last executing test programs: 2.384327781s ago: executing program 4 (id=159): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80940, 0xd2) socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 2.332088941s ago: executing program 4 (id=161): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xd) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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") removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000003c0)=@known='trusted.overlay.nlink\x00') close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000740)="2ae0e71086763618", 0x8, 0x40040, &(0x7f0000000240)={0xa, 0x0, 0x3, @empty, 0x1}, 0x1c) ioctl$TCFLSH(r0, 0x540b, 0x0) recvmmsg(r2, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 2.258979794s ago: executing program 0 (id=163): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x28, r0, 0x801, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x28}, 0x1, 0x0, 0x0, 0x55ecf8253745804b}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TIOCGETD(r3, 0x5424, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x2}, 0xfe7c, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3) setsockopt$inet6_tcp_int(r4, 0x11a, 0x5, 0x0, 0xffffff4e) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a129000200ff05000100060e1208000f0100810401a80016ea1f000840042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') pread64(r6, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) sendmsg$AUDIT_SET_FEATURE(r6, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x3fa, 0x400, 0x70bd27, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20040800}, 0x800) 2.235811158s ago: executing program 4 (id=164): prctl$PR_SET_SECUREBITS(0x1c, 0x4) r0 = getuid() ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0xe, 0x1, {0xffffffffffffffff}, {r0}, 0x0, 0x4}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c04228d6347627ad3d95cf2c8a6602d6d80aba0893c4e4e8809ce4b42301a48cd01076b0b411d6680e17f2f798bc28c411fa52c2180e3ba6e0b847bcf270cc0c46350a287486ce8bbbd5d9a1d1fcc63aed9640a60d827c596b4a33b80acfc8f8d95fb510d3cbfb53e5ea10e6ded61e365f63e4e8fdcccb90c6244542fcb024a621eb9cb0a87ce5feaf4e828f9be8f33d244db1ff527a2669bd2afe50003c5641516e1"]) read$FUSE(r2, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000040)) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r7, 0xd8000) r9 = getpid() r10 = syz_pidfd_open(r9, 0x0) process_madvise(r10, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000100)="e2", 0x1}], 0x2, 0xe, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c000000000201040000000000000000020000002400028014000180080001000a01010008000200e00000010c0002800500010000000000300003802c00018014000300fc02000000000000000000000000000111000400fe880000000000000000000000000001040001"], 0x6c}}, 0x800) syz_fuse_handle_req(r2, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x130, 0x0, 0x2, {0x2, 0x3, 0x0, '\x00', {0x427167f3b73c1d19, 0x7ff, 0xadf, 0x10, r3, 0x0, 0x2000, '\x00', 0x6, 0x8000000000000001, 0x1, 0x3, {0x8, 0x6}, {0x4000000000006, 0xb}, {0x2000001, 0xd}, {0x4, 0x9fe}, 0x2000, 0x6, 0x8, 0x7}}}}) setresuid(r1, r1, r3) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="18000000150001002dbd7000fcdbdf2508"], 0x18}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2.234201537s ago: executing program 0 (id=165): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000180)=@base={0xa, 0x9, 0xd, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x4}, 0x38) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x28a140, 0x99) close(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x84, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r2}}) (async) read$FUSE(r2, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000300, r3, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x10, 0x1, 0x1, 0x0, 0x2}) 2.207305936s ago: executing program 0 (id=166): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r1 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) write(0xffffffffffffffff, &(0x7f0000000040)=':', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000440)={0x1, @pix_mp={0x0, 0x0, 0x34565559}}) 2.13104982s ago: executing program 0 (id=167): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(r0, 0x10e, 0x8, 0x0, &(0x7f0000000040)) (async) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x80000, 0x0, 0x0, 0x0, 0x0) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) chroot(&(0x7f00000001c0)='./file0/../file0/../file0/../file0/file0\x00') (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079100000000000007b0a00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) 2.127850765s ago: executing program 0 (id=168): r0 = io_uring_setup(0x4deb, &(0x7f0000000180)={0x0, 0x6d1e, 0x1, 0x503fa, 0x8100014f}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000020000000000000060b4000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000020000000000000060b4000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r2, 0x25, 0x0, @void}, 0xf) syz_emit_ethernet(0xfc0, &(0x7f0000007940)=ANY=[], 0x0) (async) syz_emit_ethernet(0xfc0, &(0x7f0000007940)=ANY=[], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, 0x52, 0x201, 0x70bd2d, 0x0, {0x9}, [@typed={0x8, 0x6d, 0x0, 0x0, @ipv4=@broadcast}]}, 0x1c}}, 0x8086) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x480a8, 0x0, 0x21, 0x0, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x480a8, 0x0, 0x21, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000000a00000000000000100000026b110e000000000095"], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x108688d, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) 1.886801052s ago: executing program 0 (id=171): r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, 0x0, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)}, 0x80) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x840) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote, r6}, 0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r6, {}, {0xafabc05531515610, 0x415034f1892c1116}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) pread64(r7, &(0x7f0000000340)=""/129, 0x81, 0x6) socket(0x2b, 0x80801, 0x1) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) close(0x4) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, 0x0) 1.886424753s ago: executing program 32 (id=171): r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, 0x0, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)}, 0x80) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x840) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote, r6}, 0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r6, {}, {0xafabc05531515610, 0x415034f1892c1116}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) pread64(r7, &(0x7f0000000340)=""/129, 0x81, 0x6) socket(0x2b, 0x80801, 0x1) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) close(0x4) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, 0x0) 1.86483974s ago: executing program 1 (id=173): socket(0x10, 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x4003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000300)={0x4, 0x0, 0x2}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0xd, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) shmctl$IPC_INFO(0x0, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x800, 0x3, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0x8, "bf240fef"}, 0x3, 0x2, {0x0}, 0x96000}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(r8, &(0x7f0000000500)={'#! ', './file0'}, 0xb) 1.402725557s ago: executing program 1 (id=178): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x8001af85, 0x80000001) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r4 = getpid() recvfrom$l2tp6(0xffffffffffffffff, 0x0, 0xfffffffffffffd3e, 0x140, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x20) (async) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, 0x6e) (async) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0x2, 0x4}, 0x6) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0x41a0) recvmsg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002800)=""/4166, 0x1046}, {&(0x7f0000000400)=""/4030, 0xfbe}, {&(0x7f0000003880)=""/4100, 0x1004}], 0x3}, 0x100) (async) r6 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$OCFS2_IOC_MOVE_EXT(r8, 0x40406f06, &(0x7f0000000180)={0x401, 0x4d, 0x7, 0x6, 0x2}) (async) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setreuid(0xee01, 0xee01) (async) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r6, &(0x7f0000000000)={0xa0000001}) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) listen(r2, 0xe00000) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000000201030000000000000000000a1000040c0019800800020001000000180002"], 0x38}, 0x1, 0x0, 0x0, 0x44008000}, 0x40008d2) 1.363218543s ago: executing program 4 (id=180): mbind(&(0x7f0000ad5000/0x2000)=nil, 0x2000, 0x4000, &(0x7f00000002c0)=0x8000, 0x7, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1008}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2389}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x81}}]}, 0x34}}, 0x396f0e319d4942b6) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x86d5}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1, 0x84}}}, 0xd0}}, 0x20050800) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000640)=[{0x6, 0x83, 0xfc, 0xfffffffe}]}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x34}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r1) 1.298964022s ago: executing program 1 (id=181): r0 = fsopen(&(0x7f0000000300)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = fsmount(r0, 0x1, 0xf8) bind$netlink(r2, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfb, 0x24080023}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) mq_notify(r5, &(0x7f0000000280)={0x0, 0x22, 0x2, @tid=r1}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)={0x58, 0x2, 0x6, 0xa81, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x58}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) r8 = socket$netlink(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}}, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 763.098509ms ago: executing program 3 (id=185): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x80000000, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_setup(0x4, &(0x7f00000014c0)=0x0) io_destroy(r1) io_submit(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') read$FUSE(r2, &(0x7f0000002a40)={0x2020}, 0x2dd) 762.826886ms ago: executing program 2 (id=186): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000009500e3ffffffffffff00"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) 762.553387ms ago: executing program 2 (id=187): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x2000c198) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x14, "3eccd8000000000000000010000000040100"}) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000802, 0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x220, 0x8000000000000000, 0x400, 0xb, 0x9, 0x5, 0x7e92, 0xfffffff7}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1b}}, 0x0}, 0x94) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000480)={{0x0, 0x4000, 0x0, 0xfffd}, 'syz0\x00', 0x35}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="130000001000000008"], 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001740)=ANY=[@ANYRES32=r5, @ANYRES32=r8], 0x20) r9 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r9, 0xc014563b, &(0x7f0000000100)={0x7}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x46}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6}, 0x70) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r7}, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) ioctl$USBDEVFS_CONNECTINFO(r4, 0x40085511, &(0x7f0000000380)) 702.661412ms ago: executing program 3 (id=188): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x30) (async, rerun: 64) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18) (rerun: 64) utimensat(r1, 0x0, &(0x7f0000000880)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0) (async) openat$rtc(0xffffffffffffff9c, &(0x7f0000001740), 0x80000, 0x0) (async) epoll_create1(0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) (async, rerun: 64) mkdirat(0xffffffffffffff9c, 0x0, 0x141) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async, rerun: 32) r7 = socket$kcm(0xa, 0x922000000003, 0x11) (rerun: 32) setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f00000000c0), 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r8, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f0000000000)) r9 = epoll_create1(0x0) fcntl$dupfd(r9, 0x406, r9) (async, rerun: 64) epoll_create1(0x80000) (rerun: 64) 153.136772ms ago: executing program 3 (id=189): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x3c}, 0xb73, 0x2, 0x0, 0x1, 0x5, 0xffff}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x10008b32, &(0x7f0000000000)="36b84b15eb6e0d9038a12dfc") 152.86594ms ago: executing program 3 (id=190): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) close(r1) r2 = syz_open_dev$vim2m(&(0x7f00000061c0), 0x7112, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000006200)={0x4, 0x1, 0x1, "e128f5595dccb884133a1954cf00a5a04b1a07caf5114f717a09b9ab87ac0a84", 0x3831354f}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f0000002380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000380)={[{@nr_inodes={'nr_inodes', 0x3d, [0x38]}}]}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r8, &(0x7f0000003480)={0x2020}, 0x2020) (async) read$FUSE(r8, &(0x7f0000003480)={0x2020}, 0x2020) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {0xfffd, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x6755150d}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x200040d0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r9, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) r11 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) shutdown(r11, 0x1) 151.368394ms ago: executing program 3 (id=191): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4f3, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000ac0)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xb, 0x3}, {0xfffffffb, 0x0, 0x9, 0xa}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.dequeue\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x24, &(0x7f0000000200)=0x7, 0x4) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000400", 0x14, 0x6, 0xfe, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2, 0x2000, 0x0, 0x7}}}}}}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x8}, {}, 0x9, 0x0, 0x1, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0xe8) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0xcd}}, './file0\x00'}) read$rfkill(r5, &(0x7f0000000040), 0x8) ioctl$OCFS2_IOC_GROUP_ADD64(r3, 0x40186f03, &(0x7f0000000500)={0x401, 0x8, 0x10, 0x3}) fanotify_mark(r5, 0x20, 0x2, r4, &(0x7f0000000340)='./file0\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) ioctl$FS_IOC_SETVERSION(r5, 0x40087602, &(0x7f00000003c0)=0x4) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000140)=0x4) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000000100)={r8, 0x7}, 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f00000001c0)={r8, 0xea, "ef86d0f832767d7c9007d0323bfed2ed5d94d892f800bdba1fdd00ecbdff15ce9f52b26e99aabebf9cc7bca94eb4d311b51e4cc31c762796a8578cfdd16ab3aaa938b9b22d86cc82ed9f3699c8d55b06e09149a6466f480436322af82de9ee3ddae6a1ed04587071bb770cb592597e49c834c920bf86e981e1039386a42492635fac7edec8a3107ee3dda92153751101f96de8b66ee231d61830b28f40787dfc15cf1ab99c2f8d4e77fc88c4745ec60f9df6533551e285c6bb9102d51e476feeda2f1fb9daa4dce15fd0a032599bd9da695a3dd937d2376b3c91db3cb1da9532f0952f12b867e8976e9a"}, &(0x7f00000002c0)=0xf2) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6, {0x1}}, './file0\x00'}) setsockopt$inet6_int(r6, 0x29, 0x7, &(0x7f0000000000)=0x6, 0x4) setsockopt$inet6_int(r6, 0x29, 0x42, &(0x7f0000000040)=0x1f2b, 0x4) 151.062097ms ago: executing program 4 (id=192): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000480)={0x3, 0x2}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, 0x40000000000000da, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60db0000", @ANYRES16=r1, @ANYBLOB="cf042bbd7000fedbdf251200000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x40000) (async) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60db0000", @ANYRES16=r1, @ANYBLOB="cf042bbd7000fedbdf251200000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x40000) 139.547011ms ago: executing program 1 (id=193): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f0000000040)={0x18, 0x0, 0x1, 0x0, 0x0, 0x21}) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x0, 0xf5, 0x9, 0x81d}]}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.swap.events\x00', 0x0, 0x0) ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f0000000140)={0x0, "5b3fdb075318a726d44e4af7594a07c7a583554a8c7f96828bd08e517711c76d", 0x0, 0x1}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000180)={0x18}) ioctl$IOMMU_VFIO_SET_IOMMU(r1, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f00000001c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000240)={0x28, 0x0, r2, 0x0, &(0x7f0000000200)="a82c92", 0x3, 0x5}) setns(r1, 0x20000000) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x2, r2, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r1, 0x3ba0, &(0x7f00000003c0)={0x48, 0x3, r3, 0x0, 0x2, 0xbd, &(0x7f0000000300)="d0d2dc23758bc4e7cd878dbb5cc5e108cd7be9b6c97a17bfc8addf4c4f9579872a0c120bd4655fa0c025fa2530eb827300a193e4316eb0a271b83a0a8878793b05929a2178d7a935d017ef69102e19e7a7a6c3f9e2927a2178d89f9c3034aa7e720effc919ff9015cf1d89d86e38363c8217ae45c0e86c1122f695101a9193268af235f1ffa790f891d298845607156482341cfc0ae8a38dba40108b1ef2f4e699968f330e8d4cbb9eb6e07115c3ab2ab30827b1f50514143668d75c04"}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000440)=@fd={0x6f100, 0x2, 0x4, 0x800, 0x4, {0x77359400}, {0x4, 0x1, 0x25, 0x1, 0x1, 0x2, "f974b448"}, 0x8628, 0x4, {0xffffffffffffffff}, 0x3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000500)={0x2, &(0x7f00000004c0)=[{}, {0x0}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000580)={r6, &(0x7f0000000540)=""/30}) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f00000005c0)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000600)={0x48, 0x2, r2}) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000680)=0x80000000) write$P9_RCREATE(r1, &(0x7f00000006c0)={0x18, 0x73, 0x1, {{0x20, 0x1}, 0x1}}, 0x18) ioctl$VIDIOC_S_JPEGCOMP(0xffffffffffffffff, 0x408c563e, &(0x7f0000000700)={0x80, 0x6, 0x1, "a4e3f261b24b2f5eba8a8744491df06c3185eecdb64ee3b7a79104d61f0c75cf15aa21b4cf58ab499fb92a14408ac46c590bf3dea039524a2f2450e5", 0x26, "20c57a32299e19cf6559163eedfae446b518e411152d05f46dbd73ae14a3b9b09218fb84a3759deed1e67a1cba4e8e0de796d1c59934d6c0ff104de9", 0x78}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r5, 0xf507, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, &(0x7f00000007c0)={0x5, 0x0, 0x200a, 0xa6, 0x8, {0x6, 0x8}}) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000800), &(0x7f0000000840)=0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000880)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getresuid(&(0x7f00000008c0), &(0x7f0000000900)=0x0, &(0x7f0000000940)) setreuid(r8, 0xee00) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000a80)={&(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0], 0xa, 0x6, 0x4, 0x3}) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r1, 0x40786e88, &(0x7f0000000cc0)={{&(0x7f0000000ac0)=[{0x1, 0xf, 0x4, {0x9, 0x5}, 0x7, 0x6, 0x5}, {0xf, 0x4, 0x7, {0xff, 0xf}, 0x7, 0xfffffffffffffffa, 0x3}], 0x2, 0x40, 0x8, 0x7}, {&(0x7f0000000b40)=[{0x0, 0x9}, {0x6, 0xb5c}, {0x2, 0x8000}, {0x8, 0x7}, {0x8, 0x4}, {0x6, 0x8}, {0x8, 0x383}, {0x6, 0x1}], 0x8, 0x10, 0x8001, 0x6d61060}, {&(0x7f0000000bc0)=[0xfffffffffffffffc, 0x4, 0x9, 0x1, 0x7, 0xaf9d, 0x4, 0x0], 0x8, 0x8, 0x100, 0x8019}, {&(0x7f0000000c00)=[{0x7, 0x5, 0x7ff, 0x76fd, 0x1}], 0x1, 0x28, 0xc4, 0x5}, {&(0x7f0000000c40)=[0x3, 0xfe, 0x7, 0xb9d, 0x1, 0x5, 0x0, 0x9, 0xf], 0x9, 0x8, 0x0, 0x401}}) pidfd_getfd(r7, r4, 0x0) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000602, r8, &(0x7f0000000d40)={0x9, 0x4, 0x0, 0x4}) 139.272623ms ago: executing program 4 (id=194): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000000)='./file1\x00', 0x204888, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb42e2382d40feefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000"], 0x1, 0x336, &(0x7f0000000880)="$eJzs3cFrI1UcB/DfxrXdXe2mBxEUxIde9DK09R8wyC6IBaVuZfUgzNqphswmJRNWsoi7N/Hm37F49CaI4LkX79689eJxD4uRJm23ienBhTSWfD4Q3i/z8mXeJEz4XZJ3cPuHu63dKtvNe1F7N8XViKg9jliNWhy7dDTWhvVSnPYw3q7f/uO1jz/97IPG5uaNrZRuNm69s5FSuv76L19/8+Mbv/Ze+OSn6z8vx/7q5wd/bfy5//L+Kwd/3/qqWaVmldqdXsrTnU6nl98pi7TTrFpZSh+VRV4Vqdmuiu7Y/G7Z2dvrp7y9s3Jtr1tUVcrb/dQq+qnXSb1uP+Vf5s12yrIsrVyLxfIs17v9aGsrb8xgMZyj7ycPXB1/2u028sN7ePlfye1HM10YAPC/NNn/1+LK8Pic+v/jFuW/9/+XFr3/fxb6/0Vw2P8vHd2/4/T/AAAAAAAAAAAAAABwETweDOqDwaB+PE4+5r0+Zsvnv9hO/XDvSkT53b3te9ujcTTf2I1mlFHEWtTjScTgxKi++f7mjbU0tBordx+M8ofjc+P59ajH6vT8ekpp8CCl8fzzw3+0OMlvRD1emp7fGJ1/Ir8Ub715Kp9FPX7/IjpRxk4cZp/mv11P6b0PNyfyy8PXAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALAYsnRi6v79WXbW/Ch/sr/+WtTjyfT9+dem7s9/OV69PN9rBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBjVf9+Ky/Lonv+xcM4Y2pwZF4LO/8iYman+O3FOOt9VijOLub9zQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADn7+mm3/NeCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPNU9e+38rIsujMs5n2NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF8k/AQAA//8A7ioD") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000040)}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7fff0001}]}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0xa, 0x5, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) ptrace(0x10, r1) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x52, &(0x7f0000000040)={0x8000002}) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="f3bbbbbb"], 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x142, 0x1ef) write$P9_RREAD(r3, &(0x7f0000000240)=ANY=[], 0x10) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000200)=ANY=[@ANYBLOB="090000000000000005000000000000000100000000000000", @ANYRES32=r4]) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 135.84524ms ago: executing program 1 (id=195): semtimedop(0x0, &(0x7f0000000580)=[{0x2, 0x8, 0x1000}], 0x1f4, &(0x7f0000000040)) r0 = socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c200000200000000000086dd6c37a07e00080001000000000000003f8d00000000000000fe8000000000000000000000000000aaff"], 0x0) recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x40010020) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000000)) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req={0x5, 0x3, 0x800, 0x8}, 0x10) 135.329325ms ago: executing program 1 (id=196): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x130, 0x168, 0x9, 0x130, 0xb, 0x220, 0x250, 0x250, 0x220, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'syz_tun\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x130, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}, {[], 0x74c8aad696aabd1d}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x0, 0xf91}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@inet=@set2={{0x28}, {{0x0, 0x80}}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_80211_inject_frame(&(0x7f00000001c0), 0x0, 0x0) 132.460398ms ago: executing program 5 (id=172): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bond0\x00', 0x0}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000001680)={0x2020}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x10001, 0x5}}, './file0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r1, @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='lp', 0x2) 130.441332ms ago: executing program 5 (id=197): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80082) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000040), 0x2, r3}) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x57, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000000)={0x2e, 0x1, 0x0, "3f2d030000000000afa1a36c5b58e86bffeaff02000000000000a1008000"}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000580)={0x401, 0x20, &(0x7f0000000180)=[r3], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r5, r4, r4], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) lseek(r7, 0x0, 0x1) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r1, 0xc0386447, &(0x7f0000000280)={{0x8, 0x1, &(0x7f0000000200)=[{0x8, 0x0, 0x80000000}]}, 0xe, 0x4, 0x8, 0x0, 0x0, 0x7, 0x400, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_GROUP_GET_STATE(r1, 0xc010644a, &(0x7f0000000300)={r8}) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80082) (async) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000040), 0x2, r3}) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x57, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000000)={0x2e, 0x1, 0x0, "3f2d030000000000afa1a36c5b58e86bffeaff02000000000000a1008000"}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000580)={0x401, 0x20, &(0x7f0000000180)=[r3], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r5, r4, r4], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) (async) syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) (async) lseek(r7, 0x0, 0x1) (async) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (async) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r1, 0xc0386447, &(0x7f0000000280)={{0x8, 0x1, &(0x7f0000000200)=[{0x8, 0x0, 0x80000000}]}, 0xe, 0x4, 0x8, 0x0, 0x0, 0x7, 0x400, 0x6}) (async) ioctl$DRM_IOCTL_PANTHOR_GROUP_GET_STATE(r1, 0xc010644a, &(0x7f0000000300)={r8}) (async) 129.357877ms ago: executing program 2 (id=198): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000000)={0x0, 0x400, 0x2, 0x1, 0xfffffffd, 0xffffff00}) socket$inet6(0xa, 0x1, 0x0) close(0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x10a900, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDMKTONE(r1, 0x4b30, 0x0) 125.799263ms ago: executing program 3 (id=199): sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="0a012a20", @ANYRES16=0x0, @ANYBLOB="e60f000901008b00005d33cdc96be58bd5b3274e000f", @ANYRES32, @ANYBLOB="0c001a804800030001"], 0x2c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)={0x20, r1, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x42010}, 0x48805) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) io_setup(0x7, &(0x7f0000000300)=0x0) pipe2(&(0x7f0000001b00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r3, 0x2, &(0x7f0000000500)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0xfffd, r4, 0x0}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}]) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0x70bd2d, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x2000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000300)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f0000000640)={&(0x7f00000002c0), 0xc, &(0x7f0000000600)={&(0x7f00000007c0)={0x164, r6, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_KEY={0x148, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "1dd19ef8e1c3a236a2346dde114f43e6260b317634b3832c53a8c489991d7c19"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3b8687d00ae2cbd7eaa2cbf88a1ecd65d2269a234661cfd039b2289ff793a124"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "4af0745beef7302c913197f4a7d62c18"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "de872116094f70186e2a88390c8c1300c8ee59b37872db8938cfd6dfd20f74b3"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "7bc016f61d3d4a2f00631deb5490a06c"}, @NL802154_KEY_ATTR_ID={0xb0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x20000050}, 0x4084) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r6, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x38}, 0x1, 0x0, 0x0, 0x6800}, 0x4000000) r10 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r10, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r11 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r11, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x8, 0x42}, 0x10) r12 = socket(0x10, 0x3, 0x0) write(r12, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000200), 0x8a03, 0x0) bind$pptp(r12, &(0x7f0000000280)={0x18, 0x2, {0x3, @multicast1}}, 0x1e) 124.454316ms ago: executing program 2 (id=200): r0 = socket$kcm(0x10, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f00000024c0)=""/4113, &(0x7f0000001440)=0x1011) r1 = openat$smackfs_onlycap(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f00000001c0)="0c3518", 0x3}, {&(0x7f0000000340)="4c69b43da55535e512957935fabb7251c79a66a4756b70ab9eff8c1ef2106fdc4f5650285bf452a4087842d9498d523ef832d8da3ae18f54a0f6852d202d90", 0x3f}], 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d800000018007b18e00212ba0d8105040a871100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000100000300014002000c59c266cd3e72d30901a8040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090080001fb791643a5ee4b11602b2a10c11ce1b14d6d130dfe1d9d322fe04fba8cae8c9010000734d7a50f4fa61ee8362969ad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6cdd40dd60105e9f16e9cb58000000000000000000000000000be53", 0xd9}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 104.491306ms ago: executing program 2 (id=201): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="14010000210001000000000004000000020100800c0001008200000000000000140003"], 0x114}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000180)=0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r7) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000011c0)={0x38, r8, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x38}}, 0x804) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)={0x20, r10, 0xf2ff96e223395e37, 0x70bd21, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x48, r10, 0x0, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xaa}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x28004008}, 0x4004000) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="28010000", @ANYRES16=r6, @ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x4004040}, 0x40884) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000240)={0x4000, 0x0, 0x20}, &(0x7f0000000300)='./file1\x00', 0x18, 0x0, 0x12345}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 38.127698ms ago: executing program 5 (id=202): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)={0x60, r1, 0x1, 0x70bd25, 0x25dfdbfe, {0x39}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x5}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x4004810) (async) pipe2(&(0x7f0000000080), 0x80) 37.476573ms ago: executing program 2 (id=203): prlimit64(0x0, 0x8, &(0x7f0000000280)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r3, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=""/174, 0xae}], 0x1, &(0x7f0000001fc0)=""/67, 0x43}, 0x1}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r3, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000000c0)="e8", 0x1}], 0x1, 0x0, 0x0, 0x1}, 0x4800) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000390422bd7000fbdbdf2500007d0000", @ANYRES32=r7, @ANYBLOB="21020000000000001800128008000100677470000c00028008000200", @ANYRES32, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x28008000}, 0x4040844) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000df2500"/20, @ANYRES32=0x0, @ANYBLOB="900100008ba5072f1c00128009000100626f6e64000000000c00028008001400ff000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4040851}, 0x240080c1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x400000000000235, 0x0) sendto$packet(r5, &(0x7f0000000400)='\x00', 0x1, 0x40, &(0x7f0000000200)={0x11, 0x11, r7, 0x1, 0x1, 0x6, @local}, 0x14) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x4e8, r4, 0x0, 0x100000000000000}, 0x38) 32.858974ms ago: executing program 5 (id=204): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) unshare(0x1a010080) (async) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000140), 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 0s ago: executing program 5 (id=205): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x1ca00, 0x0) writev(r0, &(0x7f0000005740)=[{&(0x7f00000045c0)='\n', 0x1}], 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x33) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x81, &(0x7f0000000b40), 0x1, 0x488, &(0x7f00000001c0)="$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") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.5' (ED25519) to the list of known hosts. [ 148.165730][ T4674] cgroup: Unknown subsys name 'net' [ 148.265784][ T4674] cgroup: Unknown subsys name 'cpuset' [ 148.267708][ T4674] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 148.455707][ T4674] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 149.278297][ T4690] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 149.287670][ T4692] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 149.287817][ T4692] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 149.290586][ T4692] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 149.301720][ T4695] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 149.301997][ T4695] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 149.302206][ T4695] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 149.302369][ T4695] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 149.302558][ T4695] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 149.303067][ T4695] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 149.303568][ T4695] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 149.304019][ T4695] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 149.304177][ T4695] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 149.304696][ T4695] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 149.305140][ T4695] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 149.305661][ T4695] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 149.306284][ T4695] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 149.306457][ T4695] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 149.307545][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 149.308228][ T4692] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 149.323629][ T4692] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 149.324172][ T4692] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 149.324848][ T4692] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 149.325055][ T4692] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 149.329542][ T4702] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 149.646339][ T4696] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.646579][ T4696] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.646678][ T4696] bridge_slave_0: entered allmulticast mode [ 149.647155][ T4696] bridge_slave_0: entered promiscuous mode [ 149.664724][ T4696] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.666047][ T4696] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.667190][ T4696] bridge_slave_1: entered allmulticast mode [ 149.668684][ T4696] bridge_slave_1: entered promiscuous mode [ 149.703289][ T4696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.705876][ T4696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.736329][ T4696] team0: Port device team_slave_0 added [ 149.740149][ T4693] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.741411][ T4693] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.742556][ T4693] bridge_slave_0: entered allmulticast mode [ 149.743951][ T4693] bridge_slave_0: entered promiscuous mode [ 149.746255][ T4686] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.746299][ T4686] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.746362][ T4686] bridge_slave_0: entered allmulticast mode [ 149.746781][ T4686] bridge_slave_0: entered promiscuous mode [ 149.747559][ T4686] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.747578][ T4686] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.747622][ T4686] bridge_slave_1: entered allmulticast mode [ 149.748068][ T4686] bridge_slave_1: entered promiscuous mode [ 149.754698][ T4696] team0: Port device team_slave_1 added [ 149.763465][ T4693] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.764709][ T4693] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.765908][ T4693] bridge_slave_1: entered allmulticast mode [ 149.767182][ T4693] bridge_slave_1: entered promiscuous mode [ 149.775227][ T4686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.776229][ T4686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.791218][ T4693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.796764][ T4686] team0: Port device team_slave_0 added [ 149.800082][ T4699] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.800182][ T4699] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.800235][ T4699] bridge_slave_0: entered allmulticast mode [ 149.800652][ T4699] bridge_slave_0: entered promiscuous mode [ 149.803534][ T4696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.803542][ T4696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.803556][ T4696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.804344][ T4696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.804355][ T4696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.804366][ T4696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.806286][ T4693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.809617][ T4686] team0: Port device team_slave_1 added [ 149.812562][ T4699] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.812622][ T4699] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.812670][ T4699] bridge_slave_1: entered allmulticast mode [ 149.813103][ T4699] bridge_slave_1: entered promiscuous mode [ 149.837508][ T4693] team0: Port device team_slave_0 added [ 149.840628][ T4686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.840899][ T4686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.840919][ T4686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.848986][ T4693] team0: Port device team_slave_1 added [ 149.849037][ T4687] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.849148][ T4687] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.849199][ T4687] bridge_slave_0: entered allmulticast mode [ 149.849603][ T4687] bridge_slave_0: entered promiscuous mode [ 149.850388][ T4686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.850395][ T4686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.850407][ T4686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.863647][ T4687] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.863717][ T4687] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.863774][ T4687] bridge_slave_1: entered allmulticast mode [ 149.864212][ T4687] bridge_slave_1: entered promiscuous mode [ 149.868621][ T4699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.872761][ T4699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.876734][ T4693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.876756][ T4693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.877034][ T4693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.877676][ T4693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.877682][ T4693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.877693][ T4693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.886118][ T4696] hsr_slave_0: entered promiscuous mode [ 149.886460][ T4696] hsr_slave_1: entered promiscuous mode [ 149.892564][ T4687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.900671][ T4687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.904232][ T4686] hsr_slave_0: entered promiscuous mode [ 149.905167][ T4686] hsr_slave_1: entered promiscuous mode [ 149.905377][ T4686] debugfs: 'hsr0' already exists in 'hsr' [ 149.905410][ T4686] Cannot create hsr debugfs directory [ 149.911027][ T4699] team0: Port device team_slave_0 added [ 149.912294][ T4699] team0: Port device team_slave_1 added [ 149.924986][ T4687] team0: Port device team_slave_0 added [ 149.925697][ T4687] team0: Port device team_slave_1 added [ 149.936397][ T4687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.937638][ T4687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.942204][ T4687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.947624][ T4687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.948716][ T4687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.952856][ T4687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.963696][ T4699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.964690][ T4699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.964712][ T4699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.965343][ T4699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.965349][ T4699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.965359][ T4699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.969365][ T4693] hsr_slave_0: entered promiscuous mode [ 149.969665][ T4693] hsr_slave_1: entered promiscuous mode [ 149.969852][ T4693] debugfs: 'hsr0' already exists in 'hsr' [ 149.969861][ T4693] Cannot create hsr debugfs directory [ 149.998422][ T4687] hsr_slave_0: entered promiscuous mode [ 149.999775][ T4687] hsr_slave_1: entered promiscuous mode [ 150.000850][ T4687] debugfs: 'hsr0' already exists in 'hsr' [ 150.001745][ T4687] Cannot create hsr debugfs directory [ 150.055856][ T4699] hsr_slave_0: entered promiscuous mode [ 150.056172][ T4699] hsr_slave_1: entered promiscuous mode [ 150.056370][ T4699] debugfs: 'hsr0' already exists in 'hsr' [ 150.056379][ T4699] Cannot create hsr debugfs directory [ 150.109663][ T4696] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 150.112033][ T4696] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 150.112373][ T4696] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 150.114283][ T4696] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 150.122904][ T4696] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 150.125382][ T4696] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 150.127501][ T4696] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 150.129718][ T4696] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 150.165944][ T4686] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 150.168498][ T4686] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 150.170264][ T4686] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 150.172188][ T4686] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 150.173649][ T4686] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 150.177699][ T4686] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 150.179395][ T4686] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 150.181329][ T4686] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 150.183794][ T4693] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 150.186058][ T4693] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 150.187552][ T4693] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 150.189518][ T4693] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 150.190946][ T4693] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 150.192823][ T4693] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 150.195225][ T4696] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.195275][ T4696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.195422][ T4696] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.195454][ T4696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.203599][ T4693] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 150.205803][ T4693] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 150.226504][ T4686] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.226546][ T4686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.226624][ T4686] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.226656][ T4686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.239163][ T4687] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 150.241062][ T4687] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 150.241652][ T4687] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 150.242947][ T4687] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 150.245719][ T4693] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.245755][ T4693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.245833][ T4693] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.245866][ T4693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.251694][ T4687] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 150.253736][ T4687] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 150.254809][ T4687] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 150.256366][ T4687] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 150.273742][ T4699] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 150.276216][ T4699] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 150.283053][ T4699] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 150.286023][ T4699] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 150.287442][ T4699] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 150.289332][ T4699] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 150.290846][ T4699] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 150.292777][ T4699] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 150.304866][ T4686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.308505][ T4687] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.308550][ T4687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.308617][ T4687] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.308645][ T4687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.328139][ T4693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.328784][ T4699] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.328808][ T4699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.328888][ T4699] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.328917][ T4699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.330704][ T3821] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.331397][ T3821] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.335180][ T3821] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.335889][ T3821] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.338258][ T3821] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.339284][ T3821] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.342098][ T3821] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.343668][ T3821] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.346053][ T3821] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.347822][ T3821] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.353075][ T4686] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.355304][ T4696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.360279][ T4696] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.367522][ T3821] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.367574][ T3821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.370420][ T3821] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.370450][ T3821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.374290][ T3821] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.374328][ T3821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.390596][ T4696] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 150.391186][ T4696] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.393701][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.393724][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.400257][ T4693] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.408089][ T3821] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.408123][ T3821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.427863][ T3821] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.427904][ T3821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.452268][ T4687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.458618][ T4687] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.468525][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.468564][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.468954][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.468979][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.474151][ T4699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.481594][ T4699] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.488699][ T4687] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 150.490245][ T4687] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.509695][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.509735][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.518055][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.518095][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.530652][ T4699] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.660577][ T4693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.673660][ T4696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.695994][ T4686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.712449][ T4696] veth0_vlan: entered promiscuous mode [ 150.713841][ T4687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.727825][ T4693] veth0_vlan: entered promiscuous mode [ 150.732527][ T4696] veth1_vlan: entered promiscuous mode [ 150.741495][ T4693] veth1_vlan: entered promiscuous mode [ 150.745614][ T4686] veth0_vlan: entered promiscuous mode [ 150.760643][ T4699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.768997][ T4686] veth1_vlan: entered promiscuous mode [ 150.772370][ T4696] veth0_macvtap: entered promiscuous mode [ 150.789773][ T4696] veth1_macvtap: entered promiscuous mode [ 150.798340][ T4693] veth0_macvtap: entered promiscuous mode [ 150.801094][ T4686] veth0_macvtap: entered promiscuous mode [ 150.805229][ T4686] veth1_macvtap: entered promiscuous mode [ 150.809348][ T4686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.812114][ T4693] veth1_macvtap: entered promiscuous mode [ 150.816350][ T4686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.822580][ T4699] veth0_vlan: entered promiscuous mode [ 150.825509][ T4696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.832081][ T4699] veth1_vlan: entered promiscuous mode [ 150.837467][ T4696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.838714][ T15] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.840264][ T15] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.841587][ T15] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.845956][ T4693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.849773][ T4687] veth0_vlan: entered promiscuous mode [ 150.850991][ T15] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.857284][ T4693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.859092][ T15] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.859129][ T15] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.859166][ T15] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.859189][ T15] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.862667][ T4687] veth1_vlan: entered promiscuous mode [ 150.871773][ T4687] veth0_macvtap: entered promiscuous mode [ 150.872839][ T4687] veth1_macvtap: entered promiscuous mode [ 150.889203][ T1290] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.889247][ T1290] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.889277][ T1290] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.889300][ T1290] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.907519][ T4699] veth0_macvtap: entered promiscuous mode [ 150.908666][ T4699] veth1_macvtap: entered promiscuous mode [ 150.919078][ T4687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.927933][ T4687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.931930][ T4699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.932624][ T40] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.932656][ T40] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.932673][ T40] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.932689][ T40] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.943297][ T1290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.943329][ T1290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.947461][ T4699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.957858][ T1290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.957882][ T1290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.962845][ T3821] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.962886][ T3821] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.962917][ T3821] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.962938][ T3821] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.976940][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.976971][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.001534][ T3821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.001559][ T3821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.002678][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.002690][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.028170][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.028197][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.033162][ T1290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.033188][ T1290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.040583][ T4686] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 151.052086][ T3821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.052118][ T3821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.075270][ T1290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.075292][ T1290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.087626][ T3821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.087651][ T3821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.102310][ T4870] loop1: detected capacity change from 0 to 128 [ 151.119076][ T4870] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 151.158592][ T4870] Zero length message leads to an empty skb [ 151.200379][ T4876] loop2: detected capacity change from 0 to 128 [ 151.211207][ T4880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.212204][ T4880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.237542][ T4686] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 151.256789][ T4876] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 151.337402][ T4888] ubi0: attaching mtd0 [ 151.342573][ T4888] ubi0: scanning is finished [ 151.342616][ T4888] ubi0: empty MTD device detected [ 151.384721][ T4698] Bluetooth: hci4: command tx timeout [ 151.384975][ T4698] Bluetooth: hci1: command tx timeout [ 151.385194][ T4698] Bluetooth: hci3: command tx timeout [ 151.385400][ T4698] Bluetooth: hci0: command tx timeout [ 151.385604][ T4698] Bluetooth: hci2: command tx timeout [ 151.519389][ T4887] fuse: Bad value for 'rootmode' [ 151.522018][ T4693] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 151.568290][ T4892] netlink: 'syz.2.9': attribute type 1 has an invalid length. [ 151.569747][ T4892] netlink: 'syz.2.9': attribute type 1 has an invalid length. [ 151.571103][ T4892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9'. [ 151.581241][ T4896] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 151.597199][ T4888] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 151.597231][ T4888] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 151.597251][ T4888] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 151.597262][ T4888] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 151.597273][ T4888] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 151.597280][ T4888] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 151.597286][ T4888] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3417343693 [ 151.597294][ T4888] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 151.597428][ T4899] ubi0: background thread "ubi_bgt0d" started, PID 4899 [ 151.599673][ T4896] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 151.680547][ T4905] loop2: detected capacity change from 0 to 2048 [ 151.701477][ T4905] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.742052][ T4905] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.14: bg 0: block 497: padding at end of block bitmap is not set [ 151.742859][ T4905] fs-verity (loop2, inode 13): Error -28 writing Merkle tree block 1 [ 151.742885][ T4905] fs-verity (loop2, inode 13): Error -28 building Merkle tree [ 151.763213][ T4912] syz.1.16 uses obsolete (PF_INET,SOCK_PACKET) [ 151.772118][ T4693] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.797734][ T4915] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17'. [ 151.831329][ T4917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.833612][ T4917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.837906][ T4917] netlink: 'syz.2.18': attribute type 26 has an invalid length. [ 151.895498][ T4920] netlink: 64 bytes leftover after parsing attributes in process `syz.1.19'. [ 151.901789][ T4922] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20'. [ 151.903525][ T4922] fuse: Bad value for 'fd' [ 151.924038][ T4924] loop4: detected capacity change from 0 to 8 [ 151.981319][ T4933] loop4: detected capacity change from 0 to 2048 [ 152.025376][ T4933] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.029563][ T4933] netlink: 'syz.4.23': attribute type 1 has an invalid length. [ 152.030887][ T4937] loop3: detected capacity change from 0 to 512 [ 152.041455][ T4937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.042930][ T4933] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 152.077103][ T4696] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.126891][ T4687] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.154006][ T4945] vhci_hcd vhci_hcd.3: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 152.160375][ T4945] syzkaller1: entered allmulticast mode [ 152.179107][ T30] audit: type=1326 audit(152.160:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4944 comm="syz.4.26" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a177b68 code=0x0 [ 152.389806][ T4962] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 152.390220][ T4962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.30'. [ 152.532672][ T4969] capability: warning: `syz.0.33' uses deprecated v2 capabilities in a way that may be insecure [ 152.538596][ T4969] loop0: detected capacity change from 0 to 512 [ 152.539073][ T4969] EXT4-fs: Ignoring removed nobh option [ 152.559439][ T4969] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.570898][ T4699] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.663602][ T4976] loop0: detected capacity change from 0 to 256 [ 152.663881][ T4976] ======================================================= [ 152.663881][ T4976] WARNING: The mand mount option has been deprecated and [ 152.663881][ T4976] and is ignored by this kernel. Remove the mand [ 152.663881][ T4976] option from the mount to silence this warning. [ 152.663881][ T4976] ======================================================= [ 152.664201][ T4976] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 152.671782][ T4702] block nbd0: Receive control failed (result -32) [ 152.708875][ T4981] sctp: [Deprecated]: syz.0.37 (pid 4981) Use of int in max_burst socket option deprecated. [ 152.708875][ T4981] Use struct sctp_assoc_value instead [ 152.712451][ T4983] sctp: [Deprecated]: syz.0.37 (pid 4983) Use of int in max_burst socket option deprecated. [ 152.712451][ T4983] Use struct sctp_assoc_value instead [ 152.743561][ T4985] netlink: 24 bytes leftover after parsing attributes in process `syz.1.38'. [ 152.923301][ T5003] tipc: Trying to set illegal importance in message [ 152.963480][ T5008] loop0: detected capacity change from 0 to 256 [ 153.403955][ T5024] loop2: detected capacity change from 0 to 4096 [ 153.409288][ T5024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.430235][ T4693] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.444810][ T4698] Bluetooth: hci0: command tx timeout [ 153.444868][ T4701] Bluetooth: hci3: command tx timeout [ 153.444900][ T4701] Bluetooth: hci1: command tx timeout [ 153.444926][ T4701] Bluetooth: hci4: command tx timeout [ 153.445713][ T4702] Bluetooth: hci2: command tx timeout [ 153.728972][ T5035] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 153.729306][ T5035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.51'. [ 153.781330][ T5038] netlink: 92 bytes leftover after parsing attributes in process `syz.1.51'. [ 153.781353][ T5038] netlink: 92 bytes leftover after parsing attributes in process `syz.1.51'. [ 153.917201][ T5042] EXT4-fs: Ignoring removed orlov option [ 153.941251][ T5042] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.957020][ T4686] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.720848][ T5047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.54'. [ 154.877764][ T5057] EXT4-fs: Ignoring removed nobh option [ 154.901542][ T5059] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 154.930896][ T5057] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 154.938672][ T5059] EXT4-fs (loop1): 1 orphan inode deleted [ 154.944068][ T5059] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.957707][ T12] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 154.957753][ T12] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:0: Failed to release dquot type 1 [ 154.957796][ T12] loop1: lost filesystem error report for type 5 error -117 [ 155.002334][ T5070] EXT4-fs (loop0): orphan cleanup on readonly fs [ 155.006655][ T5070] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.61: bg 0: block 63: padding at end of block bitmap is not set [ 155.014017][ T5070] loop0: lost filesystem error report for type 5 error -117 [ 155.014535][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 155.014560][ C0] EXT4-fs (loop0): initial error at time 155: ext4_validate_block_bitmap:441 [ 155.014591][ C0] EXT4-fs (loop0): last error at time 155: ext4_validate_block_bitmap:441 [ 155.020048][ T5070] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 155.020217][ T5070] EXT4-fs error (device loop0): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.0.61: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 155.020269][ T5070] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 155.026922][ T5070] EXT4-fs warning (device loop0): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.0.61: ea_inode dec ref err=-117 [ 155.027048][ T5070] EXT4-fs (loop0): 1 orphan inode deleted [ 155.027519][ T5070] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 155.091967][ T4699] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.105718][ T4686] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.125649][ T4687] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 155.140019][ T5081] EXT4-fs: Ignoring removed nobh option [ 155.140052][ T5081] EXT4-fs: Ignoring removed orlov option [ 155.147485][ T5081] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 155.417367][ T5092] fuse: Unknown parameter '0x0000000000000007' [ 155.425621][ T5081] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.429797][ T30] audit: type=1326 audit(155.420:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5095 comm="syz.3.66" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff80b77b68 code=0x0 [ 155.521948][ T5081] Bluetooth: MGMT ver 1.23 [ 155.527045][ T5101] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.528640][ T5081] overlayfs: failed lookup in lower (/, name='file0', err=-40): overlapping layers [ 155.539197][ T4702] Bluetooth: hci2: command tx timeout [ 155.540065][ T4702] Bluetooth: hci0: command tx timeout [ 155.540093][ T4702] Bluetooth: hci4: command tx timeout [ 155.540167][ T4702] Bluetooth: hci1: command tx timeout [ 155.540190][ T4702] Bluetooth: hci3: command tx timeout [ 155.766425][ T5106] EXT4-fs: Ignoring removed bh option [ 155.766581][ T5106] EXT4-fs: inline encryption not supported [ 156.486309][ T4687] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.498602][ T5106] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 156.672969][ T4686] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.957568][ T5115] set_capacity_and_notify: 8 callbacks suppressed [ 156.957692][ T5115] loop2: detected capacity change from 0 to 512 [ 156.969068][ T5115] EXT4-fs: Mount option(s) incompatible with ext2 [ 157.147258][ T5127] __nla_validate_parse: 1 callbacks suppressed [ 157.147296][ T5127] netlink: 24 bytes leftover after parsing attributes in process `syz.3.75'. [ 157.147315][ T5127] netlink: 'syz.3.75': attribute type 1 has an invalid length. [ 157.184270][ T5132] syzkaller1: entered promiscuous mode [ 157.184329][ T5132] syzkaller1: entered allmulticast mode [ 157.245893][ T5120] loop4: detected capacity change from 0 to 256 [ 157.267674][ T5120] FAT-fs (loop4): Directory bread(block 64) failed [ 157.267706][ T5120] FAT-fs (loop4): Directory bread(block 65) failed [ 157.267731][ T5120] FAT-fs (loop4): Directory bread(block 66) failed [ 157.267742][ T5120] FAT-fs (loop4): Directory bread(block 67) failed [ 157.267764][ T5120] FAT-fs (loop4): Directory bread(block 68) failed [ 157.267774][ T5120] FAT-fs (loop4): Directory bread(block 69) failed [ 157.267793][ T5120] FAT-fs (loop4): Directory bread(block 70) failed [ 157.267803][ T5120] FAT-fs (loop4): Directory bread(block 71) failed [ 157.267822][ T5120] FAT-fs (loop4): Directory bread(block 72) failed [ 157.267831][ T5120] FAT-fs (loop4): Directory bread(block 73) failed [ 157.317386][ T5144] loop0: detected capacity change from 0 to 512 [ 157.321687][ T5144] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 157.327387][ T5144] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 157.327801][ T5144] Quota error (device loop0): write_blk: dquota write failed [ 157.327811][ T5144] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 157.327842][ T5144] Quota error (device loop0): write_blk: dquota write failed [ 157.327872][ T5144] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 157.327887][ T5144] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.80: Failed to acquire dquot type 1 [ 157.327898][ T5144] loop0: lost filesystem error report for type 5 error -28 [ 157.334233][ C0] EXT4-fs (loop0): error count since last fsck: 2 [ 157.334253][ C0] EXT4-fs (loop0): initial error at time 157: ext4_mb_generate_buddy:1317 [ 157.334277][ C0] EXT4-fs (loop0): last error at time 157: ext4_acquire_dquot:7034 [ 157.334580][ T5144] EXT4-fs (loop0): 1 truncate cleaned up [ 157.335047][ T5144] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.376534][ T5144] EXT4-fs error (device loop0): __ext4_remount:6837: comm syz.0.80: Abort forced by user [ 157.378335][ T5144] EXT4-fs (loop0): Remounting filesystem read-only [ 157.378361][ T5144] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 157.402731][ T5151] loop4: detected capacity change from 0 to 1024 [ 157.407105][ T4699] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.428513][ T5154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'. [ 157.428542][ T5154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'. [ 157.437629][ T5147] loop1: detected capacity change from 0 to 512 [ 157.445368][ T5151] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.505006][ T5147] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.530425][ T4687] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.536340][ T5157] loop3: detected capacity change from 0 to 8192 [ 157.558293][ T5157] loop3: p1 p2 p3 p4 [ 157.558390][ T5157] loop3: p1 size 16777224 extends beyond EOD, truncated [ 157.563822][ T5157] loop3: p4 size 81920 extends beyond EOD, truncated [ 157.600329][ T5166] loop0: detected capacity change from 0 to 512 [ 157.604517][ T4692] Bluetooth: hci3: command tx timeout [ 157.604535][ T4702] Bluetooth: hci1: command tx timeout [ 157.604558][ T4702] Bluetooth: hci4: command tx timeout [ 157.604571][ T4702] Bluetooth: hci0: command tx timeout [ 157.604583][ T4702] Bluetooth: hci2: command tx timeout [ 157.609093][ T5166] EXT4-fs: Ignoring removed nomblk_io_submit option [ 157.616371][ T5166] EXT4-fs (loop0): Test dummy encryption mode enabled [ 157.622874][ T5166] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843e028, mo2=0002] [ 157.622917][ T5166] System zones: 1-12 [ 157.623306][ T5166] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.86: invalid indirect mapped block 8 (level 2) [ 157.623325][ T5166] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 157.625312][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 157.625327][ C0] EXT4-fs (loop0): initial error at time 157: ext4_free_branches:1023: inode 11 [ 157.625349][ C0] EXT4-fs (loop0): last error at time 157: ext4_free_branches:1023: inode 11 [ 157.632974][ T5166] EXT4-fs (loop0): Remounting filesystem read-only [ 157.633167][ T5166] EXT4-fs (loop0): 1 truncate cleaned up [ 157.633589][ T5166] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.674296][ T4699] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.681852][ T5164] loop4: detected capacity change from 0 to 512 [ 157.683015][ T5164] ext4: Unknown parameter 'dont_appraise' [ 157.740416][ T5133] mmap: syz.1.78 (5133): VmData 26132480 exceed data ulimit 7. Update limits or use boot option ignore_rlimit_data. [ 158.113249][ T4680] udevd[4680]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 158.116333][ T4678] udevd[4678]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 158.134302][ T4676] udevd[4676]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 158.148465][ T4679] udevd[4679]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 158.176349][ T4686] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.683198][ T4692] Bluetooth: hci1: command tx timeout [ 187.350202][ T1590] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.350273][ T1590] ieee802154 phy1 wpan1: encryption failed: -22 [ 221.305154][ T4774] IPVS: starting estimator thread 0... [ 221.323543][ T5197] process 'syz.1.90' launched './file1' with NULL argv: empty string added [ 221.351891][ T5206] loop0: detected capacity change from 0 to 512 [ 221.418560][ T5199] IPVS: using max 44 ests per chain, 105600 per kthread [ 221.442457][ T5206] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 221.450670][ T5206] EXT4-fs (loop0): 1 truncate cleaned up [ 221.451146][ T5206] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.729817][ T5220] loop1: detected capacity change from 0 to 256 [ 221.778442][ T4699] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.795612][ T5222] loop3: detected capacity change from 0 to 512 [ 221.818900][ T5222] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.827484][ T5225] loop0: detected capacity change from 0 to 1024 [ 221.832706][ T5225] EXT4-fs: Ignoring removed nomblk_io_submit option [ 221.876140][ T5225] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 221.917980][ T4699] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 221.949683][ T4696] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.956128][ T5241] overlayfs: missing 'lowerdir' [ 222.016721][ T5242] loop1: detected capacity change from 0 to 8192 [ 222.018824][ T5249] loop0: detected capacity change from 0 to 256 [ 222.044477][ T5253] loop3: detected capacity change from 0 to 1024 [ 222.045920][ T5253] EXT4-fs: Ignoring removed bh option [ 222.053249][ T5253] EXT4-fs: Mount option(s) incompatible with ext3 [ 222.093588][ T5250] 9p: Bad value for 'wfdno' [ 222.096553][ T5253] overlayfs: failed to resolve './bus': -2 [ 222.098939][ T5250] netlink: 'syz.4.106': attribute type 2 has an invalid length. [ 222.423365][ T5260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.423626][ T5260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.465087][ T5268] binder: 5265:5268 BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 222.465111][ T5268] binder: 5265:5268 ioctl c0306201 20000640 returned -22 [ 222.465959][ T5269] binder: 5265:5269 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 222.465974][ T5269] binder: 5269 RLIMIT_NICE not set [ 222.466323][ T5268] netlink: 124 bytes leftover after parsing attributes in process `syz.2.111'. [ 222.466756][ T5267] netlink: 'syz.2.111': attribute type 1 has an invalid length. [ 222.509677][ T5274] 9p: Bad value for 'rfdno' [ 222.510641][ T5273] 9p: Bad value for 'rfdno' [ 222.574325][ T5284] loop1: detected capacity change from 0 to 1024 [ 222.575895][ T5284] EXT4-fs: Ignoring removed bh option [ 222.581103][ T5284] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 222.593168][ T5284] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.600290][ T5284] evm: overlay not supported [ 222.615396][ T4686] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 222.615765][ T4686] EXT4-fs error (device loop1): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /28/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 222.616738][ T4686] EXT4-fs (loop1): Remounting filesystem read-only [ 222.626097][ T4686] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.727791][ T5295] netlink: 'syz.1.119': attribute type 1 has an invalid length. [ 222.735868][ T5295] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.740706][ T5296] veth3: entered promiscuous mode [ 222.811683][ T5293] loop2: detected capacity change from 0 to 512 [ 222.817317][ T5293] loop2: detected capacity change from 0 to 512 [ 222.980696][ T5315] EXT4-fs: Ignoring removed bh option [ 222.984178][ T5315] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 222.998107][ T5315] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.000987][ T5313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.122'. [ 223.026856][ T5313] EXT4-fs (loop3): Test dummy encryption mode enabled [ 223.036744][ T5313] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.122: inode has both inline data and extents flags [ 223.036781][ T5313] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 223.036898][ T5313] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.122: couldn't read orphan inode 15 (err -117) [ 223.036915][ T5313] loop3: lost filesystem error report for type 5 error -117 [ 223.037495][ T5313] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.044028][ T5313] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 223.055195][ T4773] IPVS: starting estimator thread 0... [ 223.065877][ T4686] EXT4-fs error (device loop1): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /33/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 223.066056][ T4686] EXT4-fs (loop1): Remounting filesystem read-only [ 223.079174][ T4686] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.090921][ T4696] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.142572][ T5329] IPVS: using max 59 ests per chain, 141600 per kthread [ 223.152129][ T5339] bridge0: port 3(syz_tun) entered blocking state [ 223.154449][ T5339] bridge0: port 3(syz_tun) entered disabled state [ 223.155691][ T5339] syz_tun: entered allmulticast mode [ 223.160181][ T5339] syz_tun: entered promiscuous mode [ 223.161544][ T5339] bridge0: port 3(syz_tun) entered blocking state [ 223.161591][ T5339] bridge0: port 3(syz_tun) entered forwarding state [ 223.267421][ T5350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.267508][ T5350] batadv_slave_0: entered promiscuous mode [ 223.662326][ T5350] loop3: p2 < > p4 [ 223.696491][ T5350] loop3: p4 size 8192 extends beyond EOD, truncated [ 223.847603][ T5335] netlink: 48 bytes leftover after parsing attributes in process `syz.1.127'. [ 223.898701][ T5362] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 223.907326][ T5362] EXT4-fs (loop4): 1 truncate cleaned up [ 223.910047][ T5362] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.074145][ T5229] udevd[5229]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 224.093972][ T5229] udevd[5229]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 224.217127][ T5383] fuse: Bad value for 'fd' [ 224.666583][ T5359] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 224.666767][ T5359] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 224.669172][ T5359] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 224.670727][ T5359] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 224.670856][ T5359] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 224.671945][ T5359] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 224.672988][ T5359] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 224.673039][ T5359] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 224.674199][ T5359] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 224.675724][ T5359] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 224.675983][ T5359] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 224.677417][ T5359] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 224.679817][ T5359] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 224.679859][ T5359] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 224.681862][ T5359] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 224.732654][ T4687] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.834790][ T5396] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 224.834938][ T5396] EXT4-fs (loop4): orphan cleanup on readonly fs [ 224.839696][ T5396] Quota error (device loop4): do_check_range: Getting block 196613 out of range 1-5 [ 224.841604][ T5396] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 224.843258][ T5396] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.142: Failed to acquire dquot type 1 [ 224.843399][ T5396] loop4: lost filesystem error report for type 5 error -117 [ 224.845221][ T5396] EXT4-fs (loop4): Remounting filesystem read-only [ 224.845536][ T5404] sctp: [Deprecated]: syz.1.144 (pid 5404) Use of int in max_burst socket option deprecated. [ 224.845536][ T5404] Use struct sctp_assoc_value instead [ 224.845793][ T5404] sctp: [Deprecated]: syz.1.144 (pid 5404) Use of int in max_burst socket option deprecated. [ 224.845793][ T5404] Use struct sctp_assoc_value instead [ 224.845930][ T5404] sctp: [Deprecated]: syz.1.144 (pid 5404) Use of int in max_burst socket option deprecated. [ 224.845930][ T5404] Use struct sctp_assoc_value instead [ 224.846553][ T5404] sctp: [Deprecated]: syz.1.144 (pid 5404) Use of int in max_burst socket option deprecated. [ 224.846553][ T5404] Use struct sctp_assoc_value instead [ 224.846576][ T5404] sctp: [Deprecated]: syz.1.144 (pid 5404) Use of int in max_burst socket option deprecated. [ 224.846576][ T5404] Use struct sctp_assoc_value instead [ 224.846594][ T5404] sctp: [Deprecated]: syz.1.144 (pid 5404) Use of int in max_burst socket option deprecated. [ 224.846594][ T5404] Use struct sctp_assoc_value instead [ 224.846609][ T5404] sctp: [Deprecated]: syz.1.144 (pid 5404) Use of int in max_burst socket option deprecated. [ 224.846609][ T5404] Use struct sctp_assoc_value instead [ 224.846698][ T5404] sctp: [Deprecated]: syz.1.144 (pid 5404) Use of int in max_burst socket option deprecated. [ 224.846698][ T5404] Use struct sctp_assoc_value instead [ 224.846721][ T5404] sctp: [Deprecated]: syz.1.144 (pid 5404) Use of int in max_burst socket option deprecated. [ 224.846721][ T5404] Use struct sctp_assoc_value instead [ 224.846737][ T5404] sctp: [Deprecated]: syz.1.144 (pid 5404) Use of int in max_burst socket option deprecated. [ 224.846737][ T5404] Use struct sctp_assoc_value instead [ 224.850476][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 224.850491][ C0] EXT4-fs (loop4): initial error at time 224: ext4_acquire_dquot:7034 [ 224.850508][ C0] EXT4-fs (loop4): last error at time 224: ext4_acquire_dquot:7034 [ 224.863499][ T39] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 224.863516][ T39] Quota error (device loop4): write_blk: dquota write failed [ 224.863523][ T39] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 224.863531][ T39] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 224.863539][ T39] Quota error (device loop4): write_blk: dquota write failed [ 224.863545][ T39] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list [ 224.863568][ T39] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 224.863575][ T39] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 224.943660][ T5396] EXT4-fs (loop4): 1 truncate cleaned up [ 225.088677][ T5396] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 225.096387][ T5396] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.111081][ T5396] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.142: bad orphan inode 13 [ 225.111112][ T5396] loop4: lost filesystem error report for type 5 error -117 [ 225.112781][ T5396] ext4_test_bit(bit=12, block=4) = 1 [ 225.112800][ T5396] is_bad_inode(inode)=0 [ 225.112806][ T5396] NEXT_ORPHAN(inode)=0 [ 225.112812][ T5396] max_ino=32 [ 225.112817][ T5396] i_nlink=1 [ 225.118731][ T5396] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.120606][ T5396] EXT4-fs warning (device loop4): dx_probe:813: inode #2: comm syz.4.142: Hash code is SIPHASH, but hash not in dirent [ 225.120624][ T5396] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.142: Corrupt directory, running e2fsck is recommended [ 225.121054][ T5396] EXT4-fs warning (device loop4): dx_probe:813: inode #2: comm syz.4.142: Hash code is SIPHASH, but hash not in dirent [ 225.121069][ T5396] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.142: Corrupt directory, running e2fsck is recommended [ 225.121087][ T5396] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 13: comm syz.4.142: bad entry in directory: directory entry overrun - offset=24, inode=0, rec_len=131076, size=1024 fake=0 [ 225.135512][ T5396] netlink: 20 bytes leftover after parsing attributes in process `syz.4.142'. [ 225.149435][ T4687] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.218562][ T5417] vti0: entered allmulticast mode [ 225.432721][ T5437] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 225.443118][ T5437] netlink: 20 bytes leftover after parsing attributes in process `syz.4.154'. [ 225.451999][ T4687] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 225.548994][ T5446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.157'. [ 225.607177][ T5451] 9p: Bad value for 'wfdno' [ 225.674087][ T5456] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 225.675999][ T5456] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 225.678063][ T5456] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.161: Failed to acquire dquot type 0 [ 225.678102][ T5456] loop4: lost filesystem error report for type 5 error -117 [ 225.680057][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 225.680069][ C0] EXT4-fs (loop4): initial error at time 225: ext4_acquire_dquot:7034 [ 225.680081][ C0] EXT4-fs (loop4): last error at time 225: ext4_acquire_dquot:7034 [ 225.687229][ T5456] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 225.689742][ T5460] netlink: 144 bytes leftover after parsing attributes in process `syz.0.163'. [ 225.693976][ T5456] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #13: comm syz.4.161: corrupted inode contents [ 225.696229][ T5456] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 225.696767][ T5456] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #13: comm syz.4.161: mark_inode_dirty error [ 225.696805][ T5456] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 225.702245][ T5456] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #13: comm syz.4.161: corrupted inode contents [ 225.703194][ T5456] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 225.703405][ T5456] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #13: comm syz.4.161: mark_inode_dirty error [ 225.703421][ T5456] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 225.703557][ T5456] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #13: comm syz.4.161: corrupted inode contents [ 225.703570][ T5456] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 225.703694][ T5456] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 225.703703][ T5456] loop4: lost filesystem error report for type 5 error -117 [ 225.703813][ T5456] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #13: comm syz.4.161: corrupted inode contents [ 225.703824][ T5456] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 225.703926][ T5456] EXT4-fs error (device loop4): ext4_truncate:4690: inode #13: comm syz.4.161: mark_inode_dirty error [ 225.703937][ T5456] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 225.704049][ T5456] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 225.704058][ T5456] loop4: lost filesystem error report for type 5 error -117 [ 225.708501][ T5456] EXT4-fs (loop4): 1 truncate cleaned up [ 225.708963][ T5456] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.718222][ T5456] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 225.718247][ T5456] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.161: Failed to acquire dquot type 0 [ 225.746024][ T4687] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.821152][ T5474] binder: 5466:5474 ioctl 40045612 20000040 returned -22 [ 225.822842][ T5474] binder: 5466:5474 tried to acquire reference to desc 0, got 1 instead [ 225.824649][ T5474] binder: 5466:5474 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 225.826391][ T5474] binder: 5474 RLIMIT_NICE not set [ 225.826407][ T5474] binder: 5466:5474 ioctl c0306201 20000240 returned -11 [ 225.826531][ T5474] binder: 5466:5474 got reply transaction with no transaction stack [ 225.826590][ T5474] binder: 5466:5474 transaction reply to 0:0 failed 7/29201/-71, code 0 size 0-0 line 3139 [ 225.878872][ T5475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.164'. [ 225.890012][ T4698] Bluetooth: hci0: command 0x0c1a tx timeout [ 225.953121][ T5478] netlink: 542 bytes leftover after parsing attributes in process `syz.1.169'. [ 225.987797][ T5481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.170'. [ 226.163335][ T4692] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 226.164088][ T4692] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 226.164344][ T4692] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 226.164678][ T4692] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 226.164894][ T4692] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 226.591850][ T5484] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.593067][ T5484] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.594472][ T5484] bridge_slave_0: entered allmulticast mode [ 226.596322][ T5484] bridge_slave_0: entered promiscuous mode [ 226.598237][ T5484] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.600150][ T5484] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.603149][ T5519] set_capacity_and_notify: 8 callbacks suppressed [ 226.603159][ T5519] loop2: detected capacity change from 0 to 2048 [ 226.605317][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 226.605680][ T5484] bridge_slave_1: entered allmulticast mode [ 226.606215][ T5484] bridge_slave_1: entered promiscuous mode [ 226.635303][ T5519] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.636674][ T5484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.637623][ T5484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.645577][ T5519] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 226.646508][ T5519] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 226.646524][ T5519] EXT4-fs (loop2): This should not happen!! Data will be lost [ 226.646524][ T5519] [ 226.646534][ T5519] EXT4-fs (loop2): Total free blocks count 0 [ 226.646542][ T5519] EXT4-fs (loop2): Free/Dirty block details [ 226.646553][ T5519] EXT4-fs (loop2): free_blocks=2415919104 [ 226.646564][ T5519] EXT4-fs (loop2): dirty_blocks=16 [ 226.646571][ T5519] EXT4-fs (loop2): Block reservation details [ 226.646577][ T5519] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 226.668800][ T5484] team0: Port device team_slave_0 added [ 226.670706][ T5484] team0: Port device team_slave_1 added [ 226.679132][ T5484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.680527][ T5484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.685383][ T5484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.688060][ T5484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.689517][ T5484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.689586][ T4698] Bluetooth: hci3: command 0x0c1a tx timeout [ 226.689626][ T4698] Bluetooth: hci2: command 0x0c1a tx timeout [ 226.689656][ T4698] Bluetooth: hci1: command 0x0c1a tx timeout [ 226.696967][ T5484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.710088][ T5484] hsr_slave_0: entered promiscuous mode [ 226.711512][ T5484] hsr_slave_1: entered promiscuous mode [ 226.712854][ T5484] debugfs: 'hsr0' already exists in 'hsr' [ 226.713942][ T5484] Cannot create hsr debugfs directory [ 226.728111][ T1138] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 226.731895][ T4693] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 226.762913][ T5484] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 226.763905][ T5484] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 226.764209][ T5484] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 226.765056][ T5484] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 226.765317][ T5484] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 226.766359][ T5484] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 226.766637][ T5484] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 226.767427][ T5484] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 227.042655][ T5484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.051680][ T5538] loop2: detected capacity change from 0 to 256 [ 227.055263][ T5484] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.060749][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.060790][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.066091][ T4822] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.066133][ T4822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.217069][ T5484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.334832][ T5484] veth0_vlan: entered promiscuous mode [ 227.341766][ T5484] veth1_vlan: entered promiscuous mode [ 227.358717][ T5484] veth0_macvtap: entered promiscuous mode [ 227.363126][ T5484] veth1_macvtap: entered promiscuous mode [ 227.388806][ T5484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.393417][ T5484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.402508][ T3821] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.404150][ T3821] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.404179][ T3821] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.404196][ T3821] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.465808][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.465830][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.519869][ T5585] loop3: detected capacity change from 0 to 512 [ 227.539440][ T3821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.539465][ T3821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.573452][ T5585] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.589409][ T5595] loop4: detected capacity change from 0 to 512 [ 227.591831][ T5595] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 227.611086][ T5599] xt_ipcomp: unknown flags 1D [ 227.612477][ T5599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.622757][ T5601] 9p: Bad value for 'rfdno' [ 227.643879][ T4696] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.716839][ T5604] overlay: filesystem on ./bus not supported [ 227.833943][ T24] kernel write not supported for file /input/mice (pid: 24 comm: kworker/1:0) [ 227.843081][ T5611] netlink: 'syz.3.199': attribute type 1 has an invalid length. [ 227.857213][ T5611] bond1: entered promiscuous mode [ 227.857388][ T5611] 8021q: adding VLAN 0 to HW filter on device bond1 [ 227.866794][ T5611] 8021q: adding VLAN 0 to HW filter on device bond1 [ 227.866998][ T5611] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 227.867009][ T5611] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 227.867473][ T5611] bond1: (slave gre1): Opening slave failed [ 227.883486][ T5619] netlink: 'syz.2.201': attribute type 1 has an invalid length. [ 227.883509][ T5619] netlink: 'syz.2.201': attribute type 3 has an invalid length. [ 227.883530][ T5619] netlink: 224 bytes leftover after parsing attributes in process `syz.2.201'. [ 227.883545][ T5619] NCSI netlink: No device for ifindex 130 [ 227.932000][ T5611] netlink: 'syz.3.199': attribute type 16 has an invalid length. [ 227.933346][ T5611] netlink: 'syz.3.199': attribute type 3 has an invalid length. [ 227.933378][ T5611] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.199'. [ 227.969060][ T4692] Bluetooth: hci0: command 0x0c1a tx timeout [ 227.988569][ T5635] loop5: detected capacity change from 0 to 512 [ 227.998041][ T5635] EXT4-fs (loop5): orp ** replaying previous printk message ** [ 227.998041][ T5635] EXT4-fs (loop5): orphan cleanup on readonly fs [ 227.998638][ T5635] ------------[ cut here ]------------ [ 227.998645][ T5635] EA inode 11 i_nlink=0 [ 227.998748][ T5635] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x480/0x488, CPU#0: syz.5.205/5635 [ 228.003387][ T5635] Modules linked in: [ 228.003907][ T5635] CPU: 0 UID: 0 PID: 5635 Comm: syz.5.205 Tainted: G L syzkaller #0 PREEMPT [ 228.005425][ T5635] Tainted: [L]=SOFTLOCKUP [ 228.006076][ T5635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 228.007492][ T5635] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 228.008551][ T5635] pc : ext4_xattr_inode_update_ref+0x480/0x488 [ 228.009365][ T5635] lr : ext4_xattr_inode_update_ref+0x480/0x488 [ 228.010230][ T5635] sp : ffff800095f76f40 [ 228.010777][ T5635] x29: ffff800095f76fe0 x28: 0000000000000000 x27: 1fffe0001e47e405 [ 228.011852][ T5635] x26: ffff0000f23f1e80 x25: dfff800000000000 x24: ffff800095f76f60 [ 228.013048][ T5635] x23: ffff700012beedec x22: ffff80008a04a000 x21: 0000000000000000 [ 228.014256][ T5635] x20: 0000000000000001 x19: ffff0000f23f1e40 x18: 00000000ffffffff [ 228.015402][ T5635] x17: ffff80008a680000 x16: 0000000000000004 x15: ffff80008a209c80 [ 228.016612][ T5635] x14: 00000000ffff8000 x13: 0000000000000001 x12: 0000000000000000 [ 228.017936][ T5635] x11: 0000000000000000 x10: 0000000000080000 x9 : c9f76b434e410e00 [ 228.019060][ T5635] x8 : c9f76b434e410e00 x7 : ffff80008048076c x6 : 0000000000000000 [ 228.020167][ T5635] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f45e0 [ 228.021343][ T5635] x2 : 0000000100000000 x1 : ffff0000d40c5700 x0 : 0000000000000001 [ 228.022601][ T5635] Call trace: [ 228.023018][ T5635] ext4_xattr_inode_update_ref+0x480/0x488 (P) [ 228.023944][ T5635] ext4_xattr_inode_dec_ref_all+0x7f0/0xb84 [ 228.024829][ T5635] ext4_xattr_delete_inode+0x778/0x900 [ 228.025669][ T5635] ext4_evict_inode+0xa0c/0xfb8 [ 228.026401][ T5635] evict+0x4c0/0x74c [ 228.027034][ T5635] iput+0x884/0xbc0 [ 228.027624][ T5635] ext4_process_orphan+0x24c/0x2c0 [ 228.028374][ T5635] ext4_orphan_cleanup+0x7d4/0xd20 [ 228.029044][ T5635] ext4_fill_super+0x4628/0x4e14 [ 228.029761][ T5635] get_tree_bdev_flags+0x388/0x43c [ 228.030514][ T5635] get_tree_bdev+0x2c/0x3c [ 228.031112][ T5635] ext4_get_tree+0x28/0x38 [ 228.031734][ T5635] vfs_get_tree+0x90/0x28c [ 228.032337][ T5635] fc_mount+0x24/0xac [ 228.032980][ T5635] do_new_mount+0x2a4/0x538 [ 228.033646][ T5635] path_mount+0x5f0/0xa88 [ 228.034204][ T5635] do_mount+0xe8/0x148 [ 228.034809][ T5635] __arm64_sys_mount+0x334/0x380 [ 228.035478][ T5635] invoke_syscall+0x98/0x244 [ 228.036167][ T5635] el0_svc_common+0xec/0x23c [ 228.036791][ T5635] do_el0_svc+0x4c/0x5c [ 228.037400][ T5635] el0_svc+0x64/0x260 [ 228.037967][ T5635] el0t_64_sync_handler+0x48/0x148 [ 228.038629][ T5635] el0t_64_sync+0x198/0x19c [ 228.039324][ T5635] irq event stamp: 1600 [ 228.039898][ T5635] hardirqs last enabled at (1599): [] vprintk_store+0x924/0xb94 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 228.041299][ T5635] hardirqs last disabled at (1600): [] el1_brk64+0x20/0x54 [ 228.042828][ T5635] softirqs last enabled at (1210): [] do_sve_acc+0x32c/0x4b8 [ 228.044341][ T5635] softirqs last disabled at (1208): [] do_sve_acc+0x10c/0x4b8 [ 228.045648][ T5635] ---[ end trace 0000000000000000 ]--- [ 228.051777][ T5635] EXT4-fs (loop5): 1 orphan inode deleted [ 228.052235][ T5635] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 228.082783][ T5484] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.216252][ T4692] Bluetooth: hci4: command tx timeout [ 228.334047][ T5595] bridge0: port 3(syz_tun) entered disabled state [ 228.337068][ T5595] syz_tun (unregistering): left allmulticast mode [ 228.337097][ T5595] syz_tun (unregistering): left promiscuous mode [ 228.337130][ T5595] bridge0: port 3(syz_tun) entered disabled state [ 228.455303][ T4822] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.532485][ T4822] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.622809][ T4822] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.681636][ T4822] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.826306][ T4822] bridge_slave_1: left allmulticast mode [ 228.826349][ T4822] bridge_slave_1: left promiscuous mode [ 228.826823][ T4822] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.831684][ T4822] bridge_slave_0: left allmulticast mode [ 228.831710][ T4822] bridge_slave_0: left promiscuous mode [ 228.831771][ T4822] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.946823][ T4822] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.990197][ T4822] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.009357][ T4822] bond0 (unregistering): Released all slaves [ 229.011710][ T4822] bond1 (unregistering): Released all slaves [ 229.015929][ T4393] 8021q: adding VLAN 0 to HW filter on device eth0 [ 229.133605][ T4393] 8021q: adding VLAN 0 to HW filter on device eth1 [ 229.255656][ T4393] 8021q: adding VLAN 0 to HW filter on device eth2 [ 229.304589][ T4822] hsr_slave_0: left promiscuous mode [ 229.305822][ T4822] hsr_slave_1: left promiscuous mode [ 229.306074][ T4822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.306091][ T4822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.307217][ T4822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.307227][ T4822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.313000][ T4822] veth1_macvtap: left promiscuous mode [ 229.313048][ T4822] veth0_macvtap: left promiscuous mode [ 229.313094][ T4822] veth1_vlan: left promiscuous mode [ 229.313124][ T4822] veth0_vlan: left promiscuous mode [ 229.428703][ T4822] team0 (unregistering): Port device team_slave_1 removed [ 229.432668][ T4822] team0 (unregistering): Port device team_slave_0 removed [ 229.482947][ T4393] 8021q: adding VLAN 0 to HW filter on device eth3 [ 229.737111][ T4822] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.152765][ T4822] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.221542][ T4822] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.261135][ T4822] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.433508][ T4822] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.495683][ T4822] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.511628][ T4393] 8021q: adding VLAN 0 to HW filter on device eth4 [ 231.544683][ T4822] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.595615][ T4822] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.623835][ T4393] 8021q: adding VLAN 0 to HW filter on device eth5 [ 231.686773][ T4822] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.750094][ T4393] 8021q: adding VLAN 0 to HW filter on device eth6 [ 231.769701][ T4822] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.831411][ T4822] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.861587][ T4393] 8021q: adding VLAN 0 to HW filter on device eth7 [ 231.876712][ T4822] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.007569][ T4822] bridge_slave_1: left allmulticast mode [ 232.007601][ T4822] bridge_slave_1: left promiscuous mode [ 232.008094][ T4822] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.010973][ T4822] bridge_slave_0: left allmulticast mode [ 232.011006][ T4822] bridge_slave_0: left promiscuous mode [ 232.011071][ T4822] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.076991][ T4822] bridge_slave_1: left allmulticast mode [ 232.077018][ T4822] bridge_slave_1: left promiscuous mode [ 232.077105][ T4822] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.079199][ T4822] bridge_slave_0: left allmulticast mode [ 232.079211][ T4822] bridge_slave_0: left promiscuous mode [ 232.079264][ T4822] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.276874][ T4822] bridge_slave_1: left allmulticast mode [ 232.276901][ T4822] bridge_slave_1: left promiscuous mode [ 232.276972][ T4822] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.278987][ T4822] bridge_slave_0: left allmulticast mode [ 232.279000][ T4822] bridge_slave_0: left promiscuous mode [ 232.279066][ T4822] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.606441][ T4822] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.628017][ T4822] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.647531][ T4822] bond0 (unregistering): Released all slaves [ 232.697048][ T4822] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.747621][ T4822] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.788229][ T4822] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 232.818099][ T4822] bond0 (unregistering): Released all slaves [ 232.893010][ T4822] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.917496][ T4822] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.937630][ T4822] bond0 (unregistering): Released all slaves [ 232.940009][ T4393] 8021q: adding VLAN 0 to HW filter on device eth8 [ 233.064073][ T4393] 8021q: adding VLAN 0 to HW filter on device eth9 [ 233.172891][ T4393] 8021q: adding VLAN 0 to HW filter on device eth10 [ 233.302340][ T4393] 8021q: adding VLAN 0 to HW filter on device eth11 [ 233.412192][ T4393] 8021q: adding VLAN 0 to HW filter on device eth12 [ 233.542737][ T4393] 8021q: adding VLAN 0 to HW filter on device eth13 [ 233.655609][ T4393] 8021q: adding VLAN 0 to HW filter on device eth14 [ 233.703525][ T4822] hsr_slave_0: left promiscuous mode [ 233.703794][ T4822] hsr_slave_1: left promiscuous mode [ 233.704036][ T4822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.704048][ T4822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.704994][ T4822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.705003][ T4822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.713475][ T4822] hsr_slave_0: left promiscuous mode [ 233.714633][ T4822] hsr_slave_1: left promiscuous mode [ 233.715678][ T4822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.716926][ T4822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.718329][ T4822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.719498][ T4822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.722493][ T4822] hsr_slave_0: left promiscuous mode [ 233.723641][ T4822] hsr_slave_1: left promiscuous mode [ 233.724716][ T4822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.725259][ T4822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.726664][ T4822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.726677][ T4822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.744047][ T4822] veth1_macvtap: left promiscuous mode [ 233.744084][ T4822] veth0_macvtap: left promiscuous mode [ 233.744121][ T4822] veth1_vlan: left promiscuous mode [ 233.744143][ T4822] veth0_vlan: left promiscuous mode [ 233.748244][ T4822] veth1_macvtap: left promiscuous mode [ 233.748275][ T4822] veth0_macvtap: left promiscuous mode [ 233.748315][ T4822] veth1_vlan: left promiscuous mode [ 233.748398][ T4822] veth0_vlan: left promiscuous mode [ 233.751805][ T4822] veth1_macvtap: left promiscuous mode [ 233.751834][ T4822] veth0_macvtap: left promiscuous mode [ 233.751865][ T4822] veth1_vlan: left promiscuous mode [ 233.751888][ T4822] veth0_vlan: left promiscuous mode [ 233.900961][ T4822] team0 (unregistering): Port device team_slave_1 removed [ 233.904629][ T4822] team0 (unregistering): Port device team_slave_0 removed [ 234.016314][ T4822] team0 (unregistering): Port device team_slave_1 removed [ 234.019982][ T4822] team0 (unregistering): Port device team_slave_0 removed [ 234.123097][ T4822] team0 (unregistering): Port device team_slave_1 removed [ 234.126966][ T4822] team0 (unregistering): Port device team_slave_0 removed [ 234.175504][ T4393] 8021q: adding VLAN 0 to HW filter on device eth15 [ 234.770498][ T4822] IPVS: stop unused estimator thread 0...