, 0xbfd, 0x9, 0xfffffffe, 0x5, 0x9, 0xe]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffff7, 0x7, 0x67f7, 0x4d, 0x8001, {0x6, 0x0, 0x3, 0xa4, 0xcf0d, 0x7e50e135}, {0x1, 0x0, 0x3, 0x3, 0x6, 0x2}, 0x2, 0x1, 0x80}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffd, 0x5, 0xac000000, 0x9, 0x1, 0x9, 0x10000, 0x6, 0x103, 0x7e22, 0x400, 0x8000000, 0x1, 0x80000000, 0x401, 0x10, 0x2, 0x271e2391, 0x80000000, 0x7583, 0x200, 0x0, 0x9, 0x2, 0x4, 0xfe9, 0x2, 0xe83f, 0x1, 0x62f, 0x7, 0x200, 0x800, 0x1, 0xfffffff7, 0x1, 0x9a, 0x3, 0x10001, 0x101, 0xa2, 0x4, 0x2, 0x8, 0x40, 0x3, 0x0, 0x8, 0xe, 0x0, 0x7, 0x8, 0xfffffffb, 0x6, 0x8, 0x4, 0x3, 0x200, 0xec3, 0xfffffd01, 0x9, 0xd, 0x9, 0xf911, 0x0, 0x5, 0x0, 0x4, 0x1, 0x1, 0x5, 0x80000000, 0x4, 0x9, 0x7, 0x1, 0x0, 0x6, 0x100, 0xf, 0x2, 0x5, 0x34cf, 0xa, 0x4, 0x7, 0x4, 0x88, 0xd9, 0x1000, 0xffff0a0c, 0x7, 0x3, 0x3e8, 0x9, 0x80, 0x3, 0x6, 0xcb0a, 0xe, 0x3, 0x9, 0x4, 0x7, 0x9, 0xfffffff8, 0x1, 0x6, 0x6, 0xc, 0x9, 0xfffffffd, 0x4, 0x3, 0x7, 0x1, 0x5, 0xedf, 0x81, 0x401, 0x7ff, 0x0, 0x8, 0x0, 0x6, 0xa29f, 0x101, 0x2, 0x7, 0x3, 0x200, 0x3, 0xffffffff, 0x3, 0x5, 0x8001, 0x9, 0x7ff, 0x9, 0x1, 0x2, 0xfffffff9, 0x3, 0x79cb, 0x7, 0xff, 0x501, 0x9, 0x3, 0x1, 0x6441, 0xfffffffe, 0x0, 0x4, 0x5, 0x87c, 0x5, 0x1, 0xfffffffd, 0x6, 0x4, 0x43a, 0x3ff, 0x2, 0xfffffffb, 0x400, 0x6, 0x10000, 0x5, 0x7, 0x6fd7, 0x0, 0x2000ff, 0x80000001, 0x599, 0x7, 0xfffff001, 0x3, 0x1, 0x1, 0x1, 0x7, 0x7, 0x1c, 0x3, 0x3, 0x15, 0xa, 0xc, 0x6, 0x9, 0x5, 0x47c, 0x8, 0xa09, 0x0, 0x0, 0x3, 0xd, 0xa655, 0xd, 0xdb8, 0x9, 0x0, 0x5b6, 0xfffffffc, 0x2, 0x7, 0xdf3, 0x5, 0xd09, 0x7272, 0x5b, 0x3, 0x6, 0x7, 0x70, 0x2, 0x10000, 0x20000000, 0x6, 0x0, 0x0, 0x3, 0x4, 0x7, 0x7, 0x3, 0x8000, 0x4, 0x9, 0x10000, 0x40, 0x4, 0x7fff, 0x7ff, 0xd, 0x6, 0xe0fc, 0x2, 0x9, 0x9, 0x80000001, 0xbf, 0xf7fffff8, 0x1000, 0x8, 0x634, 0x4775, 0x3, 0x8, 0x4, 0x5, 0x4, 0x8000, 0x6]}]}]}}]}, 0x87c}}, 0x0) write$tun(r0, &(0x7f0000001fc0)=ANY=[], 0x34) 2m22.644061566s ago: executing program 4 (id=124): r0 = socket$inet_udp(0x2, 0x2, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)) bind$inet(r0, &(0x7f0000000000)={0x2, 0x8000, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) syz_emit_ethernet(0x0, 0x0, 0x0) close(0xffffffffffffffff) unshare(0x22020600) socket$packet(0x11, 0x3, 0x300) 2m20.235818593s ago: executing program 4 (id=137): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x42) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCSBRK(r1, 0x400455c8, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000003c0)=0xc0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x6) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000440)=0x2f) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000480)=0xcf) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000004c0)) 2m20.188967268s ago: executing program 32 (id=137): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x42) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCSBRK(r1, 0x400455c8, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000003c0)=0xc0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x6) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000440)=0x2f) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000480)=0xcf) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000004c0)) 1m59.244292371s ago: executing program 5 (id=234): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x6, 0x4, 0x6, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r3, 0x0, 0xa0028000}, 0x38) 1m58.339927164s ago: executing program 5 (id=244): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000400)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000500), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000540), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x6) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) 1m57.457109965s ago: executing program 5 (id=247): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000340)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000380)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) 1m56.267196627s ago: executing program 5 (id=251): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x3, &(0x7f0000000280)={[{@debug}, {@nobarrier}, {@norecovery}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x8, 0x624, &(0x7f0000004580)="$eJzs3c9vVNUeAPDvve20pX3vtZCX98SFNDEGEqWlBQwxJsKeEPyxc1VpIUihhNZokcSS4MbEuHFh4sqF+F8oiVsXbl24cWVIiDFdgCEy5k7vlNt2pj+mnd7Sfj7JpefcM3PPuWW+PWfOnHsngD1rMPsnjTgYEdeTiP5CWWfkhYMLj5v/89aFbEuiWn37jyRufZLMFY+V5D/78if/3R/Jz2nEgY6V9U7P3rwyNjk5cSPPD89cvT48PXvz6OWrY5cmLk1cG3119NTJEydPjRzb1PkVqz575/0P+z879+63Xz9ORr779VwSp+NJ/oDsvJY/t3tTNWe/s8GoLnhU3J/9Xk9t8tg7xcP++uvkqWT5Dnasi/nrsRIR/4/+6Cj8b/bHp2+W2jigrapJ1PsoYM9JWor/nq1vCLDN6uOA+nv7+XQ9b97S9g5KgG3x4MzCBMBC/Fcioj4P1rkwNxg9tbmB3vlkyTxPEhGbm5lbkNXx04/n7mRbLJuHazBtCGyhudv1We68/1+Mv4f5CKGnluudT5fEf1rYsv1vtVj/4LJ8o3l4oD3mbkfEc3n/3xWF+E9qsTkQzeN/sBD/77VYv/gHAAAAAACArXPvTES8Ulj/t/j5W7q4/qerwfqfvog4vQX1r/35X3o/TyRbUB1Q8OBMxOvROP5zAx157t+19QCV5OLlyYljEfGfiDgSle4sP7LsuMUVwkc/P/BVs/qL6/+yLau/vhYwP9L9zmUX4o6PzYxt9ryBiAe3I56vrf89lO9Zuv4n6/+TBv1/Ft/X11nHgZfunm9Wtnb8A+1S/SbicMP+/+lwO1n9/hzDtfHAcH1UsNILH3/xfbP6xT+UJ+v/e1eP/+6keL+e6Y0dvysijs92VpuVtzr+70re6agfP/PR2MzMjZGIruTsyv2jG2sz7Fb1eKjHSxb/R15cff5vcfxfiMN9ETG3zjr/96Tvt2Zl+n8oTxb/46v3/wNL+/+NJ0bvDvzQpPrk/Lr6/xO1Pv1Ivsf8HxStvB/HegO0lOYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDMujYh/RZIOLabTdGgooi8i/hu96eTU9MzLF6c+uDaeldW+/z+tf9Nv/0I+qX///0BEVCIiy4/m+Xr58YjYHxFfduyr5YcuTE2Ol33yAAAAAAAAAAAAAAAAAAAAsEP01a75r3Yvv/4/83tH2a0D2q4z/yneYe/pbPmZ1e4tbQiw7VqPf+BZt/74r7S1HcD2ax7/jx5Xa7a1OcA2Mv6HvavF+PdxAewC+n/Yq9Y5p9fT7nYAZdD/AwAAAADArrL/0L1fkoiYe21fbct05WUW+8PulpbdAKA01vDC3tU5VXYLgLJ4jw8ki6m/Gl7s33z1f9KeBgEAAAAAAAAAAAAAKxw+6Pp/2KtWv/7f2n7YzVa5/r9R8LtdAOwizb/6Q98Pu533+ECyxh8C1/8DAAAAAAAAAAAAwA7Qc/PK2OTkxI3p2dUTXbH2Y9qYqDQqeqOFA3aXeRZZYm6szNrbk3jSniNXIsp91W1RIt3wWdRvwVFi40v+uwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACz6JwAA//8tkCr+") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_clone(0x2a000000, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001740)=@newtfilter={0x87c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xe, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xfffffff8, 0x7, 0xd9bb00, 0x6, 0x0, 0xfffffff9, 0x1, 0x2f1a, 0x706, 0x8d17, 0x1, 0x3, 0x2bce, 0x1, 0x3a12, 0x6, 0x2, 0x7, 0x4, 0x4, 0x2, 0x80000000, 0x5, 0x0, 0x380000, 0x6, 0x800, 0x4, 0x3ff, 0x4, 0x2, 0x8, 0x3ff, 0x29efb0b9, 0x4, 0x9, 0x39, 0x6, 0x0, 0x710f, 0x8, 0x5, 0x2, 0x7, 0xa4c, 0x9, 0x410a2d4c, 0x4ac, 0x316, 0x4, 0x5, 0x0, 0x2, 0x5, 0x7, 0x4, 0x7, 0x401, 0x2, 0x5b2b67f1, 0x5, 0x80000001, 0x2006, 0x66ef, 0x8, 0x40, 0xc, 0x1511, 0x9, 0x4, 0x91, 0x0, 0x9, 0x7, 0x6, 0x6, 0x2, 0x377, 0x7, 0x0, 0x3ff, 0xe, 0xffffa593, 0x33, 0xffff, 0x8, 0x1ff, 0x1, 0x1, 0x2, 0x3, 0x7, 0x4, 0x2, 0x3, 0x0, 0x10000000, 0x5, 0x800, 0x6, 0x3, 0x7ff, 0x5, 0x800000, 0x0, 0x2, 0xd3e1, 0x10, 0x6, 0x1ff, 0x9, 0x0, 0x40000, 0x9, 0xf, 0x2, 0x9, 0x1, 0xc5a9, 0x9, 0xe1, 0x2, 0xa, 0x3, 0xe1fc, 0x7, 0x7e900000, 0x1424, 0x4, 0x1, 0x8, 0x4, 0x2e4, 0x4, 0x15, 0x1000, 0x7, 0xd6f, 0x8, 0x166, 0x6, 0x200, 0x0, 0xa, 0x0, 0x101, 0x1, 0x6, 0x10001, 0x6, 0xc2, 0x2, 0xffffff00, 0x6, 0x3, 0x2, 0x5, 0x80, 0x400, 0x0, 0x7, 0x2, 0x4, 0xa, 0x0, 0x6, 0xe, 0x8000, 0x100, 0x8, 0x3, 0x4ff7dc7d, 0x6, 0x9, 0x9294, 0xa, 0xa8, 0x5, 0x371, 0x7, 0x9, 0x6, 0x4, 0x800, 0x3, 0x0, 0x2, 0x10000, 0x7f, 0x7f, 0x587e048d, 0x8, 0x8, 0x400, 0x7f, 0x2981, 0x6564960f, 0xa95, 0x3, 0x90b4, 0x4, 0x28, 0x8, 0xfffffb06, 0x400, 0x9, 0x7, 0x2, 0xffffffff, 0x4, 0x3, 0x6, 0x0, 0xfffffffb, 0x6, 0x8, 0xfff, 0x0, 0x2, 0x6, 0x7ff, 0x3, 0xff, 0x7ff, 0x5, 0x0, 0x7fffffff, 0x0, 0x0, 0x6, 0x3ff, 0x9, 0x8, 0x0, 0x1195, 0x48, 0x1009, 0x7, 0x3, 0x7f, 0x7, 0x0, 0x7, 0x100, 0x8, 0xffff8000, 0x52, 0x9, 0x2, 0xbfd, 0x9, 0xfffffffe, 0x5, 0x9, 0xe]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffff7, 0x7, 0x67f7, 0x4d, 0x8001, {0x6, 0x0, 0x3, 0xa4, 0xcf0d, 0x7e50e135}, {0x1, 0x0, 0x3, 0x3, 0x6, 0x2}, 0x2, 0x1, 0x80}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffd, 0x5, 0xac000000, 0x9, 0x1, 0x9, 0x10000, 0x6, 0x103, 0x7e22, 0x400, 0x8000000, 0x1, 0x80000000, 0x401, 0x10, 0x2, 0x271e2391, 0x80000000, 0x7583, 0x200, 0x0, 0x9, 0x2, 0x4, 0xfe9, 0x2, 0xe83f, 0x1, 0x62f, 0x7, 0x200, 0x800, 0x1, 0xfffffff7, 0x1, 0x9a, 0x3, 0x10001, 0x101, 0xa2, 0x4, 0x2, 0x8, 0x40, 0x3, 0x0, 0x8, 0xe, 0x0, 0x7, 0x8, 0xfffffffb, 0x6, 0x8, 0x4, 0x3, 0x200, 0xec3, 0xfffffd01, 0x9, 0xd, 0x9, 0xf911, 0x0, 0x5, 0x0, 0x4, 0x1, 0x1, 0x5, 0x80000000, 0x4, 0x9, 0x7, 0x1, 0x0, 0x6, 0x100, 0xf, 0x2, 0x5, 0x34cf, 0xa, 0x4, 0x7, 0x4, 0x88, 0xd9, 0x1000, 0xffff0a0c, 0x7, 0x3, 0x3e8, 0x9, 0x80, 0x3, 0x6, 0xcb0a, 0xe, 0x3, 0x9, 0x4, 0x7, 0x9, 0xfffffff8, 0x1, 0x6, 0x6, 0xc, 0x9, 0xfffffffd, 0x4, 0x3, 0x7, 0x1, 0x5, 0xedf, 0x81, 0x401, 0x7ff, 0x0, 0x8, 0x0, 0x6, 0xa29f, 0x101, 0x2, 0x7, 0x3, 0x200, 0x3, 0xffffffff, 0x3, 0x5, 0x8001, 0x9, 0x7ff, 0x9, 0x1, 0x2, 0xfffffff9, 0x3, 0x79cb, 0x7, 0xff, 0x501, 0x9, 0x3, 0x1, 0x6441, 0xfffffffe, 0x0, 0x4, 0x5, 0x87c, 0x5, 0x1, 0xfffffffd, 0x6, 0x4, 0x43a, 0x3ff, 0x2, 0xfffffffb, 0x400, 0x6, 0x10000, 0x5, 0x7, 0x6fd7, 0x0, 0x2000ff, 0x80000001, 0x599, 0x7, 0xfffff001, 0x3, 0x1, 0x1, 0x1, 0x7, 0x7, 0x1c, 0x3, 0x3, 0x15, 0xa, 0xc, 0x6, 0x9, 0x5, 0x47c, 0x8, 0xa09, 0x0, 0x0, 0x3, 0xd, 0xa655, 0xd, 0xdb8, 0x9, 0x0, 0x5b6, 0xfffffffc, 0x2, 0x7, 0xdf3, 0x5, 0xd09, 0x7272, 0x5b, 0x3, 0x6, 0x7, 0x70, 0x2, 0x10000, 0x20000000, 0x6, 0x0, 0x0, 0x3, 0x4, 0x7, 0x7, 0x3, 0x8000, 0x4, 0x9, 0x10000, 0x40, 0x4, 0x7fff, 0x7ff, 0xd, 0x6, 0xe0fc, 0x2, 0x9, 0x9, 0x80000001, 0xbf, 0xf7fffff8, 0x1000, 0x8, 0x634, 0x4775, 0x3, 0x8, 0x4, 0x5, 0x4, 0x8000, 0x6]}]}]}}]}, 0x87c}}, 0x0) write$tun(r0, &(0x7f0000001fc0)=ANY=[], 0x34) 1m56.175019807s ago: executing program 5 (id=253): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040000) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x0, [0x2, 0x8, 0x3, 0x5, 0x2, 0x9, 0x2, 0xb, 0xc, 0xc, 0x1, 0x9, 0x9, 0xc, 0x1, 0x1], 0x1, [0x83, 0x8000, 0x3e63, 0x1, 0x466, 0x5, 0x7ff, 0x0, 0xaf, 0x9, 0x3, 0x9, 0x8e, 0xd4de, 0xb, 0xd], [0x2, 0x7, 0x6, 0x3ff, 0x101, 0x100, 0x5, 0xfffb, 0xfffb, 0x1000, 0x101, 0x81, 0x7fff, 0x4, 0x0, 0x7]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x41}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100705b8b74000001410000001c001700000001000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 1m54.459616553s ago: executing program 5 (id=261): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x200000) pwrite64(r0, &(0x7f00000000c0)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000140)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000200)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f0000000240)='12345678-1234', 0xd, 0xc30) pwrite64(r0, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) r1 = syz_open_dev$loop(&(0x7f0000000480), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 1m54.448491824s ago: executing program 33 (id=261): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x200000) pwrite64(r0, &(0x7f00000000c0)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000140)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000200)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f0000000240)='12345678-1234', 0xd, 0xc30) pwrite64(r0, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) r1 = syz_open_dev$loop(&(0x7f0000000480), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 9.43363754s ago: executing program 2 (id=900): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0xb, 0x8000, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r0, &(0x7f0000000600), &(0x7f0000000080)=""/61}, 0x20) 7.599612578s ago: executing program 2 (id=905): socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x200, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) 5.772936446s ago: executing program 2 (id=912): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0xc02, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40042, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0xfa, 0x8, 0x7fffffff}]}) setns(0xc9, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x10) 5.338067321s ago: executing program 1 (id=915): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002000)=ANY=[@ANYBLOB="28000000130a01030000000000000000020000000900010073797a30"], 0x28}}, 0x0) 5.227088192s ago: executing program 0 (id=917): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000}, 0xfeda) listen(r1, 0x0) r2 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000880)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$nfc_llcp(r1, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f00000008c0)={&(0x7f0000000a40)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x0, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x8804) 4.845553242s ago: executing program 2 (id=920): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000380), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000003c0), 0x80002c1, 0x2, 0x0) mremap(&(0x7f0000266000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000233000/0x3000)=nil) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4010d00, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x2200002, &(0x7f0000000600), 0x1, 0x585, &(0x7f0000000780)="$eJzs3V1rHNUbAPBnNi99Sf//plCKeiGBXlip3TSJLxWE1kvRYkHv65JMQ8mmW7Kb0sRC2wsL4o0UQcSC+AG897L4AfRTFLRQpAS98GZlNrPNNtnNWzdN6v5+MO05M5N95uyZc/aZnV02gJ41kv1TiHg5Ir5OIg5H1Jvb+iPfOLK839LjG5PZkkS9/smfSST5uub+Sf7/UF55KSJ++SLiZGFt3OrC4kypXE7n8vpobfbqaHVh8dTl2dJ0Op1eGZ+YOPPWxPi777zdtba+fuHv7z6+/8GZr44vffvTwyN3kzgXh/Jtre14BrdaKyMxkj8nA3Fu1Y5jXQi2lyS7fQBsS18+zgcimwMOR18+6oH/vpsRUQd6VGL8Q49q5gHNa/suXQe/MB69v3wBtLb9/cvvjcT+xrXRwaXkqSuj7Hp3uAvxsxg//3HvbrbEBu9D3OxCPICmW7cj4nR//9r5L8nnv+073XjzeH2rY/Ta6w/spvtZ/vNGu/yn8CT/iTb5z1CbsbsdG4//wsMuhOkoy//ea5v/Ppm6hvvy2v8aOd9AculyOT0dEf+PiBMxsC+rr3c/58zSg3qnba35X7Zk8Zu5YH4cD/v3Pf03U6Va6Vna3OrR7YhXVvLfJNbM//sbue7q/s+ejwtZ4dcvN4xxLL33aqdtG7e/Vfcz4PqPEa+17f+VO1rJ+vcnRxvnw2jzrFjrrzvHfusUf2vt776s/w+u3/7hpPV+bXXrMX7Y/0/aadt2z//B5NNGeTBfd71Uq82NRQwmH61dP77yt816c/+s/SeOrz//tTv/D0TEZ5ts/52jdzruuhf6f2pL/b/1woMPP/++U/zN9f+bjdKJfM1m5r/NHuCzPHcAAAAAAACw1xQi4lAkheKTcqFQLC5/vuNoHCyUK9XayUuV+StT0fiu7HAMFJp3ug+3fB5iLP88bLM+vqo+ERFHIuKbvgONenGyUp7a7cYDAAAAAAAAAAAAAAAAAADAHjHU4fv/md/7dvvogB3nJ7+hd62M/6T9Dt34pSdgT/L6D71rE+N/6HkcB/D8ef2H3mX8Q+8y/qF3Gf/Qu4x/6F3GPwAAAAAAAAAAAAAAAAAAAAAAAAAAAHTVhfPns6W+9PjGZFafurYwP1O5dmoqrc4UZ+cni5OVuavF6UplupwWJyuzGz1euVK5OjYe89dHa2m1NlpdWLw4W5m/Urt4ebY0nV5MB55LqwAAAAAAAAAAAAAAAAAAAODFUl1YnCmVy+ncjhYGY8dD7GDhbOyJw9h2Idmol8/mJ8OWHjnyQv/uN1BhBwq7PDEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIt/AwAA///+lzT4") mkdirat(0xffffffffffffff9c, &(0x7f0000000d80)='./proc\x00', 0x180) mount$overlay(0x0, &(0x7f0000000dc0)='./bus\x00', &(0x7f0000000e00), 0x8, &(0x7f0000000e40)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './proc'}}]}) 4.286668879s ago: executing program 1 (id=922): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x10800, &(0x7f0000000080)=ANY=[], 0x2, 0x195, &(0x7f0000002440)="$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") prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioprio_get$pid(0x1, r0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 4.266355471s ago: executing program 0 (id=923): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000600)={0x1, 'lo\x00'}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) write(r2, &(0x7f0000000400)='PING', 0x4) accept4(r0, 0x0, 0x0, 0x0) close(r2) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000800)={0x1, 'lo\x00'}, 0x18) 4.08054666s ago: executing program 6 (id=924): socket$packet(0x11, 0x3, 0x300) openat$vcsu(0xffffffffffffff9c, &(0x7f0000001740), 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000440), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f00000014c0)=ANY=[@ANYBLOB="000008050000010b007e0b0a43b820a8e8c9881db642", @ANYRES8=r0, @ANYRES64=r1], 0x97) 3.295777081s ago: executing program 1 (id=926): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRES32], 0x3, 0x257, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xebf92000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000ac0)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x24}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 3.267630874s ago: executing program 0 (id=927): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x40044160, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x11) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r0, 0x40, 0x41d9fda7) setpriority(0x0, r0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) r2 = syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) exit(0x8) wait4(r2, 0x0, 0x8, 0x0) 3.115591729s ago: executing program 6 (id=928): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @empty, 0x0, 0x3, 'none\x00', 0x0, 0x7ff}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) 2.655654627s ago: executing program 3 (id=931): ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000080)=0x6) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x810, &(0x7f0000000140)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000180)="$eJzs3c9vG1kdAPDvTOImm3U3XdgDIGDLslDQqs6P7kYrONC9gNBqJcSKE4duSNwoil1HcVKa0ENy5I5EJU7wJ3DjgNQTB27c4MalHJAqqEANUg9GM54mJoljs03iJv58pPHMe+P4+57t957nJc4LYGhdjYjtiLgUEZ9ExGSRnxRb3Gxv2f2ePrm/sPvk/kISrdbH/0jy81ledPxM5tXiMccj4offi/hJcjhuc3NrZb5Wq64V6an1+upUc3Pr+nJa5MzOzcxNv3/jvdkTq+ub9d8+/u7yhz/6/e++9OhP29/8WVas8s8v5+c663GS2lUvRbkjbzQiPjyNYAMyWrx/OH+y1vaZiHgrb/+TMZK/mv05olkDAOdAqzUZrcnONABw0WXX/+VI0koxF1CONK1U2nN4b8REWms019+ZbGzcWYx8DutKlNLby7XqdDFXeCVKSZaeyY/307MH0jci4vWI+MXYK3m6stCoLQ7ygw8ADLFXD4z//x5rj/8AwAU3PugCAABnzvgPAMPH+A8Aw+f/GP/7/3YgAPBSc/0PAMPH+A8Aw6fn+L9zNuUAAM7EDz76KNtau8X/v168u7nx7fLd64vV5kqlvrFQWWisrVaWGo2lWrWy0Gr1erxao7E68+5esrm5dave2Lizfmu5Pr9UvVUtnXJ9AIDeXn/z4V+SiNj+1iv5Fh1rORir4WJLB10AYGBGBl0AYGB8nweGVx/X+KYB4ILrtZZn1z8RemDxVzivrn3e/D8MK/P/MLw+3fz/d068HMDZM/8Pw6vVSqz5DwBDxhw/8EK//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAhVc63JK3ka4FvZ7dppRJxOSKuRCm5vVyrTkfEaxHx57HSWJaeGXShAYAXlP49Kdb/ujb5dvng2UvJf8byfUT89Fcf//Le/Pr62kyW/8+9/PUHRf7spUFUAADodPNwVnucLvYdF/JPn9xfeL6dZREff9BeXDSLu1ts7TOjMZrvx6MUERP/Sop0W/Z5ZeQE4m/vRMTn9ut/ryNCOZ8Daa98ejB+FvvyKcTff/4Pxk//J36an8v2pfy5+OwJlAWGzcMP2v1k0fayJla0vzSu5vuj2/943kO9uOf93+6h/i/d6/9GDsVP8jZ/dS99fEkev/uH7x/KbE22z+1EfGH0qPjJXvykS//7dp91/OsXv/xWt3OtX0dci6Pjt9XzbnZqvb461dzcur5cn1+qLlXvzM7OzcxNv3/jvdmpfI66ffvHAw//rFjm/rWuz81OxESX+OM96v+1Puv/m2ef/Pgrx8T/xlePfv3fOCZ+NiZ+vc/48xM3uy7fncVf7FL/Xq//O33Gf/S3rcU+7woAnIHm5tbKfK1WXetxkH3W7HUfB+fzILYjXoJi9DpIi7fsy1KeC35wTKeRnlHnBJyq/UY/6JIAAAAAAAAAAAAAAADdNDe3VsbidL9ONOg6AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHH9NwAA//8tM9Id") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000006c0)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x4, 0xffffffffffffffff, 0x8000000000000}, {0xdfffffff, 0xa0, 0x9, 0xa, 0x2e5}]}) listen(0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000800)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3c0000001400030500008000ffdbdf2502075bff", @ANYRES32=r4, @ANYBLOB="080002007f00000108000400ac1e0001140003"], 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000900)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 2.640371338s ago: executing program 3 (id=932): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = inotify_init1(0x800) r4 = inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x60000526) inotify_rm_watch(r3, r4) 2.216005782s ago: executing program 6 (id=933): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002000)=ANY=[@ANYBLOB="28000000130a01030000000000000000020000000900010073797a30"], 0x28}}, 0x0) 2.210499502s ago: executing program 1 (id=934): syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setuid(0xee01) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) setns(0xc9, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x42) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) setreuid(0x0, 0xffffffffffffffff) io_getevents(0x0, 0x8000000000000000, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x201042, &(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYBLOB]) 2.180855566s ago: executing program 0 (id=935): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x401, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20004090) 1.715701744s ago: executing program 3 (id=936): r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) rt_sigprocmask(0x2, &(0x7f0000000080)={[0xffffffffffffffff]}, 0x0, 0x8) r1 = getpid() r2 = gettid() syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file2\x00', 0xf4ddc3267dd022d3, &(0x7f0000000480)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB="2c63727566742c646d6f64653d3078303030303030303030303030303030352c6f76657272696465726f636b7065726d2c73686f776173736f632c7065726d69745f646972656374696f2c736d73726f6f743d63727566742c004ef38bc576ab64c53f16e96fd52f000000653f208615df39cede52a3565e692d60a4ff07fa1d591fc9a537ff5c37c22628c35863cb192d5806c780471ca1d3ba6ccff6a3b3cb4e3b224c95ab069a7a"], 0x3, 0x562, &(0x7f00000009c0)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = memfd_create(&(0x7f0000000040)='\\\\&\x0e\x00', 0x1) copy_file_range(r3, 0x0, r3, &(0x7f0000000080)=0xde27, 0x3, 0x0) rt_tgsigqueueinfo(r1, r2, 0x1f, &(0x7f0000000000)={0x17, 0xb, 0x82}) ppoll(0x0, 0x0, 0x0, &(0x7f0000000100), 0x8) 1.506974165s ago: executing program 3 (id=937): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x6, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000280)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000002c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000300)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r1, &(0x7f0000000500)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r1, &(0x7f0000000540)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 1.502145905s ago: executing program 1 (id=938): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000300)={&(0x7f0000000340)=@hci, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000840)={0xf010002, @pix_mp={0x800, 0x93, 0x30314742, 0x7, 0x3, [{0x1, 0x3c9a}, {0x100, 0xfffffff7}, {0x101, 0x6}, {0x8, 0x1}, {0x1, 0x5}, {0x1}, {0xff, 0xf1}, {0x7f, 0xfff}], 0x2a, 0x7, 0xc, 0x2, 0x4}}) sendmsg$tipc(r4, &(0x7f0000000500)={0x0, 0xfffffff5, &(0x7f0000000540)=[{&(0x7f0000000580)="a2", 0xfffffdef}], 0x1}, 0x0) 961.457201ms ago: executing program 0 (id=939): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() openat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file1\x00', 0x14b442, 0x82) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b702000023000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d0000009700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000000000639100000000000000000000ff7f0000292f17cee19d0001000000000000000000cb04fcbb0ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4852f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5d053bdec75dca3772be2c9d2d29db3d36dd01797bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1b1b71b5f7ec6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc972a3fd2c46f3c1cde71a19d1a2982492aba0883783d2831210e00d2bfea3bf97ff8836d000000000000946bdb747e416b3064edb4f5aea06eba207ddab9f9baf98bc5192f23d95d33357fc55f92e5937e10995059f3348f69667b9260d504ba96446e1437af6fa875d9d32fdaaae01e6c74f192a23572ef582b7dd867c163c8cedaa2a2c5baceb37d4a40244c9bdca541cc7e65e20f5b5b735e2f33df9bd0614431d7dc5e47bb31c5b827d51733b64ddad4de1cdadce076d19d62e821b435619fb89fc07f81938200b4ebce83db57a6f5e9b1c2cf4b6ee90772d4865bf448d200e5c4e1e044d3587498128273b65670c02ff5c3c3ca633c41324fdc09e0b2621087db26bb0553612f2be27579ede2344a809e6b27d0044f2337895323357caddb54642dac82ae25deb08e111e0b9fa133c9da85dc50c3454ee0ff915331bd7f32f96fb55c7990334b1a1bc4d5d817b82f9fc278cc4858fbfa4d0f32a863c1ce050caddc5ca3b10c3e63daebba039e9f80fdef113a145ace522e8379474aa8849dcc2501df3ffcb02d29d55a1a2cbe00e836db0e6b0a7ffd680dbcf7b982a956998df3dce0e9091a4d736db69038061e"], &(0x7f0000000dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000e00), 0x0, 0x10, &(0x7f0000000e40), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e80)={r3, 0x1f00, 0x18, 0x19, &(0x7f0000000f00)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000f40)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000001000)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) 949.773162ms ago: executing program 6 (id=940): sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x68) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) 828.178685ms ago: executing program 6 (id=941): prctl$PR_SET_SECUREBITS(0x1c, 0x15) write(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) personality(0xfe47fef9f5ff7379) io_setup(0x20fe, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) fchdir(0xffffffffffffffff) mount(0x0, 0x0, 0x0, 0x188, 0x0) capset(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101040, 0x177) faccessat(0xffffffffffffff9c, 0x0, 0x7) 456.009263ms ago: executing program 1 (id=942): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380), 0xc) sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2}, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}, {0x0, [0x0, 0x51]}}, &(0x7f00000005c0)=""/240, 0x40, 0xf0, 0x1}, 0x20) 446.368334ms ago: executing program 2 (id=943): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x40}}, 0x40008) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001540)=@bpf_lsm={0xc, 0x3, &(0x7f0000001600)=ANY=[@ANYBLOB="150a00000000000061115f000000000095"], 0x0}, 0x94) syz_read_part_table(0x105b, &(0x7f00000004c0)="$eJzsz71tAjEABeB3VuLEyhzJCKmzROr0KWEMCsQQ17AUC1BQ0h3iOH4WQAjp+5onP+nZcniorub/r387HYZrPeXL0CUly9nH92vmNUkd+5990spnkm0/LRZjrHabr2OWltrOt713Q7tMb94pv+t7/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnsEhAAD//xpBDoU=") accept(0xffffffffffffffff, &(0x7f00000002c0)=@isdn, &(0x7f0000000340)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x15, 0x8, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) write(r1, &(0x7f00000001c0)='2', 0x1) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0xfffffffffffffffe) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f00000003c0)={r1, r3}, 0xc) 442.392404ms ago: executing program 6 (id=944): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r1, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r4, r2, 0x15, 0x0, @val=@netkit={@void, @value, @void, @void, r3}}, 0x1c) r5 = socket$inet(0x2, 0x1, 0x0) getsockopt$IP_SET_OP_VERSION(r5, 0x1, 0x2f, 0x0, &(0x7f0000000100)) 437.952055ms ago: executing program 3 (id=945): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@delchain={0x34, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, r6, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 317.482487ms ago: executing program 2 (id=946): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup(r6) sendmsg$inet6(r7, &(0x7f00000008c0)={&(0x7f0000000900)={0xa, 0x4e24, 0x8004, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, 0x47, &(0x7f0000000940)=[{&(0x7f0000000980)="f0", 0x1}], 0x1}, 0x40054) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x12, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0) 271.659242ms ago: executing program 3 (id=947): syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') read$FUSE(r0, &(0x7f00000009c0)={0x2020}, 0x2020) syz_emit_ethernet(0x5e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000186dd61bbddf000283aff7e8800000000000000000000000001", @ANYRES32], 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) pread64(r0, &(0x7f0000000940)=""/126, 0x7e, 0xe) read$usbmon(r0, &(0x7f00000000c0)=""/170, 0xaa) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 0s ago: executing program 0 (id=948): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000000)=""/49, 0x31) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0xa) getdents64(r3, &(0x7f0000000000)=""/49, 0x31) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', r1, &(0x7f0000000300)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): already exists on: batadv_slave_1 [ 66.904908][ T4991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.909878][ T4991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.911511][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.913430][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.921367][ T4991] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.923112][ T4991] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.924854][ T4991] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.926607][ T4991] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.973443][ T4530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.975273][ T4530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.976999][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.993749][ T4530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.995214][ T4530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.996712][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.081221][ T5331] loop1: detected capacity change from 0 to 128 [ 67.104382][ T5331] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 67.242455][ T1033] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 68.145921][ T5372] loop0: detected capacity change from 0 to 512 [ 68.192496][ T5376] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 68.204795][ T5376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.215'. [ 68.539862][ T5372] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 68.555328][ T5372] FAT-fs (loop0): Filesystem has been set read-only [ 68.556976][ T5372] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 68.559188][ T5372] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 68.570914][ T5381] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 68.795661][ T5409] FAULT_INJECTION: forcing a failure. [ 68.795661][ T5409] name failslab, interval 1, probability 0, space 0, times 1 [ 68.799223][ T5409] CPU: 1 PID: 5409 Comm: syz.5.224 Not tainted syzkaller #0 [ 68.800705][ T5409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 68.802403][ T5409] Call trace: [ 68.802978][ T5409] dump_backtrace+0x1c4/0x1f0 [ 68.803833][ T5409] show_stack+0x2c/0x3c [ 68.804628][ T5409] __dump_stack+0x30/0x40 [ 68.805430][ T5409] dump_stack_lvl+0xf4/0x15c [ 68.806313][ T5409] dump_stack+0x1c/0x5c [ 68.807049][ T5409] should_fail_ex+0x3cc/0x524 [ 68.807902][ T5409] __should_failslab+0xc0/0x11c [ 68.808859][ T5409] should_failslab+0x10/0x28 [ 68.809664][ T5409] kmem_cache_alloc+0x88/0x310 [ 68.810525][ T5409] __kernfs_new_node+0xec/0x5fc [ 68.811417][ T5409] kernfs_new_node+0x120/0x230 [ 68.812350][ T5409] __kernfs_create_file+0x60/0x2e0 [ 68.813355][ T5409] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 68.814416][ T5409] internal_create_group+0x3e8/0xb24 [ 68.815444][ T5409] sysfs_create_groups+0x60/0x134 [ 68.816399][ T5409] kobject_add_internal+0x5e4/0xb18 [ 68.817284][ T5409] kobject_add+0x144/0x20c [ 68.818071][ T5409] blk_register_queue+0x84/0x334 [ 68.818965][ T5409] device_add_disk+0x53c/0xe04 [ 68.819770][ T5409] md_alloc+0x6a4/0xb3c [ 68.820553][ T5409] add_named_array+0x210/0x3f0 [ 68.821412][ T5409] param_attr_store+0x1cc/0x2ac [ 68.822370][ T5409] module_attr_store+0x6c/0x94 [ 68.823308][ T5409] sysfs_kf_write+0x1f8/0x274 [ 68.824081][ T5409] kernfs_fop_write_iter+0x390/0x4b4 [ 68.824995][ T5409] vfs_write+0x3c8/0x7c8 [ 68.825763][ T5409] ksys_write+0x12c/0x228 [ 68.826465][ T5409] __arm64_sys_write+0x7c/0x90 [ 68.827394][ T5409] invoke_syscall+0x98/0x290 [ 68.828259][ T5409] el0_svc_common+0x13c/0x258 [ 68.829107][ T5409] do_el0_svc+0x5c/0x134 [ 68.829859][ T5409] el0_svc+0x58/0x12c [ 68.830597][ T5409] el0t_64_sync_handler+0x84/0xf0 [ 68.831523][ T5409] el0t_64_sync+0x18c/0x190 [ 68.837546][ T5409] kobject_add_internal failed for queue (error: -12 parent: md_syzf2) [ 68.886030][ T5419] tipc: Enabling of bearer rejected, failed to enable media [ 68.937266][ T5423] netlink: 'syz.5.227': attribute type 12 has an invalid length. [ 68.952144][ T5423] loop5: detected capacity change from 0 to 512 [ 68.979289][ T5423] EXT4-fs (loop5): orphan cleanup on readonly fs [ 68.981395][ T5423] __quota_error: 5 callbacks suppressed [ 68.981405][ T5423] Quota error (device loop5): v2_read_file_info: Block with free entry 9 out of range (1, 6). [ 68.984644][ T5423] EXT4-fs warning (device loop5): ext4_enable_quotas:7100: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 68.988694][ T5423] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 69.316539][ T5423] EXT4-fs error (device loop5): ext4_orphan_get:1435: comm syz.5.227: bad orphan inode 14 [ 69.323655][ T5423] ext4_test_bit(bit=13, block=18) = 1 [ 69.325450][ T5423] is_bad_inode(inode)=0 [ 69.329626][ T5436] netlink: 'syz.1.228': attribute type 1 has an invalid length. [ 69.330067][ T5423] NEXT_ORPHAN(inode)=0 [ 69.332067][ T5423] max_ino=32 [ 69.332886][ T5423] i_nlink=1 [ 69.333530][ T5423] EXT4-fs (loop5): 1 truncate cleaned up [ 69.337996][ T5436] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.342563][ T5423] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 69.361200][ T5436] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 69.363059][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 69.422294][ T4991] EXT4-fs (loop5): unmounting filesystem. [ 69.734599][ T112] cfg80211: failed to load regulatory.db [ 70.336182][ T5470] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 70.426391][ T5481] loop1: detected capacity change from 0 to 1024 [ 70.441373][ T5481] hfsplus: request for non-existent node 3 in B*Tree [ 70.442662][ T5481] hfsplus: request for non-existent node 3 in B*Tree [ 70.443978][ T5481] hfsplus: invalid length 28418 has been corrected to 255 [ 70.445573][ T5481] hfsplus: invalid length 28418 has been corrected to 255 [ 70.757494][ T5481] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 70.768087][ T5481] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 70.853388][ T5495] netlink: 'syz.1.241': attribute type 12 has an invalid length. [ 70.860611][ T5495] loop1: detected capacity change from 0 to 512 [ 70.892174][ T5495] EXT4-fs (loop1): orphan cleanup on readonly fs [ 70.895175][ T5495] Quota error (device loop1): v2_read_file_info: Block with free entry 9 out of range (1, 6). [ 70.897343][ T5495] EXT4-fs warning (device loop1): ext4_enable_quotas:7100: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 70.904246][ T5495] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 70.908897][ T5495] EXT4-fs error (device loop1): ext4_orphan_get:1435: comm syz.1.241: bad orphan inode 14 [ 70.914340][ T5495] ext4_test_bit(bit=13, block=18) = 1 [ 70.915285][ T5495] is_bad_inode(inode)=0 [ 70.916010][ T5495] NEXT_ORPHAN(inode)=0 [ 70.924492][ T5495] max_ino=32 [ 70.925096][ T5495] i_nlink=1 [ 70.925702][ T5495] EXT4-fs (loop1): 1 truncate cleaned up [ 70.932445][ T5495] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 71.095205][ T4340] EXT4-fs (loop1): unmounting filesystem. [ 71.406298][ T5513] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 71.415278][ T5513] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 72.152851][ T5527] Illegal XDP return value 2220309153 on prog (id 27) dev N/A, expect packet loss! [ 72.923688][ T5537] loop1: detected capacity change from 0 to 2048 [ 72.934749][ T5537] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 73.298966][ T5548] loop5: detected capacity change from 0 to 1024 [ 73.309776][ T5548] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 73.314587][ T5548] EXT4-fs (loop5): invalid journal inode [ 73.315728][ T5548] EXT4-fs (loop5): can't get journal size [ 73.317142][ T5548] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e12c, mo2=0002] [ 73.319614][ T5548] System zones: 0-1, 4-36, 102-102 [ 73.321087][ T5548] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 73.370323][ T5551] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 73.374425][ T4991] EXT4-fs error (device loop5): htree_dirblock_to_tree:1112: inode #2: block 48: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=5, size=1024 fake=0 [ 73.378963][ T4991] EXT4-fs error (device loop5): __ext4_iget:5135: inode #15: block 1803188595: comm syz-executor: invalid block [ 73.381597][ T4991] EXT4-fs error (device loop5): __ext4_iget:5135: inode #15: block 1803188595: comm syz-executor: invalid block [ 74.860394][ T5552] EXT4-fs (loop5): unmounting filesystem. [ 75.238367][ T4342] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.243045][ T4628] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.246078][ T4342] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.248745][ T4342] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.250838][ T4342] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.252600][ T4342] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.254273][ T4342] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.513749][ T5582] loop3: detected capacity change from 0 to 32768 [ 75.529024][ T4628] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.568507][ T5582] XFS (loop3): Mounting V5 Filesystem [ 75.589290][ T4628] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.601843][ T5586] rxe_eth0 speed is unknown, defaulting to 1000 [ 75.610932][ T5582] XFS (loop3): Ending clean mount [ 75.613944][ T5582] XFS (loop3): Quotacheck needed: Please wait. [ 75.628387][ T5582] XFS (loop3): Quotacheck: Done. [ 75.710668][ T4336] XFS (loop3): Unmounting Filesystem [ 75.723784][ T4628] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.047483][ T5586] chnl_net:caif_netlink_parms(): no params data found [ 76.079591][ T5633] netlink: 24 bytes leftover after parsing attributes in process `syz.1.272'. [ 76.421600][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.426259][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.431447][ T5586] device bridge_slave_0 entered promiscuous mode [ 76.464058][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.467193][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.478712][ T5586] device bridge_slave_1 entered promiscuous mode [ 76.485091][ T5586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.489935][ T5586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.502894][ T5586] team0: Port device team_slave_0 added [ 76.504974][ T5586] team0: Port device team_slave_1 added [ 76.511208][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.512577][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.517076][ T5586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.528519][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.531001][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.541234][ T5586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.577124][ T4333] Bluetooth: hci2: command 0x0409 tx timeout [ 77.628999][ T5586] device hsr_slave_0 entered promiscuous mode [ 77.708141][ T5586] device hsr_slave_1 entered promiscuous mode [ 77.987848][ T5586] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.989219][ T5586] Cannot create hsr debugfs directory [ 77.998809][ T5677] netlink: 20 bytes leftover after parsing attributes in process `syz.1.279'. [ 78.257934][ T5685] siw: device registration error -23 [ 78.528563][ T5669] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.276'. [ 78.902171][ T5711] tipc: Started in network mode [ 78.903095][ T5711] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 78.905647][ T5711] tipc: Enabled bearer , priority 10 [ 78.912630][ T5711] tipc: Enabled bearer , priority 10 [ 78.931629][ T5711] tipc: Bearer : already 2 bearers with priority 10 [ 78.932947][ T5711] tipc: Bearer : trying with adjusted priority [ 78.934593][ T5711] tipc: New replicast peer: 255.255.255.255 [ 78.941585][ T5711] tipc: Enabled bearer , priority 9 [ 78.946855][ T5713] Injecting memory failure for pfn 0x10b730 at process virtual address 0x20001000 [ 78.956378][ T5713] Memory failure: 0x10b730: recovery action for clean unevictable LRU page: Recovered [ 78.959169][ T5713] Injecting memory failure for pfn 0x11dff4 at process virtual address 0x20002000 [ 78.961032][ T5713] Memory failure: 0x11dff4: recovery action for clean unevictable LRU page: Recovered [ 78.962911][ T5713] Injecting memory failure for pfn 0x138109 at process virtual address 0x20003000 [ 78.964805][ T5713] Memory failure: 0x138109: recovery action for clean unevictable LRU page: Recovered [ 79.024430][ T5718] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.031249][ T5586] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 79.079691][ T5586] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 79.142328][ T5586] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 79.188731][ T5586] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 79.415517][ T5586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.478552][ T5735] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4329] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[5735] [ 79.597829][ T48] Bluetooth: hci2: command 0x041b tx timeout [ 79.813598][ T1033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.816411][ T1033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.830915][ T5586] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.837484][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.847976][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.849823][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.851127][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.915241][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.917095][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.920001][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.921666][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.923126][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.929418][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.931742][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.935165][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.940358][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.946941][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.957301][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.967387][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.969825][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.971653][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.977501][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.533772][ T5586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.537213][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.540196][ T1970] tipc: Node number set to 4269801491 [ 80.541825][ T5757] netlink: 'syz.2.294': attribute type 10 has an invalid length. [ 80.617696][ T5763] netlink: 12 bytes leftover after parsing attributes in process `syz.1.296'. [ 80.638138][ T5763] 8021q: adding VLAN 0 to HW filter on device bond2 [ 80.640124][ T5769] device lo entered promiscuous mode [ 80.651898][ T5769] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 80.659097][ T5769] 8021q: adding VLAN 0 to HW filter on device bond2 [ 80.679721][ T5769] bond2: (slave lo): Enslaving as an active interface with an up link [ 80.732879][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 80.734720][ T5757] netlink: 'syz.2.294': attribute type 4 has an invalid length. [ 80.736147][ T5757] netlink: 152 bytes leftover after parsing attributes in process `syz.2.294'. [ 80.996659][ T5805] loop3: detected capacity change from 0 to 1024 [ 81.024232][ T5805] EXT4-fs (loop3): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 81.026626][ T5805] EXT4-fs (loop3): Couldn't mount because of unsupported optional features (40000) [ 81.056002][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.138282][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.139837][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.339137][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 83.049655][ T5826] sctp: [Deprecated]: syz.2.308 (pid 5826) Use of int in max_burst socket option. [ 83.049655][ T5826] Use struct sctp_assoc_value instead [ 83.317423][ T4628] device hsr_slave_0 left promiscuous mode [ 83.906068][ T4628] device hsr_slave_1 left promiscuous mode [ 83.978078][ T4628] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.981825][ T4628] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.985168][ T4628] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.986609][ T4628] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.990694][ T4628] device bridge_slave_1 left promiscuous mode [ 83.993725][ T4628] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.039304][ T4628] device bridge_slave_0 left promiscuous mode [ 84.041497][ T4628] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.158358][ T4628] device veth1_macvtap left promiscuous mode [ 84.159619][ T4628] device veth0_macvtap left promiscuous mode [ 84.160850][ T4628] device veth1_vlan left promiscuous mode [ 84.163226][ T4628] device veth0_vlan left promiscuous mode [ 84.397857][ T4333] Bluetooth: hci2: command 0x0419 tx timeout [ 84.591913][ T5865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.654951][ T5865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.711270][ T5865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.529708][ T4628] team0 (unregistering): Port device team_slave_1 removed [ 86.698520][ T4628] team0 (unregistering): Port device team_slave_0 removed [ 86.868313][ T4628] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.068247][ T4628] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.108266][ T4627] infiniband syz1: ib_query_port failed (-19) [ 88.538687][ T4628] bond0 (unregistering): Released all slaves [ 88.897621][ T24] infiniband syz1: ib_query_port failed (-19) [ 89.708080][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.711645][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.774768][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.873760][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.942724][ T5586] device veth0_vlan entered promiscuous mode [ 89.947212][ T5586] device veth1_vlan entered promiscuous mode [ 89.950780][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.952571][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.954078][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.978464][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.980169][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.983343][ T5586] device veth0_macvtap entered promiscuous mode [ 90.294073][ T5586] device veth1_macvtap entered promiscuous mode [ 90.354404][ T5586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.358792][ T5586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.362749][ T5586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.368542][ T5586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.372958][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.375060][ T5922] device syzkaller0 entered promiscuous mode [ 90.376821][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.378898][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.381247][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.384297][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.425925][ T5586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.428866][ T5586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.430705][ T5586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.434246][ T5586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.439837][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.444551][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.446406][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.451425][ T5586] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.453057][ T5586] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.454769][ T5586] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.462635][ T5586] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.544145][ T5933] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 90.592911][ T4629] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.603410][ T4629] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.610755][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.620807][ T4496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.622370][ T4496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.623985][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.586196][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz.6.338'. [ 91.590311][ T5993] netlink: 'syz.6.338': attribute type 1 has an invalid length. [ 93.270055][ T6079] tipc: Started in network mode [ 93.271173][ T6079] tipc: Node identity ac1414aa, cluster identity 4711 [ 93.272725][ T6079] tipc: Enabling of bearer rejected, failed to enable media [ 93.290778][ T6079] tipc: Enabling of bearer rejected, failed to enable media [ 93.392519][ T6094] netlink: 20 bytes leftover after parsing attributes in process `syz.0.354'. [ 93.439528][ T6102] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000009 [ 93.596524][ T6117] futex_wake_op: syz.1.359 tries to shift op by 144; fix this program [ 93.715453][ T6119] bond1: (slave vlan2): Error -34 calling dev_set_mtu [ 94.018760][ T6134] bridge0: port 3(syz_tun) entered blocking state [ 94.020287][ T6134] bridge0: port 3(syz_tun) entered disabled state [ 94.021991][ T6134] device syz_tun entered promiscuous mode [ 94.050805][ T6138] netlink: 12 bytes leftover after parsing attributes in process `syz.6.365'. [ 94.192674][ T6159] overlayfs: failed to clone upperpath [ 94.289771][ T6169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.374'. [ 94.322953][ T6169] device bond2 entered promiscuous mode [ 95.751505][ T6246] loop1: detected capacity change from 0 to 512 [ 95.755889][ T6246] EXT4-fs: Ignoring removed nobh option [ 95.778585][ T6246] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 95.780282][ T6246] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 95.781986][ T6246] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 95.788090][ T6246] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 95.789619][ T6246] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 95.791086][ T6246] EXT4-fs (loop1): failed to initialize system zone (-117) [ 95.792494][ T6246] EXT4-fs (loop1): mount failed [ 95.910617][ T6255] netlink: 'syz.2.391': attribute type 4 has an invalid length. [ 95.915722][ T6255] netlink: 'syz.2.391': attribute type 4 has an invalid length. [ 96.451066][ T6272] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 96.459837][ T6272] bridge0: port 3(syz_tun) entered disabled state [ 96.466386][ T6272] tipc: Resetting bearer [ 96.479245][ T6272] tipc: Resetting bearer [ 96.482431][ T6272] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.484402][ T6272] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.507412][ T6275] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 96.603624][ T6279] netlink: 'syz.3.396': attribute type 4 has an invalid length. [ 96.683160][ T6285] netlink: 'syz.3.398': attribute type 10 has an invalid length. [ 97.001054][ T6285] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 97.209413][ T6285] loop3: detected capacity change from 0 to 32768 [ 97.220381][ T6285] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.398 (6285) [ 97.284336][ T6285] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 97.291701][ T6285] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 97.295066][ T6285] BTRFS info (device loop3): setting nodatasum [ 97.297324][ T6285] BTRFS info (device loop3): use zlib compression, level 3 [ 97.306198][ T6285] BTRFS info (device loop3): metadata ratio 1 [ 97.307297][ T6285] BTRFS info (device loop3): allowing degraded mounts [ 97.310167][ T6285] BTRFS info (device loop3): using free space tree [ 98.080950][ T6285] BTRFS info (device loop3): enabling ssd optimizations [ 98.128708][ T6285] netlink: 'syz.3.398': attribute type 4 has an invalid length. [ 98.131374][ T6285] netlink: 152 bytes leftover after parsing attributes in process `syz.3.398'. [ 98.168158][ T4336] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 98.200370][ T6333] loop6: detected capacity change from 0 to 2048 [ 98.235820][ T6333] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 99.022798][ T6339] netlink: 'syz.3.403': attribute type 4 has an invalid length. [ 99.035112][ T6339] netlink: 'syz.3.403': attribute type 4 has an invalid length. [ 99.068784][ T5878] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop3 scanned by udevd (5878) [ 99.496024][ T6357] bridge0: port 3(syz_tun) entered blocking state [ 99.500446][ T6357] bridge0: port 3(syz_tun) entered disabled state [ 99.507258][ T6357] device syz_tun entered promiscuous mode [ 99.509044][ T6357] bridge0: port 3(syz_tun) entered blocking state [ 99.510225][ T6357] bridge0: port 3(syz_tun) entered forwarding state [ 99.520702][ T6359] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 99.590388][ T6357] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 99.632255][ T6357] bridge0: port 3(syz_tun) entered disabled state [ 99.645011][ T6357] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.647175][ T6357] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.821780][ T6367] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4336] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[6367] [ 100.088904][ T6368] netlink: 'syz.6.409': attribute type 4 has an invalid length. [ 100.160423][ T6375] device syzkaller0 entered promiscuous mode [ 102.466432][ T6423] netlink: 'syz.1.425': attribute type 1 has an invalid length. [ 102.504351][ T6423] 8021q: adding VLAN 0 to HW filter on device bond3 [ 102.539722][ T6423] bond3: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 102.552713][ T6423] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 102.561945][ T6423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.425'. [ 102.563980][ T6423] 8021q: adding VLAN 0 to HW filter on device bond3 [ 102.669862][ T4530] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 102.677796][ T6438] netlink: 'syz.0.426': attribute type 4 has an invalid length. [ 102.866221][ T39] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 102.984460][ T4629] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 103.008621][ T4530] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 103.015557][ T4530] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 103.047548][ T6449] device syzkaller0 entered promiscuous mode [ 103.152307][ T4496] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 103.360142][ T9] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 103.378498][ T1033] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 103.447414][ T9] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 103.616867][ T4530] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 103.638330][ T9] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 103.661306][ T9] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 103.677965][ T9] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 103.697827][ T4530] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 103.718735][ T4530] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 103.720369][ T4530] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 103.969852][ T39] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 103.971203][ T39] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 104.016316][ T6471] netlink: 4 bytes leftover after parsing attributes in process `syz.6.437'. [ 105.820368][ T39] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 105.837949][ T4812] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 105.846123][ T6486] sctp: [Deprecated]: syz.1.439 (pid 6486) Use of int in max_burst socket option. [ 105.846123][ T6486] Use struct sctp_assoc_value instead [ 106.177891][ T4812] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 106.197808][ T4628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 106.217805][ T4628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 106.237819][ T4812] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 106.257881][ T4628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 106.277811][ T4530] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 106.297820][ T4530] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 106.317813][ T4628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 106.337808][ T4530] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 106.357823][ T4530] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 106.377821][ T4530] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 106.397951][ T4530] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 106.417876][ T4530] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 106.437824][ T4530] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 106.457825][ T4530] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 106.478719][ T39] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 106.497817][ T39] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 106.527848][ T4530] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 106.547828][ T39] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 106.569339][ T4530] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 106.588576][ T4628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 106.589929][ T4628] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 106.596864][ T6509] netlink: 'syz.1.444': attribute type 4 has an invalid length. [ 106.698837][ T4812] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 106.700327][ T4812] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 107.049974][ T39] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 107.061418][ T39] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 107.198635][ T4628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 107.201291][ T4628] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 107.307784][ T9] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 107.309193][ T9] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 107.426766][ T4628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 107.428741][ T4628] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 107.554877][ T4628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 107.663567][ T4812] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 107.685531][ T6551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.453'. [ 107.838542][ T4628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 107.840087][ T4628] net_ratelimit: 2 callbacks suppressed [ 107.840105][ T4628] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 107.961083][ T4628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 107.977387][ T4628] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 108.097955][ T4628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 108.099707][ T4628] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 108.208398][ T9] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 108.210037][ T9] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 108.317939][ T4812] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 108.319778][ T4812] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 108.458903][ T4496] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 108.473962][ T4496] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 108.651289][ T4440] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 109.127709][ T4440] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 109.257809][ T4532] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 109.260094][ T4532] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 109.377816][ T4532] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 109.381380][ T4532] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 109.488990][ T9] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 109.490356][ T9] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 109.496706][ T6599] netlink: 'syz.0.463': attribute type 1 has an invalid length. [ 109.543641][ T6599] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 109.563605][ T6599] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 109.566196][ T6599] bond1: (slave vti0): making interface the new active one [ 109.567904][ T6599] bond1: (slave vti0): Enslaving as an active interface with an up link [ 109.577426][ T6599] bond1 (unregistering): (slave vti0): Releasing backup interface [ 109.581335][ T6593] loop6: detected capacity change from 0 to 8192 [ 109.599234][ T9] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 109.609401][ T6599] bond1 (unregistering): Released all slaves [ 109.857987][ T4496] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 109.888426][ T4532] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 109.921711][ T9] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 109.948458][ T4532] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 109.962985][ T6593] netlink: 60 bytes leftover after parsing attributes in process `syz.6.460'. [ 110.108107][ T4496] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 110.446202][ T4440] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 110.568562][ T9] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 110.618428][ T6639] bpf getsockopt: ignoring program buffer with optlen=1601724781 (max_optlen=4096) [ 110.678599][ T4440] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 110.701231][ T6643] loop6: detected capacity change from 0 to 32768 [ 110.716395][ T6643] XFS (loop6): Mounting V5 Filesystem [ 110.746887][ T6643] XFS (loop6): Ending clean mount [ 110.749430][ T6643] XFS (loop6): Quotacheck needed: Please wait. [ 110.764767][ T6643] XFS (loop6): Quotacheck: Done. [ 110.789773][ T4812] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 111.226885][ T4532] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 111.326522][ T6690] loop3: detected capacity change from 0 to 4096 [ 111.339629][ T9] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 111.346705][ T6690] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 111.457171][ T9] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 111.567898][ T4532] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 111.677831][ T4532] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 111.698508][ T5586] XFS (loop6): Unmounting Filesystem [ 111.788768][ T4440] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 111.899634][ T4440] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 111.922122][ T4336] EXT4-fs (loop3): unmounting filesystem. [ 112.017848][ T4440] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 112.129302][ T4532] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 112.277416][ T9] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 112.387964][ T39] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 112.498558][ T9] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 112.617786][ T4532] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 112.768462][ T4532] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 112.788265][ T4532] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 113.831840][ T9] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 113.833311][ T9] net_ratelimit: 20 callbacks suppressed [ 113.833324][ T9] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 114.814552][ T39] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 114.815921][ T39] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 115.820434][ T9] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 115.822008][ T9] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 116.351247][ T4440] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 116.352770][ T4440] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 116.457924][ T4532] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 116.459481][ T4532] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 116.680956][ T39] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 116.682751][ T39] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 116.842936][ T6798] netlink: 'syz.0.497': attribute type 2 has an invalid length. [ 116.844269][ T6796] netlink: 40 bytes leftover after parsing attributes in process `syz.6.496'. [ 116.844374][ T6798] netlink: 'syz.0.497': attribute type 1 has an invalid length. [ 116.857423][ T6798] netlink: 'syz.0.497': attribute type 1 has an invalid length. [ 116.867258][ T6798] netlink: 198032 bytes leftover after parsing attributes in process `syz.0.497'. [ 116.877994][ T39] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 116.879548][ T39] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 116.913919][ T6806] device bridge_slave_0 left promiscuous mode [ 116.915197][ T6806] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.967077][ T6808] netlink: 28 bytes leftover after parsing attributes in process `syz.3.502'. [ 116.988281][ T39] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 116.992913][ T39] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 117.089478][ T6820] syz.3.502 uses obsolete (PF_INET,SOCK_PACKET) [ 117.098260][ T4440] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 117.107119][ T4440] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 118.527969][ T6814] rxe_eth0 speed is unknown, defaulting to 1000 [ 118.577081][ T6828] cifs: Unknown parameter 'timeo' [ 118.657928][ T39] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 118.659402][ T39] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 118.767959][ T4812] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 118.798037][ T4496] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 118.908042][ T4440] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 118.909538][ T4440] net_ratelimit: 1 callbacks suppressed [ 118.909549][ T4440] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 119.317217][ T6853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.515'. [ 119.391452][ T39] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 119.397607][ T39] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 119.511663][ T4628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 119.538105][ T4628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 119.539526][ T4628] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 119.611411][ T6870] FAULT_INJECTION: forcing a failure. [ 119.611411][ T6870] name failslab, interval 1, probability 0, space 0, times 0 [ 119.613831][ T6870] CPU: 1 PID: 6870 Comm: syz.1.520 Not tainted syzkaller #0 [ 119.615065][ T6870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 119.616919][ T6870] Call trace: [ 119.617545][ T6870] dump_backtrace+0x1c4/0x1f0 [ 119.618469][ T6870] show_stack+0x2c/0x3c [ 119.619170][ T6870] __dump_stack+0x30/0x40 [ 119.619966][ T6870] dump_stack_lvl+0xf4/0x15c [ 119.620892][ T6870] dump_stack+0x1c/0x5c [ 119.621673][ T6870] should_fail_ex+0x3cc/0x524 [ 119.622485][ T6870] __should_failslab+0xc0/0x11c [ 119.623335][ T6870] should_failslab+0x10/0x28 [ 119.624160][ T6870] __kmem_cache_alloc_node+0x7c/0x318 [ 119.625187][ T6870] kmalloc_trace+0x48/0x94 [ 119.625924][ T6870] __arm64_sys_fsopen+0x170/0x2d4 [ 119.626804][ T6870] invoke_syscall+0x98/0x290 [ 119.627658][ T6870] el0_svc_common+0x13c/0x258 [ 119.628579][ T6870] do_el0_svc+0x5c/0x134 [ 119.629439][ T6870] el0_svc+0x58/0x12c [ 119.630226][ T6870] el0t_64_sync_handler+0x84/0xf0 [ 119.631212][ T6870] el0t_64_sync+0x18c/0x190 [ 119.650451][ T6872] netlink: 28 bytes leftover after parsing attributes in process `syz.3.521'. [ 119.673716][ T4496] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 119.675077][ T4496] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 119.788246][ T4530] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 119.789694][ T4530] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 120.351562][ T4812] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 120.361331][ T4812] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 120.479562][ T4496] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 120.482077][ T4496] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 120.605633][ T4496] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 120.607000][ T4496] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 120.719128][ T4628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 120.722049][ T4628] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 120.872210][ T1033] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 120.875621][ T1033] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 121.046046][ T6903] dns_resolver: Unsupported server list version (6) [ 121.059167][ T4488] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 121.169123][ T4629] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 121.222850][ T6909] netlink: 'syz.2.534': attribute type 2 has an invalid length. [ 121.292388][ T4488] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 121.400588][ T4496] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 121.557793][ T4496] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 121.604221][ T6913] binder: 6912:6913 tried to acquire reference to desc 0, got 1 instead [ 121.607114][ T6913] binder: 6912:6913 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 121.610007][ T6913] binder: 6913 RLIMIT_NICE not set [ 121.611252][ T6913] binder: undelivered transaction 5, put_user failed [ 121.612560][ T6913] binder: 6912:6913 ioctl c0306201 20000500 returned -14 [ 121.614737][ T4463] binder: undelivered TRANSACTION_COMPLETE [ 121.667864][ T4628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 121.676536][ T6917] loop3: detected capacity change from 0 to 512 [ 121.696927][ T6917] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 121.700529][ T6917] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.537: invalid indirect mapped block 256 (level 1) [ 121.704831][ T6917] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.537: invalid indirect mapped block 2683928664 (level 1) [ 121.709451][ T6917] EXT4-fs (loop3): 1 truncate cleaned up [ 121.710939][ T6917] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 121.777894][ T4628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 121.889088][ T4628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 122.132556][ T11] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 122.237982][ T4629] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 122.268788][ T6893] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 122.271304][ T6893] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 122.316584][ T6893] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 122.349536][ T4628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 122.451450][ T6893] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 122.458070][ T4496] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 122.480017][ T6893] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 122.569456][ T4496] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 122.600063][ T6893] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 122.605828][ T6919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.606300][ T4336] EXT4-fs (loop3): unmounting filesystem. [ 122.607526][ T6919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.677784][ T4628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 122.718079][ T48] Bluetooth: hci3: command 0x0c1a tx timeout [ 122.788682][ T4496] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 122.897800][ T1033] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 123.012858][ T9] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 123.117913][ T1033] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 123.228659][ T4628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 123.297550][ T6939] sctp: [Deprecated]: syz.2.543 (pid 6939) Use of struct sctp_assoc_value in delayed_ack socket option. [ 123.297550][ T6939] Use struct sctp_sack_info instead [ 123.338311][ T4628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 123.708653][ T4488] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 123.817952][ T1033] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 123.928697][ T4496] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 123.932910][ T4496] net_ratelimit: 22 callbacks suppressed [ 123.932918][ T4496] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 124.038566][ T4628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 124.039884][ T4628] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 124.148297][ T4440] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 124.149943][ T4440] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 124.294556][ T4628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 124.310650][ T4628] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 124.570391][ T4333] Bluetooth: hci2: command 0x0c1a tx timeout [ 124.625177][ T4488] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 125.154417][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 125.163774][ T4488] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 125.256595][ T6980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.558'. [ 125.269326][ T4628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 125.288350][ T1033] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 125.289779][ T1033] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 125.333092][ T6980] bond3: (slave veth3): Enslaving as an active interface with an up link [ 125.398503][ T1033] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 125.400195][ T1033] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 125.439009][ T6988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.561'. [ 125.462010][ T6988] device bond4 entered promiscuous mode [ 125.471548][ T6988] 8021q: adding VLAN 0 to HW filter on device bond4 [ 125.559847][ T4628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 125.561246][ T4628] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 125.585109][ T6988] device erspan1 entered promiscuous mode [ 125.588784][ T6988] bond4: (slave erspan1): Enslaving as an active interface with an up link [ 125.591171][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 125.851041][ T4628] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 125.852292][ T4628] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 125.875076][ T6997] futex_wake_op: syz.6.564 tries to shift op by 144; fix this program [ 125.890083][ T6993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.562'. [ 125.928703][ T2067] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.929825][ T2067] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.959095][ T11] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 125.977875][ T11] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 125.997785][ T1033] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 126.017881][ T1033] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 126.038278][ T1033] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 126.336845][ T1033] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 126.418115][ T1033] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 126.438108][ T1033] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 126.460048][ T1033] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 126.487838][ T1033] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 126.507910][ T4530] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 126.537876][ T4530] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 126.567336][ T4530] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 126.647800][ T4333] Bluetooth: hci2: command 0x0406 tx timeout [ 126.684102][ T7012] loop1: detected capacity change from 0 to 2048 [ 126.716818][ T7012] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.105387][ T4440] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 127.201585][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 127.580149][ T4812] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 127.626147][ T4812] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 127.777824][ T4812] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 127.849732][ T7031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.572'. [ 127.888337][ T1033] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 127.908173][ T4530] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 128.054320][ T7037] dns_resolver: Unsupported server list version (6) [ 128.397431][ T7026] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 128.636444][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 128.650783][ T7031] bond1: (slave veth3): Enslaving as an active interface with an up link [ 128.658479][ T7026] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 128.747250][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 128.771513][ T4812] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 128.783253][ T7042] netlink: 36 bytes leftover after parsing attributes in process `syz.1.574'. [ 128.876193][ T7045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.878449][ T1576] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 128.896263][ T7045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.897942][ T1576] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 129.282397][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 129.288945][ T4531] net_ratelimit: 6 callbacks suppressed [ 129.288954][ T4531] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 129.398044][ T4812] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 129.401057][ T4812] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 129.455541][ T7050] loop3: detected capacity change from 0 to 512 [ 129.508129][ T1033] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 129.510240][ T1033] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 129.618230][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 129.619793][ T4531] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 129.954070][ T4440] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 129.956110][ T4440] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 130.084389][ T4333] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 130.086784][ T4333] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 130.108509][ T4812] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 130.111495][ T4812] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 130.161467][ T7070] netlink: 'syz.1.582': attribute type 13 has an invalid length. [ 130.162975][ T7070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.582'. [ 130.164660][ T7070] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 130.217863][ T4812] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 130.219517][ T4812] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 130.639107][ T4440] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 130.640968][ T4440] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 130.748823][ T5076] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 130.750301][ T5076] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 130.832857][ T7082] netlink: 96 bytes leftover after parsing attributes in process `syz.2.584'. [ 131.055184][ T4530] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 131.056919][ T4530] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 131.207900][ T5076] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 131.347823][ T5076] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 131.441354][ T7060] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 131.442830][ T7060] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 131.468317][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 131.506581][ T7088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.587'. [ 131.582006][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 131.646560][ T7088] bond1: (slave veth3): Enslaving as an active interface with an up link [ 131.687808][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 131.795323][ T7092] loop3: detected capacity change from 0 to 32768 [ 131.798420][ T4812] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 131.907989][ T4530] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 132.018272][ T4530] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 132.120795][ T7092] XFS (loop3): Mounting V5 Filesystem [ 132.128155][ T4812] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 132.145349][ T7092] XFS (loop3): Ending clean mount [ 132.149762][ T7092] XFS (loop3): Quotacheck needed: Please wait. [ 132.157894][ T4333] Bluetooth: hci3: command 0x0c1a tx timeout [ 132.168218][ T7092] XFS (loop3): Quotacheck: Done. [ 132.238027][ T4530] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 132.588548][ T7026] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 132.599903][ T4336] XFS (loop3): Unmounting Filesystem [ 132.616961][ T4812] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 132.728058][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 132.929743][ T4530] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 133.063980][ T11] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 133.128488][ T7125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.595'. [ 133.168269][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 133.187905][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 133.210479][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 133.325395][ T4530] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 133.728750][ T5076] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 133.732841][ T48] Bluetooth: hci2: command 0x0c1a tx timeout [ 133.747803][ T4530] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 133.768162][ T4530] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 133.897047][ T5076] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 134.043242][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 134.335400][ T4531] net_ratelimit: 18 callbacks suppressed [ 134.335413][ T4531] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 134.448631][ T4440] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 134.451122][ T4440] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 134.557795][ T4440] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 134.559661][ T4440] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 134.668219][ T9] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 134.669654][ T9] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 134.686066][ T7167] device syzkaller0 entered promiscuous mode [ 134.777940][ T5076] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 134.779435][ T5076] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 135.289830][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 135.318196][ T4530] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 135.337893][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 135.370424][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 135.374348][ T4531] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 135.484389][ T7180] kAFS: No cell specified [ 135.484870][ T9] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 135.486773][ T9] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 135.597168][ T7180] netlink: 32 bytes leftover after parsing attributes in process `syz.3.612'. [ 135.599566][ T4440] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 135.989117][ T4440] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 136.026166][ T4440] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 136.188163][ T5076] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 136.191931][ T5076] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 136.621635][ T4440] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 136.622950][ T4440] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 136.657426][ T7206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.619'. [ 136.662505][ T7206] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.668074][ T7206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.619'. [ 136.669843][ T7206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.619'. [ 136.676562][ T7206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.684259][ T7206] bond1: (slave bond0): making interface the new active one [ 136.688103][ T7206] bond1: (slave bond0): Enslaving as an active interface with an up link [ 136.689858][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 136.953210][ T5076] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 137.020097][ T7206] bond1: (slave bond0): Releasing active interface [ 137.045071][ T7206] device bridge_slave_0 left promiscuous mode [ 137.046383][ T7206] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.088612][ T7026] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 137.100418][ T7206] device bridge_slave_1 left promiscuous mode [ 137.101917][ T7206] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.109572][ T5076] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 137.127794][ T5076] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 137.139293][ T7206] bond0: (slave bond_slave_0): Releasing backup interface [ 137.157877][ T7026] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 137.178948][ T7206] bond0: (slave bond_slave_1): Releasing backup interface [ 137.188666][ T5076] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 137.207943][ T5076] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 137.222342][ T7206] team0: Port device team_slave_0 removed [ 137.224890][ T7206] team0: Port device team_slave_1 removed [ 137.226505][ T7206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.227988][ T7026] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 137.229984][ T7206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.232259][ T7206] bond3: (slave veth3): Releasing backup interface [ 137.247830][ T7026] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 137.261875][ T7206] bond4: (slave erspan1): Releasing backup interface [ 137.267790][ T5076] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 137.290806][ T5076] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 137.390942][ T7026] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 137.418187][ T1033] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 137.582492][ T1033] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 137.593336][ T7206] device erspan1 left promiscuous mode [ 137.598066][ T5076] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 137.617869][ T9] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 137.728067][ T7026] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 137.837955][ T9] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 137.958002][ T9] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 138.054466][ T7219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.078719][ T4440] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 138.187849][ T4812] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 138.297811][ T9] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 138.418140][ T4812] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 138.567215][ T4440] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 138.934812][ T4812] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 139.049112][ T4440] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 139.087453][ T7248] loop3: detected capacity change from 0 to 32768 [ 139.123069][ T7248] JBD2: Ignoring recovery information on journal [ 139.138765][ T7248] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 139.158378][ T4440] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 139.383348][ T4488] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 139.396790][ T4488] net_ratelimit: 13 callbacks suppressed [ 139.396893][ T4488] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 139.484850][ T7248] (syz.3.631,7248,1):ocfs2_remap_file_range:2710 ERROR: status = -95 [ 139.548357][ T4440] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 139.550777][ T4440] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 139.571026][ T4336] ocfs2: Unmounting device (7,3) on (node local) [ 139.657968][ T39] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 139.659387][ T39] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 139.869961][ T4440] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 139.871885][ T4440] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 139.977965][ T4629] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 139.979265][ T4629] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 140.089615][ T4629] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 140.103631][ T4629] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 140.128912][ T7290] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 141.424821][ T39] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 141.436425][ T39] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 141.648258][ T39] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 141.649692][ T39] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 141.758016][ T39] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 141.759443][ T39] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 141.868326][ T4629] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 141.999580][ T39] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 142.027148][ T7317] loop6: detected capacity change from 0 to 512 [ 142.068107][ T7317] EXT4-fs (loop6): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 142.069900][ T7317] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 142.071613][ T7317] EXT4-fs (loop6): The Hurd can't support 64-bit file systems [ 142.153345][ T4488] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 142.257803][ T11] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 142.397927][ T11] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 142.660355][ T9] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 142.787888][ T4629] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 142.816061][ T7327] bridge0: port 1(vxlan0) entered blocking state [ 142.817609][ T7327] bridge0: port 1(vxlan0) entered disabled state [ 142.828066][ T7327] device vxlan0 entered promiscuous mode [ 142.847786][ T27] audit: type=1326 audit(142.810:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7325 comm="syz.6.654" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98179728 code=0x7ffc0000 [ 142.861688][ T27] audit: type=1326 audit(142.810:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7325 comm="syz.6.654" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98179728 code=0x7ffc0000 [ 142.866571][ T27] audit: type=1326 audit(142.810:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7325 comm="syz.6.654" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98179728 code=0x7ffc0000 [ 142.873933][ T27] audit: type=1326 audit(142.810:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7325 comm="syz.6.654" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff98179728 code=0x7ffc0000 [ 142.883613][ T27] audit: type=1326 audit(142.810:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7325 comm="syz.6.654" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98179728 code=0x7ffc0000 [ 142.892937][ T27] audit: type=1326 audit(142.810:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7325 comm="syz.6.654" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98179728 code=0x7ffc0000 [ 142.897991][ T9] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 142.900206][ T7334] device syzkaller0 entered promiscuous mode [ 142.901033][ T27] audit: type=1326 audit(142.810:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7325 comm="syz.6.654" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98179728 code=0x7ffc0000 [ 142.905184][ T27] audit: type=1326 audit(142.810:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7325 comm="syz.6.654" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffff98179728 code=0x7ffc0000 [ 142.912949][ T27] audit: type=1326 audit(142.810:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7325 comm="syz.6.654" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98179728 code=0x7ffc0000 [ 142.918107][ T9] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 143.067844][ T9] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 143.128583][ T27] audit: type=1326 audit(142.810:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7325 comm="syz.6.654" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98179728 code=0x7ffc0000 [ 143.177838][ T1033] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 143.298354][ T9] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 143.323164][ T7353] loop3: detected capacity change from 0 to 2048 [ 143.330854][ T7353] UDF-fs: bad mount option "ÿ18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿ" or missing value [ 143.340013][ T7353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.663'. [ 143.349143][ T7353] bridge0: port 3(syz_tun) entered disabled state [ 143.389175][ T7353] device syz_tun left promiscuous mode [ 143.390404][ T7353] bridge0: port 3(syz_tun) entered disabled state [ 143.408440][ T4629] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 143.419212][ T7357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.664'. [ 143.426184][ T7357] 8021q: adding VLAN 0 to HW filter on device bond5 [ 143.427970][ T11] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 143.444804][ T7357] device macvlan2 entered promiscuous mode [ 143.447801][ T4629] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 143.452222][ T7357] bond5: (slave ipip1): refused to change device type [ 143.558287][ T1033] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 143.912010][ T4629] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 144.013652][ T1033] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 144.028776][ T1033] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 144.106300][ T7374] loop1: detected capacity change from 0 to 512 [ 144.114663][ T7374] EXT4-fs (loop1): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 144.116181][ T7374] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 144.118014][ T7374] EXT4-fs (loop1): The Hurd can't support 64-bit file systems [ 144.137994][ T9] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 144.247856][ T1576] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 144.267907][ T1576] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 144.287836][ T1576] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 144.311620][ T1576] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 144.327905][ T1576] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 144.349668][ T1576] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 144.431117][ T11] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 144.447875][ T11] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 144.468294][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 144.543494][ T11] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 144.569562][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 144.587851][ T1033] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 144.611928][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 144.825275][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 144.842096][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 144.863442][ T7391] loop1: detected capacity change from 0 to 512 [ 144.868000][ T1033] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 144.888801][ T1033] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 144.907838][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 144.928292][ T1033] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 144.947913][ T1033] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 144.962916][ T7384] netlink: 'syz.3.673': attribute type 1 has an invalid length. [ 144.968222][ T9] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 144.978128][ T7384] 8021q: adding VLAN 0 to HW filter on device bond2 [ 144.987070][ T7389] bond2: (slave gretap2): making interface the new active one [ 144.989335][ T9] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 144.994957][ T7389] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 145.016067][ T7392] bond2: (slave veth5): Enslaving as an active interface with a down link [ 145.019343][ T9] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 145.023726][ T9] net_ratelimit: 16 callbacks suppressed [ 145.023736][ T9] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 145.030732][ T7393] device veth0_virt_wifi entered promiscuous mode [ 145.044893][ T7393] bond2: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 145.046767][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 145.085095][ T7401] netlink: 24 bytes leftover after parsing attributes in process `syz.3.677'. [ 145.104107][ T7401] netlink: 20 bytes leftover after parsing attributes in process `syz.3.677'. [ 145.134798][ T7408] Set syz1 is full, maxelem 5 reached [ 145.138307][ T1576] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 145.141820][ T1576] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 145.169472][ T7410] tipc: Started in network mode [ 145.170544][ T7410] tipc: Node identity ac14140f, cluster identity 4711 [ 145.172196][ T7410] tipc: Enabled bearer , priority 10 [ 145.248055][ T1576] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 145.253003][ T1576] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 145.500674][ T39] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 145.507428][ T39] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 145.619249][ T1576] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 145.620244][ T7420] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 145.622534][ T1576] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 146.046412][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 146.059710][ T4531] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 146.187812][ T9] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 146.189410][ T9] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 146.218572][ T4660] tipc: Node number set to 2886997007 [ 146.297891][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 146.301277][ T4531] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 146.428068][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 146.572496][ T39] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 146.677908][ T4440] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 146.787831][ T4440] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 146.857782][ T7448] bond2: (slave vlan0): Opening slave failed [ 146.898303][ T4440] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 147.017869][ T1576] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 147.041348][ T1576] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 147.067955][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 147.177814][ T39] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 147.287927][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 147.398272][ T39] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 147.507942][ T39] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 147.618769][ T39] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 147.731969][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 147.798071][ T7479] kAFS: No cell specified [ 147.805996][ T7479] netlink: 32 bytes leftover after parsing attributes in process `syz.2.702'. [ 148.020315][ T39] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 148.185389][ T7026] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 148.688202][ T7026] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 148.799571][ T4812] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 148.917934][ T11] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 148.959880][ T7492] loop6: detected capacity change from 0 to 2048 [ 148.963629][ T7492] UDF-fs: bad mount option "ÿ18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿ" or missing value [ 148.985925][ T7492] netlink: 4 bytes leftover after parsing attributes in process `syz.6.705'. [ 148.999936][ T7492] bridge0: port 3(syz_tun) entered disabled state [ 149.037905][ T11] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 149.058107][ T11] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 149.086765][ T7492] device syz_tun left promiscuous mode [ 149.087971][ T7492] bridge0: port 3(syz_tun) entered disabled state [ 149.109628][ T11] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 149.128297][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 149.147827][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 149.215980][ T7504] netlink: 'syz.1.710': attribute type 1 has an invalid length. [ 149.226085][ T7504] 8021q: adding VLAN 0 to HW filter on device bond4 [ 149.235287][ T7504] bond4: (slave gretap1): making interface the new active one [ 149.237039][ T7504] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 149.238670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 149.257881][ T11] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 149.588942][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 149.599353][ T7510] loop3: detected capacity change from 0 to 256 [ 149.849300][ T11] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 149.885258][ T7513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.890172][ T7513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.957796][ T4440] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 150.076373][ T9] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 150.079579][ T9] net_ratelimit: 21 callbacks suppressed [ 150.079590][ T9] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 150.136974][ T7523] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 150.139906][ T7523] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 150.141285][ T7523] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 150.142661][ T7523] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 150.144076][ T7523] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 150.145545][ T7523] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 150.146995][ T7523] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 150.148584][ T7523] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 150.150110][ T7523] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 150.151700][ T7523] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 150.153032][ T7523] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 150.154376][ T7523] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready [ 150.155879][ T7523] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready [ 150.157389][ T7523] infiniband rxe0: set active [ 150.158449][ T7523] IPv6: ADDRCONF(NETDEV_CHANGE): lapb6: link becomes ready [ 150.160229][ T7523] IPv6: ADDRCONF(NETDEV_CHANGE): lapb7: link becomes ready [ 150.161992][ T7523] IPv6: ADDRCONF(NETDEV_CHANGE): lapb8: link becomes ready [ 150.163295][ T7523] IPv6: ADDRCONF(NETDEV_CHANGE): lapb9: link becomes ready [ 150.164756][ T7523] IPv6: ADDRCONF(NETDEV_CHANGE): lapb10: link becomes ready [ 150.166258][ T7523] IPv6: ADDRCONF(NETDEV_CHANGE): lapb11: link becomes ready [ 150.167979][ T7523] IPv6: ADDRCONF(NETDEV_CHANGE): lapb12: link becomes ready [ 150.169677][ T7523] IPv6: ADDRCONF(NETDEV_CHANGE): lapb13: link becomes ready [ 150.170971][ T7523] IPv6: ADDRCONF(NETDEV_CHANGE): lapb14: link becomes ready [ 150.172417][ T7523] IPv6: ADDRCONF(NETDEV_CHANGE): lapb15: link becomes ready [ 150.174619][ T4463] rxe_eth0 speed is unknown, defaulting to 1000 [ 150.189279][ T1576] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 150.192963][ T1576] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 150.308381][ T11] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 150.310571][ T11] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 150.418463][ T1576] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 150.419900][ T1576] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 150.528139][ T1576] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 150.531585][ T1576] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 150.637821][ T1576] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 150.639369][ T1576] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 150.748626][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 150.750038][ T4531] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 150.863919][ T4440] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 150.865562][ T4440] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 150.993417][ T4440] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 151.003193][ T4440] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 151.118025][ T11] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 151.119581][ T11] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 151.228021][ T4440] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 151.346317][ T1576] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 151.458419][ T11] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 151.568133][ T39] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 151.690653][ T4440] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 151.799421][ T1576] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 152.015217][ T11] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 152.118193][ T11] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 152.220220][ T7571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.725'. [ 152.241645][ T1576] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 152.258353][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 152.602671][ T1576] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 152.628013][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 152.647852][ T1576] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 152.674096][ T7587] tipc: Started in network mode [ 152.675103][ T7587] tipc: Node identity ac14140f, cluster identity 4711 [ 152.677643][ T7587] tipc: Enabled bearer , priority 10 [ 152.778280][ T1576] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 152.799763][ T7591] loop6: detected capacity change from 0 to 32768 [ 152.803216][ T7591] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.734 (7591) [ 152.809467][ T7591] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 152.811453][ T7591] BTRFS info (device loop6): using sha256 (sha256-ce) checksum algorithm [ 152.813141][ T7591] BTRFS info (device loop6): force clearing of disk cache [ 152.814448][ T7591] BTRFS info (device loop6): enabling auto defrag [ 152.815830][ T7591] BTRFS info (device loop6): max_inline at 0 [ 152.817015][ T7591] BTRFS error (device loop6): support for check_integrity* not compiled in! [ 152.821702][ T7591] BTRFS error (device loop6): open_ctree failed: -22 [ 153.103353][ T4440] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 153.176971][ T7493] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by udevd (7493) [ 153.217822][ T11] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 153.327836][ T4440] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 153.348311][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 153.367980][ T4440] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 153.387928][ T4440] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 153.392138][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 153.500520][ T1576] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 153.530889][ T1576] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 153.548315][ T1033] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 153.697976][ T1033] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 153.727814][ T1033] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 153.787819][ T1033] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 153.827828][ T9] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 153.848326][ T1576] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 153.867842][ T1576] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 153.888017][ T1576] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 153.908263][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 153.927817][ T1576] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 153.947840][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 153.967826][ T1576] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 153.987791][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 154.018002][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 154.047813][ T1576] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 154.067863][ T1576] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 154.088311][ T9] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 154.107787][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 154.127815][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 154.147781][ T9] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 154.151840][ T4659] tipc: Node number set to 2886997007 [ 154.153687][ T7629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.755'. [ 154.482329][ T4440] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 154.505334][ T9] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 154.536793][ T7640] netlink: 'syz.1.747': attribute type 1 has an invalid length. [ 154.545690][ T7643] loop6: detected capacity change from 0 to 1024 [ 154.549131][ T7643] EXT4-fs: Ignoring removed mblk_io_submit option [ 154.569610][ T7643] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 154.578164][ T7643] FAULT_INJECTION: forcing a failure. [ 154.578164][ T7643] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 154.580870][ T7643] CPU: 1 PID: 7643 Comm: syz.6.749 Not tainted syzkaller #0 [ 154.582104][ T7643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 154.583793][ T7643] Call trace: [ 154.584421][ T7643] dump_backtrace+0x1c4/0x1f0 [ 154.585328][ T7643] show_stack+0x2c/0x3c [ 154.586118][ T7643] __dump_stack+0x30/0x40 [ 154.586947][ T7643] dump_stack_lvl+0xf4/0x15c [ 154.587920][ T7643] dump_stack+0x1c/0x5c [ 154.588813][ T7643] should_fail_ex+0x3cc/0x524 [ 154.589750][ T7643] should_fail_alloc_page+0x74/0xb8 [ 154.590832][ T7643] prepare_alloc_pages+0x1b8/0x4f0 [ 154.591920][ T7643] __alloc_pages+0x134/0x544 [ 154.592858][ T7643] __folio_alloc+0x1c/0x44 [ 154.593768][ T7643] vma_alloc_folio+0x37c/0x8ac [ 154.594741][ T7643] alloc_zeroed_user_highpage_movable+0x78/0x8c [ 154.596043][ T7643] handle_mm_fault+0x1788/0x3018 [ 154.597081][ T7643] do_page_fault+0x310/0xa5c [ 154.598041][ T7643] do_translation_fault+0x94/0xc8 [ 154.599073][ T7643] do_mem_abort+0x70/0x198 [ 154.599956][ T7643] el0_da+0x74/0x14c [ 154.600751][ T7643] el0t_64_sync_handler+0x90/0xf0 [ 154.601756][ T7643] el0t_64_sync+0x18c/0x190 [ 154.606308][ T7643] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 154.617815][ T4440] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 154.914237][ T11] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 154.929942][ T7660] device batadv_slave_1 entered promiscuous mode [ 154.931920][ T27] kauditd_printk_skb: 41 callbacks suppressed [ 154.931927][ T27] audit: type=1326 audit(154.920:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.3.751" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd379728 code=0x7ffc0000 [ 154.937712][ T27] audit: type=1326 audit(154.920:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.3.751" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=427 compat=0 ip=0xffffbd379728 code=0x7ffc0000 [ 154.945023][ T27] audit: type=1326 audit(154.920:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.3.751" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd379728 code=0x7ffc0000 [ 154.960943][ T27] audit: type=1326 audit(154.920:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.3.751" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffffbd379728 code=0x7ffc0000 [ 154.961004][ T5586] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2805: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 154.972529][ T7659] device batadv_slave_1 left promiscuous mode [ 154.974791][ T27] audit: type=1326 audit(154.920:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.3.751" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd379728 code=0x7ffc0000 [ 154.985248][ T27] audit: type=1326 audit(154.920:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.3.751" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffffbd379728 code=0x7ffc0000 [ 154.990484][ T27] audit: type=1326 audit(154.920:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.3.751" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd379728 code=0x7ffc0000 [ 154.994624][ T27] audit: type=1326 audit(154.920:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.3.751" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffffbd379728 code=0x7ffc0000 [ 155.001528][ T27] audit: type=1326 audit(154.920:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.3.751" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd379728 code=0x7ffc0000 [ 155.006125][ T27] audit: type=1326 audit(154.920:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.3.751" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffbd379728 code=0x7ffc0000 [ 155.012145][ T5586] EXT4-fs (loop6): unmounting filesystem. [ 155.028626][ T9] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 155.628337][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 155.687997][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 155.717788][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 155.742073][ T5076] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 155.758466][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 155.797845][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 155.817885][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 155.947816][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 155.978794][ T9] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 155.989657][ T7681] md/raid10:md0: active with 1 out of 3 devices [ 155.992260][ T7681] md0: detected capacity change from 0 to 3840 [ 156.000603][ T4440] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 156.012439][ T7688] md: recovery of RAID array md0 [ 156.018381][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 156.027469][ T7688] md: md0: recovery done. [ 156.039156][ T39] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 156.040668][ T39] net_ratelimit: 17 callbacks suppressed [ 156.040681][ T39] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 156.131181][ T7697] rxe_eth0 speed is unknown, defaulting to 1000 [ 156.147876][ T9] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 156.149252][ T9] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 156.799461][ T5076] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 156.800982][ T5076] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 156.850145][ T7713] loop1: detected capacity change from 0 to 164 [ 156.908606][ T39] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 156.912516][ T39] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 157.011909][ T7724] FAULT_INJECTION: forcing a failure. [ 157.011909][ T7724] name failslab, interval 1, probability 0, space 0, times 0 [ 157.014802][ T7724] CPU: 1 PID: 7724 Comm: syz.3.768 Not tainted syzkaller #0 [ 157.016122][ T7724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 157.017943][ T7724] Call trace: [ 157.018584][ T7724] dump_backtrace+0x1c4/0x1f0 [ 157.019483][ T7724] show_stack+0x2c/0x3c [ 157.020279][ T7724] __dump_stack+0x30/0x40 [ 157.021101][ T7724] dump_stack_lvl+0xf4/0x15c [ 157.021871][ T7724] dump_stack+0x1c/0x5c [ 157.022555][ T7724] should_fail_ex+0x3cc/0x524 [ 157.023396][ T7724] __should_failslab+0xc0/0x11c [ 157.024353][ T7724] should_failslab+0x10/0x28 [ 157.025213][ T7724] kmem_cache_alloc+0x88/0x310 [ 157.026121][ T7724] dst_alloc+0xfc/0x16c [ 157.027003][ T7724] ip_route_output_key_hash_rcu+0xfbc/0x1e18 [ 157.028202][ T7724] ip_route_output_key_hash+0x1b0/0x2fc [ 157.029274][ T7724] ip_route_output_flow+0x3c/0x158 [ 157.030294][ T7724] udp_sendmsg+0x10a8/0x1db0 [ 157.031193][ T7724] udpv6_sendmsg+0x8dc/0x20d0 [ 157.032009][ T7724] inet6_sendmsg+0xb4/0xd8 [ 157.032796][ T7724] sock_write_iter+0x268/0x368 [ 157.033636][ T7724] vfs_write+0x3c8/0x7c8 [ 157.034353][ T7724] ksys_write+0x12c/0x228 [ 157.035087][ T7724] __arm64_sys_write+0x7c/0x90 [ 157.035871][ T7724] invoke_syscall+0x98/0x290 [ 157.036608][ T7724] el0_svc_common+0x13c/0x258 [ 157.037441][ T7724] do_el0_svc+0x5c/0x134 [ 157.038211][ T7724] el0_svc+0x58/0x12c [ 157.038931][ T7724] el0t_64_sync_handler+0x84/0xf0 [ 157.039876][ T7724] el0t_64_sync+0x18c/0x190 [ 157.046374][ T4440] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 157.054843][ T4440] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 157.146935][ T7734] netlink: 'syz.1.774': attribute type 10 has an invalid length. [ 157.154508][ T7734] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.158785][ T1576] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 157.431348][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 157.447894][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 157.468094][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 157.488059][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 157.548408][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 157.617832][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 157.667859][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 157.728104][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 157.787878][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 157.850462][ T7026] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 157.869192][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 157.887870][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 157.908101][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 157.915973][ T4531] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 158.021513][ T7026] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 158.030074][ T7026] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 158.096929][ T7750] device syzkaller0 entered promiscuous mode [ 158.123884][ T7748] loop1: detected capacity change from 0 to 4096 [ 158.127558][ T7748] EXT4-fs (loop1): bad block size 65536 [ 158.137994][ T39] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 158.139467][ T39] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 158.266008][ T7026] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 158.288304][ T4488] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 158.311283][ T11] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 158.408341][ T4532] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 158.427880][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 158.917631][ T4531] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 158.948291][ T7026] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 158.951965][ T7026] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 159.069423][ T1576] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 159.075213][ T1576] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 159.188121][ T7757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.191617][ T7026] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 159.337167][ T4488] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 159.367868][ T4488] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 159.397996][ T4488] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 159.417868][ T4488] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 159.477873][ T4488] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 159.515827][ T7772] loop3: detected capacity change from 0 to 2048 [ 159.529562][ T4488] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 159.538648][ T7772] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 159.548031][ T5076] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 159.583626][ T4336] EXT4-fs (loop3): unmounting filesystem. [ 159.668066][ T5076] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 159.889072][ T7782] loop3: detected capacity change from 0 to 32768 [ 160.013604][ T11] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 160.015745][ T7782] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 160.017686][ T7782] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 160.019543][ T7782] BTRFS info (device loop3): force clearing of disk cache [ 160.020804][ T7782] BTRFS info (device loop3): enabling auto defrag [ 160.021803][ T7782] BTRFS info (device loop3): max_inline at 0 [ 160.022864][ T7782] BTRFS error (device loop3): support for check_integrity* not compiled in! [ 160.025782][ T7782] BTRFS error (device loop3): open_ctree failed: -22 [ 160.081311][ T7793] futex_wake_op: syz.3.791 tries to shift op by 144; fix this program [ 160.127588][ T7593] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (7593) [ 160.130495][ T7026] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 160.152061][ T7800] tipc: Enabled bearer , priority 10 [ 160.156331][ T7800] tipc: Enabled bearer , priority 10 [ 160.238357][ T9] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 160.257814][ T4532] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 160.367817][ T5076] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 160.534750][ T4812] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 160.616510][ T7796] tipc: Started in network mode [ 160.623846][ T7796] tipc: Node identity 0010000000000000002, cluster identity 1 [ 160.658298][ T5076] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 160.775325][ T4532] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 161.029165][ T5076] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 161.079689][ T5076] net_ratelimit: 10 callbacks suppressed [ 161.079699][ T5076] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 161.188611][ T4532] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 161.191191][ T4532] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 161.270760][ T4661] tipc: Node number set to 2886997162 [ 161.413756][ T4532] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 161.449295][ T4532] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 161.664291][ T5076] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 161.665947][ T5076] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 162.209059][ T4488] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 162.216540][ T4488] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 162.223495][ T7840] FAULT_INJECTION: forcing a failure. [ 162.223495][ T7840] name failslab, interval 1, probability 0, space 0, times 0 [ 162.234375][ T7852] futex_wake_op: syz.0.805 tries to shift op by 144; fix this program [ 162.243046][ T7840] CPU: 1 PID: 7840 Comm: syz.1.803 Not tainted syzkaller #0 [ 162.244325][ T7840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 162.246133][ T7840] Call trace: [ 162.246713][ T7840] dump_backtrace+0x1c4/0x1f0 [ 162.247473][ T7840] show_stack+0x2c/0x3c [ 162.248184][ T7840] __dump_stack+0x30/0x40 [ 162.249049][ T7840] dump_stack_lvl+0xf4/0x15c [ 162.249951][ T7840] dump_stack+0x1c/0x5c [ 162.250766][ T7840] should_fail_ex+0x3cc/0x524 [ 162.251675][ T7840] __should_failslab+0xc0/0x11c [ 162.252614][ T7840] should_failslab+0x10/0x28 [ 162.253503][ T7840] kmem_cache_alloc_node+0x8c/0x344 [ 162.254356][ T7840] __alloc_skb+0x128/0x728 [ 162.255114][ T7840] __pskb_copy_fclone+0xb4/0xdf4 [ 162.256067][ T7840] tipc_clone_to_loopback+0xfc/0x400 [ 162.257032][ T7840] tipc_node_xmit+0xb88/0xd6c [ 162.257822][ T7840] tipc_node_distr_xmit+0x264/0x370 [ 162.258885][ T7840] tipc_group_cong+0x438/0x4f0 [ 162.259820][ T7840] tipc_group_bc_cong+0x160/0x208 [ 162.260834][ T7840] tipc_send_group_bcast+0x2dc/0xb2c [ 162.261879][ T7840] __tipc_sendmsg+0x2b0/0x29e8 [ 162.262827][ T7840] tipc_sendmsg+0x64/0x1c0 [ 162.263553][ T7840] ____sys_sendmsg+0x588/0x90c [ 162.264390][ T7840] __sys_sendmsg+0x288/0x374 [ 162.265186][ T7840] __arm64_sys_sendmsg+0x80/0x94 [ 162.266127][ T7840] invoke_syscall+0x98/0x290 [ 162.267007][ T7840] el0_svc_common+0x13c/0x258 [ 162.267886][ T7840] do_el0_svc+0x5c/0x134 [ 162.268733][ T7840] el0_svc+0x58/0x12c [ 162.269530][ T7840] el0t_64_sync_handler+0x84/0xf0 [ 162.270487][ T7840] el0t_64_sync+0x18c/0x190 [ 162.328975][ T4532] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 162.333382][ T4532] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 162.438344][ T5076] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 162.439765][ T5076] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 162.494811][ T7860] netlink: 'syz.2.819': attribute type 10 has an invalid length. [ 162.501247][ T7860] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.548854][ T4812] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 162.550329][ T4812] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 162.668477][ T4488] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 162.688268][ T4812] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 162.797007][ T4488] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 162.858922][ T4488] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 162.887956][ T4488] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 162.917806][ T4488] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 162.957786][ T4488] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 163.011566][ T4488] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 163.038175][ T1576] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 163.057798][ T1576] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 163.063783][ T7869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.810'. [ 163.071986][ T7869] 8021q: adding VLAN 0 to HW filter on device bond5 [ 163.074127][ T7875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.810'. [ 163.075912][ T7875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.810'. [ 163.078355][ T4812] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 163.097942][ T1576] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 163.102043][ T7875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.118316][ T1576] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 163.127149][ T7875] bond5: (slave bond0): making interface the new active one [ 163.130508][ T7875] bond5: (slave bond0): Enslaving as an active interface with an up link [ 163.136076][ T7876] bond2: (slave lo): Releasing backup interface [ 163.139002][ T4488] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 163.158342][ T4812] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 163.177876][ T9] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 163.178403][ T7876] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 163.183056][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 163.186461][ T7876] bond5: (slave bond0): Releasing active interface [ 163.198032][ T4532] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 163.218439][ T4812] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 163.231244][ T7876] device dummy0 left promiscuous mode [ 163.232380][ T7876] bridge0: port 3(dummy0) entered disabled state [ 163.237965][ T7026] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 163.258269][ T4812] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 163.268952][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 163.270296][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 163.272373][ T7876] device bridge_slave_0 left promiscuous mode [ 163.273466][ T7876] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.278753][ T4812] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 163.299570][ T7026] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 163.317937][ T7026] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 163.320118][ T7876] device bridge_slave_1 left promiscuous mode [ 163.321436][ T7876] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.337941][ T7026] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 163.357898][ T7026] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 163.361146][ T7892] loop3: detected capacity change from 0 to 764 [ 163.363039][ T7876] bond1: (slave veth0_to_bond): Releasing backup interface [ 163.377840][ T4812] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 163.397904][ T4488] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 163.400969][ T7593] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 163.515510][ T4488] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 163.537824][ T4488] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 163.558321][ T4812] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 163.565532][ T7876] bond0: (slave bond_slave_0): Releasing backup interface [ 163.578382][ T4812] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 163.610673][ T4812] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 163.621541][ T7876] bond0: (slave bond_slave_1): Releasing backup interface [ 163.628696][ T4812] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 163.648341][ T4488] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 163.668351][ T4812] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 163.688572][ T9] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 163.715996][ T4812] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 163.733389][ T7876] team0: Port device team_slave_0 removed [ 163.742473][ T7876] team0: Port device team_slave_1 removed [ 163.743814][ T7876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.745144][ T7876] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.747214][ T7876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.749013][ T9] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 163.750621][ T7876] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.756967][ T7876] bond3: (slave ip6gretap1): Releasing active interface [ 163.804253][ T7876] bond4: (slave gretap1): Releasing active interface [ 163.912701][ T7901] ubi0: attaching mtd0 [ 163.914216][ T7901] ubi0: scanning is finished [ 163.915202][ T7901] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 163.935578][ T7901] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 163.944472][ T7881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.826'. [ 165.800203][ T7938] netlink: 'syz.3.825': attribute type 10 has an invalid length. [ 165.829500][ T7938] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.831823][ T7938] bond0: (slave team0): Enslaving as an active interface with an up link [ 166.344653][ T7954] sch_tbf: burst 10 is lower than device lo mtu (1550) ! [ 166.987341][ T7968] 9pnet: p9_errstr2errno: server reported unknown error ÈVmI®LÓâ—…N [ 167.002299][ T7971] loop6: detected capacity change from 0 to 128 [ 167.010449][ T7971] FAT-fs (loop6): bogus number of reserved sectors [ 167.012169][ T7971] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 167.014438][ T7971] FAT-fs (loop6): Can't find a valid FAT filesystem [ 171.318430][ T8041] loop6: detected capacity change from 0 to 512 [ 171.610925][ T8041] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 172.453948][ T8041] EXT4-fs error (device loop6): ext4_orphan_get:1435: comm syz.6.849: bad orphan inode 131083 [ 172.456342][ T8041] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 172.495537][ T8050] loop3: detected capacity change from 0 to 16 [ 172.517188][ T8050] erofs: (device loop3): mounted with root inode @ nid 36. [ 172.587421][ T8050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.593985][ T8050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.596536][ T5586] EXT4-fs (loop6): unmounting filesystem. [ 172.633340][ T8055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.852'. [ 172.676531][ T8061] smc: net device team0 applied user defined pnetid SYZ2 [ 172.809766][ T8061] smc: removing net device team0 with user defined pnetid SYZ2 [ 172.845306][ T8061] team0 (unregistering): Port device team_slave_0 removed [ 172.858826][ T8061] team0 (unregistering): Port device team_slave_1 removed [ 172.907983][ T8064] bond6: (slave veth5): Enslaving as an active interface with an up link [ 174.052621][ T8111] jffs2: notice: (8111) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 174.068681][ T8113] loop1: detected capacity change from 0 to 4096 [ 174.152597][ T8113] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 174.166238][ T8113] overlayfs: failed to create directory ./file0/work (errno: 117); mounting read-only [ 174.168417][ T8113] overlayfs: conflicting lowerdir path [ 174.181562][ T4340] EXT4-fs (loop1): unmounting filesystem. [ 175.226253][ T8130] overlayfs: unrecognized mount option "\']*=°¢°©æ[\1\" or missing value [ 175.508865][ T8136] loop3: detected capacity change from 0 to 512 [ 175.583854][ T8139] FAULT_INJECTION: forcing a failure. [ 175.583854][ T8139] name failslab, interval 1, probability 0, space 0, times 0 [ 175.586470][ T8139] CPU: 1 PID: 8139 Comm: syz.3.875 Not tainted syzkaller #0 [ 175.587676][ T8139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 175.589534][ T8139] Call trace: [ 175.590205][ T8139] dump_backtrace+0x1c4/0x1f0 [ 175.591079][ T8139] show_stack+0x2c/0x3c [ 175.591854][ T8139] __dump_stack+0x30/0x40 [ 175.592662][ T8139] dump_stack_lvl+0xf4/0x15c [ 175.593546][ T8139] dump_stack+0x1c/0x5c [ 175.594343][ T8139] should_fail_ex+0x3cc/0x524 [ 175.595154][ T8139] __should_failslab+0xc0/0x11c [ 175.595968][ T8139] should_failslab+0x10/0x28 [ 175.596736][ T8139] __kmem_cache_alloc_node+0x7c/0x318 [ 175.597631][ T8139] __kmalloc_node+0xc8/0x184 [ 175.598385][ T8139] kvmalloc_node+0x88/0x1d4 [ 175.599113][ T8139] nf_hook_entries_grow+0x214/0x5bc [ 175.599952][ T8139] __nf_register_net_hook+0x244/0x7f0 [ 175.600851][ T8139] nf_register_net_hook+0xc4/0x1a4 [ 175.601789][ T8139] nf_register_net_hooks+0x58/0x1b8 [ 175.602717][ T8139] ipt_register_table+0x3d4/0x5f0 [ 175.603583][ T8139] iptable_mangle_table_init+0x4c/0x78 [ 175.604485][ T8139] xt_find_table_lock+0x2c8/0x394 [ 175.605359][ T8139] xt_request_find_table_lock+0x38/0x114 [ 175.606356][ T8139] do_ipt_get_ctl+0x728/0x13d0 [ 175.607206][ T8139] nf_getsockopt+0x254/0x274 [ 175.608035][ T8139] ip_getsockopt+0x23c/0x344 [ 175.608879][ T8139] sctp_getsockopt+0x134/0x970 [ 175.609749][ T8139] sock_common_getsockopt+0xa8/0xc4 [ 175.610728][ T8139] __sys_getsockopt+0x1e0/0x474 [ 175.611553][ T8139] __arm64_sys_getsockopt+0xc0/0xdc [ 175.612495][ T8139] invoke_syscall+0x98/0x290 [ 175.613326][ T8139] el0_svc_common+0x13c/0x258 [ 175.614107][ T8139] do_el0_svc+0x5c/0x134 [ 175.614948][ T8139] el0_svc+0x58/0x12c [ 175.615710][ T8139] el0t_64_sync_handler+0x84/0xf0 [ 175.616724][ T8139] el0t_64_sync+0x18c/0x190 [ 177.906897][ T8178] smc: net device team0 applied user defined pnetid SYZ2 [ 178.563291][ T8178] smc: removing net device team0 with user defined pnetid SYZ2 [ 178.610662][ T8198] netlink: 8 bytes leftover after parsing attributes in process `syz.6.891'. [ 178.911024][ T8197] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 179.080979][ T8202] tipc: Resetting bearer [ 179.426737][ T8202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.443292][ T8202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.588036][ T8228] ip_tables: iptables: counters copy to user failed while replacing table [ 179.734281][ T8202] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.736078][ T8202] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.741109][ T8202] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.742808][ T8202] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.054657][ T8207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.060794][ T8207] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.071753][ T8207] tipc: Resetting bearer [ 180.097925][ T8207] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 180.661724][ T8242] loop1: detected capacity change from 0 to 128 [ 180.676683][ T8242] FAT-fs (loop1): bogus number of reserved sectors [ 180.678521][ T8242] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 180.682481][ T8242] FAT-fs (loop1): Can't find a valid FAT filesystem [ 180.773816][ T8248] loop6: detected capacity change from 0 to 4096 [ 182.301685][ T8248] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 182.503710][ T8264] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.907'. [ 182.505658][ T8264] netlink: zone id is out of range [ 183.837802][ T8278] netlink: 'syz.3.913': attribute type 1 has an invalid length. [ 183.843357][ T8278] 8021q: adding VLAN 0 to HW filter on device bond3 [ 183.850596][ T8275] device wlan0 entered promiscuous mode [ 183.854092][ T8275] device vlan0 entered promiscuous mode [ 184.316000][ T8284] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.318102][ T8284] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.319891][ T8284] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.321669][ T8284] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.324936][ T8284] bond3: (slave geneve2): making interface the new active one [ 184.327159][ T8284] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 184.330337][ T8292] device ip6gre1 entered promiscuous mode [ 184.333786][ T8292] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 184.336557][ T1033] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 184.414656][ T8295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.915'. [ 184.678306][ T4463] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 184.682270][ T4463] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 184.689173][ T8303] loop3: detected capacity change from 0 to 128 [ 184.705243][ T8303] FAT-fs (loop3): bogus number of reserved sectors [ 184.709838][ T8303] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 184.713551][ T8303] FAT-fs (loop3): Can't find a valid FAT filesystem [ 184.718183][ T4463] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 184.846160][ T8317] loop6: detected capacity change from 0 to 512 [ 185.169826][ T6335] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 185.208898][ T8317] EXT4-fs (loop6): Test dummy encryption mode enabled [ 185.263539][ T8317] EXT4-fs error (device loop6): ext4_orphan_get:1409: inode #15: comm syz.6.921: inode has both inline data and extents flags [ 185.270516][ T8317] EXT4-fs error (device loop6): ext4_orphan_get:1414: comm syz.6.921: couldn't read orphan inode 15 (err -117) [ 185.276067][ T8317] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 185.295378][ T8326] loop1: detected capacity change from 0 to 8 [ 185.296540][ T8317] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 185.338096][ T8326] squashfs image failed sanity check [ 185.345044][ T8328] IPVS: Error connecting to the multicast addr [ 185.349414][ T8317] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 185.438201][ T6335] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 185.774298][ T5586] EXT4-fs (loop6): unmounting filesystem. [ 186.271335][ T8341] loop1: detected capacity change from 0 to 128 [ 186.823935][ T8364] binder: 8363:8364 tried to acquire reference to desc 0, got 1 instead [ 186.826100][ T8364] binder: 8363:8364 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 186.837553][ T8364] binder: 8364 RLIMIT_NICE not set [ 186.839133][ T4463] binder: undelivered TRANSACTION_COMPLETE [ 186.865520][ T8369] loop3: detected capacity change from 0 to 512 [ 186.889489][ T8369] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 186.910566][ T4336] EXT4-fs (loop3): unmounting filesystem. [ 187.358249][ T2067] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.359405][ T2067] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.681847][ T8397] netlink: 8 bytes leftover after parsing attributes in process `syz.6.933'. [ 187.865894][ T8405] loop3: detected capacity change from 0 to 164 [ 188.090858][ T8408] netlink: 12 bytes leftover after parsing attributes in process `syz.3.937'. [ 188.599000][ T8408] af_packet: tpacket_rcv: packet too big, clamped from 64521 to 3956. macoff=92 [ 188.629146][ T8417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.631101][ T8417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.637985][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 189.127533][ T8428] device ipip1 entered promiscuous mode [ 189.193857][ T8427] netlink: 24 bytes leftover after parsing attributes in process `syz.3.945'. [ 189.551532][ T8437] ------------[ cut here ]------------ [ 189.552801][ T8437] WARNING: CPU: 0 PID: 8437 at net/mac80211/chan.c:2038 ieee80211_link_release_channel+0x16c/0x19c [ 189.554759][ T8437] Modules linked in: [ 189.555429][ T8437] CPU: 0 PID: 8437 Comm: syz.3.947 Not tainted syzkaller #0 [ 189.556639][ T8437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 189.558229][ T8437] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 189.559809][ T8437] pc : ieee80211_link_release_channel+0x16c/0x19c [ 189.561119][ T8437] lr : ieee80211_link_release_channel+0x16c/0x19c [ 189.562408][ T8437] sp : ffff800022487300 [ 189.563239][ T8437] x29: ffff800022487300 x28: 1fffe0001efded64 x27: 1fffe0001efdece8 [ 189.564902][ T8437] x26: dfff800000000000 x25: dfff800000000000 x24: ffff0000f7ef6b22 [ 189.566530][ T8437] x23: 1fffe0001efdeab1 x22: dfff800000000000 x21: 0000000000000000 [ 189.567966][ T8437] x20: ffff0000f7ef6208 x19: ffff0000f7ef5588 x18: 0000000000000000 [ 189.569568][ T8437] x17: 00000000ffff0000 x16: ffff8000082dce18 x15: 0000000000000000 [ 189.570969][ T8437] x14: 0000000000000001 x13: 1ffff00004490e14 x12: 0000000000080000 [ 189.572331][ T8437] x11: 0000000000041497 x10: ffff80002af9e000 x9 : ffff8000114b29dc [ 189.573756][ T8437] x8 : 0000000000041498 x7 : ffff8000114b28dc x6 : 0000000000000000 [ 189.575063][ T8437] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082d5590 [ 189.576537][ T8437] x2 : ffff0000d9a43800 x1 : 0000000000000000 x0 : 0000000000000000 [ 189.577915][ T8437] Call trace: [ 189.578506][ T8437] ieee80211_link_release_channel+0x16c/0x19c [ 189.579588][ T8437] ieee80211_link_stop+0x9c/0xc4 [ 189.580469][ T8437] ieee80211_if_change_type+0x1d0/0xc84 [ 189.581470][ T8437] ieee80211_change_iface+0x64/0x3ec [ 189.582413][ T8437] cfg80211_change_iface+0x728/0xf1c [ 189.583376][ T8437] nl80211_set_interface+0x4e0/0x718 [ 189.584249][ T8437] genl_family_rcv_msg_doit+0x210/0x308 [ 189.585142][ T8437] genl_rcv_msg+0x424/0x600 [ 189.585961][ T8437] netlink_rcv_skb+0x220/0x3ec [ 189.586891][ T8437] genl_rcv+0x38/0x50 [ 189.587633][ T8437] netlink_unicast+0x5fc/0x80c [ 189.588500][ T8437] netlink_sendmsg+0x6f0/0x9d8 [ 189.589445][ T8437] __sys_sendto+0x324/0x440 [ 189.590227][ T8437] __arm64_sys_sendto+0xe4/0x104 [ 189.591103][ T8437] invoke_syscall+0x98/0x290 [ 189.591981][ T8437] el0_svc_common+0x13c/0x258 [ 189.592831][ T8437] do_el0_svc+0x5c/0x134 [ 189.593566][ T8437] el0_svc+0x58/0x12c [ 189.594235][ T8437] el0t_64_sync_handler+0x84/0xf0 [ 189.595210][ T8437] el0t_64_sync+0x18c/0x190 [ 189.596061][ T8437] irq event stamp: 1842 [ 189.596823][ T8437] hardirqs last enabled at (1841): [] __cancel_work_timer+0x2bc/0x450 [ 189.598731][ T8437] hardirqs last disabled at (1842): [] el1_dbg+0x24/0x80 [ 189.600435][ T8437] softirqs last enabled at (1816): [] mesh_path_flush_pending+0x3a8/0x3cc [ 189.602335][ T8437] softirqs last disabled at (1814): [] mesh_path_flush_pending+0x104/0x3cc [ 189.604250][ T8437] ---[ end trace 0000000000000000 ]--- [ 189.610634][ T8437] ------------[ cut here ]------------ [ 189.611563][ T8437] wlan0: Failed check-sdata-in-driver check, flags: 0x0 [ 189.612982][ T8437] WARNING: CPU: 0 PID: 8437 at net/mac80211/driver-ops.c:315 drv_unassign_vif_chanctx+0x35c/0x63c [ 189.614725][ T8437] Modules linked in: [ 189.615379][ T8437] CPU: 0 PID: 8437 Comm: syz.3.947 Tainted: G W syzkaller #0 [ 189.616809][ T8437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 189.618406][ T8437] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 189.619810][ T8437] pc : drv_unassign_vif_chanctx+0x35c/0x63c [ 189.620839][ T8437] lr : drv_unassign_vif_chanctx+0x35c/0x63c [ 189.621864][ T8437] sp : ffff8000224871a0 [ 189.622547][ T8437] x29: ffff8000224871a0 x28: dfff800000000000 x27: 0000000000000000 [ 189.623974][ T8437] x26: ffff0000f7ef6648 x25: dfff800000000000 x24: ffff0000f7ef6798 [ 189.625434][ T8437] x23: 0000000000000000 x22: ffff0000ce525400 x21: ffff0000f7ef6798 [ 189.626952][ T8437] x20: ffff800018db4000 x19: ffff0000f7ef4cc0 x18: 1fffe00033c2177e [ 189.628329][ T8437] x17: ffff8000163dd000 x16: ffff8000082de324 x15: ffff00019e10bbfc [ 189.629705][ T8437] x14: 0000000000000001 x13: 1fffe00018659cd0 x12: 0000000000000000 [ 189.631030][ T8437] x11: 0000000000000000 x10: ffff600018659cd1 x9 : 86c94fc1c9d0e200 [ 189.632285][ T8437] x8 : 86c94fc1c9d0e200 x7 : ffff80000825b754 x6 : 0000000000000000 [ 189.633585][ T8437] x5 : 0000000000000080 x4 : 0000000000000001 x3 : ffff80000824a20c [ 189.634915][ T8437] x2 : 0000000000000001 x1 : 0000000000000004 x0 : 0000000000000001 [ 189.636390][ T8437] Call trace: [ 189.636984][ T8437] drv_unassign_vif_chanctx+0x35c/0x63c [ 189.637906][ T8437] ieee80211_assign_link_chanctx+0x140/0x82c [ 189.639147][ T8437] __ieee80211_link_release_channel+0x298/0x5c4 [ 189.640421][ T8437] ieee80211_link_release_channel+0x130/0x19c [ 189.641604][ T8437] ieee80211_link_stop+0x9c/0xc4 [ 189.642585][ T8437] ieee80211_if_change_type+0x1d0/0xc84 [ 189.643704][ T8437] ieee80211_change_iface+0x64/0x3ec [ 189.644756][ T8437] cfg80211_change_iface+0x728/0xf1c [ 189.645783][ T8437] nl80211_set_interface+0x4e0/0x718 [ 189.646826][ T8437] genl_family_rcv_msg_doit+0x210/0x308 [ 189.647919][ T8437] genl_rcv_msg+0x424/0x600 [ 189.648660][ T8437] netlink_rcv_skb+0x220/0x3ec [ 189.649517][ T8437] genl_rcv+0x38/0x50 [ 189.650233][ T8437] netlink_unicast+0x5fc/0x80c [ 189.651128][ T8437] netlink_sendmsg+0x6f0/0x9d8 [ 189.652087][ T8437] __sys_sendto+0x324/0x440 [ 189.652997][ T8437] __arm64_sys_sendto+0xe4/0x104 [ 189.653952][ T8437] invoke_syscall+0x98/0x290 [ 189.654741][ T8437] el0_svc_common+0x13c/0x258 [ 189.655559][ T8437] do_el0_svc+0x5c/0x134 [ 189.656401][ T8437] el0_svc+0x58/0x12c [ 189.657190][ T8437] el0t_64_sync_handler+0x84/0xf0 [ 189.658167][ T8437] el0t_64_sync+0x18c/0x190 [ 189.659083][ T8437] irq event stamp: 2328 [ 189.659929][ T8437] hardirqs last enabled at (2327): [] finish_lock_switch+0xb0/0x1c8 [ 189.661809][ T8437] hardirqs last disabled at (2328): [] el1_dbg+0x24/0x80 [ 189.663404][ T8437] softirqs last enabled at (2298): [] handle_softirqs+0xb1c/0xc90 [ 189.664965][ T8437] softirqs last disabled at (1845): [] __do_softirq+0x14/0x20 [ 189.666460][ T8437] ---[ end trace 0000000000000000 ]--- [ 189.697801][ T8437] ------------[ cut here ]------------ [ 189.698995][ T8437] wlan0: Failed check-sdata-in-driver check, flags: 0x0 [ 189.700813][ T8437] WARNING: CPU: 1 PID: 8437 at net/mac80211/driver-ops.h:156 ieee80211_vif_cfg_change_notify+0x220/0x260 [ 189.702795][ T8437] Modules linked in: [ 189.703521][ T8437] CPU: 1 PID: 8437 Comm: syz.3.947 Tainted: G W syzkaller #0 [ 189.705278][ T8437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 189.707196][ T8437] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 189.708538][ T8437] pc : ieee80211_vif_cfg_change_notify+0x220/0x260 [ 189.709617][ T8437] lr : ieee80211_vif_cfg_change_notify+0x220/0x260 [ 189.710708][ T8437] sp : ffff8000224871a0 [ 189.711389][ T8437] x29: ffff8000224871a0 x28: dfff800000000000 x27: ffff8000163e0394 [ 189.712842][ T8437] x26: ffff0000ce525420 x25: 0000000000000000 x24: dfff800000000000 [ 189.714287][ T8437] x23: 0000000000000000 x22: ffff0000f7ef6740 x21: ffff0000cef08e80 [ 189.715758][ T8437] x20: ffff800018db4000 x19: ffff0000f7ef4cc0 x18: 1fffe00033c2597e [ 189.717352][ T8437] x17: ffff8000163dd000 x16: ffff8000082de324 x15: 0000000040000000 [ 189.718970][ T8437] x14: 0000000000000001 x13: 1fffe00033c28088 x12: 0000000000000000 [ 189.720508][ T8437] x11: ff0080000a932840 x10: 0000000000000003 x9 : 86c94fc1c9d0e200 [ 189.722001][ T8437] x8 : 86c94fc1c9d0e200 x7 : ffff80000825b754 x6 : 0000000000000000 [ 189.723552][ T8437] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 189.725108][ T8437] x2 : 0000000000000006 x1 : ffff800011cfdca0 x0 : ffff800187df6000 [ 189.726675][ T8437] Call trace: [ 189.727273][ T8437] ieee80211_vif_cfg_change_notify+0x220/0x260 [ 189.728360][ T8437] ieee80211_assign_link_chanctx+0x6f0/0x82c [ 189.729546][ T8437] __ieee80211_link_release_channel+0x298/0x5c4 [ 189.730758][ T8437] ieee80211_link_release_channel+0x130/0x19c [ 189.731948][ T8437] ieee80211_link_stop+0x9c/0xc4 [ 189.732914][ T8437] ieee80211_if_change_type+0x1d0/0xc84 [ 189.733855][ T8437] ieee80211_change_iface+0x64/0x3ec [ 189.734744][ T8437] cfg80211_change_iface+0x728/0xf1c [ 189.735630][ T8437] nl80211_set_interface+0x4e0/0x718 [ 189.736638][ T8437] genl_family_rcv_msg_doit+0x210/0x308 [ 189.737570][ T8437] genl_rcv_msg+0x424/0x600 [ 189.738366][ T8437] netlink_rcv_skb+0x220/0x3ec [ 189.739241][ T8437] genl_rcv+0x38/0x50 [ 189.740038][ T8437] netlink_unicast+0x5fc/0x80c [ 189.740964][ T8437] netlink_sendmsg+0x6f0/0x9d8 [ 189.741875][ T8437] __sys_sendto+0x324/0x440 [ 189.742730][ T8437] __arm64_sys_sendto+0xe4/0x104 [ 189.743631][ T8437] invoke_syscall+0x98/0x290 [ 189.744455][ T8437] el0_svc_common+0x13c/0x258 [ 189.745329][ T8437] do_el0_svc+0x5c/0x134 [ 189.746021][ T8437] el0_svc+0x58/0x12c [ 189.746669][ T8437] el0t_64_sync_handler+0x84/0xf0 [ 189.747498][ T8437] el0t_64_sync+0x18c/0x190 [ 189.748273][ T8437] irq event stamp: 2772 [ 189.748968][ T8437] hardirqs last enabled at (2771): [] finish_lock_switch+0xb0/0x1c8 [ 189.750705][ T8437] hardirqs last disabled at (2772): [] el1_dbg+0x24/0x80 [ 189.752224][ T8437] softirqs last enabled at (2742): [] handle_softirqs+0xb1c/0xc90 [ 189.753867][ T8437] softirqs last disabled at (2331): [] __do_softirq+0x14/0x20 [ 189.755377][ T8437] ---[ end trace 0000000000000000 ]--- [ 189.760215][ T8437] ------------[ cut here ]------------ [ 189.761184][ T8437] WARNING: CPU: 1 PID: 8437 at net/mac80211/iface.c:113 ieee80211_recalc_idle+0x298/0x338 [ 189.763028][ T8437] Modules linked in: [ 189.763837][ T8437] CPU: 1 PID: 8437 Comm: syz.3.947 Tainted: G W syzkaller #0 [ 189.765668][ T8437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 189.767659][ T8437] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 189.769164][ T8437] pc : ieee80211_recalc_idle+0x298/0x338 [ 189.770307][ T8437] lr : ieee80211_recalc_idle+0x298/0x338 [ 189.771460][ T8437] sp : ffff8000224871a0 [ 189.772272][ T8437] x29: ffff8000224871a0 x28: 0000000000000000 x27: 0000000000000000 [ 189.773872][ T8437] x26: ffff0000ce525420 x25: 0000000000000000 x24: dfff800000000000 [ 189.775427][ T8437] x23: 1fffe00019de158c x22: 1fffe00019de11d7 x21: dfff800000000000 [ 189.777075][ T8437] x20: 0000000000000000 x19: ffff0000cef08e80 x18: 1fffe00033c2597e [ 189.778496][ T8437] x17: ffff8000163dd000 x16: ffff8000082dce18 x15: 0000000000000002 [ 189.779943][ T8437] x14: 1ffff00002c7c073 x13: dfff800000000000 x12: 0000000000080000 [ 189.781622][ T8437] x11: 000000000007ffff x10: ffff80002af9e000 x9 : ffff8000113e8ffc [ 189.783206][ T8437] x8 : 0000000000080000 x7 : ffff800011388894 x6 : 0000000000000000 [ 189.784630][ T8437] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000002 [ 189.786098][ T8437] x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000 [ 189.787528][ T8437] Call trace: [ 189.788109][ T8437] ieee80211_recalc_idle+0x298/0x338 [ 189.789049][ T8437] ieee80211_del_chanctx+0x35c/0x70c [ 189.790008][ T8437] ieee80211_free_chanctx+0x258/0x33c [ 189.790963][ T8437] __ieee80211_link_release_channel+0x454/0x5c4 [ 189.792066][ T8437] ieee80211_link_release_channel+0x130/0x19c [ 189.793068][ T8437] ieee80211_link_stop+0x9c/0xc4 [ 189.793902][ T8437] ieee80211_if_change_type+0x1d0/0xc84 [ 189.794859][ T8437] ieee80211_change_iface+0x64/0x3ec [ 189.795805][ T8437] cfg80211_change_iface+0x728/0xf1c [ 189.796749][ T8437] nl80211_set_interface+0x4e0/0x718 [ 189.797791][ T8437] genl_family_rcv_msg_doit+0x210/0x308 [ 189.798872][ T8437] genl_rcv_msg+0x424/0x600 [ 189.799843][ T8437] netlink_rcv_skb+0x220/0x3ec [ 189.800871][ T8437] genl_rcv+0x38/0x50 [ 189.801681][ T8437] netlink_unicast+0x5fc/0x80c [ 189.802521][ T8437] netlink_sendmsg+0x6f0/0x9d8 [ 189.803370][ T8437] __sys_sendto+0x324/0x440 [ 189.804119][ T8437] __arm64_sys_sendto+0xe4/0x104 [ 189.804967][ T8437] invoke_syscall+0x98/0x290 [ 189.805779][ T8437] el0_svc_common+0x13c/0x258 [ 189.806579][ T8437] do_el0_svc+0x5c/0x134 [ 189.807316][ T8437] el0_svc+0x58/0x12c [ 189.808131][ T8437] el0t_64_sync_handler+0x84/0xf0 [ 189.809122][ T8437] el0t_64_sync+0x18c/0x190 [ 189.809937][ T8437] irq event stamp: 2916 [ 189.810657][ T8437] hardirqs last enabled at (2915): [] exit_to_kernel_mode+0xcc/0xfc [ 189.812301][ T8437] hardirqs last disabled at (2916): [] el1_dbg+0x24/0x80 [ 189.813744][ T8437] softirqs last enabled at (2910): [] handle_softirqs+0xb1c/0xc90 [ 189.815363][ T8437] softirqs last disabled at (2775): [] __do_softirq+0x14/0x20 [ 189.816926][ T8437] ---[ end trace 0000000000000000 ]--- [ 189.819725][ T8437] ------------[ cut here ]------------ [ 189.820731][ T8437] ODEBUG: init active (active state 0) object type: timer_list hint: 0x0 [ 189.822396][ T8437] WARNING: CPU: 1 PID: 8437 at lib/debugobjects.c:518 __debug_object_init+0x2c8/0x434 [ 189.824253][ T8437] Modules linked in: [ 189.824982][ T8437] CPU: 1 PID: 8437 Comm: syz.3.947 Tainted: G W syzkaller #0 [ 189.826517][ T8437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 189.828320][ T8437] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 189.829702][ T8437] pc : __debug_object_init+0x2c8/0x434 [ 189.830708][ T8437] lr : __debug_object_init+0x2c8/0x434 [ 189.831829][ T8437] sp : ffff8000224871f0 [ 189.832658][ T8437] x29: ffff8000224871f0 x28: dfff800000000000 x27: ffff0000c36039f8 [ 189.834265][ T8437] x26: ffff0000f7ef59d8 x25: 0000000000000000 x24: 0000000000000003 [ 189.835735][ T8437] x23: ffff800011d1b3a0 x22: ffff8000121e3e80 x21: 0000000000000000 [ 189.837260][ T8437] x20: ffff800011d1b3a0 x19: ffff0000f7ef59d8 x18: 1fffe00033c2597e [ 189.838765][ T8437] x17: ffff8000163dd000 x16: ffff8000082de324 x15: 0000000040000000 [ 189.840180][ T8437] x14: 0000000000000001 x13: 1fffe00033c28088 x12: 0000000000000000 [ 189.841741][ T8437] x11: ff0080000a932840 x10: 0000000000000003 x9 : 86c94fc1c9d0e200 [ 189.843307][ T8437] x8 : 86c94fc1c9d0e200 x7 : ffff80000825b754 x6 : 0000000000000000 [ 189.844855][ T8437] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 189.846412][ T8437] x2 : 0000000000000006 x1 : ffff800011cfdca0 x0 : ffff800187df6000 [ 189.847874][ T8437] Call trace: [ 189.848464][ T8437] __debug_object_init+0x2c8/0x434 [ 189.849479][ T8437] debug_object_init+0x20/0x2c [ 189.850230][ T8437] init_timer_key+0x54/0x4a8 [ 189.851065][ T8437] ieee80211_ibss_setup_sdata+0x48/0x160 [ 189.852050][ T8437] ieee80211_setup_sdata+0x6e8/0xa94 [ 189.853054][ T8437] ieee80211_if_change_type+0x1dc/0xc84 [ 189.854031][ T8437] ieee80211_change_iface+0x64/0x3ec [ 189.855056][ T8437] cfg80211_change_iface+0x728/0xf1c [ 189.856079][ T8437] nl80211_set_interface+0x4e0/0x718 [ 189.856981][ T8437] genl_family_rcv_msg_doit+0x210/0x308 [ 189.857995][ T8437] genl_rcv_msg+0x424/0x600 [ 189.858735][ T8437] netlink_rcv_skb+0x220/0x3ec [ 189.859594][ T8437] genl_rcv+0x38/0x50 [ 189.860318][ T8437] netlink_unicast+0x5fc/0x80c [ 189.861196][ T8437] netlink_sendmsg+0x6f0/0x9d8 [ 189.861958][ T8437] __sys_sendto+0x324/0x440 [ 189.862766][ T8437] __arm64_sys_sendto+0xe4/0x104 [ 189.863798][ T8437] invoke_syscall+0x98/0x290 [ 189.864733][ T8437] el0_svc_common+0x13c/0x258 [ 189.865676][ T8437] do_el0_svc+0x5c/0x134 [ 189.866515][ T8437] el0_svc+0x58/0x12c [ 189.867319][ T8437] el0t_64_sync_handler+0x84/0xf0 [ 189.868310][ T8437] el0t_64_sync+0x18c/0x190 [ 189.869195][ T8437] irq event stamp: 2994 [ 189.869889][ T8437] hardirqs last enabled at (2993): [] finish_lock_switch+0xb0/0x1c8 [ 189.871535][ T8437] hardirqs last disabled at (2994): [] el1_dbg+0x24/0x80 [ 189.873054][ T8437] softirqs last enabled at (2940): [] handle_softirqs+0xb1c/0xc90 [ 189.874605][ T8437] softirqs last disabled at (2919): [] __do_softirq+0x14/0x20 [ 189.876305][ T8437] ---[ end trace 0000000000000000 ]--- [ 189.877557][ T8437] INFO: trying to register non-static key. [ 189.878682][ T8437] The code is fine but needs lockdep annotation, or maybe [ 189.880016][ T8437] you didn't initialize this object before use? [ 189.881059][ T8437] turning off the locking correctness validator. [ 189.882082][ T8437] CPU: 1 PID: 8437 Comm: syz.3.947 Tainted: G W syzkaller #0 [ 189.883714][ T8437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 189.885503][ T8437] Call trace: [ 189.886089][ T8437] dump_backtrace+0x1c4/0x1f0 [ 189.886945][ T8437] show_stack+0x2c/0x3c [ 189.887688][ T8437] __dump_stack+0x30/0x40 [ 189.888491][ T8437] dump_stack_lvl+0xf4/0x15c [ 189.889345][ T8437] dump_stack+0x1c/0x5c [ 189.890166][ T8437] assign_lock_key+0x230/0x264 [ 189.891123][ T8437] register_lock_class+0x1ac/0x698 [ 189.892148][ T8437] __lock_acquire+0x258/0x7280 [ 189.893089][ T8437] lock_acquire+0x210/0x63c [ 189.893897][ T8437] __timer_delete_sync+0xa0/0x21c [ 189.894813][ T8437] timer_fixup_init+0x40/0x70 [ 189.895670][ T8437] __debug_object_init+0x310/0x434 [ 189.896667][ T8437] debug_object_init+0x20/0x2c [ 189.897522][ T8437] init_timer_key+0x54/0x4a8 [ 189.898329][ T8437] ieee80211_ibss_setup_sdata+0x48/0x160 [ 189.899328][ T8437] ieee80211_setup_sdata+0x6e8/0xa94 [ 189.900264][ T8437] ieee80211_if_change_type+0x1dc/0xc84 [ 189.901328][ T8437] ieee80211_change_iface+0x64/0x3ec [ 189.902321][ T8437] cfg80211_change_iface+0x728/0xf1c [ 189.903304][ T8437] nl80211_set_interface+0x4e0/0x718 [ 189.904265][ T8437] genl_family_rcv_msg_doit+0x210/0x308 [ 189.905276][ T8437] genl_rcv_msg+0x424/0x600 [ 189.906160][ T8437] netlink_rcv_skb+0x220/0x3ec [ 189.907097][ T8437] genl_rcv+0x38/0x50 [ 189.907854][ T8437] netlink_unicast+0x5fc/0x80c [ 189.908685][ T8437] netlink_sendmsg+0x6f0/0x9d8 [ 189.909558][ T8437] __sys_sendto+0x324/0x440 [ 189.910362][ T8437] __arm64_sys_sendto+0xe4/0x104 [ 189.911257][ T8437] invoke_syscall+0x98/0x290 [ 189.912036][ T8437] el0_svc_common+0x13c/0x258 [ 189.912839][ T8437] do_el0_svc+0x5c/0x134 [ 189.913559][ T8437] el0_svc+0x58/0x12c [ 189.914238][ T8437] el0t_64_sync_handler+0x84/0xf0 [ 189.915144][ T8437] el0t_64_sync+0x18c/0x190 [ 189.916116][ T8437] ------------[ cut here ]------------ [ 189.917172][ T8437] ODEBUG: init active (active state 0) object type: timer_list hint: 0x0 [ 189.919014][ T8437] WARNING: CPU: 1 PID: 8437 at lib/debugobjects.c:518 __debug_object_init+0x2c8/0x434 [ 189.920681][ T8437] Modules linked in: [ 189.921395][ T8437] CPU: 1 PID: 8437 Comm: syz.3.947 Tainted: G W syzkaller #0 [ 189.922940][ T8437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 189.924808][ T8437] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 189.926255][ T8437] pc : __debug_object_init+0x2c8/0x434 [ 189.927228][ T8437] lr : __debug_object_init+0x2c8/0x434 [ 189.928330][ T8437] sp : ffff800022487160 [ 189.929144][ T8437] x29: ffff800022487160 x28: dfff800000000000 x27: ffff0000c36039f8 [ 189.930664][ T8437] x26: ffff0000f7ef59d8 x25: 0000000000000000 x24: 0000000000000003 [ 189.932257][ T8437] x23: ffff800011d1b3a0 x22: ffff8000121e3e80 x21: 0000000000000000 [ 189.933856][ T8437] x20: ffff800011d1b3a0 x19: ffff0000f7ef59d8 x18: 1fffe00033c2597e [ 189.935329][ T8437] x17: ffff8000163dd000 x16: ffff800008043dd4 x15: ffff00019e12cbfc [ 189.936948][ T8437] x14: 0000000000000001 x13: 1fffe0001b46cc10 x12: 0000000000000000 [ 189.938504][ T8437] x11: 0000000000000000 x10: ffff60001b46cc11 x9 : 86c94fc1c9d0e200 [ 189.940061][ T8437] x8 : 86c94fc1c9d0e200 x7 : ffff800011cfc180 x6 : ffff80000825b754 [ 189.941594][ T8437] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff80000824a20c [ 189.943148][ T8437] x2 : 0000000000000001 x1 : 0000000000000004 x0 : 0000000000000001 [ 189.944762][ T8437] Call trace: [ 189.945435][ T8437] __debug_object_init+0x2c8/0x434 [ 189.946474][ T8437] debug_object_init+0x20/0x2c [ 189.947388][ T8437] timer_fixup_init+0x50/0x70 [ 189.948191][ T8437] __debug_object_init+0x310/0x434 [ 189.949028][ T8437] debug_object_init+0x20/0x2c [ 189.949770][ T8437] init_timer_key+0x54/0x4a8 [ 189.950713][ T8437] ieee80211_ibss_setup_sdata+0x48/0x160 [ 189.951666][ T8437] ieee80211_setup_sdata+0x6e8/0xa94 [ 189.952679][ T8437] ieee80211_if_change_type+0x1dc/0xc84 [ 189.953648][ T8437] ieee80211_change_iface+0x64/0x3ec [ 189.954583][ T8437] cfg80211_change_iface+0x728/0xf1c [ 189.955599][ T8437] nl80211_set_interface+0x4e0/0x718 [ 189.956537][ T8437] genl_family_rcv_msg_doit+0x210/0x308 [ 189.957495][ T8437] genl_rcv_msg+0x424/0x600 [ 189.958296][ T8437] netlink_rcv_skb+0x220/0x3ec [ 189.959185][ T8437] genl_rcv+0x38/0x50 [ 189.959903][ T8437] netlink_unicast+0x5fc/0x80c [ 189.960762][ T8437] netlink_sendmsg+0x6f0/0x9d8 [ 189.961663][ T8437] __sys_sendto+0x324/0x440 [ 189.962507][ T8437] __arm64_sys_sendto+0xe4/0x104 [ 189.963438][ T8437] invoke_syscall+0x98/0x290 [ 189.964310][ T8437] el0_svc_common+0x13c/0x258 [ 189.965206][ T8437] do_el0_svc+0x5c/0x134 [ 189.966030][ T8437] el0_svc+0x58/0x12c [ 189.966799][ T8437] el0t_64_sync_handler+0x84/0xf0 [ 189.967649][ T8437] el0t_64_sync+0x18c/0x190 [ 189.968400][ T8437] irq event stamp: 3022 [ 189.969087][ T8437] hardirqs last enabled at (3021): [] exit_to_kernel_mode+0xcc/0xfc [ 189.970678][ T8437] hardirqs last disabled at (3022): [] __timer_delete_sync+0x78/0x21c [ 189.972479][ T8437] softirqs last enabled at (3016): [] handle_softirqs+0xb1c/0xc90 [ 189.974040][ T8437] softirqs last disabled at (2997): [] __do_softirq+0x14/0x20 [ 189.975657][ T8437] ---[ end trace 0000000000000000 ]--- [ 189.981149][ T8437] ------------[ cut here ]------------ [ 189.982259][ T8437] ODEBUG: init active (active state 0) object type: timer_list hint: 0x0 [ 189.983930][ T8437] WARNING: CPU: 0 PID: 8437 at lib/debugobjects.c:518 __debug_object_init+0x2c8/0x434 [ 189.985650][ T8437] Modules linked in: [ 189.986350][ T8437] CPU: 0 PID: 8437 Comm: syz.3.947 Tainted: G W syzkaller #0 [ 189.988069][ T8437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 189.989960][ T8437] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 189.991372][ T8437] pc : __debug_object_init+0x2c8/0x434 [ 189.992349][ T8437] lr : __debug_object_init+0x2c8/0x434 [ 189.993435][ T8437] sp : ffff8000224870d0 [ 189.994263][ T8437] x29: ffff8000224870d0 x28: dfff800000000000 x27: ffff0000c36039f8 [ 189.995787][ T8437] x26: ffff0000f7ef59d8 x25: 0000000000000000 x24: 0000000000000003 [ 189.997207][ T8437] x23: ffff800011d1b3a0 x22: ffff8000121e3e80 x21: 0000000000000000 [ 189.998785][ T8437] x20: ffff800011d1b3a0 x19: ffff0000f7ef59d8 x18: 1fffe00033c2597e [ 190.000360][ T8437] x17: 6e6968207473696c x16: ffff800008043dd4 x15: 6570797420746365 [ 190.001920][ T8437] x14: 0000000000000001 x13: 1ffff00004490d68 x12: 0000000000080000 [ 190.003527][ T8437] x11: 000000000007ffff x10: ffff80002af9e000 x9 : 86c94fc1c9d0e200 [ 190.005268][ T8437] x8 : 86c94fc1c9d0e200 x7 : 0000000000000001 x6 : 0000000000000001 [ 190.006803][ T8437] x5 : ffff800022486b58 x4 : ffff8000164c4fa0 x3 : ffff80000831ff30 [ 190.008459][ T8437] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 190.010082][ T8437] Call trace: [ 190.010699][ T8437] __debug_object_init+0x2c8/0x434 [ 190.011587][ T8437] debug_object_init+0x20/0x2c [ 190.012551][ T8437] timer_fixup_init+0x50/0x70 [ 190.013500][ T8437] __debug_object_init+0x310/0x434 [ 190.014513][ T8437] debug_object_init+0x20/0x2c [ 190.015462][ T8437] timer_fixup_init+0x50/0x70 [ 190.016374][ T8437] __debug_object_init+0x310/0x434 [ 190.017398][ T8437] debug_object_init+0x20/0x2c [ 190.018316][ T8437] init_timer_key+0x54/0x4a8 [ 190.019145][ T8437] ieee80211_ibss_setup_sdata+0x48/0x160 [ 190.020192][ T8437] ieee80211_setup_sdata+0x6e8/0xa94 [ 190.021092][ T8437] ieee80211_if_change_type+0x1dc/0xc84 [ 190.022147][ T8437] ieee80211_change_iface+0x64/0x3ec [ 190.023102][ T8437] cfg80211_change_iface+0x728/0xf1c [ 190.024118][ T8437] nl80211_set_interface+0x4e0/0x718 [ 190.025077][ T8437] genl_family_rcv_msg_doit+0x210/0x308 [ 190.026062][ T8437] genl_rcv_msg+0x424/0x600 [ 190.026892][ T8437] netlink_rcv_skb+0x220/0x3ec [ 190.027856][ T8437] genl_rcv+0x38/0x50 [ 190.028653][ T8437] netlink_unicast+0x5fc/0x80c [ 190.029497][ T8437] netlink_sendmsg+0x6f0/0x9d8 [ 190.030357][ T8437] __sys_sendto+0x324/0x440 [ 190.031190][ T8437] __arm64_sys_sendto+0xe4/0x104 [ 190.032090][ T8437] invoke_syscall+0x98/0x290 [ 190.032938][ T8437] el0_svc_common+0x13c/0x258 [ 190.033719][ T8437] do_el0_svc+0x5c/0x134 [ 190.034439][ T8437] el0_svc+0x58/0x12c [ 190.035168][ T8437] el0t_64_sync_handler+0x84/0xf0 [ 190.036046][ T8437] el0t_64_sync+0x18c/0x190 [ 190.036889][ T8437] irq event stamp: 3022 [ 190.037614][ T8437] hardirqs last enabled at (3021): [] exit_to_kernel_mode+0xcc/0xfc [ 190.039369][ T8437] hardirqs last disabled at (3022): [] __timer_delete_sync+0x78/0x21c [ 190.041280][ T8437] softirqs last enabled at (3016): [] handle_softirqs+0xb1c/0xc90 [ 190.043208][ T8437] softirqs last disabled at (2997): [] __do_softirq+0x14/0x20 [ 190.044799][ T8437] ---[ end trace 0000000000000000 ]--- [ 190.058070][ T8437] ------------[ cut here ]------------ [ 190.059103][ T8437] ODEBUG: init active (active state 0) object type: timer_list hint: 0x0 [ 190.060803][ T8437] WARNING: CPU: 1 PID: 8437 at lib/debugobjects.c:518 __debug_object_init+0x2c8/0x434 [ 190.062668][ T8437] Modules linked in: [ 190.063370][ T8437] CPU: 1 PID: 8437 Comm: syz.3.947 Tainted: G W syzkaller #0 [ 190.065042][ T8437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 190.067043][ T8437] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 190.068526][ T8437] pc : __debug_object_init+0x2c8/0x434 [ 190.069643][ T8437] lr : __debug_object_init+0x2c8/0x434 [ 190.070694][ T8437] sp : ffff800022487040 [ 190.071528][ T8437] x29: ffff800022487040 x28: dfff800000000000 x27: ffff0000c36039f8 [ 190.073114][ T8437] x26: ffff0000f7ef59d8 x25: 0000000000000000 x24: 0000000000000003 [ 190.074541][ T8437] x23: ffff800011d1b3a0 x22: ffff8000121e3e80 x21: 0000000000000000 [ 190.076010][ T8437] x20: ffff800011d1b3a0 x19: ffff0000f7ef59d8 x18: 1fffe00033c2597e [ 190.077453][ T8437] x17: ffff8000163dd000 x16: ffff800008043dd4 x15: 0000000040000000 [ 190.078998][ T8437] x14: 0000000000000001 x13: 1fffe00033c28088 x12: 0000000000000000 [ 190.080562][ T8437] x11: ff008000080490b8 x10: 0000000040000002 x9 : 86c94fc1c9d0e200 [ 190.082101][ T8437] x8 : 86c94fc1c9d0e200 x7 : ffff800011cfc180 x6 : ffff80000825b754 [ 190.083625][ T8437] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 [ 190.085092][ T8437] x2 : ffff800022486c00 x1 : 0000000000000000 x0 : ffff80000825b7e8 [ 190.086470][ T8437] Call trace: [ 190.087050][ T8437] __debug_object_init+0x2c8/0x434 [ 190.087951][ T8437] debug_object_init+0x20/0x2c [ 190.088852][ T8437] timer_fixup_init+0x50/0x70 [ 190.089701][ T8437] __debug_object_init+0x310/0x434 [ 190.090629][ T8437] debug_object_init+0x20/0x2c [ 190.091430][ T8437] timer_fixup_init+0x50/0x70 [ 190.092352][ T8437] __debug_object_init+0x310/0x434 [ 190.093372][ T8437] debug_object_init+0x20/0x2c [ 190.094347][ T8437] timer_fixup_init+0x50/0x70 [ 190.095337][ T8437] __debug_object_init+0x310/0x434 [ 190.096333][ T8437] debug_object_init+0x20/0x2c [ 190.097266][ T8437] init_timer_key+0x54/0x4a8 [ 190.098070][ T8437] ieee80211_ibss_setup_sdata+0x48/0x160 [ 190.099033][ T8437] ieee80211_setup_sdata+0x6e8/0xa94 [ 190.100028][ T8437] ieee80211_if_change_type+0x1dc/0xc84 [ 190.101066][ T8437] ieee80211_change_iface+0x64/0x3ec [ 190.102042][ T8437] cfg80211_change_iface+0x728/0xf1c [ 190.102903][ T8437] nl80211_set_interface+0x4e0/0x718 [ 190.103792][ T8437] genl_family_rcv_msg_doit+0x210/0x308 [ 190.104736][ T8437] genl_rcv_msg+0x424/0x600 [ 190.105454][ T8437] netlink_rcv_skb+0x220/0x3ec [ 190.106282][ T8437] genl_rcv+0x38/0x50 [ 190.106981][ T8437] netlink_unicast+0x5fc/0x80c [ 190.107782][ T8437] netlink_sendmsg+0x6f0/0x9d8 [ 190.108686][ T8437] __sys_sendto+0x324/0x440 [ 190.109558][ T8437] __arm64_sys_sendto+0xe4/0x104 [ 190.110498][ T8437] invoke_syscall+0x98/0x290 [ 190.111293][ T8437] el0_svc_common+0x13c/0x258 [ 190.112185][ T8437] do_el0_svc+0x5c/0x134 [ 190.113056][ T8437] el0_svc+0x58/0x12c [ 190.113876][ T8437] el0t_64_sync_handler+0x84/0xf0 [ 190.114771][ T8437] el0t_64_sync+0x18c/0x190 [ 190.115631][ T8437] irq event stamp: 3022 [ 190.116413][ T8437] hardirqs last enabled at (3021): [] exit_to_kernel_mode+0xcc/0xfc [ 190.118209][ T8437] hardirqs last disabled at (3022): [] __timer_delete_sync+0x78/0x21c [ 190.120053][ T8437] softirqs last enabled at (3016): [] handle_softirqs+0xb1c/0xc90 [ 190.121760][ T8437] softirqs last disabled at (2997): [] __do_softirq+0x14/0x20 [ 190.123410][ T8437] ---[ end trace 0000000000000000 ]--- [ 190.126064][ T8437] ------------[ cut here ]------------ [ 190.127116][ T8437] ODEBUG: init active (active state 0) object type: timer_list hint: 0x0 [ 190.128797][ T8437] WARNING: CPU: 0 PID: 8437 at lib/debugobjects.c:518 __debug_object_init+0x2c8/0x434 [ 190.130454][ T8437] Modules linked in: [ 190.131109][ T8437] CPU: 0 PID: 8437 Comm: syz.3.947 Tainted: G W syzkaller #0 [ 190.132715][ T8437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 190.134687][ T8437] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 190.136142][ T8437] pc : __debug_object_init+0x2c8/0x434 [ 190.137164][ T8437] lr : __debug_object_init+0x2c8/0x434 [ 190.138206][ T8437] sp : ffff800022486fb0 [ 190.139003][ T8437] x29: ffff800022486fb0 x28: dfff800000000000 x27: ffff0000c36039f8 [ 190.140559][ T8437] x26: ffff0000f7ef59d8 x25: 0000000000000000 x24: 0000000000000003 [ 190.142154][ T8437] x23: ffff800011d1b3a0 x22: ffff8000121e3e80 x21: 0000000000000000 [ 190.143707][ T8437] x20: ffff800011d1b3a0 x19: ffff0000f7ef59d8 x18: 1fffe00033c2177e [ 190.145290][ T8437] x17: ffff8000163dd000 x16: ffff800008043dd4 x15: ffff00019e10bbfc [ 190.146829][ T8437] x14: 0000000000000001 x13: 1fffe00018659cd0 x12: 0000000000000000 [ 190.148340][ T8437] x11: 0000000000000000 x10: ffff600018659cd1 x9 : 86c94fc1c9d0e200 [ 190.149650][ T8437] x8 : 86c94fc1c9d0e200 x7 : ffff800011cfc180 x6 : ffff80000825b754 [ 190.151065][ T8437] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff80000824a20c [ 190.152728][ T8437] x2 : 0000000000000001 x1 : 0000000000000004 x0 : 0000000000000001 [ 190.154320][ T8437] Call trace: [ 190.154965][ T8437] __debug_object_init+0x2c8/0x434 [ 190.155979][ T8437] debug_object_init+0x20/0x2c [ 190.156964][ T8437] timer_fixup_init+0x50/0x70 [ 190.157856][ T8437] __debug_object_init+0x310/0x434 [ 190.158818][ T8437] debug_object_init+0x20/0x2c [ 190.159728][ T8437] timer_fixup_init+0x50/0x70 [ 190.160579][ T8437] __debug_object_init+0x310/0x434 [ 190.161573][ T8437] debug_object_init+0x20/0x2c [ 190.162438][ T8437] timer_fixup_init+0x50/0x70 [ 190.163266][ T8437] __debug_object_init+0x310/0x434 [ 190.164228][ T8437] debug_object_init+0x20/0x2c [ 190.165117][ T8437] timer_fixup_init+0x50/0x70 [ 190.165968][ T8437] __debug_object_init+0x310/0x434 [ 190.166913][ T8437] debug_object_init+0x20/0x2c [ 190.167774][ T8437] init_timer_key+0x54/0x4a8 [ 190.168516][ T8437] ieee80211_ibss_setup_sdata+0x48/0x160 [ 190.169472][ T8437] ieee80211_setup_sdata+0x6e8/0xa94 [ 190.170363][ T8437] ieee80211_if_change_type+0x1dc/0xc84 [ 190.171431][ T8437] ieee80211_change_iface+0x64/0x3ec [ 190.172507][ T8437] cfg80211_change_iface+0x728/0xf1c [ 190.173557][ T8437] nl80211_set_interface+0x4e0/0x718 [ 190.174522][ T8437] genl_family_rcv_msg_doit+0x210/0x308 [ 190.175614][ T8437] genl_rcv_msg+0x424/0x600 [ 190.176510][ T8437] netlink_rcv_skb+0x220/0x3ec [ 190.177335][ T8437] genl_rcv+0x38/0x50 [ 190.178034][ T8437] netlink_unicast+0x5fc/0x80c [ 190.178862][ T8437] netlink_sendmsg+0x6f0/0x9d8 [ 190.179627][ T8437] __sys_sendto+0x324/0x440 [ 190.180331][ T8437] __arm64_sys_sendto+0xe4/0x104 [ 190.181194][ T8437] invoke_syscall+0x98/0x290 [ 190.182010][ T8437] el0_svc_common+0x13c/0x258 [ 190.182839][ T8437] do_el0_svc+0x5c/0x134 [ 190.183589][ T8437] el0_svc+0x58/0x12c [ 190.184335][ T8437] el0t_64_sync_handler+0x84/0xf0 [ 190.185283][ T8437] el0t_64_sync+0x18c/0x190 [ 190.186181][ T8437] irq event stamp: 3022 [ 190.186918][ T8437] hardirqs last enabled at (3021): [] exit_to_kernel_mode+0xcc/0xfc [ 190.188570][ T8437] hardirqs last disabled at (3022): [] __timer_delete_sync+0x78/0x21c [ 190.190413][ T8437] softirqs last enabled at (3016): [] handle_softirqs+0xb1c/0xc90 [ 190.192305][ T8437] softirqs last disabled at (2997): [] __do_softirq+0x14/0x20 [ 190.194106][ T8437] ---[ end trace 0000000000000000 ]---