last executing test programs: 50.8082357s ago: executing program 32 (id=49): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001200010227bd7000fadbdf250700100008000800060000000c00e88008003f"], 0x28}}, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) 50.807910346s ago: executing program 33 (id=51): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000c00)=[{{&(0x7f0000000540)=@rc={0x1f, @none}, 0x80, &(0x7f0000000600)=[{&(0x7f00000007c0)=""/137, 0x7f}, {&(0x7f00000005c0)=""/10, 0xe}], 0x2, &(0x7f0000000640)=""/193, 0xc1}, 0x5}, {{&(0x7f0000000740)=@hci, 0x80, &(0x7f0000000b80), 0x7}, 0x9}], 0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) accept$alg(r3, 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000280), 0x2e, 0x1016c2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/sctp/auth_enable\x00', 0x0, 0x0) read(r5, 0x0, 0x4e) renameat2(r4, &(0x7f00000003c0)='./file0\x00', r5, &(0x7f0000000400)='./file0\x00', 0x2) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r7, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r8, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x4) accept4(r7, &(0x7f0000000440)=@xdp, 0xfffffffffffffffe, 0x0) fsetxattr$trusted_overlay_opaque(r1, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x2) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) socket$nl_route(0x10, 0x3, 0x0) 48.392401419s ago: executing program 1 (id=79): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000005980)={0x10, 0x8, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x94}, @exit]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, r0}, 0x94) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 48.370415874s ago: executing program 1 (id=80): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002340)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0xc0a0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x762b}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0x16, 0x0, @void}, 0x10) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x8, &(0x7f0000000200), 0x4) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'bridge_slave_0\x00', {0x2, 0x4e23, @multicast2}}) 48.004245317s ago: executing program 1 (id=86): openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0xa4) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f00000000c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, 0x0) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0x4, 0x60080800, 0x0, 0x0, 0x7, 0xa14, 0x0, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x90, 0x0, 0x0, {0x0, 0x400000000000, 0x0, 0x1000000000000000, 0x0, 0xb22f, {0x0, 0x1003, 0x0, 0x0, 0xd, 0xfffffffffffffffd, 0xfffffffd, 0xfffffffe, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000130000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r8, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x3, 0x3, 0x3e, 0xffffffec, 0x398, 0x40, 0x56, 0x0, 0x5, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0x8001, 0x100000000, 0x40000000200d, 0xffffffff00000000, 0xe2, 0x2, 0x2}], "5770b20d60347b182ae6e52444a1dfc88b7843bb20b0532412b51dfc9b5ab78d1178fc9307b0e63dca7e7231e31f61ab807e4a6a2fbbf9325b601883c2e34eb9516e"}, 0x5) close(r8) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) (async) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) syz_fuse_handle_req(r0, &(0x7f0000008200)="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", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x4, {0x6, 0xfffffffffffffffe, 0x1001, 0x2, 0x7, 0x3, {0x2, 0x3b08, 0x2, 0x6, 0x4, 0x3, 0x2000041, 0x96, 0x3d25, 0x8000, 0x5, r2, r3, 0xbdc, 0x10009b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000874fe46862a2f7de8000000", @ANYRES32, @ANYBLOB="df0800"/20, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="02000000010000000200"/28], 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000874fe46862a2f7de8000000", @ANYRES32, @ANYBLOB="df0800"/20, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="02000000010000000200"/28], 0x50) r10 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./mnt\x00', 0x803000, &(0x7f0000000440)={[], [{@subj_type={'subj_type', 0x3d, '.!'}}, {@uid_gt={'uid>', r2}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x63, 0xa, 0x64, 0x9, 0x82e84277f14ae78c, 0x30], 0x2d, [0x34, 0x30, 0x64], 0x2d, [0x37, 0x61, 0x34, 0x30], 0x2d, [0x66, 0x34, 0x63, 0x32], 0x2d, [0x34, 0x31, 0x63, 0x35, 0x64, 0x32, 0x65, 0x31]}}}, {@appraise_type}, {@smackfsdef}]}, 0x0, 0x249, &(0x7f0000000540)="$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") ioctl$EXT4_IOC_GROUP_ADD(r10, 0x40e8662e, 0xffffffffffffffff) 47.540416871s ago: executing program 1 (id=91): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r1, 0x110, 0x7, 0x0, 0x4) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$nfs4(&(0x7f0000000180)='/', &(0x7f00000001c0)='./file1\x00', 0x0, 0x2085008, 0x0) r2 = socket$inet6(0xa, 0x800, 0xffffffca) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x6b9f, 0x4) sendmsg$sock(r2, &(0x7f0000000080)={&(0x7f0000000580)=@in6={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x51, 0x7fffffff}}], 0x18}, 0x24008800) mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x8000, &(0x7f0000000240)={0x0, 0x0, 0x40000}, 0x20) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x300000c, 0x4010, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18004000000000000000000007000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000500000085000000620000009500000000000000f9c2a024d4c7cc567828f6389be01f"], &(0x7f0000000140)='syzkaller\x00', 0x8, 0xfe4, &(0x7f0000000740)=""/4068, 0x41100, 0x9}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000a80), 0x80000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1fe) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) open_tree(r0, &(0x7f0000000100)='./file1\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r3, &(0x7f0000000100)=""/253, 0xfd, 0x36) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) close(r2) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040)) 46.997404698s ago: executing program 1 (id=93): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x37, 0x0, 0xa, 0x7e8}, 0x28) 46.974097049s ago: executing program 1 (id=100): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file2\x00', 0x0, &(0x7f0000000280)={[{@noload}, {}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x471, &(0x7f00000004c0)="$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") ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv6_newroute={0x2c, 0x18, 0x111, 0x1, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_PRIORITY={0x8, 0x6, 0x811a}, @RTA_EXPIRES={0x8, 0x17, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004001}, 0x48850) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0x2800080, &(0x7f0000000340)=ANY=[], 0x95, 0x2c7, &(0x7f0000000c40)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r3, 0x9a4c7000) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f0000000000), 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) sendfile(r5, r5, 0x0, 0x7a680000) write(r0, &(0x7f0000000140)="f7bdf4912ae388c1e6f17e8355459b59b7f01e635600953c910b3e4a010f8bbf8de9d6b1ec14c43fd55888140ec4d8a88e405b60a9f64ab81d1d7d0cce290154b628ecbf8c4fbaf7950e832ec641b146af9193fdeef74ef4fc", 0x59) 46.873699996s ago: executing program 34 (id=100): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file2\x00', 0x0, &(0x7f0000000280)={[{@noload}, {}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x471, &(0x7f00000004c0)="$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") ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv6_newroute={0x2c, 0x18, 0x111, 0x1, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_PRIORITY={0x8, 0x6, 0x811a}, @RTA_EXPIRES={0x8, 0x17, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004001}, 0x48850) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0x2800080, &(0x7f0000000340)=ANY=[], 0x95, 0x2c7, &(0x7f0000000c40)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r3, 0x9a4c7000) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f0000000000), 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) sendfile(r5, r5, 0x0, 0x7a680000) write(r0, &(0x7f0000000140)="f7bdf4912ae388c1e6f17e8355459b59b7f01e635600953c910b3e4a010f8bbf8de9d6b1ec14c43fd55888140ec4d8a88e405b60a9f64ab81d1d7d0cce290154b628ecbf8c4fbaf7950e832ec641b146af9193fdeef74ef4fc", 0x59) 27.005538672s ago: executing program 3 (id=372): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB="84010000100001000000000000000040ac14143a00007b4cb3ff3e00000000000000000000ac14144b56822fca8e1aaf8eaf000200", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x184}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20d42, 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0x11) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f00000000c0)) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) sendmsg$unix(r2, &(0x7f00000004c0)={&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000240)="dc6b486593b9f89668728c2cefa099ed3ca7c3339642e3f9101f7230908f99f1c3de6eb0f9295a73c549c55e1a342448e8601b028d559e3fd050cc40c0e234a66c2b981acf51ef2557062bdb613e4664794dfb967821d715baf732e7b6e1d97d207b829565e605dd682dbf8a58278627e16b8ce00e39bbfa03c3984c31f1318dae427ae2bbecc1975a2fc08b840b37bc8412dbaf2d50", 0x96}, {&(0x7f00000003c0)="feb7e5b76af27b9d3ede31ef1eb0830139d99102df8a593b58efc2cd5b1af34383b01f01bd58a0228441641c9668ce68c3aac4226177a3b05234e64684488f86386d4c174fb0cf45df0e1037801d85b898589b4aa189c8b3fa334a5506d55a74006f98dcb40293271b5b2e31fb0cfef215b2ebd04512ef", 0x77}], 0x2, &(0x7f0000000480)=[@rights={{0x1c, 0x1, 0x1, [r1, r1, r1]}}], 0x20, 0x20000000}, 0x4000) 26.695238989s ago: executing program 3 (id=373): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000280)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x4000080) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000080)={0xb, 0x77, 0x1, 0x7fff}, 0xb) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000680)={{r2, &(0x7f0000000040)='}\x00', 0x40, &(0x7f00000000c0)={@align=0x9, {0x24, 0x3, 0x9, 0x4}}, 0x376, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x7}, 0x5, &(0x7f00000005c0)=[{0x1, 0x7, &(0x7f0000000180)='vlan1\x00', &(0x7f0000000200)="802a90173b7d7751b112f1b7f76b0ff844581d6c3dc6bebb819558f04a3ff49246dd192abff782f4", 0x28, 0xa}, {0x0, 0x1, &(0x7f0000000240)='\x00', &(0x7f0000000280)="5ee07868266df0972ae912221757b19aa984c087ad9f06e7bb78063e1dd3ad24219e4ba8b103f8d67f1fcd84f699bf6b0edeff20b458d3e5b25ab2dc6c1883e19f008e8bda4ee12f7954e7db0f927c593407b198b5ad17d7656ae34dacaa1ea8b3c26a9d88599a0ba54389e032d20e91f87ea6639e940f511b2623ce02f9aa74a486570e05db15b88488e69e8070e263170556655b10a935931837bb5beb62f12dc4434a6d717180e9e6bed76c908747b9615a87f82f7718f5844b880735b9de5fb949ff0831b4f88f43195b67ba7d70e33e3e2b8fed6c50e6", 0xd9, 0x10}, {0x3, 0xc0000000, &(0x7f0000000380)='vlan1\x00', &(0x7f00000003c0)="d3f1360e6578ca41339fd3fb771ea07d5e6416352d85fb8c63a3220a37eb6f5fab53bea967aecffc9273d3275065044e23f7be6c4290b2f69ed0363a31429ba1de0e492c8093f42eacdea711e5632c0ab21ee7379af6965817df7403428fcab4ca9502d983928c11f03f1c2ac8fa87df2a35c6d71e3d121875d42b8304d5ef9b6cbd5e", 0x83, 0x30}, {0x2, 0x0, &(0x7f0000000480)=']@{/#+-\x00', &(0x7f00000004c0)="984a932d4782d8eaf6", 0x9, 0x12}, {0x2, 0x48, &(0x7f0000000500)=')-\x00', &(0x7f0000000540)="07838ba754d09fa246a52d0cd0f6204800d42d8d82273482d95a8a30ede8b5252547f04dd29fdeaa1f123d2fea0c2718200008003b042756adadd25a4087e3f0dc745482aa54bec7243d8a5c02fad2c4a2fda8ab22fe1cc7c397dfd6e4d6e4e42621aea5658b1ebb75fc927c152ba9094f6d773329278570372e", 0x7a, 0x38}]}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000000700)={@hyper}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x8228, 0x2214}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'vlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x0) 26.354382923s ago: executing program 3 (id=381): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000002000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r1, 0x0, 0x4000, 0xdc0, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) 26.295800329s ago: executing program 3 (id=384): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3810744, &(0x7f00000000c0)={[{@nombcache}, {@inlinecrypt}, {@usrquota}, {@jqfmt_vfsv1}, {@jqfmt_vfsv0}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x844d}}, {@barrier_val={'barrier', 0x3d, 0x562a}}, {@i_version}]}, 0x1, 0x46b, &(0x7f0000000b00)="$eJzs3M1vVFUbAPDn3s4AL/AyFfEDBK2isfGjpQWVhS40mrjQxEQXuKxtIchADa2JEKLVGFwaEvfGpYl/gStXRl2ZuNW9ISFKTEA3jrkz99LOMFOmMO1A5/dLLpwz98w958k953LmnBkCGFgj2R9JxPaI+DUiKo1sc4GRxl9XL5+b/vvyuekkarU3/0jq5a5cPjddFC3ety3PjKYR6adJXkmz+TNnT0xVq7On8/z4wsn3xufPnH36+MmpY7PHZk9NHj586ODEc89OPtOTOLM2Xdnz4dze3a++feH16SMX3vnxm6y99+5rnF8eRze2d1FmJAv8z1pd67nHVlPZHeDf2lKcSanfraFbQxGR3a5yffxXYiiWbl4lXvmkr40D1lT2zN7c+fRiDdjAkuh3C4D+KP6hzz7/Fsc6TT1uC5debHwAyuK+mh+NM6VI8zLlNax/JCKOLP7zZXZEyzpErc26AQDArfoum/88df38r7430ijywra8bCUihiPirojYGRF3R8SuiLgnL3tfRNy/yvpbt4aun3+mF282tm5k87/n872t5vlfMfuL4aE89/96/OXk6PHq7IGI2BERo1HenOUn2l28uMTLv3zeqf7l87/syOov5oL5RS6WWhboZqYWpno1Kb30ccSeUrv4k2s7AVlf2B0Re1Z36R1F4vgTX+/tVOjG8a+gB/tMta8iHm/c/8Voib+QrLw/Ob4lqrMHxotecb2ffj7/Rqf6byn+Hsju/9bm/t9SovJXsny/dn71dZz/7bOOnylLN9n/NyVv1fdgN+WvfTC1sHB6ImJT8lo93/T65NJ7i3xRPot/dP9S/BFL439n/p4s/gciIuvE+yLiwYh4KL93D0fEIxGxf4X4f3jp0Xc7nbsd7v9M2+fftf4/3Hz/V58YOvH9t53q7+75d6ieGs1fqT//bqBzc7bkJW62NwMAAMCdJ61/lz1Jx66l03RsrPF9+V2xNa3OzS88eXTu/VMzje+8D0c5LVa6KsvWQyeSxfyKjfxkvlZcnD+Yrxt/MfS/en5seq460+fYYdBt6zD+M78P9bt1wJq70T6a5wBsXK3jP+1TO4D15/faMLiMfxhc3Y7/Q2vcDmD9tRv/H7XkrQHCxmT+D4PL+IfBZfzD4DL+YSDdyu/61ypRWuHX++uWKK/4nwhInI30tmiGRJtEqQeju88PJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgB75LwAA//+MOu7f") r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x405, &(0x7f0000000000)={0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xba001, 0x81) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="000000004c900200040000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000009000000000000ffffffffffffffff00000000000000000a00000000000000000000000000000000000000000000000000000000000000ffffffff"]) 26.11993366s ago: executing program 3 (id=388): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) unshare(0x20020400) setxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)={'L-', 0xf4}, 0x16, 0x2) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1052, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000540), 0x200000b1, 0x8a681) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001100)={r0, 0x0, {0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x8, 0x14, "339f020bbe82b398000100000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e8333c691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f044158d9744b66cc530000000400000001000000002200", [0x314d39d0, 0x245]}}) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x13a322) sendfile(r2, r2, 0x0, 0xefb) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000002380)={0x2020}, 0x2020) 25.836035544s ago: executing program 3 (id=398): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) bind$packet(r1, &(0x7f00000006c0)={0x11, 0x0, r3, 0x1, 0xb, 0x6, @remote}, 0x14) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0xce, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[], 0x0) 25.635034969s ago: executing program 35 (id=398): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) bind$packet(r1, &(0x7f00000006c0)={0x11, 0x0, r3, 0x1, 0xb, 0x6, @remote}, 0x14) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0xce, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[], 0x0) 20.860715154s ago: executing program 7 (id=431): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 20.794908815s ago: executing program 7 (id=436): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000002680)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000f05ffffea0000000000eaffff03000000002e00000030"], 0x0, 0x37, 0x0, 0xa, 0x7e8}, 0x28) (fail_nth: 5) 20.684229814s ago: executing program 7 (id=439): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x34}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) ioctl$BLKPG(r0, 0x1269, 0xffffffffffffffff) 20.672962624s ago: executing program 7 (id=441): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000008d40)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20008c80], 0x0, 0x0, &(0x7f0000008c80)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) (async) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) (async) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, r2) (async) setpgid(0x0, r2) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0x40049366, 0x0) (async) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x7ffffffa, 0x0, 0x0, 0x5, 0x8, 0x2, 0x2d, 0x18}) (async, rerun: 64) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) (async, rerun: 64) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xa, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x88}, [@generic={0x91, 0x1, 0x1, 0x7e}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) (async, rerun: 32) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async, rerun: 32) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async, rerun: 64) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x2, 0x344, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200003c0], 0x0, 0x0, &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x9, 0x0, 0x6007, 'nicvf0\x00', 'geneve0\x00', 'vxcan1\x00', 'veth1_to_team\x00', @empty, [0x0, 0xff, 0xff, 0x0, 0xff], @remote, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], 0xa6, 0xa6, 0xf6, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x0, 0xf8, 0x1}}}], [], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0x8b7, {0x800}}}}}, {0x9, 0x1, 0x886c, 'vlan1\x00', 'syzkaller1\x00', 'batadv_slave_0\x00', 'pimreg0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @empty, [0xff, 0x0, 0xff, 0xff], 0x116, 0x176, 0x1be, [@connlabel={{'connlabel\x00', 0x0, 0x8}, {{0x2, 0x3}}}, @ip6={{'ip6\x00', 0x0, 0x50}, {{@private1, @private0, [0xff000000, 0x0, 0xff, 0xff], [0xffffff00, 0x0, 0xffffff00, 0xffffff00], 0x10, 0x6, 0x4, 0x0, 0x4e21, 0x4e22, 0x4e22, 0x4e20}}}], [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}], @common=@ERROR={'ERROR\x00', 0x20, {"b58ede5e558259ebb0aba2be6f8283186ed548bebf175368bdaeb4c4b188"}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x3bc) (rerun: 64) 20.460211301s ago: executing program 7 (id=445): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (async) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x8010) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0xffeffffe, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) (rerun: 32) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64) r4 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x1, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) (async) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r3, 0x111, 0x4, 0x1, 0x4) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001600), 0x740, 0x0) syz_open_dev$loop(&(0x7f00000000c0), 0x10, 0x2180) ioctl$BLKSECTGET(r5, 0x1267, &(0x7f0000000100)) (async) r6 = socket$kcm(0x10, 0x2, 0x0) (async) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000000", @ANYRES64], 0x0) (async) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000000040002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 19.30843717s ago: executing program 7 (id=465): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x414d, &(0x7f0000000400)={0x0, 0x287d, 0x400, 0x3, 0x4e}, &(0x7f0000002200)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000002280)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x800, 0x0, {0x0, 0x0, 0x5214}}) io_uring_enter(r1, 0x2003, 0xfffffffd, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711814000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x37, 0x0, 0xa, 0x7e8, 0xeaffff}, 0x28) 19.225714949s ago: executing program 36 (id=465): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x414d, &(0x7f0000000400)={0x0, 0x287d, 0x400, 0x3, 0x4e}, &(0x7f0000002200)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000002280)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x800, 0x0, {0x0, 0x0, 0x5214}}) io_uring_enter(r1, 0x2003, 0xfffffffd, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711814000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x37, 0x0, 0xa, 0x7e8, 0xeaffff}, 0x28) 16.082197448s ago: executing program 9 (id=466): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 64) ioctl$TUNSETLINK(r2, 0x400454cd, 0x306) (rerun: 64) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) close(0x3) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x0, 0x8, 0x7f02ae, 0x160, 0x200, 0x2b8, 0x2e8, 0x2e8, 0x2b8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x14}, [0xffffffff, 0x0, 0x0, 0xffffff00], [0xffffffff, 0xff000000, 0xff, 0xffffffff], 'veth0_vlan\x00', 'veth1_to_team\x00', {}, {0xff}, 0x3c, 0x6, 0x0, 0x40}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'vxcan1\x00', {}, '\x00', {0xff}, 0xc, 0x12}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xa, 0x6, 0x3}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0x0, 0xffffff00], [0x0, 0xffffffff], 'wlan0\x00', 'netdevsim0\x00', {}, {0xff}, 0x2c, 0x0, 0x1, 0x7b}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@dst={{0x48}, {0xa, 0x0, 0x1, [0xff, 0x6, 0xff, 0x4608, 0x3, 0xe, 0x2, 0x8000, 0x4, 0x400, 0x800, 0x0, 0x8, 0x7, 0x0, 0x50], 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x7, 0x0, 0x8, 0x400, 'snmp\x00', 'syz1\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x4c, 0x24, 0xf0b, 0x70bd25, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x5}, {0xffff, 0xffff}, {0xe50a386782ff0cd9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x5e}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x45}, 0xc880) 15.880459663s ago: executing program 9 (id=509): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) lseek(r0, 0x5, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x2800010, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x21f, &(0x7f0000000940)="$eJzs2j+LXFUcBuDfXRMSN2xmxH8kIB60UJtLZmqLLJKAOKBoRoiC5Ma9o8NcZ5a5w8KImK209SNYi6WdIClttvETWNhts2UK8Uoya5INY7GIO2Kep5kXzrzccziXwynu/uvffDYa1PmgmMValsXa5diNO1m0Yy3+shuvvXL95xfeu/7BW5u93pV3U7q6ea3TTSmdf/GnD7/4/qXbs3Pv/3D+xzOx1/5o/6D7295zexf2/7j26bBOwzqNJ7NUpJuTyay4WZVpa1iP8pTeqcqiLtNwXJfTI+ODarK9PU/FeGtjfXta1nUqxvM0KudpNkmz6TwVnxTDccrzPG2sB/9E/7s7TRMHzekb0TTNk9/Gudux8Wu0InsqZU9fzp69kT2/m104aJrWqqfKv8L+P94eOtTPRlRf7/R3+ovfxfjmIIZRRRmXohW/x93X5NAiX32zd+VSuqcdX1W3Dvu3dvpPHO13ohXt5f3Oop+O9s/EesTpiMN+N1rxzPJ+d2n/bLz68kPPz6MVv3wck6hiK+52H/S/7KT0xtu9R/oX7/0PAOD/Jk/3Lb2/5fnfjS/6x7gfPnK/OhUXT6127UTU889HRVWVU0EQhPth1ScTJ+HBpq96JgAAAAAAAAAAABzHSXxOuOo1AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/21/BgAA//9DWtUg") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x20008045}, 0x40046) recvmsg$unix(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/85, 0x55}], 0x1}, 0x2001) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) 15.664320083s ago: executing program 9 (id=513): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") (async) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000070060000000000000900000073113a000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000cbd70100400000005000000080009000200"], 0x3c}, 0x1, 0x0, 0x0, 0x40811}, 0x20) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, r1, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3e}]}, 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x1) (async) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x804, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x17, 0x1, 0x80, "2742528909000000ce0198666a0084feea0be6b8a80052d763e61f9d13f019e3", 0x4f565559}) (async) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0xa}, 0x18) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) (async) r7 = fsmount(r6, 0x0, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r8, r7, 0x15, 0x0, @void}, 0x10) (async) getsockopt$inet6_opts(r5, 0x29, 0x39, 0x0, 0x0) (async) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000100)=@v1={0x2, @adiantum, 0x1, @desc4}) (async) listen(r0, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_TC={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) (async) connect$unix(r9, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)='@', 0x1}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r9, @ANYRESOCT=r6], 0x18}}], 0x1, 0x0) r11 = accept4(r0, 0x0, 0x0, 0x0) r12 = syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r11) sendmsg$GTP_CMD_GETPDP(r11, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x4c, r12, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_PEER_ADDR6={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}]}, 0x4c}, 0x1, 0x0, 0x0, 0x88c4}, 0x40000) 14.950818349s ago: executing program 0 (id=521): r0 = socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0xddb, 0x0, 0x8}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x2}, 0x6e) syz_open_procfs$userns(r1, &(0x7f0000000100)) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_open_dev$loop(0x0, 0x8, 0x40) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000001a80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a40)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x20000802) bind$netlink(0xffffffffffffffff, &(0x7f0000177ff4)={0x10, 0x0, 0x1, 0x10000000}, 0xc) write(0xffffffffffffffff, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f00000000c0)={0x84, @loopback, 0x4e20, 0x3, 'none\x00', 0x30, 0x0, 0x3f}, 0x2c) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r8 = inotify_init1(0x0) write$binfmt_elf64(r7, 0x0, 0x178) inotify_add_watch(r8, 0x0, 0x400010e) close(r7) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x100) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e21, 0x3, 'fo\x00', 0x15, 0x3240, 0x37}, {@loopback, 0x4e23, 0x2000, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x84, @multicast1, 0x4e20, 0x3, 'nq\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x2000, 0xd1a6, 0x9, 0xfffffff9}}, 0x44) 13.783165428s ago: executing program 0 (id=525): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) keyctl$get_persistent(0x16, 0xffffffffffffffff, 0xfffffffffffffffb) r1 = request_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='::.^^\x00', 0xfffffffffffffff9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe582, 0x1f, 0x6, 0x200, 0x1, 0x0, r2}) keyctl$get_persistent(0x16, 0xee01, r1) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local, {[@rr={0x7, 0x3, 0x47}]}}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 13.612334406s ago: executing program 0 (id=528): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000180)=[{0x20, 0x0, 0x8, 0xfffff010}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x3, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_reconf_req={{0x19, 0x7, 0xc}, {0x9, 0x2, [0xe2, 0x1, 0xffff, 0x3]}}}}, 0x19) 13.476360317s ago: executing program 0 (id=532): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='sysfs\x00', &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000100)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb08004500006c0000000009019078ac1e0001ac1414aa04009078000000004413000900680003072fffff6401010200000000442cf233ac1e0101000022ebe0000002000000076401010100008000ffffffff00000006ac141429fffffffc4410c02056ae000000030000000a0000"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/usb/devices/usb1/urbnum\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x2000884, &(0x7f0000000240)=ANY=[@ANYBLOB='codepage=1251,nonumtail=0,shortname=win95,shortname=win95,shortname=lower,utf8=0,shortname=winnt,uni_xlate=0,iocharset=macceltic,nonumtail=0,iocharset=iso8859-5,nonumtail=0,uid=', @ANYRESHEX=0x0, @ANYRES32=0x0], 0x1, 0x28d, &(0x7f0000000e40)="$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") r1 = socket$kcm(0x29, 0x2, 0x0) close(r1) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10, 0x0}, 0x30004040) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) close(r1) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) fchown(r4, 0x0, 0x0) read(r0, &(0x7f0000000380), 0x64) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x1) setxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), &(0x7f00000004c0)=ANY=[], 0x98, 0x2) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r6, r5, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) 12.192439276s ago: executing program 9 (id=560): r0 = syz_open_dev$hidraw(&(0x7f00000002c0), 0x8, 0x301200) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f0000000300)="f1435cf6e3392eae50fb5c484931d0e9a62c90bfcc20f91d5eb565a07a2107d53a0c017fe9d91464700072cce36d5d0d1d17d127dab541ec434d9867bb43a67b03c244e4aa") (async) r1 = memfd_secret(0x80000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)={0x2c, r3, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48c4}, 0x18) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@typedef={0x10, 0x0, 0x0, 0x8, 0x1}, @float={0x4, 0x0, 0x0, 0x10, 0x4}, @restrict={0xe, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x5f, 0x61, 0x5f, 0x2e, 0x0, 0x30, 0x0, 0x0]}}, &(0x7f0000000180)=""/19, 0x46, 0x13, 0x1, 0x80000000, 0x10000}, 0x28) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x70, 0x3, 0x9, 0x4d7a0, r1, 0x7c, '\x00', r4, r5, 0x3, 0x3, 0x2, 0xf, @value=r6}, 0x50) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001200010000001400000000000000000000000000000000000000000014000d00fe8000000000000000000000000000aa0c001500"/72], 0x48}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12.126253711s ago: executing program 37 (id=560): r0 = syz_open_dev$hidraw(&(0x7f00000002c0), 0x8, 0x301200) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f0000000300)="f1435cf6e3392eae50fb5c484931d0e9a62c90bfcc20f91d5eb565a07a2107d53a0c017fe9d91464700072cce36d5d0d1d17d127dab541ec434d9867bb43a67b03c244e4aa") (async) r1 = memfd_secret(0x80000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)={0x2c, r3, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48c4}, 0x18) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@typedef={0x10, 0x0, 0x0, 0x8, 0x1}, @float={0x4, 0x0, 0x0, 0x10, 0x4}, @restrict={0xe, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x5f, 0x61, 0x5f, 0x2e, 0x0, 0x30, 0x0, 0x0]}}, &(0x7f0000000180)=""/19, 0x46, 0x13, 0x1, 0x80000000, 0x10000}, 0x28) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x70, 0x3, 0x9, 0x4d7a0, r1, 0x7c, '\x00', r4, r5, 0x3, 0x3, 0x2, 0xf, @value=r6}, 0x50) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001200010000001400000000000000000000000000000000000000000014000d00fe8000000000000000000000000000aa0c001500"/72], 0x48}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 11.03268525s ago: executing program 0 (id=576): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000003380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000003500)={&(0x7f0000000180)={0x3c, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xf}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async, rerun: 32) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0xfffffed4, 0x20}}, 0x20) (rerun: 32) 10.752151081s ago: executing program 0 (id=584): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r1, 0x0, 0x4000, 0xdc0, &(0x7f0000001cc0)="633268f83ca3000000a2029e3815bb2fa117d8326687688b2c969fd7267d546214af00d1ca2524d00f9e4d9555f3ab381b5d44fd6bda8c509e66101d296f10c805252e7c5d48d9814f46db8f07441878734b13270fe47fba418b7358984b9a61c2bbf964a520459fd0d90590b46cf1677d580a26933b6e35aee75996b73a15a25aa8ae2f1f9bc9699a505c0dc4050ab2255fc35f508ccc52f10ac12febf28652fe36f725714868675ca2a7042ab4b26904b2f000589694f69ab0b22a5aec72c5036ce1c8974690045e4ab412a70336b4c65b2dfc8121af4143c2e10a0e5632bcd44e0b000029da424d86f298656822dae2c002e289fbfa6fe0dfb2fd57713a7684dc166c628dc45027ac174c5db54f22e409eb4e94263dbc9919f90f1af3290918b9824c3e0268b300bf69cc2eb3fc58f655439bdbe2b905", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) 10.710986852s ago: executing program 38 (id=584): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r1, 0x0, 0x4000, 0xdc0, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) 7.570622625s ago: executing program 8 (id=616): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) r0 = socket(0x10, 0x2, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000240)="db3eb25b628f39d8311f8029c9438c8fa6793b6df283bbb5e5fdee1839205198d962eed5f0a1e59677fa4660819f0a2832976c74144ab8b491673adf44a393165c23331aba843c177d9512b8a70758a7dfaab4fb1b1192c7a0baa00394c5712ae550cb92bb5f78e68ae86173e32915a043ca9d3efe97e26d18989e3361b5ff26a186d50e5b968ba8c7ec9d64f944a61f08ef37be4e7d915112898aafaaca5bb193706f67d251675fdac3abe406a8991ef4215703f3af77a6669466e5f77ca23e", 0xc0}, {&(0x7f0000000300)="f3d2ad44af340a99e2f07aed3ce8754b63391af8fbcb36a8761567707cfb919dc81521083c8cbc4ff3a1d4b6e7f8b28df470180a3d5f22d9d5be850af68190f6b34e9f2ccc8e270a24494231839cc4c021023f20395dd41664a083b809c43fccae9f07e556723a2454920039fca20f66104d080d4ca055c7e77afaf776b8b2becfdc99b8c7d50d079d93a8164b5a4e48a01bbb6ed37d6949d39fd1d2d8978d01214b729d5768235a0f4ffb1127cd97401a1e39a6b7bb1b03e992", 0xba}, {&(0x7f00000003c0)="c9e1f8e8f397523a80a84f57f8435bfe7347bac02539d0055cb528595d99ebdc986b746a97fbad004885b643f2b58a7ebbef431890ac52fc2ee97f34ebf3e9e472cb4a5dd674f9b5c6b17e0800e41574fdc392fd50a841f8e7b8e3bea071aba4e25e4856c65e4a8bb310f8e82deabde8c34b4d52142b71551cdc3143f043ccf6ccde288c7bfca49dc70a1dc9e6dfe326a984e068e0fb76d66560452a2de5036daab9223df28f", 0xa6}, {&(0x7f0000000480)="36304eba71a8792b19e5255c3e87f3bdba3dd785c7d3b60c1fd1728e8b2baf30afd81f9479d5c7f2621aedcaaf05e32c1c66c4149368f2890daaab2f55949ff2fd9213162c607852d3", 0x49}, {&(0x7f0000000500)="07278254563c9430a193eb89bb6c31bc04cf1db1017b85889c72b93d35550d33ab4ce3a1ba8894fb8c59b821a761754461504e9a6f6ed061b540ca864d668f7c29c24dbbe9884b0964df6fcf8682fe780892dce4905d635e00932caf0f0948f5b8e2114d65e4dfbd000bb7fad3d1ee93dc5008e5841ddc024690b494191d96d458b05c153dc0a3b2889c505833b220a37c8a4c19c7c138eb8961c01824e11c3cf2a20a31", 0xa4}], 0x5) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000000)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000d40)=ANY=[@ANYBLOB="c4020000180003e827bd7000fddbdf25ffffffff000000000000000000000000200100000000000000000000000000024e247fff4e24000a0a0080905e000000", @ANYRES32, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001000004d65e000000e000000200000000000000000000000001000000000000000600000000000000000016010000000000e0000000000000be000000000000000000008000000000060000000000000001040000000000000500000000000000ffffffff00000000080000000000000003000000000000000000000006000000000400002bbd7000053500000a00030900000000000000000d000000000000000c0015"], 0x2c4}, 0x1, 0x0, 0x0, 0x20040080}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(r4, r1, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 6.614847874s ago: executing program 8 (id=635): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x9}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) r2 = fanotify_init(0x10, 0x80000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fanotify_mark(r2, 0x80, 0x40100420, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @ib_path={0x0, r1, 0x1, 0x7ffffffe}}, 0x20) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1d19"], 0x20) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') (async) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') pread64$ublk_ch(r3, &(0x7f0000001f80)=@buf_max_buf, 0xffffffffffffff06, 0x144bfffffff) (async) pread64$ublk_ch(r3, &(0x7f0000001f80)=@buf_max_buf, 0xffffffffffffff06, 0x144bfffffff) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r3, 0x2, &(0x7f0000000040)={0x2, 0x7}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYBLOB="2000000000200000140003006e657464657673696d30000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20040080}, 0x4004) r5 = socket$can_raw(0x1d, 0x3, 0x1) msgctl$IPC_SET(0x0, 0x1, 0xfffffffffffffffe) (async) msgctl$IPC_SET(0x0, 0x1, 0xfffffffffffffffe) listns(&(0x7f00000000c0)={0x20, 0x0, 0xc, 0x2000000, 0x0, 0x3}, 0x0, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x4, 0xffffffffffffffff, 0x4) 6.489330978s ago: executing program 8 (id=638): syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r1 = syz_open_procfs(r0, &(0x7f00000001c0)='mountinfo\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x40, 0x107, 0x70bd2b, 0x25dfdbfa, {0x3, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fc000000000000000000000000000000060004400e1f00000500070088000000060005404e"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) syz_usb_connect(0x4, 0x36, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0c000310"], 0xf) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x40, 0x0) socket$unix(0x1, 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) io_setup(0x512d, &(0x7f0000000180)=0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) io_pgetevents(r7, 0x6, 0xa, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000500)={r8, r9+10000000}, 0x0) utimensat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={{r5, r6/1000+10000}}, 0x100) 4.640415462s ago: executing program 2 (id=654): r0 = socket$netlink(0x10, 0x3, 0x14) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000500030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x94}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a0c6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f80000001a00010000000000000000000000000000000000005dea0000000000fc02000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000000003c000000ac1414bb00000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000a0002000000000000000000080016"], 0xf8}}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000002020102000000000000000002000003240002800c000280040001002100000014000180"], 0x38}, 0x1, 0x0, 0x0, 0x40840}, 0x4010) syz_emit_ethernet(0x3c, &(0x7f0000000080)={@empty, @random="77a4eaef9ec3", @val={@void, {0x8100, 0x7, 0x0, 0x3}}, {@generic={0x10, "086fce2ca4af6388e1bffb9803fc5b6822df422d6d9aa91a75ddfe23106b74c78be55128c0f8ef5e556b"}}}, &(0x7f00000000c0)={0x1, 0x3, [0xf43, 0xb52, 0x665, 0xd6d]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)="ff80", 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000040)={'veth1_to_bridge\x00', @multicast}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001e14010000000000000000000900020073797a31000000000800410073697700140033"], 0x38}}, 0x0) 4.617508555s ago: executing program 2 (id=655): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r2) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004091) write$cgroup_devices(r2, &(0x7f00000005c0)=ANY=[], 0xfffffeff) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) mmap(&(0x7f000084c000/0x4000)=nil, 0x4000, 0x6, 0x40010, 0xffffffffffffffff, 0x4ac0b000) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xffff, 0xffff}, {0xffff, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x1}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x9}]}}]}, 0x40}}, 0x800) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000006a0000001d45000000000000000074727f5f1600a3fac9072ceb71060c8b11fa12a347a9b1a2169ad8bbcba2e067547bb0a62c578603729c06752f79f5ac1073b7fbf359db13ffd9ba55d602000000e055ed739864f7c0b0631566fb9632045beed67ea347ddce00ac42", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) (async) close(r2) (async) socket$kcm(0x2, 0x200000000000001, 0x106) (async) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004091) (async) write$cgroup_devices(r2, &(0x7f00000005c0)=ANY=[], 0xfffffeff) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) (async) mmap(&(0x7f000084c000/0x4000)=nil, 0x4000, 0x6, 0x40010, 0xffffffffffffffff, 0x4ac0b000) (async) close_range(r4, 0xffffffffffffffff, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xffff, 0xffff}, {0xffff, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x1}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x9}]}}]}, 0x40}}, 0x800) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000006a0000001d45000000000000000074727f5f1600a3fac9072ceb71060c8b11fa12a347a9b1a2169ad8bbcba2e067547bb0a62c578603729c06752f79f5ac1073b7fbf359db13ffd9ba55d602000000e055ed739864f7c0b0631566fb9632045beed67ea347ddce00ac42", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) (async) 4.33739014s ago: executing program 2 (id=658): ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af83, &(0x7f00000008c0)=0x8000) 4.064999806s ago: executing program 2 (id=659): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/kvm/kvm_hv_synic_set_msr/enable\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_NAME(0xf, 0x0) pivot_root(&(0x7f0000001080)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00') 4.000049343s ago: executing program 2 (id=661): r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000040), 0x10) sendmmsg(r0, &(0x7f0000001f80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="d0df774835639447de8aa9b4edf202fb1149651e04307d0f6b378a853b76994f0cc2db00e4686cdf9ca9faa03b61f4dfcff4544c7adfd208dce891218c1265a9af65f6d4c3a09e28af3f32c4a4056b8c25fc41c8282b68d9eee30ef5585c7f1351f80efcc6391eb6c1611acc0982f6c18518341f8acf8f55c1e1a54ebc788d23f08e1d655942050b5dbfa3269cb844ea6735a8779c315f2b2d44102d57d16f20fdce70cd331c16d3213b3584aaaaa986a80e56b5489ebd3300", 0xb9}, {&(0x7f0000000140)="b70cd18c34e29761ccfe2dce332fd21ead058b57e9c402de333ba68fc62c0ebdbc981032992ce81fce162afb9c2012d7069918921f1be5d4bb5ef112c68c7883b3fa77ba2f3d42e4db705110bb5dd5fb8b2e8a8b39bca532a6aa73e268cb2eb6d53ec8f0ffa051cd07d29626ef243beb36f56d6ad3c4601975f0749f62f8274b5a1eeb0f2f24ed2f92f87b25e9e9bd5abc4f6face1013a3d0a98521b4956f7f755438f36df2dc50a23013c19c9b336c89d0f8542f93a8c58fcca92c4a40e2f327bd285ad0bd6e2052cab1ef9329c47e2f0afb344e01b8d41276539d3530d7cc4cff0f04e97b94880", 0xe8}], 0x2}}, {{&(0x7f0000000280)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000300)}], 0x1, &(0x7f0000000380)=[{0x100, 0x0, 0x0, "2657ba15cbc88f59fcc79391269e25714084ec589fb732727bb74ad79f237fa7d503235eba2f52e72633f8437b004177bca7150e181345647dac5ebea50619bda66fe7a1d8f24bcea4e81f34d79e11531ddf5079603c1fb4531b06364127d36d4d5101d4d36a244e92a356760389a692f5105e4218cfed7e8210a98d55388b047d24834fed4d32884bf8144174a18b5dddfbf854dad15a6df27a05083f8c594970a19fe030a6f30ae4e9583ea180444cca3aa110a7505338713e365f9105d43b70c069a92f6d9eaf6b9370b154a260235ce4feb3fae2c3bdd4f5555862aad7f050e2c68de81285d220c93a7c164bd981"}, {0xf0, 0x230, 0x6, "65b42360e6d666587e7abedfe833dd2657407af5e610d7ac6ede167454b782b5bb8bcb828af7b55e5b580e34fc353fd5ccf74307634f8bff3f803ff7a3194149700fabd9bde82f5449c90e2855e567b35dcf06452c1aa15f0b3385b1b9ab69b93573201c0c1eac900e3e6158a75e200529b2a088f8909bff79e20b2ab488103071c6600b3b59df39e1c5851b293cad711e5fc0dc1595167ac5b53c4670cf71b1e470394e4d090f38a655f921049042fc318bef1b148148fcd4a9df23b2493e41d112549cd0c7ffcc8c3f6e66aca1325565edb16135080c2795ea"}, {0x10, 0x88, 0x7b8}, {0x110, 0x102, 0xfffffffe, "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"}, {0x108, 0x10d, 0x0, "f75193987f2ca48e93ad55b79ac96488ca49ee6780a2f9f1a091db1e46838fc0fe4c8c985c2e764a9fa6d77d1a9822171824f3446741ba37a0d765416ada0ec30631c845231e8a436f8e93df79bda56fd196fbe9627a3b95a67a8ff73c2dda4963a727a405d0065fd5aecaf7bca1e40dca58c786a3b55e8b5fc71f790cd031a4500fcf7c4fd0c595051af6f882042a0b313711bef1e06f1c4d97f106191372b2ff6d2697b81eb079fa6153072b5f49a8b7eeac87c7c941829f963509fcc1204d9395cd1b5708e402a4f6251d5ca8743e556d4d52195d784be2c80a08d5818ae7654f569100beaae643ab34d25f0dbf2378b2d02a79"}], 0x418}}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000007c0)="bf26cac69c1bf3ed2753ee3da505dd10bbd8b8b8729c4c4ab49d", 0x1a}, {&(0x7f0000000800)="bf1f9d70cc1b12605c73291219c9e03bc2b3e578ee0e835c4d3ebbf344fe61ccaf8d5739b222a449ad022e7dc3e72233c72f8dbba18e77f26324abecaa2558ee2885897d145b94e4794fbe5e42d3d680a68a1f02dfacd8ee64bdcdf68a4b9c71c6925fb8ea671b59957b4e57ec38f51294bc34458ded12a599a1dd94a4e96863d802cd27b5df50ede6505f0fe43cad673a997d3d7f7de591194470256d3d8ea921", 0xa1}, {&(0x7f00000008c0)="86e0ac27b25ea92d082bd1c92623bcf563f4a451069b90e65e3751732d", 0x1d}, {&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000001900)="1b688403c8cf86b815ea962b5384943d7df4b9cad598afd08a5099928494455442e30c83e513a1a74c697cc0b1375635b3e89cfa4c5e82a009c19e2a8652a354d99d3caa3259be05e2335ceb09e49e20aa572479ddfc2a355211656e8d65", 0x5e}], 0x5, &(0x7f0000001a00)=[{0xa8, 0x104, 0x8000, "ab3869c1c049fe6000b79b200a4f6e2186187d199b231f1c45eb868a39025613a645c5edaa30824441cc113d2626a38894fa61ccd0e8be523ce6de370a95bc92c16fdbb8e29ccabca0c6f09e53654070f50d3c8fab9a8ff306f42f59a0106470e50dc2fe471f0005b579362ee50352a23d4ba71e3f61aaf0826c4b4ebeca8b946418c8006574636dc89e746b7c2b4c5933328831"}], 0xa8}}, {{&(0x7f0000001ac0)=@phonet={0x23, 0x8, 0x1, 0x2}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001b40)="0d27c8cfb0436d0ed07d48fa632f6cfcaf01d596409e1f8acdb4d8e72e5189863d18dfabfbca0ec8f71ee0a11aa8f9e5b615d22f660476ee097e91ffa4122ab2df71b98a51d504222bb30ccebbc56a42326e042a0fc4ab0a27fecd1da5aabfb4c5e576944f62910d2456b46a83599b0d67c1c0c0639d74f07352dcb96377c86aee6b188527e1befb137935c418184bf13726497715e1e2c093dfd1dfca7d214d280f65a1b9416a1e229c0f272ab414f4eb3b1147f5", 0xb5}, {&(0x7f0000001c00)="6e407784e6282debc2f9c71f34d6bc57f9a846f7ffc89bd443010505d5d53baff8bdf9e13ddf7ce8526020ba9dbbf0c4283d9873455bba661cd20050512bdfff57d2df162120f390c52ccdff7cfb230495690633b8cd31fa18871e18cfe9894c0ee4debd41a51f87817f57bba7aaed15737f5f7bb4fe8d0ee2fb2fbcdcf358e7bc4bfc94dd09d88ebfd74e6c4df778584d25e716026d", 0x96}, {&(0x7f0000001cc0)="f55b4fb6a55a9860a8a8c699915d1912bcbe9ebc9358f05e6ae2d9a08abe605c124ef3540199e743d73e5064cfb71eae71835febe9ef17454df0186495d0866fd09e757030c55d1bbdd05a3df51576278a38aee5a347919fec028249672c122b15312b894eeca387e45d", 0x6a}], 0x3, &(0x7f0000001d80)=[{0xf0, 0x104, 0x88a, "9aa3036d18724d33c975487d021ce652777a430a67e581282ca95e693611c48ee29f901c62c6896bb577307c609fe020353e02fc8156ba266690c220ed3ce67e7aa51426e8c01fccdd64ece130c694b12633be82aa31476c216b7226d4f42d23406731288bd2cf3d22473c0e06dd73e5d4df22c62b834d775a0936278a70eeb624bfaf64fc77d9879e7939e825e364a2e38b8223efd933c50c9223b42b16a9a30bf6068d0c1be853ff3cdb1e25a53651102b2910fc793bbd4abd63c99105237858f95db56e3380a0ea6362d8f996d74c942b8f47aff7295bef4b74"}, {0x40, 0x109, 0x80000001, "b4477291ad6f906c09a82c091cf2f7a2aa818e1b5c11f93c4ee0b3c2981c8d4fcdaafe2a070268f0413f116b"}, {0x68, 0x29, 0x101, "aa6a90c635428e2ef93e0d8c1efc16e2a4585fc1dd44722c2b25f7e14e9ffdaf084ae952f6e7bc67021b6e8e598f2eb46b64a2d2ffe9e1873e01b42143dad90d8cb0efce92c6ac364d42f7a7221f92ed0f60"}], 0x198}}, {{0x0, 0x0, &(0x7f0000001f40)}}], 0x5, 0x40040) (async, rerun: 64) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000020c0), 0xa0800, 0x0) (rerun: 64) process_mrelease(r1, 0x0) (async) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000002100)) (async, rerun: 64) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000002) (async, rerun: 64) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000002140)={0x6, 0x4}) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000002180)=0x5, 0x4) (async) close(0xffffffffffffffff) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x40010, r0, 0xeb2ee000) (async) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ff9000/0x3000)=nil) (async) r2 = memfd_create(&(0x7f00000021c0)='\x00', 0x5) r3 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000002200)={r2, 0x45c8, 0x2000, 0x2000}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002240)='map_files\x00') ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000002280)) ioctl$PPPIOCGIDLE(r4, 0x8010743f, &(0x7f00000022c0)) (async, rerun: 64) ioctl$XFS_IOC_FSBULKSTAT(r2, 0xc0205865, &(0x7f0000002b00)={&(0x7f0000002300)=0x10001, 0x9, &(0x7f0000002340)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000002ac0)}) (rerun: 64) ioctl$PPPIOCGNPMODE(r4, 0xc008744c, &(0x7f0000002b40)={0xfb, 0x2}) (async, rerun: 64) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002b80), 0x460000, 0x0) (rerun: 64) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000002c80)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x40, 0x13, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) ioctl$EVIOCSABS3F(r4, 0x401845ff, &(0x7f0000002cc0)={0xfffff0da, 0x4fa6a748, 0xffffffff, 0x8b, 0x2, 0x5}) (async) ioctl$XFS_IOC_AG_GEOMETRY(r0, 0xc080583d, &(0x7f0000002d00)={0x4ca4509f, 0x6, 0x9a, 0x7, 0x6, 0x6, 0x2, 0x400}) (async) setsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000002d80)=0x6, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000002dc0)={'veth1_to_batadv\x00'}) (async) write$P9_RWALK(r4, &(0x7f0000002e00)={0x4a, 0x6f, 0x1, {0x5, [{0x10, 0x2}, {0x4, 0x2, 0x6}, {0x0, 0x2, 0x4}, {0x2, 0x4, 0x7}, {0x8, 0x2, 0x6}]}}, 0x4a) (async) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) r6 = accept$packet(r4, &(0x7f0000002e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002ec0)=0x14) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000002f00)={"11ebf04075cf363c7f99a6f0c690fb5b", 0x0, 0x0, {0x0, 0x6}, {0x4, 0x4}, 0x3, [0x400, 0xc7, 0x0, 0x6, 0x1, 0x9, 0x3174, 0x9, 0xd, 0x8000, 0x3, 0x7, 0x4, 0x7d1, 0x3, 0x200]}) ioctl$BTRFS_IOC_WAIT_SYNC(r6, 0x40089416, &(0x7f0000003000)=r7) 3.479979442s ago: executing program 4 (id=664): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") unshare(0x6020400) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x3b}, 0xa}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)='c', 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f00000008c0)=[{&(0x7f0000000340)="2eec858c", 0x4}], 0x1}}], 0x2, 0x4) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x82, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x7, 0x2, 0x7}) unshare(0x2020000) 3.145094865s ago: executing program 4 (id=665): syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000200)=0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb29}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @empty}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f000000c000/0x4000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x4000, 0x3, 0x2}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x29}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)="000000000000000b000051229dc9", 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x8, @private2, 0x49ec86ad}, 0x1c) 3.14457024s ago: executing program 2 (id=666): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000002c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x100007, 0x16, "b0bf2ebb48c8040018bfef400000000500"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0xff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r1, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) inotify_init1(0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = socket(0x40000000015, 0x5, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="e64f2be8d3e7a2aa", 0x8) sendmsg$nl_route(r6, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000002200000128bd7000fddbdf25028014108100020418000000"], 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x81) r11 = accept4$alg(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f000001a540)=[{&(0x7f0000000100)="67108e1744", 0x5}, {&(0x7f000001a240)="00689775", 0xfeb7}], 0x2, 0x0, 0x0, 0x1}], 0x1, 0x24044080) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 3.036309041s ago: executing program 39 (id=666): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000002c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x100007, 0x16, "b0bf2ebb48c8040018bfef400000000500"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0xff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r1, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) inotify_init1(0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = socket(0x40000000015, 0x5, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="e64f2be8d3e7a2aa", 0x8) sendmsg$nl_route(r6, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000002200000128bd7000fddbdf25028014108100020418000000"], 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x81) r11 = accept4$alg(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f000001a540)=[{&(0x7f0000000100)="67108e1744", 0x5}, {&(0x7f000001a240)="00689775", 0xfeb7}], 0x2, 0x0, 0x0, 0x1}], 0x1, 0x24044080) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 3.028804474s ago: executing program 4 (id=668): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4d5, &(0x7f0000000b80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000140)={0x1, 0x1000, 0x7f}) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000000)={[{@debug}, {@dioread_nolock}, {@inlinecrypt}, {@test_dummy_encryption}, {@grpjquota}, {@auto_da_alloc}, {@delalloc}, {@jqfmt_vfsv0}]}, 0x1, 0xbe0, &(0x7f0000000bc0)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000005c0)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x5, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fadvise64(r5, 0x2, 0xc21c, 0x1) 3.028597813s ago: executing program 8 (id=669): r0 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000200)={0x0, 0x91, "cea74a98f83bf94fa2dfeb02eb9ee99fce2c6c60d9840fe683a8b6a6ab4e3279804feeaee89360021c7d7ec679427d2c25c477a48b084b9fadd3ec8b036700fc494241d48a8b5243b166923eaa1d9a738dbe0c9c7c4a521d72dfa4c642a10bcf429d7e05f93430a887ae381fe8d55e965789d44e89b472c774cc7915aa5513a5fada44d778e77c561c65b97b065693b8c6"}, &(0x7f00000002c0)=0x99) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000300)={0x0, 0x7b, "df43645938207df92333e131a87b454ca63d015d9eb47d6cd3d007051a99764bbe0b1e7144284ff731b4d1efe138dbc9071ce17d18090654fcf5884edbbb55565d7c770a4e261540ba9b64692644f04e9db6755c018b0986c829dff787459c12908945806b7efb899d9b68f3eeee3b47d0650a28514c2dbe0f5207"}, &(0x7f00000003c0)=0x83) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r3, 0x6000000) copy_file_range(r3, 0x0, r3, 0x0, 0x9, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000480)={&(0x7f0000000000)=@in={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000080)="f7d8e6f0d32fd9c025d3c266c3b114d4bf8578009b73ba95ff15761b7a74e84aef1d3a55246fecbc7c3e8a379ed2274d5ebc1260a8", 0x35}, {&(0x7f0000000100)="126e09ea602f90b51dc465f44b990fa8dc0c18a58c37a86510cf20f39c116f043d753def9599d400790113be91c906bdfdee87d8bfdcc6f46409a2750d5a256ad00604111ae2de03b04c2fa40a165e92cde99a0f9b48ffa0e2ac14cdc94f6ab8066d1ccfe05438ed8460139905b3f8e2d9360f43ba48a27442330b3f4f8ca022bcff9fb63e962afb8f30ddc7a42b9ba37bdf1a326ad2bba50cab0f358425d338e7cd5faf7461b448ac", 0xa9}], 0x2, &(0x7f0000000400)=[@dstaddrv4={0x18, 0x84, 0x7, @loopback}, @dstaddrv4={0x18, 0x84, 0x7, @remote}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0x8, 0x8200, 0x8, 0x8, 0x1, 0xff, 0x9, r1}}, @sndinfo={0x20, 0x84, 0x2, {0x5, 0x3, 0x2, 0x80000000, r2}}], 0x80, 0x10}, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0xffd9) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1b0000004a008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a5b51621", 0xa}], 0x2, 0x0, 0x0, 0x10}, 0x200400d0) 2.886583391s ago: executing program 8 (id=671): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000900)={{0xffffffffffffffff, &(0x7f00000005c0)='GPL\x00', 0x4000, &(0x7f0000000600)={@_ha_fsid={[0x8, 0x3ff]}, {0x6a40, 0x4, 0x7, 0x7}}, 0x5, &(0x7f0000000640)={@_ha_fsid}, &(0x7f0000000680)=0x81}, 0x2, &(0x7f00000008c0)=[{0x1, 0x5, &(0x7f00000006c0)='overlay\x00', &(0x7f0000000700)="2a4563e163360f9fdedfbb8600e73b9f78ac0775ded3228a5c19a4ccf007c4aff1abe237f2657bc75335caf08dfd290304fb8afb57396ece34b57d4a21b9e52d55e67f30c55ead859a62c3d6c878fe6459d0e7af424be0c05a55f8488b60c98dd990171e439526f310434bf62d01c6d95e77cf310df0f34aa76006a9eafaf5145c749163e8c6ac3f9fbf5c811d02cb875bb1431172806b2792682427fe41c6a44536f7b6079ea4c0ae35e269deb4ed237448c7305cba98dce779034a1bb69bb336dc09e7fe99d0b153d530bbec", 0xcd, 0x10}, {0x2, 0x0, &(0x7f0000000800)='\x00', &(0x7f0000000840)="37d7a580d7c8e6e28889ebcbbf3424a6735147934d705de4bd3aab7ef8f4f672fea8baf7e22d164813d9684731620dd33104c047ac26917570c06b3b5737e46800a1fc86dc", 0x45}]}) read$FUSE(0xffffffffffffffff, &(0x7f0000003280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000052c0), &(0x7f0000005300)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000005340)='./file1\x00', &(0x7f0000005380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000005400)={0x5, 0x1, {}, {0xee00}, 0x200, 0x4}) mount$9p_fd(0x0, &(0x7f0000000980)='./file1\x00', &(0x7f0000000580), 0x1000040, &(0x7f0000000bc0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@debug={'debug', 0x3d, 0x10001}}, {@version_9p2000}], [{@uid_gt={'uid>', r1}}, {@obj_type={'obj_type', 0x3d, 'overlay\x00'}}, {@fsname={'fsname', 0x3d, 'upperdir'}}, {@smackfshat={'smackfshat', 0x3d, ']./'}}, {@uid_gt={'uid>', r3}}, {@uid_lt={'uid<', r2}}, {@uid_gt={'uid>', r3}}, {@obj_role={'obj_role', 0x3d, 'inode_readahead_blks'}}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000340)={0x2, 0x25, "76f65419cf52b2fcb05d51fc5c5201c6b286b572129842c7d530f43f18afda78ada3a76401"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000003240)='./bus\x00', 0xe, &(0x7f0000000240)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0x43, 0x47a, &(0x7f00000028c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./file0\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x3a, 0x0, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r7, &(0x7f0000001b00)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0xeaff) mount$overlay(0x0, &(0x7f0000000a40)='./cgroup\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af) getsockopt$X25_QBITINCL(r8, 0x106, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r9 = syz_open_dev$media(&(0x7f0000000040), 0x4, 0x142040) ioctl$MEDIA_IOC_ENUM_LINKS(r9, 0xc0287c02, &(0x7f0000000300)={0x80000000, 0x0, &(0x7f0000000380)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r9, 0xc1007c01, &(0x7f0000000080)={r10}) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200009, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) 2.803951511s ago: executing program 6 (id=672): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000000), 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x3) write(r0, &(0x7f0000000080)="b83e244132dd405367c3a1f94fab57431efc954713af9a5b627a10c86475ba3906bff1b1837a673b7661ccedda2ffd920564ff0047662b3156f94936e20f6ff9ceb9cff25b5bc4fe2cf3cb8e178982779be757abffba1708d4234ac1f42867b9f5a0c88d4b0df9481ba0078f6ebd6155a13d71d60bd7258ada9827eb018b7bdde5ba7eed359f7dca26c5a238caec1e836f3ede665b9d214e17e7ef42fe257e5350ed01b2af59c52aa1910104661b3f8b3ba002fe9b5a2c072e85ba1bbe1dbf1322209c", 0xc3) ioctl$NILFS_IOCTL_GET_CPSTAT(r0, 0x80186e83, &(0x7f0000000180)) (async) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @multicast2}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x214bc0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @none}, &(0x7f0000000280)=0xe, 0x800) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x13) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000002c0)=0x2, 0x4) r5 = syz_open_dev$mtd(&(0x7f0000000300), 0x10, 0x40) ioctl$MEMGETREGIONCOUNT(r5, 0x80044d07, &(0x7f0000000340)) (async) r6 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r6, 0x11b, 0x7, &(0x7f0000000380), &(0x7f00000003c0)=0x30) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x30, 0xffffffffffffffff, 0xea000) (async) syz_80211_join_ibss(&(0x7f0000000400)='wlan1\x00', &(0x7f0000000440)=@default_ap_ssid, 0x6, 0x2) ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f0000000480)) (async) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0), 0x105000, 0x0) ioctl$SNAPSHOT_S2RAM(r7, 0x330b) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) read$FUSE(0xffffffffffffffff, &(0x7f0000000540)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r1, r9, r10) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000002680)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002640)={&(0x7f00000025c0)={0x60, 0x1403, 0x2, 0x70bd26, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'dvmrp0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040844}, 0x4008001) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f00000029c0)={0x0, 0x4}, &(0x7f0000002a00)=0x8) (async) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000002a40)={0x0, @in6={{0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}}}, &(0x7f0000002b00)=0x84) sendmmsg$inet_sctp(r8, &(0x7f0000002e80)=[{&(0x7f00000026c0)=@in6={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0xe}, 0x6}, 0x1c, &(0x7f0000002980)=[{&(0x7f0000002700)="41c81ecdb08532e01d2388fb9f76fa3a6c7618e6a9f8cce65a679f30c8b9228b853a4520657a8c7387c6e403ca4b4eb3a741e21b0e810b1726e592b1363b050ef161a1f42106732c5499672ca00ba14a8f4b97660dbafc21ffadb3fd6577944e62ff4a5c02d895cbd48a80782d4aa8bb5392501045e60c1c378f", 0x7a}, {&(0x7f0000002780)="1ce07ec32a1d0b2cb47b3bcb4ee2351ab520292f0dc85570f1fe84accc42c9a84907384ef4b52a38c6dc94aaa861ec6cf622e3183ecedf5804e50d98052669b5fffd9d4298764dcf71a54ed84527fd59e91ab011b43edcc55759680d59eb80b84ba704e5431a84fbc0eba38e813486fa816a2e502a420fd6f3c3caa362f70f044072d1541b7cbd30a205048a764110b8de0d3d0ad0c8a1007db08f237c88e74c39d44afd48f6e1b6219ce7a6e4845f514c32b365373f9b98fc9d0a78de05382bf696678908e86fa0c07a5a9d9b2f", 0xce}, {&(0x7f0000002880)="3f5c57b33a009c278b6ec94ead614a", 0xf}, {&(0x7f00000028c0)="753f551268cc4fc18965894d9d81bef02e27c7a39a5e786c6cd92f4d739005e9ebbf470df1bb7bf0a983a9e164a06c3f211cf2f6772a835b8639d12ec24223cfde156bba40b4471a8e79d09c996870816d9dcbc9cb1552711e571ccb60dffb17d79c2ff8eccfdc367530f52f48673ee273d9dfffd595f57b4cdd37289fd12c522dd2612fbc6ad894634e4e5d23f4d9bfe2a2a2f294140e0c", 0x98}], 0x4, &(0x7f0000002b40)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0xfffffffa}}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}, @dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @sndinfo={0x20, 0x84, 0x2, {0xf, 0x4, 0x3, 0x0, r11}}, @sndrcv={0x30, 0x84, 0x1, {0x1ff, 0x4c, 0x200, 0x3, 0x3, 0x800, 0x8, 0x4, r12}}], 0xa0}, {&(0x7f0000002c00)=@in={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000002d40)=[{&(0x7f0000002c40)="4b29e6010d90e50bb351d0c0c92f1251ddbffb5b5ff627d121baee8560a518f6a72a2c27b497cddbb971a8b9b57b5e2623397a94cd26a76050196424984b0e999b0f9463812b879d012540de2b3032864723d1cbdf42776b87a9ccac2e221d75485d9c872e84367b915b2855b5027a7fac0c19bcbedcfabff2cbe30a45c94e2eac66de6d9dc5abe43efa73178bf2c43714e8849450ed178168365e2c251a399586ac8f2c71056fdc21a61b598eae88e79e3972727b6a10e02abb304ade388808f12f29", 0xc3}], 0x1, &(0x7f0000002e00)=[@dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @sndinfo={0x20, 0x84, 0x2, {0x2, 0x8, 0x10001, 0x4}}, @sndinfo={0x20, 0x84, 0x2, {0xff4d, 0xc, 0x3, 0x1a000000}}, @authinfo={0x18, 0x84, 0x6, {0x1}}], 0x70, 0x40000}], 0x2, 0x10) 2.409279916s ago: executing program 4 (id=674): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000080)=0x404, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sched_setparam(0x0, &(0x7f00000000c0)=0x7) sendto$inet6(r3, &(0x7f0000000a40)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) recvmmsg(r3, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/36, 0x18}, 0x6}], 0x400000000000084, 0x40000100, 0x0) 2.391734604s ago: executing program 6 (id=675): add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000500)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x52c, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async) r1 = gettid() setns(0xc9, 0x0) (async) r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/tcp\x00') pread64(r2, &(0x7f0000001340)=""/102385, 0x18ff1, 0x98) r3 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705ae5", 0xc1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r3, r3, r3}, &(0x7f0000000440)=""/210, 0xd2, &(0x7f00000003c0)={&(0x7f0000000340)={'sha384\x00'}, &(0x7f0000000040)="708803449262ddb5bda92158536f78c390609a10ccd72b2c85a693afd7d8e5ffc37e1b3aebbdae8dc970f27a4a2c8ea219bf4f52f500"/64, 0x40}) 1.875726787s ago: executing program 8 (id=676): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x501, 0x0) ioctl$IOMMU_IOAS_IOVA_RANGES(r2, 0x3b84, &(0x7f00000000c0)={0x20, 0x0, 0x0, 0x1000000, 0x0}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x7fb, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500), 0x0) r3 = syz_io_uring_setup(0x10, &(0x7f0000000140)={0x0, 0x5500, 0x800, 0x0, 0xfffffffe}, &(0x7f0000000100)=0x0, &(0x7f0000000108)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x44, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc}) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x77359400}}) io_uring_enter(r3, 0x6, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000330007010000000005000000067c00000800018009007880f09240e8310000ed"], 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0x4010) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1000}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@gettaction={0xc0, 0x32, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x10a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6e0800}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x4}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$tun(r8, &(0x7f0000000480)=ANY=[@ANYRES8], 0x20) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000600), 0x56) 1.747778771s ago: executing program 5 (id=677): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000002680)=ANY=[@ANYBLOB="9feb01001800000000000000200000001800000007000000050000000100000f05ffffea0000000000eaffff03000000002e00000030"], 0x0, 0x37, 0x0, 0xa, 0x7e8}, 0x28) 1.544513647s ago: executing program 5 (id=678): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAF(r0, 0x560a, &(0x7f0000000240)={0x9929, 0x0, 0x0, 0x0, 0x1b, "040000002300"}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000}, [@map_fd={0x18, 0x0, 0x1, 0x0, r1}, @map_fd={0x18, 0x5, 0x1, 0x0, r1}]}, &(0x7f0000000100)='GPL\x00', 0x5}, 0x94) 1.527171875s ago: executing program 6 (id=679): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x58}}, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000100)=0x100468, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8}, 0x94) sendmsg$xdp(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x8, 0x1, 0x820, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x200, 0x400000}, 0x50) 1.496324965s ago: executing program 5 (id=680): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000009"], 0x48) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000680)={{&(0x7f0000600000/0x1000)=nil, 0x1000}, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000140)={'bond0\x00', @remote}) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x82) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r4, &(0x7f0000000340)="05036d1ee8fe091c6202a0ffffffff0060031200000088fb143488a87f43890662cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dcbeec0696c37b64e3b24da3183dbe97e805165c0f63cdc2e82818254950ee03568b88091e6a86450545c0e18e09"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r6, r3, 0x2, 0x0, @void}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) syz_emit_ethernet(0x3b6, &(0x7f0000000440)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, [{0x3, 0xa, "a78ce5400659808000000003f7ffffffffffffffffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34466d42c60a5c15b37adac15084dbaf736b41e5af1802"}, {0x3, 0x1, "000000000000000026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x18, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x5, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c764c2d227a83b89483b1084743474677e45e65eb27a5c8d989417019f619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f019"}, {0x21, 0x7, "fcc1876d4ec1876d4e6fa3ce2dfdb43a6f021659ff5c2d6b3d9363ed09bd9281c9fe68a3000000006f0000044e43e740e077e1d16212fb"}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x22, 0x5, "090000000900000036da018dff16e70b8b1400000000e18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 1.360368998s ago: executing program 5 (id=681): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1.317376666s ago: executing program 4 (id=682): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"a2e3ad084fc752f91b29090942f70e0dd0385d007fc6e5539b3272078b089b343b3b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d316d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a96cdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a55200000089298dde6e78e8bb000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df0784c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3527138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292812448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982c00000000b1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d618e462071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fcffffffffc1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aad66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9feae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4fdffffff0000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a0634c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2726e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd848577b330c581e5c5932b0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af44863c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e939450f3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7d0900000000000000885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000001600000000000000000000000000000000000000000000000000000000000000510b00", 0x1000}}, 0x1006) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r4, 0x10e, 0xb, &(0x7f0000000040)=""/87, &(0x7f0000000100)=0x57) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@bridge_newvlan={0x24, 0x71, 0x1, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x62, 0x1}}}]}, 0x2f}, 0x1, 0x0, 0x0, 0x240008c4}, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0x40002000}) 946.089849ms ago: executing program 6 (id=683): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) (async) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0), 0x8) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000500)={0x9, 0x1, 0x2, "3bd9d3fe337649c318d3b5710fe89a0d9ec9b50e98bc2e00", 0x32315241}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) 876.496356ms ago: executing program 4 (id=684): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) (async, rerun: 64) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001a00010000000000000000000a0000070a000f000000000014000100fc001000000000000000000000000001140002"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x183081, 0x0) (async, rerun: 64) mlock2(&(0x7f0000771000/0x2000)=nil, 0x2000, 0x0) (async, rerun: 64) syz_clone(0x21004000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) (async, rerun: 32) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@mcast2, 0x0}, &(0x7f0000000180)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000006118b8000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', r2, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 823.355844ms ago: executing program 6 (id=685): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async, rerun: 64) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2, @ANYBLOB="1d97df850f28e5340aa2c59c61fa5a92655dadc89809f26f9fd65a25e58ec449048ec07e20e05f7cbd87e7165e71a6448335916beafac1e027b6fab538436571a9d3aef1c5598bc24d015e8d7945747128df80e354bb3f8af675deff97b2d673cae9cd3761e67829c7a323975f32867eead81ab7b269c5090aca7e63763ed4457606cd"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x429a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_virt_wifi\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) getsockopt$sock_int(r5, 0x1, 0x5, 0x0, &(0x7f0000000380)) mincore(&(0x7f0000f0c000/0x3000)=nil, 0xffffffffff600000, &(0x7f0000afaf0a)=""/246) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x38a4, 0x2000000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_virt_wifi\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x8000) 572.966241ms ago: executing program 6 (id=686): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x808082, &(0x7f0000000200)={[{@resuid}]}, 0x0, 0x4a3, &(0x7f0000000a80)="$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") syz_open_dev$dvb_frontend(0x0, 0x0, 0x140801) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000340)={@desc={0x1, 0x0, @desc3}}) 173.201077ms ago: executing program 5 (id=687): ioprio_set$pid(0x2, 0x0, 0x0) r0 = socket(0x23, 0x5, 0x0) getsockopt$nfc_llcp(r0, 0x113, 0x0, 0x0, 0xfffffffffffffffb) syz_clone3(&(0x7f0000000400)={0x800080, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) 0s ago: executing program 5 (id=688): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) ftruncate(r0, 0x4000000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) pwrite64(r1, &(0x7f0000001000)="50146fe097739d2d08000000000000000000000000000000c68573f64e1a45ca8265f57f48ba6d81", 0x28, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/fs/bcache/register\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='/dev/loop0', 0xa) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x9f9, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffff, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x88b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40]}}}) sendmsg$nl_route(r0, &(0x7f0000001d80)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)=ANY=[@ANYBLOB="1c0000002200000827e67000fddbdf25021414040000000014000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000880}, 0x4040814) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f00000001c0)=@userptr={0x0, 0x2, 0x4, 0x408, 0x3, {}, {0x0, 0x1, 0x0, 0x0, 0xff, 0x14, "b9fb3c16"}, 0x1, 0x2, {0x0}, 0x7000000}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000002680)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000f05ffffea0000000000eaffff03000000002e00000030"], 0x0, 0x37, 0x0, 0xa, 0x7e8}, 0x28) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000001c80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001c40)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x1fc, 0x2, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xf6, 0x6, "2d04b06114add85614139960a85b51985c9cce063b713a6627a99fb63b9b45bdeb7455b3a21099394940173ba27930d7c8aa38c8a42540a1c520d9bce26debfbd0fc84aa73308209245dc4e57515d63ed4eb04ed173f8f7bf34c9794a130957df3387d56de2c3932afd30aea6ba2d62b08e69b6340ca12f831027afa2e9fa919ccbbaefd8958d132f40fa4b974cc535e307061546ab2f69b32b9c96db578851e8a45e8e45d17836a733976283200668a9fab223ba339af6008c3608694fc1d0ecb878f8b678351b41d3bd65bab1b833597d58df6926625cd404cb0fa998fe75ff12f960ef439bbff09e263cb916ac7d9a226"}, @NFTA_TABLE_USERDATA={0xb7, 0x6, "0371dcc9fb2317cc70d08e4518f36422b24663d320ad74cee3eea1f5caae95f8a3e2f70bb3b516091647b2dac767b888da6d38810359fea218a2a20b4ebe51a0e406ee669ddcc88740b22b6073b358a40d9dfca341fdf4decf9512943646cafc1cb3f27bf0dec20aa4c4c73215a265fcf0e2d2c583664fa56f89c1fcb52ba4a75ed344eb515ff10fd39473fbd630007343a38c48cff240121d13ccdfcd547eb742b61dcb2b7c53a2fd57a232a8398309e9b133"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x143c, 0xc, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8c4, 0x3, 0x0, 0x1, [{0x204, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @bitwise={{0xc}, @void}}, @NFTA_SET_ELEM_DATA={0x124, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0xbe, 0x1, "f8ec3504db73145228bb54bb109a644ed643f18444b0f941a8dc2211fc4c93101abd63f61c422dc195913c3532daf9fd255b9a88dce2a812e4fce6c972eee3de4acaf3cbea5f83f958984c22ac5e140900084e1b5d0c8c5eab7a2bf88e31aabf6d8d5ade957d5b4ecd893b5fd9aaff386d7bc90e9ba61d6e0b4052c4fa232bd195ef74e4be9976bd1c28279c489c39983b77f6214d0085fa34cbc23c97c786fd62d778db7b282c33a16a503fa7ea6fe2c2242cd0a17d5364bb5a"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7ffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0xc4, 0x6, 0x1, 0x0, "e8a08b612c5a9f5b14c5de74f79ff3defa36e8feb0a617dcbca8f4826ccb40cf32b924647deca87412dabd9e0d3349e88aa4f27ff73dc7297f1d7065bcf23ba32dfc652b0162c0dfad0c20480ee73026756d0286fec18c890f03e39251a78b85c7a02504a47cd42821c709e26a679d2e7a90e69059ebad00139ae5af684e74fdac4b931c03be49a3c7f828a992d2a95cbd432dd3958e6ea31c126475f5036e1d848427201cb27443d6ca0b009bfeec93abea3f16bc90a57437b129a4141430be"}]}, {0x94, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x90, 0xb, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8}]}}}, {0x44, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x8}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x11}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x6}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xff8f}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x7ba9}]}}}]}]}, {0x224, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xb7}, @NFTA_SET_ELEM_USERDATA={0xd0, 0x6, 0x1, 0x0, "594b7b794584b27ab96fa759ace7075cc6637dfdb59aaf790f4ba84e41232138c37c68c94b9e0b6813eabc70a64ec34ea003a78b004e36bcc3d0e24e161dcffbbe2abe289b5f24d55606639160d8c6edb14dc8fad546cb6e6c29470ccab184e7508ec115d2eaa0d461df397748c92c8b57d51ac71f810c185527f06e2cf1561ab9d542e5a6e250cdab1f5fadb7fbd4c9c13ada3e2d40685e1929bec66b1b9c772fad2d5714df89b8bc1b867f82c170a9c632256e1ca4c4d0aee247dd42f5f4ee6d0462118fc7fc6963bef0b7"}, @NFTA_SET_ELEM_KEY_END={0x120, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xb8, 0x1, "6f89320868eaf1d5cbd19cccf59cf9c053389f6ada25ca47b104f2b390ebf2a958f9873698eda44e0f2bb810825619fd7610401461aefa148df24a8ab80ff03f3473435791ac4c0542a67f2e4204fc4bdcbdbf2ffa74599fef3f9dbf8c98fdbb792c8d55074d802c25bc9ee172205710d75b10e9f97f982ae84fac0cabf029ac0ebca4a33be2a99e1c6d183cbe92f9ff6c672dd7e1cb2e7aaa927c985d61b30dbf3317d371b83ce7a5fbea3676d9e1aa0bcbb3b7"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xb}]}, {0x3ec, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x5, 0x6, 0x1, 0x0, "ce"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0x148, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x79, 0x1, "a299a00b5f32a1ff59ed26fb61906ee714d849274c7fc5751c8b4991f4e8d5b1b7e99d48c136c2796e71b4be1835f2fcf35e92a4f432fdf77c88bd41791cf80a42c998f384acfc934dfbb7aad2c04dd0dfff154ed1a9b39ee3c9f6c89656d58698a5df9475f1fb2baa963f350ff8db410c2ece7f4d"}, @NFTA_DATA_VALUE={0x44, 0x1, "8e419f5573d0849b22b739ff5b05d0dc71ff52a2d05fb516fe16bbd17d06dd7e443b7bf93e8dff603274eb61115ab9cfbdd959a4e6bdea826e9755914bebd382"}]}, @NFTA_SET_ELEM_KEY_END={0x264, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xcb, 0x1, "f920545628642ff9673acdbeac5002c9dda69f753afb6f740f39c3cc1232ed225734d2ae4eb0e8546dee79d68878047108590f914a50a549ce15cdbb955e14f2c5cf41693f1a042f12bec9db390be684fde9b15ee0da8c4d83183f0e6080c039241485474459144a01d227c72ab1aa6f31d60760bc3e772726323167a2e935a17e02392208ec847e1844e7ff88c8edf9059b838d9977376bbe094a0b8d6a551e2ae0c39f67d73ab7ade65df3b6c88ef48a2614fa434ce00021874fc8d272bb2f2353964d227d4d"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xaa, 0x1, "87319b0483f4bbde870be7fb8ff95f89aa89fa07a552d3e19333d9ea1a94466b0d315cbf106865cffa3c77ff516ef897c8b85b82d3fd14e6e26dc7a4b8279fdc538f9c9946dfdb1e772b361e0016b675bd431f351c31e5b0a4e09e93246ddb8218ca5f0a909bf5492aed2709508e124f2868bf96b49606e6e74655c8ac3201c5435099a6b5c67a27c97a284b4c4fb7f51567a6eb61f276dc73dc7d1e91ed45d1a6bf8973fd35"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xb58, 0x3, 0x0, 0x1, [{0x2d0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x5c, 0x6, 0x1, 0x0, "4a63590973bd35f6d60b462d739e401e38a231e32a74cf957060e2ed54132ae6289c83fe5880e6a236cb1742bd961892f16cf878aabe698416478abe92e14113f4120e2f198eaf6645a6c1e3902cfaace6e6312776585406"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY_END={0x114, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x65, 0x1, "c2e43f131bb28ac6dba6401930249c9a440f347a8af3257bf13d0f36bdbd04307aeaf00516b876f9e800f27c1c9376a20c927449c0b73ce5cfb9590185ec00c94ee7c19e6d400aa6b2d93b7eabb3c6554f438a3607f1128109a95d4d4c164a0f47"}, @NFTA_DATA_VALUE={0xa5, 0x1, "7f2a0c0c17bc54708bd10f9ccbfb894e440d88f4d5adf9177302354c4d949c4113f542132d849b001768e8382a312c66e096d2ce464b0fe7186fae9f10aa111cd3994584f4dba7fe39a8896ae81b95dc51e3fbc4e85ef83aa586556755522032e5c39e4cc8e6b96d755f5e02797fb5c501f36f1fa83bc1e3e4bb02c3371a8d1e2efe3e8315c8b31d16607c663f84a1899a36612bd5700214adbc236a1a080a009a"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x144, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x26, 0x1, "c73c81febaac8cdc1cdd835ae44c1b291ede105a7fc2693c139363bf5239d6c226e9"}, @NFTA_DATA_VALUE={0xd1, 0x1, "2811f9650a39c5eba9183415674a67bfb339cf32809190352b54debd81dffbdcb753cef3025a1768dc6f6a5e79d452f52ccf8e238c23a243537350edd83855b9bf2e37120ee0e276c85ba070ac7e465d389a30f87f46dc5cf7c2f09d44cf3917eb73965bf337be04e8a42e37a3c42cae15cb6d18b8026e306d794aef9c2cb6448bc7b691f958977db19c89e66fd126da4c57527186b11528db5499ce06532d887d5294cafdf55e14c49db8ce0cd0d8b9478b2a4b5cd8cc0481dfd8fa3421d3428fc9e352c7df70a84923192808"}]}]}, {0x84, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x68, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x62, 0x1, "24f502e36271f6719f22ed48ab93dfe920750e4ec15cf19f0d6f13f6d05ef8407f1b5cad4b470eeeb378b5c7ff362005ad75eb6bb719170f1e8033aeeb9c9451a8dded745128838feabd765fee855663aa82a849c378f13c330d00ca4218"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}]}, {0x104, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xdd, 0x6, 0x1, 0x0, "0c83d4725dc51c09176cd4652c82cd8aeae5ec979d975b423c4c37c02af8344ab346fbd1b3d2a3db94964df69e441ee304033cc095fe844525f22ad761a3152b30c33591648d6d0ace64b63f6d066202f9249f3cf7c741f9b3dde5a7e6eb30da21b211669e887a4637184a05a90121d9c073a18813bc18058f455201fedfe50d6ee6cc38e1db2596cb0d86e4758efb9346ab6c757b6138a3be07cd8cfe7c9fbca4d9dd1cb1685ad6f74241a187ae7ad860dd5e99a06a0340a27b56842fcb7a80c4ec15307157b0e52917fdc92d8e3bc727d3638f62dc34eb58"}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", "", "", ""]}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x2ec, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1e4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb6, 0x1, "0fa89b0924b7eadaa72cdbbd513b07e6bd1202b63ec3a9197d9237fa8f1b2bc3850f9c2723b15a4a8825990864257183c1e7623677532998cd543d04542a3de541858bf48b63a53de3d3cb426994afbfb4e3bff9bb143d81c60158e42774409a1da934c3c5e1480963b4285b038562bdac6f52473abd902540725c9156fbe4fa567763be0b6fb2a8b30200e22260f76a26a3236f9a453b7ccf8ec020109b9889f3dab3814291ab298241131e836d8cfe607b"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x37, 0x1, "425787a6b90893b795a02de5d4cbf1a33472f13b9527539b26dbfb7280585ed186d9df3f11c66c8ab2c8d2be6abb862267924f"}, @NFTA_DATA_VALUE={0x1a, 0x1, "f1901ffc002095a1920fc9fec16b5aedeb3817cec131"}, @NFTA_DATA_VALUE={0x56, 0x1, "b2d4dc093ea51be79f38cf685d7abe97941bad3f49bea8f923a7dc8f735683fa538fa985984fbb2e5d880f82a727f49cd44016bed1649862cefecd289d470fd73d02bdc8429e06b88183b9cefc6593a83033"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_USERDATA={0xf0, 0x6, 0x1, 0x0, "9521e71a5e878e508bb37e7936b9e432733c5b23ecfa9d1e1b562e2d5d7fe0d868ee2dc2fe5c16c862c3a0955a1dfd23651641fdf5c9d6a41d097456a251499f76322691ff8c6b77a453f3ebdafa692aeb351be4c7a3edda6d047419a883730e61bea5378afaec03434556e1ae08a58231b27e9ee706efff6f34c28b718333288488694820ab879fdd9faf0fc931abb7c6b3d8689736aa3c731eb57e438ff40c688f6b2f661304cdc046ab24486c8f802b19e21c414647ade31a7ce58f3ec6ebaaac9321e3e68aec79f9149e0e9b76338a9adab714e1013af9472182e28c22585c4c58030416ac691246539f"}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @log={{0x8}, @void}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0x190, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x64, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_DATA={0xfc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x26, 0x1, "22c5a406d310ce7444fa5c941024e435ddbed6108a80521166393de25220b95171ce"}, @NFTA_DATA_VALUE={0x93, 0x1, "113f1058b3b58130a18fe30655420f764e19a57caa224bce91f2856cce0a1906189fa09f4c218dad249bd84e37d477a9e97919aa3fa0aa3f314b0535a4ff191809ba79aec0b03108aa0e20350d42bbc851b17f22078b685059dbf85fd3318acc75d473235370c9046f031a97901f921552e48f7636a6bbcf524b88df59eec302137e82ebcebaa13857b4b276f2f34a"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}]}, {0x220, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1fc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd6, 0x1, "bcbe80b97c18753964c39acfaab5ec7eb850ffe65ac45a68044fd59df6f8f765592518ddbc4ba4878db30e34eb13d1948658b9dc26c4e3ee47c66e01424652bca4fb53844fa47d810f916c73be0a883adb2a1122804a12368de4f9f9be7454489989e2dcea5871f30ab49c6b4e3c8d37be38bc3db5bd9998153d8749110f7c0ffcd6c88e960c94693bf83aa51bdf6ee7f2ba0262195c73b10324fe7e1a0c0b0e66829d12add946692c039dc05a28bc4a35006477f012fd84afb8b68c9f5d5d68b9da648881c6be707d2e2e869cf8eeb0690f"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x7e, 0x1, "f144f91c28ec29099341a10aa42720fbee0a25269082818a0fb7c1ee5b5631b757eb894a69817303070d6b94bdce5a30baf1331d67ffd669edb8b2d33be2c4018c6a0fd41ba4172f307886f472af79dfed5552700177ed26a31ef157bdac61ea6b4f9e52731d7e1c50627ce24079489472c6422616657d41334e"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000002}]}, @NFTA_DATA_VALUE={0x69, 0x1, "9e87eea8c745bf21f70d87910724efc7800f8a515bd3f5c4f5852811c23ebded0b926e62a89dda733276c3e3c114a9f9bd0ca5e4c6f84867ae0fe7dbe1f0f0d1209969dd026011686ec3238c62e91dc1317e198c3d7a9f3a7f32528e4bf4d649439082fb81"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, {0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x49, 0x6, 0x1, 0x0, "91b2dff7df9fba86a84d1d7890ba451e0c555aba23456fd8ea34b1573f7773e1e2609e091cb3fb8a5799231f3a63f9f66009ab2b05c0e610322eb106d3965595fa621e2b20"}]}]}]}, @NFT_MSG_DELRULE={0xb0, 0x8, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x6a, 0x7, 0x1, 0x0, "fe0ef3834b1a474a0d8e0f0aedad962ee016470bcdf7d967aaf1af802077d14291d3492c2dd708c576abe5af6a78fc843a5b91a3831d3f7f4f617d26ee7c46917334a3180b5886ab49e6b4efa0f8ce1db370931fbcdc03a956dcc1896e63f4c0b8f5778d2a21"}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x74, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0x55, 0x6, "ee809fcdab8e0c8b6ba49e899809ca1d5cc2f3ece8c86fda20568c3363845bbdadb762638299c93e49fd5af4fcaf288131d759f90eb20831a569ed342238289cc44824841fde388a9a0ac670a70cbae142"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x248, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_HOOK={0x164, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x60000000}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'macvtap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0xc4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'sit0\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x19cc}, 0x1, 0x0, 0x0, 0x20040000}, 0x40042) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x5, 0x2, 0x80, "96f7691dff7fe4fe456f5d2670a3755ebf30a4442a94bf912bfe2021feb2ded5", 0x30314742}) kernel console output (not intermixed with test programs): s (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.359849][ T1459] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.381862][ T1459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.392955][ T1459] bond0 (unregistering): Released all slaves [ 41.399527][ T5470] netlink: 60 bytes leftover after parsing attributes in process `syz.6.109'. [ 41.400669][ T4399] 8021q: adding VLAN 0 to HW filter on device eth8 [ 41.465606][ T5422] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.467585][ T5422] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.467679][ T5422] bridge_slave_0: entered allmulticast mode [ 41.468140][ T5422] bridge_slave_0: entered promiscuous mode [ 41.469180][ T5422] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.469235][ T5422] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.469299][ T5422] bridge_slave_1: entered allmulticast mode [ 41.469722][ T5422] bridge_slave_1: entered promiscuous mode [ 41.476866][ T5422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.477769][ T5422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.486268][ T5422] team0: Port device team_slave_0 added [ 41.547825][ T5422] team0: Port device team_slave_1 added [ 41.570763][ T5422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.570802][ T5422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.570828][ T5422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.571382][ T5422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.571390][ T5422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.571404][ T5422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.663190][ T5422] hsr_slave_0: entered promiscuous mode [ 41.664717][ T5422] hsr_slave_1: entered promiscuous mode [ 41.666415][ T5422] debugfs: 'hsr0' already exists in 'hsr' [ 41.668087][ T5422] Cannot create hsr debugfs directory [ 41.682884][ T5500] veth2: entered allmulticast mode [ 41.764802][ T4399] 8021q: adding VLAN 0 to HW filter on device eth9 [ 41.855629][ T1459] hsr_slave_0: left promiscuous mode [ 41.857111][ T1459] hsr_slave_1: left promiscuous mode [ 41.858512][ T1459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.863232][ T1459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.866556][ T1459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.869162][ T1459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.876318][ T1459] veth1_macvtap: left promiscuous mode [ 41.876974][ T1459] veth0_macvtap: left promiscuous mode [ 41.877028][ T1459] veth1_vlan: left promiscuous mode [ 41.877136][ T1459] veth0_vlan: left promiscuous mode [ 41.951854][ T5514] misc userio: No port type given on /dev/userio [ 42.020478][ T11] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 42.218899][ T1459] team0 (unregistering): Port device team_slave_1 removed [ 42.224856][ T1459] team0 (unregistering): Port device team_slave_0 removed [ 42.239646][ T11] usb 1-1: Using ep0 maxpacket: 16 [ 42.253786][ T11] usb 1-1: unable to get BOS descriptor or descriptor too short [ 42.256744][ T11] usb 1-1: config 9 has an invalid interface number: 46 but max is 0 [ 42.258715][ T11] usb 1-1: config 9 has no interface number 0 [ 42.260062][ T11] usb 1-1: config 9 interface 46 has no altsetting 0 [ 42.263512][ T11] usb 1-1: New USB device found, idVendor=1164, idProduct=1edc, bcdDevice=b2.e6 [ 42.263547][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.263562][ T11] usb 1-1: Product: syz [ 42.263575][ T11] usb 1-1: Manufacturer: syz [ 42.263587][ T11] usb 1-1: SerialNumber: syz [ 42.354353][ T4795] IPVS: starting estimator thread 0... [ 42.362237][ T5422] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 42.365018][ T5422] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 42.365370][ T5422] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 42.369286][ T5422] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 42.370109][ T5422] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 42.380645][ T5422] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 42.381007][ T5422] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 42.382907][ T5422] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 42.408813][ T5422] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.408863][ T5422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.408932][ T5422] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.408965][ T5422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.439574][ T5523] IPVS: using max 61 ests per chain, 146400 per kthread [ 42.467590][ T5422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.473959][ T4942] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.475640][ T4942] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.481849][ T5422] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.484346][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.484397][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.487726][ T4942] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.487775][ T4942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.518776][ T5422] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 42.518819][ T5422] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 42.581745][ T4399] 8021q: adding VLAN 0 to HW filter on device eth10 [ 42.683958][ T50] Bluetooth: hci0: command tx timeout [ 42.879917][ T50] Bluetooth: hci4: command tx timeout [ 42.889755][ T50] Bluetooth: hci3: command tx timeout [ 43.031671][ T5576] loop6: detected capacity change from 0 to 4096 [ 43.047745][ T5576] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.088873][ T5082] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.237942][ T5422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.364463][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.538130][ T5422] veth0_vlan: entered promiscuous mode [ 43.544153][ T5422] veth1_vlan: entered promiscuous mode [ 43.804476][ T5422] veth0_macvtap: entered promiscuous mode [ 43.805813][ T5422] veth1_macvtap: entered promiscuous mode [ 43.815153][ T5422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.818253][ T5422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.825382][ T1272] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.843139][ T5551] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.844255][ T5551] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.860011][ T5560] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.879769][ T5551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.879796][ T5551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.898232][ T1272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.898266][ T1272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.912445][ T5622] __nla_validate_parse: 2 callbacks suppressed [ 43.912749][ T5622] netlink: 28 bytes leftover after parsing attributes in process `syz.5.129'. [ 43.937663][ T4399] 8021q: adding VLAN 0 to HW filter on device eth11 [ 44.177685][ T5653] loop3: detected capacity change from 0 to 512 [ 44.195451][ T5653] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 44.195507][ T5653] System zones: 1-20 [ 44.196388][ T5653] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.234233][ T5653] EXT4-fs error (device loop3): ext4_validate_block_bitmap:423: comm syz.3.132: bg 0: bad block bitmap checksum [ 44.252573][ T5663] loop7: detected capacity change from 0 to 8 [ 44.301428][ T4716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.307308][ T5663] binder: 5660:5663 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 44.310949][ T5663] binder: 5663 RLIMIT_NICE not set [ 44.356964][ T5667] syzkaller0: entered promiscuous mode [ 44.357003][ T5667] syzkaller0: entered allmulticast mode [ 44.381175][ T5663] SQUASHFS error: Failed to read block 0x60: -5 [ 44.389682][ T5663] netlink: 8 bytes leftover after parsing attributes in process `syz.7.133'. [ 44.465951][ T5680] tmpfs: Bad value for 'mpol' [ 44.487677][ T5684] trusted_key: syz.7.137 sent an empty control message without MSG_MORE. [ 44.503534][ T5679] netlink: 'syz.3.139': attribute type 11 has an invalid length. [ 44.503569][ T5679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.139'. [ 44.513770][ T4399] 8021q: adding VLAN 0 to HW filter on device eth12 [ 44.517940][ T5679] netlink: 'syz.3.139': attribute type 11 has an invalid length. [ 44.520298][ T5679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.139'. [ 44.531577][ T5550] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.531630][ T5550] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.531651][ T5550] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.531667][ T5550] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.621103][ T5690] loop3: detected capacity change from 0 to 256 [ 44.685616][ T5698] netlink: 52 bytes leftover after parsing attributes in process `syz.7.142'. [ 44.702148][ T5700] netlink: 24 bytes leftover after parsing attributes in process `syz.5.143'. [ 44.704624][ T5702] netlink: 'syz.5.143': attribute type 10 has an invalid length. [ 44.729540][ T50] Bluetooth: hci0: command tx timeout [ 44.810031][ T11] dvb-usb: found a 'Yuan EC372S' in cold state, will try to load a firmware [ 44.819271][ T11] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 44.819325][ T11] dib0700: firmware download failed at 7 with -22 [ 44.828828][ T11] usb 1-1: USB disconnect, device number 2 [ 44.854026][ T5709] bridge0: port 3(vlan2) entered blocking state [ 44.855824][ T5709] bridge0: port 3(vlan2) entered disabled state [ 44.865750][ T5709] vlan2: entered allmulticast mode [ 44.880053][ T5709] bridge0: entered allmulticast mode [ 44.889740][ T50] Bluetooth: hci4: command tx timeout [ 44.909636][ T5709] vlan2: left allmulticast mode [ 44.909662][ T5709] bridge0: left allmulticast mode [ 44.970572][ T50] Bluetooth: hci3: command tx timeout [ 44.991194][ T5732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.002696][ T5732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.072976][ T5744] netlink: 16 bytes leftover after parsing attributes in process `syz.7.156'. [ 45.100049][ T5749] loop6: detected capacity change from 0 to 512 [ 45.186599][ T5760] loop6: detected capacity change from 0 to 128 [ 45.478964][ T5763] loop3: detected capacity change from 0 to 4096 [ 45.485825][ T5763] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 45.485876][ T5763] EXT4-fs (loop3): Test dummy encryption mode enabled [ 45.485889][ T5763] EXT4-fs (loop3): can't mount with both data=journal and delalloc [ 45.511872][ T5763] overlay: Unknown parameter 'euid' [ 45.936952][ T5779] loop6: detected capacity change from 0 to 256 [ 46.060274][ T5779] tipc: Enabling of bearer rejected, failed to enable media [ 46.335002][ T5808] loop3: detected capacity change from 0 to 1024 [ 46.335033][ T5805] loop5: detected capacity change from 0 to 2048 [ 46.335388][ T5808] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.335655][ T5808] EXT4-fs: test_dummy_encryption requires encrypt feature [ 46.345153][ T5805] EXT4-fs: quotafile must be on filesystem root [ 46.411875][ T5810] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 46.426635][ T5810] EXT4-fs warning (device loop6): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop6. [ 46.436730][ T5819] netlink: 28 bytes leftover after parsing attributes in process `syz.7.174'. [ 46.527410][ T5828] netlink: 28 bytes leftover after parsing attributes in process `syz.5.178'. [ 46.554363][ T5833] syz.6.177 uses obsolete (PF_INET,SOCK_PACKET) [ 46.969659][ T50] Bluetooth: hci4: command tx timeout [ 47.059646][ T5845] netlink: 8 bytes leftover after parsing attributes in process `syz.5.181'. [ 47.088435][ T5850] dvmrp5: entered allmulticast mode [ 47.168547][ T5854] netlink: 'syz.5.184': attribute type 10 has an invalid length. [ 47.168624][ T5854] dummy0: entered promiscuous mode [ 47.199645][ T5858] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.201478][ T5858] EXT4-fs (loop3): Test dummy encryption mode enabled [ 47.206962][ T5858] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.218346][ T5858] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 47.251522][ T5862] binder: tried to use weak ref as strong ref [ 47.252851][ T5862] binder: 5861:5862 Acquire 1 refcount change on invalid ref 0 ret -22 [ 47.254916][ T5862] binder: 5861:5862 got transaction to invalid handle, 1 [ 47.256541][ T5862] binder: 5861:5862 cannot find target node [ 47.256561][ T5862] binder: 5861:5862 transaction call to 0:0 failed 6/29201/-22, code 0 size 80-24 line 3252 [ 47.261220][ T5862] Injecting memory failure for pfn 0x139400 at process virtual address 0x20000000 [ 47.263699][ T5862] Memory failure: 0x139400: Sending SIGBUS to syz.5.187:5862 due to hardware memory corruption [ 47.267336][ T5862] Memory failure: 0x139400: recovery action for unsplit thp: Failed [ 47.294947][ T4716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.369924][ T5562] netdevsim netdevsim100 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.370342][ T5562] netdevsim netdevsim1 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.370417][ T5562] netdevsim netdevsim1 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.370438][ T5562] netdevsim netdevsim1 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.370456][ T5562] netdevsim netdevsim1 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.370474][ T5562] netdevsim netdevsim4 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.370491][ T5562] netdevsim netdevsim4 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.370509][ T5562] netdevsim netdevsim4 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.370525][ T5562] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.370542][ T5562] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.370558][ T5562] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.370574][ T5562] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.370591][ T5562] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.571784][ T5901] FAULT_INJECTION: forcing a failure. [ 47.571784][ T5901] name failslab, interval 1, probability 0, space 0, times 1 [ 47.571822][ T5901] CPU: 1 UID: 0 PID: 5901 Comm: syz.5.198 Tainted: G L syzkaller #0 PREEMPT [ 47.571835][ T5901] Tainted: [L]=SOFTLOCKUP [ 47.571839][ T5901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 47.571845][ T5901] Call trace: [ 47.571849][ T5901] show_stack+0x2c/0x3c (C) [ 47.571869][ T5901] __dump_stack+0x30/0x40 [ 47.571880][ T5901] dump_stack_lvl+0xd8/0x12c [ 47.571890][ T5901] dump_stack+0x1c/0x28 [ 47.571899][ T5901] should_fail_ex+0x41c/0x590 [ 47.571911][ T5901] should_failslab+0xc4/0x120 [ 47.571919][ T5901] kmem_cache_alloc_lru_noprof+0x98/0x5dc [ 47.571927][ T5901] __d_alloc+0x50/0x690 [ 47.571935][ T5901] d_alloc_pseudo+0x2c/0xd8 [ 47.571943][ T5901] alloc_path_pseudo+0xe8/0x1d4 [ 47.571950][ T5901] alloc_file_pseudo+0xb0/0x198 [ 47.571958][ T5901] sock_alloc_file+0xb4/0x1ac [ 47.571967][ T5901] __sys_socket+0x90/0xec [ 47.571975][ T5901] __arm64_sys_socket+0x84/0x9c [ 47.571984][ T5901] invoke_syscall+0x98/0x244 [ 47.571993][ T5901] el0_svc_common+0xec/0x23c [ 47.572003][ T5901] do_el0_svc+0x4c/0x5c [ 47.572012][ T5901] el0_svc+0x64/0x260 [ 47.572023][ T5901] el0t_64_sync_handler+0x48/0x148 [ 47.572033][ T5901] el0t_64_sync+0x198/0x19c [ 47.686005][ T5914] No control pipe specified [ 47.733377][ T5919] macvlan2: entered promiscuous mode [ 47.733411][ T5919] bridge0: entered promiscuous mode [ 47.831307][ T5934] netlink: 'syz.5.208': attribute type 1 has an invalid length. [ 47.848039][ T5934] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 47.871623][ T5934] bond1 (unregistering): Released all slaves [ 47.908269][ T5948] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 47.918670][ T5950] FAULT_INJECTION: forcing a failure. [ 47.918670][ T5950] name failslab, interval 1, probability 0, space 0, times 0 [ 47.918712][ T5950] CPU: 1 UID: 0 PID: 5950 Comm: syz.7.213 Tainted: G L syzkaller #0 PREEMPT [ 47.918729][ T5950] Tainted: [L]=SOFTLOCKUP [ 47.918732][ T5950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 47.918738][ T5950] Call trace: [ 47.918741][ T5950] show_stack+0x2c/0x3c (C) [ 47.918760][ T5950] __dump_stack+0x30/0x40 [ 47.918771][ T5950] dump_stack_lvl+0xd8/0x12c [ 47.918781][ T5950] dump_stack+0x1c/0x28 [ 47.918790][ T5950] should_fail_ex+0x41c/0x590 [ 47.918802][ T5950] should_failslab+0xc4/0x120 [ 47.918810][ T5950] kmem_cache_alloc_noprof+0x94/0x5d8 [ 47.918818][ T5950] alloc_empty_file+0x6c/0x1cc [ 47.918826][ T5950] alloc_file+0x58/0x98 [ 47.918833][ T5950] alloc_file_pseudo+0xe0/0x198 [ 47.918841][ T5950] sock_alloc_file+0xb4/0x1ac [ 47.918850][ T5950] __sys_socket+0x90/0xec [ 47.918858][ T5950] __arm64_sys_socket+0x84/0x9c [ 47.918866][ T5950] invoke_syscall+0x98/0x244 [ 47.918876][ T5950] el0_svc_common+0xec/0x23c [ 47.918886][ T5950] do_el0_svc+0x4c/0x5c [ 47.918895][ T5950] el0_svc+0x64/0x260 [ 47.918906][ T5950] el0t_64_sync_handler+0x48/0x148 [ 47.918916][ T5950] el0t_64_sync+0x198/0x19c [ 47.982710][ T5934] warning: `syz.5.208' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 48.462751][ T5996] FAULT_INJECTION: forcing a failure. [ 48.462751][ T5996] name failslab, interval 1, probability 0, space 0, times 0 [ 48.465408][ T5996] CPU: 0 UID: 0 PID: 5996 Comm: syz.0.225 Tainted: G L syzkaller #0 PREEMPT [ 48.465438][ T5996] Tainted: [L]=SOFTLOCKUP [ 48.465442][ T5996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 48.465448][ T5996] Call trace: [ 48.465452][ T5996] show_stack+0x2c/0x3c (C) [ 48.465476][ T5996] __dump_stack+0x30/0x40 [ 48.465487][ T5996] dump_stack_lvl+0xd8/0x12c [ 48.465497][ T5996] dump_stack+0x1c/0x28 [ 48.465507][ T5996] should_fail_ex+0x41c/0x590 [ 48.465518][ T5996] should_failslab+0xc4/0x120 [ 48.465526][ T5996] kmem_cache_alloc_noprof+0x94/0x5d8 [ 48.465535][ T5996] security_file_alloc+0x3c/0x300 [ 48.465542][ T5996] init_file+0x90/0x28c [ 48.465550][ T5996] alloc_empty_file+0x80/0x1cc [ 48.465557][ T5996] alloc_file+0x58/0x98 [ 48.465564][ T5996] alloc_file_pseudo+0xe0/0x198 [ 48.465572][ T5996] sock_alloc_file+0xb4/0x1ac [ 48.465581][ T5996] __sys_socket+0x90/0xec [ 48.465589][ T5996] __arm64_sys_socket+0x84/0x9c [ 48.465598][ T5996] invoke_syscall+0x98/0x244 [ 48.465607][ T5996] el0_svc_common+0xec/0x23c [ 48.465617][ T5996] do_el0_svc+0x4c/0x5c [ 48.465626][ T5996] el0_svc+0x64/0x260 [ 48.465637][ T5996] el0t_64_sync_handler+0x48/0x148 [ 48.465647][ T5996] el0t_64_sync+0x198/0x19c [ 48.527694][ T5999] set_capacity_and_notify: 5 callbacks suppressed [ 48.529297][ T5999] loop0: detected capacity change from 0 to 8 [ 48.534559][ T5999] squashfs: Unknown parameter 'ÿÿ' [ 48.547215][ T6001] loop3: detected capacity change from 0 to 512 [ 48.549042][ T6001] ext4: Unknown parameter 'uid' [ 48.556287][ T6001] loop3: detected capacity change from 0 to 1024 [ 48.558276][ T6001] ext4: Unknown parameter 'dont_hash' [ 48.565229][ T6001] loop3: detected capacity change from 0 to 1024 [ 48.587515][ T6001] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.595271][ T6005] sock: sock_set_timeout: `syz.0.226' (pid 6005) tries to set negative timeout [ 48.603163][ T6001] EXT4-fs error (device loop3): ext4_generic_delete_entry:2673: inode #2: block 16: comm syz.3.227: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 48.609436][ T6001] EXT4-fs error (device loop3) in ext4_delete_entry:2744: Corrupt filesystem [ 48.611634][ T6001] EXT4-fs warning (device loop3): ext4_rename_delete:3739: inode #2: comm syz.3.227: Deleting old file: nlink 1, error=-117 [ 48.652656][ T4716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.049098][ T50] Bluetooth: hci4: command tx timeout [ 49.080150][ T6022] bond0: entered promiscuous mode [ 49.080187][ T6022] bond_slave_0: entered promiscuous mode [ 49.080286][ T6022] bond_slave_1: entered promiscuous mode [ 49.081815][ T6022] batadv0: entered promiscuous mode [ 49.099184][ T6022] netlink: 'syz.5.232': attribute type 10 has an invalid length. [ 49.104795][ T6022] syz_tun: entered promiscuous mode [ 49.107032][ T6022] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 49.112145][ T6022] loop5: detected capacity change from 0 to 512 [ 49.138621][ T6022] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.177195][ T6022] __nla_validate_parse: 8 callbacks suppressed [ 49.178623][ T6022] netlink: 24 bytes leftover after parsing attributes in process `syz.5.232'. [ 49.190841][ T6026] netlink: 32 bytes leftover after parsing attributes in process `syz.6.233'. [ 49.254912][ T6030] loop7: detected capacity change from 0 to 512 [ 49.255606][ T5064] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.265663][ T6033] netlink: 'syz.6.234': attribute type 1 has an invalid length. [ 49.286474][ T6033] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.287272][ T6030] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.308959][ T6040] FAULT_INJECTION: forcing a failure. [ 49.308959][ T6040] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 49.312210][ T6040] CPU: 0 UID: 0 PID: 6040 Comm: syz.5.236 Tainted: G L syzkaller #0 PREEMPT [ 49.312235][ T6040] Tainted: [L]=SOFTLOCKUP [ 49.312240][ T6040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 49.312247][ T6040] Call trace: [ 49.312252][ T6040] show_stack+0x2c/0x3c (C) [ 49.312274][ T6040] __dump_stack+0x30/0x40 [ 49.312286][ T6040] dump_stack_lvl+0xd8/0x12c [ 49.312296][ T6040] dump_stack+0x1c/0x28 [ 49.312305][ T6040] should_fail_ex+0x41c/0x590 [ 49.312316][ T6040] should_fail+0x14/0x24 [ 49.312326][ T6040] should_fail_usercopy+0x20/0x30 [ 49.312333][ T6040] _inline_copy_from_user+0x3c/0x174 [ 49.312344][ T6040] move_addr_to_kernel+0x88/0x168 [ 49.312352][ T6040] __sys_sendto+0x1b0/0x328 [ 49.312360][ T6040] __arm64_sys_sendto+0xec/0x10c [ 49.312369][ T6040] invoke_syscall+0x98/0x244 [ 49.312379][ T6040] el0_svc_common+0xec/0x23c [ 49.312388][ T6040] do_el0_svc+0x4c/0x5c [ 49.312397][ T6040] el0_svc+0x64/0x260 [ 49.312408][ T6040] el0t_64_sync_handler+0x48/0x148 [ 49.312418][ T6040] el0t_64_sync+0x198/0x19c [ 49.425949][ T6048] loop6: detected capacity change from 0 to 1024 [ 49.427764][ T6048] EXT4-fs: Ignoring removed oldalloc option [ 49.439518][ T6048] EXT4-fs: Ignoring removed oldalloc option [ 49.446412][ T6048] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 49.464039][ T5422] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.464875][ T6048] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.467765][ T6049] loop0: detected capacity change from 0 to 4096 [ 49.491536][ T6049] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.530521][ T6049] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #15: comm syz.0.240: corrupted inode contents [ 49.533962][ T6049] EXT4-fs error (device loop0): ext4_dirty_inode:6639: inode #15: comm syz.0.240: mark_inode_dirty error [ 49.543928][ T6049] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #15: comm syz.0.240: corrupted inode contents [ 49.547310][ T5082] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.551277][ T6049] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #15: comm syz.0.240: mark_inode_dirty error [ 49.554810][ T6049] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #15: comm syz.0.240: corrupted inode contents [ 49.557426][ T6049] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #15: comm syz.0.240: mark_inode_dirty error [ 49.562320][ T6049] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #15: comm syz.0.240: corrupted inode contents [ 49.567728][ T6053] loop5: detected capacity change from 0 to 128 [ 49.574780][ T6053] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 49.577125][ T6049] EXT4-fs error (device loop0): ext4_truncate:4691: inode #15: comm syz.0.240: mark_inode_dirty error [ 49.580803][ T6049] EXT4-fs error (device loop0) in ext4_setattr:6172: Corrupt filesystem [ 49.600469][ T6058] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #15: comm syz.0.240: corrupted inode contents [ 49.632137][ T6064] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 49.636958][ T6064] Cannot find add_set index 0 as target [ 49.637342][ T30] audit: type=1400 audit(49.610:2): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="(" requested=w pid=6061 comm="syz.7.244" daddr=::ffff:100.1.1.1 dest=20004 [ 49.644129][ T6064] overlayfs: failed to get uuid (35/file0, err=-13); falling back to uuid=null. [ 49.647243][ T30] audit: type=1400 audit(49.620:3): lsm=SMACK fn=smack_inode_getxattr action=denied subject="_" object="l" requested=r pid=6062 comm="syz.6.243" name="file0" dev="tmpfs" ino=220 [ 49.647290][ T30] audit: type=1400 audit(49.620:4): lsm=SMACK fn=smack_inode_getxattr action=denied subject="_" object="l" requested=r pid=6062 comm="syz.6.243" name="file0" dev="tmpfs" ino=220 [ 49.698880][ T5064] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.700403][ T4713] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 49.701917][ T4713] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 49.702072][ T4713] EXT4-fs warning (device loop0): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 49.713998][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.733596][ T6066] netlink: 32 bytes leftover after parsing attributes in process `syz.6.246'. [ 49.748472][ T6068] vivid-000: disconnect [ 49.774414][ T6072] vivid-000: reconnect [ 49.825810][ T6079] FAULT_INJECTION: forcing a failure. [ 49.825810][ T6079] name failslab, interval 1, probability 0, space 0, times 0 [ 49.825848][ T6079] CPU: 1 UID: 0 PID: 6079 Comm: syz.5.249 Tainted: G L syzkaller #0 PREEMPT [ 49.825864][ T6079] Tainted: [L]=SOFTLOCKUP [ 49.825868][ T6079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 49.825874][ T6079] Call trace: [ 49.825877][ T6079] show_stack+0x2c/0x3c (C) [ 49.825894][ T6079] __dump_stack+0x30/0x40 [ 49.825905][ T6079] dump_stack_lvl+0xd8/0x12c [ 49.825915][ T6079] dump_stack+0x1c/0x28 [ 49.825924][ T6079] should_fail_ex+0x41c/0x590 [ 49.825935][ T6079] should_failslab+0xc4/0x120 [ 49.825943][ T6079] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 49.825952][ T6079] __alloc_skb+0x1f0/0x610 [ 49.825961][ T6079] netlink_alloc_large_skb+0xd4/0x114 [ 49.825971][ T6079] netlink_sendmsg+0x4c4/0x948 [ 49.825979][ T6079] __sock_sendmsg+0xc8/0x17c [ 49.825987][ T6079] __sys_sendto+0x250/0x328 [ 49.825996][ T6079] __arm64_sys_sendto+0xec/0x10c [ 49.826004][ T6079] invoke_syscall+0x98/0x244 [ 49.826014][ T6079] el0_svc_common+0xec/0x23c [ 49.826023][ T6079] do_el0_svc+0x4c/0x5c [ 49.826032][ T6079] el0_svc+0x64/0x260 [ 49.826043][ T6079] el0t_64_sync_handler+0x48/0x148 [ 49.826053][ T6079] el0t_64_sync+0x198/0x19c [ 50.251033][ T6087] loop5: detected capacity change from 0 to 256 [ 50.335969][ T6102] autofs4:pid:6102:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 50.524364][ T6111] netlink: 'syz.7.258': attribute type 8 has an invalid length. [ 50.798336][ T6119] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 50.801263][ T6119] unable to read xattr id index table [ 50.803896][ T6119] squashfs image failed sanity check [ 52.347882][ T6149] EXT4-fs: Ignoring removed orlov option [ 52.347928][ T6149] EXT4-fs: inline encryption not supported [ 52.347977][ T6149] journal_path: Non-blockdev passed as './file0' [ 52.347994][ T6149] EXT4-fs: error: could not find journal device path [ 52.427027][ T6138] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.448806][ T6158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.266'. [ 52.462009][ T6158] mmap: syz.0.266 (6158) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 52.497055][ T6128] infiniband syz2: set active [ 52.497096][ T6128] infiniband syz2: added bond_slave_0 [ 52.518827][ T6128] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 52.520485][ T6128] infiniband syz2: Couldn't open port 1 [ 52.527060][ T6128] RDS/IB: syz2: added [ 52.528754][ T6128] smc: adding ib device syz2 with port count 1 [ 52.528788][ T6128] smc: ib device syz2 port 1 has no pnetid [ 52.592984][ T6167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.268'. [ 52.667464][ T5422] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.732550][ T6185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.270'. [ 52.732586][ T6185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.270'. [ 52.732618][ T6185] netlink: 'syz.0.270': attribute type 19 has an invalid length. [ 52.732634][ T6185] netlink: 'syz.0.270': attribute type 20 has an invalid length. [ 52.790766][ T6181] netlink: 16 bytes leftover after parsing attributes in process `syz.3.271'. [ 53.025996][ T30] audit: type=1400 audit(52.906:5): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="(" requested=w pid=6182 comm="syz.6.273" dest=20004 [ 53.699192][ T6175] set_capacity_and_notify: 7 callbacks suppressed [ 53.699252][ T6175] loop0: detected capacity change from 0 to 512 [ 53.704731][ T6175] EXT4-fs warning (device loop0): read_mmp_block:110: Error -117 while reading MMP block 0 [ 53.740190][ T6191] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.761613][ T6191] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 53.776421][ T6191] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 53.776549][ T6191] EXT4-fs (loop6): orphan cleanup on readonly fs [ 53.778151][ T6191] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #3: block 3: comm syz.6.273: lblock 3 mapped to illegal pblock 3 (length 1) [ 53.778171][ T6191] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 53.778683][ T6191] Quota error (device loop6): write_blk: dquota write failed [ 53.778695][ T6191] Quota error (device loop6): find_free_dqentry: Can't write quota data block 3 [ 53.778741][ T6191] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 53.778762][ T6191] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.273: Failed to acquire dquot type 0 [ 53.778773][ T6191] loop6: lost filesystem error report for type 5 error -117 [ 53.778934][ T6191] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 3: comm syz.6.273: lblock 3 mapped to illegal pblock 3 (length 1) [ 53.778948][ T6191] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 53.779056][ T6191] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 53.779072][ T6191] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.273: Failed to acquire dquot type 0 [ 53.779082][ T6191] loop6: lost filesystem error report for type 5 error -117 [ 53.779256][ T6191] EXT4-fs error (device loop6): ext4_free_blocks:6718: comm syz.6.273: Freeing blocks not in datazone - block = 0, count = 4096 [ 53.779268][ T6191] loop6: lost filesystem error report for type 5 error -117 [ 53.779345][ C1] EXT4-fs (loop6): error count since last fsck: 5 [ 53.779354][ C1] EXT4-fs (loop6): initial error at time 53: ext4_map_blocks:833: inode 3: block 3 [ 53.779376][ C1] EXT4-fs (loop6): last error at time 53: ext4_free_blocks:6718 [ 53.782731][ T6191] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 3: comm syz.6.273: lblock 3 mapped to illegal pblock 3 (length 1) [ 53.782750][ T6191] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 53.783562][ T6191] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 53.783586][ T6191] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.273: Failed to acquire dquot type 0 [ 53.783597][ T6191] loop6: lost filesystem error report for type 5 error -117 [ 53.784314][ T6191] EXT4-fs (loop6): 1 orphan inode deleted [ 53.804832][ T6205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.805001][ T6205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.853190][ T6208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.276'. [ 53.947252][ T6213] loop5: detected capacity change from 0 to 1024 [ 53.958085][ T6213] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (40992!=35945) [ 53.958145][ T6213] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 53.959726][ T6213] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 53.959860][ T6213] EXT4-fs (loop5): orphan cleanup on readonly fs [ 53.960028][ T6213] Quota error (device loop5): v2_read_file_info: Number of blocks too big for quota file size (134223872 > 6144). [ 53.960186][ T6213] EXT4-fs warning (device loop5): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 53.960198][ T6213] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 53.963067][ T6213] EXT4-fs error (device loop5): ext4_free_blocks:6718: comm syz.5.278: Freeing blocks not in datazone - block = 0, count = 4096 [ 53.963088][ T6213] loop5: lost filesystem error report for type 5 error -117 [ 53.970158][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 53.970178][ C1] EXT4-fs (loop5): initial error at time 53: ext4_free_blocks:6718 [ 53.970193][ C1] EXT4-fs (loop5): last error at time 53: ext4_free_blocks:6718 [ 53.970493][ T6213] EXT4-fs (loop5): 1 truncate cleaned up [ 53.971958][ T6213] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 54.366299][ T6191] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 54.369226][ T6190] EXT4-fs error (device loop6): ext4_lookup:1785: inode #15: comm syz.6.273: iget: bad extended attribute block 6 [ 54.524611][ T5082] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.757677][ T5064] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.802055][ T6267] netlink: 'syz.6.285': attribute type 1 has an invalid length. [ 54.807056][ T6267] loop6: detected capacity change from 0 to 512 [ 54.814075][ T6267] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 54.835108][ T6267] EXT4-fs (loop6): 1 truncate cleaned up [ 54.849344][ T6267] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.948511][ T5082] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.041985][ T6301] overlayfs: failed to resolve './bus': -2 [ 55.045045][ T6301] overlayfs: failed to resolve './bus': -2 [ 55.048470][ T6301] overlayfs: failed to resolve './bus': -2 [ 55.052628][ T6301] overlayfs: failed to resolve './bus': -2 [ 55.056645][ T6301] overlayfs: failed to resolve './bus': -2 [ 55.058172][ T6301] overlayfs: failed to resolve './bus': -2 [ 55.059058][ T6304] loop6: detected capacity change from 0 to 512 [ 55.059513][ T6304] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 55.087349][ T6304] syz.6.289: attempt to access beyond end of device [ 55.087349][ T6304] loop6: rw=8388608, sector=17179852721, nr_sectors = 1 limit=512 [ 55.088264][ T6304] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fffff00) [ 55.088325][ T6304] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fffff00) [ 55.092085][ T6304] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 55.094533][ T6304] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 55.168492][ T6316] netlink: 36 bytes leftover after parsing attributes in process `syz.5.290'. [ 55.168537][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.5.290'. [ 55.180205][ T6318] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 55.277141][ T6331] ip6t_srh: unknown srh match flags 4000 [ 55.460535][ T6348] batman_adv: batadv0: Adding interface: veth0 [ 55.460568][ T6348] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.460600][ T6348] batman_adv: batadv0: Interface activated: veth0 [ 55.486699][ T6351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.489544][ T6351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.496582][ T6351] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 55.575718][ T6349] batman_adv: batadv0: Interface deactivated: veth0 [ 55.587397][ T6349] batman_adv: batadv0: Removing interface: veth0 [ 55.628342][ T6348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.628379][ T6348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.631797][ T6348] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.631833][ T6348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.761380][ T6354] loop0: detected capacity change from 0 to 256 [ 55.765163][ T6354] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 55.772413][ T6354] FAT-fs (loop0): error, invalid FAT chain (i_pos 196, last_block 8200) [ 55.772434][ T6354] FAT-fs (loop0): Filesystem has been set read-only [ 55.773813][ T6354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.297'. [ 55.804722][ T6356] loop7: detected capacity change from 0 to 1024 [ 55.807295][ T6356] EXT4-fs: Ignoring removed bh option [ 55.808562][ T6356] EXT4-fs: Ignoring removed bh option [ 55.811974][ T6356] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 55.819012][ T6356] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.833636][ T6356] evm: overlay not supported [ 55.856052][ T5422] EXT4-fs error (device loop7): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /34/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 55.865958][ T5422] EXT4-fs (loop7): Remounting filesystem read-only [ 55.871377][ T5422] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.890389][ T6363] loop6: detected capacity change from 0 to 256 [ 55.892065][ T6363] vfat: Unknown parameter 'nnonumtail' [ 56.348417][ T6337] overlayfs: statfs failed on './file0' [ 56.493389][ T6380] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 56.494938][ T6380] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 56.503478][ T6380] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 56.507345][ T6380] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 56.510013][ T6380] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 56.514564][ T6380] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 56.516511][ T6380] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 56.517821][ T6380] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 56.522299][ T6380] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 56.528906][ T6380] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 56.530608][ T6380] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 56.532603][ T6380] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 56.535677][ T6380] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 56.537322][ T6380] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 56.540368][ T6380] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 56.541149][ T6392] netlink: 20 bytes leftover after parsing attributes in process `syz.3.309'. [ 56.675498][ T6410] loop5: detected capacity change from 0 to 256 [ 57.058005][ T6425] netlink: 12 bytes leftover after parsing attributes in process `syz.3.314'. [ 57.595029][ T6459] netlink: 48 bytes leftover after parsing attributes in process `syz.5.322'. [ 57.603554][ T6453] syzkaller0: entered promiscuous mode [ 57.603586][ T6453] syzkaller0: entered allmulticast mode [ 57.675161][ T6470] loop3: detected capacity change from 0 to 1024 [ 57.707117][ T6470] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 57.743099][ T1272] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm kworker/u8:6: lblock 0 mapped to illegal pblock 0 (length 1) [ 57.752554][ T1272] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 57.752586][ T1272] EXT4-fs (loop3): This should not happen!! Data will be lost [ 57.752586][ T1272] [ 57.766346][ T4716] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 57.776020][ T6476] loop5: detected capacity change from 0 to 1024 [ 57.776423][ T4716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 57.803264][ T6476] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.928493][ T6482] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 57.928525][ T6482] overlayfs: failed to set xattr on upper [ 57.928530][ T6482] overlayfs: ...falling back to redirect_dir=nofollow. [ 57.928534][ T6482] overlayfs: ...falling back to uuid=null. [ 57.993663][ T6487] use of bytesused == 0 is deprecated and will be removed in the future, [ 57.993690][ T6487] use the actual size instead. [ 57.996492][ T6488] Bluetooth: MGMT ver 1.23 [ 57.997540][ T6488] Bluetooth: hci0: invalid len left 7, exp >= 83 [ 58.281314][ T6480] 8021q: VLANs not supported on vcan0 [ 58.342156][ T6492] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 58.344811][ T4711] Bluetooth: hci1: SCO packet for unknown connection handle 101 [ 58.347340][ T6492] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.328: Invalid block bitmap block 0 in block_group 0 [ 58.347376][ T6492] loop3: lost filesystem error report for type 5 error -117 [ 58.352545][ T6492] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 58.353055][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 58.353084][ C0] EXT4-fs (loop3): initial error at time 58: ext4_read_block_bitmap_nowait:483 [ 58.353109][ C0] EXT4-fs (loop3): last error at time 58: ext4_read_block_bitmap_nowait:483 [ 58.361475][ T6492] loop3: lost filesystem error report for type 5 error -117 [ 58.362709][ T6492] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #11: comm syz.3.328: attempt to clear invalid blocks 983261 len 1 [ 58.364662][ T6492] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 58.367840][ T6492] EXT4-fs error (device loop3): __ext4_get_inode_loc:4886: comm syz.3.328: Invalid inode table block 0 in block_group 0 [ 58.372753][ T6492] loop3: lost filesystem error report for type 5 error -117 [ 58.376673][ T6492] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 58.380264][ T6492] loop3: lost filesystem error report for type 5 error -117 [ 58.385095][ T6492] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 58.388640][ T6492] loop3: lost filesystem error report for type 5 error -117 [ 58.389606][ T6492] EXT4-fs error (device loop3): __ext4_get_inode_loc:4886: comm syz.3.328: Invalid inode table block 0 in block_group 0 [ 58.394121][ T6492] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 58.397407][ T6492] EXT4-fs error (device loop3): ext4_truncate:4691: inode #11: comm syz.3.328: mark_inode_dirty error [ 58.399629][ T6492] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 58.399853][ T6492] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 58.403726][ T6492] EXT4-fs error (device loop3): __ext4_get_inode_loc:4886: comm syz.3.328: Invalid inode table block 0 in block_group 0 [ 58.406449][ T6492] EXT4-fs (loop3): 1 truncate cleaned up [ 58.410953][ T6492] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.426014][ T4716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.534938][ T6513] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 58.546337][ T6513] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.594573][ T4711] Bluetooth: hci0: command 0x0c1a tx timeout [ 58.595968][ T4711] Bluetooth: hci2: command 0x0c1a tx timeout [ 58.596107][ T4711] Bluetooth: hci1: command 0x0c1a tx timeout [ 58.683730][ T4715] Bluetooth: hci4: command 0x0c1a tx timeout [ 58.683771][ T4715] Bluetooth: hci3: command 0x0c1a tx timeout [ 58.686123][ T24] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 58.695486][ T5064] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.724946][ T4716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.786058][ T6529] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 58.826756][ T24] usb 1-1: device descriptor read/64, error -71 [ 58.899236][ T6546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.899431][ T6546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.906467][ T6547] set_capacity_and_notify: 2 callbacks suppressed [ 58.907851][ T6547] loop5: detected capacity change from 0 to 512 [ 58.912483][ T6547] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 58.915505][ T6547] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 58.919846][ T6547] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 58.919874][ T6547] System zones: 0-2, 18-18, 34-35 [ 58.920879][ T6547] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 59.077526][ T24] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 59.214246][ T24] usb 1-1: device descriptor read/64, error -71 [ 59.341826][ T24] usb usb1-port1: attempt power cycle [ 59.519590][ T6561] loop6: detected capacity change from 0 to 4096 [ 59.521666][ T50] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 59.526264][ T6561] EXT4-fs: Ignoring removed mblk_io_submit option [ 59.528158][ T6561] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 59.638925][ T6570] loop6: detected capacity change from 0 to 512 [ 59.647222][ T6570] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 59.648985][ T6570] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 59.649014][ T6570] System zones: 0-2, 18-18, 34-34 [ 59.651673][ T6570] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.352: bad orphan inode 15 [ 59.651690][ T6570] fserror_report: 4 callbacks suppressed [ 59.651698][ T6570] loop6: lost filesystem error report for type 5 error -117 [ 59.654830][ T6570] ext4_test_bit(bit=14, block=18) = 1 [ 59.654859][ T6570] is_bad_inode(inode)=0 [ 59.654870][ T6570] NEXT_ORPHAN(inode)=2264924160 [ 59.654881][ T6570] max_ino=32 [ 59.654891][ T6570] i_nlink=0 [ 59.659248][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 59.659264][ C0] EXT4-fs (loop6): initial error at time 59: ext4_orphan_get:1425 [ 59.659276][ C0] EXT4-fs (loop6): last error at time 59: ext4_orphan_get:1425 [ 59.669313][ T6570] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2972: inode #15: comm syz.6.352: corrupted xattr block 19: e_value out of bounds [ 59.669365][ T6570] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 59.682176][ T6570] EXT4-fs warning (device loop6): ext4_evict_inode:287: xattr delete (err -117) [ 59.682692][ T6570] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.689239][ T6570] EXT4-fs error (device loop6): ext4_search_dir:1474: inode #2: block 3: comm syz.6.352: bad entry in directory: directory entry overrun - offset=44, inode=262156, rec_len=4096, size=4096 fake=0 [ 59.751558][ T24] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 59.772298][ T6576] loop7: detected capacity change from 0 to 4096 [ 59.775070][ T6576] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 59.775094][ T6576] EXT4-fs (loop7): Test dummy encryption mode enabled [ 59.779650][ T24] usb 1-1: device descriptor read/8, error -71 [ 59.791811][ T6576] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840c019, mo2=0003] [ 59.791875][ T6576] System zones: 0-5 [ 59.794028][ T5064] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.796814][ T6576] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.840406][ T6573] trusted_key: encrypted_key: insufficient parameters specified [ 59.848094][ T6573] trusted_key: encrypted_key: insufficient parameters specified [ 59.849734][ T6583] netlink: 20 bytes leftover after parsing attributes in process `syz.5.355'. [ 59.884642][ T5082] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.968840][ T5422] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.030367][ T24] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 60.051249][ T24] usb 1-1: device descriptor read/8, error -71 [ 60.087468][ T6615] loop5: detected capacity change from 0 to 512 [ 60.094094][ T6616] netlink: 5 bytes leftover after parsing attributes in process `syz.3.362'. [ 60.096490][ T6616] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 60.105567][ T6615] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.112519][ T6609] netlink: 4 bytes leftover after parsing attributes in process `syz.7.360'. [ 60.112678][ T6609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.119448][ T6615] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.363: bg 0: block 306: padding at end of block bitmap is not set [ 60.127480][ T6609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.152605][ T5064] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.179446][ T24] usb usb1-port1: unable to enumerate USB device [ 60.223762][ T6629] loop3: detected capacity change from 0 to 512 [ 60.236365][ T6629] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.366: inode has both inline data and extents flags [ 60.236401][ T6629] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 60.239111][ T6629] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.366: couldn't read orphan inode 15 (err -117) [ 60.239146][ T6629] loop3: lost filesystem error report for type 5 error -117 [ 60.240869][ C1] EXT4-fs (loop3): error count since last fsck: 2 [ 60.240892][ C1] EXT4-fs (loop3): initial error at time 60: ext4_orphan_get:1399: inode 15 [ 60.240908][ C1] EXT4-fs (loop3): last error at time 60: ext4_orphan_get:1404 [ 60.249584][ T6629] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.371472][ T4716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.428160][ T6649] null_blk: disk nullb1 created [ 60.480000][ T6656] netlink: 148 bytes leftover after parsing attributes in process `syz.3.372'. [ 60.794837][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 60.794858][ T4715] Bluetooth: hci0: command 0x0c1a tx timeout [ 60.797256][ T4711] Bluetooth: hci2: command 0x0c1a tx timeout [ 60.864504][ T6666] loop5: detected capacity change from 0 to 2048 [ 60.880439][ T4715] Bluetooth: hci4: command 0x0c1a tx timeout [ 60.881726][ T4711] Bluetooth: hci3: command 0x0c1a tx timeout [ 60.913636][ T4711] Bluetooth: hci0: unexpected event for opcode 0x2039 [ 60.935103][ T6673] fuse: Bad value for 'fd' [ 60.935221][ T6673] fuse: Bad value for 'fd' [ 60.935297][ T6673] fuse: Bad value for 'fd' [ 60.935371][ T6673] fuse: Bad value for 'fd' [ 60.935441][ T6673] fuse: Bad value for 'fd' [ 60.940665][ T6673] fuse: Bad value for 'fd' [ 60.995968][ T6687] netlink: 20 bytes leftover after parsing attributes in process `syz.6.378'. [ 61.038934][ T6691] loop5: detected capacity change from 0 to 128 [ 61.170668][ T6714] loop3: detected capacity change from 0 to 512 [ 61.175510][ T6714] EXT4-fs: inline encryption not supported [ 61.178479][ T6714] EXT4-fs: Ignoring removed i_version option [ 61.212511][ T6714] EXT4-fs (loop3): 1 orphan inode deleted [ 61.212980][ T6714] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.224475][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 61.224506][ T30] audit: type=1326 audit(60.948:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6724 comm="syz.6.385" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad1781a8 code=0x50000 [ 61.224531][ T30] audit: type=1326 audit(60.948:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6724 comm="syz.6.385" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad1781a8 code=0x50000 [ 61.224550][ T30] audit: type=1326 audit(60.948:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6724 comm="syz.6.385" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad1781a8 code=0x50000 [ 61.224570][ T30] audit: type=1326 audit(60.948:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6724 comm="syz.6.385" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad1781a8 code=0x50000 [ 61.224588][ T30] audit: type=1326 audit(60.948:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6724 comm="syz.6.385" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad1781a8 code=0x50000 [ 61.224605][ T30] audit: type=1326 audit(60.948:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6724 comm="syz.6.385" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad1781a8 code=0x50000 [ 61.224622][ T30] audit: type=1326 audit(60.948:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6724 comm="syz.6.385" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad1781a8 code=0x50000 [ 61.224639][ T30] audit: type=1326 audit(60.948:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6724 comm="syz.6.385" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad1781a8 code=0x50000 [ 61.224656][ T30] audit: type=1326 audit(60.948:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6724 comm="syz.6.385" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad1781a8 code=0x50000 [ 61.224673][ T30] audit: type=1326 audit(60.948:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6724 comm="syz.6.385" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad1781a8 code=0x50000 [ 61.285871][ T6733] loop7: detected capacity change from 0 to 512 [ 61.286291][ T6733] EXT4-fs: Ignoring removed bh option [ 61.314187][ T6733] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.327125][ T6733] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.387: corrupted xattr block 33: invalid ea_ino [ 61.335135][ T4716] EXT4-fs error (device loop3): htree_dirblock_to_tree:1051: inode #2: comm syz-executor: Directory hole found for htree leaf block 0 [ 61.340212][ T6733] EXT4-fs (loop7): Remounting filesystem read-only [ 61.606100][ T6737] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.641096][ T6776] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 61.641130][ T6776] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 61.677596][ T1272] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 61.677653][ T1272] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.790340][ T6769] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 61.824372][ T1272] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 61.824415][ T1272] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.897069][ T6791] EXT4-fs warning (device loop6): ext4_multi_mount_protect:287: Invalid MMP block in superblock [ 61.956267][ T1272] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 61.956313][ T1272] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.055512][ T4715] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.058926][ T4715] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.060807][ T4715] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.062678][ T4715] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.064183][ T1272] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 62.064235][ T1272] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.070200][ T4715] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.209184][ T6825] netlink: 20 bytes leftover after parsing attributes in process `syz.0.405'. [ 62.243223][ T6824] EXT4-fs: Ignoring removed oldalloc option [ 62.244434][ T6824] EXT4-fs: Ignoring removed orlov option [ 62.252601][ T5574] netdevsim netdevsim3 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.259734][ T4942] netdevsim netdevsim3 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.261298][ T40] netdevsim netdevsim3 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.276014][ T1272] bridge0: port 3(team0) entered disabled state [ 62.308382][ T1272] bridge_slave_1: left allmulticast mode [ 62.309527][ T1272] bridge_slave_1: left promiscuous mode [ 62.313263][ T1272] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.329444][ T6824] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: comm syz.6.404: lblock 0 mapped to illegal pblock 0 (length 6) [ 62.335942][ T1272] bridge_slave_0: left allmulticast mode [ 62.335975][ T1272] bridge_slave_0: left promiscuous mode [ 62.336070][ T1272] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.340796][ T6824] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 62.345603][ T6824] EXT4-fs (loop6): This should not happen!! Data will be lost [ 62.345603][ T6824] [ 62.355982][ T1272] dvmrp5: left allmulticast mode [ 62.646560][ T1272] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.695599][ T1272] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.730039][ T1272] bond0 (unregistering): Released all slaves [ 62.784262][ T5562] netdevsim netdevsim3 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.948776][ T4399] 8021q: adding VLAN 0 to HW filter on device eth13 [ 62.991609][ T6805] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.993144][ T6805] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.993259][ T6805] bridge_slave_0: entered allmulticast mode [ 62.993734][ T6805] bridge_slave_0: entered promiscuous mode [ 62.994649][ T6805] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.994698][ T6805] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.994751][ T6805] bridge_slave_1: entered allmulticast mode [ 62.995160][ T6805] bridge_slave_1: entered promiscuous mode [ 63.010969][ T6805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.012175][ T6805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.018594][ T4715] Bluetooth: hci1: command 0x0c1a tx timeout [ 63.018908][ T6805] team0: Port device team_slave_0 added [ 63.019762][ T6805] team0: Port device team_slave_1 added [ 63.030562][ T4942] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:8: bg 0: block 112: padding at end of block bitmap is not set [ 63.032090][ T4942] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 32 with error 28 [ 63.032110][ T4942] EXT4-fs (loop6): This should not happen!! Data will be lost [ 63.032110][ T4942] [ 63.032118][ T4942] EXT4-fs (loop6): Total free blocks count 0 [ 63.032125][ T4942] EXT4-fs (loop6): Free/Dirty block details [ 63.032134][ T4942] EXT4-fs (loop6): free_blocks=0 [ 63.032146][ T4942] EXT4-fs (loop6): dirty_blocks=32 [ 63.032152][ T4942] EXT4-fs (loop6): Block reservation details [ 63.032157][ T4942] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 63.033077][ T5082] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 63.052772][ T6805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.052805][ T6805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.052834][ T6805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.053938][ T6805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.053946][ T6805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.053959][ T6805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.095967][ T6879] netlink: 16 bytes leftover after parsing attributes in process `syz.6.407'. [ 63.097791][ T6879] netlink: 8 bytes leftover after parsing attributes in process `syz.6.407'. [ 63.104385][ T4715] Bluetooth: hci3: command 0x0c1a tx timeout [ 63.104424][ T4715] Bluetooth: hci4: command 0x0c1a tx timeout [ 63.124080][ T6805] hsr_slave_0: entered promiscuous mode [ 63.126532][ T6805] hsr_slave_1: entered promiscuous mode [ 63.131974][ T6805] debugfs: 'hsr0' already exists in 'hsr' [ 63.132006][ T6805] Cannot create hsr debugfs directory [ 63.283728][ T6897] 9p: Bad value for 'wfdno' [ 63.315299][ T1272] hsr_slave_0: left promiscuous mode [ 63.317870][ T1272] hsr_slave_1: left promiscuous mode [ 63.318158][ T1272] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.318169][ T1272] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.323398][ T1272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.323428][ T1272] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.335518][ T1272] veth1_macvtap: left promiscuous mode [ 63.335571][ T1272] veth0_macvtap: left promiscuous mode [ 63.335618][ T1272] veth1_vlan: left promiscuous mode [ 63.335638][ T1272] veth0_vlan: left promiscuous mode [ 63.343906][ T6905] netlink: 'syz.0.412': attribute type 39 has an invalid length. [ 63.533410][ T6917] vfat: Unknown parameter 'Ûheck' [ 63.563675][ T1272] team_slave_1 (unregistering): left promiscuous mode [ 63.563719][ T1272] team_slave_1 (unregistering): left allmulticast mode [ 63.573228][ T1272] team0 (unregistering): Port device team_slave_1 removed [ 63.584802][ T1272] team_slave_0 (unregistering): left promiscuous mode [ 63.584941][ T1272] team_slave_0 (unregistering): left allmulticast mode [ 63.587686][ T1272] team0 (unregistering): Port device team_slave_0 removed [ 63.639703][ T6919] vfat: Unknown parameter 'nnonumtail' [ 63.671615][ T4399] 8021q: adding VLAN 0 to HW filter on device eth14 [ 63.681305][ T6905] hsr_slave_0: left promiscuous mode [ 63.685793][ T6905] hsr_slave_1: left promiscuous mode [ 63.831189][ T4711] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 63.867061][ T6930] EXT4-fs: Ignoring removed mblk_io_submit option [ 63.869150][ T6930] EXT4-fs (loop6): Test dummy encryption mode enabled [ 63.871339][ T6930] EXT4-fs error (device loop6): __ext4_iget:5533: inode #3: block 127754: comm syz.6.417: invalid block [ 63.871381][ T6930] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 63.871625][ T6930] EXT4-fs error (device loop6): ext4_quota_enable:7235: comm syz.6.417: Bad quota inode: 3, type: 0 [ 63.871640][ T6930] loop6: lost filesystem error report for type 5 error -117 [ 63.871802][ T6930] EXT4-fs warning (device loop6): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 63.872080][ T6930] EXT4-fs (loop6): mount failed [ 64.141941][ T6941] process 'syz.6.420' launched './file1' with NULL argv: empty string added [ 64.143802][ T6941] û: renamed from bond_slave_0 (while UP) [ 64.308896][ T4711] Bluetooth: hci2: command tx timeout [ 64.355919][ T6956] set_capacity_and_notify: 11 callbacks suppressed [ 64.356080][ T6956] loop7: detected capacity change from 0 to 256 [ 64.897299][ T6960] netlink: 68 bytes leftover after parsing attributes in process `syz.5.426'. [ 64.998854][ T1597] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.000328][ T1597] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.003182][ T1033] cfg80211: failed to load regulatory.db [ 66.550654][ T4711] Bluetooth: hci2: command tx timeout [ 66.570975][ T6908] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 66.574921][ T6805] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 66.591513][ T6805] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.591880][ T6805] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 66.629530][ T6805] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.630027][ T6805] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 66.635990][ T6991] netlink: 'syz.6.434': attribute type 4 has an invalid length. [ 66.638022][ T6990] ip_tables: iptables: counters copy to user failed while replacing table [ 66.654639][ T6805] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.655305][ T6805] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 66.668069][ T6805] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.678843][ T6993] loop0: detected capacity change from 0 to 256 [ 66.683432][ T6993] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 66.701120][ T6997] FAULT_INJECTION: forcing a failure. [ 66.701120][ T6997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.706484][ T6997] CPU: 1 UID: 0 PID: 6997 Comm: syz.7.436 Tainted: G L syzkaller #0 PREEMPT [ 66.706502][ T6997] Tainted: [L]=SOFTLOCKUP [ 66.706506][ T6997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 66.706511][ T6997] Call trace: [ 66.706515][ T6997] show_stack+0x2c/0x3c (C) [ 66.706536][ T6997] __dump_stack+0x30/0x40 [ 66.706551][ T6997] dump_stack_lvl+0xd8/0x12c [ 66.706560][ T6997] dump_stack+0x1c/0x28 [ 66.706570][ T6997] should_fail_ex+0x41c/0x590 [ 66.706584][ T6997] should_fail+0x14/0x24 [ 66.706593][ T6997] should_fail_usercopy+0x20/0x30 [ 66.706600][ T6997] _inline_copy_from_user+0x3c/0x174 [ 66.706611][ T6997] btf_new_fd+0x25c/0xa24 [ 66.706619][ T6997] bpf_btf_load+0x144/0x190 [ 66.706627][ T6997] __sys_bpf+0x88c/0x8c8 [ 66.706633][ T6997] __arm64_sys_bpf+0xd0/0xec [ 66.706640][ T6997] invoke_syscall+0x98/0x244 [ 66.706650][ T6997] el0_svc_common+0xec/0x23c [ 66.706659][ T6997] do_el0_svc+0x4c/0x5c [ 66.706669][ T6997] el0_svc+0x64/0x260 [ 66.706680][ T6997] el0t_64_sync_handler+0x48/0x148 [ 66.706690][ T6997] el0t_64_sync+0x198/0x19c [ 66.721097][ T6998] Invalid ELF header len 3 [ 66.724601][ T6998] netlink: 80 bytes leftover after parsing attributes in process `syz.5.437'. [ 66.821643][ T6805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.822994][ T7017] loop7: detected capacity change from 0 to 128 [ 66.838047][ T6805] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.841831][ T1272] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.841881][ T1272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.860988][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.861039][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.878719][ T7017] EXT4-fs mount: 3 callbacks suppressed [ 66.878762][ T7017] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 66.957512][ T7016] loop5: detected capacity change from 0 to 8192 [ 66.960616][ T5422] EXT4-fs error (device loop7): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 66.966887][ T5422] EXT4-fs error (device loop7): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 66.974636][ T5422] EXT4-fs error (device loop7): ext4_empty_dir:3114: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 66.978865][ T5422] EXT4-fs error (device loop7): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 66.979152][ T5422] EXT4-fs error (device loop7): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 66.979416][ T5422] EXT4-fs error (device loop7): ext4_empty_dir:3114: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 66.979688][ T5422] EXT4-fs error (device loop7): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 66.979857][ T5422] EXT4-fs error (device loop7): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 66.980158][ T5422] EXT4-fs error (device loop7): ext4_empty_dir:3114: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 66.980741][ T5422] EXT4-fs error (device loop7): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 67.097172][ T7058] FAULT_INJECTION: forcing a failure. [ 67.097172][ T7058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.099587][ T7058] CPU: 0 UID: 0 PID: 7058 Comm: syz.0.449 Tainted: G L syzkaller #0 PREEMPT [ 67.099609][ T7058] Tainted: [L]=SOFTLOCKUP [ 67.099613][ T7058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 67.099618][ T7058] Call trace: [ 67.099622][ T7058] show_stack+0x2c/0x3c (C) [ 67.099646][ T7058] __dump_stack+0x30/0x40 [ 67.099658][ T7058] dump_stack_lvl+0xd8/0x12c [ 67.099668][ T7058] dump_stack+0x1c/0x28 [ 67.099678][ T7058] should_fail_ex+0x41c/0x590 [ 67.099689][ T7058] should_fail+0x14/0x24 [ 67.099698][ T7058] should_fail_usercopy+0x20/0x30 [ 67.099705][ T7058] bpf_log_attr_finalize+0x12c/0x28c [ 67.099715][ T7058] btf_new_fd+0x3a8/0xa24 [ 67.099723][ T7058] bpf_btf_load+0x144/0x190 [ 67.099731][ T7058] __sys_bpf+0x88c/0x8c8 [ 67.099737][ T7058] __arm64_sys_bpf+0xd0/0xec [ 67.099744][ T7058] invoke_syscall+0x98/0x244 [ 67.099754][ T7058] el0_svc_common+0xec/0x23c [ 67.099763][ T7058] do_el0_svc+0x4c/0x5c [ 67.099772][ T7058] el0_svc+0x64/0x260 [ 67.099783][ T7058] el0t_64_sync_handler+0x48/0x148 [ 67.099793][ T7058] el0t_64_sync+0x198/0x19c [ 67.132164][ T7061] netlink: 'syz.5.448': attribute type 7 has an invalid length. [ 67.134170][ T4399] 8021q: adding VLAN 0 to HW filter on device eth16 [ 67.172836][ T6805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.215406][ T7072] ieee802154 phy0 wpan0: encryption failed: -22 [ 67.356358][ T6805] veth0_vlan: entered promiscuous mode [ 67.363743][ T6805] veth1_vlan: entered promiscuous mode [ 67.392763][ T6805] veth0_macvtap: entered promiscuous mode [ 67.401770][ T6805] veth1_macvtap: entered promiscuous mode [ 67.416200][ T6805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.419717][ T6805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.452943][ T1272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.452975][ T1272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.458911][ T4942] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.461920][ T5562] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.461977][ T5562] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.480600][ T5574] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.516583][ T4942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.516674][ T4942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.566084][ T30] kauditd_printk_skb: 1212 callbacks suppressed [ 67.566105][ T30] audit: type=1400 audit(66.815:1229): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="(" requested=w pid=7090 comm="syz.6.455" dest=3616 [ 67.808047][ T7121] FAULT_INJECTION: forcing a failure. [ 67.808047][ T7121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.811294][ T7121] CPU: 0 UID: 0 PID: 7121 Comm: syz.5.459 Tainted: G L syzkaller #0 PREEMPT [ 67.811317][ T7121] Tainted: [L]=SOFTLOCKUP [ 67.811321][ T7121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 67.811327][ T7121] Call trace: [ 67.811331][ T7121] show_stack+0x2c/0x3c (C) [ 67.811349][ T7121] __dump_stack+0x30/0x40 [ 67.811360][ T7121] dump_stack_lvl+0xd8/0x12c [ 67.811370][ T7121] dump_stack+0x1c/0x28 [ 67.811379][ T7121] should_fail_ex+0x41c/0x590 [ 67.811391][ T7121] should_fail+0x14/0x24 [ 67.811400][ T7121] should_fail_usercopy+0x20/0x30 [ 67.811407][ T7121] simple_read_from_buffer+0xc4/0x238 [ 67.811417][ T7121] proc_fail_nth_read+0x1a8/0x248 [ 67.811425][ T7121] vfs_read+0x230/0x8c8 [ 67.811432][ T7121] ksys_read+0x12c/0x228 [ 67.811438][ T7121] __arm64_sys_read+0x84/0x98 [ 67.811445][ T7121] invoke_syscall+0x98/0x244 [ 67.811454][ T7121] el0_svc_common+0xec/0x23c [ 67.811464][ T7121] do_el0_svc+0x4c/0x5c [ 67.811473][ T7121] el0_svc+0x64/0x260 [ 67.811484][ T7121] el0t_64_sync_handler+0x48/0x148 [ 67.811493][ T7121] el0t_64_sync+0x198/0x19c [ 67.816545][ T4399] 8021q: adding VLAN 0 to HW filter on device eth15 [ 67.899384][ T7132] bond1: entered allmulticast mode [ 67.903374][ T7132] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.913044][ T7137] loop0: detected capacity change from 0 to 256 [ 67.915907][ T7137] vfat: Unknown parameter 'sortname' [ 68.088074][ T5422] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.122014][ T7147] loop0: detected capacity change from 0 to 256 [ 68.122440][ T7147] vfat: Unknown parameter 'shr' [ 68.154677][ T7135] loop5: detected capacity change from 0 to 512 [ 68.156768][ T7135] ext2: Unknown parameter 'defcontext' [ 68.211052][ T5560] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.317861][ T4715] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.320323][ T4715] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.322860][ T4715] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.325319][ T4715] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.329985][ T4715] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.332840][ T5560] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.793085][ T5560] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.801443][ T4711] Bluetooth: hci2: command tx timeout [ 68.851703][ T7172] loop5: detected capacity change from 0 to 4096 [ 68.852083][ T7172] EXT4-fs: inline encryption not supported [ 68.861674][ T7172] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 68.861714][ T7172] EXT4-fs (loop5): Test dummy encryption mode enabled [ 68.868929][ T7172] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 68.868988][ T7172] System zones: 0-5 [ 68.869783][ T7172] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.886652][ T7172] netlink: 28 bytes leftover after parsing attributes in process `syz.5.471'. [ 68.892614][ T5560] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.953695][ T7183] netlink: 8 bytes leftover after parsing attributes in process `syz.5.471'. [ 68.985890][ T7191] netlink: 14 bytes leftover after parsing attributes in process `syz.8.470'. [ 69.105698][ T5064] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.113232][ T5560] bridge_slave_1: left allmulticast mode [ 69.113266][ T5560] bridge_slave_1: left promiscuous mode [ 69.113366][ T5560] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.129059][ T5560] bridge_slave_0: left allmulticast mode [ 69.129089][ T5560] bridge_slave_0: left promiscuous mode [ 69.129200][ T5560] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.500808][ T5560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.535605][ T5560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.579396][ T5560] bond0 (unregistering): Released all slaves [ 69.644894][ T5551] netdevsim netdevsim7 eth18: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.644942][ T5551] netdevsim netdevsim7 eth17: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.644973][ T5551] netdevsim netdevsim7 eth20: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.644992][ T5551] netdevsim netdevsim7 eth19: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.833482][ T7154] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.833532][ T7154] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.833713][ T7154] bridge_slave_0: entered allmulticast mode [ 69.849642][ T7154] bridge_slave_0: entered promiscuous mode [ 69.851123][ T4399] 8021q: adding VLAN 0 to HW filter on device eth17 [ 69.856298][ T7154] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.857652][ T7154] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.859737][ T7154] bridge_slave_1: entered allmulticast mode [ 69.863413][ T7154] bridge_slave_1: entered promiscuous mode [ 69.938409][ T7154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.941958][ T7154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.970143][ T7256] netlink: 'syz.6.489': attribute type 2 has an invalid length. [ 69.970178][ T7256] netlink: 8 bytes leftover after parsing attributes in process `syz.6.489'. [ 70.037513][ T7154] team0: Port device team_slave_0 added [ 70.045369][ T7154] team0: Port device team_slave_1 added [ 70.134643][ T5560] hsr_slave_0: left promiscuous mode [ 70.136258][ T5560] hsr_slave_1: left promiscuous mode [ 70.136556][ T5560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.136567][ T5560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.141618][ T5560] veth1_macvtap: left promiscuous mode [ 70.141657][ T5560] veth0_macvtap: left promiscuous mode [ 70.141722][ T5560] veth1_vlan: left promiscuous mode [ 70.141755][ T5560] veth0_vlan: left promiscuous mode [ 70.250449][ T5560] team0 (unregistering): Port device team_slave_1 removed [ 70.254820][ T5560] team0 (unregistering): Port device team_slave_0 removed [ 70.310270][ T7154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.310299][ T7154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.310316][ T7154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.321329][ T7274] syz_tun: entered allmulticast mode [ 70.322919][ T4399] 8021q: adding VLAN 0 to HW filter on device eth18 [ 70.329361][ T7154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.329388][ T7154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.329407][ T7154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.368676][ T7154] hsr_slave_0: entered promiscuous mode [ 70.369113][ T7154] hsr_slave_1: entered promiscuous mode [ 70.472523][ T7154] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 70.479382][ T7154] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.482072][ T7154] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 70.491499][ T7154] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.491862][ T7154] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 70.501227][ T7154] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.503212][ T7154] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 70.507082][ T7154] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.530142][ T4711] Bluetooth: hci4: command tx timeout [ 70.572547][ T7154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.585549][ T7154] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.590582][ T1272] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.590625][ T1272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.595890][ T1080] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.595934][ T1080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.620774][ T7154] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.728856][ T4399] 8021q: adding VLAN 0 to HW filter on device eth19 [ 70.859974][ T7154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.899089][ T7342] netlink: 'syz.0.496': attribute type 1 has an invalid length. [ 70.901589][ T7342] netlink: 'syz.0.496': attribute type 1 has an invalid length. [ 70.901626][ T7342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.496'. [ 70.988815][ T4399] 8021q: adding VLAN 0 to HW filter on device eth20 [ 71.050625][ T4711] Bluetooth: hci2: command tx timeout [ 71.121071][ T7369] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 71.130641][ T5560] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.130692][ T5560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.140342][ T7154] veth0_vlan: entered promiscuous mode [ 71.151764][ T7154] veth1_vlan: entered promiscuous mode [ 71.181572][ T7154] veth0_macvtap: entered promiscuous mode [ 71.185591][ T7154] veth1_macvtap: entered promiscuous mode [ 71.195849][ T7154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.199501][ T7154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.268402][ T4942] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.268607][ T4942] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.268627][ T4942] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.268642][ T4942] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.293209][ T1272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.293243][ T1272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.307241][ T7379] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 71.316096][ T5551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.316134][ T5551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.354930][ T4711] Bluetooth: hci3: adv larger than maximum supported [ 71.356023][ T4711] Bluetooth: hci3: Malformed LE Event: 0x0d [ 71.555486][ T7398] loop9: detected capacity change from 0 to 128 [ 71.620011][ T7403] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 71.620011][ T7403] The task syz.5.507 (7403) triggered the difference, watch for misbehavior. [ 71.663021][ T7405] loop0: detected capacity change from 0 to 256 [ 71.663441][ T7405] vfat: Bad value for 'shortname' [ 71.672071][ T7405] binder: 7405 RLIMIT_NICE not set [ 72.093912][ T7405] binder: 7404:7405 ioctl c0306201 20001a80 returned -14 [ 72.244663][ T7421] efivarfs: Bad value for 'gid' [ 72.245848][ T7421] efivarfs: Bad value for 'gid' [ 72.335443][ T7423] netlink: 48 bytes leftover after parsing attributes in process `syz.0.516'. [ 72.337409][ T7423] netlink: 48 bytes leftover after parsing attributes in process `syz.0.516'. [ 72.693264][ T4817] IPVS: starting estimator thread 0... [ 73.431573][ T7451] IPVS: using max 57 ests per chain, 136800 per kthread [ 73.557775][ T7454] netlink: 'syz.8.523': attribute type 1 has an invalid length. [ 73.593727][ T7454] bond2: (slave geneve2): making interface the new active one [ 73.597065][ T7454] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 73.612679][ T7454] bond2 (unregistering): (slave geneve2): Releasing active interface [ 73.641366][ T7454] bond2 (unregistering): Released all slaves [ 73.651444][ T7458] netlink: 4 bytes leftover after parsing attributes in process `syz.5.524'. [ 73.701972][ T7464] loop8: detected capacity change from 0 to 1024 [ 73.718941][ T7464] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 73.720935][ T7463] EXT4-fs error (device loop8): ext4_map_blocks:833: inode #15: block 3: comm syz.8.526: lblock 3 mapped to illegal pblock 3 (length 3) [ 73.721322][ T7463] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 73.721335][ T7463] EXT4-fs (loop8): This should not happen!! Data will be lost [ 73.721335][ T7463] [ 73.729606][ T7463] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.526: bg 0: block 112: padding at end of block bitmap is not set [ 73.738564][ T7458] netlink: 4 bytes leftover after parsing attributes in process `syz.5.524'. [ 73.750878][ T5562] EXT4-fs error (device loop8): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:20: lblock 8 mapped to illegal pblock 8 (length 8) [ 73.754007][ T5562] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 73.754025][ T5562] EXT4-fs (loop8): This should not happen!! Data will be lost [ 73.754025][ T5562] [ 73.760323][ T6805] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 73.761773][ T6805] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 73.820056][ T4711] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 73.948348][ T7489] loop0: detected capacity change from 0 to 512 [ 73.948972][ T7489] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 73.968474][ T7489] EXT4-fs (loop0): 1 truncate cleaned up [ 73.970163][ T7489] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.970643][ T7492] overlayfs: failed to resolve './file1': -2 [ 74.006583][ T7496] netlink: 'syz.5.533': attribute type 2 has an invalid length. [ 74.006622][ T7496] netlink: 'syz.5.533': attribute type 1 has an invalid length. [ 74.048706][ T7501] loop5: detected capacity change from 0 to 1024 [ 74.095975][ T7504] syz_tun: entered allmulticast mode [ 74.098613][ T7503] syz_tun: left allmulticast mode [ 74.253441][ T4796] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 74.263652][ T4711] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 74.264586][ T4711] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 74.417444][ T4796] usb 1-1: Using ep0 maxpacket: 16 [ 74.533899][ T4796] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.533932][ T4796] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 74.533964][ T4796] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 74.533980][ T4796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.545195][ T4796] usb 1-1: config 0 descriptor?? [ 74.598695][ T4711] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 75.094902][ T7569] loop8: detected capacity change from 0 to 512 [ 75.098085][ T7569] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 75.114060][ T7569] EXT4-fs error (device loop8): ext4_iget_extra_inode:5180: inode #15: comm syz.8.554: corrupted in-inode xattr: invalid ea_ino [ 75.114094][ T7569] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 75.117161][ T7569] EXT4-fs (loop8): get orphan inode failed [ 75.120586][ T7569] EXT4-fs (loop8): mount failed [ 75.121592][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 75.121602][ C1] EXT4-fs (loop8): initial error at time 73: ext4_iget_extra_inode:5180: inode 15 [ 75.121623][ C1] EXT4-fs (loop8): last error at time 73: ext4_iget_extra_inode:5180: inode 15 [ 75.145910][ T7572] loop5: detected capacity change from 0 to 2048 [ 75.146346][ T7572] EXT4-fs: Ignoring removed i_version option [ 75.161937][ T7572] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.192146][ T5064] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.309029][ T15] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.347780][ T7591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.347991][ T7591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.355624][ T7591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.357065][ T7591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.358719][ T7591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.358888][ T7591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.368962][ T7591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.369172][ T7591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.379228][ T7591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.380653][ T7591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.400148][ T4715] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.402069][ T4715] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.405525][ T4715] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.407717][ T4715] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.409592][ T4715] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.855670][ T4796] usbhid 1-1:0.0: can't add hid device: -71 [ 75.855745][ T4796] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 75.862839][ T4796] usb 1-1: USB disconnect, device number 7 [ 75.920826][ T7594] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.920973][ T7594] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.921036][ T7594] bridge_slave_0: entered allmulticast mode [ 75.921493][ T7594] bridge_slave_0: entered promiscuous mode [ 75.925487][ T7594] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.925550][ T7594] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.925663][ T7594] bridge_slave_1: entered allmulticast mode [ 75.926104][ T7594] bridge_slave_1: entered promiscuous mode [ 75.935759][ T7594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.936841][ T7594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.942901][ T7594] team0: Port device team_slave_0 added [ 75.944178][ T7594] team0: Port device team_slave_1 added [ 75.951324][ T7594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.951352][ T7594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.951365][ T7594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.951893][ T7594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.951900][ T7594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.951914][ T7594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.965533][ T7594] hsr_slave_0: entered promiscuous mode [ 75.965866][ T7594] hsr_slave_1: entered promiscuous mode [ 75.966052][ T7594] debugfs: 'hsr0' already exists in 'hsr' [ 75.966063][ T7594] Cannot create hsr debugfs directory [ 75.986680][ T7622] netlink: 'syz.6.567': attribute type 1 has an invalid length. [ 75.994249][ T7622] 8021q: adding VLAN 0 to HW filter on device bond2 [ 76.007970][ T7622] bond2: (slave gretap1): making interface the new active one [ 76.010445][ T7622] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 76.069182][ T7627] loop6: detected capacity change from 0 to 512 [ 76.095832][ T7627] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.131901][ T7627] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.569: corrupted xattr block 6: invalid header [ 76.136714][ T7594] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.145897][ T7627] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.569: corrupted xattr block 6: invalid header [ 76.151282][ T7627] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.569: corrupted xattr block 6: invalid header [ 76.153865][ T7627] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.569: corrupted xattr block 6: invalid header [ 76.167745][ T7627] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.569: corrupted xattr block 6: invalid header [ 76.175607][ T7627] overlayfs: failed to get uuid (/file0, err=-117); falling back to uuid=null. [ 76.177529][ T7627] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.569: corrupted xattr block 6: invalid header [ 76.182011][ T7627] overlayfs: failed to get origin (-117) [ 76.184826][ T7627] EXT4-fs error (device loop6): ext4_xattr_block_find:1881: inode #12: comm syz.6.569: corrupted xattr block 6: invalid header [ 76.188983][ T7627] overlayfs: failed to verify upper root origin [ 76.190246][ T7643] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.569: corrupted xattr block 33: invalid header [ 76.194044][ T7643] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.569: corrupted xattr block 33: invalid header [ 76.194391][ T7643] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.569: corrupted xattr block 33: invalid header [ 76.201586][ T7643] fscrypt (loop6, inode 15): Error -117 getting encryption context [ 76.251858][ T7594] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.268920][ T5082] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.331642][ T7594] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.362436][ T7661] loop5: detected capacity change from 0 to 256 [ 76.397985][ T7665] netlink: 12 bytes leftover after parsing attributes in process `syz.6.575'. [ 76.403507][ T7665] netlink: 12 bytes leftover after parsing attributes in process `syz.6.575'. [ 76.408002][ T7665] netlink: 4 bytes leftover after parsing attributes in process `syz.6.575'. [ 76.417181][ T4713] EXT4-fs error (device loop0): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 76.417852][ T4713] EXT4-fs (loop0): Remounting filesystem read-only [ 76.419997][ T7594] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.434123][ T7661] syzkaller0: entered promiscuous mode [ 76.434159][ T7661] syzkaller0: entered allmulticast mode [ 76.444292][ T6122] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.494711][ T6122] syz_tun (unregistering): left allmulticast mode [ 76.645899][ T7594] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.655891][ T7594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.657762][ T7594] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.676342][ T7594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.682857][ T7594] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.698505][ T7594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.701537][ T7594] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.710944][ T7594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.801329][ T4715] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.804325][ T4715] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.806396][ T4715] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.808253][ T4715] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.811128][ T4715] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.831095][ T7594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.847914][ T7594] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.864741][ T5574] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.864794][ T5574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.071326][ T5562] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.071402][ T5562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.154610][ T15] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.242652][ T7749] loop8: detected capacity change from 0 to 512 [ 77.244046][ T15] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.248730][ T7749] EXT4-fs (loop8): Test dummy encryption mode enabled [ 77.248884][ T7749] EXT4-fs (loop8): can't mount with journal_checksum, fs mounted w/o journal [ 77.318391][ T15] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.389723][ T7594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.474223][ T7594] veth0_vlan: entered promiscuous mode [ 77.502898][ T7594] veth1_vlan: entered promiscuous mode [ 77.513006][ T15] bridge_slave_1: left allmulticast mode [ 77.513049][ T15] bridge_slave_1: left promiscuous mode [ 77.513197][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.517866][ T15] bridge_slave_0: left allmulticast mode [ 77.517898][ T15] bridge_slave_0: left promiscuous mode [ 77.518195][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.628900][ T4715] Bluetooth: hci3: unexpected cc 0x0c05 length: 4 > 1 [ 77.628938][ T4715] Bluetooth: hci3: unexpected event for opcode 0x0c05 [ 77.634877][ T4715] Bluetooth: hci4: command tx timeout [ 77.686463][ T15] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.696355][ T7799] netlink: 'syz.5.591': attribute type 8 has an invalid length. [ 77.698147][ T7799] netlink: 8 bytes leftover after parsing attributes in process `syz.5.591'. [ 77.703968][ T7798] loop5: detected capacity change from 0 to 1024 [ 77.705466][ T15] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.734587][ T15] bond0 (unregistering): Released all slaves [ 77.757483][ T7594] veth0_macvtap: entered promiscuous mode [ 77.767652][ T7594] veth1_macvtap: entered promiscuous mode [ 77.788103][ T5551] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.788164][ T1080] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.788203][ T1080] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.788243][ T1080] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.812175][ T7594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.827090][ T7594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.831621][ T4715] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 77.841681][ T7813] tmpfs: Bad value for 'mpol' [ 77.842812][ T4715] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 78.145246][ T1272] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.145310][ T1272] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.145356][ T1272] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.145378][ T1272] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.152471][ T4942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.152500][ T4942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.152610][ T4942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.152622][ T4942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.184762][ T7715] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.184814][ T7715] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.185242][ T7715] bridge_slave_0: entered allmulticast mode [ 78.186201][ T7715] bridge_slave_0: entered promiscuous mode [ 78.192458][ T7715] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.193868][ T7715] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.195424][ T7715] bridge_slave_1: entered allmulticast mode [ 78.197024][ T7715] bridge_slave_1: entered promiscuous mode [ 78.466033][ T7715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.469467][ T7715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.493212][ T4715] Bluetooth: hci0: unexpected event for opcode 0x202d [ 78.494997][ T30] audit: type=1400 audit(76.938:1230): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="(" requested=w pid=7858 comm="syz.5.601" [ 78.530613][ T7715] team0: Port device team_slave_0 added [ 78.531429][ T7715] team0: Port device team_slave_1 added [ 78.554725][ T7867] netlink: 20 bytes leftover after parsing attributes in process `syz.5.603'. [ 78.589425][ T7877] netlink: 100 bytes leftover after parsing attributes in process `syz.2.606'. [ 78.614306][ T7715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.614334][ T7715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.614350][ T7715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.637975][ T7715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.638008][ T7715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.638025][ T7715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.643087][ T7878] can0: slcan on ttyS3. [ 78.645715][ T7882] netlink: 100 bytes leftover after parsing attributes in process `syz.2.606'. [ 78.689436][ T7887] loop2: detected capacity change from 0 to 1024 [ 78.689819][ T7887] EXT4-fs: quotafile must be on filesystem root [ 78.692137][ T7715] hsr_slave_0: entered promiscuous mode [ 78.692534][ T7715] hsr_slave_1: entered promiscuous mode [ 78.692745][ T7715] debugfs: 'hsr0' already exists in 'hsr' [ 78.692757][ T7715] Cannot create hsr debugfs directory [ 78.700705][ T15] hsr_slave_0: left promiscuous mode [ 78.701814][ T15] hsr_slave_1: left promiscuous mode [ 78.702643][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.702655][ T15] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.704667][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.704681][ T15] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.711645][ T7878] can0 (unregistered): slcan off ttyS3. [ 78.728261][ T15] veth1_macvtap: left promiscuous mode [ 78.728315][ T15] veth0_macvtap: left promiscuous mode [ 78.728368][ T15] veth1_vlan: left promiscuous mode [ 78.728406][ T15] veth0_vlan: left promiscuous mode [ 79.022095][ T4715] Bluetooth: hci1: command tx timeout [ 79.210907][ T7930] netlink: 'syz.6.612': attribute type 58 has an invalid length. [ 79.210989][ T7930] netlink: 20 bytes leftover after parsing attributes in process `syz.6.612'. [ 79.697438][ T7934] loop8: detected capacity change from 0 to 512 [ 79.697853][ T7934] vfat: Unknown parameter 'nonum' [ 79.789431][ T15] team0 (unregistering): Port device team_slave_1 removed [ 79.793382][ T7942] netlink: 12 bytes leftover after parsing attributes in process `syz.8.615'. [ 79.793414][ T7942] netlink: 56 bytes leftover after parsing attributes in process `syz.8.615'. [ 79.793425][ T7942] netlink: 8 bytes leftover after parsing attributes in process `syz.8.615'. [ 79.801042][ T15] team0 (unregistering): Port device team_slave_0 removed [ 79.894570][ T4715] Bluetooth: hci4: command tx timeout [ 79.931800][ T7944] netlink: 448 bytes leftover after parsing attributes in process `syz.8.616'. [ 80.062710][ T7962] loop5: detected capacity change from 0 to 512 [ 80.077600][ T7962] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 80.077628][ T7962] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 80.077738][ T7962] EXT4-fs (loop5): orphan cleanup on readonly fs [ 80.091643][ T7962] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #13: comm syz.5.620: iget: bad i_size value: 12154761577498 [ 80.091693][ T7962] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 80.091985][ T7962] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.620: couldn't read orphan inode 13 (err -117) [ 80.092006][ T7962] loop5: lost filesystem error report for type 5 error -117 [ 80.094307][ T7962] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 80.098263][ T7962] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.620: dx entry: limit 65535 != root limit 120 [ 80.098285][ T7962] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.620: Corrupt directory, running e2fsck is recommended [ 80.105169][ T7962] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.620: dx entry: limit 65535 != root limit 120 [ 80.105199][ T7962] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.620: Corrupt directory, running e2fsck is recommended [ 80.131182][ T5064] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.232948][ T7715] netdevsim netdevsim4 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.393986][ T7715] netdevsim netdevsim4 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.444432][ T8006] loop2: detected capacity change from 0 to 1024 [ 80.445288][ T8006] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 80.445303][ T8006] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 80.446246][ T8006] EXT4-fs (loop2): invalid journal inode [ 80.446295][ T8006] EXT4-fs (loop2): can't get journal size [ 80.451276][ T8006] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.457996][ T30] audit: type=1400 audit(78.737:1231): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="(" requested=w pid=8005 comm="syz.2.627" [ 80.487135][ T7594] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.489466][ T7715] netdevsim netdevsim4 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.522921][ T8014] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 80.525671][ T8010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.645372][ T7715] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.784298][ T7715] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.793321][ T8044] loop2: detected capacity change from 0 to 256 [ 80.795464][ T8044] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 80.796527][ T7715] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.796884][ T7715] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.801914][ T7715] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.807451][ T7944] overlayfs: statfs failed on './file0' [ 80.812451][ T8044] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 80.838965][ T7715] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.850342][ T7715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.853812][ T7715] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.891981][ T7715] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.903600][ T4715] Bluetooth: hci2: Unable to find connection with handle 0x0000 [ 80.998694][ T7715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.010013][ T7715] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.014973][ T1272] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.015034][ T1272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.051299][ T4796] kernel read not supported for file /video7 (pid: 4796 comm: kworker/1:4) [ 81.053543][ T7715] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.053577][ T7715] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.061777][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.061838][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.115847][ T8080] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 81.115877][ T8080] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 81.116535][ T8080] vhci_hcd vhci_hcd.0: Device attached [ 81.117119][ T8082] vhci_hcd: unknown pdu 2 [ 81.120462][ T1272] vhci_hcd vhci_hcd.2: stop threads [ 81.120496][ T1272] vhci_hcd vhci_hcd.2: release socket [ 81.120531][ T1272] vhci_hcd vhci_hcd.2: disconnect device [ 81.288849][ T4715] Bluetooth: hci1: command tx timeout [ 81.327068][ T7715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.376876][ T8113] dvmrp5: entered allmulticast mode [ 81.451577][ T8120] netlink: 'syz.5.644': attribute type 5 has an invalid length. [ 81.494607][ T7715] veth0_vlan: entered promiscuous mode [ 81.560154][ T7715] veth1_vlan: entered promiscuous mode [ 81.568323][ T7715] veth0_macvtap: entered promiscuous mode [ 81.576508][ T7715] veth1_macvtap: entered promiscuous mode [ 81.595004][ T7715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.603109][ T7715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.863358][ T1272] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.863410][ T1272] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.863442][ T1272] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.863463][ T1272] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.904466][ T5562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.904638][ T5562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.925846][ T4942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.925879][ T4942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.143153][ T4715] Bluetooth: hci4: command tx timeout [ 82.172577][ T8149] loop4: detected capacity change from 0 to 32768 [ 82.235901][ T8149] loop4: p1 p3 < p5 p6 > [ 82.255387][ T8149] netlink: 210872 bytes leftover after parsing attributes in process `syz.4.585'. [ 82.255438][ T8149] netlink: zone id is out of range [ 82.255554][ T8149] netlink: zone id is out of range [ 82.255606][ T8149] netlink: get zone limit has 8 unknown bytes [ 82.272672][ T30] audit: type=1400 audit(80.417:1232): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="(" requested=w pid=8170 comm="syz.6.648" daddr=::ffff:172.20.20.0 dest=3 [ 82.296918][ T8171] overlayfs: failed lookup in lower (newroot/144, name='file0', err=-40): overlapping layers [ 82.535627][ T4970] udevd[4970]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 82.542056][ T4699] udevd[4699]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 82.550080][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 82.563027][ T5026] udevd[5026]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 82.997711][ T30] audit: type=1326 audit(81.081:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8215 comm="syz.2.655" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0d781a8 code=0x0 [ 83.028129][ T4399] 8021q: adding VLAN 0 to HW filter on device eth0 [ 83.551689][ T4715] Bluetooth: hci1: command tx timeout [ 83.593446][ T4399] 8021q: adding VLAN 0 to HW filter on device eth1 [ 84.003089][ T8264] loop4: detected capacity change from 0 to 4096 [ 84.011754][ T8264] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.021189][ C1] process 8067 (syz.8.638) no longer affine to cpu1 [ 84.089872][ T7715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.167855][ T8262] psci: CPU1 killed (polled 0 ms) [ 84.247811][ T6805] process 8085 (syz.8.638) no longer affine to cpu1 [ 84.465559][ T15] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.518677][ T8285] loop4: detected capacity change from 0 to 512 [ 84.526964][ T8285] EXT4-fs (loop4): Test dummy encryption mode enabled [ 84.536214][ T4399] 8021q: adding VLAN 0 to HW filter on device eth2 [ 84.544382][ T8285] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.668: inode has both inline data and extents flags [ 84.546706][ T8285] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 84.547046][ T8285] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.668: couldn't read orphan inode 15 (err -117) [ 84.549085][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 84.549097][ C0] EXT4-fs (loop4): initial error at time 82: ext4_orphan_get:1399: inode 15 [ 84.549116][ C0] EXT4-fs (loop4): last error at time 82: ext4_orphan_get:1399: inode 15 [ 84.557124][ T8285] loop4: lost filesystem error report for type 5 error -117 [ 84.557986][ T8285] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.614490][ T8285] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 84.634600][ T8290] loop8: detected capacity change from 0 to 512 [ 84.680738][ T8290] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 84.697170][ T4711] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.699435][ T4711] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.701413][ T4711] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.703470][ T4711] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.705104][ T4711] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.722977][ T8290] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.671: invalid indirect mapped block 9 (level 0) [ 84.723018][ T8290] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 84.726848][ T8290] EXT4-fs (loop8): 1 truncate cleaned up [ 84.727346][ T8290] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.788683][ T8303] loop5: detected capacity change from 0 to 512 [ 84.795477][ T8290] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 84.822738][ T8303] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 84.831026][ T8290] overlayfs: failed to set uuid (/file0, err=-28); falling back to uuid=null. [ 84.835552][ T8303] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.673: casefold flag without casefold feature [ 84.835597][ T8303] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 84.839131][ T8303] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.673: couldn't read orphan inode 15 (err -117) [ 84.839163][ T8303] loop5: lost filesystem error report for type 5 error -117 [ 84.843185][ C0] EXT4-fs (loop5): error count since last fsck: 2 [ 84.843203][ C0] EXT4-fs (loop5): initial error at time 82: ext4_orphan_get:1399: inode 15 [ 84.843218][ C0] EXT4-fs (loop5): last error at time 82: ext4_orphan_get:1404 [ 84.849358][ T8303] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.988165][ T15] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.992944][ T8310] overlayfs: failed lookup in lower (/, name='bus', err=-40): overlapping layers [ 85.087752][ T15] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.121825][ T7715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.165689][ T8318] loop6: detected capacity change from 0 to 512 [ 85.228607][ T8318] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.232556][ T8317] EXT4-fs (loop6): shut down requested (1) [ 85.238730][ T15] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.461478][ T4711] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 85.461536][ T4711] Bluetooth: hci2: Injecting HCI hardware error event [ 85.463005][ T4715] Bluetooth: hci2: hardware error 0x00 [ 85.561806][ T6805] EXT4-fs error (device loop8): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 85.726564][ T5064] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.764315][ T15] bridge_slave_1: left allmulticast mode [ 85.764354][ T15] bridge_slave_1: left promiscuous mode [ 85.764456][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.777558][ T15] bridge_slave_0: left allmulticast mode [ 85.784382][ T4711] Bluetooth: hci1: command tx timeout [ 85.787179][ T15] bridge_slave_0: left promiscuous mode [ 85.787301][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.931953][ T5082] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.014167][ T8342] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 86.014276][ T8342] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 86.022243][ T8342] IPv6: addrconf: prefix option has invalid lifetime [ 86.147486][ T15] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.214682][ T15] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.222446][ T15] bond0 (unregistering): Released all slaves [ 86.237591][ T4399] 8021q: adding VLAN 0 to HW filter on device eth3 [ 86.480718][ T1272] netdevsim netdevsim2 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.486458][ T1272] netdevsim netdevsim2 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.488232][ T1272] netdevsim netdevsim2 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.498289][ T1272] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.740018][ T8362] netlink: 'syz.6.685': attribute type 1 has an invalid length. [ 86.784935][ T8362] 8021q: adding VLAN 0 to HW filter on device bond3 [ 86.912678][ T4711] Bluetooth: hci4: command tx timeout [ 86.951288][ T8373] loop6: detected capacity change from 0 to 512 [ 86.961683][ T8373] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 86.981646][ T8373] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.686: casefold flag without casefold feature [ 86.985684][ T8373] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 86.987233][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 86.987258][ C0] EXT4-fs (loop6): initial error at time 84: ext4_orphan_get:1399: inode 15 [ 86.987293][ C0] EXT4-fs (loop6): last error at time 84: ext4_orphan_get:1399: inode 15 [ 86.997356][ T8373] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.686: couldn't read orphan inode 15 (err -117) [ 86.997401][ T8373] loop6: lost filesystem error report for type 5 error -117 [ 87.031279][ T8373] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.322600][ T15] hsr_slave_0: left promiscuous mode [ 87.331591][ T15] hsr_slave_1: left promiscuous mode [ 87.333459][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.336814][ T15] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.339984][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.341730][ T15] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.367963][ T15] veth1_macvtap: left promiscuous mode [ 87.369183][ T15] veth0_macvtap: left promiscuous mode [ 87.370646][ T15] veth1_vlan: left promiscuous mode [ 87.371771][ T15] veth0_vlan: left promiscuous mode [ 87.482605][ T8388] ================================================================== [ 87.482625][ T8388] BUG: KASAN: use-after-free in crc64_be+0xb8/0xe8 [ 87.482647][ T8388] Read of size 1 at addr ffff0000ccc64000 by task syz.5.688/8388 [ 87.482657][ T8388] [ 87.482664][ T8388] CPU: 0 UID: 0 PID: 8388 Comm: syz.5.688 Tainted: G L syzkaller #0 PREEMPT [ 87.482676][ T8388] Tainted: [L]=SOFTLOCKUP [ 87.482679][ T8388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 87.482684][ T8388] Call trace: [ 87.482687][ T8388] show_stack+0x2c/0x3c (C) [ 87.482702][ T8388] __dump_stack+0x30/0x40 [ 87.482715][ T8388] dump_stack_lvl+0xd8/0x12c [ 87.482726][ T8388] print_address_description+0xb0/0x238 [ 87.482736][ T8388] print_report+0x68/0x84 [ 87.482744][ T8388] kasan_report+0x8c/0xc4 [ 87.482755][ T8388] __asan_report_load1_noabort+0x20/0x2c [ 87.482767][ T8388] crc64_be+0xb8/0xe8 [ 87.482776][ T8388] register_bcache+0x9a4/0x13d8 [ 87.482788][ T8388] kobj_attr_store+0x6c/0x90 [ 87.482798][ T8388] sysfs_kf_write+0xe0/0x108 [ 87.482810][ T8388] kernfs_fop_write_iter+0x260/0x3b8 [ 87.482820][ T8388] vfs_write+0x51c/0xa0c [ 87.482829][ T8388] ksys_write+0x12c/0x228 [ 87.482836][ T8388] __arm64_sys_write+0x84/0x98 [ 87.482844][ T8388] invoke_syscall+0x98/0x244 [ 87.482856][ T8388] el0_svc_common+0xec/0x23c [ 87.482868][ T8388] do_el0_svc+0x4c/0x5c [ 87.482879][ T8388] el0_svc+0x64/0x260 [ 87.482897][ T8388] el0t_64_sync_handler+0x48/0x148 [ 87.482910][ T8388] el0t_64_sync+0x198/0x19c [ 87.482919][ T8388] [ 87.482922][ T8388] The buggy address belongs to the physical page: [ 87.482926][ T8388] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff0000ccc64000 pfn:0x10cc64 [ 87.482934][ T8388] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 87.482946][ T8388] raw: 05ffc00000000000 fffffdffc3134b08 fffffdffc3e39e08 0000000000000000 [ 87.482953][ T8388] raw: ffff0000ccc64000 0000000000000000 00000000ffffffff 0000000000000000 [ 87.482958][ T8388] page dumped because: kasan: bad access detected [ 87.482961][ T8388] [ 87.482963][ T8388] Memory state around the buggy address: [ 87.482968][ T8388] ffff0000ccc63f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 87.482973][ T8388] ffff0000ccc63f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 87.482979][ T8388] >ffff0000ccc64000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 87.482983][ T8388] ^ [ 87.482987][ T8388] ffff0000ccc64080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 87.482993][ T8388] ffff0000ccc64100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 87.482997][ T8388] ================================================================== [ 87.541260][ T8388] Disabling lock debugging due to kernel taint [ 87.581000][ T8388] bcache: register_bcache() error : Bad checksum [ 87.693666][ T4715] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 87.730156][ T15] team0 (unregistering): Port device team_slave_1 removed [ 87.740542][ T15] team0 (unregistering): Port device team_slave_0 removed [ 87.855590][ T5082] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.929898][ T8295] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.933497][ T8295] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.934956][ T8295] bridge_slave_0: entered allmulticast mode [ 87.936920][ T8295] bridge_slave_0: entered promiscuous mode [ 87.947545][ T8295] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.947583][ T8295] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.947703][ T8295] bridge_slave_1: entered allmulticast mode [ 87.957662][ T7649] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.967864][ T8295] bridge_slave_1: entered promiscuous mode [ 88.027402][ T8295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.035763][ T15] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.041667][ T8295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.072613][ T8295] team0: Port device team_slave_0 added [ 88.075697][ T8295] team0: Port device team_slave_1 added [ 88.102636][ T15] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.114794][ T8295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.114821][ T8295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.121446][ T8295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.121992][ T8295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.122008][ T8295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.122028][ T8295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.149394][ T15] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.178689][ T8295] hsr_slave_0: entered promiscuous mode [ 88.179025][ T8295] hsr_slave_1: entered promiscuous mode [ 88.188141][ T15] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.263685][ T15] bridge_slave_1: left allmulticast mode [ 88.263720][ T15] bridge_slave_1: left promiscuous mode [ 88.263811][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.270446][ T15] bridge_slave_0: left allmulticast mode [ 88.271503][ T15] bridge_slave_0: left promiscuous mode [ 88.272788][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.370746][ T15] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.375265][ T15] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.379368][ T15] bond0 (unregistering): Released all slaves [ 88.383338][ T15] bond1 (unregistering): Released all slaves [ 88.391827][ T8295] netdevsim netdevsim1 eth11 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.421785][ T4942] netdevsim netdevsim8 eth21: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.424643][ T1272] netdevsim netdevsim8 eth23: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.453302][ T5574] netdevsim netdevsim8 eth24: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.453466][ T5574] netdevsim netdevsim8 eth22: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.523254][ T15] hsr_slave_0: left promiscuous mode [ 88.525660][ T15] hsr_slave_1: left promiscuous mode [ 88.533287][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.533315][ T15] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.536691][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.542506][ T15] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.548238][ T15] veth1_macvtap: left promiscuous mode [ 88.550041][ T15] veth0_macvtap: left promiscuous mode [ 88.551547][ T15] veth1_vlan: left promiscuous mode [ 88.552678][ T15] veth0_vlan: left promiscuous mode [ 88.705451][ T15] team0 (unregistering): Port device team_slave_1 removed [ 88.716699][ T15] team0 (unregistering): Port device team_slave_0 removed [ 89.165770][ T4715] Bluetooth: hci4: command tx timeout [ 89.530838][ T8295] netdevsim netdevsim1 eth10 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.552556][ T8295] netdevsim netdevsim1 eth9 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.585770][ T8295] netdevsim netdevsim1 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.626344][ T8295] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.637805][ T8295] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.640012][ T8295] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.645375][ T8295] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.647769][ T8295] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.651503][ T8295] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.654733][ T8295] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.659141][ T8295] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.710589][ T8295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.719480][ T8295] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.724107][ T1272] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.724146][ T1272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.744156][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.744207][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.912465][ T8295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.933902][ T8295] veth0_vlan: entered promiscuous mode [ 89.941747][ T8295] veth1_vlan: entered promiscuous mode [ 89.962315][ T8295] veth0_macvtap: entered promiscuous mode [ 89.965999][ T8295] veth1_macvtap: entered promiscuous mode [ 89.979640][ T8295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.985267][ T8295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.013645][ T1272] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.016942][ T1272] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.016978][ T1272] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.017000][ T1272] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.036113][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.036139][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.051385][ T5560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.051414][ T5560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.419943][ T4715] Bluetooth: hci4: command tx timeout [ 91.884042][ T4399] 8021q: adding VLAN 0 to HW filter on device eth5 [ 91.997412][ T4399] 8021q: adding VLAN 0 to HW filter on device eth6 [ 92.106431][ T4399] 8021q: adding VLAN 0 to HW filter on device eth7 [ 92.219595][ T4399] 8021q: adding VLAN 0 to HW filter on device eth21 [ 92.329669][ T4399] 8021q: adding VLAN 0 to HW filter on device eth22 [ 92.443536][ T4399] 8021q: adding VLAN 0 to HW filter on device eth23 [ 92.552496][ T4399] 8021q: adding VLAN 0 to HW filter on device eth24 [ 92.687031][ T4399] 8021q: adding VLAN 0 to HW filter on device eth4 [ 93.674132][ T4715] Bluetooth: hci4: command tx timeout