last executing test programs: 4.260994828s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/graphics/fbcon/rotate\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x9, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000001815000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d0000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e1301002a00017c0000e682c3370000000000000000000065"], 0x16) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="022a000a0006000500150102000000"], 0xf) 4.045015887s ago: executing program 2 (id=6): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000001a80)={[{@data_ordered}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@journal_async_commit}, {@nolazytime}, {@data_writeback, 0x2e}, {@journal_async_commit}, {@resuid}, {@commit={'commit', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x800}}], [], 0x2c}, 0x84, 0x4f6, &(0x7f00000022c0)="$eJzs3M1vFOUfAPDvTOkbFFr4kZ/yolTR2Ii2tKBy8KBGEy4aEz3gsZZKkAKG1kQIkWIMHo1/AXo0MfHkRS+aqFEvarzq3ZgQwwXUxNTM7kx32+5ut1torfv5JNt9nplnXr7PzDP77DzbCaBtDWZ/koi+iPg5IvrL2YUFBstvN69fnPjj+sWJJObmXvg9KZW7cf3iRFG0WG5LnhlKI9K3k9hTY7vT5y+cGp+amjyX50dmTr82Mn3+wsMnT4+fmDwxeWbsyJHDh0Yfe3TskabiuLTM/CyuG7vfPLt319GX3nt2Yi5e/vajbH/78vnVcZQNNLXdRgZjMOZylaldpb/3r3rt/y5boze683SyafHcy2u/QzSlIyKyw9VZav/90RGVg9cfz7w1n/lynXYQuG2yz6btS6Z25O/p/OcX8F+UaOPQpopP/Oz7b/Fay/7Herv2ZPZ3shT/zfz1/XPlukmz77IDEV299Zf/f41pPZXkXP8y2++rdLauRs37EA0kTZcEAJj3edb/eahW/y9d0LfZlo+hDETEgYjYERH/i4idkc6XuSMi7lzh9gcX5Zf2f35s0Ptavaz/93g+tlW8ynOKuJL53NZS/J3JKyenJg/mdTIUnd1ZfrTBNr54+qd3683L4j82++fV4pVtP3uvlEh/29S9cJnj4zPjqwh5gWuXI4lNteJP5kcCshrYFRG7W1h/VmcnH/xwb5betmXp/OXjb2DJONPKzX0Q8UD5+M/GovgLSXlL9cYnR3piavLgSHFWLPXdD1eer853VqUXxN/TXEw9rQZbw7XLEZtrnv95/EUzKMZrp/P8V31Nb+PKL+/U/U6z9PgncWy2ukR+/vdWqi07/7uSF0vprnzaG+MzM+dGIz7LJyyYPlZZW5EvymfxD+1fGH/5e3GaXeP+fj9fbk9EZCfxXRFxd0Tsy/f9noi4NyL2N4j/m6fue7VxDbV4/t8CWfzHGx3/iIGkery+hUTHqa8/rbf95q5/h0upoXxK9fWvq856m93B1dYfAAAAbARpaQw6SYcjYtFtxtgZm9Ops9MzBwbj9TPHy7+VH4jOtLjT1V91P3Q0vzdc5McW5Q9FxPbSL416S/nhibNTW9cpZqBsS1X7L18L0nR4uDzv14713jvgtlvROFr1j84+/uTW7wywpm7BODqwQWn/0L60f2hf2j+0r1rt/1LEzXXYFWCNtfr5v/gHA8DGo/8Pban0ZFbtH9qX9g9taem/xOePW8muCa3/y//UjqOreWLA7U/M9be+eNSfNbvyFXY0V7h4+kXTa26ucBJRhJM2iKtGItLKlL/yp0mWpnSWy3Q1v6trn0iXLfPEcrXRuaJnYvTUqI19eaI7Ippdz6U1q9XiCpF4yiQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALCh/RMAAP//3Wzjzw==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(0x0, 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f", 0x3e0, r3) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002680)={r4, 0x0, 0x0}, 0x20) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x111000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000002c0)=0x11) setresuid(0x0, 0xee00, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x2) 3.130403052s ago: executing program 2 (id=9): r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYBLOB="010025bd7000fddbdf251a0000000664420789fa933a62532b5554310021087200000028db9200060000"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0xc810) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@noblock_validity}, {@oldalloc}, {@orlov}, {@quota}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) faccessat(0xffffffffffffff9c, 0x0, 0x2) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xfffffffffffffffc, 0x4000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x103402, 0x49) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r7, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0xa0, 0x1, 0x0, r6, &(0x7f0000000200)='p', 0x8200, 0x600}]) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x101040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.369135486s ago: executing program 4 (id=15): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x3}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0xe}]}}]}, 0x3c}}, 0x24040084) write$UHID_INPUT(r0, &(0x7f0000002680)={0xfc, {"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", 0x1000}}, 0x1006) 2.36828613s ago: executing program 0 (id=16): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x80003, 0xae0, 0x6361, 0x9, 0xffffffff, 0x4}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) (async) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) (async, rerun: 64) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) (rerun: 64) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) (async, rerun: 32) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3, 0x1, {}, 0x0, 0x0, r5}) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) (async, rerun: 32) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff2000}]}) (rerun: 32) close_range(r8, 0xffffffffffffffff, 0x0) 2.194230878s ago: executing program 3 (id=17): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="000202"], 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00"/151], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) 2.144617561s ago: executing program 4 (id=18): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000090000000000000040000000850000002c000000850000000800000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c000c80080002802d", @ANYRES16=r3], 0x44}}, 0x2000800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf46, 0x0, 0x1, 0x0, &(0x7f00000001c0)='\x00', 0x0, 0x2, 0x0, 0x8}, 0x50) 2.143310589s ago: executing program 2 (id=19): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000b80)={{0xffffffffffffffff, &(0x7f0000000000)=':\x00', 0x200, &(0x7f0000000280)={@_ha_fsid={[0x1, 0x10000]}, {0x5, 0x100, 0x7, 0xfffffffffffffff8}}, 0xfffffff8, &(0x7f00000003c0), &(0x7f0000000400)=0x1}, 0x2, &(0x7f0000000b40)=[{0x1, 0xffffff2e, &(0x7f0000000440)='\'${\x00', &(0x7f0000000480)}, {0x3, 0x81, &(0x7f0000000540)='nl80211\x00', &(0x7f0000000a80)="407ac6b838070ce2ae5dd9eee6c9ff504dfacb79da34f7a96884c32c5f1ddab1547434c88cc3cefa86ebfa3b11ccd7ffc6d9340ea6e0fde3891295b5525c2fc99c32f6adac48def6515f90004ce0a8f919affc1d2bc129140a81d2e11544744cbadc7b18134bfc9dcad38b7b91012cd6704454ea91fd223bf900849d6e9add6df2466718b9da53d928c6ceb38ef74c0af42e392af39010d1464b56d8fb264ce9fffb219a9003a18c8359386fa4ab1544f01892d9036d078bd590", 0xba, 0x12}]}) bind$bt_hci(r0, &(0x7f0000000c00)={0x1f, 0x0, 0x2}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x201081e, &(0x7f00000005c0)={[{@minixdf}, {@errors_remount}]}, 0x1, 0x459, &(0x7f0000000600)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x9, &(0x7f0000000300)=ANY=[@ANYBLOB="18120000", @ANYRES32, @ANYBLOB="0000000000000000b70300001800009f6703000020000000bfa400000000000007040000f8ffffffb7050000080000008500"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x0, 0xe, 0x0, &(0x7f0000000500)="11223344556677889900aabbccdd", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000000100000010300000004"], 0x48) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x209, 0x72bd28, 0x25dfdbfe, 0x8, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0x1}}]}, 0x1c}}, 0x8800) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}}}, 0xb8}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014002000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) pwrite64(r7, &(0x7f0000000300)='E', 0x1, 0x47ecf) ioctl$EXT4_IOC_MOVE_EXT(r7, 0x40305829, &(0x7f0000000240)={0x17c04, r7, 0x6, 0x100000001}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000", @ANYRES16, @ANYBLOB="050004000000fedbdf250f00000008000300", @ANYBLOB="5e000e0080000000080211000001080211000001ffffffffffff000040000000000000000400620500060101010101012a01023c0401073c022d1a0008110600000000000000aa000600190000000600030000000271070101000102f0080000220000002d1a10001f000000000000000001000000070000000003060000000801000000080026006c09000008000c006400000008000d"], 0xb8}}, 0x0) 2.040092267s ago: executing program 4 (id=20): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000001a80)={[{@data_ordered}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@journal_async_commit}, {@nolazytime}, {@data_writeback, 0x2e}, {@journal_async_commit}, {@resuid}, {@commit={'commit', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x800}}], [], 0x2c}, 0x84, 0x4f6, &(0x7f00000022c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(0x0, 0x0, &(0x7f0000000200)="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", 0x3e0, r3) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002680)={r4, 0x0, 0x0}, 0x20) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x111000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000002c0)=0x11) setresuid(0x0, 0xee00, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x2) 1.73449714s ago: executing program 0 (id=21): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000600)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{0x1, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)='%-5lx \x00'}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000008c0)={r2, &(0x7f0000000840)="6fc377fb822e908d1f3b459a", &(0x7f0000000880)=@tcp=r0}, 0x20) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) fcntl$dupfd(r3, 0x0, r4) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000680), 0x8040, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000006c0)={0x0, 0x4, 0x7fff, 0x3}, &(0x7f0000000700)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000740)={r6, 0x5}, 0x8) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x1, 0x10, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2800, 0xf9020}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0xf310}]}}}]}, 0x44}, 0x1, 0x2}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000640)=ANY=[@ANYRES64=r1, @ANYRES64=0x0], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x8021) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f00000005c0)={0xa, 0x4e22, 0x9, @local, 0xb}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) socket(0x10, 0x3, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000600)) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{0x1}, &(0x7f0000000780), &(0x7f00000007c0)='%-5lx \x00'}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000008c0)={r2, &(0x7f0000000840)="6fc377fb822e908d1f3b459a", &(0x7f0000000880)=@tcp=r0}, 0x20) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) (async) fcntl$dupfd(r3, 0x0, r4) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000680), 0x8040, 0x0) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000006c0)={0x0, 0x4, 0x7fff, 0x3}, &(0x7f0000000700)=0x10) (async) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000740)={r6, 0x5}, 0x8) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x1, 0x10, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2800, 0xf9020}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0xf310}]}}}]}, 0x44}, 0x1, 0x2}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000640)=ANY=[@ANYRES64=r1, @ANYRES64=0x0], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x8021) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$inet6(r8, &(0x7f00000005c0)={0xa, 0x4e22, 0x9, @local, 0xb}, 0x1c) (async) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) (async) 1.624398417s ago: executing program 0 (id=22): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$unix(0x1, 0x1, 0x0) close(0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt(r2, 0x1, 0x43, &(0x7f00000002c0)=""/160, &(0x7f0000000040)=0xa0) socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) r3 = io_uring_setup(0x6005, &(0x7f0000000080)={0x0, 0xb700, 0x800, 0x2, 0x24c}) close_range(r3, r3, 0x0) read$FUSE(r1, &(0x7f0000001300)={0x2020}, 0x2020) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd0100000000001400000060000000002806"], 0xfdef) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x1a, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r4], 0x7c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.234908538s ago: executing program 3 (id=24): setns(0xc9, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25fe80000000000000000000000000002aff020000000000000000000000000001000400004e2100020000002021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe8000000000000000000000000000bb000004d63200000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000300010000800000000043050000000000000400000000000000ffffffffffffff7f000000000000000001000000000000000000000000000000000000002cbd7000fc34000002000000500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000210466d38547aa14cb7a000000000000000000000c001c00", @ANYRES32=r2], 0x15c}, 0x1, 0x0, 0x0, 0xc880}, 0x2014) 1.234661874s ago: executing program 1 (id=25): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@private=0xa010101, @in=@multicast2, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x3, 0x8001, 0x2000, 0x4}, {}, 0x0, 0x0, 0x2}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) (async) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@private=0xa010101, @in=@multicast2, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x3, 0x8001, 0x2000, 0x4}, {}, 0x0, 0x0, 0x2}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x5}}, 0xe8) (async) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) 1.176191861s ago: executing program 4 (id=26): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001114d3fd27bd7000fcdbdf2508004b001300"], 0x38}, 0x1, 0x0, 0x0, 0x48810}, 0x4000) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) close(r2) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000009409010000000281650000000000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r3, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x0, 0x5b, &(0x7f0000000180)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x4e, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@decl_tag={0x3, 0x0, 0x0, 0x11, 0x1, 0x5}]}, {0x0, [0x5f]}}, &(0x7f0000000400)=""/202, 0x2b, 0xca, 0x0, 0x3}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1300000000010000040000000700000000180000", @ANYRES32=r0, @ANYBLOB='\b\x00'/20, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="030000000100"/24], 0x50) 1.173269193s ago: executing program 2 (id=27): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x4], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x972a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async, rerun: 64) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x520, 0xd, 0x3}, 0x30, 0x0) (async, rerun: 64) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x50080008}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0000002f1c43832cd2ffff593533eebfcd6229c7328c61b227288190b11d9219adb9d57555609b5becc9b77ae458f46ea65f1a8b6b3dec45584a5858be827f16266311a4b5e850ea8686e83ff5d541455a7d7ff7d08f2d23c283c0997ada469e8b45e7b377a308b6a2634a7a30534b1d825ee6f446bd79000000000000", @ANYRES16=r4, @ANYBLOB="02002cbd7000fbdbdf251200000018000180140002006d6140766c778fce610b5e009d4fbbc5616e31000000000000000008000700fbffffff080009000100000008000900754b0000e35f080006000500000008000700080000000800090023a4"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040001) landlock_restrict_self(r3, 0x1) (async) mprotect(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x5) (async, rerun: 32) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (rerun: 32) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000540)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x8, 0x3a, '!2', 0x3a, 'mqprio\x00', 0x3a, './file1', 0x3a, [0x50, 0x43, 0x4f, 0x4f]}, 0x34) (async, rerun: 32) r7 = fsmount(r5, 0x0, 0x0) (rerun: 32) fchdir(r7) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) close(0xffffffffffffffff) (async) chdir(&(0x7f0000000080)='./file1\x00') (async) close(r8) (async) execveat(r7, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) (async) r10 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r10, 0x0, 0x40, 0x0, &(0x7f0000000100)) bind$inet(r9, &(0x7f00000004c0)={0x2, 0x4e21, @local}, 0x10) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000}, 0x4040010) (async) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYRESOCT=r8], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x61}, 0x94) (async) r13 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'pim6reg\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r12, r14}, 0x10) 1.124112208s ago: executing program 0 (id=28): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mount$overlay(0x0, 0x0, 0x0, 0x4008, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000003300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 1.123734764s ago: executing program 3 (id=29): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_eeprom={0xb, 0x0, 0xffff0000}}) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x1000, {[@fastopen={0x1e, 0x3, 'T'}]}}}}}}}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1200, 0x49400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x7b, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) syz_emit_ethernet(0x229, &(0x7f0000000340)={@remote, @empty, @void, {@ipv6={0x86dd, @esp={0x0, 0x6, "5d8151", 0x1f3, 0x32, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, {[@routing={0x2b, 0x2, 0x0, 0x86, 0x0, [@local]}, @fragment={0x2f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x66}, @srh={0x1d, 0xc, 0x4, 0x6, 0x4, 0x28, 0xeaa, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @mcast2, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1]}, @srh={0x3c, 0xa, 0x4, 0x5, 0x8e, 0x0, 0x589, [@empty, @dev={0xfe, 0x80, '\x00', 0x25}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x1e}, @dev={0xfe, 0x80, '\x00', 0x3e}]}, @srh={0x0, 0x8, 0x4, 0x4, 0x7f, 0x40, 0x16a7, [@dev={0xfe, 0x80, '\x00', 0x39}, @private1, @remote, @empty]}, @srh={0x23, 0x12, 0x4, 0x9, 0x1, 0x68, 0x8, [@private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @ipv4={'\x00', '\xff\xff', @local}, @private2, @private0, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}]}, @dstopts={0x3b, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x4}]}], {0x4d3, 0x40, @cc={0x1, 0x0, 0xfffe, 0x2, 0x7fff, 0x9}, "89", 0x1}}}}}}, 0x0) 1.116612746s ago: executing program 1 (id=30): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000500000085000000bb000000a70000000000000018000000000000000000000000000000950000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20}, 0x94) r0 = memfd_create(&(0x7f0000000340)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpAO\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xe4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xd1\xa4\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb\x00'/361, 0x5) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) splice(r1, 0x0, r0, 0x0, 0x9, 0x7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@map_fd={0x18, 0x9, 0x1, 0x0, r1}]}, &(0x7f0000000040)='GPL\x00'}, 0x94) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f00000001c0)=""/25, 0x5d) getdents64(r5, 0xfffffffffffffffe, 0x29) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r1, r4}, 0xc) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) write$fb(r5, &(0x7f0000000200)="c15025312acc224ec33df01ed9ba458d21854b13f7c218c51e574042dd2c9e476ad3ff7f37c447de21315ab1bd32b6bb1ad2ef20837c3c6b0892a972179afe6919b828001d072ef6edd2f53cd1", 0x4d) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000011c0)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x25dfdbfd, {{@in=@broadcast, @in=@multicast2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffe}, 0x50) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000540)=@polexpire={0xd4, 0x1b, 0x1, 0x0, 0x0, {{{@in=@multicast1, @in6=@private1}}}, [@XFRMA_IF_ID={0x8}, @mark={0xc}]}, 0xd4}}, 0x0) 1.106447813s ago: executing program 4 (id=31): syz_open_dev$vim2m(0x0, 0x800, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x9c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfff2, 0xffe0}, {}, {0x5, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x68, 0x2, [@TCA_MATCHALL_ACT={0x64, 0x2, [@m_ife={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x100}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x92, 0x1, 0x7, 0xfffffffc}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @random="3410d5e98fe1"}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x9c}}, 0x4800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\r', 0x1}], 0x1}, 0x4) 1.048060997s ago: executing program 0 (id=32): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/graphics/fbcon/rotate\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x9, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000001815000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d0000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e1301002a00017c0000e682c3370000000000000000000065"], 0x16) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="022a000a0006000500150102000000"], 0xf) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x302) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'dt2801\x00', [0x83, 0x6, 0xfffffffe, 0x8, 0xfffff613, 0x79f3, 0xde, 0xd, 0xfffffff8, 0x206, 0x2, 0x4, 0xffff1845, 0x6ed, 0x7, 0x1000, 0xfffffbff, 0x44, 0xffffad7d, 0x4, 0x4, 0x1, 0x6, 0x4, 0x10001, 0x1, 0x4, 0x815, 0x3ff, 0x4, 0xffffff81]}) r5 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSFLAGS(r5, 0x40047459, &(0x7f00000002c0)=0x8801000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x12b800, 0x0) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) read$FUSE(r6, &(0x7f00000003c0)={0x2020}, 0x2020) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046}) 1.047826013s ago: executing program 1 (id=33): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f00000001c0)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000080)='./dev/file0\x00', 0x125) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)="ff00", 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) read$FUSE(r2, &(0x7f0000001080)={0x2020}, 0x104d) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xa) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x11) 998.196073ms ago: executing program 1 (id=34): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x221, 0x0, 0x25dfdbfe, {{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x80, 0x2f}, {@in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x4d6, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0x4e}, {0x9, 0x0, 0x0, 0x0, 0xffffffff7fffffff, 0xffffffffffffffed, 0x800}, {0x2, 0xfffffffffffffffd, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x4008, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 947.455495ms ago: executing program 1 (id=35): socket$inet(0x2, 0x3, 0x4) socket(0x10, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x10, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@mcast2, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@loopback, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xfffffffffffffffc, 0x0, 0x4, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x4000000) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$peeksig(0x4209, r6, 0x0, 0x0) rt_sigqueueinfo(r6, 0x1f, &(0x7f0000000200)={0x3a, 0x7fffffff, 0x9}) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x1000000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x50) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x49, &(0x7f0000000000), 0x4) 892.090013ms ago: executing program 3 (id=36): prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x15, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x9, 0x11, &(0x7f00000001c0)=""/17, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x10, 0x3029, 0x4}, 0x10, 0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000380)=[{0x3, 0x5, 0x5, 0x4}, {0x3, 0x3, 0x1, 0x1}, {0x0, 0x2, 0x4, 0x5}, {0x0, 0x1, 0x3, 0x3}], 0x10, 0x8}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480)={0x101, 0x0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r1, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r3, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000780), 0x103b43, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0xb, 0x5, 0x3, 0x800, 0xffffffffffffffff}) fcntl$lock(r5, 0x1, &(0x7f0000000040)={0x1, 0x3, 0x4, 0x8, r0}) openat(r4, &(0x7f00000004c0)='./file0\x00', 0x101000, 0x1) 850.065845ms ago: executing program 3 (id=37): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) syz_emit_ethernet(0x56, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000200600fe8000000000000000000000000000aafe8000000000000000000000000000aa80204001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="800201df907800000402080a0000000300000000b3b09c33ea91f427f883d8dc34e484b631e768e04186e3e960c08ed6a23f10927398aa6b92d469521420d55981a1da5f5a367c53c3d1b9bce247042e313b9dfbaf9bbd51000300324ae9694a82e1af7e98c01cdd"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000700)=ANY=[@ANYBLOB="287000fbdbdf25b1000000", @ANYRES32=0x0, @ANYBLOB="56c402000000000008001b0007000000"], 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x20000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r1, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x2000, &(0x7f0000000000)=ANY=[@ANYBLOB="66643dc60d8b01016554c8d22a98b7", @ANYRESHEX, @ANYRESDEC, @ANYRESHEX=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f000000ddc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x24, 0x0, 0x41046140, 0x1, 0x0, 0xf7, 0x4, 0x0, 0x0, 0x1}}, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x210084, &(0x7f00000004c0)={[{@user_xattr}, {@test_dummy_encryption}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@minixdf}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x29}}, {@abort}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x7fff, 0x3, 0xc, 0x6}) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r5, &(0x7f00000001c0)='functionfs', 0xa) read(r4, &(0x7f0000000100), 0xb) mount(0x0, &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='ns\x00') exit(0xf) getdents64(r6, 0x0, 0x0) acct(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) unshare(0x4020400) acct(&(0x7f00000000c0)='./bus\x00') r7 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwrite64(r7, &(0x7f00000002c0)="344047c50089917db0583c26a490248dbf6dbb8a3b956b2b0c0a76e2a5045b08cdeac1a45f9c444077c364afdcc09f6aabb3d30cf16fc30712a3214dc8a47300cceaba58788422940c5120a3aa0887a3948a607cb133fb2abc49be3191916b532e2c0fc3fa16bfce28eabe4637ba2b1f2f9babe27d07819fede6aa9f76bccf36659c9e744ad1a22c1a898772daeee5c83bf42b9b4edcbe7bdc85ce8bc19c65b02d137fca311c0847878c7fb0d1c7f322a1aa3603f9ef5f4917aea47249f1baa0f017d2d7dcb1", 0xc6, 0x1) 827.827892ms ago: executing program 0 (id=38): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x18) bind$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000002b0000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000840005002001000000"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, 0x0}}], 0x1, 0x4c040) 227.166226ms ago: executing program 4 (id=39): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x7a}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)="000000000000000051ad97cb3e2b", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x4) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r2, &(0x7f0000000000)='7', 0x1) (async) open_tree(r2, &(0x7f0000000180)='\x00', 0x89901) (async) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="01006dc6d4ec550e000000000000", @ANYRES32=0x0], 0x18}}, 0x0) (async) recvfrom$unix(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) (async, rerun: 64) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r4, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x4}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8040044) (rerun: 64) 128.157388ms ago: executing program 2 (id=40): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x60, 0x10, &(0x7f0000000340), 0xfffffffffffffdef, 0x0, 0xffffffffffffffff, 0xfffffffffffffe96}, 0x42) 78.189579ms ago: executing program 1 (id=41): r0 = fanotify_init(0x11, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0x0, 0x80000, r0}) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000580)={&(0x7f0000000ac0)=@newqdisc={0x358, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x3, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_red={{0x8}, {0x32c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "ac1b986a97c0b67e390ffe32bef990aca4116e0c9dfb908c2842bb43909af8e2d485e4df45c7208ce89884d8d53a19fd72cb0c0d82fc9f910bdc95fb43f2c34ee1d3c524d8e0860344d0f310745205be76c7bbc57b542ee0c0bb8139eedfa27ad3d384273f877921712ac6f3560c1006fb73aa3fa3a55933448b1505b6662c6eaac4b5168e827506a09055e938ecc5c660be4a3935e6a473936b13e2faa586b078a1f2dbe040026ca0d9cbaad8dabe5a00ec0312eb5fcac53a7193715a247550a36d02c11f004ec7d6318a46c4a0a8b4eed2fb222935b1821de77dd332902c9e2a3727d50eb7c3425f8743318fe2adca5c8a7cdd5364066c31d871dbb089720a"}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0xb}, @TCA_RED_MAX_P={0x8, 0x3, 0x2}, @TCA_RED_FLAGS={0xc, 0x4, {0xf, 0x8}}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x358}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@newtclass={0x24, 0x28, 0x300, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, r8, {0xfff1, 0x1}, {0xc, 0x6}, {0xfff1, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r9, &(0x7f0000000540)={&(0x7f0000000300)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)='d', 0x1}], 0x1}, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r10, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x10, 0x200, &(0x7f0000000540)="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"}) fanotify_mark(r0, 0x161, 0x40000867, r2, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000180)={0x1}, 0x4) 0s ago: executing program 3 (id=42): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$UHID_INPUT(r0, &(0x7f0000002680)={0xfc, {"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", 0x1000}}, 0x1006) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.255' (ED25519) to the list of known hosts. [ 28.610631][ T4700] cgroup: Unknown subsys name 'net' [ 28.770651][ T4700] cgroup: Unknown subsys name 'cpuset' [ 28.772779][ T4700] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.958453][ T4700] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 29.726517][ T4717] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.729312][ T4717] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.730870][ T4717] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.732774][ T4717] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.734258][ T4717] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.736627][ T4717] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.737114][ T4713] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.737290][ T4713] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.737621][ T4713] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.737824][ T4713] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.759566][ T4717] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.761132][ T4717] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.761637][ T4717] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.764696][ T4717] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.770078][ T4717] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.771630][ T4728] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.788786][ T4728] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.789104][ T4728] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.791244][ T4728] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.795882][ T4714] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.795891][ T4728] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.796310][ T4728] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.797427][ T4714] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.805333][ T4714] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.810554][ T4714] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.114770][ T4722] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.115085][ T4722] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.115178][ T4722] bridge_slave_0: entered allmulticast mode [ 30.115659][ T4722] bridge_slave_0: entered promiscuous mode [ 30.116837][ T4722] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.116870][ T4722] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.116919][ T4722] bridge_slave_1: entered allmulticast mode [ 30.117353][ T4722] bridge_slave_1: entered promiscuous mode [ 30.155258][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.155344][ T4716] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.155404][ T4716] bridge_slave_0: entered allmulticast mode [ 30.155826][ T4716] bridge_slave_0: entered promiscuous mode [ 30.156648][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.156666][ T4716] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.156712][ T4716] bridge_slave_1: entered allmulticast mode [ 30.157150][ T4716] bridge_slave_1: entered promiscuous mode [ 30.159027][ T4722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.186365][ T4722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.197532][ T4716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.198495][ T4716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.204320][ T4722] team0: Port device team_slave_0 added [ 30.205124][ T4722] team0: Port device team_slave_1 added [ 30.222906][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.224274][ T4719] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.224359][ T4719] bridge_slave_0: entered allmulticast mode [ 30.224828][ T4719] bridge_slave_0: entered promiscuous mode [ 30.225620][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.225639][ T4719] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.225730][ T4719] bridge_slave_1: entered allmulticast mode [ 30.226112][ T4719] bridge_slave_1: entered promiscuous mode [ 30.227174][ T4716] team0: Port device team_slave_0 added [ 30.227897][ T4716] team0: Port device team_slave_1 added [ 30.240154][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.241428][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.246205][ T4716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.249119][ T4722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.249141][ T4722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.249306][ T4722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.258506][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.258618][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.258702][ T4711] bridge_slave_0: entered allmulticast mode [ 30.259118][ T4711] bridge_slave_0: entered promiscuous mode [ 30.273860][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.273878][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.274123][ T4716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.281028][ T4722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.281036][ T4722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.281049][ T4722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.287764][ T4719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.288795][ T4719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.294997][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.296480][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.296606][ T4711] bridge_slave_1: entered allmulticast mode [ 30.297047][ T4711] bridge_slave_1: entered promiscuous mode [ 30.310066][ T4716] hsr_slave_0: entered promiscuous mode [ 30.310469][ T4716] hsr_slave_1: entered promiscuous mode [ 30.311532][ T4719] team0: Port device team_slave_0 added [ 30.312253][ T4719] team0: Port device team_slave_1 added [ 30.324016][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.324037][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.324052][ T4719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.325636][ T4722] hsr_slave_0: entered promiscuous mode [ 30.325902][ T4722] hsr_slave_1: entered promiscuous mode [ 30.326079][ T4722] debugfs: 'hsr0' already exists in 'hsr' [ 30.326111][ T4722] Cannot create hsr debugfs directory [ 30.326718][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.326725][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.326739][ T4719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.337028][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.337941][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.362188][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.362272][ T4712] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.362585][ T4712] bridge_slave_0: entered allmulticast mode [ 30.363029][ T4712] bridge_slave_0: entered promiscuous mode [ 30.364042][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.364071][ T4712] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.364167][ T4712] bridge_slave_1: entered allmulticast mode [ 30.364642][ T4712] bridge_slave_1: entered promiscuous mode [ 30.371663][ T4719] hsr_slave_0: entered promiscuous mode [ 30.371983][ T4719] hsr_slave_1: entered promiscuous mode [ 30.372208][ T4719] debugfs: 'hsr0' already exists in 'hsr' [ 30.372219][ T4719] Cannot create hsr debugfs directory [ 30.373151][ T4711] team0: Port device team_slave_0 added [ 30.388154][ T4711] team0: Port device team_slave_1 added [ 30.393918][ T4712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.402464][ T4712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.415036][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.415059][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.415080][ T4711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.417067][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.417081][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.417099][ T4711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.424502][ T4712] team0: Port device team_slave_0 added [ 30.425336][ T4712] team0: Port device team_slave_1 added [ 30.447197][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.447221][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.447234][ T4712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.447764][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.447771][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.447783][ T4712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.481559][ T4711] hsr_slave_0: entered promiscuous mode [ 30.481867][ T4711] hsr_slave_1: entered promiscuous mode [ 30.482048][ T4711] debugfs: 'hsr0' already exists in 'hsr' [ 30.482058][ T4711] Cannot create hsr debugfs directory [ 30.494275][ T4712] hsr_slave_0: entered promiscuous mode [ 30.494561][ T4712] hsr_slave_1: entered promiscuous mode [ 30.494757][ T4712] debugfs: 'hsr0' already exists in 'hsr' [ 30.494766][ T4712] Cannot create hsr debugfs directory [ 30.555704][ T4716] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.558369][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.559069][ T4716] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.560987][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.568691][ T4716] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.571578][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.572330][ T4716] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.573690][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.592890][ T4722] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.595096][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.597247][ T4722] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.598582][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.598892][ T4722] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.601278][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.604811][ T4722] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.606890][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.626704][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.626763][ T4716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.626925][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.626961][ T4716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.633871][ T4719] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.636132][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.636618][ T4719] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.638539][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.652190][ T4722] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.652235][ T4722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.652310][ T4722] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.652338][ T4722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.656475][ T4719] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.658168][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.658505][ T4719] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.661922][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.665405][ T4711] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.667674][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.670220][ T4711] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.672460][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.682085][ T4711] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.684310][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.686045][ T4711] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.688416][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.711667][ T4712] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.712848][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.713125][ T4712] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.715338][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.716282][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.716310][ T4719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.716377][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.716405][ T4719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.721700][ T4712] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.723603][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.727122][ T4712] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.730469][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.736598][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.736636][ T4711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.736710][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.736743][ T4711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.742703][ T4716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.754465][ T4722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.756524][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.756566][ T4712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.756641][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.756674][ T4712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.764719][ T1189] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.766189][ T1189] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.767591][ T1189] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.769037][ T1189] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.772688][ T1189] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.774369][ T1189] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.775966][ T1189] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.777538][ T1189] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.781873][ T1189] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.784027][ T1189] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.788558][ T4716] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.798562][ T3534] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.798609][ T3534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.798993][ T3534] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.799011][ T3534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.823987][ T4722] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.832477][ T4719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.852874][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.852918][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.853305][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.853332][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.863032][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.872366][ T4719] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.873286][ T4712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.878004][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.878043][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.886920][ T4712] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.894396][ T4711] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.896538][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.896587][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.902567][ T4722] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.914016][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.914056][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.944557][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.944610][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.946184][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.946205][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.946536][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.946553][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.953878][ T4719] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.953891][ T4719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.979059][ T4716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.021422][ T4711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.063798][ T4716] veth0_vlan: entered promiscuous mode [ 31.067656][ T4716] veth1_vlan: entered promiscuous mode [ 31.077830][ T4716] veth0_macvtap: entered promiscuous mode [ 31.080278][ T4716] veth1_macvtap: entered promiscuous mode [ 31.085039][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.087511][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.093703][ T40] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.093814][ T40] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.137219][ T3534] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.139911][ T3534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.140009][ T1189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.143245][ T3534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.166633][ T3534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.166663][ T3534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.186703][ T4722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.203141][ T4722] veth0_vlan: entered promiscuous mode [ 31.211987][ T4722] veth1_vlan: entered promiscuous mode [ 31.216132][ T4719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.218322][ T4716] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.242657][ T4722] veth0_macvtap: entered promiscuous mode [ 31.243738][ T4722] veth1_macvtap: entered promiscuous mode [ 31.246755][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.260919][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.264051][ T4712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.274116][ T4015] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.283214][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.283407][ T39] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.301258][ T873] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.301483][ T4719] veth0_vlan: entered promiscuous mode [ 31.320556][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.329683][ T4719] veth1_vlan: entered promiscuous mode [ 31.342335][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.342366][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.358103][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.358134][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.365058][ T4719] veth0_macvtap: entered promiscuous mode [ 31.374320][ T4719] veth1_macvtap: entered promiscuous mode [ 31.381046][ T4711] veth0_vlan: entered promiscuous mode [ 31.382739][ T4711] veth1_vlan: entered promiscuous mode [ 31.398872][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.400557][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.401935][ T873] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.402089][ T873] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.402208][ T873] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.402274][ T873] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.429625][ T4712] veth0_vlan: entered promiscuous mode [ 31.445653][ T4711] veth0_macvtap: entered promiscuous mode [ 31.451213][ T4711] veth1_macvtap: entered promiscuous mode [ 31.455181][ T4712] veth1_vlan: entered promiscuous mode [ 31.458558][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.461758][ T4893] loop3: detected capacity change from 0 to 512 [ 31.463937][ T3534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.463968][ T3534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.470841][ T4893] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.470878][ T4893] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 31.480446][ T873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.480475][ T873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.491751][ T4712] veth0_macvtap: entered promiscuous mode [ 31.496395][ T4893] EXT4-fs (loop3): 1 truncate cleaned up [ 31.500411][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.502307][ T4897] loop2: detected capacity change from 0 to 512 [ 31.502522][ T4893] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.503036][ T4897] ext4: Bad value for 'data' [ 31.582472][ T873] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.583960][ T873] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.589033][ T873] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.589083][ T873] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.610771][ T4712] veth1_macvtap: entered promiscuous mode [ 31.980304][ T4717] Bluetooth: hci1: command tx timeout [ 31.980593][ T4717] Bluetooth: hci0: command tx timeout [ 31.980827][ T4717] Bluetooth: hci3: command tx timeout [ 31.981124][ T4717] Bluetooth: hci2: command tx timeout [ 31.981341][ T4717] Bluetooth: hci4: command tx timeout [ 31.998391][ T4899] netlink: 'syz.3.4': attribute type 21 has an invalid length. [ 32.023514][ T4899] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4'. [ 32.089034][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.090510][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.092649][ T40] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.111127][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.111161][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.143467][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.143496][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.157977][ T4904] loop0: detected capacity change from 0 to 1024 [ 32.170777][ T39] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.170831][ T39] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.175358][ T4904] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.187123][ T3534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.187155][ T3534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.200426][ T3534] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.225659][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.225690][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.248660][ T4719] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.310380][ T4910] capability: warning: `syz.0.7' uses 32-bit capabilities (legacy support in use) [ 32.336134][ T4722] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.342245][ T4913] loop4: detected capacity change from 0 to 512 [ 32.429050][ T4918] loop2: detected capacity change from 0 to 1024 [ 32.431075][ T4918] ======================================================= [ 32.431075][ T4918] WARNING: The mand mount option has been deprecated and [ 32.431075][ T4918] and is ignored by this kernel. Remove the mand [ 32.431075][ T4918] option from the mount to silence this warning. [ 32.431075][ T4918] ======================================================= [ 32.438594][ T4918] EXT4-fs: Ignoring removed oldalloc option [ 32.440306][ T4918] EXT4-fs: Ignoring removed orlov option [ 32.476729][ T4918] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.694034][ T4927] mmap: syz.2.9 (4927) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 32.722041][ T4927] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.9: bg 0: block 112: padding at end of block bitmap is not set [ 32.778007][ T4927] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28 [ 32.778115][ T4927] EXT4-fs (loop2): This should not happen!! Data will be lost [ 32.778115][ T4927] [ 32.778163][ T4927] EXT4-fs (loop2): Total free blocks count 0 [ 32.778197][ T4927] EXT4-fs (loop2): Free/Dirty block details [ 32.778244][ T4927] EXT4-fs (loop2): free_blocks=0 [ 32.778339][ T4927] EXT4-fs (loop2): dirty_blocks=32 [ 32.778453][ T4927] EXT4-fs (loop2): Block reservation details [ 32.778508][ T4927] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 32.850776][ T4913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.870944][ T4913] Zero length message leads to an empty skb [ 33.058607][ T4943] wg1 speed is unknown, defaulting to 1000 [ 33.060526][ T4943] wg1 speed is unknown, defaulting to 1000 [ 33.065613][ T4943] wg1 speed is unknown, defaulting to 1000 [ 33.069882][ T4943] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 33.077656][ T4943] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 33.092181][ T4943] wg1 speed is unknown, defaulting to 1000 [ 33.095164][ T4943] wg1 speed is unknown, defaulting to 1000 [ 33.097216][ T4943] wg1 speed is unknown, defaulting to 1000 [ 33.098319][ T4943] wg1 speed is unknown, defaulting to 1000 [ 33.098639][ T4943] wg1 speed is unknown, defaulting to 1000 [ 33.125689][ T4712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.274365][ T4946] wg1 speed is unknown, defaulting to 1000 [ 33.294726][ T4956] syzkaller0: entered promiscuous mode [ 33.294759][ T4956] syzkaller0: entered allmulticast mode [ 33.353430][ T4959] netlink: 'syz.4.18': attribute type 2 has an invalid length. [ 33.353471][ T4959] netlink: 16 bytes leftover after parsing attributes in process `syz.4.18'. [ 33.363944][ T4948] tipc: Started in network mode [ 33.363978][ T4948] tipc: Node identity 12108460c3da, cluster identity 4711 [ 33.364358][ T4948] tipc: Enabled bearer , priority 0 [ 33.375079][ T4716] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 33.380328][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 33.387136][ T4949] tipc: Resetting bearer [ 33.405386][ T4949] tipc: Disabling bearer [ 33.437075][ T4964] loop4: detected capacity change from 0 to 512 [ 33.437432][ T4964] ext4: Bad value for 'data' [ 33.442751][ T4966] loop2: detected capacity change from 0 to 512 [ 33.752136][ T4966] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 33.765643][ T4966] EXT4-fs (loop2): 1 truncate cleaned up [ 33.777715][ T4966] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.035027][ T4987] netlink: 'syz.2.19': attribute type 21 has an invalid length. [ 34.059313][ T4714] Bluetooth: hci4: command tx timeout [ 34.059400][ T4714] Bluetooth: hci2: command tx timeout [ 34.059476][ T4714] Bluetooth: hci3: command tx timeout [ 34.059539][ T4714] Bluetooth: hci0: command tx timeout [ 34.059601][ T4714] Bluetooth: hci1: command tx timeout [ 34.167314][ T4985] loop1: detected capacity change from 0 to 512 [ 34.174341][ T4985] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 34.177161][ T4985] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 34.177225][ T4985] EXT4-fs (loop1): 1 truncate cleaned up [ 34.177771][ T4985] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.217656][ T4987] netlink: 132 bytes leftover after parsing attributes in process `syz.2.19'. [ 34.243057][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.322743][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.355171][ T5003] netlink: 32 bytes leftover after parsing attributes in process `syz.4.26'. [ 34.355210][ T5003] netlink: 32 bytes leftover after parsing attributes in process `syz.4.26'. [ 34.376917][ T5007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28'. [ 34.464335][ T5011] netlink: 16 bytes leftover after parsing attributes in process `syz.3.29'. [ 34.527891][ T5027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.34'. [ 34.658607][ T5036] loop3: detected capacity change from 0 to 1024 [ 34.664503][ T5036] EXT4-fs: test_dummy_encryption requires encrypt feature [ 34.734804][ T5037] netlink: 64 bytes leftover after parsing attributes in process `syz.1.35'. [ 35.281394][ T5039] Process accounting resumed [ 35.339889][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.340016][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.340101][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.340173][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.340252][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.340766][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.340855][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.340930][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.341004][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.341069][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.341144][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.341209][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.341290][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.342175][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.342266][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.342347][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.342816][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.342977][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.343060][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.343148][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.343223][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.343297][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.343368][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.343451][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.344575][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.344651][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.344725][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.344800][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.344873][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.345012][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.345093][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.345163][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.345331][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.345413][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.345487][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.345553][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.345626][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.345696][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.345763][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.345828][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.345894][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.345965][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.346137][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.346212][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.346288][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.346467][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.346540][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.346617][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.346692][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.346757][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.346824][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.346893][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.346960][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.347024][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.347735][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.347826][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.347908][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.347976][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.348048][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.348418][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.348518][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.348650][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.348728][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.348844][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.348925][ T5047] tipc: Enabling of bearer rejected, failed to enable media [ 35.566433][ T5055] ================================================================== [ 35.566451][ T5055] BUG: KASAN: slab-out-of-bounds in fb_pad_aligned_buffer+0xe4/0x138 [ 35.566477][ T5055] Read of size 1 at addr ffff0000c4e6d200 by task syz.1.41/5055 [ 35.566485][ T5055] [ 35.566490][ T5055] CPU: 1 UID: 0 PID: 5055 Comm: syz.1.41 Not tainted syzkaller #0 PREEMPT [ 35.566499][ T5055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 35.566504][ T5055] Call trace: [ 35.566507][ T5055] show_stack+0x2c/0x3c (C) [ 35.566522][ T5055] __dump_stack+0x30/0x40 [ 35.566534][ T5055] dump_stack_lvl+0xd8/0x12c [ 35.566545][ T5055] print_address_description+0xb0/0x238 [ 35.566555][ T5055] print_report+0x68/0x84 [ 35.566563][ T5055] kasan_report+0x8c/0xc4 [ 35.566574][ T5055] __asan_report_load1_noabort+0x20/0x2c [ 35.566586][ T5055] fb_pad_aligned_buffer+0xe4/0x138 [ 35.566597][ T5055] cw_putcs+0x5d8/0x8bc [ 35.566606][ T5055] fbcon_putcs+0x258/0x390 [ 35.566615][ T5055] hide_cursor+0x220/0x2d0 [ 35.566624][ T5055] redraw_screen+0x200/0x51c [ 35.566633][ T5055] fbcon_do_set_font+0x4e4/0x734 [ 35.566642][ T5055] fbcon_set_font+0x4f0/0x6ac [ 35.566651][ T5055] con_font_op+0x98c/0xc6c [ 35.566661][ T5055] vt_ioctl+0x1664/0x1d4c [ 35.566673][ T5055] tty_ioctl+0x828/0xcb0 [ 35.566682][ T5055] __arm64_sys_ioctl+0x154/0x1cc [ 35.566695][ T5055] invoke_syscall+0x98/0x244 [ 35.566707][ T5055] el0_svc_common+0xec/0x23c [ 35.566719][ T5055] do_el0_svc+0x4c/0x5c [ 35.566731][ T5055] el0_svc+0x64/0x260 [ 35.566741][ T5055] el0t_64_sync_handler+0x44/0x104 [ 35.566751][ T5055] el0t_64_sync+0x198/0x19c [ 35.566760][ T5055] [ 35.566762][ T5055] Allocated by task 4881: [ 35.566766][ T5055] kasan_save_track+0x40/0x78 [ 35.566775][ T5055] kasan_save_alloc_info+0x40/0x50 [ 35.566785][ T5055] __kasan_kmalloc+0x9c/0xb4 [ 35.566793][ T5055] __kmalloc_noprof+0x340/0x6b8 [ 35.566802][ T5055] font_data_rotate+0x100/0x2f0 [ 35.566812][ T5055] fbcon_rotate_font+0x218/0x374 [ 35.566820][ T5055] fbcon_modechanged+0x19c/0x698 [ 35.566826][ T5055] rotate_store+0x1f4/0x334 [ 35.566833][ T5055] dev_attr_store+0x6c/0x90 [ 35.566842][ T5055] sysfs_kf_write+0xe0/0x108 [ 35.566853][ T5055] kernfs_fop_write_iter+0x260/0x3b8 [ 35.566861][ T5055] vfs_write+0x51c/0xa0c [ 35.566868][ T5055] ksys_write+0x12c/0x228 [ 35.566873][ T5055] __arm64_sys_write+0x84/0x98 [ 35.566879][ T5055] invoke_syscall+0x98/0x244 [ 35.566889][ T5055] el0_svc_common+0xec/0x23c [ 35.566900][ T5055] do_el0_svc+0x4c/0x5c [ 35.566909][ T5055] el0_svc+0x64/0x260 [ 35.566917][ T5055] el0t_64_sync_handler+0x44/0x104 [ 35.566925][ T5055] el0t_64_sync+0x198/0x19c [ 35.566932][ T5055] [ 35.566934][ T5055] The buggy address belongs to the object at ffff0000c4e6c000 [ 35.566934][ T5055] which belongs to the cache kmalloc-4k of size 4096 [ 35.566940][ T5055] The buggy address is located 512 bytes to the right of [ 35.566940][ T5055] allocated 4096-byte region [ffff0000c4e6c000, ffff0000c4e6d000) [ 35.566949][ T5055] [ 35.566951][ T5055] The buggy address belongs to the physical page: [ 35.566955][ T5055] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x104e68 [ 35.566963][ T5055] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 35.566969][ T5055] flags: 0x5ffc00000000040(head|node=0|zone=2|lastcpupid=0x7ff) [ 35.566978][ T5055] page_type: f5(slab) [ 35.566986][ T5055] raw: 05ffc00000000040 ffff0000c0002140 dead000000000122 0000000000000000 [ 35.566993][ T5055] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 35.567000][ T5055] head: 05ffc00000000040 ffff0000c0002140 dead000000000122 0000000000000000 [ 35.567007][ T5055] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 35.567014][ T5055] head: 05ffc00000000003 fffffdffc3139a01 00000000ffffffff 00000000ffffffff [ 35.567021][ T5055] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 35.567025][ T5055] page dumped because: kasan: bad access detected [ 35.567028][ T5055] [ 35.567029][ T5055] Memory state around the buggy address: [ 35.567034][ T5055] ffff0000c4e6d100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 35.567039][ T5055] ffff0000c4e6d180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 35.567044][ T5055] >ffff0000c4e6d200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 35.567048][ T5055] ^ [ 35.567052][ T5055] ffff0000c4e6d280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 35.567057][ T5055] ffff0000c4e6d300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 35.567061][ T5055] ================================================================== [ 35.567079][ T5055] Disabling lock debugging due to kernel taint [ 36.089913][ T4714] Bluetooth: hci1: command tx timeout [ 36.089927][ T4717] Bluetooth: hci0: command tx timeout [ 36.089957][ T4717] Bluetooth: hci2: command tx timeout [ 36.089961][ T50] Bluetooth: hci4: command tx timeout [ 36.091131][ T4728] Bluetooth: hci3: command tx timeout [ 38.169219][ T4714] Bluetooth: hci4: command tx timeout [ 38.169252][ T4714] Bluetooth: hci1: command tx timeout [ 38.169278][ T4714] Bluetooth: hci0: command tx timeout [ 38.169297][ T4714] Bluetooth: hci3: command tx timeout [ 38.169311][ T4714] Bluetooth: hci2: command tx timeout