last executing test programs: 3m6.606912238s ago: executing program 2 (id=1515): r0 = socket(0x2, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgctl$MSG_INFO(0x0, 0xc, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00') pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @sched_cls, r4, 0x6}, 0xffffffffffffffa5) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000180)={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r5, 0x7}, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x8}, 0x8) syz_mount_image$vfat(&(0x7f0000000c80), &(0x7f00000000c0)='./file0\x00', 0x401, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], 0xfd, 0x2ce, &(0x7f0000000980)="$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") r6 = syz_clone(0x20a04000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r6, 0x12) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f0000000040)={0x11}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x34}}, 0x40080c8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0xc0185879, 0xfffffffffffffffe) 3m5.350950204s ago: executing program 2 (id=1519): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x27) r3 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000001c0)='dns_resolver\x00', 0x0, &(0x7f0000000280)="607a6fa7004441f558a48e5e62f936e6d69af3ccd8badae22923320c4f80c9c797577a0aad06a066043af396e335fac9f9d4418ac02d0ab6c9d8298964c1d53a3afbde6c5d4759ef3b089fcc15146dc17e52e3080b4e2b6f1fb8fd7b6a5cb03d771f93f92e3d2032a7ae2e3f5193e1e0946edaa77cbe90527e4a", 0x7a, r3) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, &(0x7f0000000100)={0x980900, 0x3, @name="6c14f9104c575323652bb05c9764e27d0235e28510452c132c1eaa54d11e47a7"}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x2, 0x5, 0x1) setuid(0xee01) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000cdf000/0x3000)=nil) 3m3.66048213s ago: executing program 2 (id=1525): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d38461", @ANYRESHEX]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d4", 0x7a}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e385", 0x1c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418f", 0x30}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9db", 0xc7}], 0x4, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x3}, 0x94) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m3.65628347s ago: executing program 4 (id=1526): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x19, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2b73}, 0x94) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}], 0xf}, 0x4) 3m3.529099903s ago: executing program 4 (id=1527): close(0x3) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000280)={0xfd, 0x6}) fsopen(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) iopl(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='affs\x00', 0x8008, 0x0) 3m2.848726847s ago: executing program 2 (id=1529): r0 = socket(0x2, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgctl$MSG_INFO(0x0, 0xc, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00') pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @sched_cls, r4, 0x6}, 0xffffffffffffffa5) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000180)={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r5, 0x7}, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x8}, 0x8) syz_mount_image$vfat(&(0x7f0000000c80), &(0x7f00000000c0)='./file0\x00', 0x401, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], 0xfd, 0x2ce, &(0x7f0000000980)="$eJzs3c1qE1EUwPHTtGmTlDZZiKAgPehGN0MbnyBIC2JAqU1RF8LUTjRkTEomRiJiu3PrzncoLt0J1hfoxp17cVMEwYVdSEeayZhpnH6kNk3a/n9Q5nbuPXPvfBDODJmbjXtvnhbzjpE3qxKJqUQktiKbIimJiCcuy83S9poBGZagFbk2+st13fsPbmWy2elZ1ZnM3PW0qo5PfHz+8t3lT9XR+ffjH0ZkPfVw40f66/r59QsbW3P+1stVNXWhXK6aC7aliwWnaKjesS3TsbRQcqzKjvq8XV5aqqtZWhxLLFUsx1GzVNeiVddqWauVupqPzUJJDcPQsYScNYN7VcbDVuZWZ2fNTEedRDocFI5T6FmuVDLmYGhlbvU4BgUAAPrLv/m/tOX/2zm/Z7f8/+eXS3c7zf+fFBwtOFraL/+PCPl/9zTy/63QpBGnQ3T7BiBjJkJv3cj/AQAAAAAAAAAAAAAAAAAAAAA4CTZdN+m6btJf+n8jIhKTrZjXyk32epzojr3Pv4j/fyBkoIfDxRELvLgXE7Ff13K1nLf06jN5KYgtlkxGRX43rocmrzxzMzs9qQ0pWbOXm/GNlwRH/HhfKjx+yovXQPxyLReVRLD/tCTlXHh8ui0+KiK13LBcvRKINyQpnx9JWWxZbFzXrfhXU6o3bmfb+o832gEAAAAAcBoY+ldq5/2vN5ukYag/bUhbvbey9XxAkvs8H1BZG5ZW/JBcHOrdfgMAAAAAcJY49RdF07atyuELE/P/Fd4Hhbh0HnUkh+6EFYzm18H2bOy6buMHYw645bdxkV2qIrJrVbcL30WkDw74URe+PfNO4EEa9/JTCQAAAEA3tJL+Xo8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICz66CTh/ntDzP3WKC7wd7sJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAf/gQAAP//zpkXWw==") r6 = syz_clone(0x20a04000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r6, 0x12) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f0000000040)={0x11}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x34}}, 0x40080c8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0xc0185879, 0xfffffffffffffffe) 3m2.038620625s ago: executing program 4 (id=1532): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018, r0}, './file1\x00'}) 3m2.024759065s ago: executing program 2 (id=1533): r0 = socket(0x2, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgctl$MSG_INFO(0x0, 0xc, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00') pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @sched_cls, r4, 0x6}, 0xffffffffffffffa5) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000400)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000180)={r5}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r6, 0x7}, 0x0) r7 = syz_clone(0x20a04000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x40000) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r7, 0x12) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x34}}, 0x40080c8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0xc0185879, 0xfffffffffffffffe) 3m1.517085306s ago: executing program 4 (id=1534): r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x16, 0x2000008d, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)='ramfs\x00', 0x10, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0x1a1c08, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0/file0/../file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) 3m1.182436623s ago: executing program 2 (id=1535): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x27) r3 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000001c0)='dns_resolver\x00', 0x0, &(0x7f0000000280)="607a6fa7004441f558a48e5e62f936e6d69af3ccd8badae22923320c4f80c9c797577a0aad06a066043af396e335fac9f9d4418ac02d0ab6c9d8298964c1d53a3afbde6c5d4759ef3b089fcc15146dc17e52e3080b4e2b6f1fb8fd7b6a5cb03d771f93f92e3d2032a7ae2e3f5193e1e0946edaa77cbe90527e4a", 0x7a, r3) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, &(0x7f0000000100)={0x980900, 0x3, @name="6c14f9104c575323652bb05c9764e27d0235e28510452c132c1eaa54d11e47a7"}) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x2, 0x5, 0x1) setuid(0xee01) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000cdf000/0x3000)=nil) 3m0.463565268s ago: executing program 32 (id=1535): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x27) r3 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000001c0)='dns_resolver\x00', 0x0, &(0x7f0000000280)="607a6fa7004441f558a48e5e62f936e6d69af3ccd8badae22923320c4f80c9c797577a0aad06a066043af396e335fac9f9d4418ac02d0ab6c9d8298964c1d53a3afbde6c5d4759ef3b089fcc15146dc17e52e3080b4e2b6f1fb8fd7b6a5cb03d771f93f92e3d2032a7ae2e3f5193e1e0946edaa77cbe90527e4a", 0x7a, r3) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, &(0x7f0000000100)={0x980900, 0x3, @name="6c14f9104c575323652bb05c9764e27d0235e28510452c132c1eaa54d11e47a7"}) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x2, 0x5, 0x1) setuid(0xee01) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000cdf000/0x3000)=nil) 3m0.447574698s ago: executing program 4 (id=1541): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0) setreuid(0x0, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) fchmod(r1, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 2m59.86502541s ago: executing program 4 (id=1542): close(0x3) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000280)={0xfd, 0x6}) fsopen(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) iopl(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='affs\x00', 0x8008, 0x0) 2m59.326558312s ago: executing program 33 (id=1542): close(0x3) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000280)={0xfd, 0x6}) fsopen(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) iopl(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='affs\x00', 0x8008, 0x0) 2m18.764209471s ago: executing program 1 (id=1720): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d38461", @ANYRESHEX]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d4", 0x7a}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e385", 0x1c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418f", 0x30}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9db", 0xc7}], 0x4, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x3}, 0x94) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xbad}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m17.637771895s ago: executing program 1 (id=1726): r0 = eventfd2(0x7fff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) r2 = socket$kcm(0x23, 0x5, 0x0) listen(r2, 0x800) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001300)=[{0x0}, {&(0x7f00000011c0)}, {0x0}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000140)) connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x80000) close_range(r4, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0106401, &(0x7f0000000400)={0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 2m17.136621655s ago: executing program 6 (id=1728): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf250100000008000707000000010e0001006e65742f6c3263617000000008000200050000000800081fac14140bbb2079bc0476968c7fffffff6616bf5ad3c12a8b0c756b8284ffa27e7b6e1e7bab320fb7cca15474c5aa76bf8e027f3a0858d4e116583ccaf788917b056c2e9afe66fb3ada170384c6ac69e9"], 0x3c}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x4000080) 2m17.064073107s ago: executing program 6 (id=1729): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) connect$rxrpc(r1, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x4c00}, 0x0) 2m16.92895317s ago: executing program 6 (id=1730): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x27) r3 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000001c0)='dns_resolver\x00', 0x0, &(0x7f0000000280)="607a6fa7004441f558a48e5e62f936e6d69af3ccd8badae22923320c4f80c9c797577a0aad06a066043af396e335fac9f9d4418ac02d0ab6c9d8298964c1d53a3afbde6c5d4759ef3b089fcc15146dc17e52e3080b4e2b6f1fb8fd7b6a5cb03d771f93f92e3d2032a7ae2e3f5193e1e0946edaa77cbe90527e4a", 0x7a, r3) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f0000000100)={0x980900, 0x3, @name="6c14f9104c575323652bb05c9764e27d0235e28510452c132c1eaa54d11e47a7"}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x2, 0x5, 0x1) setuid(0xee01) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000cdf000/0x3000)=nil) 2m16.732621434s ago: executing program 1 (id=1731): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x0, &(0x7f0000000080)={[{@errors_remount}, {@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@noblock_validity}]}, 0x3, 0x488, &(0x7f0000001340)="$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") r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) prlimit64(0x0, 0x9, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x62040200) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)=[0x0], 0xffffffffffffffff, 0x0, 0x1}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0, 0x305, &(0x7f0000000200)="$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") r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000000)={'security\x00', 0x7003, [0x80002, 0x40007, 0x1, 0x8, 0xa]}, &(0x7f0000000100)=0x54) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000580)=0x0) prlimit64(r6, 0x0, 0x0, &(0x7f00000005c0)) syz_mount_image$fuse(0x0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x210803, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xa00a80, 0xa) 2m15.96767686s ago: executing program 6 (id=1733): r0 = socket(0x2, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgctl$MSG_INFO(0x0, 0xc, 0x0) pread64(0xffffffffffffffff, &(0x7f0000002240)=""/237, 0xed, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0xffffffffffffffa5) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000400)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000180)={r4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r5, 0x7}, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x8}, 0x8) syz_mount_image$vfat(&(0x7f0000000c80), &(0x7f00000000c0)='./file0\x00', 0x401, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], 0xfd, 0x2ce, &(0x7f0000000980)="$eJzs3c1qE1EUwPHTtGmTlDZZiKAgPehGN0MbnyBIC2JAqU1RF8LUTjRkTEomRiJiu3PrzncoLt0J1hfoxp17cVMEwYVdSEeayZhpnH6kNk3a/n9Q5nbuPXPvfBDODJmbjXtvnhbzjpE3qxKJqUQktiKbIimJiCcuy83S9poBGZagFbk2+st13fsPbmWy2elZ1ZnM3PW0qo5PfHz+8t3lT9XR+ffjH0ZkPfVw40f66/r59QsbW3P+1stVNXWhXK6aC7aliwWnaKjesS3TsbRQcqzKjvq8XV5aqqtZWhxLLFUsx1GzVNeiVddqWauVupqPzUJJDcPQsYScNYN7VcbDVuZWZ2fNTEedRDocFI5T6FmuVDLmYGhlbvU4BgUAAPrLv/m/tOX/2zm/Z7f8/+eXS3c7zf+fFBwtOFraL/+PCPl/9zTy/63QpBGnQ3T7BiBjJkJv3cj/AQAAAAAAAAAAAAAAAAAAAAA4CTZdN+m6btJf+n8jIhKTrZjXyk32epzojr3Pv4j/fyBkoIfDxRELvLgXE7Ff13K1nLf06jN5KYgtlkxGRX43rocmrzxzMzs9qQ0pWbOXm/GNlwRH/HhfKjx+yovXQPxyLReVRLD/tCTlXHh8ui0+KiK13LBcvRKINyQpnx9JWWxZbFzXrfhXU6o3bmfb+o832gEAAAAAcBoY+ldq5/2vN5ukYag/bUhbvbey9XxAkvs8H1BZG5ZW/JBcHOrdfgMAAAAAcJY49RdF07atyuELE/P/Fd4Hhbh0HnUkh+6EFYzm18H2bOy6buMHYw645bdxkV2qIrJrVbcL30WkDw74URe+PfNO4EEa9/JTCQAAAEA3tJL+Xo8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICz66CTh/ntDzP3WKC7wd7sJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAf/gQAAP//zpkXWw==") r6 = syz_clone(0x20a04000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r6, 0x12) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f0000000040)={0x11}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x34}}, 0x40080c8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0xc0185879, 0xfffffffffffffffe) 2m15.082495369s ago: executing program 6 (id=1736): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) truncate(&(0x7f0000000040)='./file2\x00', 0x10003) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x40010, 0xffffffffffffffff, 0xd6fff000) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) 2m14.345168834s ago: executing program 6 (id=1740): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) connect$rxrpc(r1, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x4c00}, 0x0) 2m14.190149948s ago: executing program 34 (id=1740): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) connect$rxrpc(r1, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x4c00}, 0x0) 2m12.053065523s ago: executing program 1 (id=1746): r0 = socket(0x2, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00') pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @sched_cls, r4, 0x6}, 0xffffffffffffffa5) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000400)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000180)={r5}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r6, 0x7}, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x8}, 0x8) syz_mount_image$vfat(&(0x7f0000000c80), &(0x7f00000000c0)='./file0\x00', 0x401, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], 0xfd, 0x2ce, &(0x7f0000000980)="$eJzs3c1qE1EUwPHTtGmTlDZZiKAgPehGN0MbnyBIC2JAqU1RF8LUTjRkTEomRiJiu3PrzncoLt0J1hfoxp17cVMEwYVdSEeayZhpnH6kNk3a/n9Q5nbuPXPvfBDODJmbjXtvnhbzjpE3qxKJqUQktiKbIimJiCcuy83S9poBGZagFbk2+st13fsPbmWy2elZ1ZnM3PW0qo5PfHz+8t3lT9XR+ffjH0ZkPfVw40f66/r59QsbW3P+1stVNXWhXK6aC7aliwWnaKjesS3TsbRQcqzKjvq8XV5aqqtZWhxLLFUsx1GzVNeiVddqWauVupqPzUJJDcPQsYScNYN7VcbDVuZWZ2fNTEedRDocFI5T6FmuVDLmYGhlbvU4BgUAAPrLv/m/tOX/2zm/Z7f8/+eXS3c7zf+fFBwtOFraL/+PCPl/9zTy/63QpBGnQ3T7BiBjJkJv3cj/AQAAAAAAAAAAAAAAAAAAAAA4CTZdN+m6btJf+n8jIhKTrZjXyk32epzojr3Pv4j/fyBkoIfDxRELvLgXE7Ff13K1nLf06jN5KYgtlkxGRX43rocmrzxzMzs9qQ0pWbOXm/GNlwRH/HhfKjx+yovXQPxyLReVRLD/tCTlXHh8ui0+KiK13LBcvRKINyQpnx9JWWxZbFzXrfhXU6o3bmfb+o832gEAAAAAcBoY+ldq5/2vN5ukYag/bUhbvbey9XxAkvs8H1BZG5ZW/JBcHOrdfgMAAAAAcJY49RdF07atyuELE/P/Fd4Hhbh0HnUkh+6EFYzm18H2bOy6buMHYw645bdxkV2qIrJrVbcL30WkDw74URe+PfNO4EEa9/JTCQAAAEA3tJL+Xo8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICz66CTh/ntDzP3WKC7wd7sJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAf/gQAAP//zpkXWw==") r7 = syz_clone(0x20a04000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r7, 0x12) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f0000000040)={0x11}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x34}}, 0x40080c8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0xc0185879, 0xfffffffffffffffe) 2m11.050049724s ago: executing program 1 (id=1748): syz_emit_ethernet(0x36, &(0x7f0000000b00)=ANY=[], 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8200) process_madvise(0xffffffffffffffff, &(0x7f00000015c0)=[{0x0}, {&(0x7f0000001600)="7fe370522d6af6625215f1793293827ec1fbafd2669ec71d6ec4f18aaa71edae948611d7efd8e80e4116a3c114041430f19bd4f37e3c7238ed6e6d46979c2220bde96ffe55c88d2e697fd133e5733e1bbb159ba81a1e8e2fb2e51596", 0x5c}, {&(0x7f0000001300)="0454c96113b0da138a30557b0c026d7c7ba28c5cf82e468ed91537d279936ddcf06ef737e0943554457a28db61aea38a154bf19b456388daf4df61c9febcd9b8a2b14929c6f097f4ff11e686a8a37381b9321ae19dd77be474863e35633dec7003568e91eab8e870a93a73b6dea475547a826b25021aecd727c201c9cea0bfba0122b00573c286b821d43d0b4e38ec90b7d08565bf81862bdf5115e75886e742c51e058d0752982da309d53a7c0d320fdbd38bfaa998ff981d15928f783b2728ecc210898685dfc72398e665b7892024c0ab0dcfe9d3fc", 0xd7}, {&(0x7f0000001400)="3e519bc4eb7b0a55b33bdb22cc7ca76aba33506ebcf89e67b16583e68404bbca008b995a73322a4cc7a3c436e94da49121c4f225ccd342612b46beb2f569a7a0423c0cf79f2d94c015b7b47bc11d5fe599214dbe7f92c8a14b6d254a8daa074ece2708f10e912eb72cb22efc14a0d0cc7cea79", 0x73}, {&(0x7f00000014c0)="6b553f4de4ed875c9fadc16852f54981bcd646a5262fc3900592194638585e3d2e79f074f796720749ddc1a2661dcb2471a47d963fb4d817dfdb5f52dc8ab642030c2c771646051d08609527b36368b80794b8cb63fe817c3379951a047c5026c2e99eae6dc05c6845529fb603666d78c0e1e5f7bca8f1d8584b7409ccaf0da598af64d7bdd2ae21ac4fb4e07dee96a92a8dddecee7ccbede2d0a7d4f2da90dc3eb4ae8895091f05db58a786519f6fc924a465cc46ae6a9b8705de0705b8bab4f10cddc7756c53eadf4aa6e2379fd85e9c5e7bfc", 0xd4}], 0x5, 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000040)={0x5, 0xb84, 0x1, 'queue0\x00'}) syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x8) 2m10.437152887s ago: executing program 1 (id=1750): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) truncate(&(0x7f0000000040)='./file2\x00', 0x10003) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x40010, 0xffffffffffffffff, 0xd6fff000) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) 2m10.152236523s ago: executing program 35 (id=1750): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) truncate(&(0x7f0000000040)='./file2\x00', 0x10003) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x40010, 0xffffffffffffffff, 0xd6fff000) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) 11.572072405s ago: executing program 5 (id=2334): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000000000000000000efc800139cf128ac2e96091a1b2681e1f6cb4a918d03b53cd24fac92dac134169fd6c002278620b62fa0911fb01256ddc526d7ea1d50c00b02a70e0a18084f4f940cd86353b0fe601b8fa78bb398d23be8ac719ab0e7823dbf62db2aae04bae6f7b1b0770b0d5f26bcd3d8679fe84a1af2b6438b1eb5b4eaad63e10cd37103a0d12be365f060b2568525172a515ff2f82be3ab61d4f1dfc071794dc9322ed042279ac4027f49dc94b3de0f860eb7ebcc33254e021815a95212755f4e0f", @ANYRES32=0x1, @ANYBLOB="010100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000050000000300"/28], 0x50) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x20800, 0x0) splice(r1, 0x0, r0, 0x0, 0xf3a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$pptp(0xffffffffffffffff, 0x0, 0xfffffffffffffd10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYRES64=r0], &(0x7f00000001c0)='syzkaller\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc}, 0x94) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r2, 0x6, 0x1, 0xfffffffffffffffd, &(0x7f0000000080)=0x79) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180), 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000000400000001c0012800c0001006d6163766c616e000c0002800600020001000000140035006d6163766c616e300000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x24004000}, 0x8000) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r4], 0x3c}, 0x1, 0x0, 0x0, 0x2400c881}, 0x10) unshare(0x4000400) r7 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000d00)={'macvtap0\x00', &(0x7f0000000c80)=@ethtool_coalesce={0x1, 0x2, 0x115b, 0x2, 0x5, 0x2, 0x5, 0xb5, 0x7, 0x7, 0x2, 0xe464, 0x9, 0x9, 0xfffffff5, 0x6, 0x5, 0x400, 0x101, 0xa2, 0x8, 0x10000, 0xaa0}}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x1}, 0x10}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200001004000b"], 0x24}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) 11.296342071s ago: executing program 5 (id=2336): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = gettid() rt_sigqueueinfo(r3, 0x21, &(0x7f00000002c0)={0xb, 0x4}) 7.781099995s ago: executing program 3 (id=2351): r0 = socket(0x2, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgctl$MSG_INFO(0x0, 0xc, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00') pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @sched_cls, r4, 0x6}, 0xffffffffffffffa5) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000180)={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r5, 0x7}, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x8}, 0x8) r6 = syz_clone(0x20a04000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x40000) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r6, 0x12) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x34}}, 0x40080c8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0xc0185879, 0xfffffffffffffffe) 6.048881012s ago: executing program 3 (id=2360): unshare(0x40000200) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000500)=r0, 0x4) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) writev(r1, &(0x7f0000006280)=[{&(0x7f0000000680)}, {&(0x7f00000041c0)="d2cf43efec9672f8d433a1a2d1ac1ba483b3c377abd1c40900dd48e925c9f170621fba494945b9a6748709715dad1c5beb3783165516391072f540d5a656c99bee9a9af58e5041b58b21777bf6506f4fc22990d90b75b8f4acffea8a3caa7c291dc1b90291986a793eaa472736f5d52a2a3e6aecd3c3519699b1469e5ee3b434ac8cc30b3cda1a88664a50", 0x8b}], 0x2) socket$key(0xf, 0x3, 0x2) 5.745168909s ago: executing program 3 (id=2364): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={r3}, 0x8) 5.574362242s ago: executing program 3 (id=2365): unshare(0x28000600) shutdown(0xffffffffffffffff, 0x1) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x10}, 0x1c) 4.861414877s ago: executing program 3 (id=2367): socket$xdp(0x2c, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f00000000c0)=0xfe, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xbcff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r1, 0x2) socket$inet(0x2, 0x2, 0x1) 3.533727335s ago: executing program 8 (id=2373): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xb6, 0x0, 0x1, 0x8, 0x1c00, 0xffffffff}, {0x78, 0x1, 0x9, 0x1, 0xfff6, 0x8}, 0xc000, 0x3, 0x1110}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x49b713d77deac5f9}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {}, {0xd, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x400}}]}, 0x38}}, 0x4010804) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x9, r6, 0x2f}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000680)="2703020059021400060000", 0xb}], 0x1}, 0x4c014) 2.988305187s ago: executing program 8 (id=2377): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000007100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xfe4f, 0x0, &(0x7f0000000000)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x704, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000700), 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.869006129s ago: executing program 8 (id=2379): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x0, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xfff5, 0x10}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0x10}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r6, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 2.85267653s ago: executing program 3 (id=2380): r0 = socket(0x2, 0x805, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgctl$MSG_INFO(0x0, 0xc, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00') pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @sched_cls, r4, 0x6}, 0xffffffffffffffa5) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000400)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000180)={r5}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r6, 0x7}, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x8}, 0x8) syz_mount_image$vfat(&(0x7f0000000c80), &(0x7f00000000c0)='./file0\x00', 0x401, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], 0xfd, 0x2ce, &(0x7f0000000980)="$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") r7 = syz_clone(0x20a04000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r7, 0x12) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f0000000040)={0x11}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x34}}, 0x40080c8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0xc0185879, 0xfffffffffffffffe) 2.535325106s ago: executing program 8 (id=2385): r0 = socket$inet6(0x10, 0x2, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() setrlimit(0x3, &(0x7f0000000040)={0x7, 0x2}) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) flistxattr(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x0) r4 = socket(0x28, 0x5, 0x0) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200047fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000b00)="2d12376647d788ad2cdbd0e68c140c7f72d35ae5869c470a1f53ea73c32220190e02cb0b770bb154d1d5d1b343cb1feadca1752e4397955e1a151721f1b28b9e32b7966f9ddd7ad3822c5ff3dc03786c1c86c2a6f7c271710c573396ca95e95a524201b0bf0539042ae14072693f9734306f7a21f92421e8e0ea335d07d1f2839c4c195930cd35c65dfc527de84f2cab4f0c78474734d7c5cba0c70ee0fd10ad5ed3f4b70308c29000e8cd98d57c90c7d9298ee4a2c41b141614627880ace9cfde45a0ae5f6f5cf3eb31254454e92eacdab64eb048b144e4fcc16afe59e7d7dad7696df64aa223d14d69bbe8ee2f76e1d4a32477a7cf108fea86a7e085c1575f683857cff342574109f74cf05e3f63f328f46735ba0578d84b4978ce545621b1666ca7da451d40e961a037822eebcbba9bf9e92af7281442efcaa8e0d3ecd6111d8fc1c742d0e7efe8e51a1c5e6ea04fec02a986cba677d9dc642d110df6f55c786c73f7ce4ebf9415bdb2680d0ff4597006d96e3c164114a4effae84380e492822c002b2e96f160a0784fd0ebe448eddaa801921576287f61a15be332a94eea951c0826874d105173a6b3f2a6e420ed5ef00b1f699b74c524a1859cb7d6dfb7257b6f0b92e17ce21237da0ec892735601b29693dce455876447f76df303a8cb34bd9c9241da9904c1c17d416753c71aeed9cc07d26b4a438df4e302cf120cda73c04d5a1b7295f1cb7ff88084211adde5fdf991f97cb522b56c561ad1119a4675fbf566b77660dfd457467652d23c739cc9ba93bbd5b464c46e46187ce71d7aab533e670c861b227454d7c21f9f16000eee0c1772a152c26acd2744c5553ace622369f15d5354a3b5ac4bb9261a766830d351fa931558dee7ff30768b2e29025c3b115179ed6a12ea76a23db3626bc033f85a43c3c3f50b75b89a418277837ba571189e708f4aaaacc19537e7aa156b7058c200e8f9be1da8a63c7e878f3e733060a1cb24a2a09ea76413efdc4e0b1027a09c6830b4ca5ccd4695e2e0bb1610a21b0cc66012aab283b6c5dfbd20aef8d7ad04e4c618a065a588d05e3f780126eee290cf0f94fb4a2c5a8cb97f60d9e50301a4f01f3787ab052ef8782d6ef0f92385ab59015670a054dab1ab0400be74fdc4ac3d18fb5b5da13e55a05e29ad14dd0abf0435dea601ce80573548f3c8f21ecfcbe5361d1505a91c355d8477fe7e3866be005acae25cbab7bd8684294963c3c95924f7d62ca0ed2d7aa01048cbdcd4d7ae9717d4feb97e1e825f6156e9c5fc456509798d2f5adc9356752a8974894ff5bf9d14aab3ddf18fd4f9af23c66f7e4ef7e345e769260fd9d2a22ddd078dd7e44f904ea78dd3db5b0f4a8d7ce9ae7909cedde165b7458da24d576fc0e18d3c27cccaff21146ad51c1681c629a8f0b8a4ae213c88910c54de9af7890b0a4414e0d38c31d76a130b587b764260655f17f901f96b835a1fecb1f7438f5e18ff60720d37d19b1a9ae3e03dc10aa1c4f2abb918883d56ddd4e74b48a4aeadccf2329956ed18b2001d1e1e80bdf325449beda911916f8022", 0x457, 0x4004085, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000001c0)={0xf0b4, 0x4, 0x5, 0x0, 0xf3, 0x3df}) sendto$inet6(r0, &(0x7f0000000680)="4c00000012008fe11d15b9409b849ac00a00a57000000000030038c88cc055c5ac27a6c5b068d0bf46d3234525dbfee9bdb94235235ba351d1ec0cffc8792cd80063a5c3aa7b8b7d2778b097", 0x4c, 0x0, 0x0, 0x0) 2.040670567s ago: executing program 5 (id=2390): write$bt_hci(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="27bc4a0bb7"], 0x5) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7ef", 0x40}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b", 0x42}, {&(0x7f0000000800)}], 0x4}}], 0x1, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.988087788s ago: executing program 7 (id=2391): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd23, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x6179}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x20008050) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="ca4034a4a033c023", 0x300}], 0x2}, 0x5) 1.88417332s ago: executing program 0 (id=2392): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x2010, r0, 0xef30a000) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1800000027000100fdff0700001000000400000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000600)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead", 0x51}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f00000002c0)=""/92, 0x5c}], 0x2}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x7c}, 0x1, 0x2000000, 0x0, 0xa25bb844b084a7a1}, 0x0) 1.835137621s ago: executing program 7 (id=2393): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) 1.831265612s ago: executing program 5 (id=2394): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x4000080) 1.780579813s ago: executing program 0 (id=2395): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@mask_fadd={0x58, 0x118, 0x8, {{0xfffffffc, 0x1}, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x200010000000}}], 0x58}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x0, {"fe8000"}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) 1.598901266s ago: executing program 5 (id=2396): r0 = syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file4\x00', 0xa18c14, &(0x7f0000000900)=ANY=[@ANYBLOB='utf8=1,io\t\x00\x00\x00\x00\x00\x00\x00cp860,utf8=0,codepage=950,utf8=0,codepame=865,shortname=win95,nonumtail=0,shortname=lower,utf8=0,rodir,check=relaxed,iocharset=iso8859-14,\x00'], 0x89, 0x29b, &(0x7f0000000580)="$eJzs3c9qK1UYAPBv0iRNVEgWrkRwQBeuwr33CW6QChezUrLQjV5sC5KEQgMB/2Dsyr3gynfwHXwAN76BC5eCO7sQR5KZSdI0bY3EVOrvt5kvc74v509OWyjMyUevjgbHZ+PTiy9+jkYjicrTeBqXSbSjEqWvAgB4SC6zLH7LcnflVqMeEVmreFXZw/AAgH/BNn//AYCH4b33P3in2+sdvZumjYjR15N+Evk1b++exicxjJN4FK34IyJbyOOXnvWOopqm5T8DJs3oR4w+/LF43f01Yl7/OFrRXq+vF1npXLwxmk76s55n11q8kER0syRPeRKteDkiq0XxJvnl7We9oyfp9fro1+PN178rxv/nSXSiFT99HGcxjOP5Wyzrv3ycpm9l3/7+eT6DfkQynfQP53lL2cFePhAAAAAAAAAAAAAAAAAAAAAAAP4XOulCe/X8nPI0wE5nc/uN5wMVJ/xMV87XeZSmaXmMz6Rfi7y+Gq9Uo3p/MwcAAAAAAAAAAAAAAAAAAID/jvGnnw2eD4cn51eCH7JZ0Lw1Zz2ortwpH+u/u2pzMPg+YvuqvxPEQTG0YXKti6Rs2kFfh9skNzd1GpWb1rA6jHzw32w/sNd2NcFbg3J3DZ4ncUdyY/MmWdl15TY8HydbbMhsw9Id3FhV39Hc6y/+0/LmxoWazbi2WMyrVY3ZJ7lyp7bjn5Q1yc5/9wAAAAAAAAAAAAAAAAAAAFctH/qNX641XtzLkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg75bf/78Ior1+Zz2YFsXzO5Xbkw/Pxxu6be95mgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxwfwUAAP//5OlVhQ==") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file6\x00', 0x143042, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000002c0)={{r0, &(0x7f00000000c0)='check=relaxed', 0x101080, &(0x7f0000000100)={@align=0x4f, {0x0, 0x4, 0x9, 0x4}}, 0x3, &(0x7f0000000140), 0x0}, {[0xfffffffa, 0x5af5, 0x553, 0x7]}, 0x0, 0xee, &(0x7f00000001c0)=""/238}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, 0x0) r2 = socket$inet(0x2, 0x4, 0xffffffff) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000040)=0x6, 0x40) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x9}}, './file4\x00'}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r5, 0x0, 0x0) write(r4, &(0x7f0000000040)="2e0000000100", 0x6) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, 0x0) 1.598677186s ago: executing program 7 (id=2397): r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x16, 0x2000008d, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x254b068, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0x1a1c08, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0/file0/../file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) 1.584691027s ago: executing program 8 (id=2398): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = socket(0x400000000010, 0x2, 0x8) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4, 0x27}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x260580e9}, 0x810) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES8=r1], 0x44}}, 0x8000) 1.157529036s ago: executing program 7 (id=2399): listen(0xffffffffffffffff, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) socket$netlink(0x10, 0x3, 0x0) write$nci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="71050108030306f708fb230e90cee95ca31cd4f209819d08"], 0x105) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 919.806731ms ago: executing program 0 (id=2400): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x21, &(0x7f00000002c0)={0xb, 0x4}) 913.785031ms ago: executing program 8 (id=2401): r0 = socket(0x2a, 0x2, 0x8) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES64, @ANYRES64=r0, @ANYRESOCT=0x0, @ANYRESHEX=r0, @ANYRES16=0x0], 0x44}}, 0x48890) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000000206010800000000000000000700000114000780080011400000008b05001500200000000500010006000000050005000200000005000400020000000900020073797a300000000011000300686173683a69702c6d6172"], 0x60}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="a400060040000000280012800c0001006d6163766c616e001800028008000100100000000800030003000000040005"], 0x48}, 0x1, 0x0, 0x0, 0x8840}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c0006"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001880), r5) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001ec0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000ffdbdf252e000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x2, 0x101, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x40, 0x7, 0x4}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'macvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r4, &(0x7f0000000b40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r6, @ANYBLOB="00022bbd7000fcdbdf250b0000005c0001801400020076657468305f746f5f687372000000000800030002000000080001", @ANYRES32=0x0, @ANYBLOB="080003000001001bd8c114a904854a3c336084625f7cdf91f50eb30dd92865aadc85a2ac7f877998760000000000aa290a1402febcbf4142ddfba9aa72ad078de41104fcb3", @ANYRES32=r7, @ANYBLOB, @ANYRES32=r8, @ANYBLOB="1400020077673200000000000000000000000000680001800800030003000000080003000000000008000300010000001400020063616966300000000000000000000000140002007465616d30000000000000000000000008000300", @ANYRES32=0x0, @ANYBLOB="14000200626f6e643000"/20], 0xd8}, 0x1, 0x0, 0x0, 0x4}, 0xc4) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x308, 0x0, 0x110, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @broadcast, 0x0, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000007baae6afd8510ec06d0000000000000500000a88200000060a0b040000000000000000020000005c000480580001800a0001006d617463680000004800028008000240000000001c0003004cb43801b2486e8f58c2052fade1bc2c62cdeb7521cf85f60e0001007374617469737469630000000e000100636f6e6e62797465730000000900010073797a30000000"], 0xb0}}, 0x0) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) socket$inet6_udp(0xa, 0x2, 0x0) r10 = socket(0x2b, 0x1, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x230, 0x2e8, 0x2e8, 0x230, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {0x0, 0x2000000000000}, [@common=@ipv6header={{0x28}, {0x8, 0x80, 0x1}}, @common=@unspec=@state={{0x28}, {0x1000}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x400, 0xa66, 0x2}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x8000000, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) 844.304173ms ago: executing program 0 (id=2402): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xb6, 0x0, 0x1, 0x8, 0x1c00, 0xffffffff}, {0x78, 0x1, 0x9, 0x1, 0xfff6, 0x8}, 0xc000, 0x3, 0x1110}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x49b713d77deac5f9}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {}, {0xd, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x400}}]}, 0x38}}, 0x4010804) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x9, r6, 0x2f}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000680)="27030200590214000600002f94", 0xd}], 0x1}, 0x4c014) 626.141017ms ago: executing program 5 (id=2403): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r1, 0x205, 0x100, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r3, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}}, 0x4084) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$xdp(0x2c, 0x3, 0x0) 625.980857ms ago: executing program 7 (id=2404): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) close(0xffffffffffffffff) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd23, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x6179}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x20008050) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="ca4034a4a033c023", 0x300}], 0x2}, 0x5) 256.946695ms ago: executing program 0 (id=2405): write$bt_hci(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="27bc4a0bb7"], 0x5) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7ef", 0x40}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b", 0x42}, {&(0x7f0000000800)}], 0x4}}], 0x1, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 18.24923ms ago: executing program 7 (id=2406): sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20000844) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc00000000000000e9ffffffffffffffe000000100000000000000000000000000000004000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) 0s ago: executing program 0 (id=2407): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000e80)={0x38, 0x2, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008844}, 0x1894) kernel console output (not intermixed with test programs): XT4-fs (loop2): orphan cleanup on readonly fs [ 394.733973][ T7877] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1025: bg 0: block 361: padding at end of block bitmap is not set [ 394.751108][ T7877] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 394.766023][ T7877] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.1025: attempt to clear invalid blocks 33619980 len 1 [ 394.781951][ T7877] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1025: invalid indirect mapped block 1811939328 (level 0) [ 394.797974][ T7877] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1025: invalid indirect mapped block 2185560079 (level 1) [ 394.832833][ T7877] EXT4-fs (loop2): 1 truncate cleaned up [ 394.838526][ T7877] EXT4-fs (loop2): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,noblock_validity,dax=inode,barrier=0x0000000000000009,nomblk_io_submit,errors=continue. Quota mode: none. [ 397.235023][ T7923] device macsec0 entered promiscuous mode [ 397.379747][ T7923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1037'. [ 397.650713][ T7923] device veth1_macvtap left promiscuous mode [ 397.815903][ T7933] loop1: detected capacity change from 0 to 1024 [ 398.018337][ T7923] device macsec0 left promiscuous mode [ 398.081643][ T7933] EXT4-fs (loop1): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,nolazytime,init_itable,. Quota mode: none. [ 398.307886][ T7947] loop2: detected capacity change from 0 to 256 [ 399.802485][ T7971] loop1: detected capacity change from 0 to 512 [ 399.811775][ T7971] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 399.987387][ T7971] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1044: bg 0: block 384: padding at end of block bitmap is not set [ 400.007943][ T7971] EXT4-fs (loop1): Remounting filesystem read-only [ 400.016431][ T7971] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 400.031663][ T7971] EXT4-fs (loop1): Remounting filesystem read-only [ 400.038251][ T7971] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.1044: attempt to clear invalid blocks 983260 len 1 [ 400.055449][ T7971] EXT4-fs (loop1): Remounting filesystem read-only [ 400.062106][ T7971] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz.1.1044: Invalid inode table block 0 in block_group 0 [ 400.075393][ T7971] EXT4-fs (loop1): Remounting filesystem read-only [ 400.082588][ T7971] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 400.092668][ T7971] EXT4-fs (loop1): Remounting filesystem read-only [ 400.099341][ T7971] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 400.108221][ T7971] EXT4-fs (loop1): Remounting filesystem read-only [ 400.115400][ T7971] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz.1.1044: Invalid inode table block 0 in block_group 0 [ 400.162896][ T7971] EXT4-fs (loop1): Remounting filesystem read-only [ 400.169518][ T7971] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 400.180812][ T7971] EXT4-fs (loop1): Remounting filesystem read-only [ 400.187329][ T7971] EXT4-fs error (device loop1): ext4_truncate:4286: inode #11: comm syz.1.1044: mark_inode_dirty error [ 400.208609][ T7971] EXT4-fs (loop1): Remounting filesystem read-only [ 400.215267][ T7971] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 400.229219][ T7971] EXT4-fs (loop1): Remounting filesystem read-only [ 400.235808][ T7971] EXT4-fs (loop1): 1 truncate cleaned up [ 400.241651][ T7971] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,noblock_validity,. Quota mode: none. [ 400.419989][ T7979] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm ext4lazyinit: Invalid block bitmap block 0 in block_group 0 [ 400.594942][ T7979] EXT4-fs (loop1): Remounting filesystem read-only [ 400.809276][ T7990] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.1044: Invalid inode bitmap blk 0 in block_group 0 [ 400.823306][ T7990] EXT4-fs (loop1): Remounting filesystem read-only [ 416.983589][ T8039] loop2: detected capacity change from 0 to 512 [ 417.125179][ T8039] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 417.139693][ T8043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.218062][ T8039] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1068: bg 0: block 384: padding at end of block bitmap is not set [ 417.234191][ T8046] netlink: 'syz.3.1067': attribute type 11 has an invalid length. [ 417.271730][ T8039] EXT4-fs (loop2): Remounting filesystem read-only [ 417.278295][ T8039] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 417.288095][ T8039] EXT4-fs (loop2): Remounting filesystem read-only [ 417.294757][ T8039] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.1068: attempt to clear invalid blocks 983260 len 1 [ 417.308397][ T8039] EXT4-fs (loop2): Remounting filesystem read-only [ 417.314984][ T8039] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz.2.1068: Invalid inode table block 0 in block_group 0 [ 417.328882][ T8039] EXT4-fs (loop2): Remounting filesystem read-only [ 417.335392][ T8039] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 417.345187][ T8039] EXT4-fs (loop2): Remounting filesystem read-only [ 417.351743][ T8039] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 417.361438][ T8039] EXT4-fs (loop2): Remounting filesystem read-only [ 417.367949][ T8039] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz.2.1068: Invalid inode table block 0 in block_group 0 [ 417.381557][ T8039] EXT4-fs (loop2): Remounting filesystem read-only [ 417.388067][ T8039] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 417.397985][ T8039] EXT4-fs (loop2): Remounting filesystem read-only [ 417.404564][ T8039] EXT4-fs error (device loop2): ext4_truncate:4286: inode #11: comm syz.2.1068: mark_inode_dirty error [ 417.416016][ T8039] EXT4-fs (loop2): Remounting filesystem read-only [ 417.423139][ T8039] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 417.432926][ T8039] EXT4-fs (loop2): Remounting filesystem read-only [ 417.439539][ T8039] EXT4-fs (loop2): 1 truncate cleaned up [ 417.445208][ T8039] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,noblock_validity,. Quota mode: none. [ 419.291535][ T8055] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.1068: Invalid inode bitmap blk 0 in block_group 0 [ 419.319693][ T8055] EXT4-fs (loop2): Remounting filesystem read-only [ 420.044103][ T8048] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm ext4lazyinit: Invalid block bitmap block 0 in block_group 0 [ 420.299080][ T8048] EXT4-fs (loop2): Remounting filesystem read-only [ 421.669560][ T8075] loop1: detected capacity change from 0 to 128 [ 421.738155][ T8089] netlink: 'syz.2.1077': attribute type 2 has an invalid length. [ 421.923875][ T8075] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 421.945448][ T8075] ext4 filesystem being mounted at /228/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 421.984182][ T8075] syz.1.1080 (pid 8075) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 424.335032][ T8155] misc userio: Invalid payload size [ 424.342104][ T8155] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1088'. [ 427.540975][ T8174] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 427.912747][ T8203] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1105'. [ 429.641947][ T8220] loop1: detected capacity change from 0 to 512 [ 430.394107][ T8220] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 430.519013][ T8220] EXT4-fs (loop1): bad geometry: first data block is 0 with a 1k block and cluster size [ 431.349005][ T5948] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 431.764300][ T8265] loop4: detected capacity change from 0 to 128 [ 432.576380][ T8270] misc userio: Invalid payload size [ 432.585716][ T8270] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1118'. [ 432.601363][ T8265] FAT-fs (loop4): Directory bread(block 414) failed [ 432.608054][ T8265] FAT-fs (loop4): Directory bread(block 415) failed [ 432.614694][ T8265] FAT-fs (loop4): Directory bread(block 416) failed [ 432.621327][ T8265] FAT-fs (loop4): Directory bread(block 417) failed [ 432.627948][ T8265] FAT-fs (loop4): Directory bread(block 418) failed [ 432.634571][ T8265] FAT-fs (loop4): Directory bread(block 419) failed [ 432.641210][ T8265] FAT-fs (loop4): Directory bread(block 420) failed [ 432.647833][ T8265] FAT-fs (loop4): Directory bread(block 421) failed [ 434.244475][ T5948] usb 2-1: unable to get BOS descriptor or descriptor too short [ 435.969112][ T5948] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 435.976749][ T5948] usb 2-1: can't read configurations, error -71 [ 435.983614][ T4196] Bluetooth: hci0: ACL packet too small [ 436.448053][ T8303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1133'. [ 438.962197][ T8335] misc userio: Invalid payload size [ 438.972821][ T8335] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1139'. [ 443.508439][ T8382] loop1: detected capacity change from 0 to 256 [ 443.552855][ T8383] loop2: detected capacity change from 0 to 512 [ 443.608989][ T8383] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 443.665050][ T8383] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1152: bg 0: block 384: padding at end of block bitmap is not set [ 443.682330][ T8383] EXT4-fs (loop2): Remounting filesystem read-only [ 443.688912][ T8383] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 443.699178][ T8383] EXT4-fs (loop2): Remounting filesystem read-only [ 443.705714][ T8383] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.1152: attempt to clear invalid blocks 983260 len 1 [ 443.719351][ T8383] EXT4-fs (loop2): Remounting filesystem read-only [ 443.725875][ T8383] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz.2.1152: Invalid inode table block 0 in block_group 0 [ 443.739944][ T8383] EXT4-fs (loop2): Remounting filesystem read-only [ 443.746454][ T8383] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 443.756291][ T8383] EXT4-fs (loop2): Remounting filesystem read-only [ 443.762825][ T8383] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 443.771782][ T8383] EXT4-fs (loop2): Remounting filesystem read-only [ 443.778293][ T8383] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz.2.1152: Invalid inode table block 0 in block_group 0 [ 443.941651][ T8383] EXT4-fs (loop2): Remounting filesystem read-only [ 443.948280][ T8383] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 444.141121][ T8397] misc userio: Invalid payload size [ 444.150049][ T8397] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1156'. [ 444.188136][ T8382] overlayfs: missing 'lowerdir' [ 444.516800][ T8383] EXT4-fs (loop2): Remounting filesystem read-only [ 444.523374][ T8383] EXT4-fs error (device loop2): ext4_truncate:4286: inode #11: comm syz.2.1152: mark_inode_dirty error [ 444.535045][ T8383] EXT4-fs (loop2): Remounting filesystem read-only [ 444.541610][ T8383] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 444.550909][ T8383] EXT4-fs (loop2): Remounting filesystem read-only [ 444.558022][ T8383] EXT4-fs (loop2): 1 truncate cleaned up [ 444.563715][ T8383] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,noblock_validity,. Quota mode: none. [ 444.859174][ T8389] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm ext4lazyinit: Invalid block bitmap block 0 in block_group 0 [ 444.887431][ T8405] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.1152: Invalid inode bitmap blk 0 in block_group 0 [ 445.516251][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.625370][ T8405] EXT4-fs (loop2): Remounting filesystem read-only [ 445.699587][ T8389] EXT4-fs (loop2): Remounting filesystem read-only [ 447.570754][ T8416] loop1: detected capacity change from 0 to 512 [ 447.748373][ T8416] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 447.771244][ T8416] ext4 filesystem being mounted at /241/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.157854][ T8416] EXT4-fs error (device loop1): ext4_search_dir:1549: inode #2: block 3: comm syz.1.1163: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 449.241408][ T8435] loop2: detected capacity change from 0 to 1024 [ 449.343268][ T8435] EXT4-fs (loop2): Invalid want_extra_isize 7 [ 452.144287][ T8460] loop4: detected capacity change from 0 to 128 [ 457.258941][ T8460] EXT4-fs: error -4 creating inode table initialization thread [ 457.291780][ T8460] EXT4-fs (loop4): mount failed [ 457.454604][ T8467] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 457.465996][ T8467] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 457.473471][ T8467] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 457.482542][ T8467] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 457.577726][ T8472] loop2: detected capacity change from 0 to 8192 [ 458.804046][ T8493] autofs4:pid:8493:autofs_fill_super: called with bogus options [ 458.818644][ T8493] loop4: detected capacity change from 0 to 512 [ 459.489569][ T8493] EXT4-fs (loop4): Test dummy encryption mode enabled [ 459.531785][ T8493] EXT4-fs (loop4): orphan cleanup on readonly fs [ 459.541683][ T8493] EXT4-fs warning (device loop4): ext4_xattr_inode_get:506: inode #11: comm syz.4.1181: EA inode hash validation failed [ 459.555018][ T8493] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 459.568629][ T8493] EXT4-fs error (device loop4): ext4_xattr_inode_update_ref:984: inode #11: comm syz.4.1181: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 459.587735][ T8493] EXT4-fs warning (device loop4): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.4.1181: ea_inode dec ref err=-117 [ 459.600913][ T8493] EXT4-fs (loop4): 1 orphan inode deleted [ 459.606644][ T8493] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,test_dummy_encryption,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,data_err=ignore,jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 470.684657][ T8614] loop1: detected capacity change from 0 to 512 [ 470.937554][ T8614] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 471.020482][ T8614] ext4 filesystem being mounted at /247/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 476.600249][ T8656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1222'. [ 476.802255][ T8663] loop1: detected capacity change from 0 to 512 [ 477.053087][ T8663] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.1225: casefold flag without casefold feature [ 477.468085][ T8663] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.1225: couldn't read orphan inode 15 (err -117) [ 477.496838][ T8663] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 477.507938][ T8663] ext4 filesystem being mounted at /249/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 477.619889][ T8663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1225'. [ 477.749200][ T8663] bridge1: port 1(veth0_to_bond) entered blocking state [ 477.797141][ T8663] bridge1: port 1(veth0_to_bond) entered disabled state [ 477.820075][ T8663] device veth0_to_bond entered promiscuous mode [ 477.821467][ T8694] loop4: detected capacity change from 0 to 256 [ 479.238671][ T8711] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1235'. [ 479.541664][ T8723] misc userio: Invalid payload size [ 479.549747][ T8723] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1236'. [ 486.870542][ T8756] syzkaller0: create flow: hash 2394541450 index 1 [ 486.890166][ T8780] x_tables: ip6_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 40 [ 486.902935][ T8755] syzkaller0: delete flow: hash 2394541450 index 1 [ 486.959596][ T8783] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1252'. [ 487.234624][ T8794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1254'. [ 490.697042][ T8865] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 491.979839][ T8892] netlink: 'syz.2.1281': attribute type 1 has an invalid length. [ 495.493361][ T8965] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1300'. [ 499.174635][ T9034] netlink: 'syz.2.1323': attribute type 39 has an invalid length. [ 501.496744][ T9075] netlink: 'syz.4.1334': attribute type 10 has an invalid length. [ 501.660709][ T9075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.669408][ T9075] team0: Port device batadv0 added [ 505.047319][ T9136] loop4: detected capacity change from 0 to 512 [ 505.147766][ T9140] device ipvlan1 entered promiscuous mode [ 505.164349][ T9136] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 505.188965][ T9136] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 505.263939][ T9136] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e01c, mo2=0002] [ 505.278268][ T9136] EXT4-fs (loop4): orphan cleanup on readonly fs [ 505.306367][ T9136] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1353: bg 0: block 361: padding at end of block bitmap is not set [ 505.391500][ T9136] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 505.423013][ T9136] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.1353: attempt to clear invalid blocks 33619980 len 1 [ 505.462125][ T9136] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1353: invalid indirect mapped block 1811939328 (level 0) [ 505.489187][ T9136] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1353: invalid indirect mapped block 2185560079 (level 1) [ 505.972132][ T9136] EXT4-fs (loop4): 1 truncate cleaned up [ 506.003393][ T9136] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,noblock_validity,mblk_io_submit,errors=continue. Quota mode: none. [ 506.400589][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.290478][ T9171] loop1: detected capacity change from 0 to 4096 [ 507.380252][ T9171] EXT4-fs (loop1): invalid inodes per group: 204800 [ 507.380252][ T9171] [ 508.036484][ T8162] Bluetooth: hci5: command 0x1003 tx timeout [ 508.420793][ T9196] syz.1.1367 (9196): drop_caches: 2 [ 508.552198][ T9156] Bluetooth: hci5: sending frame failed (-49) [ 508.911355][ T9217] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1385'. [ 509.811460][ T9235] loop4: detected capacity change from 0 to 4096 [ 510.147084][ T9235] EXT4-fs (loop4): invalid inodes per group: 204800 [ 510.147084][ T9235] [ 510.889305][ T9251] syz.4.1391 (9251): drop_caches: 2 [ 511.028838][ T4338] Bluetooth: hci5: command 0x1001 tx timeout [ 511.034963][ T9156] Bluetooth: hci5: sending frame failed (-49) [ 513.077001][ T4338] Bluetooth: hci5: command 0x1009 tx timeout [ 515.250647][ T9346] loop1: detected capacity change from 0 to 128 [ 515.346542][ T9346] FAT-fs (loop1): Directory bread(block 414) failed [ 515.353385][ T9346] FAT-fs (loop1): Directory bread(block 415) failed [ 515.360112][ T9346] FAT-fs (loop1): Directory bread(block 416) failed [ 515.366811][ T9346] FAT-fs (loop1): Directory bread(block 417) failed [ 515.373585][ T9346] FAT-fs (loop1): Directory bread(block 418) failed [ 515.380328][ T9346] FAT-fs (loop1): Directory bread(block 419) failed [ 515.387059][ T9346] FAT-fs (loop1): Directory bread(block 420) failed [ 515.394333][ T9346] FAT-fs (loop1): Directory bread(block 421) failed [ 516.146523][ T9361] misc userio: Invalid payload size [ 516.158302][ T9361] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1426'. [ 518.363669][ T9393] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 518.591355][ T9399] loop2: detected capacity change from 0 to 128 [ 518.703762][ T9399] FAT-fs (loop2): Directory bread(block 414) failed [ 518.710606][ T9399] FAT-fs (loop2): Directory bread(block 415) failed [ 518.717317][ T9399] FAT-fs (loop2): Directory bread(block 416) failed [ 518.724097][ T9399] FAT-fs (loop2): Directory bread(block 417) failed [ 518.730809][ T9399] FAT-fs (loop2): Directory bread(block 418) failed [ 518.737486][ T9399] FAT-fs (loop2): Directory bread(block 419) failed [ 518.744219][ T9399] FAT-fs (loop2): Directory bread(block 420) failed [ 518.751010][ T9399] FAT-fs (loop2): Directory bread(block 421) failed [ 519.998122][ T9414] misc userio: Invalid payload size [ 520.011091][ T9414] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1442'. [ 521.056898][ T9421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1446'. [ 523.183015][ T9463] loop4: detected capacity change from 0 to 512 [ 523.278193][ T9471] loop1: detected capacity change from 0 to 512 [ 523.307947][ T9463] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 523.384716][ T9463] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1456: bg 0: block 384: padding at end of block bitmap is not set [ 523.402189][ T9463] EXT4-fs (loop4): Remounting filesystem read-only [ 523.409261][ T9463] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 523.421111][ T9463] EXT4-fs (loop4): Remounting filesystem read-only [ 523.427683][ T9463] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.1456: attempt to clear invalid blocks 983260 len 1 [ 523.442002][ T9463] EXT4-fs (loop4): Remounting filesystem read-only [ 523.448567][ T9463] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz.4.1456: Invalid inode table block 0 in block_group 0 [ 523.464211][ T9463] EXT4-fs (loop4): Remounting filesystem read-only [ 523.470792][ T9463] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 523.480760][ T9463] EXT4-fs (loop4): Remounting filesystem read-only [ 523.487322][ T9463] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 523.496365][ T9463] EXT4-fs (loop4): Remounting filesystem read-only [ 523.502956][ T9463] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz.4.1456: Invalid inode table block 0 in block_group 0 [ 523.518604][ T9463] EXT4-fs (loop4): Remounting filesystem read-only [ 523.525247][ T9463] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 523.539175][ T9463] EXT4-fs (loop4): Remounting filesystem read-only [ 523.545756][ T9463] EXT4-fs error (device loop4): ext4_truncate:4286: inode #11: comm syz.4.1456: mark_inode_dirty error [ 523.557355][ T9463] EXT4-fs (loop4): Remounting filesystem read-only [ 523.563929][ T9463] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 523.575242][ T9463] EXT4-fs (loop4): Remounting filesystem read-only [ 523.581918][ T9463] EXT4-fs (loop4): 1 truncate cleaned up [ 523.587615][ T9463] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,noblock_validity,. Quota mode: none. [ 523.676345][ T9463] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.1456: Invalid inode bitmap blk 0 in block_group 0 [ 523.693001][ T9463] EXT4-fs (loop4): Remounting filesystem read-only [ 523.773560][ T9471] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.1461: casefold flag without casefold feature [ 523.851002][ T9471] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.1461: couldn't read orphan inode 15 (err -117) [ 523.884392][ T9471] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 523.940409][ T9471] ext4 filesystem being mounted at /297/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 524.589734][ T9486] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 524.693164][ T9471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1461'. [ 524.749704][ T9471] device veth0_to_bond left promiscuous mode [ 524.827887][ T9471] bridge1: port 1(veth0_to_bond) entered disabled state [ 526.234885][ T9519] loop4: detected capacity change from 0 to 512 [ 526.305184][ T9519] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 526.427867][ T9519] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1474: bg 0: block 384: padding at end of block bitmap is not set [ 526.445596][ T9519] EXT4-fs (loop4): Remounting filesystem read-only [ 526.452283][ T9519] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 526.462584][ T9519] EXT4-fs (loop4): Remounting filesystem read-only [ 526.469299][ T9519] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.1474: attempt to clear invalid blocks 983260 len 1 [ 526.486464][ T9519] EXT4-fs (loop4): Remounting filesystem read-only [ 526.493100][ T9519] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz.4.1474: Invalid inode table block 0 in block_group 0 [ 526.506388][ T9519] EXT4-fs (loop4): Remounting filesystem read-only [ 526.512968][ T9519] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 526.522722][ T9519] EXT4-fs (loop4): Remounting filesystem read-only [ 526.529285][ T9519] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 526.538133][ T9519] EXT4-fs (loop4): Remounting filesystem read-only [ 526.544720][ T9519] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz.4.1474: Invalid inode table block 0 in block_group 0 [ 526.559871][ T9519] EXT4-fs (loop4): Remounting filesystem read-only [ 526.566383][ T9519] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 526.576253][ T9519] EXT4-fs (loop4): Remounting filesystem read-only [ 526.583419][ T9519] EXT4-fs error (device loop4): ext4_truncate:4286: inode #11: comm syz.4.1474: mark_inode_dirty error [ 526.594924][ T9519] EXT4-fs (loop4): Remounting filesystem read-only [ 526.601502][ T9519] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 526.611037][ T9519] EXT4-fs (loop4): Remounting filesystem read-only [ 526.617853][ T9519] EXT4-fs (loop4): 1 truncate cleaned up [ 526.623856][ T9519] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,noblock_validity,. Quota mode: none. [ 526.705396][ T9519] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.1474: Invalid inode bitmap blk 0 in block_group 0 [ 526.718480][ T9519] EXT4-fs (loop4): Remounting filesystem read-only [ 532.057769][ T9620] device syzkaller0 entered promiscuous mode [ 532.479461][ T9629] loop4: detected capacity change from 0 to 128 [ 533.135070][ T9629] FAT-fs (loop4): Directory bread(block 414) failed [ 533.141778][ T9629] FAT-fs (loop4): Directory bread(block 415) failed [ 533.148409][ T9629] FAT-fs (loop4): Directory bread(block 416) failed [ 533.155081][ T9629] FAT-fs (loop4): Directory bread(block 417) failed [ 533.161710][ T9629] FAT-fs (loop4): Directory bread(block 418) failed [ 533.168308][ T9629] FAT-fs (loop4): Directory bread(block 419) failed [ 533.175147][ T9629] FAT-fs (loop4): Directory bread(block 420) failed [ 533.182409][ T9629] FAT-fs (loop4): Directory bread(block 421) failed [ 535.052043][ T9660] syz.0.1508 (9660): drop_caches: 2 [ 535.700916][ T9670] device syzkaller0 entered promiscuous mode [ 536.191816][ T9678] loop2: detected capacity change from 0 to 128 [ 536.646851][ T9678] FAT-fs (loop2): Directory bread(block 414) failed [ 536.653644][ T9678] FAT-fs (loop2): Directory bread(block 415) failed [ 536.660377][ T9678] FAT-fs (loop2): Directory bread(block 416) failed [ 536.667063][ T9678] FAT-fs (loop2): Directory bread(block 417) failed [ 536.673851][ T9678] FAT-fs (loop2): Directory bread(block 418) failed [ 536.680570][ T9678] FAT-fs (loop2): Directory bread(block 419) failed [ 536.687273][ T9678] FAT-fs (loop2): Directory bread(block 420) failed [ 536.693999][ T9678] FAT-fs (loop2): Directory bread(block 421) failed [ 539.932736][ T9732] loop2: detected capacity change from 0 to 128 [ 540.249338][ T9732] FAT-fs (loop2): Directory bread(block 414) failed [ 540.256125][ T9732] FAT-fs (loop2): Directory bread(block 415) failed [ 540.262909][ T9732] FAT-fs (loop2): Directory bread(block 416) failed [ 540.269659][ T9732] FAT-fs (loop2): Directory bread(block 417) failed [ 540.276322][ T9732] FAT-fs (loop2): Directory bread(block 418) failed [ 540.283018][ T9732] FAT-fs (loop2): Directory bread(block 419) failed [ 540.289712][ T9732] FAT-fs (loop2): Directory bread(block 420) failed [ 540.296393][ T9732] FAT-fs (loop2): Directory bread(block 421) failed [ 540.411280][ T4197] FAT-fs (loop2): Directory bread(block 414) failed [ 540.417925][ T4197] FAT-fs (loop2): Directory bread(block 415) failed [ 540.474368][ T9740] autofs4:pid:9740:autofs_fill_super: called with bogus options [ 543.364651][ T9770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1544'. [ 543.550769][ T9775] bridge1: port 1(veth0_to_bond) entered blocking state [ 543.612043][ T9775] bridge1: port 1(veth0_to_bond) entered disabled state [ 543.660935][ T9775] device veth0_to_bond entered promiscuous mode [ 544.028192][ T9764] chnl_net:caif_netlink_parms(): no params data found [ 544.067728][ T9789] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1549'. [ 544.382294][ T9764] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.402150][ T9764] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.422908][ T9764] device bridge_slave_0 entered promiscuous mode [ 544.453919][ T9764] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.466596][ T9764] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.500950][ T9764] device bridge_slave_1 entered promiscuous mode [ 544.528657][ T9777] chnl_net:caif_netlink_parms(): no params data found [ 544.614595][ T9764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.761540][ T9764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.894050][ T9764] team0: Port device team_slave_0 added [ 544.930590][ T9777] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.942442][ T9777] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.959756][ T9777] device bridge_slave_0 entered promiscuous mode [ 544.968356][ T9764] team0: Port device team_slave_1 added [ 544.987709][ T9777] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.004278][ T9777] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.029678][ T9777] device bridge_slave_1 entered promiscuous mode [ 545.068667][ T9777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.105969][ T9764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 545.138860][ T9764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.152436][ T5948] Bluetooth: hci1: command 0x0409 tx timeout [ 545.218885][ T9764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.248922][ T9777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 545.269286][ T9764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 545.276247][ T9764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.387265][ T9764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.439425][ T9815] autofs4:pid:9815:autofs_fill_super: called with bogus options [ 545.865476][ T9777] team0: Port device team_slave_0 added [ 545.881384][ T4191] Bluetooth: hci4: command 0x0409 tx timeout [ 545.896334][ T9764] device hsr_slave_0 entered promiscuous mode [ 545.903862][ T9764] device hsr_slave_1 entered promiscuous mode [ 545.910526][ T9764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 545.919470][ T9764] Cannot create hsr debugfs directory [ 545.942667][ T9777] team0: Port device team_slave_1 added [ 546.080237][ T9822] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1557'. [ 546.154339][ T9830] bridge2: port 1(veth0_to_bond) entered blocking state [ 546.176098][ T9830] bridge2: port 1(veth0_to_bond) entered disabled state [ 546.184459][ T9830] device veth0_to_bond entered promiscuous mode [ 546.236324][ T9777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.248939][ T9777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.278570][ T9777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.487739][ T9777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.503352][ T9777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.529605][ T9777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.550250][ T9764] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 546.625137][ T9764] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 546.781108][ T9764] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 546.837748][ T9764] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 547.092146][ T9777] device hsr_slave_0 entered promiscuous mode [ 547.188486][ T9777] device hsr_slave_1 entered promiscuous mode [ 547.217039][ T9777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 547.229919][ T5948] Bluetooth: hci1: command 0x041b tx timeout [ 547.259182][ T9777] Cannot create hsr debugfs directory [ 547.487688][ T516] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.565219][ T9764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.614454][ T516] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.673618][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 547.729268][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 547.762562][ T9764] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.782561][ T516] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.804648][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 547.821539][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 547.847035][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.854121][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.876224][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 547.909695][ T516] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.924343][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 547.942322][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 547.949018][ T4191] Bluetooth: hci4: command 0x041b tx timeout [ 547.957163][ T4312] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.964251][ T4312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.980539][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 547.989560][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 548.007757][ T9865] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1570'. [ 548.027033][ T9866] device veth0_to_bond left promiscuous mode [ 548.033408][ T9866] bridge1: port 1(veth0_to_bond) entered disabled state [ 548.050096][ T9866] bridge2: port 1(veth0_to_bond) entered blocking state [ 548.057294][ T9866] bridge2: port 1(veth0_to_bond) entered disabled state [ 548.065616][ T9866] device veth0_to_bond entered promiscuous mode [ 548.081245][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 548.096241][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 548.110677][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 548.123405][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 548.148118][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 548.156927][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 548.171791][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 548.218120][ T9764] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 548.235862][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 548.275568][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 548.347736][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 549.219498][ T9777] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 549.239232][ T9909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1583'. [ 549.276904][ T9777] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 549.306628][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 549.314676][ T4191] Bluetooth: hci1: command 0x040f tx timeout [ 549.322252][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 549.395285][ T9909] device veth0_to_bond left promiscuous mode [ 549.410893][ T9909] bridge2: port 1(veth0_to_bond) entered disabled state [ 549.468489][ T9909] bridge3: port 1(veth0_to_bond) entered blocking state [ 549.488964][ T9909] bridge3: port 1(veth0_to_bond) entered disabled state [ 549.529870][ T9909] device veth0_to_bond entered promiscuous mode [ 549.576564][ T9777] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 549.608553][ T9764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 549.668248][ T9777] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 549.955611][ T9777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.171794][ T4191] Bluetooth: hci4: command 0x040f tx timeout [ 550.198341][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 550.208316][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 550.672446][ T9777] 8021q: adding VLAN 0 to HW filter on device team0 [ 550.745992][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 550.782419][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 550.826287][ T4247] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.833377][ T4247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.859611][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 550.875677][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 550.939167][ T4247] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.946286][ T4247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.003274][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 551.060855][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 551.094024][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 551.136453][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 551.217947][ T9777] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 551.239449][ T9777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 551.328711][ T9764] device veth0_vlan entered promiscuous mode [ 551.352544][ T9764] device veth1_vlan entered promiscuous mode [ 551.388860][ T4191] Bluetooth: hci1: command 0x0419 tx timeout [ 551.406846][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 551.414807][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 551.423494][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 551.435811][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 551.448066][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 551.472056][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 551.491874][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 551.514741][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 551.534676][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 551.561205][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 551.583604][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 551.592159][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 551.600891][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 551.609066][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 551.617945][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 551.626506][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 551.656660][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 551.714028][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 551.732644][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 551.940039][ T516] device hsr_slave_0 left promiscuous mode [ 551.957688][ T516] device hsr_slave_1 left promiscuous mode [ 551.978454][ T516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 552.145995][ T516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 552.186588][ T516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 552.194133][ T4232] Bluetooth: hci4: command 0x0419 tx timeout [ 552.205150][ T516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 552.259448][ T516] device bridge_slave_1 left promiscuous mode [ 552.276556][ T516] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.301439][ T516] device bridge_slave_0 left promiscuous mode [ 552.312436][ T516] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.343511][ T516] device veth1_macvtap left promiscuous mode [ 552.362361][ T516] device veth0_macvtap left promiscuous mode [ 552.381762][ T516] device veth1_vlan left promiscuous mode [ 552.400621][ T516] device veth0_vlan left promiscuous mode [ 552.952914][ T516] team0 (unregistering): Port device team_slave_1 removed [ 552.979105][ T516] team0 (unregistering): Port device team_slave_0 removed [ 553.142682][ T516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 553.177043][ T516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 553.396013][ T516] team0 (unregistering): Port device batadv0 removed [ 553.520574][ T516] bond0 (unregistering): Released all slaves [ 553.693899][ T9764] device veth0_macvtap entered promiscuous mode [ 553.777373][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 553.812311][ T9764] device veth1_macvtap entered promiscuous mode [ 553.882581][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 553.908310][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 554.002097][ T9764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.056257][ T9764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.110147][ T9764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.173693][ T9764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.227478][ T9764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.265947][ T9764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.296857][ T9764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.310224][ T9764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.323546][ T9764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.358527][ T9777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.590093][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 554.622289][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 554.800544][ T9764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.858846][ T9764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.068086][ T9764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.105289][ T9764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.128893][ T9764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.182340][ T9764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.229975][ T9764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.288436][ T9764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.327218][ T9764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 555.341718][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 555.383875][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 555.445972][ T9764] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.474643][ T9764] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.517890][ T9764] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.543361][ T9764] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.628461][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 555.646476][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 555.686401][ T9777] device veth0_vlan entered promiscuous mode [ 555.751670][ T9777] device veth1_vlan entered promiscuous mode [ 555.862519][ T9777] device veth0_macvtap entered promiscuous mode [ 555.914579][ T9777] device veth1_macvtap entered promiscuous mode [ 555.986318][ T9777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.068802][ T9777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.078958][ T9777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.099679][ T9777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.118936][ T9777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.138816][ T9777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.148621][ T9777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.177193][ T9777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.196891][ T9777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.224408][ T9777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.245814][ T9777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 556.278521][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 556.287408][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 556.303761][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 556.315469][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 556.326888][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 556.344408][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 556.376510][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 556.395111][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 556.408670][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 556.424153][T10067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1616'. [ 556.450240][T10068] device veth0_to_bond left promiscuous mode [ 556.457265][T10068] bridge3: port 1(veth0_to_bond) entered disabled state [ 556.470406][T10068] bridge4: port 1(veth0_to_bond) entered blocking state [ 556.477464][T10068] bridge4: port 1(veth0_to_bond) entered disabled state [ 556.486511][T10068] device veth0_to_bond entered promiscuous mode [ 556.502565][ T9777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.523493][ T9777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.558823][ T9777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.578880][ T9777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.618845][ T9777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.640047][ T9777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.665917][ T9777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.689004][ T9777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.708847][ T9777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.766784][ T9777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.071855][ T9777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 557.110623][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 557.120878][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 557.219375][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 557.292067][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 557.373819][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 557.411699][ T9777] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.463180][ T9777] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.648568][ T9777] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.679099][ T9777] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.790857][ T6299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.838196][ T6299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.898337][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 557.946631][ T6299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.964971][ T6299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.996829][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 558.021682][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.074854][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.137618][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 558.196379][ T4969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.245167][ T4969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.289254][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 558.443612][T10118] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1626'. [ 558.736352][T10125] loop6: detected capacity change from 0 to 128 [ 558.926309][T10125] FAT-fs (loop6): Directory bread(block 414) failed [ 558.933130][T10125] FAT-fs (loop6): Directory bread(block 415) failed [ 558.939850][T10125] FAT-fs (loop6): Directory bread(block 416) failed [ 558.946560][T10125] FAT-fs (loop6): Directory bread(block 417) failed [ 558.953344][T10125] FAT-fs (loop6): Directory bread(block 418) failed [ 558.960051][T10125] FAT-fs (loop6): Directory bread(block 419) failed [ 558.966728][T10125] FAT-fs (loop6): Directory bread(block 420) failed [ 558.973458][T10125] FAT-fs (loop6): Directory bread(block 421) failed [ 560.272211][T10150] autofs4:pid:10150:autofs_fill_super: called with bogus options [ 561.347967][T10179] netlink: 'syz.0.1635': attribute type 39 has an invalid length. [ 562.075028][T10198] misc userio: Invalid payload size [ 562.083042][T10198] netlink: 120 bytes leftover after parsing attributes in process `syz.5.1638'. [ 562.534966][T10199] syz.0.1637 (10199): drop_caches: 2 [ 563.510750][T10212] autofs4:pid:10212:autofs_fill_super: called with bogus options [ 563.822861][T10224] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1645'. [ 563.866072][T10224] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1645'. [ 564.096187][T10232] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 564.140743][T10232] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 564.251184][T10232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 564.339604][T10232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 564.938576][T10253] loop5: detected capacity change from 0 to 4096 [ 564.989014][T10253] EXT4-fs (loop5): invalid inodes per group: 204800 [ 564.989014][T10253] [ 565.285717][T10260] syz.5.1649 (10260): drop_caches: 2 [ 566.094532][T10279] misc userio: Invalid payload size [ 566.105701][T10279] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1652'. [ 567.470772][T10309] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1659'. [ 567.511744][T10312] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1660'. [ 567.541535][T10309] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1659'. [ 567.580680][T10313] bridge3: port 1(veth0_to_bond) entered blocking state [ 567.642891][T10313] bridge3: port 1(veth0_to_bond) entered disabled state [ 567.683418][T10313] device veth0_to_bond entered promiscuous mode [ 567.819162][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.337356][T10336] autofs4:pid:10336:autofs_fill_super: called with bogus options [ 569.890366][T10345] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1667'. [ 570.235780][T10361] device syzkaller0 entered promiscuous mode [ 570.713274][T10365] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1673'. [ 572.947004][T10393] misc userio: Invalid payload size [ 572.954633][T10393] netlink: 120 bytes leftover after parsing attributes in process `syz.6.1679'. [ 575.282089][T10442] autofs4:pid:10442:autofs_fill_super: called with bogus options [ 575.760501][T10455] misc userio: Invalid payload size [ 575.768428][T10455] netlink: 120 bytes leftover after parsing attributes in process `syz.6.1691'. [ 582.505003][T10582] loop1: detected capacity change from 0 to 8192 [ 586.467997][T10666] loop1: detected capacity change from 0 to 512 [ 586.680883][T10666] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 587.095582][T10679] loop6: detected capacity change from 0 to 128 [ 587.177918][T10679] FAT-fs (loop6): Directory bread(block 414) failed [ 587.184764][T10679] FAT-fs (loop6): Directory bread(block 415) failed [ 587.191641][T10679] FAT-fs (loop6): Directory bread(block 416) failed [ 587.198418][T10679] FAT-fs (loop6): Directory bread(block 417) failed [ 587.205467][T10679] FAT-fs (loop6): Directory bread(block 418) failed [ 587.212359][T10679] FAT-fs (loop6): Directory bread(block 419) failed [ 587.219129][T10679] FAT-fs (loop6): Directory bread(block 420) failed [ 587.225890][T10679] FAT-fs (loop6): Directory bread(block 421) failed [ 587.343644][ T9777] FAT-fs (loop6): Directory bread(block 414) failed [ 587.358853][ T9777] FAT-fs (loop6): Directory bread(block 415) failed [ 587.513729][T10666] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1731: bg 0: block 384: padding at end of block bitmap is not set [ 587.538365][T10666] EXT4-fs (loop1): Remounting filesystem read-only [ 587.545706][T10666] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 587.586559][T10666] EXT4-fs (loop1): Remounting filesystem read-only [ 587.600682][T10666] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.1731: attempt to clear invalid blocks 983260 len 1 [ 587.638084][T10666] EXT4-fs (loop1): Remounting filesystem read-only [ 587.648369][T10666] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz.1.1731: Invalid inode table block 0 in block_group 0 [ 587.839504][T10666] EXT4-fs (loop1): Remounting filesystem read-only [ 587.846463][T10666] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 587.884222][T10666] EXT4-fs (loop1): Remounting filesystem read-only [ 587.893596][T10666] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 587.941274][T10666] EXT4-fs (loop1): Remounting filesystem read-only [ 587.967275][T10666] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz.1.1731: Invalid inode table block 0 in block_group 0 [ 588.003721][T10666] EXT4-fs (loop1): Remounting filesystem read-only [ 588.061060][T10666] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 588.093298][T10666] EXT4-fs (loop1): Remounting filesystem read-only [ 588.116824][T10666] EXT4-fs error (device loop1): ext4_truncate:4286: inode #11: comm syz.1.1731: mark_inode_dirty error [ 588.168254][T10666] EXT4-fs (loop1): Remounting filesystem read-only [ 588.195785][T10666] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 588.236298][T10666] EXT4-fs (loop1): Remounting filesystem read-only [ 588.246006][T10666] EXT4-fs (loop1): 1 truncate cleaned up [ 588.270290][T10666] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,noblock_validity,. Quota mode: none. [ 588.977527][T10712] chnl_net:caif_netlink_parms(): no params data found [ 589.013326][T10723] loop5: detected capacity change from 0 to 4096 [ 589.078721][T10723] EXT4-fs (loop5): invalid inodes per group: 204800 [ 589.078721][T10723] [ 589.455930][T10712] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.469084][T10689] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm ext4lazyinit: Invalid block bitmap block 0 in block_group 0 [ 589.495300][T10712] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.509084][T10689] EXT4-fs (loop1): Remounting filesystem read-only [ 589.529129][T10712] device bridge_slave_0 entered promiscuous mode [ 589.558672][T10712] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.582723][T10712] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.607802][T10712] device bridge_slave_1 entered promiscuous mode [ 589.724805][T10712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 589.924891][T10712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 590.028901][T10712] team0: Port device team_slave_0 added [ 590.073128][T10712] team0: Port device team_slave_1 added [ 590.164773][T10712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 590.202803][T10712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 590.335722][T10712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 590.514728][T10712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 590.552039][T10712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 590.587053][T10723] syz.5.1743 (10723): drop_caches: 2 [ 590.607302][T10712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 590.664878][T10712] device hsr_slave_0 entered promiscuous mode [ 590.671757][T10712] device hsr_slave_1 entered promiscuous mode [ 590.678308][T10712] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 590.686730][T10712] Cannot create hsr debugfs directory [ 590.708972][ T4289] Bluetooth: hci4: command 0x0409 tx timeout [ 591.052066][T10746] loop1: detected capacity change from 0 to 128 [ 591.192093][T10746] FAT-fs (loop1): Directory bread(block 414) failed [ 591.199053][T10746] FAT-fs (loop1): Directory bread(block 415) failed [ 591.205661][T10746] FAT-fs (loop1): Directory bread(block 416) failed [ 591.212454][T10746] FAT-fs (loop1): Directory bread(block 417) failed [ 591.219077][T10746] FAT-fs (loop1): Directory bread(block 418) failed [ 591.225673][T10746] FAT-fs (loop1): Directory bread(block 419) failed [ 591.232290][T10746] FAT-fs (loop1): Directory bread(block 420) failed [ 591.238901][T10746] FAT-fs (loop1): Directory bread(block 421) failed [ 591.383834][ T4186] FAT-fs (loop1): Directory bread(block 414) failed [ 591.397943][ T4186] FAT-fs (loop1): Directory bread(block 415) failed [ 591.833969][T10712] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 591.910311][T10712] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 591.967057][T10712] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 592.041620][T10712] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 592.258948][T10712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 592.301252][T10712] 8021q: adding VLAN 0 to HW filter on device team0 [ 592.339381][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 592.363027][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 592.410791][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 592.459515][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 592.479077][ T516] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.486179][ T516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 592.519366][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 592.568208][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 592.591161][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 592.619335][ T516] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.626423][ T516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.680674][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 592.696182][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 592.704978][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 592.715107][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 592.723849][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 592.749062][ T4229] Bluetooth: hci4: command 0x041b tx timeout [ 592.763658][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 592.782138][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 592.818586][T10712] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 592.850361][T10712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 592.891230][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 592.920145][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 592.938650][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 593.040140][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 593.093032][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 593.441973][T10758] chnl_net:caif_netlink_parms(): no params data found [ 593.697193][T10758] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.805656][T10758] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.838893][T10758] device bridge_slave_0 entered promiscuous mode [ 593.863352][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 593.889095][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 593.899001][T10758] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.906053][T10758] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.946829][T10758] device bridge_slave_1 entered promiscuous mode [ 593.958600][T10712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 594.035813][T10758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 594.094596][T10779] loop5: detected capacity change from 0 to 512 [ 594.103590][T10758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 594.171875][T10779] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 594.226961][T10758] team0: Port device team_slave_0 added [ 594.244200][T10758] team0: Port device team_slave_1 added [ 594.261817][T10779] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1755: bg 0: block 384: padding at end of block bitmap is not set [ 594.344051][T10758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 594.369279][T10779] EXT4-fs (loop5): Remounting filesystem read-only [ 594.375801][T10779] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 594.444439][T10758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.480168][T10779] EXT4-fs (loop5): Remounting filesystem read-only [ 594.486783][T10779] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #11: comm syz.5.1755: attempt to clear invalid blocks 983260 len 1 [ 594.508597][T10758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 594.540728][T10779] EXT4-fs (loop5): Remounting filesystem read-only [ 594.547275][T10779] EXT4-fs error (device loop5): __ext4_get_inode_loc:4334: comm syz.5.1755: Invalid inode table block 0 in block_group 0 [ 594.589587][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 594.608041][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 594.616818][T10779] EXT4-fs (loop5): Remounting filesystem read-only [ 594.637318][T10779] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 594.637665][T10758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 594.655083][T10779] EXT4-fs (loop5): Remounting filesystem read-only [ 594.663627][T10779] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 594.683475][T10779] EXT4-fs (loop5): Remounting filesystem read-only [ 594.688795][T10758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.695307][T10779] EXT4-fs error (device loop5): __ext4_get_inode_loc:4334: comm syz.5.1755: Invalid inode table block 0 in block_group 0 [ 594.749704][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 594.768743][T10779] EXT4-fs (loop5): Remounting filesystem read-only [ 594.778533][T10779] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 594.786695][T10758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 594.800858][T10779] EXT4-fs (loop5): Remounting filesystem read-only [ 594.807367][T10779] EXT4-fs error (device loop5): ext4_truncate:4286: inode #11: comm syz.5.1755: mark_inode_dirty error [ 594.838854][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 594.855552][T10712] device veth0_vlan entered promiscuous mode [ 594.870452][T10779] EXT4-fs (loop5): Remounting filesystem read-only [ 594.876964][T10779] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 594.901867][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 594.923807][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 594.940047][T10779] EXT4-fs (loop5): Remounting filesystem read-only [ 594.946789][T10779] EXT4-fs (loop5): 1 truncate cleaned up [ 594.956728][T10758] device hsr_slave_0 entered promiscuous mode [ 594.974173][T10779] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,noblock_validity,. Quota mode: none. [ 594.992752][T10758] device hsr_slave_1 entered promiscuous mode [ 595.009453][T10758] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 595.017013][T10758] Cannot create hsr debugfs directory [ 595.037957][T10712] device veth1_vlan entered promiscuous mode [ 595.057697][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 595.081141][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 595.118194][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 595.221011][T10712] device veth0_macvtap entered promiscuous mode [ 595.229533][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 595.259490][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 595.279314][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 595.327134][T10712] device veth1_macvtap entered promiscuous mode [ 595.351107][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 595.369255][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 595.458454][T10712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.478850][T10712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.498845][T10712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.523107][T10712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.541412][T10712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.582642][T10712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.613223][T10712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.634356][T10712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.650882][T10712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.668806][T10712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.688893][T10712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.718809][T10712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.740617][T10712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 595.754620][ T3088] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.786845][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 595.810622][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 595.892618][T10712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.916909][T10712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.929865][T10712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.948799][T10712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.968834][T10712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.983416][T10712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.994425][T10712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 596.005491][T10712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.015573][T10712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 596.027378][T10712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.040064][T10712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 596.062085][T10712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.074418][T10712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 596.082341][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 596.092119][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 596.133848][ T3088] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.160556][T10797] tipc: Started in network mode [ 596.165472][T10797] tipc: Node identity 080211, cluster identity 4711 [ 596.184905][T10797] tipc: Enabled bearer , priority 0 [ 596.203797][T10712] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.234059][T10712] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.253084][T10712] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.271252][T10712] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.437209][ T3088] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.785242][ T3088] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.925026][ T4289] Bluetooth: hci0: command 0x041b tx timeout [ 596.931554][ T4289] Bluetooth: hci4: command 0x0419 tx timeout [ 596.969272][ T4298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.977098][ T4298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.989141][T10784] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:476: comm ext4lazyinit: Invalid block bitmap block 0 in block_group 0 [ 597.016183][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 597.023490][T10784] EXT4-fs (loop5): Remounting filesystem read-only [ 597.052230][ T4295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.088097][ T4295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.122264][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 597.225486][T10814] device syzkaller0 entered promiscuous mode [ 597.281229][T10758] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 597.332746][T10758] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 597.389470][ T4233] tipc: Node number set to 134353152 [ 597.395095][T10758] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 597.463408][T10758] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 597.475285][ T3088] tipc: Left network mode [ 597.672689][T10758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.729987][T10758] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.758121][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 597.766583][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 597.831270][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 597.849753][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 597.888471][ T516] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.895580][ T516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.932282][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 597.966314][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 597.998616][ T516] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.005707][ T516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 598.049190][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 598.105601][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 598.121505][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 598.219481][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 598.254699][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 598.282203][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 598.319722][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 598.358568][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 598.453621][T10758] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 598.482421][T10758] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 598.703331][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 598.725920][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 598.744910][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 598.783023][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 598.813969][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 599.095941][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 599.389744][T10758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 599.398026][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 599.417089][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 599.847797][ T3088] device veth0_to_bond left promiscuous mode [ 599.876127][ T3088] bridge3: port 1(veth0_to_bond) entered disabled state [ 599.978563][ T3088] device hsr_slave_0 left promiscuous mode [ 600.619831][ T3088] device hsr_slave_1 left promiscuous mode [ 600.643966][ T3088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 600.658921][ T3088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 600.669924][ T3088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 600.742249][ T3088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 600.789502][ T3088] device bridge_slave_1 left promiscuous mode [ 600.814538][ T3088] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.134697][ T3088] device bridge_slave_0 left promiscuous mode [ 601.144332][ T3088] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.159232][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 601.199051][ T3088] device veth1_macvtap left promiscuous mode [ 601.205084][ T3088] device veth0_macvtap left promiscuous mode [ 601.223774][ T3088] device veth1_vlan left promiscuous mode [ 601.241372][ T3088] device veth0_vlan left promiscuous mode [ 601.502994][T10895] loop5: detected capacity change from 0 to 4096 [ 601.600965][T10895] EXT4-fs (loop5): invalid inodes per group: 204800 [ 601.600965][T10895] [ 601.613196][ T3088] smc: removing net device geneve1 with user defined pnetid SYZ1 [ 601.659909][T10895] syz.5.1772 (10895): drop_caches: 2 [ 601.893653][ T3088] team0 (unregistering): Port device team_slave_1 removed [ 601.935863][ T3088] team0 (unregistering): Port device team_slave_0 removed [ 601.972533][ T3088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 601.996803][ T3088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 602.263466][ T3088] bond0 (unregistering): Released all slaves [ 602.518957][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 602.527579][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 602.626801][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 602.642952][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 602.665596][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 602.728013][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 602.745758][T10758] device veth0_vlan entered promiscuous mode [ 602.787162][T10758] device veth1_vlan entered promiscuous mode [ 602.852508][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 602.868137][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 602.911259][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 602.963869][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 603.584930][T10758] device veth0_macvtap entered promiscuous mode [ 603.624535][T10914] device veth0_to_bond left promiscuous mode [ 603.720646][T10914] bridge2: port 1(veth0_to_bond) entered disabled state [ 603.798446][T10758] device veth1_macvtap entered promiscuous mode [ 603.876863][T10758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.926267][T10758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.965393][T10758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.990541][T10758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.028804][T10758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.048810][T10758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.078827][T10758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.106129][T10758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.116369][T10758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.128417][T10758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.138518][T10758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.158863][T10758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.180153][T10758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 604.207088][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 604.222229][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 604.267542][T10758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 604.307156][T10758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.327183][T10758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 604.350176][T10758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.373476][T10758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 604.394210][T10758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.519079][T10758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 604.547276][T10758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.568099][T10758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 604.578674][T10758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.589289][T10758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 604.600126][T10758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.612612][T10758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 604.637474][T10758] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.659484][T10758] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.673687][T10758] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.688405][T10758] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.723575][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 604.756644][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 604.915419][ T4295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.944828][ T4295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.977958][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 604.998336][ T6299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.039225][ T6299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.046703][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 608.529008][T11068] loop5: detected capacity change from 0 to 256 [ 608.650633][T11068] overlayfs: missing 'lowerdir' [ 609.381811][T11081] loop5: detected capacity change from 0 to 8192 [ 609.987116][T11099] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 610.403026][T11105] loop5: detected capacity change from 0 to 128 [ 610.456372][T11105] FAT-fs (loop5): Directory bread(block 414) failed [ 610.463111][T11105] FAT-fs (loop5): Directory bread(block 415) failed [ 610.469986][T11105] FAT-fs (loop5): Directory bread(block 416) failed [ 610.476629][T11105] FAT-fs (loop5): Directory bread(block 417) failed [ 610.483444][T11105] FAT-fs (loop5): Directory bread(block 418) failed [ 610.490101][T11105] FAT-fs (loop5): Directory bread(block 419) failed [ 610.496707][T11105] FAT-fs (loop5): Directory bread(block 420) failed [ 610.503356][T11105] FAT-fs (loop5): Directory bread(block 421) failed [ 610.810336][T11117] device veth0_to_bond left promiscuous mode [ 610.820092][T11117] bridge4: port 1(veth0_to_bond) entered disabled state [ 611.621747][T11128] loop5: detected capacity change from 0 to 256 [ 611.758557][T11128] overlayfs: missing 'lowerdir' [ 612.203058][T11146] loop7: detected capacity change from 0 to 512 [ 612.744538][T11146] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 612.789730][T11146] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.1822: bg 0: block 384: padding at end of block bitmap is not set [ 612.805574][T11146] EXT4-fs (loop7): Remounting filesystem read-only [ 612.812161][T11146] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 612.821994][T11146] EXT4-fs (loop7): Remounting filesystem read-only [ 612.828523][T11146] EXT4-fs error (device loop7): ext4_clear_blocks:883: inode #11: comm syz.7.1822: attempt to clear invalid blocks 983260 len 1 [ 612.846492][T11146] EXT4-fs (loop7): Remounting filesystem read-only [ 612.853157][T11146] EXT4-fs error (device loop7): __ext4_get_inode_loc:4334: comm syz.7.1822: Invalid inode table block 0 in block_group 0 [ 612.872214][T11146] EXT4-fs (loop7): Remounting filesystem read-only [ 612.878746][T11146] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 612.891084][T11146] EXT4-fs (loop7): Remounting filesystem read-only [ 612.897636][T11146] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 612.907557][T11146] EXT4-fs (loop7): Remounting filesystem read-only [ 612.914155][T11146] EXT4-fs error (device loop7): __ext4_get_inode_loc:4334: comm syz.7.1822: Invalid inode table block 0 in block_group 0 [ 612.927330][T11146] EXT4-fs (loop7): Remounting filesystem read-only [ 612.934249][T11146] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 612.944005][T11146] EXT4-fs (loop7): Remounting filesystem read-only [ 612.950827][T11146] EXT4-fs error (device loop7): ext4_truncate:4286: inode #11: comm syz.7.1822: mark_inode_dirty error [ 612.974539][T11146] EXT4-fs (loop7): Remounting filesystem read-only [ 612.981132][T11146] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 612.990606][T11146] EXT4-fs (loop7): Remounting filesystem read-only [ 612.997189][T11146] EXT4-fs (loop7): 1 truncate cleaned up [ 613.002937][T11146] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,noblock_validity,. Quota mode: none. [ 613.246043][T11165] loop8: detected capacity change from 0 to 128 [ 613.367436][T11165] FAT-fs (loop8): Directory bread(block 414) failed [ 613.374140][T11165] FAT-fs (loop8): Directory bread(block 415) failed [ 613.380785][T11165] FAT-fs (loop8): Directory bread(block 416) failed [ 613.387392][T11165] FAT-fs (loop8): Directory bread(block 417) failed [ 613.394017][T11165] FAT-fs (loop8): Directory bread(block 418) failed [ 613.400644][T11165] FAT-fs (loop8): Directory bread(block 419) failed [ 613.407244][T11165] FAT-fs (loop8): Directory bread(block 420) failed [ 613.413866][T11165] FAT-fs (loop8): Directory bread(block 421) failed [ 613.433868][ T3088] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.731036][ T3088] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.778003][T11188] loop8: detected capacity change from 0 to 256 [ 614.872475][ T3088] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.916135][T11188] overlayfs: missing 'lowerdir' [ 615.152961][ T3088] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.523272][T11202] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1833'. [ 615.565920][T11202] netlink: 'syz.8.1833': attribute type 1 has an invalid length. [ 616.126845][T11214] loop8: detected capacity change from 0 to 4096 [ 616.221111][T11214] EXT4-fs (loop8): invalid inodes per group: 204800 [ 616.221111][T11214] [ 616.635144][T11228] syz.8.1835 (11228): drop_caches: 2 [ 616.828897][T11158] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:476: comm ext4lazyinit: Invalid block bitmap block 0 in block_group 0 [ 616.891506][T11158] EXT4-fs (loop7): Remounting filesystem read-only [ 617.313991][T11240] misc userio: Invalid payload size [ 618.057424][T11244] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1839'. [ 618.424945][T11253] tipc: Started in network mode [ 618.444789][T11253] tipc: Node identity ac1414aa, cluster identity 4711 [ 618.476217][T11253] tipc: Enabled bearer , priority 10 [ 619.296313][ T3088] device hsr_slave_0 left promiscuous mode [ 619.484919][ T3088] device hsr_slave_1 left promiscuous mode [ 619.649380][ T3088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 619.657343][ T3088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 619.703825][ T3088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 619.844246][ T3088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 619.998170][ T3088] device bridge_slave_1 left promiscuous mode [ 620.017983][ T3088] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.203048][ T3088] device bridge_slave_0 left promiscuous mode [ 620.212813][ T3088] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.065985][ T3088] device veth0_macvtap left promiscuous mode [ 621.075558][ T3088] device veth1_vlan left promiscuous mode [ 621.093703][ T3088] device veth0_vlan left promiscuous mode [ 621.240991][T11304] misc userio: Invalid payload size [ 621.249040][T11304] netlink: 120 bytes leftover after parsing attributes in process `syz.8.1853'. [ 622.278394][ T3088] team0 (unregistering): Port device team_slave_1 removed [ 622.291831][ T3088] team0 (unregistering): Port device team_slave_0 removed [ 622.329202][ T3088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 622.359707][ T3088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 622.416411][ T3088] bond0 (unregistering): Released all slaves [ 622.466087][T10821] tipc: Node number set to 2886997162 [ 622.472998][T11286] tipc: Enabling of bearer rejected, already enabled [ 622.500039][T11312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1864'. [ 622.512079][T11312] bond0: option packets_per_slave: invalid value (18446744071564623876) [ 622.523624][T11312] bond0: option packets_per_slave: allowed values 0 - 65535 [ 622.593642][T11323] autofs4:pid:11323:autofs_fill_super: called with bogus options [ 622.627438][T11327] tipc: Enabling of bearer rejected, already enabled [ 623.602860][T11352] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1866'. [ 624.712138][T11372] tipc: Enabled bearer , priority 0 [ 624.936253][T11375] device syzkaller0 entered promiscuous mode [ 624.956520][T11379] autofs4:pid:11379:autofs_fill_super: called with bogus options [ 625.031421][T11381] tipc: Resetting bearer [ 625.080380][T11371] tipc: Resetting bearer [ 625.125009][T11371] tipc: Disabling bearer [ 627.099427][T11437] autofs4:pid:11437:autofs_fill_super: called with bogus options [ 627.394173][T11448] tipc: Started in network mode [ 627.431676][T11448] tipc: Node identity da48f7b6e3d7, cluster identity 4711 [ 627.467484][T11448] tipc: Enabled bearer , priority 0 [ 627.500273][T11454] device syzkaller0 entered promiscuous mode [ 627.552982][T11448] tipc: Resetting bearer [ 627.607103][T11446] tipc: Resetting bearer [ 627.662341][T11446] tipc: Disabling bearer [ 627.819217][T11459] device syzkaller0 entered promiscuous mode [ 629.040536][T11484] loop5: detected capacity change from 0 to 256 [ 629.096684][T11486] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1897'. [ 629.102148][T11484] overlayfs: missing 'lowerdir' [ 629.241621][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.691118][T11516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1905'. [ 630.970206][T11532] loop7: detected capacity change from 0 to 256 [ 631.207347][T11532] overlayfs: missing 'lowerdir' [ 631.246143][T11544] misc userio: Invalid payload size [ 632.007687][T11534] syz.3.1911 (11534) used greatest stack depth: 18064 bytes left [ 633.765652][T11587] loop5: detected capacity change from 0 to 256 [ 633.860946][T11587] overlayfs: missing 'lowerdir' [ 634.062802][T11598] misc userio: Invalid payload size [ 636.071489][T11641] loop5: detected capacity change from 0 to 256 [ 636.231447][T11641] overlayfs: missing 'lowerdir' [ 636.779894][T11651] misc userio: Invalid payload size [ 637.685349][T11671] loop7: detected capacity change from 0 to 128 [ 637.926994][T11671] FAT-fs (loop7): Directory bread(block 414) failed [ 637.933696][T11671] FAT-fs (loop7): Directory bread(block 415) failed [ 637.940386][T11671] FAT-fs (loop7): Directory bread(block 416) failed [ 637.947052][T11671] FAT-fs (loop7): Directory bread(block 417) failed [ 637.953784][T11671] FAT-fs (loop7): Directory bread(block 418) failed [ 637.960426][T11671] FAT-fs (loop7): Directory bread(block 419) failed [ 637.967022][T11671] FAT-fs (loop7): Directory bread(block 420) failed [ 637.973718][T11671] FAT-fs (loop7): Directory bread(block 421) failed [ 638.073498][T11661] loop5: detected capacity change from 0 to 8192 [ 638.317779][T11689] loop8: detected capacity change from 0 to 256 [ 643.127141][T11702] misc userio: Invalid payload size [ 643.603523][T11715] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1955'. [ 644.390984][T11734] loop5: detected capacity change from 0 to 128 [ 644.467766][T11734] FAT-fs (loop5): Directory bread(block 414) failed [ 644.474533][T11734] FAT-fs (loop5): Directory bread(block 415) failed [ 644.481244][T11734] FAT-fs (loop5): Directory bread(block 416) failed [ 644.487911][T11734] FAT-fs (loop5): Directory bread(block 417) failed [ 644.494629][T11734] FAT-fs (loop5): Directory bread(block 418) failed [ 644.501264][T11734] FAT-fs (loop5): Directory bread(block 419) failed [ 644.507870][T11734] FAT-fs (loop5): Directory bread(block 420) failed [ 644.514529][T11734] FAT-fs (loop5): Directory bread(block 421) failed [ 645.476886][T11766] tipc: Started in network mode [ 645.496529][T11766] tipc: Node identity 963f84cb0f2a, cluster identity 4711 [ 645.548958][T11766] tipc: Enabled bearer , priority 0 [ 645.562229][T11768] device syzkaller0 entered promiscuous mode [ 645.623216][T11766] tipc: Resetting bearer [ 645.654287][T11765] tipc: Resetting bearer [ 645.706102][T11765] tipc: Disabling bearer [ 645.904934][T11777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1967'. [ 646.421076][T11789] misc userio: Invalid payload size [ 647.604942][T11810] overlayfs: missing 'lowerdir' [ 648.480327][T11834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1980'. [ 648.613210][T11839] bridge3: port 1(veth0_to_bond) entered blocking state [ 648.627000][T11839] bridge3: port 1(veth0_to_bond) entered disabled state [ 648.637122][T11839] device veth0_to_bond entered promiscuous mode [ 648.945378][T11857] loop8: detected capacity change from 0 to 128 [ 648.971078][T11859] overlayfs: missing 'lowerdir' [ 648.993194][T11857] FAT-fs (loop8): Directory bread(block 414) failed [ 649.000120][T11857] FAT-fs (loop8): Directory bread(block 415) failed [ 649.006737][T11857] FAT-fs (loop8): Directory bread(block 416) failed [ 649.013404][T11857] FAT-fs (loop8): Directory bread(block 417) failed [ 649.020021][T11857] FAT-fs (loop8): Directory bread(block 418) failed [ 649.026607][T11857] FAT-fs (loop8): Directory bread(block 419) failed [ 649.033201][T11857] FAT-fs (loop8): Directory bread(block 420) failed [ 649.039795][T11857] FAT-fs (loop8): Directory bread(block 421) failed [ 650.970372][T11902] tipc: Enabling of bearer rejected, already enabled [ 652.043959][T11921] misc userio: Invalid payload size [ 652.470472][T11931] overlayfs: missing 'lowerdir' [ 654.653552][T11977] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 655.798668][T12000] loop5: detected capacity change from 0 to 256 [ 655.837323][T12004] loop8: detected capacity change from 0 to 128 [ 655.925211][T12004] FAT-fs (loop8): Directory bread(block 414) failed [ 655.932082][T12004] FAT-fs (loop8): Directory bread(block 415) failed [ 655.938726][T12004] FAT-fs (loop8): Directory bread(block 416) failed [ 655.945396][T12004] FAT-fs (loop8): Directory bread(block 417) failed [ 655.952065][T12004] FAT-fs (loop8): Directory bread(block 418) failed [ 655.958737][T12004] FAT-fs (loop8): Directory bread(block 419) failed [ 655.965387][T12004] FAT-fs (loop8): Directory bread(block 420) failed [ 655.972100][T12004] FAT-fs (loop8): Directory bread(block 421) failed [ 655.980754][T12008] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 656.001908][T12000] overlayfs: missing 'lowerdir' [ 657.494834][T12026] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.502223][T12026] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.142328][T12056] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2021'. [ 658.182541][T12056] netlink: 80 bytes leftover after parsing attributes in process `syz.8.2021'. [ 658.494376][T12026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 660.047712][T12026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 660.164848][T12070] overlayfs: missing 'lowerdir' [ 660.489263][T12080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2028'. [ 661.015187][T12026] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.024154][T12026] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.033801][T12026] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.042723][T12026] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.135471][T12076] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2025'. [ 661.349790][T12098] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.359131][T12098] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.369218][T12098] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.377933][T12098] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.403565][T12098] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 661.412705][T12098] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 661.421625][T12098] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 661.430607][T12098] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 661.497824][T12113] loop5: detected capacity change from 0 to 128 [ 661.540772][T12103] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.550033][T12103] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.558729][T12103] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.567571][T12103] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.591313][T12103] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 661.600305][T12103] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 661.602655][T12113] FAT-fs (loop5): Directory bread(block 414) failed [ 661.609252][T12103] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 661.609313][T12103] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 661.634757][T12113] FAT-fs (loop5): Directory bread(block 415) failed [ 661.641448][T12113] FAT-fs (loop5): Directory bread(block 416) failed [ 661.648495][T12113] FAT-fs (loop5): Directory bread(block 417) failed [ 661.655282][T12113] FAT-fs (loop5): Directory bread(block 418) failed [ 661.661926][T12113] FAT-fs (loop5): Directory bread(block 419) failed [ 661.668533][T12113] FAT-fs (loop5): Directory bread(block 420) failed [ 661.675188][T12113] FAT-fs (loop5): Directory bread(block 421) failed [ 662.325721][T12130] overlayfs: missing 'lowerdir' [ 663.136555][T12153] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2041'. [ 663.187067][T12155] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2042'. [ 663.497374][T12174] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2046'. [ 663.519202][T12174] bond0: option lp_interval: invalid value (18446744071564623876) [ 663.528226][T12176] overlayfs: missing 'lowerdir' [ 663.537242][T12174] bond0: option lp_interval: allowed values 1 - 2147483647 [ 663.772192][T12193] tipc: Enabled bearer , priority 0 [ 663.843164][T12193] tipc: Resetting bearer [ 663.882593][T12192] tipc: Disabling bearer [ 663.934739][T12201] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 663.951883][T12201] device syzkaller0 entered promiscuous mode [ 664.301242][T12210] device gre0 entered promiscuous mode [ 664.359688][T12208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2056'. [ 664.452278][T12217] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 664.508014][T12219] overlayfs: missing 'lowerdir' [ 664.617856][T12221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2061'. [ 664.647286][T12221] bond0: option lp_interval: invalid value (18446744071564623876) [ 664.675657][T12221] bond0: option lp_interval: allowed values 1 - 2147483647 [ 665.118189][T12239] device syzkaller0 entered promiscuous mode [ 665.429972][T12245] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 665.453508][T12245] device syzkaller0 entered promiscuous mode [ 665.658556][T12257] loop7: detected capacity change from 0 to 256 [ 665.738119][T12257] overlayfs: missing 'lowerdir' [ 665.971221][T12268] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2073'. [ 665.990757][T12268] bond0: option lp_interval: invalid value (18446744071564623876) [ 666.008654][T12268] bond0: option lp_interval: allowed values 1 - 2147483647 [ 666.639574][T12302] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 666.668494][T12302] device syzkaller0 entered promiscuous mode [ 666.689201][T12303] device veth0_to_bond left promiscuous mode [ 666.695309][T12303] bridge3: port 1(veth0_to_bond) entered disabled state [ 667.009184][T12321] overlayfs: missing 'lowerdir' [ 667.163967][T12327] device syzkaller0 entered promiscuous mode [ 667.189512][T12330] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2084'. [ 667.208440][T12330] bond0: option lp_interval: invalid value (18446744071564623876) [ 667.224357][T12330] bond0: option lp_interval: allowed values 1 - 2147483647 [ 667.747147][T12345] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2087'. [ 668.312005][T12374] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 668.346098][T12374] device syzkaller0 entered promiscuous mode [ 668.361093][T12378] overlayfs: missing 'lowerdir' [ 670.295641][T12444] device syzkaller0 entered promiscuous mode [ 670.386261][T12444] tipc: Enabled bearer , priority 0 [ 670.411800][T12442] tipc: Resetting bearer [ 670.461319][T12442] tipc: Disabling bearer [ 670.630588][T12457] loop5: detected capacity change from 0 to 256 [ 670.785393][T12457] overlayfs: missing 'lowerdir' [ 670.844956][T12468] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 670.869538][T12468] device syzkaller0 entered promiscuous mode [ 670.999800][T12472] netlink: 'syz.3.2109': attribute type 2 has an invalid length. [ 672.742755][T12526] device syzkaller0 entered promiscuous mode [ 673.475720][T12543] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 673.520783][T12543] device syzkaller0 entered promiscuous mode [ 673.706529][T12553] netlink: 'syz.8.2125': attribute type 2 has an invalid length. [ 674.306890][T12575] tipc: Enabling of bearer rejected, failed to enable media [ 674.407913][T12579] device syzkaller0 entered promiscuous mode [ 674.937904][T12607] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 674.949491][T12607] device syzkaller0 entered promiscuous mode [ 676.292490][T12653] netlink: 'syz.5.2143': attribute type 2 has an invalid length. [ 677.289872][T12669] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 677.298553][T12669] device syzkaller0 entered promiscuous mode [ 677.807272][T12685] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2152'. [ 677.816462][T12685] bond0: option lp_interval: invalid value (18446744071564623876) [ 677.832875][T12685] bond0: option lp_interval: allowed values 1 - 2147483647 [ 678.220199][T12697] netlink: 'syz.3.2155': attribute type 2 has an invalid length. [ 678.300493][T12699] syz.7.2154 (12699): drop_caches: 2 [ 679.328409][T12722] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 679.769489][T12733] netlink: 'syz.3.2163': attribute type 16 has an invalid length. [ 679.777334][T12733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2163'. [ 679.909804][T12736] loop8: detected capacity change from 0 to 128 [ 679.988356][T12736] FAT-fs (loop8): Directory bread(block 414) failed [ 679.995172][T12736] FAT-fs (loop8): Directory bread(block 415) failed [ 680.002311][T12736] FAT-fs (loop8): Directory bread(block 416) failed [ 680.008983][T12736] FAT-fs (loop8): Directory bread(block 417) failed [ 680.015586][T12736] FAT-fs (loop8): Directory bread(block 418) failed [ 680.022247][T12736] FAT-fs (loop8): Directory bread(block 419) failed [ 680.029133][T12736] FAT-fs (loop8): Directory bread(block 420) failed [ 680.035804][T12736] FAT-fs (loop8): Directory bread(block 421) failed [ 680.459821][ T4247] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.665178][ T4247] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.805128][ T4247] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.918023][T12760] syz.0.2168 (12760): drop_caches: 2 [ 681.364303][ T4247] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.588906][T12762] netlink: 'syz.0.2169': attribute type 2 has an invalid length. [ 682.084500][T12774] device syzkaller0 entered promiscuous mode [ 682.215664][T12782] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 682.266137][T12782] device syzkaller0 entered promiscuous mode [ 682.617043][T12794] device syzkaller0 entered promiscuous mode [ 683.845203][T12832] netlink: 'syz.3.2187': attribute type 2 has an invalid length. [ 684.680685][ T4247] device hsr_slave_0 left promiscuous mode [ 684.707140][ T4247] device hsr_slave_1 left promiscuous mode [ 684.724512][ T4247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 684.896133][ T4247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 684.919655][ T4247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 684.927080][ T4247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 684.948469][ T4247] device bridge_slave_1 left promiscuous mode [ 684.959952][ T4247] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.978587][ T4247] device bridge_slave_0 left promiscuous mode [ 684.998997][ T4247] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.025229][ T4247] device veth1_macvtap left promiscuous mode [ 685.038984][ T4247] device veth0_macvtap left promiscuous mode [ 685.051328][ T4247] device veth1_vlan left promiscuous mode [ 685.063397][ T4247] device veth0_vlan left promiscuous mode [ 685.404489][ T4247] team0 (unregistering): Port device team_slave_1 removed [ 685.438144][ T4247] team0 (unregistering): Port device team_slave_0 removed [ 685.458413][ T4247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 685.491732][ T4247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 685.660249][ T4247] bond0 (unregistering): Released all slaves [ 686.152574][T12869] device syzkaller0 entered promiscuous mode [ 686.371275][T12880] netlink: 'syz.3.2201': attribute type 1 has an invalid length. [ 686.450584][T12880] 8021q: adding VLAN 0 to HW filter on device bond1 [ 686.476581][T12887] device macvlan2 entered promiscuous mode [ 686.655308][T12887] device bond1 entered promiscuous mode [ 686.662963][T12887] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 686.672309][T12887] team0: Port device macvlan2 added [ 686.743967][T12880] bond1: (slave ip6gretap1): making interface the new active one [ 686.778742][T12880] device ip6gretap1 entered promiscuous mode [ 686.862435][T12880] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 686.905718][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 686.940772][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan2: link becomes ready [ 688.092240][T12924] loop8: detected capacity change from 0 to 128 [ 688.356394][T12924] FAT-fs (loop8): Directory bread(block 414) failed [ 688.382688][T12924] FAT-fs (loop8): Directory bread(block 415) failed [ 688.438934][T12924] FAT-fs (loop8): Directory bread(block 416) failed [ 688.581873][T12924] FAT-fs (loop8): Directory bread(block 417) failed [ 688.588520][T12924] FAT-fs (loop8): Directory bread(block 418) failed [ 688.595343][T12924] FAT-fs (loop8): Directory bread(block 419) failed [ 688.601988][T12924] FAT-fs (loop8): Directory bread(block 420) failed [ 688.608590][T12924] FAT-fs (loop8): Directory bread(block 421) failed [ 688.911389][T12934] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 689.606705][T12968] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 689.867196][T12978] device syzkaller0 entered promiscuous mode [ 689.938563][T12980] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 689.993233][T12980] device syzkaller0 entered promiscuous mode [ 690.455419][T12991] tipc: Enabled bearer , priority 0 [ 690.563821][T12990] tipc: Disabling bearer [ 690.719136][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.227833][T13014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2230'. [ 691.308812][T13014] bond0: option lp_interval: invalid value (18446744071564623876) [ 691.347106][T13014] bond0: option lp_interval: allowed values 1 - 2147483647 [ 691.611857][T13017] device syzkaller0 entered promiscuous mode [ 691.728611][T13029] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 691.746932][T13029] device syzkaller0 entered promiscuous mode [ 692.128321][T13043] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2237'. [ 692.201046][T13046] overlayfs: missing 'lowerdir' [ 692.432217][T13053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2240'. [ 692.726512][T13059] loop5: detected capacity change from 0 to 8192 [ 693.880894][T13091] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2245'. [ 694.261411][T13104] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 694.331738][T13107] device syzkaller0 entered promiscuous mode [ 694.434418][T13106] loop8: detected capacity change from 0 to 4096 [ 694.503180][T13106] EXT4-fs (loop8): invalid inodes per group: 204800 [ 694.503180][T13106] [ 694.592141][T13110] loop7: detected capacity change from 0 to 256 [ 694.861493][T13113] syz.8.2249 (13113): drop_caches: 2 [ 695.137689][T13110] overlayfs: missing 'lowerdir' [ 695.487652][T13121] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2252'. [ 695.528864][T13121] bond0: option lp_interval: invalid value (18446744071564623876) [ 695.594673][T13121] bond0: option lp_interval: allowed values 1 - 2147483647 [ 696.569856][T13149] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 696.583753][T13152] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 696.601653][T13149] device syzkaller0 entered promiscuous mode [ 696.991284][T13167] loop8: detected capacity change from 0 to 256 [ 697.085995][T13167] overlayfs: missing 'lowerdir' [ 697.290157][T13177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2264'. [ 697.334441][T13177] bond0: option lp_interval: invalid value (18446744071564623876) [ 697.352656][T13177] bond0: option lp_interval: allowed values 1 - 2147483647 [ 697.504126][T13181] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 697.578362][T13186] loop8: detected capacity change from 0 to 128 [ 697.737810][T13186] FAT-fs (loop8): Directory bread(block 414) failed [ 697.744639][T13186] FAT-fs (loop8): Directory bread(block 415) failed [ 697.751448][T13186] FAT-fs (loop8): Directory bread(block 416) failed [ 697.758148][T13186] FAT-fs (loop8): Directory bread(block 417) failed [ 697.764933][T13186] FAT-fs (loop8): Directory bread(block 418) failed [ 697.771667][T13186] FAT-fs (loop8): Directory bread(block 419) failed [ 697.778339][T13186] FAT-fs (loop8): Directory bread(block 420) failed [ 697.785076][T13186] FAT-fs (loop8): Directory bread(block 421) failed [ 698.375011][T13205] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 698.416244][T13205] device syzkaller0 entered promiscuous mode [ 698.658497][T13214] device syzkaller0 entered promiscuous mode [ 698.907763][T13221] misc userio: Invalid payload size [ 698.915460][T13221] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2274'. [ 698.947153][T13220] loop8: detected capacity change from 0 to 256 [ 699.311382][T13220] overlayfs: missing 'lowerdir' [ 700.021746][T13248] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 700.044809][T13248] device syzkaller0 entered promiscuous mode [ 700.551198][T13239] loop8: detected capacity change from 0 to 128 [ 700.630783][T13239] FAT-fs (loop8): Directory bread(block 414) failed [ 700.637428][T13239] FAT-fs (loop8): Directory bread(block 415) failed [ 700.704200][T13239] FAT-fs (loop8): Directory bread(block 416) failed [ 700.750905][T13239] FAT-fs (loop8): Directory bread(block 417) failed [ 700.771351][T13239] FAT-fs (loop8): Directory bread(block 418) failed [ 700.796405][T13239] FAT-fs (loop8): Directory bread(block 419) failed [ 700.885182][T13272] syz.0.2282 (13272): drop_caches: 2 [ 700.903415][T13239] FAT-fs (loop8): Directory bread(block 420) failed [ 700.943392][T13239] FAT-fs (loop8): Directory bread(block 421) failed [ 701.438091][T13290] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2288'. [ 701.529834][T13295] overlayfs: missing 'lowerdir' [ 702.006289][T13304] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2292'. [ 702.045840][T13304] bond0: option lp_interval: invalid value (18446744071564623876) [ 702.076273][T13304] bond0: option lp_interval: allowed values 1 - 2147483647 [ 702.308278][T13312] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 702.389397][T13312] device syzkaller0 entered promiscuous mode [ 702.671659][T13324] misc userio: Invalid payload size [ 702.679660][T13324] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2299'. [ 702.823028][T13322] overlayfs: missing 'lowerdir' [ 703.151626][T13334] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2297'. [ 704.256768][T13358] loop8: detected capacity change from 0 to 128 [ 704.652746][T13358] FAT-fs (loop8): Directory bread(block 414) failed [ 704.659796][T13358] FAT-fs (loop8): Directory bread(block 415) failed [ 704.666506][T13358] FAT-fs (loop8): Directory bread(block 416) failed [ 704.673191][T13358] FAT-fs (loop8): Directory bread(block 417) failed [ 704.679893][T13358] FAT-fs (loop8): Directory bread(block 418) failed [ 704.686605][T13358] FAT-fs (loop8): Directory bread(block 419) failed [ 704.693322][T13358] FAT-fs (loop8): Directory bread(block 420) failed [ 704.700075][T13358] FAT-fs (loop8): Directory bread(block 421) failed [ 706.194556][T13376] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 706.225981][T13378] loop7: detected capacity change from 0 to 256 [ 706.238340][T13376] device syzkaller0 entered promiscuous mode [ 706.297325][T13378] overlayfs: missing 'lowerdir' [ 707.598018][T13403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2318'. [ 708.136020][T13405] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 708.293006][T13440] overlayfs: missing 'lowerdir' [ 708.472912][T13452] loop8: detected capacity change from 0 to 128 [ 708.504403][T13455] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 708.526006][T13455] device syzkaller0 entered promiscuous mode [ 708.565376][T13452] FAT-fs (loop8): Directory bread(block 414) failed [ 708.626596][T13452] FAT-fs (loop8): Directory bread(block 415) failed [ 708.654834][T13452] FAT-fs (loop8): Directory bread(block 416) failed [ 708.723911][T13452] FAT-fs (loop8): Directory bread(block 417) failed [ 708.748390][T13452] FAT-fs (loop8): Directory bread(block 418) failed [ 708.769189][T13452] FAT-fs (loop8): Directory bread(block 419) failed [ 708.775804][T13452] FAT-fs (loop8): Directory bread(block 420) failed [ 708.829475][T13452] FAT-fs (loop8): Directory bread(block 421) failed [ 710.865208][T13496] netlink: 'syz.8.2332': attribute type 13 has an invalid length. [ 710.923260][T13496] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 710.933923][T13499] syz.0.2328 (13499): drop_caches: 2 [ 710.941453][T13496] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 711.036851][T13498] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2334'. [ 711.056055][T13501] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 713.229163][ T8162] Bluetooth: hci4: command 0x0406 tx timeout [ 713.594267][T13561] loop7: detected capacity change from 0 to 256 [ 713.723122][T13561] overlayfs: missing 'lowerdir' [ 713.735007][T13568] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 713.774344][T13568] device syzkaller0 entered promiscuous mode [ 713.896745][T13575] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2348'. [ 713.913539][T13575] bond0: option lp_interval: invalid value (18446744071564623876) [ 713.923471][T13575] bond0: option lp_interval: allowed values 1 - 2147483647 [ 716.271931][T13622] loop7: detected capacity change from 0 to 256 [ 716.328338][T13623] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2357'. [ 716.424711][T13628] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 716.454620][T13628] device syzkaller0 entered promiscuous mode [ 716.480962][T13622] overlayfs: missing 'lowerdir' [ 717.755823][T13659] loop8: detected capacity change from 0 to 8192 [ 718.658660][T13681] device syzkaller0 entered promiscuous mode [ 718.671125][T13681] tipc: Enabled bearer , priority 0 [ 718.719014][T13680] tipc: Resetting bearer [ 718.774496][T13684] loop7: detected capacity change from 0 to 256 [ 718.780451][T13680] tipc: Disabling bearer [ 718.842937][T13684] overlayfs: missing 'lowerdir' [ 719.087301][T13694] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 719.180022][T13697] device syzkaller0 entered promiscuous mode [ 719.275052][T13696] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2374'. [ 719.618825][T13714] device syzkaller0 entered promiscuous mode [ 719.902918][T13729] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2383'. [ 719.914362][T13727] overlayfs: missing 'lowerdir' [ 719.956259][T13729] bond0: option lp_interval: invalid value (18446744071564623876) [ 719.993815][T13729] bond0: option lp_interval: allowed values 1 - 2147483647 [ 720.351498][T13742] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 720.416400][T13742] device syzkaller0 entered promiscuous mode [ 720.876303][T13774] loop5: detected capacity change from 0 to 256 [ 721.253182][T13772] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2398'. [ 721.303368][T13772] bond0: option lp_interval: invalid value (18446744071564623876) [ 721.344059][T13772] bond0: option lp_interval: allowed values 1 - 2147483647 [ 721.542886][T13790] netlink: 'syz.8.2401': attribute type 1 has an invalid length. [ 721.631617][T13790] netlink: 'syz.8.2401': attribute type 2 has an invalid length. [ 721.663632][T13794] x_tables: unsorted entry at hook 2 [ 721.675165][T13793] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 721.687507][T13774] overlayfs: missing 'lowerdir' [ 721.718204][T13790] xt_hashlimit: size too large, truncated to 1048576 [ 721.764384][T13798] device syzkaller0 entered promiscuous mode [ 721.913327][T13804] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 721.922199][T13804] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 721.931069][T13804] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 721.939788][T13804] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 722.015453][T13804] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 722.024441][T13804] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 722.033467][T13804] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 722.042370][T13804] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 722.178745][T13809] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 722.187551][T13809] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 722.196547][T13809] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 722.205298][T13809] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 722.251307][T13809] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 722.260277][T13809] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 722.269693][T13809] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 722.278563][T13809] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 722.458453][T13821] ================================================================== [ 722.466971][T13821] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x5a3/0x650 [ 722.476343][T13821] Read of size 1 at addr ffff8880242c2608 by task syz.7.2406/13821 [ 722.484288][T13821] [ 722.486664][T13821] CPU: 1 PID: 13821 Comm: syz.7.2406 Not tainted syzkaller #0 [ 722.494123][T13821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 722.504290][T13821] Call Trace: [ 722.507621][T13821] [ 722.510612][T13821] dump_stack_lvl+0x188/0x250 [ 722.515356][T13821] ? show_regs_print_info+0x20/0x20 [ 722.520614][T13821] ? load_image+0x410/0x410 [ 722.525141][T13821] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 722.530676][T13821] print_address_description+0x60/0x2d0 [ 722.536240][T13821] ? xfrm_policy_inexact_list_reinsert+0x5a3/0x650 [ 722.542754][T13821] kasan_report+0xdf/0x130 [ 722.547256][T13821] ? xfrm_policy_inexact_list_reinsert+0x5a3/0x650 [ 722.553771][T13821] xfrm_policy_inexact_list_reinsert+0x5a3/0x650 [ 722.560118][T13821] ? xfrm_policy_addr_delta+0x210/0x330 [ 722.565673][T13821] xfrm_policy_inexact_insert_node+0x95f/0xb70 [ 722.571843][T13821] xfrm_policy_inexact_alloc_chain+0x7a2/0xe70 [ 722.578014][T13821] ? xfrm_policy_inexact_insert+0xd7/0x12d0 [ 722.583921][T13821] xfrm_policy_inexact_insert+0xd7/0x12d0 [ 722.589644][T13821] ? policy_hash_bysel+0x139/0x750 [ 722.594773][T13821] xfrm_policy_insert+0x10f/0x940 [ 722.599815][T13821] xfrm_add_policy+0x4e6/0x870 [ 722.604603][T13821] ? xfrm_dump_sa_done+0xc0/0xc0 [ 722.609543][T13821] ? apparmor_capable+0x12c/0x190 [ 722.614665][T13821] ? __nla_parse+0x3c/0x50 [ 722.619140][T13821] xfrm_user_rcv_msg+0x694/0x980 [ 722.624091][T13821] ? xfrm_netlink_rcv+0x90/0x90 [ 722.628980][T13821] ? __mutex_lock_common+0x435/0x2400 [ 722.634371][T13821] netlink_rcv_skb+0x1e9/0x430 [ 722.639213][T13821] ? xfrm_netlink_rcv+0x66/0x90 [ 722.644070][T13821] ? xfrm_netlink_rcv+0x90/0x90 [ 722.648928][T13821] ? netlink_ack+0xb10/0xb10 [ 722.653533][T13821] ? __lock_acquire+0x7b50/0x7b50 [ 722.658646][T13821] xfrm_netlink_rcv+0x75/0x90 [ 722.663328][T13821] netlink_unicast+0x78f/0x940 [ 722.668109][T13821] netlink_sendmsg+0x8ba/0xbe0 [ 722.672889][T13821] ? netlink_getsockopt+0x570/0x570 [ 722.678092][T13821] ? aa_sock_msg_perm+0x94/0x150 [ 722.683037][T13821] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 722.688369][T13821] ? security_socket_sendmsg+0x7c/0xa0 [ 722.693890][T13821] ? netlink_getsockopt+0x570/0x570 [ 722.699095][T13821] ____sys_sendmsg+0x5be/0x8f0 [ 722.703913][T13821] ? __sys_sendmsg_sock+0x30/0x30 [ 722.708947][T13821] ? import_iovec+0x6f/0xa0 [ 722.713470][T13821] ___sys_sendmsg+0x236/0x2e0 [ 722.718153][T13821] ? __sys_sendmsg+0x290/0x290 [ 722.722955][T13821] __se_sys_sendmsg+0x1b7/0x2a0 [ 722.727817][T13821] ? __x64_sys_sendmsg+0x80/0x80 [ 722.732758][T13821] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 722.738757][T13821] ? lockdep_hardirqs_on+0x94/0x140 [ 722.744026][T13821] do_syscall_64+0x4c/0xa0 [ 722.748441][T13821] ? clear_bhb_loop+0x30/0x80 [ 722.753164][T13821] ? clear_bhb_loop+0x30/0x80 [ 722.757843][T13821] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 722.763743][T13821] RIP: 0033:0x7fabf6f87e59 [ 722.768238][T13821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 722.787881][T13821] RSP: 002b:00007fabf51e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 722.796302][T13821] RAX: ffffffffffffffda RBX: 00007fabf720ffa0 RCX: 00007fabf6f87e59 [ 722.804274][T13821] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000007 [ 722.812247][T13821] RBP: 00007fabf701de6f R08: 0000000000000000 R09: 0000000000000000 [ 722.820217][T13821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 722.828188][T13821] R13: 00007fabf7210038 R14: 00007fabf720ffa0 R15: 00007ffff0d12898 [ 722.836179][T13821] [ 722.839194][T13821] [ 722.841507][T13821] Allocated by task 13821: [ 722.845965][T13821] __kasan_kmalloc+0xaf/0xe0 [ 722.850557][T13821] sk_prot_alloc+0xe7/0x210 [ 722.855078][T13821] sk_alloc+0x2f/0x310 [ 722.859142][T13821] pfkey_create+0xd8/0x560 [ 722.863606][T13821] __sock_create+0x473/0x910 [ 722.868187][T13821] __sys_socket+0xe2/0x170 [ 722.872594][T13821] __x64_sys_socket+0x76/0x80 [ 722.877256][T13821] do_syscall_64+0x4c/0xa0 [ 722.881653][T13821] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 722.887532][T13821] [ 722.889838][T13821] Last potentially related work creation: [ 722.895531][T13821] kasan_save_stack+0x35/0x60 [ 722.900192][T13821] kasan_record_aux_stack+0xb8/0x100 [ 722.905462][T13821] call_rcu+0x189/0x900 [ 722.909664][T13821] dev_shutdown+0x19e/0x700 [ 722.914157][T13821] unregister_netdevice_many+0xa59/0x1a40 [ 722.919895][T13821] unregister_netdevice_queue+0x2e1/0x320 [ 722.925595][T13821] __tun_detach+0xdb7/0x1580 [ 722.930197][T13821] tun_chr_close+0x109/0x1b0 [ 722.934768][T13821] __fput+0x212/0x8c0 [ 722.938766][T13821] task_work_run+0x125/0x1a0 [ 722.943374][T13821] exit_to_user_mode_loop+0x10f/0x130 [ 722.948726][T13821] exit_to_user_mode_prepare+0xee/0x180 [ 722.954256][T13821] syscall_exit_to_user_mode+0x16/0x40 [ 722.959696][T13821] do_syscall_64+0x58/0xa0 [ 722.964093][T13821] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 722.969970][T13821] [ 722.972274][T13821] Second to last potentially related work creation: [ 722.978837][T13821] kasan_save_stack+0x35/0x60 [ 722.983501][T13821] kasan_record_aux_stack+0xb8/0x100 [ 722.988768][T13821] call_rcu+0x189/0x900 [ 722.992905][T13821] netlink_release+0x134c/0x1790 [ 722.997827][T13821] sock_close+0xbf/0x210 [ 723.002053][T13821] __fput+0x212/0x8c0 [ 723.006014][T13821] task_work_run+0x125/0x1a0 [ 723.010585][T13821] exit_to_user_mode_loop+0x10f/0x130 [ 723.015936][T13821] exit_to_user_mode_prepare+0xee/0x180 [ 723.021459][T13821] syscall_exit_to_user_mode+0x16/0x40 [ 723.026900][T13821] do_syscall_64+0x58/0xa0 [ 723.031296][T13821] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 723.037167][T13821] [ 723.039473][T13821] The buggy address belongs to the object at ffff8880242c2000 [ 723.039473][T13821] which belongs to the cache kmalloc-2k of size 2048 [ 723.053558][T13821] The buggy address is located 1544 bytes inside of [ 723.053558][T13821] 2048-byte region [ffff8880242c2000, ffff8880242c2800) [ 723.066986][T13821] The buggy address belongs to the page: [ 723.072601][T13821] page:ffffea000090b000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x242c0 [ 723.082732][T13821] head:ffffea000090b000 order:3 compound_mapcount:0 compound_pincount:0 [ 723.091035][T13821] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 723.099006][T13821] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016c42000 [ 723.107569][T13821] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 723.116125][T13821] page dumped because: kasan: bad access detected [ 723.122520][T13821] page_owner tracks the page as allocated [ 723.128213][T13821] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4197, ts 61435893953, free_ts 61423346755 [ 723.146679][T13821] get_page_from_freelist+0x24f6/0x2670 [ 723.152234][T13821] __alloc_pages+0x1ee/0x480 [ 723.156806][T13821] new_slab+0xc0/0x4b0 [ 723.160856][T13821] ___slab_alloc+0x807/0xdd0 [ 723.165425][T13821] __kmalloc_node_track_caller+0x13d/0x3a0 [ 723.171211][T13821] __alloc_skb+0x22c/0x750 [ 723.175609][T13821] inet6_ifinfo_notify+0x6c/0x110 [ 723.180665][T13821] addrconf_notify+0xbeb/0xf20 [ 723.185438][T13821] raw_notifier_call_chain+0xcb/0x160 [ 723.190822][T13821] __dev_notify_flags+0x194/0x300 [ 723.195828][T13821] dev_change_flags+0xda/0x1a0 [ 723.200572][T13821] do_setlink+0xca4/0x29d0 [ 723.205000][T13821] rtnl_newlink+0x15bb/0x1920 [ 723.209656][T13821] rtnetlink_rcv_msg+0x82c/0xf00 [ 723.214573][T13821] netlink_rcv_skb+0x1e9/0x430 [ 723.219319][T13821] netlink_unicast+0x78f/0x940 [ 723.224070][T13821] page last free stack trace: [ 723.228720][T13821] free_unref_page_prepare+0x637/0x6c0 [ 723.234159][T13821] free_unref_page+0x8f/0x2a0 [ 723.238815][T13821] __unfreeze_partials+0x188/0x1e0 [ 723.243908][T13821] put_cpu_partial+0x12d/0x190 [ 723.248649][T13821] qlist_free_all+0x35/0x90 [ 723.253134][T13821] kasan_quarantine_reduce+0x150/0x160 [ 723.258571][T13821] __kasan_slab_alloc+0x2f/0xc0 [ 723.263400][T13821] slab_post_alloc_hook+0x4c/0x380 [ 723.268492][T13821] kmem_cache_alloc_trace+0x165/0x290 [ 723.273842][T13821] ipv6_add_addr+0x42b/0xe10 [ 723.278414][T13821] addrconf_add_linklocal+0x26a/0x6d0 [ 723.283764][T13821] addrconf_addr_gen+0x559/0x6b0 [ 723.288683][T13821] addrconf_init_auto_addrs+0x6ec/0xab0 [ 723.294208][T13821] addrconf_notify+0xa6b/0xf20 [ 723.298954][T13821] raw_notifier_call_chain+0xcb/0x160 [ 723.304308][T13821] netdev_state_change+0xe0/0x160 [ 723.309321][T13821] [ 723.311624][T13821] Memory state around the buggy address: [ 723.317231][T13821] ffff8880242c2500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 723.325269][T13821] ffff8880242c2580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 723.333320][T13821] >ffff8880242c2600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 723.341369][T13821] ^ [ 723.345682][T13821] ffff8880242c2680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 723.353722][T13821] ffff8880242c2700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 723.361760][T13821] ================================================================== [ 723.369800][T13821] Disabling lock debugging due to kernel taint [ 723.376073][T13821] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 723.383255][T13821] CPU: 1 PID: 13821 Comm: syz.7.2406 Tainted: G B syzkaller #0 [ 723.392103][T13821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 723.402152][T13821] Call Trace: [ 723.405424][T13821] [ 723.408344][T13821] dump_stack_lvl+0x188/0x250 [ 723.413020][T13821] ? show_regs_print_info+0x20/0x20 [ 723.418215][T13821] ? load_image+0x410/0x410 [ 723.422716][T13821] panic+0x2f8/0x850 [ 723.426605][T13821] ? bpf_jit_dump+0xd0/0xd0 [ 723.431103][T13821] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 723.436997][T13821] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 723.442886][T13821] ? _raw_spin_unlock+0x40/0x40 [ 723.447733][T13821] ? xfrm_policy_inexact_list_reinsert+0x5a3/0x650 [ 723.454232][T13821] check_panic_on_warn+0x80/0xa0 [ 723.459268][T13821] ? xfrm_policy_inexact_list_reinsert+0x5a3/0x650 [ 723.465774][T13821] end_report+0x6d/0xf0 [ 723.469932][T13821] kasan_report+0x102/0x130 [ 723.474433][T13821] ? xfrm_policy_inexact_list_reinsert+0x5a3/0x650 [ 723.480940][T13821] xfrm_policy_inexact_list_reinsert+0x5a3/0x650 [ 723.487268][T13821] ? xfrm_policy_addr_delta+0x210/0x330 [ 723.492816][T13821] xfrm_policy_inexact_insert_node+0x95f/0xb70 [ 723.498977][T13821] xfrm_policy_inexact_alloc_chain+0x7a2/0xe70 [ 723.505136][T13821] ? xfrm_policy_inexact_insert+0xd7/0x12d0 [ 723.511033][T13821] xfrm_policy_inexact_insert+0xd7/0x12d0 [ 723.516748][T13821] ? policy_hash_bysel+0x139/0x750 [ 723.521854][T13821] xfrm_policy_insert+0x10f/0x940 [ 723.526877][T13821] xfrm_add_policy+0x4e6/0x870 [ 723.531638][T13821] ? xfrm_dump_sa_done+0xc0/0xc0 [ 723.536569][T13821] ? apparmor_capable+0x12c/0x190 [ 723.541591][T13821] ? __nla_parse+0x3c/0x50 [ 723.546009][T13821] xfrm_user_rcv_msg+0x694/0x980 [ 723.550948][T13821] ? xfrm_netlink_rcv+0x90/0x90 [ 723.555803][T13821] ? __mutex_lock_common+0x435/0x2400 [ 723.561177][T13821] netlink_rcv_skb+0x1e9/0x430 [ 723.565936][T13821] ? xfrm_netlink_rcv+0x66/0x90 [ 723.570780][T13821] ? xfrm_netlink_rcv+0x90/0x90 [ 723.575626][T13821] ? netlink_ack+0xb10/0xb10 [ 723.580212][T13821] ? __lock_acquire+0x7b50/0x7b50 [ 723.585240][T13821] xfrm_netlink_rcv+0x75/0x90 [ 723.589913][T13821] netlink_unicast+0x78f/0x940 [ 723.594679][T13821] netlink_sendmsg+0x8ba/0xbe0 [ 723.599443][T13821] ? netlink_getsockopt+0x570/0x570 [ 723.604639][T13821] ? aa_sock_msg_perm+0x94/0x150 [ 723.609571][T13821] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 723.614853][T13821] ? security_socket_sendmsg+0x7c/0xa0 [ 723.620313][T13821] ? netlink_getsockopt+0x570/0x570 [ 723.625505][T13821] ____sys_sendmsg+0x5be/0x8f0 [ 723.630267][T13821] ? __sys_sendmsg_sock+0x30/0x30 [ 723.635296][T13821] ? import_iovec+0x6f/0xa0 [ 723.639806][T13821] ___sys_sendmsg+0x236/0x2e0 [ 723.644483][T13821] ? __sys_sendmsg+0x290/0x290 [ 723.649257][T13821] __se_sys_sendmsg+0x1b7/0x2a0 [ 723.654115][T13821] ? __x64_sys_sendmsg+0x80/0x80 [ 723.659045][T13821] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 723.665088][T13821] ? lockdep_hardirqs_on+0x94/0x140 [ 723.670287][T13821] do_syscall_64+0x4c/0xa0 [ 723.674699][T13821] ? clear_bhb_loop+0x30/0x80 [ 723.679368][T13821] ? clear_bhb_loop+0x30/0x80 [ 723.684041][T13821] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 723.689928][T13821] RIP: 0033:0x7fabf6f87e59 [ 723.694335][T13821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 723.713934][T13821] RSP: 002b:00007fabf51e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 723.722347][T13821] RAX: ffffffffffffffda RBX: 00007fabf720ffa0 RCX: 00007fabf6f87e59 [ 723.730310][T13821] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000007 [ 723.738275][T13821] RBP: 00007fabf701de6f R08: 0000000000000000 R09: 0000000000000000 [ 723.746248][T13821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 723.754218][T13821] R13: 00007fabf7210038 R14: 00007fabf720ffa0 R15: 00007ffff0d12898 [ 723.762192][T13821] [ 723.765414][T13821] Kernel Offset: disabled [ 723.769730][T13821] Rebooting in 86400 seconds..