last executing test programs: 31.79406419s ago: executing program 4 (id=200): socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, 0x0, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) syz_open_dev$mtd(0x0, 0x100000001, 0x1815a0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000214c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) 31.778626383s ago: executing program 4 (id=201): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) epoll_create1(0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='yeah', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) bind$tipc(r1, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1000a8d0}, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 30.888630495s ago: executing program 4 (id=216): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) (async) r2 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000500)={0x1, 0x2, 0x2, "3bd9d3fe337649c318d3b5710fe89a0d9ec9b50e98bc2e00", 0x384c4150}) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0xa102, 0x0) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000480)={0x15, 0x2, &(0x7f0000000440)="2e91"}) (async) write$binfmt_misc(r4, &(0x7f0000004640)="5e9742", 0x3) (async) syz_emit_ethernet(0x166, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0) (async) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r8, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r6], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) (async) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x64) (async) write(r9, &(0x7f0000000400)='!n', 0x2) (async) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc0014080}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r5, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x3c}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x2}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x7}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000840}, 0x8044) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x20, r3, 0x1, 0x70bd27, 0x4, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) 30.848473919s ago: executing program 4 (id=217): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x402) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) r2 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x2000000, &(0x7f0000000200), 0x1, 0x445, &(0x7f0000001dc0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000400030002000900020073797a32000000000500010007000000050005000a000000140007800800114000000000050015000400000013000300686173683a6e65742c6966616365"], 0x60}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r6, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xdd5a, 0x5f}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ce}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xf86}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x204}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xcd}]}, 0x68}, 0x1, 0x0, 0x0, 0xc044050}, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 30.76529729s ago: executing program 4 (id=219): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, r3, 0x983a736bbcf11bbd, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x40084) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xc}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x884, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x854, 0x2, [@TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x8, 0x65, 0x2, 0x4d, {0x1, 0x2, 0x2, 0x3, 0x3, 0x4}, {0x5, 0x0, 0x400, 0xab, 0x0, 0x9}, 0x2, 0x6, 0x8000}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x7fffffff, 0x8, 0x7ff, 0x3, 0x2, 0x1, 0x401, 0xb9, 0xace, 0x0, 0x9, 0x9, 0xfffffffe, 0x7, 0x2, 0x0, 0x1ce00000, 0x7, 0x6, 0x103, 0x3, 0x1c000, 0x1ff, 0x2, 0x6, 0x9b16, 0x6, 0x100, 0x15a, 0xe, 0x40, 0x5, 0x4, 0x80000001, 0x4a, 0x1, 0x8, 0x99a9, 0x340d, 0x3, 0x2, 0x7, 0xd, 0x400, 0xfffffffa, 0x6, 0x100, 0x0, 0x5, 0x5, 0x2, 0xffff0001, 0x2, 0xdd1, 0x9, 0xfb, 0x4, 0xf, 0x324, 0x6, 0x8, 0x6, 0xff, 0x8, 0x401, 0x7fffffff, 0x4, 0x5, 0x800, 0x8261, 0x581, 0x6, 0x8, 0x2, 0x9, 0x4, 0x4, 0x6, 0x5, 0xf, 0x9, 0x38c8, 0x80000001, 0x4, 0xa11, 0x6, 0x1ff, 0x604, 0xfff, 0xab, 0x7, 0x5, 0x5, 0x1, 0x9, 0x401, 0x0, 0x4, 0x1ff, 0x4, 0x17, 0xffffff7f, 0x7c, 0x4, 0x4, 0xa42, 0x1, 0x4, 0x5b564ea6, 0xaa32, 0x2, 0x2, 0x4000008, 0x1ff, 0x5, 0x3, 0x7, 0x6, 0xfffff000, 0x12aeb60c, 0x4, 0xbb6, 0x1, 0x3, 0x5, 0x2, 0x3, 0x85, 0x10, 0x1, 0x5, 0x1, 0x10004, 0xb, 0xf65, 0x1d7, 0x9, 0x100, 0x0, 0x0, 0xc2, 0x1, 0x3, 0xffffffff, 0x1ff, 0x1, 0x30bb, 0x7, 0x40, 0xfffffff8, 0x5, 0x2, 0x1, 0x8, 0x8000, 0x5, 0x4, 0x31e, 0xffff8001, 0x6, 0xff, 0xa, 0x1ff, 0x9, 0x7, 0x7, 0x2, 0x412, 0x6, 0xf441, 0x6, 0x1, 0x7, 0x89, 0x3, 0x5, 0x0, 0x9, 0x7, 0x1, 0x4, 0x0, 0x4, 0x4, 0x200, 0x1, 0x720a, 0x2, 0xfff, 0x9, 0x7fff, 0x8, 0x3ac8efcb, 0x8, 0xf2c, 0x7, 0x80000000, 0x12, 0xfffff802, 0x2e4, 0x7, 0xfffffff9, 0x400, 0x4, 0x30, 0x10400, 0xfd, 0x4, 0x1, 0x5, 0x7, 0x0, 0x7, 0x47, 0x0, 0x0, 0x1, 0xa, 0x0, 0x8, 0x3, 0x6, 0x0, 0x10001, 0x0, 0xe9, 0x5, 0x1, 0x4, 0xaacc, 0x6f, 0x7fffffff, 0x5, 0x6, 0x2, 0xffff, 0x4, 0x10000, 0x7ff, 0x3ff, 0x45e8, 0x9, 0xfffffff8, 0x6, 0x100, 0x5, 0xe, 0x73d, 0x31, 0x3, 0x0, 0x2, 0x3, 0xb70, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff7, 0x5, 0x7, 0x4, 0x2, 0x6, 0x1, 0xfb0, 0x8, 0x3, 0x5, 0x3, 0x0, 0x4, 0x9a, 0x9, 0x7, 0xfff, 0x7, 0x40, 0x5, 0x7fff, 0x6c, 0x3, 0x5, 0x7ff, 0x4, 0x2, 0x7, 0x2, 0x83d, 0x2, 0x3b, 0x4, 0x0, 0x4, 0x9, 0xc, 0x1cabbb02, 0x4, 0x4, 0x2, 0x8001, 0x7fff, 0x80000000, 0x10000, 0xffff8906, 0x7fffffff, 0x0, 0x0, 0x9, 0xc0000000, 0x2, 0x6, 0x83, 0x3, 0x10000, 0x3, 0x1, 0x6, 0x0, 0x1, 0x100, 0xcc2, 0x3800, 0x6, 0x18, 0x0, 0xfffffe00, 0x3, 0x6, 0x4, 0x3, 0x7, 0x1, 0xfffffffc, 0x8e4, 0xf5c1, 0x1, 0x5077, 0x3, 0x5, 0x7fff, 0x2, 0x4, 0x2, 0x3, 0x401, 0x6, 0x40, 0x7, 0x95, 0x5, 0x200, 0x1, 0x2, 0x7ff, 0x4, 0x8, 0xb, 0x6, 0x2, 0x0, 0xd266, 0x4, 0x0, 0x10001, 0x2, 0x101, 0x401, 0x200, 0x6, 0x1, 0x4a, 0x8, 0x2, 0xfffffffe, 0x14e, 0x4, 0x3, 0x1, 0x2, 0x6, 0xfffffbff, 0x5, 0x2, 0xfffd, 0xc, 0x4, 0x101, 0x40800000, 0x1f, 0x4, 0xffffffff, 0x800, 0x401, 0x3ff, 0x7ff, 0x101, 0x10, 0x5, 0x374, 0xc2f, 0x3, 0xffffff81, 0xfffffff7, 0x6, 0x8000, 0x8, 0x1, 0x1, 0x200, 0xcae, 0xc64, 0xffff, 0x7fff, 0x1, 0x8, 0x3c0, 0x9, 0x0, 0x6d3, 0xfffffff3, 0x9, 0x476b3752, 0xff, 0x0, 0x9, 0x7ff, 0x4, 0x3, 0x4, 0x7, 0x7249, 0x7, 0xffff8001, 0x95f, 0x8, 0xfffffffe, 0x1000, 0x800, 0x0, 0xfff, 0xf2, 0x0, 0x3, 0xffff, 0x0, 0x0, 0x8000, 0x9, 0x4, 0xcc6, 0xffe01000, 0x22, 0xd56, 0x80000000, 0x3bb8, 0x10, 0x140, 0x81, 0x9, 0x40, 0x2, 0x2, 0x4, 0x3, 0x0, 0x3, 0xf, 0x0, 0xc527, 0x9, 0x8, 0x4, 0xffff86fd, 0x7, 0x2, 0x8, 0x3, 0x9, 0x5, 0x0, 0x4, 0xc12, 0x7f, 0x0, 0x0, 0x80000000, 0x6f3, 0x7, 0x9, 0x6, 0x9, 0x4, 0x0, 0xc9, 0xaf8, 0x3, 0x80000000, 0xad8c, 0x4, 0x2, 0xea9, 0x9a1, 0x5, 0x1, 0x4, 0x8, 0x5, 0x10000, 0x3, 0x7fb, 0xdbbb, 0x4, 0x2]}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) (async) recvfrom$x25(r0, &(0x7f0000000200)=""/227, 0xe3, 0x2, &(0x7f0000000340)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) 30.440092854s ago: executing program 4 (id=231): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000007000000e27f000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000006c0)={r0, &(0x7f0000000500), &(0x7f00000005c0)=""/155}, 0x20) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x0, 0x0, 0xffffffffffffffff) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000040), &(0x7f0000000480)=""/146, 0x20000000000000}, 0x1d) 30.439415081s ago: executing program 32 (id=231): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000007000000e27f000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000006c0)={r0, &(0x7f0000000500), &(0x7f00000005c0)=""/155}, 0x20) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x0, 0x0, 0xffffffffffffffff) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000040), &(0x7f0000000480)=""/146, 0x20000000000000}, 0x1d) 24.051597847s ago: executing program 1 (id=285): socket$inet6(0xa, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000040)={0x0, "4cfe843d3c74891dfde87ed7556aae83e0f2d080e25bc8640f31c4a4a339a292", 0x0, 0x1}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f0000000240)={0x20071026}, 0x0) r4 = socket(0x1d, 0x2, 0x6) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x6a, 0x1, 0x0, 0xc) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000240)={0x18, 0x0, {0x1, @empty, 'veth0_virt_wifi\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000040)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r7, 0x40047438, &(0x7f0000000040)) close(0x4) ioctl$PPPIOCCONNECT(r7, 0x4004743a, &(0x7f00000000c0)) listen(0xffffffffffffffff, 0x5) 23.987015685s ago: executing program 1 (id=291): r0 = socket(0x400000000010, 0x3, 0x0) setns(0xc9, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) recvmmsg(r1, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}, 0xc}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x3}], 0x3, 0x40010000, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20050001, 0x0, 0x59d586ac, 0x0, 0x0, 0x0, 0x4}}) 23.909344518s ago: executing program 1 (id=295): r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x4000000000000d, 0x123002) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503, 0x20000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x80}, @IFLA_BR_MAX_AGE={0x8, 0x3, 0x26}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r2 = fanotify_init(0xf00, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r2, 0x5, 0x4800003e, r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x800, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) read$FUSE(r2, &(0x7f0000000f40)={0x2020}, 0x2020) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, 0x0) 23.216545584s ago: executing program 2 (id=304): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="0000891f0180c2000002bbbbbbbbbbbb08004500001c00676000032f115e76bb2ab4aa6deef8dc"], 0x2e) listen(r0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @mcast1, 0x28}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1}, 0x4004000) listen(r4, 0x7) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x7d4165c9) listen(0xffffffffffffffff, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) socket$netlink(0x10, 0x3, 0x8000000004) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$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") r11 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) r12 = fsmount(r11, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r10, r12, 0x16, 0x0, @void}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) 23.085234947s ago: executing program 0 (id=306): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) syz_io_uring_setup(0xf08, &(0x7f0000000400)={0x0, 0x8000595d, 0x1000, 0x3, 0x24e, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r1, 0x0, 0x0, 0x1, {0x110a}}) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) r5 = socket(0x2b, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000380)={0xa0000006}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@gettaction={0x14, 0x32, 0x2, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x80000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000040)={0x1c, 0x76, 0x31f, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r7}, @nested={0x4, 0xd}]}, 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=@newlink={0x60, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38099, 0x40408}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x40388}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x25}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, &(0x7f0000000180)) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys\x00', 0x450040, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) getsockopt$bt_hci(r9, 0x84, 0x80, &(0x7f0000000000)=""/4087, &(0x7f0000001040)=0xff7) r10 = socket(0x15, 0x805, 0x0) ioctl$SIOCGETSGCNT(r10, 0x89e1, 0xfffffffffffffffe) socket$nl_route(0x10, 0x3, 0x0) 22.460537531s ago: executing program 1 (id=307): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x5bb4, &(0x7f0000ffb000/0x3000)=nil, 0x5) (async) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x5bb4, &(0x7f0000ffb000/0x3000)=nil, 0x5) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000825000/0x2000)=nil) 22.459314389s ago: executing program 3 (id=308): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x6d25}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0xd0ff}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {}, {0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r4, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r5, @ANYBLOB="e0005a80dc0000801400030020380000080003000600000003000800040002004a"], 0xfc}, 0x1, 0x0, 0x0, 0x4008821}, 0x8840) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x500000a}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x4c, r2, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7, 0x80}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) 22.379487887s ago: executing program 3 (id=309): socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000002c0)="e4", 0x1, 0x40, &(0x7f0000000000)={0xa, 0x4e20, 0x8000, @private1, 0x2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000780)=[{{&(0x7f0000000200)={0xa, 0x0, 0x80, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000280)=':', 0x1}], 0x1}}], 0x1, 0x40088d5) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x1, 0x20, 0x10000000000000}, &(0x7f0000000340)=0x18) recvmsg$unix(r0, &(0x7f00000006c0)={&(0x7f0000000440)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/45, 0x2d}, {&(0x7f0000000500)=""/186, 0xba}], 0x2, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}, 0x80000100) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0xffffffffffffffff, 0x3e, 0x9, 0x2}, 0x1f) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x2, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x80, 0x0) mount$nfs(&(0x7f0000000000)='*-\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x10, &(0x7f0000000100)={[{'quota'}], [{@flag='sync'}, {@hash}, {@dont_hash}]}) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2856c26, &(0x7f0000000140)={[{@quota}]}) 22.13926305s ago: executing program 3 (id=311): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) write$binfmt_aout(r2, &(0x7f0000000540)=ANY=[], 0xff70) (async) ioctl$TCXONC(r2, 0x540a, 0x2) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)) (async) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) io_setup(0xb0, &(0x7f0000000000)=0x0) (async) r4 = syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x400) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x11, r5, 0x0) (async) r6 = eventfd2(0xfffffff9, 0x1) io_submit(r3, 0x5, &(0x7f00000006c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x7, r0, &(0x7f0000000040)="df6fb46b1a0f1c1d", 0x8, 0x8, 0x0, 0x1, r0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xb, 0xa001, r0, &(0x7f0000000240)="f8a126626dc71c08d96875bd9b9e7354fcb7ac4614b6bdcb21d7bbb9179d7616a63d5b8688f5d6d118c452b1d72d12403210d37e2d3e93fe5e907909b9695f1ec5040eed66536e973d1662abb997b325184bb0eaea2794ca1b943a05a19070c7905258cc10f4043ec05ae25a92aee5f4c3b5de39b5cbee022b08e854011ed1c956539a5f483ff02b27a7e58896b869eb54", 0x91, 0x1800000000000000, 0x0, 0x2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x8, 0x1, r4, &(0x7f0000000380)="ba8a9c589c", 0x5, 0x2, 0x0, 0x2, r5}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x8, 0x8000, r0, &(0x7f0000000440)="2119b0ce23942f08d4c47ca15faa2e4f6caf89ed4e9a47962d582b41471a4965bb7cb1ef2b3fd3e6e727c14ac21d509ed93e3905e1ae00ec1ec3e84c4418e6e69e1c754138ef021059dfdf80d42ae45d84a69c8c966f8a08c4dbcf34af114bd5785b434865829b74585bd3d636080a0e2a57f691866801355923a1511990a8847d1026fd6fbf39853f515e845a68928ab7365aab2c43963805a8f74415ba1156ff313e11a269ec786fad0bd52e82a6de21f1a2a570dafa3a09a665e34b39aebd7bbfbc04eea4fa3672b02dcd35445600a4", 0xd1, 0x400}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x5, 0x8, r0, &(0x7f0000000580)="6b2cfe1b3cdaa8072d9357cc69b09a63468564401f4d40b6be56d35699acf47cb10afeef53f0ffa8c97f41a56bd65bb8ee50de0526fe9c6266947f30907ffd3ba9a33590c42229a0fa37b1e7ff15ef729868c53aa094ce65611f5b8c40148fb7078058f324bb8cf65cbf05fe39902ffd3db92f687d478d0b4db709ce3fb4efeb65813eb100bbc4a12d80d7111ec0c932b715e3593cdc84c6e5a20ab99b36c9c1e6c5e16df57e646cd5b69579d3e806ed056611a964c570b9aa5d8cb835b5873d5dd5910c75140d64600fd5e266c28c8d4884c617cc064bb5", 0xd8, 0x9, 0x0, 0x0, r6}]) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0xffffffff, 0x4, {{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0xfffffffffffffffc, 0x7, 0x0, 0x0, 0x206, 0x2}, {0x4000000000, 0x2, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x4, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r8, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 22.069487884s ago: executing program 0 (id=313): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x1, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x9, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000020000009b32b30000000000000090bf925f82897d137a5ca5691478eb5e023d10bb4a11a0fadfd28a001e73d2679c3cf6a76cfc1a3f0f7c1ac4a6ac090000a302d41d43c452d87f2112da774740efa5a0a5c01cf59692fd41963d43378a1a5801e038f0114ecb9157a15dcb95f69d484b52787d330f3fc14567652bba30390000000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x1, &(0x7f0000000480)={[{@user_xattr}, {@noinit_itable}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fa}}, {@user_xattr}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x8237}}]}, 0x3, 0x589, &(0x7f00000083c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r1, 0x3, 0x52a9, 0x5) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140), 0x0) 21.943522163s ago: executing program 1 (id=314): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='nonumtail=0,nonumtail=0,nfs,uni_xlate=0,utf8=0,quiet,shortname=lower,uni_xlate=1,rodir,iocharset=utf8,utf8=0,utf8=0,check=strict,codepage=775,iocharset=cp864,nonumtail=0,dmask=000000000000000000004,uni_xlate=0,\x00\x00\x00'], 0x5, 0x2c0, &(0x7f0000000440)="$eJzs3U9rI2UYAPBn0mSS6iE5eBLBAT14WrZ79ZIiuyD25JKDetDi7oI0QdiFgn8w9uTViwcPfgJB8IN48RsIXgVvViiMzGSmk7RpTKSpaH+/Q/v0fd9n5pm3Qzs55MkHL02OHmXx5OTzX6LXS6I1jGGcJjGIVtS+jAXDrwMA+C87zfP4PZ/ZJC+JiN72ygIAtmi9///tJvzxRsoCALbo4TvvvrV/cHD/7SzrxYPJV8ej4pV98X02v/8kPopxPI670Y+ziPJBoRPl00IR7lbHybJsEK9OpsejInPy/k/V+P5vEWX+XvRjUA6dP20UXx+8eXB/L5uZy58WdTxXnX9Y5N+LfrxwnryQf29JfozSeO2VufrvRD9+/jA+jnE8Koto8r/Yy7I38m/++Oy9orwiP5kej7rluka+c4O/FgAAAAAAAAAAAAAAAAAAAAAA/ufuVL1zulH27ymGqv47O2fFD53IaoPF/jyz/KQ+0Hx/oDzPp3l8V/fXuZtlWV4tbPLb8WJ7vrEgAAAAAAAAAAAAAAAAAAAA3F7PPvn06HA8fvz0WoK6G0A7Iv58GPFPjzOcG3k5Vi/uVuc8HI9bVbi4pj0/Ejv1miRiZRnFRVzTtqwIylPsXqq5Cr7/YdMD9v5+TWf5uTYPdpudvzBV311Hh8nyPexGPdKr0r9NI5o1aaxZRnrVVL60sKuCdOlUf+NtSZ8vg+mKNZGsKuz1X2c7V40kF68iLXd1aXqnCubSL9wba93P0ZulX/5bkejWAQAAAAAAAAAAAAAAAAAAW9W8+3fJ5MnK1Fbe3VpZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCjms//3yCYVslrLE7j6bN/+RIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4Bf4KAAD//4NdVLI=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x94}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000000)={0x800, 0xc546, 0x40, 0x9, 0xb, 0x4}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x2000000, 0x2, 0xffffffffffffffff, 0xfffffffffffffffc}) 21.853394694s ago: executing program 3 (id=315): r0 = add_key$fscrypt_provisioning(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)={0x1, 0x0, @a}, 0x48, 0xfffffffffffffffc) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0xb4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x843, r3, &(0x7f0000000040)="1bd49e70a1eec6a9c1", 0x9, 0x23, 0x0, 0x2, r4}]) (async, rerun: 64) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f0000000100)={0x1, &(0x7f0000000340)=[{0x1b, '\x00', @buffer={"010d1de90c6171360aaf4716308a633fda925d1085c6b9f70f72ad6cc5f48537", 0x20}, 0x7a7ce1c2}]}) (rerun: 64) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRESOCT=0x0], 0x20) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000000)="21000000470010aaaaaaaaaa0000000000000000000000000000000300000000000000000000000000000000000300"/76, 0x4d) (async) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000010000000000fedbdf25070000001300000008000000", @ANYRES32, @ANYBLOB="18001a8014000200fc0c0000000000000000000000000001040037"], 0x3c}], 0x1, 0x0, 0x0, 0x20811}, 0x0) 21.757265596s ago: executing program 2 (id=316): r0 = io_uring_setup(0x8, &(0x7f0000000200)={0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffc}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x40dd, &(0x7f00000003c0)={0x0, 0x5c3f, 0x4, 0x2, 0x2d7}, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r4, @ANYBLOB="05003901"], 0x44}}, 0x0) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000080)={0x3e8, 0x1, 0x0, '\x00', 0x1}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000100)={0x3c, 0xb, 0x1, '\x00', 0x9}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f00000000c0)={0x5, 0x4, 0x1, '\x00', 0x7e9}, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x28}, {0x6}]}, 0x10) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f00000001c0)={0x7, 0xaa, 0x2, '\x00', 0xfffffffc}, 0x1) io_uring_setup(0x8, &(0x7f0000000200)={0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffc}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) syz_ublk_setup_io_uring(0x40dd, &(0x7f00000003c0)={0x0, 0x5c3f, 0x4, 0x2, 0x2d7}, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r4, @ANYBLOB="05003901"], 0x44}}, 0x0) (async) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000080)={0x3e8, 0x1, 0x0, '\x00', 0x1}, 0x1) (async) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000100)={0x3c, 0xb, 0x1, '\x00', 0x9}, 0x1) (async) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f00000000c0)={0x5, 0x4, 0x1, '\x00', 0x7e9}, 0x1) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x28}, {0x6}]}, 0x10) (async) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f00000001c0)={0x7, 0xaa, 0x2, '\x00', 0xfffffffc}, 0x1) (async) 21.646471742s ago: executing program 0 (id=317): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl(r0, 0x9, &(0x7f0000000040)="2703ce5daa0fe6f474ea5d097445ef99bb73d07faef6b6de24a8b08f846b823774abab8f64dc20e828a13048e36588aed94ce0a8346961b1033f4f4d2352404dd72bd8acbf0f46858b9820a71cab101562cbb756584ae42e4b7f7e1014519216b80ddcac10845f9ffe0f384351aecd8873397cc10ab1") sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x27}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1e}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl(r0, 0x9, &(0x7f0000000040)="2703ce5daa0fe6f474ea5d097445ef99bb73d07faef6b6de24a8b08f846b823774abab8f64dc20e828a13048e36588aed94ce0a8346961b1033f4f4d2352404dd72bd8acbf0f46858b9820a71cab101562cbb756584ae42e4b7f7e1014519216b80ddcac10845f9ffe0f384351aecd8873397cc10ab1") (async) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x27}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1e}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) (async) 21.645699804s ago: executing program 1 (id=318): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000c80)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf32(r2, &(0x7f0000000f80)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x4, 0x0, 0x79, 0x5, 0x3, 0x3e, 0x2, 0x348, 0x38, 0x3f, 0x800000, 0xd, 0x20, 0x3, 0x1d, 0x12, 0xb15}, [{0x1, 0x5, 0x0, 0x10001, 0x80, 0x10000, 0x80, 0xcb1}, {0x60000000, 0xffffffff, 0x2, 0x7, 0xc56, 0x4, 0x4, 0x96f0}, {0x6, 0xfffffff7, 0x6, 0x73e6, 0x530, 0x4, 0x2, 0x5}], "85813c1a2ce82e40b7874221443d3c2669571e7af69c5fbb8aa47bb452e9a75d09ffbbb58e0451e301c5ce554efd7e8adf1533905402156e2af21c9a1038dc1cd5bcaed68ffe8f2b311b951fe05c157ef6a5f7b2536bbe60aa037bca8c5db32aefe6764c05f22237cc155a123458d70dc77bee5f1a8a0a7d5c45e3a1", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x714) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) read(r1, &(0x7f0000000180)=""/145, 0x91) r3 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r3, 0x0) ioctl$UFFDIO_MOVE(r1, 0xc028aa05, &(0x7f0000000140)={&(0x7f00004cb000/0x3000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x3000, 0x1}) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x0, 0x70) ioctl(r4, 0x80480911, &(0x7f0000000420)) r5 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r5, &(0x7f0000000bc0)=[{{&(0x7f00000001c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f00000008c0)="a905000000007464000100000000ae5774ee54bbda4c1a986374cf1ea1a6aefe6a5c90db", 0x24}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES8=r5], 0x28}}], 0x2, 0x24044044) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x8000, &(0x7f0000000280)=ANY=[], 0x1, 0x28d, &(0x7f0000000cc0)="$eJzs3c9qE1EUB+DT/7GbBHQlLgYE6So0fYMgFcSAEMmirhpsC9KEQgoBXdjufBdXgm/iY/gEWRQiTaLJ1CjUtt6YfB8Mc5jJD85kkZnAucn+o/bxwcnp0d79b7FVyGI14vzzRUTEcqxE3tJgW88dOw8A4H9TrzerqXvgbnU61eZaRGz8cqbxKUlDAAAAAAAAAAAA3Njk/H9hNP8fvYjSxPz/0mi/bP4fAOaC+f/51+lUm5uj57c88/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAOr1+v9j/w5a6PwDg9rn/A8Diucb9/0vCNgGAW9TL3euXwvd/AJh/r/Zev6jWarv1LCtEtD92G93GcD88Xz2Kt9GKw9iOYlzE5fPByLB+9ry2u50NlGK/fTbKn3UbK/l8JYpRmp6vDPNZPr8Wm5P5nSjGg+n5nan59dh6PJEvRzG+vomTaMVBXGbH+Q+VLHv6snYlvzF4HQAAAAAAAAAAAAAAAAAAAPwL5eynqev3y+XfnR/mr/H7AFfW16/Gw9W01w4AAAAAAAAAAAAAAAAAAACz4vTd++Nmq3XYSV4sz0YbNyruzdy7qlD8XZH4gwkAAAAAAAAAAAAAAAAAABbQeNHvjyNP0jYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmM////7orU1wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAshu8BAAD//4pD6Wo=") r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000002000010028bd7100ffdbdf350a801000b50000030000000014000200fc000000000000000010000000000000100001"], 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048810) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x8012, 0x0, 0xfffffffffffffe2d) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) 21.644996606s ago: executing program 3 (id=319): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='dummy0\x00', 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000006, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000006, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000), &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/vkms/mydev\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/vkms/mydev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/vkms/mydev/planes/plane0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/vkms/mydev/crtcs/crtc0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/vkms/mydev/encoders/encoder0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/vkms/mydev/connectors/connector0\x00', 0x1ff) symlinkat(&(0x7f0000000140)='./config/vkms/mydev/crtcs/crtc0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/vkms/mydev/planes/plane0/possible_crtcs/crtc0\x00') (async) symlinkat(&(0x7f0000000140)='./config/vkms/mydev/crtcs/crtc0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/vkms/mydev/planes/plane0/possible_crtcs/crtc0\x00') symlinkat(&(0x7f0000000180)='./config/vkms/mydev/encoders/encoder0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/vkms/mydev/connectors/connector0/possible_encoders/encoder0\x00') (async) symlinkat(&(0x7f0000000180)='./config/vkms/mydev/encoders/encoder0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./config/vkms/mydev/connectors/connector0/possible_encoders/encoder0\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_ext={0x1c, 0x9, &(0x7f0000000300)=ANY=[@ANYBLOB="180b0000f7ffffff0000000000e81e45c5"], &(0x7f0000000400)='GPL\x00', 0x9, 0x71, &(0x7f0000000500)=""/113, 0x40f00, 0x5a, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x1, 0x4}, 0x8, 0x10, 0x0, 0xfffffffffffffdb0, 0xbd3, 0xffffffffffffffff, 0x6, &(0x7f00000005c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000600)=[{0x0, 0x5, 0xc}, {0x0, 0x3, 0xe, 0x7}, {0x4, 0x3, 0xb, 0x2}, {0x1, 0x4, 0xb, 0xb}, {0x3, 0x3, 0xf, 0xc}, {0x1, 0x4, 0x0, 0x3}], 0x10, 0x45e0}, 0x94) r3 = socket(0x2b, 0x80801, 0x2) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x3fe, @empty, 0xfffffffe}, 0x1c) (async) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x3fe, @empty, 0xfffffffe}, 0x1c) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000240)=0x28262df73c041336, 0x4) socket$inet_sctp(0x2, 0x5, 0x84) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) 21.64413651s ago: executing program 5 (id=320): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000140)="17000000020001000003d68c5ee17688a2002b08030300ecff3f00000003af535674643400000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c98ebbf9315033bf79ac2dff060115103901000000000000ea000000000000000002ff000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0000000000000000000000000b043", 0xc0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001580)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r7 = fsopen(&(0x7f00000000c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x174, r2, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x7e}}}}, [@NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="0cceb99dae927dcf1e1e940b5072ea644cb390dcf558caa9"}]}, @NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}]}, @NL80211_ATTR_REKEY_DATA={0x90, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f9da849ea305e949"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="ed4d877353304baf40ef69ef058f1b3a"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="2456e978b9199307dfb39343bfdac4a5"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x58e0}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac0ff0b0bb6ea80a"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="6d2492e819002b131bcf47c4dda425e1e6062e12477a6a2e"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="06311036a9d8eadfc716c536f49bbc5aa455b5974d88e47d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "19a83b1feb92a30b"}]}, @NL80211_ATTR_REKEY_DATA={0x2c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="50ab0803b298953f4556ca2df2a9af59"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="1d441dc107f0029bc3388fbd696b3735"}]}, @NL80211_ATTR_REKEY_DATA={0x6c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="880a9ad81ef629c1eda67feef009f160"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="0518a42d8133473bf0d4215e03e3fbec1e2612353e2d3000"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="933e2c2a25582958717dd0b6a621f1df"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="316aaca1ade7eee00c94ce884d63ef64723ece9a13ec93547afd299f3e8178de"}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001a00)={0x30, r2, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x9}, {0x8, 0x0, 0x9}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x80) 21.529781075s ago: executing program 5 (id=321): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x9c, 0x0, 0x5, 0x70bd29, 0x20000, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x5}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x99}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x6}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x82}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x38}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x3}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x5}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x3}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}]}]}, 0x9c}}, 0x20004084) 21.529092649s ago: executing program 0 (id=322): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new'], 0x2b, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000070000000900010073797a300000000040000000030a01040000000000000000070000000900010073797a30000000000900030073797a300000000014000480080001400000000408000240ffffff3854000000060a01040000000000000000070000000900010073797a30000000000900020073797a30000000002800048024000180090001006d65746100000000140002800800014000000001080002400000002114000000110001"], 0xdc}}, 0x4000001) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 21.52843136s ago: executing program 2 (id=323): setns(0xc9, 0x0) r0 = socket(0x8, 0x5, 0x5) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x108, 0x42000004, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x3}, 0x94) 21.469332161s ago: executing program 5 (id=324): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x130, 0x5c, 0x160, 0x130, 0x3e0, 0x240, 0x228, 0x25a, 0x240, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @broadcast}, [0x0, 0xff000000, 0xffffffff], [0xff000000], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3b}, 0x5002, 0xf8, 0x130, 0x52020000, {0x0, 0x6802000000000000}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@ipv6header={{0x28}, {0x4a, 0x26}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x0, 0x2}, {0x3, 0xb, 0x4}, {0x3, 0x1, 0x2}, 0x8, 0x9}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1f, 0x2, 0xc80, 0x5, 'snmp\x00', 'syz1\x00', {0x800009}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x52142, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r3, &(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f0000000340)='./file1\x00', 0x2) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a010000", @ANYRESHEX, @ANYRESOCT=r2], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 21.461690688s ago: executing program 0 (id=325): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000), 0xfe, 0xbb8, &(0x7f00000017c0)="$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") (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000007000000050000000000000f00321cb78f"], &(0x7f0000005bc0)=""/255, 0x2b, 0xff, 0x9, 0x1000}, 0x28) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x1b, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="64010000100001040000000000000000fe8000000000000000000000000000206401010100000000000000000000000012341234000000000a00808000000000de1858626bd44ea7508452e2ee2e1aac9efc62eda91a9a01083b9e443054ec65d4c06fd73b9e57580560b771f0664a0c4fdd7379c670c88c79f0e31dad52b9c6999337683e67f7618840b1aa31d77e37e15ff292515b4fce2cc65b39f4db58844d5ccaf0997a57dc44b354b22857b3fedadf23bae3eb8c9035b6e53cdff57e8abcf15264bd0cc3fdd0ef", @ANYRESOCT, @ANYRES64=r1], 0x164}, 0x1, 0x0, 0x0, 0x8094}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000080)=0x14) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000000000000000002040000000000000000000001050000000800000000000000000000030000000001000000020000000400"/83], 0x0, 0x5a}, 0x28) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) (async) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) 21.372248473s ago: executing program 2 (id=326): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0xa1, "7fc75fa7b82c21699900c8cab6b2bc4200c2e299129eff74db5ef1803f2e4e2545d2ea357850f7114a54ef05f1ad468aefe452b28febe9f907b0e8b0fd9e4bbc835f5427e972262d15cdb6bd933f0d23482801ee3a930b83d085ec6d0de816e018d68c67c0d6c34dddba687bfa811126aec9574877c548d787809fc2ed55f6643c68018d6561236869edaf581fa5149536b692e789693457e84612e87e57275230"}, &(0x7f0000000100)=0xa9) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x225, 0x6, 0x40, 0x7, 0x8, 0x1}, {0x7, 0x3ff, 0x4, 0x800, 0x2, 0x80000001}], ['\x00', '\x00', '\x00']}) mmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000, 0xe, 0x20010, 0xffffffffffffffff, 0xa2aa7000) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x80000, 0x178) fsetxattr$security_ima(r0, &(0x7f0000000300), &(0x7f0000000340)=@v1={0x2, "19"}, 0x2, 0x3) close$binfmt(r0) ioctl$BTRFS_IOC_ENCODED_READ(r0, 0x80809440, &(0x7f0000000a40)={&(0x7f0000000980)=[{&(0x7f0000000380)="a65d2f03b57e92cb42b17e7f981a5e6b2d3b258debfb56f032eb73d1bc39", 0x1e}, {&(0x7f00000003c0)="dbe73f3dbc73976f4e2994b36bb7c020275135167017d4ce763e0e39f02b7cc9ed27f57af782c3f9300284cc83af192bc9da70c15bdf1f4103e1b5c3832f9a98", 0x40}, {&(0x7f0000000400)="164e5f90127cb3f0db6179c559e9ace41566df1810d04eb302fd9bfbd57a14ed288de1a33f59116d4b3333397b61567108113384024a053a5954e5ee3c3afa42fe", 0x41}, {&(0x7f0000000480)="1e0140fa3168205bda8178c0aab2fd641b827d269687af349f5a68e08d618ffa73cd459ad98bddbc050875a165f12fb7c6fa8efb085f2c750c49847346d1833e1dc8aeacb99176b180993514ca303405b13b6c877c52202a3a6753fc425d2d30", 0x60}, {&(0x7f0000000500)="b460e4da0cb7b8fc2e7791dd844c82dfcca4dded48a1a68c1c9f355046f62399b95bab1d2d7acfc7d138456c5c486dec745036cb0ce80a9a78622b3dce9162b64b3182182c6b038032784b7d6e3106181965e5593b80eba09ebe9f16479b3b85f2db724c86e31052ae189dceff52ffd2a954", 0x72}, {&(0x7f0000000580)="52be4bd04c7e538f712f75634838b42ee35fe4494511d3f48bbeb039bf7bae72ba535576afc1751a0db71fcaf96a69f0b0f1636e6147f290f0381c4bde13487f7920d1904692488013d4bfdc1af39cddae028434cff164d3135b22a4b0ed3c5670dcdbb115dfcda988392c7f9da0e84e311c742f6db17ed800a4ea", 0x7b}, {&(0x7f0000000600)="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", 0xfd}, {&(0x7f0000000700)="8e24882c5e724061129dd9409e1b8c33591636c0809b189f83e7a80a944368668074328547f39bdec6e1afa840328b5429345e28f6e454130ab678fcfe58b0df3266405976616499c4b59e29f142d64cf498a3a49739110e6e6c63943fc412ed4504e286c124bbd1faa190013fe07e3e67577785c97ec78e8f6342ff7b2a8e210df2", 0x82}, {&(0x7f00000007c0)="19c1ea5b866ccbc869ed49e3b55d299b88d5d7e97dac39f1e4bce117c2f33d1c568c7e31e485bcfb70306ca020819d3dcdaabe3605d43da7a86216ab16c5dd3381b6e9d57cf2a4e149559aafe813d0c64b188cbf2a05de4e7c1076d32c60b4f650654bb51d89c5c5cffa8ee4d1d13d0c35be96a52062dd5e88ea8656e00b0d3dfda43864718813596cf13d723f15ec9bbfba33f102d5f58c7d2fd4b3d2360850c62d611f96bb68e6ae3705432e76b6b917e5ffb1da3dd24cf01fc7aa9a1139d90cc3", 0xc2}, {&(0x7f00000008c0)="efa57c9bf8982e6483b489e313e371c45a894d044012013c58930b3959dd35fada1175f610e7c4626b47c010f129b35d47e901b64ead931badf5e8add1b70cfe6693502ee7e818e2f44996d8a059c0d6cbf6109eac06525238cc0a75f191001135f4f9be00865c4a86d69cc1210d8ac06f06565fcbd12b2abb88d3eed8c17f56b55aeedc6cb39e22bc3f69cd974631078bff", 0x92}], 0xa, 0x4, 0x0, 0x7, 0x7ff, 0xc, 0x2, 0x6}) ioctl$USBDEVFS_RELEASEINTERFACE(r2, 0x80045510, &(0x7f0000000ac0)) bind$l2tp6(r0, &(0x7f0000000b00)={0xa, 0x0, 0x3, @local, 0x6, 0x4}, 0x20) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000bc0)={'syz_tun\x00', &(0x7f0000000b40)=@ethtool_coalesce={0xe, 0x1, 0x7, 0x23, 0xfb, 0x8, 0x2, 0xfffffffb, 0x8, 0xb9e5, 0xb39, 0xf8, 0x80, 0x6, 0x3, 0x1, 0x79b, 0x78000000, 0x4, 0x1, 0xe0000000, 0x6, 0x1}}) bind$l2tp6(r0, &(0x7f0000000c00)={0xa, 0x0, 0x5, @local, 0x10001}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000c80), r2) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000403}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x28, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000fc0)={'ip6_vti0\x00', &(0x7f0000000f40)={'ip6gre0\x00', 0x0, 0x4, 0x8, 0x0, 0x2, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x20, 0x8000, 0x3, 0x200}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x11, 0x1a, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1}, [@generic={0x3, 0xb, 0x4, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x50}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, @alu={0x4, 0x0, 0xc, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000e80)='syzkaller\x00', 0x6, 0x4e, &(0x7f0000000ec0)=""/78, 0x41100, 0x20, '\x00', r5, 0x0, r2, 0x8, &(0x7f0000001000)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001040)={0x0, 0x5, 0x1, 0xa8e}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001080)=[r0, r2], &(0x7f00000010c0)=[{0x2, 0x2, 0xf, 0x3}], 0x10, 0x7fff}, 0x94) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int={0x5, 0x0, 0x0, 0x1, 0x0, 0x60, 0x0, 0x58, 0x4}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x43, 0x0, 0x5e}]}, {0x0, [0x30, 0x2e, 0x2e, 0x5f, 0x61, 0x0]}}, &(0x7f0000001300)=""/188, 0x40, 0xbc, 0x1, 0x4}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x11, 0x8, &(0x7f00000011c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x80000001}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000001200)='GPL\x00', 0x6, 0x51, &(0x7f0000001240)=""/81, 0x41000, 0x1, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000001400)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000001440)={0x3, 0x1, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000001480)=[r2], &(0x7f00000014c0)=[{0x5, 0x3, 0x4, 0x8}, {0x1, 0x4, 0xf, 0x8}, {0x3, 0x4, 0x2, 0xb}, {0x0, 0x2, 0x5, 0x2}, {0x3, 0x4, 0xd}, {0x3, 0x1, 0xc, 0x3}, {0x3, 0x4, 0x6, 0x2}, {0x1, 0x3, 0xe, 0x2}], 0x10, 0xc}, 0x94) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001600)={0x1b, 0x0, 0x0, 0x401, 0x0, r0, 0x7, '\x00', r5, r6, 0x2, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001680)=@bloom_filter={0x1e, 0x1, 0xc24, 0x1, 0x0, r7, 0x4, '\x00', r5, r0, 0x1, 0x4, 0x5, 0x8}, 0x50) r8 = userfaultfd(0x1) ioctl$BTRFS_IOC_SUBVOL_CREATE(r8, 0x5000940e, &(0x7f0000001700)={{}, "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"}) mount$9p_fd(0x0, &(0x7f0000002700)='\x00', &(0x7f0000002740), 0x0, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user}, {@access_client}], [{@fsmagic={'fsmagic', 0x3d, 0x200}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '\\-'}}]}}) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000002840)={@local, @remote, @empty, 0x0, 0xffff, 0xba, 0x400, 0x6, 0x2, r5}) write$smackfs_ipv6host(r2, &(0x7f00000028c0)=@l1={{0x9cd, 0x3a, 0x81, 0x3a, 0x8, 0x3a, 0x9, 0x3a, 0x5, 0x3a, 0x8000, 0x3a, 0xa31a, 0x3a, 0xfe}, 0x20, 'syzkaller\x00'}, 0xa3) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r0, 0x84, 0x7a, &(0x7f0000002980)={r1, 0xffffffffffffffff, 0x40800}, &(0x7f00000029c0)=0xc) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r7, 0x50009418, &(0x7f0000002a40)={{r10}, 0x0, 0x1c, @unused=[0x200, 0x9, 0x10001, 0x1], @subvolid=0x1}) 21.284831563s ago: executing program 5 (id=327): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x8}) (async) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000400)={0x0, 0x0}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0xe, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r1, 0x0, 0x0}, 0x20) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x0, 0x0, 0xf6, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2, 0x80001, 0x84) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) (async) listen(r2, 0x5) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) (async) r4 = accept(r2, 0x0, 0x0) setsockopt$inet_tcp_buf(r4, 0x6, 0x1f, &(0x7f0000000080)='espintcp', 0x8) (async) write(r3, &(0x7f0000000100)='\x00\n\x00\x00\x00\x00\x00\x00\x00\x00', 0xa) (async) read(r4, &(0x7f00000000c0)=""/10, 0xa) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x2000000000000122, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) 21.01954179s ago: executing program 2 (id=328): syz_emit_ethernet(0x52, &(0x7f0000000200)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0xa, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local, {[@timestamp_prespec={0x7, 0x14, 0xf, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}, @redirect={0x8, 0x0, 0x0, @dev, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x18, &(0x7f0000000200)={&(0x7f0000000000)=@newqdisc={0xb8, 0x24, 0x601, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x88, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1, 0x3, 0x0, 0x2f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0xc}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x31dd}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x484}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xb8}}, 0x0) syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) 21.013185112s ago: executing program 5 (id=329): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)={0x0, 0x5, 0x0, 0x81, 0xfffffffb}) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000000c0)='./file0\x00', 0x10108c0, &(0x7f00000006c0)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95\x00\x00ni_xlate=0,showexec,shortname=winnt,shortname=win95,nonumtairodir,nonumtail=0,shortname=mixed,nfs=nostale_ro,utf8=0,\x00', @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESHEX], 0x1, 0x26c, &(0x7f0000000340)="$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") (async) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) (async) r2 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000b00)={@desc={0x1, 0x0, @desc3}, 0x40, 0x0, '\x00', @b}) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) (async, rerun: 32) r3 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x4, @desc3}) (async) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x8) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x12}]}, 0x24}}, 0x0) 20.80988989s ago: executing program 0 (id=330): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf2505000000200001800d0001"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @broadcast}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240e5d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000100)={'security\x00', 0x90, "2eb6ff666d057c14f45f6a12c4f9358080a14f5a57cd8aead08cba65603117991ea88d7b33d0e37fb4bab3bbdbe243d4b1ac070a833ba373e5a33ba126f6029a0938176781609c75c61c055bfdbf072b85d4ef06e8a96f23b362c191ecf3b5af4e772da00abab1046290512837cbef233a3d3c872edce356a4457a49af07f749d9e9ac2136ed15779927cca9b90dd800"}, &(0x7f0000000240)=0xb4) 20.809077527s ago: executing program 2 (id=331): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002640)={0x20, 0x1e, 0x21, 0x70bd27, 0x25dfdbff, {0x7}, [@typed={0x5, 0x2a, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x37}]}, 0x20}, 0x1, 0x0, 0x0, 0x2008800}, 0x4000000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x6, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@version_u}], [{@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '9p\x00'}}]}}) 20.755446367s ago: executing program 5 (id=332): add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x800000, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x2b5, &(0x7f0000000380)="$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") r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000080000000000000000000002000000000d0000000000000700000010000000000000000d00000000002e305f2e2e2e"], 0x0, 0x44, 0x0, 0x0, 0x400000}, 0xfc) r1 = socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) prctl$PR_SET_MM(0x41555856, 0x20000000, &(0x7f0000ffd000/0x2000)=nil) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x11}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x38, r2, 0x731, 0x4, 0x0, {0x38}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73}}}]}, 0x38}, 0x1, 0x2, 0x0, 0x40000c1}, 0x8000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = signalfd4(r0, &(0x7f00000002c0)={[0x6]}, 0x8, 0x80000) sendmsg$tipc(r4, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000640)="3a260871914ddfdfc09be40da5add9f5629f1a16abd5ac9c2e5d6fa60a71745a554414dd5bf5418850ca1c0deac7ed4071dcb2f1d8018deb0d91f709bd503fc8938f047a6006ba245f1ef4efb9ff48717da987c6dbd9ed5926402efd70b615799396979fae3ced734429c888ea0309e0381966f0edf39ce74b7ffecd8a49b84a21e81a04c54faae9d355c5b79b9e6ea4c5bff3963bbae7d9136ef2ab61eea21b53f658207e3c15df1afe29d230acdb7fa7ca76e374cee17321b623b57a4551b5afc8aa0b4426e7baa3e94f8be9a712c60160ef7af64e7f01a5843d138856251483aa240fc48f0e7d0140fab14ae84f7bf9319edff41cef084d6b9d960209e41170a36cac8b142f0dc5dc5fef9b0f7129d8cda5b3e87a8c593eba637feff3e45453e3efcca50e9576b3067cc80e88a721f4a7cd16a93a16135bf9be5b1a3eac1fb339cc8f025b47b9b677e43bd8fe0f1841581d21dac0b2a902e30569c4daefdb49b5b6d717e136f31a89432929b281759166c6cc19719f8d91f07e21c18fef2ad60445f6989558821ad03941328cad055927483442086caeceb8628eb694849a147ebd49475230f19884784b61fa80beba80e1e0ee5536ba10a9c27463dae95f71f59d14e2562aacc4d426f49e0122940aec46a630f8a057d68a0827c98e88ee1eeed648fb5db0a1041c9a9a019e42b78fb8821fe003a9373547869d7f640a0880dc0adecf0d00d1d1fda10b2f45ca4438a199420e16699062ffdf24deca73b3eda74f547b672b009b7f0cdcaff2413ed4aef8325bcd0e4dbab89f5e36d2b4ef2a9646e8169be0c15ba6129e4abb9bda956725f702288dc29713270b21c30e4a3f4acaae6fbaa07244e7f0ab169ed0517a63cc61acc37d6550892f4e9a9e0cd7b9a54422c25bf9ef58aefe69e8aed0600788f61ef82680661411d9f792715441945ea2a93bfc2cccccc3a81c8dfe0501439c44992335ab5731c681e90177731455511f901ddbc87ae4d932ac776dbb2179d7e68a077e3d762bc2a1b13e574c437d25f00cf5dbe173ad9b42a4c638324ead12851102e336c310f6c8fc88a3b995aee8d8015cf5e2c3365f1ab7495ae3b1d2f6c07eacb1802188f5b31c5080fa7a0ce3addd68f5d10c7ab18bc8ccf1917513dc2246a2fb68d185d8939433d407c4e8f9bebcc16a4a0f8eb569ea47854eae20c9763b0505a42d2df83c15a82ecd0b7d0213b00b3235539ef703c31a92ede617e5fdb229fb13de2da866e09efbf32435692f7170423a316bcd523ed742bf017e87bced5cd86f55e9160919a794ce839ad317f9793fdf36ddf84cb2f5a18a9599b27f7d69eea62fafd12c6cf67dda4eb6f9745c7a5928c6e075f0ab9b82ec057b1c1e3901bc695a6b63faf33c67989126bece7f1f600057466404d43dec5ca66bc65933146189af2c0f2af8384ad247cc6a5bcc6333d4cf48884129f60962741690c8c65793aff36df8d37d9232ba54a76f0ba2d5d75d45f6afe9521e731505665389ddd6084da79783d9545754dfb064e9241da4539d6dee20729432768c977c6b199ebf6aa280561452e84e518dce8a2ba7454806d7762ace046c5a737206ad164421c675c397537e1be28e8e45db8d673a781955fbae5e398516d2df39c8d22d9b8b3e7e8ff5e90b2b89108c32ea97c56fd2883c99cafbfcb553d5426e63eac0cb1a210602774a05036d7603eccadf6360ef370961eb169f7d430bc7ce54b2825b201ff8be794f10c38b49a85aa6abbf3ee094fbacc10969cde2a10cc89f1a1cdcc6a5a0c614681f5b9645912df1040e6f9530402e5673d42cb8f73e4b15e311047e010f8a0595c97142a16a1eb8c53520e5a2200d94cc9fa54beb4d54342c8dfa1220124d8908986028a96ab7932a565f7eb8b77cfa43d9279f8c89a28cc2e9fb2701db17ad63b61cfb38ec0b3a7f556d7693a12ed8df70cc9b43310260c54aa954f6c9285f6bdeeb55ed55ed7fe95af4ac1797813d48de47e8d31f0459b8b0aedd7382268187f1ceb8eadaa422c191e95df6898e1daa53f5720f5e3b53b30e0074d72c69c6c338115d82a24eec65fe70d74c5759a16e4dc81eff63e903afdd168aea4be88e937d7f1b3efeeb04bee2f4cb635a292a46a24f9bcd08a9d92d67ac9bb8045095d8138275776f8f63733216560685d7a40cb5d25038d027c6a3848bd983d66fdd289f412335d18d020f586d7ed829d56b7a85750dc58e7099d4e36f22a20b7b79f7c693e1b284df7bf3fa0d1a73216a93ed0c6d9e1406112259848a74e04267a80a6dd15fea5fd16ff71eb55e5ad5aa5f35a4e013059a6021ca481cc50943949cd1b3ee5ecefe86a9d0d0ed7e2b540e1e0f55300ac8035a53d37238cab4643f18c022329e3cb3cf6843dccd523010ef15a1fa86012e7671208ddb2fa9c79809e532fd3c43c49d2dc57e5b53497aafa29495c7a56cd1f4a8fc03aa20374c10eead1f8a2f57ad453f776bea5630dfe6fa47c8189352fb78c6bd315a6e324af24f1335712b5f2800f3419e9c3a35d752ce4c918d6758b8e6d37a233f4c385c08fc21a910224854259a072a0473c3e2e4c1867da5e24cea042640846b798d7797a2257c3e10beb520341b5813c4041d4ecc84e2c5a934ee7b23fa98d0c1b2bb3935d3b349a3b33041f81530c819bab40e98da7d3626c99e3674b480fb9db66de5db4029a6e7817e23522657eb2ebee517d8613c77fed9ac2333b237cae30d9179dd16b7707dd9747f9684aa32f1f082315f82f2e8c1bf28df4092513e04cf2d47bd53cbbdf6beed3ab1f076fb51c34bf671e955fe998075c7fdf31028b04a12a30e0e73811d92c1be749157f85638cfcd4e378b66720377b19ff72719c7c9b30667813997d17d2c9f9a884e1bb764bcd910fa672ae43bbe6353a74f9f11126241199285a3ebe9fa06d339799316998fb6a96b6f722f22ab3d294ae4418f5d0ecb735503fdc1204bd508e4227837dce8a1c1e9c7cbdadec75ef9618305ae7c086ee4a498653a20a37ede972cae26c83792de4288859adc8357089b9abca29d9024ecc179bf595c9b2b38840cee7a75e0425156c59eb3ac0feebd270ac70dd0c96190d027cf58b15e8b9e26ad45e5562efc0dcb23240e91df86a1ef0834a6d233e9da69f0c447ac1ef94f38b0069d5ea4d8a6f3f7abd0fb594e5c7c3892c05a07e092439c445c677ffc70cdc3fda7dc9e21c11e63a38be5951b1247048fc20b9c0ee60e59be05afb7471ae3d4f56bf7daa21b087bbf9800f49ec028637ec57ffcc6be42f7a46ea9d8eb29d202a3e88cc105d6af5a2a0fbcdea203d6e399ca62aa7e63c9f69fc9dd68ebb594343a716e4308123c6e974fbc981193393e91ab81cf37b5f75af32b02dfbaa097febe3a86cfd7bb7632ffbdf20776f801d679e682d134b38753abcdee011e5f33a00d7f858252ab69675b0c4361c16bbdef857cf20d8267cd94d65c69cc440a153acecb2b1f96e67395d003462c818636f66ff7a09064cfc015c7d73ed3d79bd2b822ee5be1ccc4579f178de6e293aed0344dbd0a447f18d09adf2d4e1fab74b4676651a672df41cfba9b1e088bb3afa898a70b38557c37798ee07d00642ba0bc7af680453cfc91d8f71b7d2d8ff7d96b22d8c4993f98f5e7c6727e863aa68e3623b44210756eaf14419025e470d5de3afab3edfb2fd013493077bdd17a52345ace3ad19a30f8b6ee3069a2408f07e2ddaefb042475ab8a4bd33f157c5b3399e255f5f5685bdf321d223f2ee9663361ef3610d09dc7e86a41191de9b8f9daaf7195ed1375397ba023fa83cd792c2a6844742f6b8e50f5a7af67287c571969a68e3626626493cf6b2f996fb524c7c5a58e1be94bd49a043b7ed8cff0a7c50a19b3e41d382f326ea75746b0a35b96dc73368f5abf7f80cd8d3d17f97328111a17bbbeafc39d4d96d5de6e4e8b3c3ddcd37f7b74371b0802af689e134c7c9429d95dee7dfe3a3462485b9e9d725d86061ba8f120c8b32e1665819c3ec89b27de308a72bf376971e58bed93966dd7d59722c7c9e40f49f108b14c589ef8a5e0e1a2a238a18f8c1cf1ee76ecbc5c52ed8c9a39ea91456ea8170710ad35195a87a9eab6d319f3dfc791b3060b6c3f091a1b5bfd601a75f22e19222ac291e806d58f0564921f9d91a29e98c46c29d9c75bfcb0930b6050bdf49c4497c2c4603664e2bf9d7fe69eae9663321546b6e41569aca3e41fe1a8319b49c6c623c47295de685da44c566f1aab567a6d7e96c1f71ebd0cf02ccaa00964e6f6fb03139fa579f60f14430fe042d12b37f499233dd4ea7cd706413aa1d120b5646ab5cbb7588147f20e4d47a056b2ee754439a25979fe1b5fd0cce51e8f9f04235d2275dc463522d9d4cbe07ca980f26e04982a25aa2ed5ae65d82fca7be88ab625ccc0e58d83494c892e1b8b812933d76be876a7835890893b4a43dae509546a7d576abdc17e8d49142f6ad6826a39f0fe2c2a63a85261150c8e97b33277bd79797889f27ab0a9527fb2a32beb60dd2d63bbe87558dcb3c90017801acc61b5e7c93c29fb531a8f577ecddcfa81b5aa8b75006505f03d47c06d99840a145920af05555b334048038ef8da154a0310ce66e90652add8c8405793b51cf337031597948b674ebad1ce2fa1dd4040d9850509f17ed18dcbcfe23a8444ae9d303779da9e1d167b563e900b0d2da39e35a08ce5fdd96aef7f1e26d50ef7981c3a5aed6c4e142a491f8417ce44ee051550fe465c690dc5d07322a858682f8b5ffc770d3085fe0c5336c546906d149ccd1711be68247358fd226a56c8c8fe65369384d99c767e35f33bad32ed78b9487e0e4851af091acac743c799363b35f71e0499cfbb8d3df4c68a8782ec87ccc501251803ab0c10e660c712d2701c64c1ed1cf4112a8601b38d56397f5602a2a70d36be4f2cd485987ce8e0b4c94110124ba298bcba38ab1abf8d9928fd93878d63d2a60d26ba7194654e5ca400ef135007781c32f8297aee598268cea5eab252ad95d59bda04bd642fa9b682613a012efe3475ca9cccb5df07f2ae8f7fba6ae35d3393698e2155012be402e1752aefd5d43a7e675308c24bffcee77ccb216466b2c790d55bebe5d52267dc9008fa0f8e0f7937f5425f7dac6b4a6931bd9c780fcd3128ae02c9a93be13db39c4cd1a8b56dedcd75281def2bb17e6a5d64160f9fbce881f91dd518d8aef1570d03ba5dd7d81d136caed17ef610fc66a06e011bb1a19ef707d453b7629ef56036e7c4b69641eaafce2977ccf673e4115e5c9f37ef43164fcb7d12fca837e6e6c3baa1457c8d168a29cd843f4259fa752ac9f8abe695b6dc89bbe7630ec212eeaf358c2b3abfdb8f1f879f44640f15f7af23b2923e3b68564a96b311f047353632cebc6bcd1e0f4bbd64162eb9b849390d012e17fbafb4df013f9d31bad044396efc193e75f8b754436fe37c894274e791da503f39d8e508e550595a6f24c80f3e0f803e579db5dd2869e652338ff4360c32e63b5067947f40e6c1300b783b2ca4b5024b154005aa024d20df24921fcebeaa797546eb0d79b2730288dfaad0a5406b5bae2bd917d6ee4831ff62f732092551f1bf7328d6646fd6bc974f6932a5bf099d8c7bae18ac288dd3600b98633bf0a4fc6184ae53a817f29dd0c919de3ada265a056d82c7efeb42fb47efe4e419d43b73e9c48bd5683a32e74e06862194ab65fef0caeb2e869716f8db29994a95da3601522c60d8de3a2b9885a52c21e868cb87747f5a2f7a80d097679f4780b48d3470", 0x1000}, {&(0x7f0000001640)="dc5f77", 0x3}, {&(0x7f0000001680)="aaa199fe024f1141639e48709a3aeab7f1486a6d370283a6a2479ec57bfde178e2d79e18e780eea047b2f518010eca48b3f28d96b429c2d2ebed7350b72d274a81dd4676974733143985dd5e1b0d9ca137fd26caac5f1fe5a949d36f3923a3220b09950144e99a4f4a816974ccba354e87ae914c7061cfc261f36aec31d92d0721cad4c21120607fceed5fcba6ce5368029ad364625c81ad5aacd6c7aff1370f41494c0088c24cb1ce717bc9d135e2", 0xaf}, {&(0x7f0000001740)="833b9ff036f9c25604c10dc05ad4f6e13bf21c8e994bc1e19e42160bb1de5f02edc102ad80b09268e2365beace5a791ef9817c9fed9894160fa608b2f88ff9893e7f44070276b796", 0x48}, {&(0x7f00000017c0)="93cd409e852e446f2e7aecf18f8e062cfbd12c08a416c3c7fbfaf7d6197ad12c819df97a043619a2c32dbe667dd6bd4c1a424687f8ce4e3c9a132cdcaf0840aeb520ba8fe929bf6471948ff1fb3831b5ce5be003cb175477c65f2fc4ed64de9db83e57717c3695c6c69d94dd609e16de1da02c647ff026dc9528d4282f8a4fc52615a5734fbdd05cf19f276017d19356172c60961500e0f4f85bb1e7626ca0b168fe5fe03dc6781a65a797ed6057d915cfd15ca161170aab0138939ddceb2d3cd4bdc27252edc3a6fa9f62d3d92cf2093fc0bccb28ea61430e4e0c7398460d18d2a3004892a7accba03afb5eab150ac42e4bd9f2dd59ea", 0xf7}, {&(0x7f00000018c0)}], 0x6, &(0x7f0000001980)="2799a582c1a8d7c419a69f0d70f97e85963df3dbbd25839f0280e2183e77c7f7c938134ad7b22a39c228c5ecc5e2059f11e7245cc692c499114fa4165a1e3e5c11e8e5a0e773a9e03719c40e92870c298910461cbf02109db7f3d4d50d93ce5aafc49e7d05819cc919a38908c2cd0c5eff18886f309fdbe96e974a6d40dc7b261914c09583030398d8a7ca366f861e478b5d8f6ec99800e672f91fc48b14d36889c07d62ad3edd8b9828280d9536c4c187ad4e09365c070773d73a4b50e1c1", 0xbf, 0x4048000}, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 20.642377292s ago: executing program 3 (id=333): bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="39298ee609"], 0x20) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000028c0)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004001}, 0x8000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="21000000470010aaaaaaaaaa0000000000000000000000000000000300000000000000000000000000000000000300"/76, 0x4d) 0s ago: executing program 33 (id=318): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000c80)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf32(r2, &(0x7f0000000f80)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x4, 0x0, 0x79, 0x5, 0x3, 0x3e, 0x2, 0x348, 0x38, 0x3f, 0x800000, 0xd, 0x20, 0x3, 0x1d, 0x12, 0xb15}, [{0x1, 0x5, 0x0, 0x10001, 0x80, 0x10000, 0x80, 0xcb1}, {0x60000000, 0xffffffff, 0x2, 0x7, 0xc56, 0x4, 0x4, 0x96f0}, {0x6, 0xfffffff7, 0x6, 0x73e6, 0x530, 0x4, 0x2, 0x5}], "85813c1a2ce82e40b7874221443d3c2669571e7af69c5fbb8aa47bb452e9a75d09ffbbb58e0451e301c5ce554efd7e8adf1533905402156e2af21c9a1038dc1cd5bcaed68ffe8f2b311b951fe05c157ef6a5f7b2536bbe60aa037bca8c5db32aefe6764c05f22237cc155a123458d70dc77bee5f1a8a0a7d5c45e3a1", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x714) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) read(r1, &(0x7f0000000180)=""/145, 0x91) r3 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r3, 0x0) ioctl$UFFDIO_MOVE(r1, 0xc028aa05, &(0x7f0000000140)={&(0x7f00004cb000/0x3000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x3000, 0x1}) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x0, 0x70) ioctl(r4, 0x80480911, &(0x7f0000000420)) r5 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r5, &(0x7f0000000bc0)=[{{&(0x7f00000001c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f00000008c0)="a905000000007464000100000000ae5774ee54bbda4c1a986374cf1ea1a6aefe6a5c90db", 0x24}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES8=r5], 0x28}}], 0x2, 0x24044044) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x8000, &(0x7f0000000280)=ANY=[], 0x1, 0x28d, &(0x7f0000000cc0)="$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") r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000002000010028bd7100ffdbdf350a801000b50000030000000014000200fc000000000000000010000000000000100001"], 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048810) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x8012, 0x0, 0xfffffffffffffe2d) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.79' (ED25519) to the list of known hosts. [ 20.683777][ T4695] cgroup: Unknown subsys name 'net' [ 20.814303][ T4695] cgroup: Unknown subsys name 'cpuset' [ 20.815685][ T4695] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 20.993915][ T4695] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 21.776572][ T4714] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 21.777037][ T4714] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 21.788444][ T4722] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 21.788641][ T4722] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 21.788944][ T4722] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 21.789499][ T4722] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 21.789750][ T4725] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 21.790068][ T4725] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 21.790271][ T4725] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 21.790962][ T4722] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 21.791236][ T4722] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 21.791297][ T4724] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 21.791527][ T4725] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 21.791703][ T4725] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 21.792172][ T4725] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 21.793297][ T4724] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 21.793402][ T4724] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 21.793756][ T4724] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 21.794867][ T4711] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 21.795153][ T4724] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 21.795237][ T4724] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 21.795517][ T4724] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 21.795932][ T4724] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 21.798966][ T4718] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 21.799641][ T4718] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 22.209824][ T4720] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.210112][ T4720] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.210174][ T4720] bridge_slave_0: entered allmulticast mode [ 22.210654][ T4720] bridge_slave_0: entered promiscuous mode [ 22.220791][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.220827][ T4715] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.220885][ T4715] bridge_slave_0: entered allmulticast mode [ 22.221294][ T4715] bridge_slave_0: entered promiscuous mode [ 22.223833][ T4720] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.223892][ T4720] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.223940][ T4720] bridge_slave_1: entered allmulticast mode [ 22.224340][ T4720] bridge_slave_1: entered promiscuous mode [ 22.247625][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.247666][ T4715] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.247768][ T4715] bridge_slave_1: entered allmulticast mode [ 22.248189][ T4715] bridge_slave_1: entered promiscuous mode [ 22.269201][ T4720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 22.269263][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.269328][ T4708] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.269376][ T4708] bridge_slave_0: entered allmulticast mode [ 22.269789][ T4708] bridge_slave_0: entered promiscuous mode [ 22.270580][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.270600][ T4708] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.270681][ T4708] bridge_slave_1: entered allmulticast mode [ 22.271071][ T4708] bridge_slave_1: entered promiscuous mode [ 22.275923][ T4715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 22.293710][ T4720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 22.294464][ T4715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 22.308064][ T4715] team0: Port device team_slave_0 added [ 22.311992][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.312051][ T4713] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.312100][ T4713] bridge_slave_0: entered allmulticast mode [ 22.313277][ T4713] bridge_slave_0: entered promiscuous mode [ 22.315130][ T4720] team0: Port device team_slave_0 added [ 22.316316][ T4720] team0: Port device team_slave_1 added [ 22.317050][ T4715] team0: Port device team_slave_1 added [ 22.328550][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.328572][ T4713] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.328620][ T4713] bridge_slave_1: entered allmulticast mode [ 22.329375][ T4713] bridge_slave_1: entered promiscuous mode [ 22.337410][ T4708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 22.337541][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.337593][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.337672][ T4710] bridge_slave_0: entered allmulticast mode [ 22.338387][ T4710] bridge_slave_0: entered promiscuous mode [ 22.345686][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 22.345694][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 22.345709][ T4720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 22.346233][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 22.346240][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 22.346252][ T4715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 22.347262][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 22.347271][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 22.347283][ T4720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 22.348380][ T4708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 22.351519][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.351554][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.351636][ T4710] bridge_slave_1: entered allmulticast mode [ 22.352075][ T4710] bridge_slave_1: entered promiscuous mode [ 22.357391][ T4713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 22.357965][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 22.357974][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 22.357985][ T4715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 22.366901][ T4708] team0: Port device team_slave_0 added [ 22.367990][ T4713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 22.375251][ T4710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 22.376203][ T4708] team0: Port device team_slave_1 added [ 22.390135][ T4710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 22.411758][ T4713] team0: Port device team_slave_0 added [ 22.411939][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 22.411948][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 22.411962][ T4708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 22.417559][ T4720] hsr_slave_0: entered promiscuous mode [ 22.417903][ T4720] hsr_slave_1: entered promiscuous mode [ 22.419661][ T4710] team0: Port device team_slave_0 added [ 22.420450][ T4710] team0: Port device team_slave_1 added [ 22.421141][ T4713] team0: Port device team_slave_1 added [ 22.422749][ T4715] hsr_slave_0: entered promiscuous mode [ 22.423003][ T4715] hsr_slave_1: entered promiscuous mode [ 22.423176][ T4715] debugfs: 'hsr0' already exists in 'hsr' [ 22.423207][ T4715] Cannot create hsr debugfs directory [ 22.428795][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 22.428803][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 22.428816][ T4713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 22.429359][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 22.429366][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 22.429379][ T4713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 22.449368][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 22.449378][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 22.449395][ T4708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 22.449779][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 22.449789][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 22.449804][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 22.461521][ T4713] hsr_slave_0: entered promiscuous mode [ 22.461779][ T4713] hsr_slave_1: entered promiscuous mode [ 22.461950][ T4713] debugfs: 'hsr0' already exists in 'hsr' [ 22.461958][ T4713] Cannot create hsr debugfs directory [ 22.469640][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 22.469648][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 22.469660][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 22.509645][ T4708] hsr_slave_0: entered promiscuous mode [ 22.509940][ T4708] hsr_slave_1: entered promiscuous mode [ 22.510131][ T4708] debugfs: 'hsr0' already exists in 'hsr' [ 22.510141][ T4708] Cannot create hsr debugfs directory [ 22.531338][ T4710] hsr_slave_0: entered promiscuous mode [ 22.531614][ T4710] hsr_slave_1: entered promiscuous mode [ 22.531777][ T4710] debugfs: 'hsr0' already exists in 'hsr' [ 22.531786][ T4710] Cannot create hsr debugfs directory [ 22.588154][ T4720] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 22.590081][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 22.599091][ T4720] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 22.600917][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 22.601231][ T4720] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 22.602301][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 22.614817][ T4720] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 22.615867][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 22.642401][ T4720] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.642467][ T4720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.642614][ T4720] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.642654][ T4720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.650015][ T4713] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 22.652362][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 22.653587][ T4713] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 22.654858][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 22.657583][ T4713] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 22.659426][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 22.659992][ T4713] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 22.662055][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 22.672031][ T4720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 22.685440][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.685467][ T4713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.685559][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.685588][ T4713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.687362][ T4720] 8021q: adding VLAN 0 to HW filter on device team0 [ 22.688530][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.689162][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.690420][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.691478][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.723714][ T720] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.723746][ T720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.724406][ T720] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.724428][ T720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.731806][ T4720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 22.746233][ T4713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 22.746494][ T4715] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 22.749628][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 22.749915][ T4715] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 22.750864][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 22.763106][ T4715] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 22.766673][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 22.766961][ T4715] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 22.768392][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 22.772240][ T4713] 8021q: adding VLAN 0 to HW filter on device team0 [ 22.794055][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.794082][ T3313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.794400][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.794418][ T3313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.819100][ T4713] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 22.822293][ T4708] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 22.828232][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 22.846734][ T4708] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 22.848160][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 22.848598][ T4708] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 22.849368][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 22.849628][ T4708] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 22.850750][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 22.863963][ T4715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 22.871158][ T4715] 8021q: adding VLAN 0 to HW filter on device team0 [ 22.885222][ T4710] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 22.893604][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 22.894272][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.894294][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.894608][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.894627][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.896135][ T4710] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 22.898600][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 22.901572][ T4710] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 22.909007][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 22.914359][ T4710] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 22.915406][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 22.929126][ T4720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 22.949161][ T4715] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 22.959695][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 22.970785][ T4720] veth0_vlan: entered promiscuous mode [ 22.974646][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 22.994966][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.994992][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.995332][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.995352][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.998632][ T4720] veth1_vlan: entered promiscuous mode [ 23.005678][ T4710] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 23.005690][ T4710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 23.029442][ T4720] veth0_macvtap: entered promiscuous mode [ 23.030806][ T4720] veth1_macvtap: entered promiscuous mode [ 23.038048][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 23.045159][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 23.048943][ T14] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.049068][ T14] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.049093][ T14] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.049116][ T14] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.051026][ T4708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.059892][ T4708] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.061498][ T3468] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.061522][ T3468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.065391][ T3271] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.065415][ T3271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.075894][ T4713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 23.121146][ T4713] veth0_vlan: entered promiscuous mode [ 23.146270][ T4713] veth1_vlan: entered promiscuous mode [ 23.154714][ T4713] veth0_macvtap: entered promiscuous mode [ 23.156137][ T4713] veth1_macvtap: entered promiscuous mode [ 23.166341][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 23.167301][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 23.179467][ T3313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 23.179481][ T3313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 23.195580][ T3271] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.196020][ T3468] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.196246][ T3468] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.196321][ T3468] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.220529][ T3468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 23.220542][ T3468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 23.241004][ T3468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 23.241016][ T3468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 23.256951][ T3271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 23.256964][ T3271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 23.279381][ T4720] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.291465][ T4715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 23.308142][ T4893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 23.319646][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 23.326399][ T4708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 23.345969][ T4710] veth0_vlan: entered promiscuous mode [ 23.350404][ T4708] veth0_vlan: entered promiscuous mode [ 23.356759][ T4708] veth1_vlan: entered promiscuous mode [ 23.360494][ T4710] veth1_vlan: entered promiscuous mode [ 23.374247][ T4710] veth0_macvtap: entered promiscuous mode [ 23.375589][ T4710] veth1_macvtap: entered promiscuous mode [ 23.378961][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 23.379891][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 23.389450][ T4708] veth0_macvtap: entered promiscuous mode [ 23.390881][ T4708] veth1_macvtap: entered promiscuous mode [ 23.401193][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 23.402199][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 23.415727][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.415917][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.416710][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.416779][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.416994][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.417049][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.461342][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 23.461356][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 23.513986][ T4715] veth0_vlan: entered promiscuous mode [ 23.515599][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 23.515611][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 23.519404][ T4715] veth1_vlan: entered promiscuous mode [ 23.520184][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 23.520195][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 23.540990][ T4715] veth0_macvtap: entered promiscuous mode [ 23.547873][ T14] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.553930][ T3271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 23.553942][ T3271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 23.559649][ T4715] veth1_macvtap: entered promiscuous mode [ 23.571118][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 23.642281][ T4917] loop2: detected capacity change from 0 to 512 [ 23.643021][ T4917] ======================================================= [ 23.643021][ T4917] WARNING: The mand mount option has been deprecated and [ 23.643021][ T4917] and is ignored by this kernel. Remove the mand [ 23.643021][ T4917] option from the mount to silence this warning. [ 23.643021][ T4917] ======================================================= [ 23.661489][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 23.719337][ T14] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.719644][ T14] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.719802][ T14] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.719946][ T14] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.722719][ T3468] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.945518][ T4714] Bluetooth: hci1: command tx timeout [ 23.945761][ T4714] Bluetooth: hci3: command tx timeout [ 23.945915][ T4714] Bluetooth: hci0: command tx timeout [ 23.946062][ T4714] Bluetooth: hci2: command tx timeout [ 23.946209][ T4714] Bluetooth: hci4: command tx timeout [ 24.040349][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.040366][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.094168][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.094185][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.119553][ T4910] netlink: 'syz.0.9': attribute type 4 has an invalid length. [ 24.221061][ T4934] mmap: syz.1.2 (4934) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 24.241278][ T4940] Bluetooth: MGMT ver 1.23 [ 24.298673][ T4934] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 24.314850][ T14] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 24.314938][ T3271] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 24.314963][ T3271] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 24.314979][ T3271] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 24.335860][ T4944] loop0: detected capacity change from 0 to 256 [ 24.336247][ T4944] vfat: Unknown parameter 'n8' [ 24.468188][ T4954] loop1: detected capacity change from 0 to 512 [ 24.473410][ T26] kernel read not supported for file /kmsg (pid: 26 comm: kworker/1:1) [ 24.480900][ T4955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16'. [ 24.541841][ T4961] loop4: detected capacity change from 0 to 256 [ 24.568090][ T4963] loop2: detected capacity change from 0 to 4096 [ 24.581979][ T4968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21'. [ 24.585940][ T4963] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 24.585954][ T4963] EXT4-fs (loop2): Test dummy encryption mode enabled [ 24.597964][ T4963] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a80ec128, mo2=0003] [ 24.598041][ T4963] System zones: 0-5 [ 24.601476][ T4968] loop1: detected capacity change from 0 to 512 [ 24.612726][ T4963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 24.619726][ T4968] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #12: comm syz.1.21: missing EA_INODE flag [ 24.619791][ T4968] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 24.620180][ T4968] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.21: error while reading EA inode 12 err=-117 [ 24.620214][ T4968] loop1: lost filesystem error report for type 5 error -117 [ 24.622393][ T4968] EXT4-fs (loop1): 1 orphan inode deleted [ 24.623572][ T4968] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 24.627700][ T4963] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 24.630585][ T4969] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19'. [ 24.656609][ T4716] Bluetooth: hci0: hcon 00000000336a94c9 sent 1 < count 234 [ 24.657464][ T4963] fscrypt: AES-256-XTS using blk-crypto-fallback [ 24.664670][ T4968] fscrypt (loop1, inode 15): Unsupported log2_data_unit_size in encryption policy: 133 [ 24.813082][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 24.814862][ T5001] syzkaller0: entered promiscuous mode [ 24.814879][ T5001] syzkaller0: entered allmulticast mode [ 24.854264][ T5005] syz.3.29 uses obsolete (PF_INET,SOCK_PACKET) [ 24.889915][ T5005] zswap: compressor z not available [ 24.913215][ T5005] netlink: 'syz.3.29': attribute type 3 has an invalid length. [ 24.968239][ T5023] loop3: detected capacity change from 0 to 256 [ 24.971163][ T5024] Invalid ELF header type: 2 != 1 [ 24.971241][ T5024] Invalid ELF header type: 2 != 1 [ 24.988480][ T5027] netlink: 260 bytes leftover after parsing attributes in process `syz.2.33'. [ 24.988729][ T5027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33'. [ 25.013778][ T5029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34'. [ 25.018702][ T5029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.34'. [ 25.043742][ T5034] capability: warning: `syz.2.35' uses 32-bit capabilities (legacy support in use) [ 25.057726][ T5023] Zero length message leads to an empty skb [ 25.086843][ T5038] loop2: detected capacity change from 0 to 512 [ 25.103644][ T5038] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.37: inode has both inline data and extents flags [ 25.103672][ T5038] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 25.104040][ T5038] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.37: couldn't read orphan inode 15 (err -117) [ 25.104057][ T5038] loop2: lost filesystem error report for type 5 error -117 [ 25.104621][ T5038] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 25.118048][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 25.259690][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 25.403057][ T5063] loop4: detected capacity change from 0 to 512 [ 25.404979][ T5063] EXT4-fs: Ignoring removed nomblk_io_submit option [ 25.406414][ T5063] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 25.410947][ T5063] EXT4-fs (loop4): 1 truncate cleaned up [ 25.411948][ T5063] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 25.423768][ T5066] EXT4-fs error (device loop4): ext4_readdir:280: inode #2: block 13: comm syz.4.44: path /3/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=2, rec_len=8, size=1024 fake=0 [ 25.725747][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 25.831126][ T5077] loop3: detected capacity change from 0 to 256 [ 25.832555][ T5077] vfat: Unknown parameter 'uid<00000000000000000000' [ 26.002596][ T4716] Bluetooth: hci4: command tx timeout [ 26.002623][ T4716] Bluetooth: hci2: command tx timeout [ 26.002638][ T4716] Bluetooth: hci0: command tx timeout [ 26.002653][ T4716] Bluetooth: hci3: command tx timeout [ 26.002665][ T4716] Bluetooth: hci1: command tx timeout [ 26.384996][ T5093] No such timeout policy "syz1" [ 26.466806][ T5096] vfat: Unknown parameter 'nnonumtail' [ 26.499933][ T5098] nfs: Unexpected value for 'acl' [ 26.500034][ T5099] nfs: Unexpected value for 'acl' [ 26.915481][ T5120] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 26.935311][ T5120] EXT4-fs (loop3): 1 orphan inode deleted [ 26.935755][ T5120] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 27.020324][ T5126] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 27.030396][ T5126] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 2: comm syz.2.60: lblock 2 mapped to illegal pblock 2 (length 1) [ 27.030422][ T5126] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 27.030774][ T5126] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 27.030792][ T5126] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 48: comm syz.2.60: lblock 0 mapped to illegal pblock 48 (length 1) [ 27.030806][ T5126] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 27.030888][ T5126] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 27.030896][ T5126] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.60: Failed to acquire dquot type 0 [ 27.030908][ T5126] loop2: lost filesystem error report for type 5 error -117 [ 27.031050][ T5126] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 27.031059][ T5126] loop2: lost filesystem error report for type 5 error -117 [ 27.031155][ T5126] EXT4-fs error (device loop2): ext4_evict_inode:269: inode #11: comm syz.2.60: mark_inode_dirty error [ 27.031168][ T5126] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 27.031263][ T5126] EXT4-fs warning (device loop2): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 27.031300][ T5126] EXT4-fs (loop2): 1 orphan inode deleted [ 27.031770][ T5126] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 27.039789][ T5126] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 27.053113][ T3271] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 27.054689][ T3271] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 27.054711][ T3271] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:10: Failed to release dquot type 0 [ 27.064582][ T5126] EXT4-fs (loop2): changing journal_checksum during remount not supported; ignoring [ 27.067387][ T5126] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 48: comm syz.2.60: lblock 0 mapped to illegal pblock 48 (length 1) [ 27.067523][ T5126] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=-117 [ 27.087429][ T4710] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.131425][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.147458][ T5131] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 27.310925][ T4710] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.323108][ T5152] Option 'x \ %' to dns_resolver key: bad/missing value [ 27.371384][ T5156] netlink: 44 bytes leftover after parsing attributes in process `syz.0.69'. [ 27.371405][ T5156] netlink: 43 bytes leftover after parsing attributes in process `syz.0.69'. [ 27.371415][ T5156] netlink: 'syz.0.69': attribute type 5 has an invalid length. [ 28.083239][ T4716] Bluetooth: hci3: command tx timeout [ 28.083267][ T4716] Bluetooth: hci0: command tx timeout [ 28.083283][ T4716] Bluetooth: hci2: command tx timeout [ 28.083298][ T4716] Bluetooth: hci4: command tx timeout [ 28.083762][ T4714] Bluetooth: hci1: command tx timeout [ 28.272770][ T5176] dlm: plock device version mismatch: kernel (1.2.0), user (1702065510.0.0) [ 28.378220][ T5178] netlink: 'syz.0.72': attribute type 21 has an invalid length. [ 28.378239][ T5178] IPv6: NLM_F_CREATE should be specified when creating new route [ 28.378369][ T5178] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 28.378376][ T5178] IPv6: NLM_F_CREATE should be set when creating new route [ 28.378431][ T5178] IPv6: NLM_F_CREATE should be set when creating new route [ 28.378439][ T5178] IPv6: NLM_F_CREATE should be set when creating new route [ 29.546541][ T5104] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 29.596077][ T5180] __nla_validate_parse: 1 callbacks suppressed [ 29.596093][ T5180] netlink: 36 bytes leftover after parsing attributes in process `syz.3.76'. [ 29.600979][ T5183] ip6gre1: entered allmulticast mode [ 29.638649][ T5194] set_capacity_and_notify: 5 callbacks suppressed [ 29.638662][ T5194] loop1: detected capacity change from 0 to 512 [ 29.645671][ T5194] EXT4-fs: Ignoring removed orlov option [ 29.667826][ T5190] netlink: 24 bytes leftover after parsing attributes in process `syz.2.75'. [ 29.673219][ T5194] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.701203][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.711469][ T5204] netlink: 'syz.2.82': attribute type 4 has an invalid length. [ 29.749376][ T5207] loop4: detected capacity change from 0 to 2048 [ 29.753808][ T5212] Injecting memory failure for pfn 0x2193df at process virtual address 0x20ffd000 [ 29.754856][ T5209] Injecting memory failure for pfn 0x2193df at process virtual address 0x20ffd000 [ 29.759455][ T5212] Memory failure: 0x2193df: unhandlable page. [ 29.759467][ T5212] Memory failure: 0x2193df: recovery action for reserved kernel page: Ignored [ 29.759907][ T5209] Memory failure: 0x2193df: Sending SIGBUS to syz.1.83:5209 due to hardware memory corruption [ 29.759978][ T5209] Memory failure: 0x2193df: recovery action for already poisoned page: Failed [ 29.771338][ T5214] loop0: detected capacity change from 0 to 2048 [ 29.786303][ T5214] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 29.786676][ T5207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.884668][ T30] audit: type=1400 audit(29.870:2): lsm=SMACK fn=smack_inode_rename action=denied subject="_" object="l" requested=rw pid=5191 comm="syz.3.79" name="file1" dev="tmpfs" ino=104 [ 29.926358][ T5220] netlink: 24 bytes leftover after parsing attributes in process `syz.0.85'. [ 29.928062][ T5233] loop2: detected capacity change from 0 to 4096 [ 29.929365][ T5233] EXT4-fs: Ignoring removed orlov option [ 29.941256][ T5233] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.942223][ T5220] bond1: up delay (4) is not a multiple of miimon (7), value rounded to 0 ms [ 29.942238][ T5220] bond1: down delay (65664) is not a multiple of miimon (7), value rounded to 65660 ms [ 29.942253][ T5220] bond1: entered allmulticast mode [ 29.959580][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.007242][ T5240] loop2: detected capacity change from 0 to 512 [ 30.013821][ T5240] EXT4-fs error (device loop2): ext4_xattr_inode_iget:473: comm syz.2.91: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 30.013843][ T5240] loop2: lost filesystem error report for type 5 error -117 [ 30.014670][ T5240] EXT4-fs (loop2): 1 orphan inode deleted [ 30.015133][ T5240] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.036873][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.063866][ T5243] Injecting memory failure for pfn 0x2193df at process virtual address 0x20ff7000 [ 30.063944][ T5243] Memory failure: 0x2193df: Sending SIGBUS to syz.2.92:5243 due to hardware memory corruption [ 30.063959][ T5243] Memory failure: 0x2193df: recovery action for already poisoned page: Failed [ 30.162574][ T4724] Bluetooth: hci4: command tx timeout [ 30.162602][ T4724] Bluetooth: hci2: command tx timeout [ 30.162620][ T4724] Bluetooth: hci0: command tx timeout [ 30.162634][ T4724] Bluetooth: hci3: command tx timeout [ 30.162675][ T4714] Bluetooth: hci1: command tx timeout [ 30.299825][ T5252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.96'. [ 30.614310][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.640336][ T5259] ip_tables: iptables: counters copy to user failed while replacing table [ 30.647889][ T5257] loop0: detected capacity change from 0 to 1024 [ 30.648271][ T5257] EXT4-fs: Ignoring removed bh option [ 30.677718][ T5257] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.713848][ T5268] FAULT_INJECTION: forcing a failure. [ 30.713848][ T5268] name fail_futex, interval 1, probability 0, space 0, times 1 [ 30.713872][ T5268] CPU: 0 UID: 0 PID: 5268 Comm: syz.4.98 Not tainted syzkaller #0 PREEMPT [ 30.713888][ T5268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 30.713894][ T5268] Call trace: [ 30.713897][ T5268] show_stack+0x2c/0x3c (C) [ 30.713918][ T5268] __dump_stack+0x30/0x40 [ 30.713931][ T5268] dump_stack_lvl+0xd8/0x12c [ 30.713942][ T5268] dump_stack+0x1c/0x28 [ 30.713953][ T5268] should_fail_ex+0x418/0x58c [ 30.713966][ T5268] should_fail+0x14/0x24 [ 30.713977][ T5268] get_futex_key+0x1ec/0x12b0 [ 30.713988][ T5268] futex_wait_setup+0x58/0x674 [ 30.713999][ T5268] __futex_wait+0x108/0x25c [ 30.714010][ T5268] futex_wait+0x108/0x2c0 [ 30.714021][ T5268] do_futex+0x320/0x378 [ 30.714031][ T5268] __arm64_sys_futex+0x2e4/0x418 [ 30.714041][ T5268] invoke_syscall+0x98/0x244 [ 30.714053][ T5268] el0_svc_common+0xec/0x23c [ 30.714065][ T5268] do_el0_svc+0x4c/0x5c [ 30.714076][ T5268] el0_svc+0x60/0x1d8 [ 30.714087][ T5268] el0t_64_sync_handler+0x44/0x104 [ 30.714098][ T5268] el0t_64_sync+0x198/0x19c [ 30.755227][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.758514][ T5271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.103'. [ 30.863220][ T5276] ip_tables: iptables: counters copy to user failed while replacing table [ 30.928499][ T5290] loop0: detected capacity change from 0 to 1024 [ 30.935009][ T5290] EXT4-fs: Invalid want_extra_isize 1 [ 30.984118][ T5293] netlink: 'syz.1.105': attribute type 1 has an invalid length. [ 31.029537][ T5287] loop1: detected capacity change from 0 to 512 [ 31.030202][ T5295] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 31.038172][ T5287] EXT4-fs: Ignoring removed orlov option [ 31.040483][ T5287] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 31.053074][ T5287] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #16: comm syz.1.105: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 31.053098][ T5287] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 31.053261][ T5287] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.105: couldn't read orphan inode 16 (err -117) [ 31.053275][ T5287] loop1: lost filesystem error report for type 5 error -117 [ 31.053388][ T5287] EXT4-fs (loop1): 1 orphan inode deleted [ 31.053845][ T5287] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.056131][ T30] audit: type=1326 audit(31.040:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5291 comm="syz.3.107" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1778868 code=0x0 [ 31.092713][ T5287] EXT4-fs: Ignoring removed nobh option [ 31.092729][ T5287] EXT4-fs: Ignoring removed mblk_io_submit option [ 31.101919][ T5300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.109'. [ 31.115281][ T5287] EXT4-fs error (device loop1): __ext4_remount:6872: comm syz.1.105: Abort forced by user [ 31.115460][ T5287] EXT4-fs (loop1): Remounting filesystem read-only [ 31.115469][ T5287] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 31.131693][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.141318][ T5292] FAULT_INJECTION: forcing a failure. [ 31.141318][ T5292] name failslab, interval 1, probability 0, space 0, times 1 [ 31.141336][ T5292] CPU: 1 UID: 0 PID: 5292 Comm: syz.3.107 Not tainted syzkaller #0 PREEMPT [ 31.141347][ T5292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 31.141352][ T5292] Call trace: [ 31.141355][ T5292] show_stack+0x2c/0x3c (C) [ 31.141375][ T5292] __dump_stack+0x30/0x40 [ 31.141388][ T5292] dump_stack_lvl+0xd8/0x12c [ 31.141399][ T5292] dump_stack+0x1c/0x28 [ 31.141410][ T5292] should_fail_ex+0x418/0x58c [ 31.141423][ T5292] should_failslab+0xc4/0x120 [ 31.141436][ T5292] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 31.141444][ T5292] __d_alloc+0x50/0x600 [ 31.141453][ T5292] d_alloc_pseudo+0x2c/0xd8 [ 31.141462][ T5292] alloc_path_pseudo+0xe8/0x1d4 [ 31.141471][ T5292] alloc_file_pseudo+0xb0/0x198 [ 31.141479][ T5292] __arm64_sys_memfd_secret+0x258/0x4bc [ 31.141489][ T5292] invoke_syscall+0x98/0x244 [ 31.141508][ T5292] el0_svc_common+0xec/0x23c [ 31.141520][ T5292] do_el0_svc+0x4c/0x5c [ 31.141531][ T5292] el0_svc+0x60/0x1d8 [ 31.141543][ T5292] el0t_64_sync_handler+0x44/0x104 [ 31.141554][ T5292] el0t_64_sync+0x198/0x19c [ 31.208731][ T5309] faux_driver vkms: [drm] Unknown color mode 32769; guessing buffer size. [ 31.392998][ T5341] ip_tables: iptables: counters copy to user failed while replacing table [ 31.533740][ T5368] loop0: detected capacity change from 0 to 512 [ 31.534684][ T5368] EXT4-fs: Ignoring removed bh option [ 31.535495][ T5368] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 31.548523][ T5368] EXT4-fs (loop0): 1 truncate cleaned up [ 31.551021][ T5368] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.569814][ T5368] overlayfs: upper fs needs to support d_type. [ 31.576560][ T5368] overlay: Unknown parameter 'uid>00000000000000000000' [ 31.591064][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.745149][ T5411] loop0: detected capacity change from 0 to 512 [ 31.746193][ T5411] EXT4-fs: Ignoring removed oldalloc option [ 31.758749][ T5411] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.782222][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.896084][ T5432] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 31.898388][ T5432] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #15: block 3: comm syz.2.127: lblock 3 mapped to illegal pblock 3 (length 3) [ 31.899314][ T5432] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 31.899332][ T5432] EXT4-fs (loop2): This should not happen!! Data will be lost [ 31.899332][ T5432] [ 31.903819][ T5432] EXT4-fs error (device loop2): ext4_free_blocks:6719: comm syz.2.127: Freeing blocks not in datazone - block = 3, count = 3 [ 31.905271][ T5432] EXT4-fs error (device loop2): ext4_free_blocks:6719: comm syz.2.127: Freeing blocks not in datazone - block = 0, count = 16 [ 31.907522][ T5432] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.127: bg 0: block 112: padding at end of block bitmap is not set [ 31.913466][ T5432] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 65 with error 28 [ 31.913481][ T5432] EXT4-fs (loop2): This should not happen!! Data will be lost [ 31.913481][ T5432] [ 31.913493][ T5432] EXT4-fs (loop2): Total free blocks count 0 [ 31.913500][ T5432] EXT4-fs (loop2): Free/Dirty block details [ 31.913508][ T5432] EXT4-fs (loop2): free_blocks=0 [ 31.913523][ T5432] EXT4-fs (loop2): dirty_blocks=80 [ 31.913530][ T5432] EXT4-fs (loop2): Block reservation details [ 31.978654][ T5442] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.042822][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.168883][ T5470] EXT4-fs: Ignoring removed i_version option [ 32.168911][ T5470] EXT4-fs: Ignoring removed orlov option [ 32.168927][ T5470] ext3: Unknown parameter 'dont_measure' [ 32.211968][ T5470] nfs: Bad value for 'port' [ 32.433933][ T5496] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.134: bad orphan inode 15 [ 32.433953][ T5496] loop3: lost filesystem error report for type 5 error -117 [ 32.434079][ T5496] ext4_test_bit(bit=14, block=18) = 1 [ 32.434086][ T5496] is_bad_inode(inode)=0 [ 32.434090][ T5496] NEXT_ORPHAN(inode)=1023 [ 32.434094][ T5496] max_ino=32 [ 32.434097][ T5496] i_nlink=0 [ 32.434260][ T5496] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2933: inode #15: comm syz.3.134: corrupted xattr block 19: invalid header [ 32.434273][ T5496] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 32.434378][ T5496] EXT4-fs warning (device loop3): ext4_evict_inode:288: xattr delete (err -117) [ 32.435463][ T5496] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 32.548361][ T5502] syzkaller1: entered promiscuous mode [ 32.548380][ T5502] syzkaller1: entered allmulticast mode [ 33.068373][ T5519] EXT4-fs error (device loop1): ext4_xattr_inode_iget:473: comm syz.1.136: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 33.068396][ T5519] loop1: lost filesystem error report for type 5 error -117 [ 33.068600][ T5519] EXT4-fs (loop1): 1 orphan inode deleted [ 33.069042][ T5519] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.099312][ T5524] EXT4-fs: Ignoring removed nomblk_io_submit option [ 33.124047][ T5524] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.131999][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.145884][ T5522] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.176546][ T5528] netlink: 232 bytes leftover after parsing attributes in process `syz.2.139'. [ 33.179650][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.200836][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.210598][ T5532] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.280223][ T5536] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 33.280413][ T5536] netlink: 44 bytes leftover after parsing attributes in process `syz.4.141'. [ 33.280427][ T5536] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 33.291861][ T5538] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.386041][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.398221][ T4710] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 33.436994][ T5551] ip_tables: iptables: counters copy to user failed while replacing table [ 33.472131][ T12] IPVS: starting estimator thread 0... [ 33.520971][ T5551] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 33.553150][ T5553] IPVS: using max 59 ests per chain, 141600 per kthread [ 33.571394][ T5551] bond2 (unregistering): Released all slaves [ 33.599329][ T5560] Bluetooth: MGMT ver 1.23 [ 33.695046][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.824180][ T5570] EXT4-fs error (device loop0): ext4_xattr_inode_iget:473: comm syz.0.150: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 33.824207][ T5570] loop0: lost filesystem error report for type 5 error -117 [ 33.824389][ T5570] EXT4-fs (loop0): 1 orphan inode deleted [ 33.824829][ T5570] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.860243][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.865651][ T5573] Soft offlining pfn 0x1393f2 at process virtual address 0x20000000 [ 33.899528][ T5573] Soft offlining pfn 0x122b43 at process virtual address 0x20001000 [ 33.899629][ T5573] Soft offlining pfn 0x1393f3 at process virtual address 0x20002000 [ 34.047457][ T5577] netlink: 316 bytes leftover after parsing attributes in process `syz.0.152'. [ 34.391193][ T5581] EXT4-fs: Ignoring removed orlov option [ 34.398754][ T5581] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.512237][ T5584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.154'. [ 34.540972][ T5584] EXT4-fs: Ignoring removed i_version option [ 34.541233][ T5584] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 34.603046][ T4714] Bluetooth: hci0: ACL packet for unknown connection handle 1452 [ 34.605942][ T5584] fuse: Bad value for 'user_id' [ 34.605952][ T5584] fuse: Bad value for 'user_id' [ 34.608194][ T5584] xt_TPROXY: Can be used only with -p tcp or -p udp [ 34.673691][ T5588] __nla_validate_parse: 1 callbacks suppressed [ 34.673709][ T5588] netlink: 60 bytes leftover after parsing attributes in process `syz.2.155'. [ 34.824537][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 34.826228][ T5601] set_capacity_and_notify: 13 callbacks suppressed [ 34.826237][ T5601] loop3: detected capacity change from 0 to 512 [ 34.839451][ T5601] ext4: Unknown parameter './proc' [ 34.911136][ T5608] netlink: 'syz.4.158': attribute type 5 has an invalid length. [ 34.913557][ T5608] loop4: detected capacity change from 0 to 256 [ 35.896612][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.939598][ T5608] netlink: 16 bytes leftover after parsing attributes in process `syz.4.158'. [ 36.583091][ T5649] netlink: 112 bytes leftover after parsing attributes in process `syz.0.166'. [ 36.883101][ T4714] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 36.901469][ T5692] netlink: 16 bytes leftover after parsing attributes in process `syz.1.169'. [ 36.995682][ T5715] ip_tables: iptables: counters copy to user failed while replacing table [ 36.996721][ T5715] ip_tables: iptables: counters copy to user failed while replacing table [ 37.010379][ T5710] FAULT_INJECTION: forcing a failure. [ 37.010379][ T5710] name fail_futex, interval 1, probability 0, space 0, times 0 [ 37.010400][ T5710] CPU: 0 UID: 0 PID: 5710 Comm: syz.2.172 Not tainted syzkaller #0 PREEMPT [ 37.010411][ T5710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 37.010416][ T5710] Call trace: [ 37.010419][ T5710] show_stack+0x2c/0x3c (C) [ 37.010437][ T5710] __dump_stack+0x30/0x40 [ 37.010451][ T5710] dump_stack_lvl+0xd8/0x12c [ 37.010460][ T5710] dump_stack+0x1c/0x28 [ 37.010469][ T5710] should_fail_ex+0x418/0x58c [ 37.010483][ T5710] should_fail+0x14/0x24 [ 37.010501][ T5710] get_futex_key+0xd0c/0x12b0 [ 37.010510][ T5710] futex_wake+0x10c/0x594 [ 37.010519][ T5710] do_futex+0x2c4/0x378 [ 37.010528][ T5710] mm_exit_exec_release+0x190/0x27c [ 37.010536][ T5710] exit_mm+0x50/0x1f0 [ 37.010546][ T5710] do_exit+0x524/0x1a74 [ 37.010555][ T5710] do_group_exit+0x198/0x238 [ 37.010565][ T5710] get_signal+0xfb0/0x1094 [ 37.010573][ T5710] arch_do_signal_or_restart+0x288/0x444c [ 37.010582][ T5710] exit_to_user_mode_loop+0x70/0x17c [ 37.010592][ T5710] el0_svc+0x12c/0x1d8 [ 37.010602][ T5710] el0t_64_sync_handler+0x44/0x104 [ 37.010611][ T5710] el0t_64_sync+0x198/0x19c [ 37.077412][ T5730] loop4: detected capacity change from 0 to 512 [ 37.088424][ T5730] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 37.088563][ T5730] System zones: 1-12 [ 37.094028][ T5732] batman_adv: batadv0: Adding interface: syz_tun [ 37.094037][ T5732] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.094052][ T5732] batman_adv: batadv0: Interface activated: syz_tun [ 37.097733][ T5730] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #12: comm syz.4.178: missing EA_INODE flag [ 37.097750][ T5730] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 37.097897][ T5730] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.178: error while reading EA inode 12 err=-117 [ 37.097909][ T5730] loop4: lost filesystem error report for type 5 error -117 [ 37.098034][ T5730] EXT4-fs (loop4): 1 orphan inode deleted [ 37.098472][ T5730] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.184407][ T5741] loop2: detected capacity change from 0 to 4096 [ 37.186629][ T5741] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 37.186655][ T5741] EXT4-fs (loop2): Test dummy encryption mode enabled [ 37.187602][ T5741] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002] [ 37.187639][ T5741] System zones: 0-5 [ 37.188822][ T5741] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.289023][ T5761] fuse: Bad value for 'fd' [ 38.393024][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.393139][ T5773] ip_tables: iptables: counters copy to user failed while replacing table [ 38.393669][ T5773] netlink: 'syz.1.183': attribute type 4 has an invalid length. [ 38.393918][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.399131][ T5773] netlink: 'syz.1.183': attribute type 10 has an invalid length. [ 38.399145][ T5773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.183'. [ 38.400007][ T5773] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 38.481713][ T5782] loop2: detected capacity change from 0 to 4096 [ 38.482072][ T5782] EXT4-fs: Ignoring removed mblk_io_submit option [ 38.483188][ T5782] EXT4-fs (loop2): Test dummy encryption mode enabled [ 38.485174][ T5782] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.517019][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.566142][ T5790] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 38.589676][ T5794] netlink: 24 bytes leftover after parsing attributes in process `syz.4.191'. [ 38.620125][ T5796] loop4: detected capacity change from 0 to 2048 [ 38.641291][ T5796] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.664322][ T5800] lo speed is unknown, defaulting to 1000 [ 38.664350][ T5800] lo speed is unknown, defaulting to 1000 [ 38.664698][ T5800] FAULT_INJECTION: forcing a failure. [ 38.664698][ T5800] name failslab, interval 1, probability 0, space 0, times 0 [ 38.664714][ T5800] CPU: 0 UID: 0 PID: 5800 Comm: syz.2.193 Not tainted syzkaller #0 PREEMPT [ 38.664725][ T5800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 38.664731][ T5800] Call trace: [ 38.664734][ T5800] show_stack+0x2c/0x3c (C) [ 38.664755][ T5800] __dump_stack+0x30/0x40 [ 38.664770][ T5800] dump_stack_lvl+0xd8/0x12c [ 38.664781][ T5800] dump_stack+0x1c/0x28 [ 38.664792][ T5800] should_fail_ex+0x418/0x58c [ 38.664806][ T5800] should_failslab+0xc4/0x120 [ 38.664820][ T5800] kmem_cache_alloc_noprof+0x94/0x5d4 [ 38.664829][ T5800] __kernfs_new_node+0xf0/0x7d8 [ 38.664841][ T5800] kernfs_new_node+0xe8/0x130 [ 38.664850][ T5800] kernfs_create_dir_ns+0x58/0x138 [ 38.664861][ T5800] sysfs_create_dir_ns+0x120/0x1f4 [ 38.664873][ T5800] kobject_add_internal+0x290/0x6f0 [ 38.664887][ T5800] kobject_add_varg+0x9c/0xe8 [ 38.664899][ T5800] kobject_add+0x110/0x1c8 [ 38.664911][ T5800] device_add+0x394/0x9e0 [ 38.664921][ T5800] ib_register_device+0x73c/0x9e4 [ 38.664932][ T5800] siw_newlink+0x74c/0xbe0 [ 38.664944][ T5800] nldev_newlink+0x47c/0x4f4 [ 38.664956][ T5800] rdma_nl_rcv+0x4f0/0x814 [ 38.664968][ T5800] netlink_unicast+0x600/0x7f8 [ 38.664984][ T5800] netlink_sendmsg+0x648/0x948 [ 38.664994][ T5800] __sock_sendmsg+0xc8/0x17c [ 38.665005][ T5800] ____sys_sendmsg+0x3d0/0x6c8 [ 38.665016][ T5800] ___sys_sendmsg+0x198/0x224 [ 38.665026][ T5800] __sys_sendmsg+0x158/0x204 [ 38.665036][ T5800] __arm64_sys_sendmsg+0x88/0x9c [ 38.665047][ T5800] invoke_syscall+0x98/0x244 [ 38.665059][ T5800] el0_svc_common+0xec/0x23c [ 38.665071][ T5800] do_el0_svc+0x4c/0x5c [ 38.665082][ T5800] el0_svc+0x60/0x1d8 [ 38.665093][ T5800] el0t_64_sync_handler+0x44/0x104 [ 38.665104][ T5800] el0t_64_sync+0x198/0x19c [ 38.665560][ T5800] kobject: kobject_add_internal failed for syz_device_name_32_chars_1234567 (error: -12 parent: infiniband) [ 38.665798][ T5800] siw: device registration error -12 [ 38.958644][ T5813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.196'. [ 38.966637][ T5813] loop0: detected capacity change from 0 to 256 [ 39.478329][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.561112][ T5832] input: syz0 as /devices/virtual/input/input5 [ 39.581003][ T5834] loop2: detected capacity change from 0 to 1024 [ 39.585027][ T5834] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 39.585077][ T5834] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 39.586617][ T5834] EXT4-fs (loop2): invalid journal inode [ 39.630111][ T5832] loop3: detected capacity change from 0 to 512 [ 39.647218][ T5832] vfat: Unknown parameter '0xffffffffffffffffhc.Y͕)۫CzzNV5xxoO҇2WZ' [ 39.809627][ T30] audit: type=1326 audit(39.790:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5856 comm="syz.1.212" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe178868 code=0x0 [ 40.387551][ T5871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.216'. [ 40.387571][ T5871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.216'. [ 40.387589][ T5871] netlink: 'syz.4.216': attribute type 15 has an invalid length. [ 40.394952][ T5870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.216'. [ 40.396219][ T5871] Injecting memory failure for pfn 0x13bf5e at process virtual address 0x20000000 [ 40.405007][ T5871] Memory failure: 0x13bf5e: Sending SIGBUS to syz.4.216:5871 due to hardware memory corruption [ 40.405075][ T5871] Memory failure: 0x13bf5e: recovery action for dirty LRU page: Recovered [ 40.405098][ T5871] Injecting memory failure for pfn 0x2193df at process virtual address 0x20001000 [ 40.405116][ T5871] Memory failure: 0x2193df: Sending SIGBUS to syz.4.216:5871 due to hardware memory corruption [ 40.405125][ T5871] Memory failure: 0x2193df: recovery action for already poisoned page: Failed [ 40.472964][ T5879] loop4: detected capacity change from 0 to 512 [ 40.481334][ T5879] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.490608][ T5879] EXT4-fs error (device loop4): __ext4_find_entry:1628: inode #12: comm syz.4.217: checksumming directory block 0 [ 40.491337][ T5879] overlayfs: failed to create directory ./file0/work (errno: 74); mounting read-only [ 40.516795][ T4715] EXT4-fs error (device loop4): ext4_lookup:1787: inode #11: comm syz-executor: iget: checksum invalid [ 40.517685][ T4715] EXT4-fs error (device loop4): ext4_lookup:1787: inode #11: comm syz-executor: iget: checksum invalid [ 40.639063][ T30] audit: type=1326 audit(40.620:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5894 comm="syz.3.223" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1778868 code=0x0 [ 40.717596][ T5899] netlink: 'syz.2.225': attribute type 10 has an invalid length. [ 40.816202][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.895386][ T4716] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 40.895763][ T4716] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 40.896084][ T4716] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 40.896601][ T4716] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 40.896989][ T4716] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 41.035586][ T5914] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.035653][ T5914] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.035704][ T5914] bridge_slave_0: entered allmulticast mode [ 41.036115][ T5914] bridge_slave_0: entered promiscuous mode [ 41.038315][ T5914] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.038341][ T5914] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.038389][ T5914] bridge_slave_1: entered allmulticast mode [ 41.038798][ T5914] bridge_slave_1: entered promiscuous mode [ 41.052388][ T5914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.053440][ T5914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.059941][ T5914] team0: Port device team_slave_0 added [ 41.060656][ T5914] team0: Port device team_slave_1 added [ 41.066869][ T5914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.066877][ T5914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.066888][ T5914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.067413][ T5914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.067419][ T5914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.067434][ T5914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.078160][ T5914] hsr_slave_0: entered promiscuous mode [ 41.078422][ T5914] hsr_slave_1: entered promiscuous mode [ 41.078599][ T5914] debugfs: 'hsr0' already exists in 'hsr' [ 41.078610][ T5914] Cannot create hsr debugfs directory [ 41.123398][ T5914] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 41.125077][ T5914] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 41.125459][ T5914] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 41.126736][ T5914] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 41.127070][ T5914] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 41.127953][ T5914] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 41.128278][ T5914] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 41.129165][ T5914] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 41.137045][ T5914] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.137073][ T5914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.137163][ T5914] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.137191][ T5914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.150793][ T5914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.154457][ T5914] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.256179][ T5914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.338716][ T5955] loop1: detected capacity change from 0 to 512 [ 41.343296][ T5914] veth0_vlan: entered promiscuous mode [ 41.346015][ T5914] veth1_vlan: entered promiscuous mode [ 41.355721][ T5914] veth0_macvtap: entered promiscuous mode [ 41.357080][ T5914] veth1_macvtap: entered promiscuous mode [ 41.361558][ T5955] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 41.367309][ T5914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.368691][ T5914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.370349][ T3313] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.370386][ T3313] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.370410][ T3313] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.370434][ T3313] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.381231][ T5955] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.234: bg 0: block 104: invalid block bitmap [ 41.381258][ T5955] loop1: lost filesystem error report for type 5 error -117 [ 41.381680][ T5955] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 41.381691][ T5955] loop1: lost filesystem error report for type 5 error -117 [ 41.381824][ T5955] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.234: invalid indirect mapped block 1 (level 1) [ 41.381836][ T5955] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 41.384515][ T5955] EXT4-fs (loop1): 1 truncate cleaned up [ 41.385903][ T5955] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.420899][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.420912][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.434839][ T3166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.434855][ T3166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.436939][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.476729][ T5966] netlink: 'syz.1.236': attribute type 10 has an invalid length. [ 41.479733][ T5966] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 41.480633][ T5966] team0: Port device netdevsim1 added [ 41.480782][ T5966] netlink: 'syz.1.236': attribute type 10 has an invalid length. [ 41.511045][ T5969] netlink: 'syz.5.232': attribute type 2 has an invalid length. [ 41.628048][ T5986] loop1: detected capacity change from 0 to 2048 [ 41.655007][ T5986] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.661958][ T5986] fs-verity (loop1, inode 16): Error -22 reading file data [ 41.661995][ T5986] fs-verity (loop1, inode 16): Error -22 building Merkle tree [ 41.675801][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.722772][ T6002] loop5: detected capacity change from 0 to 2048 [ 41.723188][ T6002] ext4: Unknown parameter 'nouser_xattr' [ 41.777008][ T6000] FAULT_INJECTION: forcing a failure. [ 41.777008][ T6000] name fail_futex, interval 1, probability 0, space 0, times 0 [ 41.777028][ T6000] CPU: 0 UID: 0 PID: 6000 Comm: syz.3.246 Not tainted syzkaller #0 PREEMPT [ 41.777037][ T6000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 41.777042][ T6000] Call trace: [ 41.777044][ T6000] show_stack+0x2c/0x3c (C) [ 41.777061][ T6000] __dump_stack+0x30/0x40 [ 41.777071][ T6000] dump_stack_lvl+0xd8/0x12c [ 41.777081][ T6000] dump_stack+0x1c/0x28 [ 41.777090][ T6000] should_fail_ex+0x418/0x58c [ 41.777100][ T6000] should_fail+0x14/0x24 [ 41.777110][ T6000] get_futex_key+0x1ec/0x12b0 [ 41.777119][ T6000] futex_wait_setup+0x58/0x674 [ 41.777128][ T6000] __futex_wait+0x108/0x25c [ 41.777137][ T6000] futex_wait+0x108/0x2c0 [ 41.777146][ T6000] do_futex+0x320/0x378 [ 41.777154][ T6000] __arm64_sys_futex+0x2e4/0x418 [ 41.777163][ T6000] invoke_syscall+0x98/0x244 [ 41.777172][ T6000] el0_svc_common+0xec/0x23c [ 41.777182][ T6000] do_el0_svc+0x4c/0x5c [ 41.777190][ T6000] el0_svc+0x60/0x1d8 [ 41.777200][ T6000] el0t_64_sync_handler+0x44/0x104 [ 41.777209][ T6000] el0t_64_sync+0x198/0x19c [ 42.209261][ T6024] loop2: detected capacity change from 0 to 512 [ 42.284085][ T6030] loop2: detected capacity change from 0 to 512 [ 42.285384][ T6030] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 42.297063][ T6030] syz.2.252: attempt to access beyond end of device [ 42.297063][ T6030] loop2: rw=8912896, sector=17179852706, nr_sectors = 16 limit=512 [ 42.300306][ T6030] syz.2.252: attempt to access beyond end of device [ 42.300306][ T6030] loop2: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 42.305881][ T6030] syz.2.252: attempt to access beyond end of device [ 42.305881][ T6030] loop2: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 42.454100][ T6035] loop1: detected capacity change from 0 to 2048 [ 42.463858][ T6035] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.469276][ T6035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.254'. [ 42.478684][ T6035] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #13: comm syz.1.254: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 24836(4), depth 248(248) [ 42.757097][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.902003][ T6046] mmap: syz.5.258 (6046): VmData 164151296 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 42.962600][ T4714] Bluetooth: hci2: command tx timeout [ 42.998834][ T6056] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 43.036285][ T6060] loop3: detected capacity change from 0 to 512 [ 43.036595][ T6060] ext4: Unknown parameter '.' [ 43.360931][ T6074] loop2: detected capacity change from 0 to 512 [ 43.361155][ T6074] ext4: Unknown parameter './proc' [ 43.379309][ T6079] loop3: detected capacity change from 0 to 1024 [ 43.380824][ T6079] EXT4-fs: Ignoring removed bh option [ 43.387229][ T6074] overlayfs: failed to resolve './bus': -2 [ 43.389324][ T6062] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 43.389336][ T6062] unable to read xattr id index table [ 43.392027][ T6062] SQUASHFS error: zlib decompression failed, data probably corrupt [ 43.392047][ T6062] SQUASHFS error: Failed to read block 0x9b: -5 [ 43.392055][ T6062] SQUASHFS error: Unable to read metadata cache entry [99] [ 43.392062][ T6062] SQUASHFS error: Unable to read inode 0x127 [ 43.402949][ T6079] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.407891][ T6079] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 43.467259][ T30] audit: type=1326 audit(43.450:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6086 comm="syz.1.267" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe178868 code=0x7ffc0000 [ 43.467802][ T30] audit: type=1326 audit(43.450:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6086 comm="syz.1.267" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe178868 code=0x7ffc0000 [ 43.469534][ T30] audit: type=1326 audit(43.450:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6086 comm="syz.1.267" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe178868 code=0x7ffc0000 [ 43.473235][ T30] audit: type=1326 audit(43.460:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6086 comm="syz.1.267" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe178868 code=0x7ffc0000 [ 43.477581][ T6085] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 43.484818][ T30] audit: type=1326 audit(43.470:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6086 comm="syz.1.267" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbe178868 code=0x7ffc0000 [ 43.484839][ T30] audit: type=1326 audit(43.470:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6086 comm="syz.1.267" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe178868 code=0x7ffc0000 [ 43.484855][ T30] audit: type=1326 audit(43.470:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6086 comm="syz.1.267" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe178868 code=0x7ffc0000 [ 43.486527][ T30] audit: type=1326 audit(43.470:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6086 comm="syz.1.267" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe178868 code=0x7ffc0000 [ 43.546372][ T4710] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.590465][ T6098] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.620258][ T6102] SET target dimension over the limit! [ 44.097404][ T4714] Bluetooth: hci0: command tx timeout [ 44.115498][ T6119] netlink: 36 bytes leftover after parsing attributes in process `syz.0.274'. [ 44.145084][ T6120] netlink: 8 bytes leftover after parsing attributes in process `syz.5.275'. [ 44.506135][ T6140] netlink: 8 bytes leftover after parsing attributes in process `syz.5.282'. [ 44.634084][ T6140] netlink: 8 bytes leftover after parsing attributes in process `syz.5.282'. [ 45.040584][ T4708] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.042910][ T4716] Bluetooth: hci2: command tx timeout [ 45.141620][ T6154] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c02c, mo2=0002] [ 45.141748][ T6154] EXT4-fs (loop0): orphan cleanup on readonly fs [ 45.146996][ T6154] EXT4-fs warning (device loop0): ext4_enable_quotas:7304: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 45.152079][ T6154] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 45.152401][ T6154] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #13: comm syz.0.287: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 45.153346][ T6154] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 45.164685][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 45.164700][ C0] EXT4-fs (loop0): last error at time 45: ext4_ext_check_inode:521: inode 13 [ 45.171915][ T6154] EXT4-fs (loop0): Remounting filesystem read-only [ 45.178535][ T6154] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.207836][ T6154] netlink: 16 bytes leftover after parsing attributes in process `syz.0.287'. [ 45.337874][ T6159] capability: warning: `syz.1.285' uses deprecated v2 capabilities in a way that may be insecure [ 45.366329][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.164466][ T4716] Bluetooth: hci0: command 0x0406 tx timeout [ 47.132689][ T4714] Bluetooth: hci2: command tx timeout [ 47.287464][ T6168] set_capacity_and_notify: 5 callbacks suppressed [ 47.287477][ T6168] loop5: detected capacity change from 0 to 512 [ 47.306885][ T6176] FAULT_INJECTION: forcing a failure. [ 47.306885][ T6176] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 47.306902][ T6176] CPU: 0 UID: 0 PID: 6176 Comm: syz.5.294 Not tainted syzkaller #0 PREEMPT [ 47.306911][ T6176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 47.306916][ T6176] Call trace: [ 47.306918][ T6176] show_stack+0x2c/0x3c (C) [ 47.306937][ T6176] __dump_stack+0x30/0x40 [ 47.306947][ T6176] dump_stack_lvl+0xd8/0x12c [ 47.306957][ T6176] dump_stack+0x1c/0x28 [ 47.306966][ T6176] should_fail_ex+0x418/0x58c [ 47.306977][ T6176] should_fail+0x14/0x24 [ 47.306986][ T6176] should_fail_usercopy+0x20/0x30 [ 47.306996][ T6176] _inline_copy_from_user+0x3c/0x174 [ 47.307006][ T6176] get_timespec64+0x9c/0x188 [ 47.307014][ T6176] __arm64_sys_mq_timedsend+0x138/0x220 [ 47.307024][ T6176] invoke_syscall+0x98/0x244 [ 47.307034][ T6176] el0_svc_common+0xec/0x23c [ 47.307043][ T6176] do_el0_svc+0x4c/0x5c [ 47.307052][ T6176] el0_svc+0x60/0x1d8 [ 47.307062][ T6176] el0t_64_sync_handler+0x44/0x104 [ 47.307071][ T6176] el0t_64_sync+0x198/0x19c [ 47.356541][ T6172] netlink: 28 bytes leftover after parsing attributes in process `syz.2.292'. [ 47.499174][ T6196] netlink: 20 bytes leftover after parsing attributes in process `syz.2.297'. [ 47.499239][ T6196] netlink: 20 bytes leftover after parsing attributes in process `syz.2.297'. [ 47.499287][ T6196] netlink: 20 bytes leftover after parsing attributes in process `syz.2.297'. [ 47.499332][ T6196] netlink: 20 bytes leftover after parsing attributes in process `syz.2.297'. [ 47.499392][ T6196] netlink: 20 bytes leftover after parsing attributes in process `syz.2.297'. [ 47.499434][ T6196] netlink: 20 bytes leftover after parsing attributes in process `syz.2.297'. [ 47.499479][ T6196] netlink: 20 bytes leftover after parsing attributes in process `syz.2.297'. [ 47.499529][ T6196] netlink: 20 bytes leftover after parsing attributes in process `syz.2.297'. [ 47.499575][ T6196] netlink: 20 bytes leftover after parsing attributes in process `syz.2.297'. [ 47.719585][ T6201] loop2: detected capacity change from 0 to 1024 [ 47.870520][ T6205] loop2: detected capacity change from 0 to 512 [ 47.875917][ T6205] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 47.898637][ T6205] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.301: bg 0: block 384: padding at end of block bitmap is not set [ 47.898661][ T6205] loop2: lost filesystem error report for type 5 error -117 [ 47.899769][ T6205] EXT4-fs (loop2): Remounting filesystem read-only [ 47.900427][ T6205] EXT4-fs (loop2): 1 truncate cleaned up [ 47.902230][ T6205] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.950986][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.128846][ T6213] loop2: detected capacity change from 0 to 512 [ 48.157804][ T6213] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.439788][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 48.439803][ T30] audit: type=1326 audit(48.420:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6220 comm="syz.0.306" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff8cd7230c code=0x7ffc0000 [ 48.439879][ T30] audit: type=1326 audit(48.420:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6220 comm="syz.0.306" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff8db679d4 code=0x7ffc0000 [ 48.439988][ T30] audit: type=1326 audit(48.420:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6220 comm="syz.0.306" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff8cd7230c code=0x7ffc0000 [ 48.440750][ T30] audit: type=1326 audit(48.420:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6220 comm="syz.0.306" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff8db679d4 code=0x7ffc0000 [ 48.440867][ T30] audit: type=1326 audit(48.420:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6220 comm="syz.0.306" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff8cd7230c code=0x7ffc0000 [ 48.440934][ T30] audit: type=1326 audit(48.420:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6220 comm="syz.0.306" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff8db679d4 code=0x7ffc0000 [ 48.441044][ T30] audit: type=1326 audit(48.420:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6220 comm="syz.0.306" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff8cd7230c code=0x7ffc0000 [ 48.441108][ T30] audit: type=1326 audit(48.420:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6220 comm="syz.0.306" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff8db679d4 code=0x7ffc0000 [ 48.441222][ T30] audit: type=1326 audit(48.420:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6220 comm="syz.0.306" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff8cd7230c code=0x7ffc0000 [ 48.441288][ T30] audit: type=1326 audit(48.420:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6220 comm="syz.0.306" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff8db679d4 code=0x7ffc0000 [ 48.999325][ T6232] loop5: detected capacity change from 0 to 512 [ 48.999657][ T6232] EXT4-fs: Ignoring removed nobh option [ 48.999686][ T6232] EXT4-fs: Ignoring removed i_version option [ 49.014497][ T6232] EXT4-fs: Mount option(s) incompatible with ext2 [ 49.069024][ T6231] nfs: Unknown parameter 'quota' [ 49.069467][ T6231] tmpfs: Cannot enable quota on remount [ 49.230120][ T6250] tipc: Started in network mode [ 49.230142][ T6250] tipc: Node identity ac14140f, cluster identity 4711 [ 49.230642][ T6250] tipc: Enabled bearer , priority 10 [ 49.260992][ T6256] nvme_fabrics: missing parameter 'transport=%s' [ 49.261007][ T6256] nvme_fabrics: missing parameter 'nqn=%s' [ 49.278969][ T6256] nvme_fabrics: missing parameter 'transport=%s' [ 49.278983][ T6256] nvme_fabrics: missing parameter 'nqn=%s' [ 49.295190][ T6256] nvme_fabrics: missing parameter 'transport=%s' [ 49.295203][ T6256] nvme_fabrics: missing parameter 'nqn=%s' [ 49.306549][ T6256] nvme_fabrics: missing parameter 'transport=%s' [ 49.306560][ T6256] nvme_fabrics: missing parameter 'nqn=%s' [ 49.323252][ T6256] nvme_fabrics: missing parameter 'transport=%s' [ 49.323263][ T6256] nvme_fabrics: missing parameter 'nqn=%s' [ 49.330178][ T6256] nvme_fabrics: missing parameter 'transport=%s' [ 49.330188][ T6256] nvme_fabrics: missing parameter 'nqn=%s' [ 49.348902][ T6256] nvme_fabrics: missing parameter 'transport=%s' [ 49.348917][ T6256] nvme_fabrics: missing parameter 'nqn=%s' [ 49.358554][ T6256] nvme_fabrics: missing parameter 'transport=%s' [ 49.358565][ T6256] nvme_fabrics: missing parameter 'nqn=%s' [ 49.382212][ T6256] nvme_fabrics: missing parameter 'transport=%s' [ 49.382227][ T6256] nvme_fabrics: missing parameter 'nqn=%s' [ 49.387855][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.420128][ T6256] nvme_fabrics: missing parameter 'transport=%s' [ 49.420142][ T6256] nvme_fabrics: missing parameter 'nqn=%s' [ 49.429185][ T6273] loop1: detected capacity change from 0 to 256 [ 49.452128][ T6271] loop0: detected capacity change from 0 to 1024 [ 49.477121][ T6271] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 49.504439][ T6258] nvme_fabrics: missing parameter 'transport=%s' [ 49.504453][ T6258] nvme_fabrics: missing parameter 'nqn=%s' [ 49.556420][ T6278] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 49.580286][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.768376][ T6304] trusted_key: encrypted_key: insufficient parameters specified [ 50.343251][ T1154] tipc: Node number set to 2886997007 [ 50.368483][ T6328] loop5: detected capacity change from 0 to 256 [ 50.368894][ T6328] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 56.346513][ C1] sched: DL replenish lagged too much [ 65.652452][ T1593] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.662804][ T1593] ieee802154 phy1 wpan1: encryption failed: -22 [ 120.803521][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 55s! [ 120.803565][ C0] Showing busy workqueues and worker pools: [ 120.803570][ C0] workqueue events: flags=0x100 [ 120.803608][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=4 refcnt=5 [ 120.803626][ C0] pending: 4*nsim_dev_hwstats_traffic_work [ 120.803646][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=15 refcnt=16 [ 120.803662][ C0] in-flight: 24:request_firmware_work_func for 117s [ 120.803682][ C0] pending: 2*nsim_dev_hwstats_traffic_work, free_obj_work, 2*psi_avgs_work, ovs_dp_masks_rebalance, psi_avgs_work, xfrm_state_gc_task, 3*ovs_dp_masks_rebalance, delayed_vfree_work, jump_label_update_timeout, psi_avgs_work [ 120.803764][ C0] workqueue events_unbound: flags=0x2 [ 120.803768][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=17 refcnt=18 [ 120.803782][ C0] in-flight: 3271:cfg80211_wiphy_work for 67s cfg80211_wiphy_work ,142:cfg80211_wiphy_work for 0s ,3166:cfg80211_wiphy_work for 60s cfg80211_wiphy_work ,2949:cfg80211_wiphy_work for 45s ,40:cfg80211_wiphy_work for 9s [ 120.803850][ C0] pending: cfg80211_wiphy_work, 4*macvlan_process_broadcast, 3*nsim_dev_trap_report_work, flush_memcg_stats_dwork, cfg80211_wiphy_work [ 120.803887][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=23 refcnt=24 [ 120.803899][ C0] in-flight: 720:cfg80211_wiphy_work for 66s cfg80211_wiphy_work ,3468:cfg80211_wiphy_work for 64s cfg80211_wiphy_work ,1235:cfg80211_wiphy_work for 58s cfg80211_wiphy_work ,3126:cfg80211_wiphy_work for 67s cfg80211_wiphy_work ,49:cfg80211_wiphy_work for 65s cfg80211_wiphy_work ,12:cfg80211_wiphy_work for 55s cfg80211_wiphy_work [ 120.803992][ C0] pending: 2*nsim_dev_trap_report_work, macvlan_process_broadcast, nsim_dev_trap_report_work, toggle_allocation_gate, 6*macvlan_process_broadcast [ 120.804027][ C0] workqueue events_power_efficient: flags=0x82 [ 120.804032][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=6 refcnt=7 [ 120.804044][ C0] in-flight: 3313:neigh_periodic_work for 54s [ 120.804062][ C0] pending: neigh_periodic_work, gc_worker, fb_flashcursor, 2*neigh_managed_work [ 120.804093][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 120.804106][ C0] pending: wg_ratelimiter_gc_entries, reg_check_chans_work [ 120.804126][ C0] workqueue events_dfl_long: flags=0x2 [ 120.804130][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=5 refcnt=6 [ 120.804143][ C0] pending: 5*defense_work_handler [ 120.804157][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 120.804169][ C0] pending: 2*defense_work_handler [ 120.804186][ C0] workqueue mm_percpu_wq: flags=0x108 [ 120.804191][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 120.804206][ C0] pending: vmstat_update [ 120.804221][ C0] workqueue writeback: flags=0x4a [ 120.804226][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 120.804238][ C0] in-flight: 14:wb_workfn for 58s [ 120.804295][ C0] workqueue bat_events: flags=0x6000a [ 120.804299][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=54 MAYDAY [ 120.804312][ C0] in-flight: 2853(RESCUER):batadv_dat_purge for 7s [ 120.804329][ C0] pending: mayday_cursor_func [ 120.804339][ C0] inactive: 2*batadv_bla_periodic_work, 2*batadv_dat_purge, 2*batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, 5*batadv_tt_purge, 2*batadv_iv_send_outstanding_bat_ogm_packet, batadv_purge_orig, 2*batadv_iv_send_outstanding_bat_ogm_packet, 5*batadv_purge_orig, 16*batadv_iv_send_outstanding_bat_ogm_packet, 6*batadv_mcast_mla_update, batadv_bla_periodic_work, batadv_dat_purge, batadv_tt_purge [ 120.804454][ C0] workqueue wg-kex-wg0: flags=0x6 [ 120.804458][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 120.804471][ C0] pending: wg_packet_handshake_send_worker [ 120.804484][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 120.804489][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 120.804510][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 120.804528][ C0] workqueue wg-kex-wg0: flags=0x6 [ 120.804534][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 120.804547][ C0] pending: wg_packet_handshake_send_worker [ 120.804558][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 120.804563][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 120.804577][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 120.804592][ C0] workqueue wg-kex-wg1: flags=0x6 [ 120.804596][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 120.804609][ C0] pending: wg_packet_handshake_send_worker [ 120.804622][ C0] workqueue wg-kex-wg1: flags=0x6 [ 120.804627][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 120.804639][ C0] pending: wg_packet_handshake_send_worker [ 120.804650][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 120.804656][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 120.804670][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 120.804685][ C0] workqueue wg-kex-wg2: flags=0x6 [ 120.804689][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 120.804702][ C0] pending: wg_packet_handshake_send_worker [ 120.804714][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 120.804719][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 120.804734][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 120.804749][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 120.804754][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 120.804768][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 120.804783][ C0] workqueue wg-kex-wg0: flags=0x6 [ 120.804787][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 120.804800][ C0] pending: wg_packet_handshake_send_worker [ 120.804812][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 120.804817][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 120.804832][ C0] pending: wg_packet_tx_worker, wg_packet_encrypt_worker [ 120.804846][ C0] workqueue wg-kex-wg1: flags=0x6 [ 120.804851][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 120.804864][ C0] pending: wg_packet_handshake_send_worker [ 120.804875][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 120.804881][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 120.804895][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 120.804910][ C0] workqueue wg-kex-wg0: flags=0x6 [ 120.804915][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 120.804928][ C0] pending: wg_packet_handshake_send_worker [ 120.804938][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 120.804944][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 120.804958][ C0] pending: wg_packet_tx_worker, wg_packet_encrypt_worker [ 120.804973][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 120.804978][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 120.804993][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker [ 120.805012][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 120.805018][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 120.805032][ C0] pending: wg_packet_tx_worker, wg_packet_decrypt_worker, wg_packet_encrypt_worker [ 120.805052][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 120.805057][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 120.805072][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 120.805086][ C0] workqueue wg-kex-wg0: flags=0x6 [ 120.805091][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 120.805104][ C0] pending: wg_packet_handshake_send_worker [ 120.805116][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 120.805121][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 120.805135][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 120.805150][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 120.805155][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 120.805169][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker [ 120.805189][ C0] workqueue wg-kex-wg2: flags=0x124 [ 120.805193][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 120.805208][ C0] in-flight: 5118:wg_packet_handshake_receive_worker for 5s [ 120.805225][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 120.805230][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 120.805245][ C0] pending: wg_packet_encrypt_worker, wg_packet_decrypt_worker, wg_packet_tx_worker [ 120.805282][ C0] workqueue wg-kex-wg0: flags=0x6 [ 120.805287][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 120.805299][ C0] pending: wg_packet_handshake_send_worker [ 120.805311][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 120.805317][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 120.805331][ C0] pending: wg_packet_tx_worker, wg_packet_encrypt_worker [ 120.805346][ C0] workqueue wg-kex-wg1: flags=0x6 [ 120.805350][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 120.805363][ C0] pending: wg_packet_handshake_send_worker [ 120.805374][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 120.805380][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 120.805394][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker [ 120.805414][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 120.805419][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 120.805433][ C0] pending: wg_packet_encrypt_worker, wg_packet_decrypt_worker, wg_packet_tx_worker [ 120.805456][ C0] pool 2: cpus=0 node=0 flags=0x0 nice=0 hung=0s workers=7 idle: 1154 4812 9 4822 4836 10 [ 120.805506][ C0] pool 6: cpus=1 node=0 flags=0x0 nice=0 hung=55s workers=9 idle: 26 866 4346 4811 4915 4808 4854 4803 [ 120.805559][ C0] pool 8: cpus=0-1 flags=0x4 nice=0 hung=0s workers=14 idle: 6339 [ 120.805580][ C0] Showing backtraces of busy workers in stalled worker pools: [ 120.805585][ C0] pool 6: [ 120.805588][ C0] task:kworker/1:0 state:R running task stack:0 pid:24 tgid:24 ppid:2 task_flags:0x4288060 flags:0x00000010 [ 120.805603][ C0] Workqueue: events request_firmware_work_func [ 120.805615][ C0] Call trace: [ 120.805618][ C0] __switch_to+0x2b4/0x6e4 (T) [ 120.805629][ C0] __schedule+0x135c/0x2b00 [ 120.805638][ C0] preempt_schedule_common+0xd4/0x190 [ 120.805647][ C0] preempt_schedule+0x60/0x78 [ 120.805655][ C0] __local_bh_enable_ip+0x16c/0x234 [ 120.805663][ C0] __alloc_skb+0x1c8/0x610 [ 120.805673][ C0] alloc_uevent_skb+0x78/0x1ec [ 120.805680][ C0] kobject_uevent_net_broadcast+0x2d4/0x53c [ 120.805689][ C0] kobject_uevent_env+0x518/0x944 [ 120.805696][ C0] kobject_uevent+0x2c/0x3c [ 120.805703][ C0] device_del+0x5f8/0x71c [ 120.805712][ C0] firmware_fallback_sysfs+0x330/0x930 [ 120.805720][ C0] _request_firmware+0xb34/0xf5c [ 120.805731][ C0] request_firmware_work_func+0xa4/0x24c [ 120.805742][ C0] process_scheduled_works+0x91c/0x1250 [ 120.805751][ C0] worker_thread+0x798/0xbd0 [ 120.805760][ C0] kthread+0x304/0x3d4 [ 120.805768][ C0] ret_from_fork+0x10/0x20 [ 126.312876][ T1593] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.322528][ T1593] ieee802154 phy1 wpan1: encryption failed: -22