last executing test programs: 1m37.99499292s ago: executing program 0 (id=1): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = io_uring_setup(0x4822, &(0x7f0000000080)={0x0, 0xc8bf, 0x1, 0x2, 0x1000002}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x91}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d61737100000000140002800800024000000008080003"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 1m37.868705998s ago: executing program 0 (id=6): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffffe}, [@alu={0x4, 0x0, 0x9, 0xa, 0x0, 0xe3cc7742b0f0f763, 0x10}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x4}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x16, 0x0, @void}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000280)=0x100000, 0x4) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGSKNS(r3, 0x894c, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) read$FUSE(r5, &(0x7f0000002e00)={0x2020}, 0x2020) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000fbff0100000000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb70300008a000000b704000000000000850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1m37.842349884s ago: executing program 0 (id=7): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000000)={[{@nodioread_nolock}, {@dioread_lock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@nojournal_checksum}, {@resgid}, {@acl}, {@barrier}]}, 0x0, 0x47f, &(0x7f0000000680)="$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") (async) r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000000)={[{@nodioread_nolock}, {@dioread_lock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@nojournal_checksum}, {@resgid}, {@acl}, {@barrier}]}, 0x0, 0x47f, &(0x7f0000000680)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002d00)='./bus\x00', 0x3040059, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x2810000, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1\x00', 0x2000, 0x105) fdatasync(r2) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) (async) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) read$FUSE(r1, &(0x7f0000000c00)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_GETNEXTQUOTA(r1, 0xffffffff80000902, r3, &(0x7f0000002c40)) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r1, 0xc0207511, &(0x7f0000000b00)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) sched_setaffinity(r4, 0x8, &(0x7f0000000bc0)=0x3) (async) sched_setaffinity(r4, 0x8, &(0x7f0000000bc0)=0x3) mount$tmpfs(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000080), 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB='inode32=']) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x1208840, &(0x7f0000000100)=ANY=[@ANYBLOB="757466383d312c636865636b3d7374726963742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c696f636861727365743d73703836322c696f636861727365743d63703433372c73686f72746e616d653d77696e39352c756e695f786c6174653d312c756e695f786c6174653d302c757466383d302c756e695f786c6174653d302c003c24d06816418f4be78ed4fbfe47efc82f966a602a8db43ad053c978bbd3501706515140ef63c2a58653ced497550b22917b09702604bc162c57e05beec5bb0c11fc2f9238b25e4527e24bab534e9ba458d92a597c3fee89f57053a4a1535771c9877b3ab101fb26937779cff75a95a296fafddf11280fafeb9bd5f2da4a88b43f3e4d5b1a9aed1f659d88f914548fba990603b0d4f14adda86d459c62701d3d6f007c7e50da9608a03eff5843f6739a8ec5ff33791394a5c075018b5d92bbd7d9874589f3561fbdfc44653bb6c56b522a3413"], 0x3, 0x39a, &(0x7f00000002c0)="$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") (async) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x1208840, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x39a, &(0x7f00000002c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x2) 1m37.747519008s ago: executing program 0 (id=8): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x188}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x49}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r4 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @mcast1, 0x3}, 0x1c) sendfile(r4, r0, &(0x7f0000000140)=0x1, 0x1000) 1m35.727679392s ago: executing program 0 (id=21): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m35.719290171s ago: executing program 32 (id=21): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m34.482303893s ago: executing program 5 (id=38): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0xd2d, &(0x7f0000000000)={0x0, 0xa936, 0x800, 0x2, 0x35a}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) r2 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r1, 0x1e, &(0x7f0000000180)={r2, 0x2, 0xfff, 0x0, 0xc}, 0x1) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000003c0)={0x1, 0x1, &(0x7f0000000200)=""/79, &(0x7f0000000280)=""/232, &(0x7f0000000380)=""/52, 0x8080000}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000400)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000440)=r4, 0x1) r5 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r5, 0x8915, &(0x7f0000000480)={'veth1\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000500)={0x0, @remote, @dev}, &(0x7f0000000540)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x80, 0x7800, 0x401, 0x3, {{0x2a, 0x4, 0x3, 0x9, 0xa8, 0x65, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x36}, @broadcast, {[@timestamp_prespec={0x44, 0x34, 0x42, 0x3, 0x5, [{@multicast2, 0x7}, {@multicast1, 0x1}, {@multicast2, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xd}, {@remote, 0x2}, {@rand_addr=0x64010100, 0x6e14}]}, @cipso={0x86, 0x23, 0xffffffffffffffff, [{0x7, 0xe, "bcca7bc8e1813e69bc9ebd90"}, {0x6, 0xf, "079fd062bfb7c68c2f3fbfc570"}]}, @timestamp_addr={0x44, 0x1c, 0x4c, 0x1, 0x5, [{@rand_addr=0x64010102, 0x2}, {@remote, 0xfffffffe}, {@loopback, 0xca}]}, @rr={0x7, 0x13, 0xff, [@multicast2, @multicast1, @local, @multicast2]}, @rr={0x7, 0x7, 0x25, [@broadcast]}, @generic={0x83, 0x5, "c1bd34"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000780)={'gre0\x00', &(0x7f0000000700)={'sit0\x00', 0x0, 0x700, 0x20, 0x5, 0x6e1, {{0xc, 0x4, 0x2, 0x3, 0x30, 0x66, 0x0, 0x8, 0x29, 0x0, @multicast2, @private=0xa010102, {[@timestamp_prespec={0x44, 0x1c, 0x38, 0x3, 0x9, [{@remote, 0x7}, {@local, 0xfffffffe}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x998}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000880)={'syztnl1\x00', &(0x7f0000000800)={'ip6tnl0\x00', 0x0, 0x29, 0xff, 0xff, 0x2, 0x58, @loopback, @loopback, 0x20, 0x8, 0x4, 0x2}}) sendmsg$nl_route(r6, &(0x7f00000009c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000980)={&(0x7f00000008c0)=@RTM_DELMDB={0xb8, 0x55, 0x4, 0x70bd27, 0x25dfdbff, {0x7, r7}, [@MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x1, 0x0, 0x3, {@ip4=@multicast2, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x1, 0x2, 0x1, {@ip4=@local, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x0, 0x1, 0x1, {@in6_addr=@mcast2, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x0, 0x2, 0x3, {@in6_addr=@private0={0xfc, 0x0, '\x00', 0x1}, 0x1800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r12, 0x1, 0x2, 0x9, {@ip4=@multicast1}}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x2000c044}, 0x8000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000a40)={&(0x7f0000000a00)=[0x0, 0x0], 0x2}) r13 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80), 0x50000, 0x0) r14 = syz_clone(0x1000000, &(0x7f0000000ac0)="eb660326cff32d306f8edd92c517643b0133d0d6efe621", 0x17, &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)="f0477e064fe8cc157b70e1b09b57eb755a20c511b0f78a4b7656178c5fee2c0e596834161c70d66c3551fafd2a9665bbafc13e4b8b89ae3fc20e486bd6e502941ab81aca9516e6d4d3b4c38bd9712ef349b75d79f0b05829640d61cdba899a9c13889c6831fd2476f96899c38dfe3ef3d43d6b515575fcb88506bff82f357cac76edee522e47fd2233a7c923655fda75286df3f1ad1a84637ac2504a70036b387132b4ae977c20bd0d6b546cfd7bcb107974d8d6eac3c2c274fdb43840b129dc55d9b3e20ab675c51c0c3a27eedb1080b9aa3b1eee2dcf46806fef730afba8d2255a6487c7ed3a98b02c19") fcntl$setown(r13, 0x8, r14) write$UHID_CREATE2(r4, &(0x7f0000000c80)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0xf8, 0x0, 0x538, 0x8, 0x60, 0x0, "ad5607dda63f276fe0872b1e90439863267fa183e0cc45461140f6f43f5168843da315fa4b8977f6cc099fb5769c07dbe3d7460f695dad0d4359b599feb6f12c08c84fab278445456f270624cd801f05134df118620694621bb7bb4d7bef53160d2659e5b25e2a084cc9f788d5bafb2470dedac629ce4deae7d194b60922bd1e8c84a8d24903a724bfcc743b0319354d682b5c567d0658b8652e3a78dd619d6a33596cbe41163721ec4222144ac192b27b795e3b5998b70381ef9237a685b375dfa8db872dea14d9fac255a6127470527da28427f24959bc2f9772e1bf7e84afbf3e90351f9507626c77d739287bf7c50a933137382760bb"}}, 0x210) r15 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$kcm(0x29, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000f00)=0x14) ioctl$sock_FIOGETOWN(r15, 0x8903, &(0x7f0000000f40)) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r4, 0x1e, &(0x7f0000000f80)={r5, 0x1, 0xfffffd8b, 0x3, 0xc}, 0x1) fcntl$setpipe(r13, 0x407, 0x9326) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1027fd71}]}, 0x78}, 0x1, 0x0, 0x0, 0x810}, 0x401) 1m34.425610677s ago: executing program 5 (id=41): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000140)={0x1, 0x4, 0xfd, 0x2, @vifc_lcl_ifindex, @rand_addr=0x64010102}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001080)={0xc, {"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", 0x1000}}, 0x1006) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0286404, &(0x7f0000000540)={&(0x7f0000ffa000/0x3000)=nil}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f0, 0x378, 0x180, 0x0, 0x2e0, 0x180, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x218}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3e8, 0xffffffff, 0xf0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3d, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x9, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0xf}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x2, {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) 1m33.532854553s ago: executing program 5 (id=59): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x14, &(0x7f0000000000), 0x1, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0xffffffffffffff1c}, 0x70) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000001400088080"], 0x44}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 1m33.406102079s ago: executing program 5 (id=61): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e22, 0xf, @private1, 0xfffffffa}, @in6={0xa, 0x4e24, 0x4, @mcast2, 0xa}], 0x58) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000001a80)={[{@orlov}, {@norecovery}, {@inlinecrypt}, {@resuid}]}, 0x8, 0x617, &(0x7f0000001100)="$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") mlock2(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) mremap(&(0x7f000037a000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f0000000100)={0x1, 0x0, 0x3, 0x15}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240), 0x5, r2, 0xdededede}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x601, 0x1, &(0x7f0000000180)=[r2], &(0x7f0000000480)=[0x2], &(0x7f0000000440)=[r5, r4], &(0x7f0000000040), 0x0, 0x6}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e22, 0xf, @private1, 0xfffffffa}, @in6={0xa, 0x4e24, 0x4, @mcast2, 0xa}], 0x58) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) (async) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000001a80)={[{@orlov}, {@norecovery}, {@inlinecrypt}, {@resuid}]}, 0x8, 0x617, &(0x7f0000001100)="$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") (async) mlock2(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1) (async) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) (async) mremap(&(0x7f000037a000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) (async) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) (async) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) (async) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f0000000100)={0x1, 0x0, 0x3, 0x15}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240), 0x5, r2, 0xdededede}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x601, 0x1, &(0x7f0000000180)=[r2], &(0x7f0000000480)=[0x2], &(0x7f0000000440)=[r5, r4], &(0x7f0000000040), 0x0, 0x6}) (async) 1m33.257893707s ago: executing program 5 (id=66): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x6, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0xff, &(0x7f0000000240)=""/255, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), r3) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000080)={0x30, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x30}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) getpgid(r5) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c020400) openat(0xffffffffffffff9c, 0x0, 0x0, 0x83) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x28}, [@ldst={0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x10}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 1m32.439401964s ago: executing program 1 (id=75): setgroups(0x0, 0x0) setresgid(0xee00, 0xee01, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file4\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000480)={{}, {0x1, 0x1}, [], {0x4, 0x1}, [{0x8, 0x3}], {0x10, 0x6}, {0x20, 0x6}}, 0x2c, 0x1) setreuid(0xffffffffffffffff, 0xee01) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x8000}) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000180)='./file4\x00', &(0x7f00000001c0), 0x1200009, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x5}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000340)={0x5, 0xe3, 0xcb, 0x3, 0x4, 0xa0d1, 0xffffffffffffffc1, 0x7000000000000000}, &(0x7f0000000380)={0x2, 0x7, 0x4, 0x4, 0xfffffffffffffffe, 0x6, 0xa}, &(0x7f00000003c0)={0x401, 0x89f, 0x5, 0x7, 0x6, 0x5cb, 0x705a, 0x6}, &(0x7f00000004c0)={r1, r2+60000000}, &(0x7f0000000540)={&(0x7f0000000500)={[0xff]}, 0x8}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x3, 0x4}, 0x48) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e04004220"], 0x7) syz_open_dev$vim2m(0x0, 0x8000, 0x2) r3 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="993adee7c03e9b34ed14000000557b04c62e9fbb70196e104ebefc3af065c81eda73b4ec687f734c44d4380f203b6e64b84aaddf93cda2ac8529c0b49d8a9f9d59653e346a8ec17fe3aad736b09aa9d8893e1d7fd5f5d89f6b25f46bc4f28b9e099084ee21fabd6b7c2f7b8c1a9c916998978154b156847594d627ca93577dec0b1af2f1de544a30a90faf1228fcee93ea2a7d91005a341f58dec3a460f174eb5c0bae73066e75ad74d5895366f5376b27d89c7ca790d8f140bb44983aedea2fb79b492499c4ccae9f57e49133", @ANYRES16=0x0, @ANYBLOB="0100000000000000000008000000"], 0x14}}, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) 1m32.330832957s ago: executing program 1 (id=76): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@deltfilter={0x2c, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff1, 0xc}, {0xffff, 0xffff}, {0x0, 0x8abf833ddfa404b6}}, [@TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x2c}}, 0x4c844) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x48) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e0000002e410000000000005c000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb=0xffffff7f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e}, 0x3f) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000100000400000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000002000000040300"/180], 0xfc}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x70bd28, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x80004}, [@migrate={0x50, 0x11, [{@in=@local, @in=@broadcast, @in=@multicast2, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0x2, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40180}, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0xd6) ioctl$FS_IOC_SETVERSION(r8, 0x40087602, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000180000000000000000000000711207000000000095"], &(0x7f0000001200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r5, 0xaa3a6000) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x17, &(0x7f00000003c0)=ANY=[@ANYBLOB="1846000006000000000000000000000900000000060000000000000002000000852000000200000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000d0000008500000006000000184a00000700"/184], &(0x7f00000005c0)='syzkaller\x00', 0x5, 0x8c, &(0x7f0000000600)=""/140, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, r9, 0x8, &(0x7f0000000700)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x1, 0xd, 0x2, 0x6}, 0x10, 0x0, r4, 0x1, 0x0, &(0x7f0000000780)=[{0x2, 0x2, 0xf, 0xc}], 0x10, 0xb}, 0x94) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x7101}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x181f02, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 1m31.287892768s ago: executing program 5 (id=79): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), r3) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x34, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x34}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb77, &(0x7f0000000c40)="$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") ptrace$poke(0x5, r0, &(0x7f0000000040), 0x5) openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000140)={0x474882, 0xa0, 0x8}, 0x18) close(0x4) 1m31.15631424s ago: executing program 33 (id=79): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), r3) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x34, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x34}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb77, &(0x7f0000000c40)="$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") ptrace$poke(0x5, r0, &(0x7f0000000040), 0x5) openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000140)={0x474882, 0xa0, 0x8}, 0x18) close(0x4) 1m29.55571576s ago: executing program 1 (id=93): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x41, 0x7fff0000}]}) prctl$PR_GET_ENDIAN(0x13, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050027bd4e00fcdbdf250600000008000300", @ANYRES32=r4, @ANYBLOB="0c00990096fbffff0e0000000a0018000303030303030000"], 0x34}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2040, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r6}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000c47e00110fbfdd6e432e670000000000e5ff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 1m29.369592669s ago: executing program 1 (id=94): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x12) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file2\x00', 0x0, &(0x7f0000000300)={[{@grpquota}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x7}}, {@jqfmt_vfsold}]}, 0xff, 0x4f8, &(0x7f0000001040)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000340), 0x4) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xf, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x6, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x28) close(0x3) sendfile(0xffffffffffffffff, r2, 0x0, 0x8) r6 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r6, &(0x7f0000000fc0)=[{{&(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001300)=[{&(0x7f0000002b00)='1', 0x1}], 0x1}}], 0x1, 0x48c4) r7 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x125}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b904021d080304000000e8fe03a1180015000600142603600e1208000f0000810401a80016040a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x8008) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0xfe33) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000140)={0x0, @dev, @initdev}, &(0x7f0000000280)=0xc) sendmmsg$inet_sctp(r6, &(0x7f0000000380)=[{&(0x7f0000000040)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, &(0x7f0000000300)=[@dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x18, 0x4000}], 0x1, 0x20000840) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x19, 0x4, &(0x7f00000003c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x27}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_clone(0xa4000, &(0x7f0000000240)="b57c5342aad5bd2b9c2fc1eafaa6a330e0a7bdb62342b21dbb4001", 0x1b, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000540)="0037228bf53edc2f5aea1cb218d4e2e940371d143b8e807c8ec260d2968acda9943b007a9c75aba77b973d2d0cffd58120a3f63eca04f04996e4790687ff71f5c51399b42916b3fc9b33430bc449207b1b5769d91bb0a613ae01cc8eafe7de40f383d5cdd8625cf8f327fd88527d4f2df4db13813909fdf8a8effa75d9dc826b094f39029690bb4b7a0510f0caa58eb2560828ca036fa72b83ae2d") sched_setscheduler(r9, 0x6, &(0x7f0000000300)=0x10001) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x1b, &(0x7f0000000cc0)=ANY=[@ANYBLOB="180000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005d090100000000c361976981d4c6a20018010000646c6c2500000000002020207b1af8fb00000000bfa100000000000007010000f8ffffffb702000008000000b703000068030000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0xb, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m29.186733903s ago: executing program 1 (id=97): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)="c1e27b900c1c0c06d320a1", 0xb}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) userfaultfd(0x80801) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000380)={0x29e9c931, 0x3, 0x0, 0x4}, 0x10) (async, rerun: 32) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40c0005}, 0x51) (async, rerun: 32) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) r5 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f00000031c0), 0x2, 0x0) write$smackfs_label(r5, 0x0, 0x2) (async) syz_usbip_server_init(0x1) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x9) (async, rerun: 64) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xde7, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async, rerun: 64) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r6}, 0x8) (async, rerun: 64) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x2, 0xffffffff, 0x0, 0x0, 0x0, 0xeeef0000}) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f00000000c0)) 1m28.736781708s ago: executing program 1 (id=100): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 1m28.65106549s ago: executing program 34 (id=100): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 5.540280583s ago: executing program 6 (id=180): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000051c0)={0x1, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0x9, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)=""/195, 0xc3}], 0x1}, 0x40}, {{0x0, 0x0, 0x0}, 0xfffff7fb}], 0x2, 0x0, 0x0) 4.253798813s ago: executing program 6 (id=186): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) 4.224088878s ago: executing program 4 (id=187): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)={0x20, r3, 0x1, 0x1000000, 0x0, {0x1e}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}}, 0x0) 3.027598542s ago: executing program 2 (id=191): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f0000000540)={0x0, 0xc808, 0x0, 0x2, 0x28e}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8c3, 0x1000, 0x2, 0x1af, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3c35, 0x2, 0x0, 0x330, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766c, 0x10000, 0x1, 0x2db, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x2, 0x0, 0x2b7}}], 0x4, &(0x7f0000001f40)={0x2e, 0x1c, 0x0, 0xffffffffffffffff, 0xc0107526, 0x0, 0x0, 0x0, 0x1, {0x10}, 0x0, r5, '\x00', {0x3, 0xb55, 0x100104, 0x0}}, &(0x7f0000000180)) 3.027302874s ago: executing program 2 (id=193): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @dev={0xac, 0x14, 0x14, 0x2a}}, 0xc) close(0x3) 3.009414955s ago: executing program 2 (id=194): r0 = socket$inet6(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x1, 0x0, 0xfffffffffffffffc, 0x8}) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.877015759s ago: executing program 4 (id=198): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@quota}]}, 0xff, 0x26f, &(0x7f0000005b00)="$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") getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/239, 0xef) 2.460889491s ago: executing program 2 (id=199): sched_setscheduler(0x0, 0x3, 0x0) mmap(&(0x7f00003fc000/0x4000)=nil, 0x4000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0xffffc000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() syz_ublk_setup_io_uring(0x400788d, 0x0, 0x0, 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000042c0), 0x101041, 0x0) write$vga_arbiter(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='unlock io'], 0xe) 2.183509481s ago: executing program 4 (id=200): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r2, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600602fb96dbcf706e105000000890600001144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.795405986s ago: executing program 4 (id=203): r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000002340)={0x198, 0x0, r1, [{0x1400000000000007, 0xffffffffffffffff, 0x8, 0x0, '@-/\\&\r\x80-'}, {0x0, 0x2, 0x14f, 0x3, '/>\rv/cuse\x00\xe5\xec\xd8\x0f\xddP\x02\x1bn\xb8\xde|\x92zQC*\xaf=\xff\x01$\xeeW=?\xc3\x94~\xf0\xdanT\xb1\xf1)\xe6\x98\x83\x85P\xa7\x85R\xf3\xe5\x12TkR\xe45\xd1\xd6\x89/i(\x1e]\x8f\xc8\xfd\xf9L\xc9\xf3W\x1e(\x04\x16j\r\x9as\x87\xdb\xff\x13\"YL\xe5\xbdQ]\xb2\xebG+\xde\"\xe5F\xd8\xe0N\x03\xae\t\xb9\xb1M\x14b\n!\xab:c\x9c\xc8\x9f\xd8\x80\xed\x1bao$W\x14Y\f\xf34Q\x05\xd1\xe9\xcaLz\xd6\x90\xfe\x99\x8f\x88m\x01\xeb\x88\xe0\x00>2\xa2\x93\x89a\"\xeb\xee V\xad\xc4|\xff#\xday\x18\xef\x80S\x97\x18io\xe5L\xe5\xce\x1c\xe0\x94\xa28\x869\xd4I\xff\xe8\xdc\xa5\xd1\xae\x9e\xc3\x87\xc5[\xa5<\a^\xceQ\xce\xd3>\x94nH\x0fw\xa0\xdd\xd7\'0K\x0eV\xc6,\x86\xb9${\\\x9dd\x7f\x8d\x1b\x0f\x01+\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\xd9L\xd0P\xa7\xf4\xbf\x92t|%\xcd\x16\x80\x1cI\x9f\xb8\xe8\x9eO\xd8\x18\xd9\xe4K\bu\tG\xec\xc2\xcf\xc7\xaa|\xdcQ\xfcU\x0e\xcb\x9cDv\x85F\x89\xdd,*p\xe1(o9\xd0{u\xe1\xf6\xba[\xa7\xe8\xb5\xa8\x91\xb2\xe9gI\x1d\xc1P\xcc\xcdYV'}]}, 0x198) 1.79507611s ago: executing program 4 (id=204): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.756255313s ago: executing program 4 (id=206): ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000180)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$llc(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, 0x0, &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="71050203020301100436e45d9f4eeace3cca373eef3215a3dd8488"], 0xf4) 1.362977153s ago: executing program 2 (id=216): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.335719286s ago: executing program 2 (id=218): sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16", 0x39, 0x840, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050"], 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0x8010) 1.267449843s ago: executing program 7 (id=219): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 1.200248424s ago: executing program 3 (id=220): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14008051}}, {{&(0x7f00000000c0)=@file={0x1, './file0/file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x2, 0x0) 1.109678147s ago: executing program 7 (id=221): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@quota}]}, 0xff, 0x26f, &(0x7f0000005b00)="$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") getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/239, 0xef) 1.063529582s ago: executing program 3 (id=222): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000180)=0x1, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xf9) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x1) 1.048178347s ago: executing program 7 (id=223): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000000000)=""/55, 0x37, 0x10120, 0x0, 0x0) 610.689734ms ago: executing program 3 (id=224): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x0, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x402, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x9, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x5, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x2, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x100005, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x4, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd36, 0x9, 0x8000, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x5, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x6]}, @TCA_TBF_PTAB={0x404, 0x3, [0x80000800, 0x9, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0x6, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0xe, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd4, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xffff0000, 0x7, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x7ff, 0xfffffffe, 0x0, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x2, 0x1, 0x2, 0x2, 0x5, 0x6, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x739f, 0x4, 0x0, 0x1856, 0x43d, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefbc, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600602fb96dbcf706e105000000890600001144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 531.601099ms ago: executing program 6 (id=225): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000000)={@void, @void, @eth={@broadcast, @remote, @val={@val={0x88a8, 0x2, 0x1, 0x4}, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0x67, 0x0, 0x7, 0x32, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, "c1c30bab373ff7fe"}}}}}, 0x32) 511.73958ms ago: executing program 3 (id=226): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) 511.202847ms ago: executing program 6 (id=227): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000042c0), 0x101041, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='unlock io'], 0xe) 491.435421ms ago: executing program 6 (id=228): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000002340)={0x198, 0x0, 0x0, [{0x1400000000000007, 0xffffffffffffffff, 0x8, 0x0, '@-/\\&\r\x80-'}, {0x0, 0x2, 0x14f, 0x3, '/>\rv/cuse\x00\xe5\xec\xd8\x0f\xddP\x02\x1bn\xb8\xde|\x92zQC*\xaf=\xff\x01$\xeeW=?\xc3\x94~\xf0\xdanT\xb1\xf1)\xe6\x98\x83\x85P\xa7\x85R\xf3\xe5\x12TkR\xe45\xd1\xd6\x89/i(\x1e]\x8f\xc8\xfd\xf9L\xc9\xf3W\x1e(\x04\x16j\r\x9as\x87\xdb\xff\x13\"YL\xe5\xbdQ]\xb2\xebG+\xde\"\xe5F\xd8\xe0N\x03\xae\t\xb9\xb1M\x14b\n!\xab:c\x9c\xc8\x9f\xd8\x80\xed\x1bao$W\x14Y\f\xf34Q\x05\xd1\xe9\xcaLz\xd6\x90\xfe\x99\x8f\x88m\x01\xeb\x88\xe0\x00>2\xa2\x93\x89a\"\xeb\xee V\xad\xc4|\xff#\xday\x18\xef\x80S\x97\x18io\xe5L\xe5\xce\x1c\xe0\x94\xa28\x869\xd4I\xff\xe8\xdc\xa5\xd1\xae\x9e\xc3\x87\xc5[\xa5<\a^\xceQ\xce\xd3>\x94nH\x0fw\xa0\xdd\xd7\'0K\x0eV\xc6,\x86\xb9${\\\x9dd\x7f\x8d\x1b\x0f\x01+\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\xd9L\xd0P\xa7\xf4\xbf\x92t|%\xcd\x16\x80\x1cI\x9f\xb8\xe8\x9eO\xd8\x18\xd9\xe4K\bu\tG\xec\xc2\xcf\xc7\xaa|\xdcQ\xfcU\x0e\xcb\x9cDv\x85F\x89\xdd,*p\xe1(o9\xd0{u\xe1\xf6\xba[\xa7\xe8\xb5\xa8\x91\xb2\xe9gI\x1d\xc1P\xcc\xcdYV'}]}, 0x198) 474.203399ms ago: executing program 3 (id=229): openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) r1 = syz_open_dev$ublk_chdev(&(0x7f0000002000), 0x0, 0x2) syz_ublk_setup_queues(r1, 0x0, &(0x7f0000000540)={0x0, 0xc808, 0x0, 0x2, 0x28e}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8c3, 0x1000, 0x2, 0x1af, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3c35, 0x2, 0x0, 0x330, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766c, 0x10000, 0x1, 0x2db, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x2, 0x0, 0x2b7}}], 0x4, &(0x7f0000001f40)={0x2e, 0x1c, 0x0, r1, 0xc0107526, 0x0, 0x0, 0x0, 0x1, {0x10}, 0x0, 0x0, '\x00', {0x3, 0xb55, 0x100104, 0x0}}, &(0x7f0000000180)) 473.778656ms ago: executing program 6 (id=230): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000051c0)={0x1, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0x9, 0x4) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)=""/195, 0xc3}], 0x1}, 0x40}, {{0x0, 0x0, 0x0}, 0xfffff7fb}], 0x2, 0x0, 0x0) 407.498009ms ago: executing program 3 (id=231): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000380)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@errors_remount}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010062726964"], 0x40}}, 0x0) lremovexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='user.incfs.id\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mprotect(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0xb) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000180)) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0585605, &(0x7f00000005c0)={0x0, 0x0, @raw_data=[0x80b, 0x2, 0x1013, 0x1, 0x10008, 0x7f, 0xff, 0x6, 0x7, 0x8, 0x80, 0x4, 0x80000004, 0x4, 0x3, 0xeb]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x3c, r5, 0x1, 0x70bd2c, 0x0, {0x54}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb8, 0x1}}}]}, 0x3c}}, 0xc084) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) ioctl$EXT4_IOC_MOVE_EXT(r7, 0x40305829, &(0x7f0000000100)={0x17c04, 0xffffffffffffffff, 0x2, 0x8100000002}) 40.956937ms ago: executing program 7 (id=232): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x8) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r3, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x10000, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r6, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 19.934372ms ago: executing program 7 (id=233): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) getdents64(r0, &(0x7f0000000400)=""/239, 0xef) 0s ago: executing program 7 (id=234): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x82000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x2}) mmap$IORING_OFF_SQ_RING(0x0, 0x2001000, 0x200000b, 0x12, r2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.184' (ED25519) to the list of known hosts. [ 28.114580][ T4695] cgroup: Unknown subsys name 'net' [ 28.274686][ T4695] cgroup: Unknown subsys name 'cpuset' [ 28.276629][ T4695] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.416760][ T4695] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 29.244630][ T4710] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.247106][ T4711] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.247260][ T4711] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.249772][ T4711] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.249888][ T4711] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.252476][ T4711] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.252548][ T4711] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.255486][ T4711] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.256236][ T4711] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.256575][ T4711] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.256796][ T4711] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.259483][ T4715] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.260831][ T4715] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.262746][ T4711] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.264828][ T4715] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.266543][ T4715] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.269213][ T4715] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.270813][ T4715] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.272415][ T4715] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.273721][ T4714] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.274581][ T4721] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.276134][ T4721] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.277983][ T4715] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.280432][ T4721] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.286243][ T4721] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.574949][ T4707] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.575529][ T4707] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.575616][ T4707] bridge_slave_0: entered allmulticast mode [ 29.576107][ T4707] bridge_slave_0: entered promiscuous mode [ 29.578663][ T4707] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.578714][ T4707] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.578764][ T4707] bridge_slave_1: entered allmulticast mode [ 29.579230][ T4707] bridge_slave_1: entered promiscuous mode [ 29.607423][ T4707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.608525][ T4707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.639802][ T4707] team0: Port device team_slave_0 added [ 29.640779][ T4707] team0: Port device team_slave_1 added [ 29.672843][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.672865][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.672878][ T4707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.686623][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.686645][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.686663][ T4707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.695457][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.696891][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.698146][ T4709] bridge_slave_0: entered allmulticast mode [ 29.699679][ T4709] bridge_slave_0: entered promiscuous mode [ 29.712880][ T4707] hsr_slave_0: entered promiscuous mode [ 29.713535][ T4707] hsr_slave_1: entered promiscuous mode [ 29.717481][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.718753][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.720121][ T4709] bridge_slave_1: entered allmulticast mode [ 29.721696][ T4709] bridge_slave_1: entered promiscuous mode [ 29.745354][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.746801][ T4708] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.748183][ T4708] bridge_slave_0: entered allmulticast mode [ 29.749661][ T4708] bridge_slave_0: entered promiscuous mode [ 29.755708][ T4709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.758281][ T4709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.766299][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.767691][ T4708] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.769044][ T4708] bridge_slave_1: entered allmulticast mode [ 29.770617][ T4708] bridge_slave_1: entered promiscuous mode [ 29.782202][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.782282][ T4719] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.782334][ T4719] bridge_slave_0: entered allmulticast mode [ 29.782757][ T4719] bridge_slave_0: entered promiscuous mode [ 29.784212][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.784232][ T4719] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.784281][ T4719] bridge_slave_1: entered allmulticast mode [ 29.784849][ T4719] bridge_slave_1: entered promiscuous mode [ 29.799574][ T4709] team0: Port device team_slave_0 added [ 29.801529][ T4708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.802466][ T4708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.808011][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.809247][ T4713] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.810472][ T4713] bridge_slave_0: entered allmulticast mode [ 29.811924][ T4713] bridge_slave_0: entered promiscuous mode [ 29.816319][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.817687][ T4713] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.818909][ T4713] bridge_slave_1: entered allmulticast mode [ 29.820511][ T4713] bridge_slave_1: entered promiscuous mode [ 29.822664][ T4709] team0: Port device team_slave_1 added [ 29.826770][ T4708] team0: Port device team_slave_0 added [ 29.829637][ T4719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.836417][ T4708] team0: Port device team_slave_1 added [ 29.839685][ T4719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.848147][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.848166][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.848553][ T4709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.857538][ T4713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.859356][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.859379][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.859392][ T4709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.867752][ T4719] team0: Port device team_slave_0 added [ 29.869671][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.869946][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.869969][ T4708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.870767][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.870778][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.870791][ T4708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.871909][ T4713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.880497][ T4719] team0: Port device team_slave_1 added [ 29.898701][ T4713] team0: Port device team_slave_0 added [ 29.902968][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.902988][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.902999][ T4719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.905385][ T4709] hsr_slave_0: entered promiscuous mode [ 29.905719][ T4709] hsr_slave_1: entered promiscuous mode [ 29.905937][ T4709] debugfs: 'hsr0' already exists in 'hsr' [ 29.905972][ T4709] Cannot create hsr debugfs directory [ 29.911259][ T4713] team0: Port device team_slave_1 added [ 29.916470][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.916496][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.916524][ T4719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.941765][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.941789][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.942102][ T4713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.942778][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.942785][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.942798][ T4713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.957823][ T4708] hsr_slave_0: entered promiscuous mode [ 29.958162][ T4708] hsr_slave_1: entered promiscuous mode [ 29.958354][ T4708] debugfs: 'hsr0' already exists in 'hsr' [ 29.958363][ T4708] Cannot create hsr debugfs directory [ 29.962232][ T4719] hsr_slave_0: entered promiscuous mode [ 29.963740][ T4719] hsr_slave_1: entered promiscuous mode [ 29.963976][ T4719] debugfs: 'hsr0' already exists in 'hsr' [ 29.963986][ T4719] Cannot create hsr debugfs directory [ 29.988033][ T4707] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.991108][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.999848][ T4713] hsr_slave_0: entered promiscuous mode [ 30.000176][ T4713] hsr_slave_1: entered promiscuous mode [ 30.000396][ T4713] debugfs: 'hsr0' already exists in 'hsr' [ 30.000406][ T4713] Cannot create hsr debugfs directory [ 30.004361][ T4707] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.006393][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.006677][ T4707] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.008574][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.020083][ T4707] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.022076][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.088951][ T4707] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.089005][ T4707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.089141][ T4707] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.089169][ T4707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.117878][ T4709] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.120305][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.121916][ T4709] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.124343][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.128810][ T4709] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.131065][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.131581][ T4709] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.133042][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.148916][ T4707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.158250][ T4719] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.160681][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.162311][ T4719] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.164705][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.166692][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.166750][ T4709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.166832][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.166868][ T4709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.169764][ T4707] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.177322][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.178972][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.189716][ T4719] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.191780][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.204436][ T4719] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.208637][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.214184][ T4708] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.216047][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.216554][ T4708] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.217928][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.223513][ T4708] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.225587][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.227188][ T4708] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.229016][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.269933][ T4713] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.272122][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.272918][ T4713] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.275919][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.281496][ T4713] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.284412][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.291559][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.291725][ T4713] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.294462][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.316676][ T4709] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.336664][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.336728][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.348713][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.348757][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.368378][ T4708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.371304][ T4719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.376240][ T4707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.390982][ T4709] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.391020][ T4709] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.397415][ T4708] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.412306][ T4719] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.416091][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.416154][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.424814][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.424853][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.426005][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.426029][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.449190][ T4713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.456103][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.456152][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.467565][ T4707] veth0_vlan: entered promiscuous mode [ 30.486856][ T4713] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.490867][ T4707] veth1_vlan: entered promiscuous mode [ 30.498924][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.498968][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.506371][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.506415][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.525943][ T4713] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.527818][ T4713] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.531782][ T4707] veth0_macvtap: entered promiscuous mode [ 30.559797][ T4707] veth1_macvtap: entered promiscuous mode [ 30.572529][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.582126][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.602317][ T3450] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.602454][ T3450] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.602486][ T3450] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.602515][ T3450] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.639279][ T4708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.656924][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.656951][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.668130][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.674663][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.674689][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.702432][ T4708] veth0_vlan: entered promiscuous mode [ 30.709956][ T4708] veth1_vlan: entered promiscuous mode [ 30.720596][ T4709] veth0_vlan: entered promiscuous mode [ 30.722196][ T4709] veth1_vlan: entered promiscuous mode [ 30.725885][ T4707] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.748997][ T4713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.762477][ T4708] veth0_macvtap: entered promiscuous mode [ 30.764691][ T4709] veth0_macvtap: entered promiscuous mode [ 30.766837][ T4709] veth1_macvtap: entered promiscuous mode [ 30.771171][ T4719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.776236][ T4708] veth1_macvtap: entered promiscuous mode [ 30.781639][ T4713] veth0_vlan: entered promiscuous mode [ 30.796588][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.799513][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.809855][ T4713] veth1_vlan: entered promiscuous mode [ 30.813078][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.819874][ T39] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.819918][ T39] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.819937][ T39] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.819954][ T39] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.832613][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.835949][ T15] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.836293][ T39] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.836323][ T39] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.836340][ T39] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.890042][ T4713] veth0_macvtap: entered promiscuous mode [ 30.912724][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.912750][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.917307][ T4891] loop0: detected capacity change from 0 to 512 [ 30.918267][ T4713] veth1_macvtap: entered promiscuous mode [ 30.928379][ T4719] veth0_vlan: entered promiscuous mode [ 30.933126][ T4891] tmpfs: Unexpected value for 'inode32' [ 30.951203][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.952716][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.961514][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.962807][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.984109][ T4719] veth1_vlan: entered promiscuous mode [ 30.988399][ T3450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.988428][ T3450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.993047][ T15] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.993663][ T227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.993676][ T227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.995271][ T15] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.995292][ T15] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.995308][ T15] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.022855][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.022879][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.031661][ T4719] veth0_macvtap: entered promiscuous mode [ 31.035368][ T4719] veth1_macvtap: entered promiscuous mode [ 31.049067][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.056990][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.062995][ T15] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.063118][ T15] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.068589][ T15] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.069092][ T227] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.077120][ T227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.077149][ T227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.166439][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.166462][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.184428][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.185930][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.381008][ T4718] Bluetooth: hci4: command tx timeout [ 31.381162][ T4711] Bluetooth: hci3: command tx timeout [ 31.381294][ T4711] Bluetooth: hci2: command tx timeout [ 31.384705][ T4721] Bluetooth: hci1: command tx timeout [ 32.236454][ T4715] Bluetooth: hci4: Dropping invalid advertising data [ 32.254501][ T4910] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 32.254522][ T4910] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 32.277018][ T4913] capability: warning: `syz.3.9' uses deprecated v2 capabilities in a way that may be insecure [ 32.521863][ T4928] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 32.811684][ T4962] netlink: 32 bytes leftover after parsing attributes in process `syz.4.16'. [ 32.811917][ T4962] sch_fq: defrate 0 ignored. [ 32.829281][ T4965] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17'. [ 32.829315][ T4965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17'. [ 32.846809][ T4965] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17'. [ 32.846846][ T4965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17'. [ 32.846901][ T4965] Zero length message leads to an empty skb [ 32.852817][ T40] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 32.852928][ T40] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 32.852953][ T40] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 32.852967][ T40] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 32.893703][ T4972] syz.3.19 uses obsolete (PF_INET,SOCK_PACKET) [ 33.007980][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.060958][ T4721] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 33.062461][ T4721] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 33.064248][ T4721] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 33.066089][ T4721] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 33.066568][ T4721] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 33.114452][ T4998] loop2: detected capacity change from 0 to 512 [ 33.116273][ T4998] EXT4-fs: Ignoring removed mblk_io_submit option [ 33.144166][ T4998] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.192355][ T4998] bond0: entered promiscuous mode [ 33.193515][ T4998] bond_slave_0: entered promiscuous mode [ 33.194758][ T4998] bond_slave_1: entered promiscuous mode [ 33.225239][ T5007] bond0: left promiscuous mode [ 33.227484][ T5007] bond_slave_0: left promiscuous mode [ 33.227601][ T5007] bond_slave_1: left promiscuous mode [ 33.248457][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.280869][ T4989] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.282332][ T4989] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.285118][ T4989] bridge_slave_0: entered allmulticast mode [ 33.286680][ T4989] bridge_slave_0: entered promiscuous mode [ 33.288746][ T4989] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.290134][ T4989] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.291799][ T4989] bridge_slave_1: entered allmulticast mode [ 33.296637][ T4989] bridge_slave_1: entered promiscuous mode [ 33.317614][ T4989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.326435][ T4989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.350466][ T4989] team0: Port device team_slave_0 added [ 33.355382][ T4989] team0: Port device team_slave_1 added [ 33.365624][ T4989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.365643][ T4989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.371862][ T4989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.372474][ T4989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.372481][ T4989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.372493][ T4989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.408383][ T4989] hsr_slave_0: entered promiscuous mode [ 33.416949][ T4989] hsr_slave_1: entered promiscuous mode [ 33.417189][ T4989] debugfs: 'hsr0' already exists in 'hsr' [ 33.417205][ T4989] Cannot create hsr debugfs directory [ 33.433298][ T4715] Bluetooth: hci2: command tx timeout [ 33.433367][ T4721] Bluetooth: hci4: command tx timeout [ 33.489219][ T4989] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 33.491488][ T4989] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.492583][ T4989] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 33.492709][ T5027] lo speed is unknown, defaulting to 1000 [ 33.496637][ T4989] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.498894][ T5027] lo speed is unknown, defaulting to 1000 [ 33.499343][ T5027] lo speed is unknown, defaulting to 1000 [ 33.504066][ T4989] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 33.504733][ T5028] netlink: 'syz.2.28': attribute type 21 has an invalid length. [ 33.504746][ T5028] IPv6: NLM_F_CREATE should be specified when creating new route [ 33.510161][ T4989] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.512074][ T4989] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 33.515939][ T4989] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.523961][ T4721] Bluetooth: hci1: command tx timeout [ 33.540649][ T5027] infiniband sz1: set active [ 33.541087][ T5027] infiniband sz1: added lo [ 33.543444][ T4900] lo speed is unknown, defaulting to 1000 [ 33.565731][ T5027] RDS/IB: sz1: added [ 33.565833][ T5027] smc: adding ib device sz1 with port count 1 [ 33.565858][ T5027] smc: ib device sz1 port 1 has no pnetid [ 33.567422][ T4900] lo speed is unknown, defaulting to 1000 [ 33.575314][ T4989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.578273][ T4989] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.580930][ T5037] loop1: detected capacity change from 0 to 128 [ 33.582900][ T5027] lo speed is unknown, defaulting to 1000 [ 33.589475][ T3232] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.589527][ T3232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.590071][ T3232] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.590091][ T3232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.601048][ T5037] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.616898][ T5037] netlink: 'syz.1.29': attribute type 1 has an invalid length. [ 33.618459][ T5037] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 33.618526][ T5037] IPv6: NLM_F_CREATE should be set when creating new route [ 33.618541][ T5037] IPv6: NLM_F_CREATE should be set when creating new route [ 33.623022][ T5037] netlink: 'syz.1.29': attribute type 1 has an invalid length. [ 33.631296][ T5037] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 33.670578][ T5037] fscrypt: Adiantum using implementation "adiantum(xchacha12-lib,aes-lib)" [ 33.680894][ T5027] lo speed is unknown, defaulting to 1000 [ 33.698996][ T4709] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 33.727827][ T5050] loop4: detected capacity change from 0 to 256 [ 33.779699][ T5027] lo speed is unknown, defaulting to 1000 [ 33.832839][ T4989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.901122][ T5027] lo speed is unknown, defaulting to 1000 [ 33.928820][ T4989] veth0_vlan: entered promiscuous mode [ 33.932335][ T4989] veth1_vlan: entered promiscuous mode [ 33.943575][ T5027] lo speed is unknown, defaulting to 1000 [ 33.954720][ T4989] veth0_macvtap: entered promiscuous mode [ 33.956157][ T4989] veth1_macvtap: entered promiscuous mode [ 33.965270][ T4989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.969719][ T4989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.973329][ T3232] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.973373][ T3232] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.973395][ T3232] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.973410][ T3232] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.014127][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.014153][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.032081][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.032108][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.051019][ T5027] lo speed is unknown, defaulting to 1000 [ 34.086054][ T5077] tipc: Started in network mode [ 34.086087][ T5077] tipc: Node identity b28e0bd61c, cluster identity 4711 [ 34.086339][ T5077] tipc: Enabled bearer , priority 0 [ 34.086665][ T5077] syzkaller0: entered promiscuous mode [ 34.086677][ T5077] syzkaller0: entered allmulticast mode [ 34.096370][ T5077] tipc: Resetting bearer [ 34.099603][ T5077] ======================================================= [ 34.099603][ T5077] WARNING: The mand mount option has been deprecated and [ 34.099603][ T5077] and is ignored by this kernel. Remove the mand [ 34.099603][ T5077] option from the mount to silence this warning. [ 34.099603][ T5077] ======================================================= [ 34.103268][ T5077] overlayfs: overlapping lowerdir path [ 34.117091][ T5077] overlayfs: overlapping lowerdir path [ 34.119377][ T5059] lo speed is unknown, defaulting to 1000 [ 34.121500][ T5059] lo speed is unknown, defaulting to 1000 [ 34.122031][ T5059] lo speed is unknown, defaulting to 1000 [ 34.122980][ T5059] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 34.124509][ T5059] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 34.128757][ T5059] lo speed is unknown, defaulting to 1000 [ 34.129138][ T5059] lo speed is unknown, defaulting to 1000 [ 34.129467][ T5059] lo speed is unknown, defaulting to 1000 [ 34.129780][ T5059] lo speed is unknown, defaulting to 1000 [ 34.130095][ T5059] lo speed is unknown, defaulting to 1000 [ 34.130399][ T5059] lo speed is unknown, defaulting to 1000 [ 34.140629][ T5076] tipc: Resetting bearer [ 34.145976][ T5076] tipc: Disabling bearer [ 34.164612][ T5082] loop2: detected capacity change from 0 to 512 [ 34.166621][ T5082] EXT4-fs: Ignoring removed nobh option [ 34.168866][ T5082] EXT4-fs: Ignoring removed orlov option [ 34.172657][ T5082] EXT4-fs error (device loop2): __ext4_iget:5481: inode #11: block 1: comm syz.2.37: invalid block [ 34.175898][ T5082] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 34.176943][ T5082] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.37: couldn't read orphan inode 11 (err -117) [ 34.177020][ T5082] loop2: lost filesystem error report for type 5 error -117 [ 34.181410][ T5082] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.186620][ T5084] loop5: detected capacity change from 0 to 4096 [ 34.195138][ T5084] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.198093][ T5086] EXT4-fs error (device loop2): htree_dirblock_to_tree:1051: inode #2: comm syz.2.37: Directory hole found for htree leaf block 0 [ 34.200854][ T5084] netlink: 24 bytes leftover after parsing attributes in process `syz.5.36'. [ 34.219206][ T4989] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.225377][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.258245][ T5093] loop2: detected capacity change from 0 to 512 [ 34.262429][ T5093] EXT4-fs (loop2): Test dummy encryption mode enabled [ 34.275891][ T5093] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.39: inode has both inline data and extents flags [ 34.275920][ T5093] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 34.276037][ T5093] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.39: couldn't read orphan inode 15 (err -117) [ 34.276049][ T5093] loop2: lost filesystem error report for type 5 error -117 [ 34.276552][ T5093] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.289372][ T5093] tipc: Started in network mode [ 34.290308][ T5093] tipc: Node identity ac14140f, cluster identity 4711 [ 34.292226][ T5093] tipc: Enabled bearer , priority 10 [ 34.308926][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.403000][ T5106] binder: 5104:5106 ioctl c0306201 20000100 returned -14 [ 34.476649][ T5124] batadv0: entered promiscuous mode [ 34.478385][ T5124] batadv0: left promiscuous mode [ 34.493996][ T5125] batadv0: entered promiscuous mode [ 34.495781][ T5125] batadv0: left promiscuous mode [ 34.503834][ T30] audit: type=1326 audit(34.500:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5127 comm="syz.2.48" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6b77b68 code=0x0 [ 34.508698][ T5126] pimreg: entered allmulticast mode [ 34.605448][ T30] audit: type=1326 audit(34.600:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5127 comm="syz.2.48" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6b77b68 code=0x0 [ 34.770429][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.895012][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.943663][ T1517] psmouse serio0: Failed to reset mouse on : -5 [ 35.006199][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.062076][ T5164] mmap: syz.4.55 (5164): VmData 37625856 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 35.114596][ T4721] Bluetooth: hci0: command tx timeout [ 35.147333][ T5171] netlink: 12 bytes leftover after parsing attributes in process `syz.4.56'. [ 35.224356][ T5179] loop1: detected capacity change from 0 to 128 [ 35.225175][ T5179] FAT-fs (loop1): bogus number of reserved sectors [ 35.225185][ T5179] FAT-fs (loop1): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 35.225193][ T5179] FAT-fs (loop1): Can't find a valid FAT filesystem [ 35.265167][ T12] bridge_slave_1: left allmulticast mode [ 35.265209][ T12] bridge_slave_1: left promiscuous mode [ 35.265622][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.276025][ T12] bridge_slave_0: left allmulticast mode [ 35.276058][ T12] bridge_slave_0: left promiscuous mode [ 35.276135][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.329811][ T5199] loop5: detected capacity change from 0 to 1024 [ 35.331882][ T5199] EXT4-fs: Ignoring removed orlov option [ 35.331921][ T5199] EXT4-fs: inline encryption not supported [ 35.334052][ T5199] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 35.334148][ T5199] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 35.340617][ T5199] EXT4-fs (loop5): invalid journal inode [ 35.340685][ T5199] EXT4-fs (loop5): can't get journal size [ 35.347468][ T5199] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 35.364059][ T4721] Bluetooth: hci3: command tx timeout [ 35.451233][ T5214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.65'. [ 35.485863][ T4989] EXT4-fs error (device loop5): __ext4_iget:5481: inode #15: block 1803188595: comm syz-executor: invalid block [ 35.488878][ T4989] EXT4-fs error (device loop5): __ext4_iget:5481: inode #15: block 1803188595: comm syz-executor: invalid block [ 35.488991][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 35.513540][ T4721] Bluetooth: hci4: command tx timeout [ 35.513548][ T4715] Bluetooth: hci2: command tx timeout [ 35.516286][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 35.527141][ T12] bond0 (unregistering): Released all slaves [ 35.535172][ T4722] tipc: Node number set to 2886997007 [ 35.593766][ T4721] Bluetooth: hci1: command tx timeout [ 35.617130][ T5229] loop1: detected capacity change from 0 to 2048 [ 35.641619][ T5229] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.735726][ T4397] 8021q: adding VLAN 0 to HW filter on device eth0 [ 35.788132][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.245481][ T5270] process 'syz.1.74' launched './file0' with NULL argv: empty string added [ 36.397122][ T4397] 8021q: adding VLAN 0 to HW filter on device eth1 [ 36.462569][ T12] hsr_slave_0: left promiscuous mode [ 36.464434][ T12] hsr_slave_1: left promiscuous mode [ 36.472569][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.476539][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.478688][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.479984][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.493613][ T12] veth1_macvtap: left promiscuous mode [ 36.493657][ T12] veth0_macvtap: left promiscuous mode [ 36.493705][ T12] veth1_vlan: left promiscuous mode [ 36.493748][ T12] veth0_vlan: left promiscuous mode [ 36.658030][ T12] team0 (unregistering): Port device team_slave_1 removed [ 36.664152][ T12] team0 (unregistering): Port device team_slave_0 removed [ 36.725774][ T5299] loop2: detected capacity change from 0 to 512 [ 36.726222][ T5299] ext4: Unknown parameter 'audit' [ 36.821135][ T4397] 8021q: adding VLAN 0 to HW filter on device eth2 [ 37.216375][ T4397] 8021q: adding VLAN 0 to HW filter on device eth3 [ 37.446757][ T4721] Bluetooth: hci3: command tx timeout [ 37.448905][ T5202] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.550971][ T5324] netlink: 64 bytes leftover after parsing attributes in process `syz.2.78'. [ 37.597667][ T4721] Bluetooth: hci4: command tx timeout [ 37.619142][ T3232] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.684198][ T4721] Bluetooth: hci1: command tx timeout [ 37.688274][ T4715] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.690477][ T4715] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.692273][ T4715] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.694257][ T4715] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.695990][ T4715] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.825803][ T5328] lo speed is unknown, defaulting to 1000 [ 37.865539][ T5328] lo speed is unknown, defaulting to 1000 [ 38.000290][ T5341] loop4: detected capacity change from 0 to 512 [ 38.005006][ T5341] loop4: detected capacity change from 0 to 512 [ 38.021799][ T5328] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.021850][ T5328] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.021914][ T5328] bridge_slave_0: entered allmulticast mode [ 38.022329][ T5328] bridge_slave_0: entered promiscuous mode [ 38.023005][ T5328] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.023024][ T5328] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.023116][ T5328] bridge_slave_1: entered allmulticast mode [ 38.037780][ T5341] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.040728][ T5341] EXT4-fs error (device loop4): ext4_lookup:1782: inode #12: comm syz.4.81: 'file0' linked to parent dir [ 38.040913][ T5328] bridge_slave_1: entered promiscuous mode [ 38.042978][ T5341] netlink: 20 bytes leftover after parsing attributes in process `syz.4.81'. [ 38.047762][ T5341] netlink: 124 bytes leftover after parsing attributes in process `syz.4.81'. [ 38.063143][ T5328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.066433][ T5283] loop1: detected capacity change from 0 to 4096 [ 38.069144][ T5328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.097881][ T5283] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.101461][ T5328] team0: Port device team_slave_0 added [ 38.102578][ T5328] team0: Port device team_slave_1 added [ 38.117096][ T5328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.118670][ T5328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.123447][ T5328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.124268][ T5328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.124316][ T5328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.124334][ T5328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.168774][ T5328] hsr_slave_0: entered promiscuous mode [ 38.171388][ T5328] hsr_slave_1: entered promiscuous mode [ 38.190728][ T3232] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.275374][ T3232] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.309760][ T5328] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 38.312448][ T5328] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.319424][ T5328] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 38.323716][ T5328] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.326123][ T5328] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 38.330337][ T5328] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.331492][ T5328] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 38.335778][ T5328] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.341853][ T3232] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.374267][ T5328] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.374312][ T5328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.374407][ T5328] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.374436][ T5328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.442782][ T5328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.451883][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.453134][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.457498][ T5328] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.461089][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.461133][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.469646][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.469682][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.662536][ T30] audit: type=1326 audit(38.650:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5338 comm="syz.4.81" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98f77b68 code=0x7fc00000 [ 38.674548][ T3232] bridge_slave_1: left allmulticast mode [ 38.674578][ T3232] bridge_slave_1: left promiscuous mode [ 38.674675][ T3232] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.676797][ T3232] bridge_slave_0: left allmulticast mode [ 38.676812][ T3232] bridge_slave_0: left promiscuous mode [ 38.676881][ T3232] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.688557][ T3232] pimreg: left allmulticast mode [ 38.722836][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.783416][ T1517] misc userio: Buffer overflowed, userio client isn't keeping up [ 38.816622][ T5386] trusted_key: syz.4.87 sent an empty control message without MSG_MORE. [ 38.868432][ T3232] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.884931][ T3232] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.914854][ T3232] bond0 (unregistering): Released all slaves [ 38.930793][ T4397] 8021q: adding VLAN 0 to HW filter on device eth4 [ 39.098003][ T5408] binder: 5404:5408 got transaction to invalid handle, 2 [ 39.098058][ T5408] binder: 5404:5408 cannot find target node [ 39.098087][ T5408] binder: 5404:5408 transaction async to 0:0 failed 2/29201/-22, code 0 size 0-0 line 3236 [ 39.104522][ T5406] loop4: detected capacity change from 0 to 512 [ 39.116470][ T5406] EXT4-fs: test_dummy_encryption requires encrypt feature [ 39.176573][ T5416] loop4: detected capacity change from 0 to 512 [ 39.187442][ T5416] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.187479][ T5416] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 39.187489][ T5416] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 39.190409][ T5416] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 39.190577][ T5416] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 39.190608][ T5416] System zones: 0-2, 18-18, 34-35 [ 39.191497][ T5416] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.210503][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.308925][ T5416] tipc: Started in network mode [ 39.308968][ T5416] tipc: Node identity 12003c9cf255, cluster identity 4711 [ 39.309022][ T5416] tipc: Enabled bearer , priority 0 [ 39.310762][ T5426] syzkaller0: entered promiscuous mode [ 39.310777][ T5426] syzkaller0: entered allmulticast mode [ 39.313108][ T4397] 8021q: adding VLAN 0 to HW filter on device eth5 [ 39.326646][ T5416] tipc: Resetting bearer [ 39.345933][ T5415] tipc: Resetting bearer [ 39.350040][ T5415] tipc: Disabling bearer [ 39.357076][ T5328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.396772][ T5439] loop1: detected capacity change from 0 to 512 [ 39.404901][ T5439] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 39.437771][ T5439] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.441304][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.463755][ T5439] netlink: 140 bytes leftover after parsing attributes in process `syz.1.94'. [ 39.514697][ T5452] EXT4-fs error (device loop1): __ext4_new_inode:1079: comm syz.1.94: reserved inode found cleared - inode=1 [ 39.557749][ T4709] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 39.559886][ T4709] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 39.560619][ T4709] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 39.565763][ T3232] hsr_slave_0: left promiscuous mode [ 39.566703][ T3232] hsr_slave_1: left promiscuous mode [ 39.566959][ T3232] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.566973][ T3232] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.567869][ T3232] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.567879][ T3232] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.581786][ T3232] veth1_macvtap: left promiscuous mode [ 39.581833][ T3232] veth0_macvtap: left promiscuous mode [ 39.581865][ T3232] veth1_vlan: left promiscuous mode [ 39.581889][ T3232] veth0_vlan: left promiscuous mode [ 39.705116][ T3232] team0 (unregistering): Port device team_slave_1 removed [ 39.708947][ T3232] team0 (unregistering): Port device team_slave_0 removed [ 39.753384][ T4715] Bluetooth: hci0: command tx timeout [ 39.777361][ T4397] 8021q: adding VLAN 0 to HW filter on device eth7 [ 39.800231][ T5328] veth0_vlan: entered promiscuous mode [ 39.814788][ T5328] veth1_vlan: entered promiscuous mode [ 39.821060][ T5328] veth0_macvtap: entered promiscuous mode [ 39.822180][ T5328] veth1_macvtap: entered promiscuous mode [ 39.831335][ T5328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.835187][ T1517] input: PS/2 Generic Mouse as /devices/serio0/input/input2 [ 39.841441][ T5328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.851007][ T39] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.851102][ T39] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.851128][ T39] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.851143][ T39] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.902032][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.902069][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.919166][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.919270][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.981346][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.007785][ T5485] loop6: detected capacity change from 0 to 2048 [ 40.016889][ T5485] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.025738][ T4397] 8021q: adding VLAN 0 to HW filter on device eth6 [ 40.043294][ T1517] psmouse serio0: Failed to enable mouse on [ 40.109422][ T40] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 40.110339][ T40] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 40.110354][ T40] EXT4-fs (loop6): This should not happen!! Data will be lost [ 40.110354][ T40] [ 40.110361][ T40] EXT4-fs (loop6): Total free blocks count 0 [ 40.110368][ T40] EXT4-fs (loop6): Free/Dirty block details [ 40.110377][ T40] EXT4-fs (loop6): free_blocks=4096 [ 40.110387][ T40] EXT4-fs (loop6): dirty_blocks=16 [ 40.110392][ T40] EXT4-fs (loop6): Block reservation details [ 40.110398][ T40] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 40.111055][ T40] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 1 with error 28 [ 40.111255][ T5328] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 40.406625][ T5494] overlay: Unknown parameter 'subj_user' [ 40.427321][ T5500] autofs: Unknown parameter 'î¬ä`WhbÖ¡ÊêÅ>T' [ 40.434480][ T4721] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 40.434892][ T4721] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 40.435093][ T4721] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 40.435397][ T4721] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 40.435618][ T4721] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 40.468235][ T3232] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.539981][ T3232] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.560966][ T5513] loop6: detected capacity change from 0 to 512 [ 40.568616][ T5513] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 40.578049][ T5513] EXT4-fs (loop6): 1 truncate cleaned up [ 40.578540][ T5513] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.623466][ T3232] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.629313][ T5513] tap0: tun_chr_ioctl cmd 1074025677 [ 40.629420][ T5513] tap0: linktype set to 776 [ 40.637583][ T5522] warning: `syz.2.104' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 40.675205][ T5527] Injecting memory failure for pfn 0x21959e at process virtual address 0x20000000 [ 40.689046][ T5498] lo speed is unknown, defaulting to 1000 [ 40.701720][ T5527] Memory failure: 0x21959e: unhandlable page. [ 40.701747][ T5527] Memory failure: 0x21959e: recovery action for get hwpoison page: Ignored [ 40.724498][ T3232] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.736208][ T5328] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.771859][ T5535] loop6: detected capacity change from 0 to 128 [ 40.782339][ T5535] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.877864][ T5498] lo speed is unknown, defaulting to 1000 [ 40.926062][ T5328] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.075388][ T5559] loop4: p1 p4 [ 41.075388][ T5559] p1: [ 41.075419][ T5559] loop4: partition table partially beyond EOD, truncated [ 41.078379][ T5559] loop4: p4 start 184549376 is beyond EOD, truncated [ 41.230912][ T4340] loop4: p1 p4 [ 41.230912][ T4340] p1: [ 41.230946][ T4340] loop4: partition table partially beyond EOD, truncated [ 41.233890][ T3232] bridge_slave_1: left allmulticast mode [ 41.233905][ T3232] bridge_slave_1: left promiscuous mode [ 41.233980][ T3232] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.235002][ T3232] bridge_slave_0: left allmulticast mode [ 41.235013][ T3232] bridge_slave_0: left promiscuous mode [ 41.235070][ T3232] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.239984][ T4340] loop4: p4 start 184549376 is beyond EOD, truncated [ 41.254252][ T5559] loop4: p1 p4 [ 41.254252][ T5559] p1: [ 41.254282][ T5559] loop4: partition table partially beyond EOD, truncated [ 41.256344][ T5559] loop4: p4 start 184549376 is beyond EOD, truncated [ 41.285468][ T5598] FAT-fs (loop6): Directory bread(block 64) failed [ 41.285511][ T5598] FAT-fs (loop6): Directory bread(block 65) failed [ 41.285543][ T5598] FAT-fs (loop6): Directory bread(block 66) failed [ 41.285558][ T5598] FAT-fs (loop6): Directory bread(block 67) failed [ 41.285583][ T5598] FAT-fs (loop6): Directory bread(block 68) failed [ 41.285595][ T5598] FAT-fs (loop6): Directory bread(block 69) failed [ 41.285616][ T5598] FAT-fs (loop6): Directory bread(block 70) failed [ 41.285627][ T5598] FAT-fs (loop6): Directory bread(block 71) failed [ 41.285647][ T5598] FAT-fs (loop6): Directory bread(block 72) failed [ 41.285656][ T5598] FAT-fs (loop6): Directory bread(block 73) failed [ 41.316410][ T5183] udevd[5183]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 41.347634][ T5559] loop4: p1 p4 [ 41.347634][ T5559] p1: [ 41.347667][ T5559] loop4: partition table partially beyond EOD, truncated [ 41.351181][ T5559] loop4: p4 start 184549376 is beyond EOD, truncated [ 41.414623][ T5559] loop4: p1 p4 [ 41.414623][ T5559] p1: [ 41.414650][ T5559] loop4: partition table partially beyond EOD, truncated [ 41.416856][ T5559] loop4: p4 start 184549376 is beyond EOD, truncated [ 41.431032][ T3232] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.461021][ T3232] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.484230][ T3232] bond0 (unregistering): Released all slaves [ 41.494285][ T4397] 8021q: adding VLAN 0 to HW filter on device eth8 [ 41.515084][ T4340] loop4: p1 p4 [ 41.515084][ T4340] p1: [ 41.515112][ T4340] loop4: partition table partially beyond EOD, truncated [ 41.518232][ T4340] loop4: p4 start 184549376 is beyond EOD, truncated [ 41.522965][ T5559] loop4: p1 p4 [ 41.522965][ T5559] p1: [ 41.522990][ T5559] loop4: partition table partially beyond EOD, truncated [ 41.523708][ T5559] loop4: p4 start 184549376 is beyond EOD, truncated [ 41.541478][ T3232] tipc: Left network mode [ 41.637336][ T5559] loop4: p1 p4 [ 41.637336][ T5559] p1: [ 41.637362][ T5559] loop4: partition table partially beyond EOD, truncated [ 41.640462][ T5559] loop4: p4 start 184549376 is beyond EOD, truncated [ 41.652554][ T4340] loop4: p1 p4 [ 41.652554][ T4340] p1: [ 41.655017][ T4340] loop4: partition table partially beyond EOD, truncated [ 41.665116][ T4340] loop4: p4 start 184549376 is beyond EOD, truncated [ 41.678470][ T5616] FAT-fs (loop6): Directory bread(block 64) failed [ 41.678503][ T5616] FAT-fs (loop6): Directory bread(block 65) failed [ 41.678538][ T5616] FAT-fs (loop6): Directory bread(block 66) failed [ 41.678560][ T5616] FAT-fs (loop6): Directory bread(block 67) failed [ 41.678580][ T5616] FAT-fs (loop6): Directory bread(block 68) failed [ 41.678591][ T5616] FAT-fs (loop6): Directory bread(block 69) failed [ 41.678612][ T5616] FAT-fs (loop6): Directory bread(block 70) failed [ 41.678621][ T5616] FAT-fs (loop6): Directory bread(block 71) failed [ 41.678640][ T5616] FAT-fs (loop6): Directory bread(block 72) failed [ 41.678649][ T5616] FAT-fs (loop6): Directory bread(block 73) failed [ 41.748805][ T5559] set_capacity_and_notify: 8 callbacks suppressed [ 41.748846][ T5559] loop4: detected capacity change from 0 to 2048 [ 41.786647][ T5626] syzkaller0: entered promiscuous mode [ 41.786681][ T5626] syzkaller0: entered allmulticast mode [ 41.795726][ T5183] udevd[5183]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 41.795954][ T5559] loop4: p1 p4 [ 41.795954][ T5559] p1: [ 41.795964][ T5559] loop4: partition table partially beyond EOD, truncated [ 41.796429][ T5559] loop4: p4 start 184549376 is beyond EOD, truncated [ 41.835366][ T4715] Bluetooth: hci0: command tx timeout [ 41.946102][ T4397] 8021q: adding VLAN 0 to HW filter on device eth9 [ 42.015071][ T5650] binder: 5649:5650 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 42.015105][ T5650] binder: 5649:5650 IncRefs 0 refcount change on invalid ref 1 ret -22 [ 42.015132][ T5650] binder: 5649:5650 unknown command 0 [ 42.015145][ T5650] binder: 5649:5650 ioctl c0306201 20000300 returned -22 [ 42.021622][ T5650] binder: 5649:5650 got transaction to invalid handle, 1 [ 42.022912][ T5650] binder: 5649:5650 cannot find target node [ 42.024077][ T5650] binder: 5649:5650 transaction call to 0:0 failed 5/29201/-22, code 0 size 88-24 line 3236 [ 42.053047][ T5184] udevd[5184]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 42.056023][ T5183] udevd[5183]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 42.096722][ T5183] udevd[5183]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 42.104802][ T5184] udevd[5184]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 42.173683][ T5668] Injecting memory failure for pfn 0x1348e0 at process virtual address 0x20000000 [ 42.176012][ T5659] loop2: detected capacity change from 0 to 512 [ 42.176455][ T5659] EXT4-fs: Ignoring removed nobh option [ 42.180003][ T5668] Memory failure: 0x1348e0: Failed to invalidate [ 42.180028][ T5668] Memory failure: 0x1348e0: dirty LRU page still referenced by 1 users [ 42.180052][ T5668] Memory failure: 0x1348e0: recovery action for dirty LRU page: Failed [ 42.181408][ T5659] EXT4-fs (loop2): orphan cleanup on readonly fs [ 42.187015][ T5659] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #11: block 1: comm syz.2.136: lblock 0 mapped to illegal pblock 1 (length 1) [ 42.187042][ T5659] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 42.189821][ T5659] EXT4-fs (loop2): Remounting filesystem read-only [ 42.189940][ T5659] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 42.189955][ T5659] EXT4-fs warning (device loop2): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 42.189989][ T5659] EXT4-fs (loop2): 1 orphan inode deleted [ 42.193090][ T5659] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 42.203773][ T5498] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.206332][ T5498] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.206446][ T5498] bridge_slave_0: entered allmulticast mode [ 42.218757][ T5665] loop4: detected capacity change from 0 to 1024 [ 42.220844][ T5665] EXT4-fs: Ignoring removed bh option [ 42.222824][ T5498] bridge_slave_0: entered promiscuous mode [ 42.229874][ T5498] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.230483][ T5498] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.230566][ T5498] bridge_slave_1: entered allmulticast mode [ 42.244000][ T5665] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.250517][ T5665] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 42.269098][ T5498] bridge_slave_1: entered promiscuous mode [ 42.309024][ T4697] udevd[4697]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 42.312440][ T3232] hsr_slave_0: left promiscuous mode [ 42.314454][ T3232] hsr_slave_1: left promiscuous mode [ 42.314714][ T3232] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.314725][ T3232] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.315207][ T5183] udevd[5183]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 42.315782][ T3232] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.315793][ T3232] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.322826][ T3232] veth1_macvtap: left promiscuous mode [ 42.322870][ T3232] veth0_macvtap: left promiscuous mode [ 42.322913][ T3232] veth1_vlan: left promiscuous mode [ 42.322950][ T3232] veth0_vlan: left promiscuous mode [ 42.340591][ T5184] udevd[5184]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 42.342620][ T5183] udevd[5183]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 42.473499][ T4715] Bluetooth: hci2: command tx timeout [ 42.528661][ T3232] team0 (unregistering): Port device team_slave_1 removed [ 42.534691][ T3232] team0 (unregistering): Port device team_slave_0 removed [ 42.611837][ T4397] 8021q: adding VLAN 0 to HW filter on device eth11 [ 42.618422][ T5498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.629386][ T5498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.652858][ T5498] team0: Port device team_slave_0 added [ 42.656376][ T5498] team0: Port device team_slave_1 added [ 42.673387][ T5498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.674837][ T5498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.679529][ T5498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.682768][ T5498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.684219][ T5498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.689032][ T5498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.715177][ T5498] hsr_slave_0: entered promiscuous mode [ 42.715502][ T5498] hsr_slave_1: entered promiscuous mode [ 42.715703][ T5498] debugfs: 'hsr0' already exists in 'hsr' [ 42.715718][ T5498] Cannot create hsr debugfs directory [ 42.726298][ T4722] binder: undelivered TRANSACTION_ERROR: 29201 [ 42.798813][ T5694] netlink: 'syz.6.141': attribute type 12 has an invalid length. [ 42.809071][ T5694] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 42.813793][ T5498] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 42.817714][ T5498] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 42.819366][ T5498] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 42.824627][ T5498] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 42.825586][ T5498] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 42.832801][ T5498] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 42.833105][ T5498] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 42.836585][ T5498] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 42.854395][ T5498] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.854436][ T5498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.854525][ T5498] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.854561][ T5498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.891524][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.925269][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.947186][ T5498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.959335][ T5498] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.959973][ T3450] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.960498][ T3450] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.024605][ T5718] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 43.052513][ T5498] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 43.063224][ T5498] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.093250][ T3232] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.093278][ T3232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.095935][ T3232] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.095953][ T3232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.306952][ T30] audit: type=1326 audit(43.300:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5671 comm="syz.3.140" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f177b68 code=0x7fc00000 [ 43.321134][ T4397] 8021q: adding VLAN 0 to HW filter on device eth10 [ 43.330567][ T5727] netlink: 'syz.4.144': attribute type 1 has an invalid length. [ 43.339965][ T5727] loop4: detected capacity change from 0 to 1024 [ 43.341492][ T5727] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.346712][ T5727] EXT4-fs warning (device loop4): ext4_multi_mount_protect:288: Invalid MMP block in superblock [ 43.362981][ T5731] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 43.365636][ T5731] overlayfs: failed to set xattr on upper [ 43.366846][ T5731] overlayfs: ...falling back to redirect_dir=nofollow. [ 43.368246][ T5731] overlayfs: ...falling back to uuid=null. [ 43.551706][ T5498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.568843][ T5754] fuseblk: fd is not a fuse device [ 43.646434][ T5498] veth0_vlan: entered promiscuous mode [ 43.656667][ T5498] veth1_vlan: entered promiscuous mode [ 43.670542][ T5498] veth0_macvtap: entered promiscuous mode [ 43.671655][ T5498] veth1_macvtap: entered promiscuous mode [ 43.692754][ T5498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.701054][ T5498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.726048][ T3450] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.726117][ T3450] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.726147][ T3450] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.726164][ T3450] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.836028][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.836480][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.842061][ T5777] loop2: detected capacity change from 0 to 256 [ 43.907626][ T5784] loop2: detected capacity change from 0 to 1024 [ 43.913641][ T4715] Bluetooth: hci0: command tx timeout [ 44.019944][ T5770] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.023784][ T5770] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.280983][ T5796] loop3: detected capacity change from 0 to 256 [ 44.421487][ T5785] tipc: Started in network mode [ 44.421551][ T5785] tipc: Node identity e6423454bf3b, cluster identity 4711 [ 44.421635][ T5785] tipc: Enabled bearer , priority 0 [ 44.427433][ T5791] syzkaller0: entered promiscuous mode [ 44.427465][ T5791] syzkaller0: entered allmulticast mode [ 44.432747][ T1184] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.433119][ T5796] syzkaller0: mtu less than device minimum [ 44.433554][ T1184] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.433581][ T1184] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.433601][ T1184] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.448636][ T5774] tipc: Resetting bearer [ 44.455138][ T5774] tipc: Disabling bearer [ 44.462162][ T5813] loop6: detected capacity change from 0 to 1024 [ 44.484362][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.484387][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.529386][ T3232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.531239][ T3232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.563695][ T4715] Bluetooth: hci2: command tx timeout [ 44.834130][ T5820] loop4: detected capacity change from 0 to 1024 [ 44.953077][ T5820] EXT4-fs (loop4): failed to initialize system zone (-117) [ 44.953171][ T5820] EXT4-fs (loop4): mount failed [ 46.003233][ T4715] Bluetooth: hci0: command tx timeout [ 46.633249][ T4715] Bluetooth: hci2: command tx timeout [ 48.714099][ T4715] Bluetooth: hci2: command tx timeout [ 64.483984][ T9] cfg80211: failed to load regulatory.db [ 64.484826][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.484875][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 121.907555][ T6024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.907793][ T6024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.909187][ T6024] netlink: 5 bytes leftover after parsing attributes in process `syz.2.165'. [ 122.387030][ T6047] loop3: detected capacity change from 0 to 128 [ 122.392209][ T6047] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 122.747158][ T6047] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 122.774528][ T6047] fscrypt: loop3: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 122.886540][ T4708] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 123.209366][ T6066] syzkaller0: entered promiscuous mode [ 123.209407][ T6066] syzkaller0: entered allmulticast mode [ 124.407694][ T6092] loop4: detected capacity change from 0 to 128 [ 124.465946][ T6092] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 124.911159][ T4719] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 125.687641][ T6099] infiniband syz2: set down [ 125.688734][ T6099] infiniband syz2: added syzkaller0 [ 125.713511][ T6099] RDS/IB: syz2: added [ 125.716680][ T6099] smc: adding ib device syz2 with port count 1 [ 125.718956][ T6099] smc: ib device syz2 port 1 has no pnetid [ 125.877137][ T6136] loop4: detected capacity change from 0 to 128 [ 126.254676][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.255925][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.487298][ T6136] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 126.513000][ T4719] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.034212][ T6165] loop7: detected capacity change from 0 to 128 [ 127.047483][ T6165] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 127.068047][ T6165] fscrypt: loop7: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 127.092027][ T5498] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.118716][ T6174] loop3: detected capacity change from 0 to 128 [ 127.132050][ T6174] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 127.149650][ T4708] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.210842][ T1184] smc: removing ib device syz2 [ 127.578063][ T6202] loop3: detected capacity change from 0 to 128 [ 127.584742][ T6202] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 127.606915][ T6202] fscrypt: loop3: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 127.642124][ T4708] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.652823][ T6206] loop7: detected capacity change from 0 to 128 [ 127.669539][ T6206] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 127.697549][ T5498] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 128.146319][ T6215] syzkaller0: entered promiscuous mode [ 128.146353][ T6215] syzkaller0: entered allmulticast mode [ 128.302304][ T6229] loop3: detected capacity change from 0 to 512 [ 128.302670][ T6229] EXT4-fs: Ignoring removed bh option [ 128.306025][ T6229] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 128.320004][ T6229] EXT4-fs (loop3): 1 truncate cleaned up [ 128.321983][ T6229] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.710708][ T6235] netlink: 24 bytes leftover after parsing attributes in process `syz.7.232'. [ 128.754835][ T6239] ------------[ cut here ]------------ [ 128.754848][ T6239] WARNING: fs/exec.c:119 at path_noexec+0x1a4/0x1d4, CPU#0: syz.7.234/6239 [ 128.756938][ T6239] Modules linked in: [ 128.757520][ T6239] CPU: 0 UID: 0 PID: 6239 Comm: syz.7.234 Not tainted syzkaller #0 PREEMPT [ 128.758885][ T6239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 128.760405][ T6239] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 128.761642][ T6239] pc : path_noexec+0x1a4/0x1d4 [ 128.762361][ T6239] lr : path_noexec+0x1a4/0x1d4 [ 128.763126][ T6239] sp : ffff800097f17a50 [ 128.763798][ T6239] x29: ffff800097f17a50 x28: dfff800000000000 x27: ffff0000f35fce40 [ 128.765089][ T6239] x26: 0000000000000012 x25: 000000000200000b x24: 0000000000000000 [ 128.766396][ T6239] x23: 1fffe0001a1cf409 x22: 1fffe0001a1cf410 x21: dfff800000000000 [ 128.767641][ T6239] x20: 0000000000000000 x19: ffff0000d0e7a080 x18: 0000000000000000 [ 128.768860][ T6239] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 [ 128.770140][ T6239] x14: 0000000000000003 x13: 0000000000000004 x12: 0000000000000000 [ 128.771402][ T6239] x11: 0000000000000000 x10: 0000000000080000 x9 : 0000000000000105 [ 128.772687][ T6239] x8 : ffff80009434e000 x7 : 0000000000000000 x6 : 0000000000000000 [ 128.773970][ T6239] x5 : 0000000000000073 x4 : 0000000000000008 x3 : ffff800080c7ce88 [ 128.775183][ T6239] x2 : 0000000000000000 x1 : ffff000100a90000 x0 : 0000000000000001 [ 128.776385][ T6239] Call trace: [ 128.776844][ T6239] path_noexec+0x1a4/0x1d4 (P) [ 128.777610][ T6239] do_mmap+0x874/0xf0c [ 128.778256][ T6239] vm_mmap_pgoff+0x298/0x46c [ 128.778957][ T6239] ksys_mmap_pgoff+0x364/0x5b4 [ 128.779735][ T6239] __arm64_sys_mmap+0x108/0x120 [ 128.780521][ T6239] invoke_syscall+0x98/0x244 [ 128.781276][ T6239] el0_svc_common+0x19c/0x23c [ 128.782011][ T6239] do_el0_svc+0x4c/0x5c [ 128.782647][ T6239] el0_svc+0x64/0x260 [ 128.783264][ T6239] el0t_64_sync_handler+0x48/0x148 [ 128.784042][ T6239] el0t_64_sync+0x198/0x19c [ 128.784789][ T6239] irq event stamp: 258 [ 128.785443][ T6239] hardirqs last enabled at (257): [] el0_svc+0x54/0x260 [ 128.786753][ T6239] hardirqs last disabled at (258): [] el1_brk64+0x20/0x54 [ 128.788135][ T6239] softirqs last enabled at (188): [] fpsimd_restore_current_state+0x39c/0x9c8 [ 128.789764][ T6239] softirqs last disabled at (186): [] fpsimd_restore_current_state+0x44/0x9c8 [ 128.791277][ T6239] ---[ end trace 0000000000000000 ]--- [ 130.015421][ T6163] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 130.059065][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.