last executing test programs: 1m16.172802033s ago: executing program 32 (id=38): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) r1 = memfd_secret(0x0) socket(0x11, 0xa, 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x385, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, {0xa, 0x4e22, 0x3, @mcast2, 0x4800}, r2, 0xfffffffa}}, 0x48) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f0000000180), &(0x7f0000000240)=0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x418, 0x3d8, 0x3d8, 0x418, 0x3d8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @local, [0xff, 0xffffffff, 0x0, 0xff000000], [0xffffff00, 0xff000000], 'erspan0\x00', 'wlan0\x00', {}, {0xff}, 0x2b, 0x3, 0x3}, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r5, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000001001000002"], 0x18}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000400)={0x0}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000002c0)={r7, 0x4}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000340)={r8, @in={{0x2, 0x4e21, @multicast1}}}, &(0x7f0000000440)=0x84) socket$inet6_sctp(0xa, 0x1, 0x84) clock_adjtime(0x0, &(0x7f00000001c0)={0x21b02f28, 0x0, 0x3ff, 0xffffffff7fffffff, 0x10, 0x0, 0x0, 0x0, 0x0, 0xff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7ff, 0x400, 0x0, 0x2000, 0x9, 0x0, 0x0, 0x6}) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) read(r10, 0x0, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRES64=r6, @ANYRES32=0x0, @ANYRESHEX=r10, @ANYRES64=r9], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 59.003018354s ago: executing program 0 (id=263): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_open_procfs(r0, &(0x7f0000000080)='net/unix\x00') r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000040)={0x3, 0x0, 0x20000}, 0x20) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21289d, &(0x7f00000001c0)={[{@grpquota}, {@discard}, {@minixdf}]}, 0x1, 0x50f, &(0x7f00000004c0)="$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") prctl$PR_SET_FPEMU(0xa, 0x2) getpid() (async) syz_pidfd_open(r0, 0x0) (async) setns(r1, 0x24020000) (async) syz_open_procfs(r0, &(0x7f0000000080)='net/unix\x00') (async) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_pidfd_open(r2, 0x0) (async) setns(r3, 0x24020000) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000040)={0x3, 0x0, 0x20000}, 0x20) (async) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21289d, &(0x7f00000001c0)={[{@grpquota}, {@discard}, {@minixdf}]}, 0x1, 0x50f, &(0x7f00000004c0)="$eJzs3c9vI1cdAPCvndhxsmmTlh4AQVvawoJW6yTeNqp6gHJCgCohegRpGxJvFMWOo9gpTdhDeuaKxEqc4MgfwHlP3LkguHFZDkj8iEAbJA5GM55kvYm9STeJHcWfjzSa92Zm/f2+9c57Oy+xXwAj6/WI2IuIYkR8FBEz2fFcuk1GvB/pllz3eP/+8sH+/eVctNsf/jOXXpMci64/k7iRvWYpIn74nYif5E7Gbe7sri/VatWtrD7Xqm/ONXd2b6/Vl1arq9WNSmVxYXH+3TvvVC6sra/Vi1npy4/+sPeNnyVpTWdHuttxkTpNLxzFSYxHxPcvI9gQjGXtKQ47EZ5LPiJejog30vt/JsbSdxMAuM7a7Zloz3TXAYDrLp/OgeXy5WwuYDry+XK5M4f3Skzla41m69a9xvbGSmeubDYK+Xtrtep8Nlc4G4VcUl9Iy0/qlWP1OxHxUkT8YmIyrZeXG7WVYf7HBwBG2I1j4/9/JjrjPwBwzZWGnQAAMHB9x/+JweYBAAyO538AGD3GfwAYPZ3xf3LYaQAAA+T5HwBGj/EfAEbKDz74INnaB9n3X698vLO93vj49kq1uV6uby+Xlxtbm+XVRmM1/c6e+mmvV2s0Nhfeju1PZr+52WzNNXd279Yb2xutu+n3et+tFtKr9gbQMgCgn5dee/jnXDIivzeZbtG1lkNhqJkBly0/7ASAoRkbdgLA0FjtC0bXOZ7xTQ/ANdFjid6nlHp9QKjdbrcvLyXgkt38gvl/GFVd8/9+CxhGjPl/GF3m/2F0tdu5s675H2e9EAC42szxA31+/v9ytv9t9sOBH68cv+LBZWYFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAV9vh+r/lbC3w6cjny+WIFyJiNgq5e2u16nxEvBgRf5ooTCT1hSHnDACcV/5vuWz9r5szb00/derVG0fFYkT89Fcf/vKTpVZr648Rxdy/Jg6Ptx5kxyuDzx4AON3hOJ3sH3Y9yD/ev798uA0yn79/OyJKnfgH+8U4OIo/HuPpvhSFiJj6dy6rd+S65i7OY+/TiPh8r/bnYjqdA+msfHo8fhL7hYHGzz8VP5+e6+yTv4vPXUAuMGoeJv3P+73uv3y8nu573/+ltIc6v6z/S15q+SDtA5/EP+z/xvr0f2eO8fbvv9spTZ4892nEF8cjDmMfdPU/h/FzfeK/dcb4f/nSq2/0O9f+dcTN6B2/O9Zcq74519zZvb1WX1qtrlY3KpXFhcX5d++8U5lL56jnTo4GE9n+H+/derFf/KT9U33il05p/1fP2P7f/O+jH32lUzzxBiTxv/5mr/j5eOUZ8ZMx8WtnjL809btSv3NJ/JU+7T/t/b/17LDfK2aFR3/dPbFsOAAwPM2d3fWlWq26paBw9QvJP9lBBh3/DBd/a1CJFaP3qZ+/2bmnj51qt58rVr8e4yJm3YCr4Oimj4j/DjsZAAAAAAAAAAAAAACgp0F8YmnYbQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD6+n8AAAD//w1fz2A=") (async) prctl$PR_SET_FPEMU(0xa, 0x2) (async) 58.988816525s ago: executing program 0 (id=264): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4004) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x7, 0x180) semop(r1, &(0x7f0000000100)=[{0x0, 0x80, 0x1000}], 0x1) semctl$SETVAL(r1, 0x0, 0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r7, 0x8028640c, &(0x7f0000000080)={0xc000003, 0x2, &(0x7f0000000580)=[0x16, 0xffff, 0xf, 0xffff, 0x0, 0x4, 0x2, 0x3, 0xbf, 0x4, 0x70, 0x7, 0xfffffff7, 0x1, 0xa1b], 0x0, 0x4}) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r8, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') 57.89221596s ago: executing program 0 (id=269): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x11, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000080)={0x0}) r1 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x6f47957f, 0x0, 0x1002}, 0x10) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f000000000000000400000000", 0x1c) 57.810425368s ago: executing program 0 (id=271): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001940)=[{&(0x7f0000001800)=""/183, 0xb7}], 0x1, &(0x7f0000001c00)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000001a00)=""/116, 0x74}, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/79, 0x4f}], 0x1}}], 0x48}, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000000)={[{@errors_remount}, {@nomblk_io_submit}]}, 0x3, 0x519, &(0x7f0000001300)="$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") r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) listen(r1, 0x0) (async, rerun: 32) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r1}, 0x20) (rerun: 32) recvfrom$inet(r1, 0x0, 0x0, 0x40, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) (async) syz_clone3(&(0x7f00000004c0)={0x84004400, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x4, &(0x7f0000000040)=[{0x6, 0x4, 0xf9}], 0x1, 0x3, 0x70, 0x7, 0x3, 0x60}) (async, rerun: 64) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 64) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = accept4$tipc(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x10, 0x800) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f00000001c0)=0xff, 0x4) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x64) 57.511000211s ago: executing program 0 (id=277): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x4000080) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000180)='hybla', 0x5) r6 = socket(0x5, 0x6, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x7fffffffffffffff, 0x3d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(rfc3686(cbc-cast5-avx),aes-generic)\x00'}, 0x58) r11 = accept4(r10, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000600)=ANY=[@ANYBLOB="a8010000", @ANYRES16=0x0, @ANYBLOB="00020100", @ANYRES32=0x0, @ANYBLOB="0400028008000100", @ANYRES32=0x0, @ANYBLOB="c000028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040002000000080007000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000900000008000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="ac0002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000100000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000800000008000100", @ANYRES32=0x0, @ANYBLOB="04000280"], 0x1a8}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b000014000780080003007f000000080005"], 0x40}}, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000001b00)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYRES8=r10, @ANYRES32=r3, @ANYBLOB="92010000000000008a4a4e16d5c9b87c83e8df2a7f441de30c399f7d3815ab67535ed1ba813e9d57c5b1ba26d9996c76483dd6a9820faea6087400"/69], 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 56.638927463s ago: executing program 0 (id=287): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) recvfrom(r6, 0x0, 0x0, 0x40000000, &(0x7f0000000440)=@l2tp={0x2, 0x0, @broadcast, 0x2}, 0x80) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r7, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r8, @ANYBLOB="e0005a80dc0000801400030020380000080003000600000003000800040002004a0002"], 0xfc}, 0x1, 0x0, 0x0, 0x4008821}, 0x8840) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff2, 0x2, 0xfffff001, 0x0, 0x5, 0x7}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000850}, 0x4010804) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 56.489220476s ago: executing program 33 (id=287): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) recvfrom(r6, 0x0, 0x0, 0x40000000, &(0x7f0000000440)=@l2tp={0x2, 0x0, @broadcast, 0x2}, 0x80) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r7, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r8, @ANYBLOB="e0005a80dc0000801400030020380000080003000600000003000800040002004a0002"], 0xfc}, 0x1, 0x0, 0x0, 0x4008821}, 0x8840) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff2, 0x2, 0xfffff001, 0x0, 0x5, 0x7}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000850}, 0x4010804) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 53.017519434s ago: executing program 1 (id=334): close(0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe}, 0xc) epoll_create1(0x80000) r1 = socket$nl_rdma(0x10, 0x3, 0x14) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000071401"], 0x30}}, 0x94) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0x6}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001180)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r4, {}, {0x0, 0xa}, {0x7ff9, 0x10}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xfffffc00}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x4000) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000280)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@noinit_itable}, {@grpquota}, {@nodiscard}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x3d}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r6 = socket(0xa, 0x801, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r7, 0x29, 0xcc, 0x0, 0x0) getsockopt(r6, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f0000001ffc)=0x54) write$binfmt_script(r5, &(0x7f00000001c0)={'#! ', '', [], 0xa, "fa0419c9ff68ab09afe222eeb66e8b90ff1e31ddde598ad0c5b62ddd0a9229e8062b849d1c5d6248f217c93bd9e846430d0003535dd5ad7701984ef9d284f3d514"}, 0x45) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) fdatasync(r5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) 52.879025819s ago: executing program 1 (id=335): socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYBLOB="02c830360032000100060400000000000000b50200b71b070c04000400090007010400ff0f4000050010003800f1ff810c02020200050100050100"], 0x3b) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000280)=@chain) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000001c0)='ceph\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000ec0)={0x0, 0x8000000003ff, 0x5, 0x6, 0x2, 0x0, [{0xff, 0x7fffffffffffffff, 0x62, '\x00', 0x208}, {0xb287, 0x8, 0xec, '\x00', 0xa8d}]}) 51.910710452s ago: executing program 1 (id=352): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000050000090900010073797a310000000054000000030a03000000000000000000050000030900010073797a31000000000900030073797a32000000002800048008000140"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0x8fd4}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@hopopts_2292={{0xe0, 0x29, 0x36, {0x84, 0x18, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x4, 0xb0, "a46b3c39e3a9a0f0eeda4e9fafbbf2554f2113a7c91c0dd6010745986161394a5af021318e71c1085dea51ac3226c1f97c88019f9215c459249d8b8f2626acf0b6e0dbcb009c8e9c7475cc9208844365292b8977b03f61a246b02cddc8fe37539556c1b12cb8c5d2c2bbefebac3c86bf7bec220906a7f4a51698a68753e700789473dc56d859e7959428c4602ef8ff38c7cfebf7d1284556cf60f0b56f260689ea7cb188396e1153d290e44ffdcae9be"}, @ra={0x5, 0x2, 0x1}]}}}], 0xe0}, 0x58094) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4085}, 0x20000004) 51.778875941s ago: executing program 1 (id=355): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKFINISHZONE(r0, 0x40101288, &(0x7f0000000040)={0x4, 0x7}) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000080)=0xcb29) r1 = fcntl$getown(r0, 0x9) ptrace(0x10, r1) r2 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r2, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}, 0x24) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000012c0)={0x4, 0x0, [{0x2b1658fed96d7575, 0xc, &(0x7f0000000140)=""/12}, {0xffff1000, 0x1000, &(0x7f0000000180)=""/4096}, {0x60000, 0x2c, &(0x7f0000001180)=""/44}, {0xc000, 0xff, &(0x7f00000011c0)=""/255}]}) sendmsg$AUDIT_GET(r2, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x10, 0x3e8, 0xc02, 0x70bd27, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$AUDIT_GET(r2, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x10, 0x3e8, 0xc02, 0x70bd27, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) shmget(0x3, 0x3000, 0x200, &(0x7f0000ffb000/0x3000)=nil) (async) r4 = shmget(0x3, 0x3000, 0x200, &(0x7f0000ffb000/0x3000)=nil) shmat(r4, &(0x7f0000fee000/0x12000)=nil, 0x2000) (async) shmat(r4, &(0x7f0000fee000/0x12000)=nil, 0x2000) openat$ipvs(0xffffffffffffff9c, &(0x7f0000001480)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) (async) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001480)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$PPPIOCDISCONN(r5, 0x7439) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f00000014c0)=0x4) (async) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f00000014c0)=0x4) syz_open_dev$vcsa(&(0x7f0000001500), 0x9f6b, 0x2) (async) r6 = syz_open_dev$vcsa(&(0x7f0000001500), 0x9f6b, 0x2) ioctl$HIDIOCGFEATURE(r6, 0xc0404807, &(0x7f0000001540)={0xfa, "feac6065654415d48293b59d2cc9ce4466683338f673db94b1cf975dbbcd34da1027a77300352e48a72a4c29e6867a7503ad2db9f9d72c163f1d7431999f8928"}) getsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f00000015c0), &(0x7f0000001600)=0x4) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000001780)={0x2, 0x0, &(0x7f0000001640)=""/29, &(0x7f0000001680)=""/98, &(0x7f0000001700)=""/127, 0x200000}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001c00)={r6, 0x20, &(0x7f0000001bc0)={&(0x7f0000001a40)=""/140, 0x8c, 0x0, &(0x7f0000001b00)=""/165, 0xa5}}, 0x10) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c40), 0x422900, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001c80)={0x0, 0x401, 0x8}, 0xc) (async) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001c80)={0x0, 0x401, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001d40)={0x12, 0x18, &(0x7f00000017c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffb}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8e25}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x1, 0xc, 0x8, 0x0, 0x20, 0xfffffffffffffffc}, @alu={0x4, 0x1, 0x0, 0x1, 0x1, 0x30, 0x1}, @cb_func={0x18, 0x3}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffe}, @jmp={0x5, 0x1, 0xd, 0x0, 0x5, 0xfffffffffffffff0, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000001880)='GPL\x00', 0x200d6b6d, 0xda, &(0x7f00000018c0)=""/218, 0x41000, 0x1, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f00000019c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000001a00)={0x3, 0x9, 0x8000, 0x5}, 0x10, r7, r5, 0x2, &(0x7f0000001cc0)=[r5, r8, r6, r6, r5, r9, r5, r6, r6, r6], &(0x7f0000001d00)=[{0x3, 0x4, 0x0, 0x6}, {0x0, 0x2, 0x4, 0xb}], 0x10, 0x3}, 0x94) mprotect(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x200000e) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001e40)=@generic={&(0x7f0000001e00)='./file0\x00', 0x0, 0x18}, 0x18) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001e40)=@generic={&(0x7f0000001e00)='./file0\x00', 0x0, 0x18}, 0x18) write$vga_arbiter(r5, &(0x7f0000001e80)=@target={'target ', {'PCI:', '11', ':', '11', ':', '3', '.', '1c'}}, 0x16) epoll_ctl$EPOLL_CTL_DEL(r8, 0x2, r0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x6, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0xd000943e, &(0x7f0000001ec0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP(r10, 0xd0009412, &(0x7f0000002ec0)={r11, 0x2}) 51.65552188s ago: executing program 1 (id=357): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040000000000000aa1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef5d2defd5ccae8d3fb7c27a1059ae31c60e2234d732", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000280), 0x3, 0x457, &(0x7f0000000ec0)="$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") (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='pids.current\x00', 0x26e1, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) (async, rerun: 32) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1, 0x0, &(0x7f0000001380)) (async) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x50d040, 0xe0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, 0x0, 0x20000844) setsockopt$sock_int(r5, 0x1, 0xb, &(0x7f0000000140)=0xb, 0x4) (async) getsockopt$inet_tcp_buf(r1, 0x6, 0xd, &(0x7f00000013c0)=""/4096, &(0x7f00000023c0)=0x1000) 51.581216318s ago: executing program 1 (id=360): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x101a00, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240), &(0x7f00000003c0)=0x4) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) close(0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r6, &(0x7f00000001c0)={0x2, 0x4e23, @local}, 0x10) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x2, 0x0, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x32}, @loopback}, 0x10) sendmmsg$inet(r6, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0xffffff4b, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRES8=r5, @ANYRES64=r3, @ANYRESOCT=r1], 0x24}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='\a'], 0x10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f00000001c0)={r2, &(0x7f0000000000)=')^{\xa6\x00', 0x420081, &(0x7f0000000100)={@_ha_fsid={[0x8, 0x5]}, {0x7, 0x0, 0x5583, 0x9}}, 0xb5a3, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0xffffff1c}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000400000001040000ffff000000200000", @ANYRES32=r1, @ANYBLOB="09000000000000000000000000000000000000002b72c4e53aff42f8e8b5b299c5e72824c8e11600fcd6f861accd7b8add9aa2ec2ee893c0cf63e43e8f628f8f010000806dbe61b0c3bd97599f8c2b45606798c4499c7c5f4f7d5f626992544362183dcc4185727d6fa10ee3761dcdf1d23d69f505b71685b6534807222e4e74623596ff", @ANYRES32=r5, @ANYRES32=r10, @ANYBLOB="0100000004000000050000000900"/28], 0x50) ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f0000000200)=@generic={0x3, 0x313b0134, 0xffffffff}) bind$unix(r2, &(0x7f0000002ac0)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x3ff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000580), 0x1000010, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESDEC=r0]) 36.535304667s ago: executing program 34 (id=360): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x101a00, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240), &(0x7f00000003c0)=0x4) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) close(0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r6, &(0x7f00000001c0)={0x2, 0x4e23, @local}, 0x10) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x2, 0x0, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x32}, @loopback}, 0x10) sendmmsg$inet(r6, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0xffffff4b, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRES8=r5, @ANYRES64=r3, @ANYRESOCT=r1], 0x24}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='\a'], 0x10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f00000001c0)={r2, &(0x7f0000000000)=')^{\xa6\x00', 0x420081, &(0x7f0000000100)={@_ha_fsid={[0x8, 0x5]}, {0x7, 0x0, 0x5583, 0x9}}, 0xb5a3, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0xffffff1c}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000400000001040000ffff000000200000", @ANYRES32=r1, @ANYBLOB="09000000000000000000000000000000000000002b72c4e53aff42f8e8b5b299c5e72824c8e11600fcd6f861accd7b8add9aa2ec2ee893c0cf63e43e8f628f8f010000806dbe61b0c3bd97599f8c2b45606798c4499c7c5f4f7d5f626992544362183dcc4185727d6fa10ee3761dcdf1d23d69f505b71685b6534807222e4e74623596ff", @ANYRES32=r5, @ANYRES32=r10, @ANYBLOB="0100000004000000050000000900"/28], 0x50) ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f0000000200)=@generic={0x3, 0x313b0134, 0xffffffff}) bind$unix(r2, &(0x7f0000002ac0)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x3ff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000580), 0x1000010, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESDEC=r0]) 29.496675133s ago: executing program 6 (id=619): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4004) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x7, 0x180) semop(r1, &(0x7f0000000100)=[{0x0, 0x80, 0x1000}], 0x1) semctl$SETVAL(r1, 0x0, 0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000080)={0xc000003, 0x2, &(0x7f0000000580)=[0x16, 0xffff, 0xf, 0xffff, 0x0, 0x4, 0x2, 0x3, 0xbf, 0x4, 0x70, 0x7, 0xfffffff7, 0x1, 0xa1b], 0x0, 0x4}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') 28.197064864s ago: executing program 6 (id=626): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3ff8, 0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) fdatasync(r1) connect$unix(r1, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r3, 0x14, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) getsockopt$inet6_tcp_buf(r2, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) dup(r0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000200)="c002084eb524", 0x6}, {&(0x7f0000000240)="a43b2eaab400000092e588a84c82af9e9bbb", 0x12}], 0x2) 27.922743223s ago: executing program 6 (id=631): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x7, 0x0, 0x1, 0x0, 0x76ca62b3ddbb769e}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000015, 0x5031, 0xffffffffffffffff, 0xc2dcc000) write$binfmt_misc(r4, &(0x7f0000000b00), 0x91) splice(r3, 0x0, r2, &(0x7f0000000140)=0x8008, 0x9, 0x7) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$inet6(0xa, 0x1, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x7, 0x0, 0x1, 0x0, 0x76ca62b3ddbb769e}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) (async) pipe2(&(0x7f0000000040), 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000015, 0x5031, 0xffffffffffffffff, 0xc2dcc000) (async) write$binfmt_misc(r4, &(0x7f0000000b00), 0x91) (async) splice(r3, 0x0, r2, &(0x7f0000000140)=0x8008, 0x9, 0x7) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (async) 27.746964328s ago: executing program 6 (id=635): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x83) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000900)=@v1={0x0, @aes128, 0x0, @desc4}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x19a) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, 0x0) r2 = memfd_secret(0x80000) timerfd_gettime(r2, 0x0) r3 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000000)={[{@noload}]}, 0x0, 0x5d4, &(0x7f00000004c0)="$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") r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000014c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="01012bbd7000fedbdf250100000000000000014100000014001700000013000000026574683a6c6f0000"], 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000ac0)=@filter={'filter\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x1e0, 0x0, 0x1e0, 0xffffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, &(0x7f0000000200), {[{{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x3e}, [0xff000000, 0xff, 0xff, 0xffffff00], [0x0, 0x1fe, 0xffffffff, 0xff], 'ip6gre0\x00', 'ip6erspan0\x00', {}, {}, 0xfc41b166e0250438, 0x0, 0x0, 0x9}, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@ipv6header={{0x28}, {0x71, 0x18, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x40, 0xa, "7fc6524e92ee426f15e72f2a91e3e576d0b31d7020a3ae6c36115da00fb2"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x4672367f, 0x1, 0x0, [0x406d, 0x9, 0x4, 0xb, 0x800, 0x0, 0x141, 0x2, 0x9, 0x3, 0x6, 0x3, 0x5, 0x2, 0x1, 0x4], 0x10}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setsig(0x4203, r7, 0x18000000000000, &(0x7f0000000140)={0xb, 0x6edf, 0x5}) ioctl$DRM_IOCTL_RES_CTX(r6, 0xc0106426, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x0}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r6, 0x4010641c, &(0x7f00000001c0)={r8, &(0x7f0000000180)=""/18}) 27.65578954s ago: executing program 6 (id=637): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0xa00, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="600000000206050000000000000000009500000005000400000000000900020073797a0000000000050005000200000011000300686173683a69702c706f7274000000001400078008000600000000000800130000fffffc0500010007"], 0x60}}, 0x20000000) 27.645056514s ago: executing program 7 (id=638): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) fcntl$getown(r0, 0x9) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x6}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x2}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) pwritev2(r0, &(0x7f00000000c0), 0x0, 0x97, 0x3, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xfffd}, 0x90) sendmsg$inet6(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="7dfc501e81c715a906bd4839704db87e531c4250017615ea6813a12eaa908982a0c3f8d5dc25fbd9bab7f911af592de38c18410a4e5d3755a68ed0d08bd0058b57b85d78640bc2aca457f8403ab9b47595fa29c39fdcea3dfb710ca2c60a912ed1a23e8b754c04b2774a0dbaaec7392ff52e6782a9956b853442d551afacfbc5125aaf841fc280464f91cb24f84d87b998ac9a1002abb0a5115857b13ad8dc8a66d3b8b53ed43339ce6ceb0858882312e9317cab0947d7a8", 0xb8}], 0x1, &(0x7f00000001c0)=[@dstopts_2292={{0x70, 0x29, 0x4, {0x3c, 0xa, '\x00', [@ra={0x5, 0x2, 0x5}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @calipso={0x7, 0x18, {0x2, 0x4, 0x81, 0x5, [0x9, 0xa]}}, @pad1, @ra={0x5, 0x2, 0x5000}, @jumbo={0xc2, 0x4, 0x80}, @calipso={0x7, 0x10, {0x0, 0x2, 0x49, 0x6, [0x1]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdrdstopts={{0x140, 0x29, 0x37, {0x3b, 0x24, '\x00', [@generic={0x90, 0x4d, "df75d28924e03666769c52f63930af75d5c314a295378e3dbe22b06f61aaecb71b5bc481bde08760be4f08ed506e0d9f8c6c340197e89ce1984c56e28fff78bf9300be49f084c3a38ed27f0c7e"}, @pad1, @ra={0x5, 0x2, 0x4}, @ra={0x5, 0x2, 0x10}, @generic={0x82, 0xb8, "461316495c6c747544592a2cfe1f139d975b590c093024c959478ce90e4e993bf21446ef2f92b0c754b91f6a547ab6d423a0d1230e185cde21c758d0ddfa71a52b9b36138d7dd304c6b8dfb0fc332b20475beb6b26c457ee3034bbb2c2d1a1aa6b5caf381eda37a0ed252ff722c88eee6ceace22706178c719a0dbd0771a16121590749304fd2ebcc6103d9e3d55470fc7f7b17954b3bf92973e9195762bd77b6e1c5f16cb126be3ea617e0653924876ba10fa82d4bce68d"}, @enc_lim={0x4, 0x1, 0xd}, @pad1, @jumbo={0xc2, 0x4, 0x8}, @enc_lim={0x4, 0x1, 0x7}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x2f, 0x2, 0x0, 0x7f, 0x0, [@empty]}}}, @tclass={{0x14, 0x29, 0x43, 0x1}}], 0x1f0}, 0x0) sendmmsg$inet6(r0, &(0x7f0000001c40)=[{{&(0x7f0000000000)={0xa, 0x2, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}, 0xe4}, 0x1c, &(0x7f00000014c0)=[{&(0x7f0000000040)="c00b1edcc81f", 0x6}], 0x1, &(0x7f0000001540)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x2e}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x5c}}}], 0x30}}], 0x1, 0x2400c014) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xff}]}, 0x28}}, 0x0) 26.703071475s ago: executing program 7 (id=642): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_VLAN_FILTERING={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8100}, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES16=r1], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/19, 0x13}, 0x7}], 0x1, 0x10002, 0x0) getsockname$packet(r1, &(0x7f0000000000), &(0x7f0000000040)=0x14) 26.650693064s ago: executing program 6 (id=643): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@errors_remount}, {@oldalloc}, {@usrquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x5a4, &(0x7f0000002000)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x4000, 0x65) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x9, 0x492f, 0x5, 0x41, 0x1, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000140), 0xca, r1}, 0x38) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x8}}, './file1\x00'}) r4 = getpgid(0xffffffffffffffff) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e21, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) write$cgroup_pid(r3, &(0x7f0000000140)=r4, 0x12) lseek(r0, 0x104, 0x1) getdents64(r0, 0x0, 0x4f) 26.633930796s ago: executing program 7 (id=644): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) syz_open_procfs(0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000002000000b7040000000000008500000033000000850000005000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xa4, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}]}, 0xa4}, 0x1, 0x0, 0x0, 0x400c040}, 0x10) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r9, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r11, r10, 0x15, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0xd769}}, 0x30) getsockopt$inet_opts(r7, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000000)=0xa4) sendto$inet6(r1, &(0x7f0000000800)="410309fc1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 26.48367495s ago: executing program 35 (id=643): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@errors_remount}, {@oldalloc}, {@usrquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x5a4, &(0x7f0000002000)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x4000, 0x65) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x9, 0x492f, 0x5, 0x41, 0x1, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000140), 0xca, r1}, 0x38) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x8}}, './file1\x00'}) r4 = getpgid(0xffffffffffffffff) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e21, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) write$cgroup_pid(r3, &(0x7f0000000140)=r4, 0x12) lseek(r0, 0x104, 0x1) getdents64(r0, 0x0, 0x4f) 25.672252399s ago: executing program 7 (id=652): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd5d1, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000240), 0xd, 0x50340) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000240)='./file0\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x8a883, 0xf) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x15, 0xc, "faf98317e5a1149989fc67be43ea6acc96e3a2503dc31c97214d58128bbad0099cebdc25f5ab60c9e69098c8b534464c516bdd8a0f350000000000000300", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x200000}) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7}) fcntl$lock(r3, 0x25, &(0x7f0000000140)={0x0, 0x2, 0x5, 0x80000000}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x0, 0x75, 0xfff, 0x8, 0x3f98}) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0xa9, 0x4, 0x0, 0x0, 0xb, 0x4, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000004c0800", "2809e8dbe10a598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000000000000000000000000700", "f40000000000000000e0ff0500000000000b0800", [0x5, 0xfa9]}}) 25.153268737s ago: executing program 7 (id=655): pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rf', @ANYRESHEX=r0, @ANYBLOB=',wf', @ANYRESHEX=r1, @ANYBLOB=',cache=fscache,']) 24.795026719s ago: executing program 7 (id=661): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000001140)={[{@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@utf8}, {@fat=@codepage={'codepage', 0x3d, '863'}}, {@shortname_win95}, {@numtail}, {@shortname_winnt}, {@shortname_mixed}, {@shortname_lower}, {@uni_xlateno}, {@utf8no}, {@rodir}, {@utf8no}]}, 0x7f, 0x2b1, &(0x7f00000015c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000001500)=ANY=[@ANYBLOB="020000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f600000000000000000000000000000000000000000000000000000000000000000300080002000000e0000002"], 0x1008c) 24.738285965s ago: executing program 36 (id=661): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000001140)={[{@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@utf8}, {@fat=@codepage={'codepage', 0x3d, '863'}}, {@shortname_win95}, {@numtail}, {@shortname_winnt}, {@shortname_mixed}, {@shortname_lower}, {@uni_xlateno}, {@utf8no}, {@rodir}, {@utf8no}]}, 0x7f, 0x2b1, &(0x7f00000015c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000001500)=ANY=[@ANYBLOB="020000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f600000000000000000000000000000000000000000000000000000000000000000300080002000000e0000002"], 0x1008c) 9.422975197s ago: executing program 3 (id=852): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000000)=0xf) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r3) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x49801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x17}]}}}]}, 0x40}}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/firmware/fdt', 0x0, 0x8a) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000002240)={0x5, 0x1, 0xc7, 0x0, 0x1000000000000002, 0xc3, 0x4, 0x1, 0x44f866e1}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000400)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x10, 0x10, 0xbc1, 0x1, {{0x5f, 0x4, 0x3, 0x17, 0x17c, 0x68, 0x0, 0x5, 0x4, 0x0, @rand_addr=0x64010102, @multicast1, {[@noop, @rr={0x7, 0x7, 0x46, [@loopback]}, @cipso={0x86, 0x18, 0xffffffffffffffff, [{0x0, 0x2}, {0x6, 0xb, "8044f66129424d61f0"}, {0x2, 0x5, "99a77d"}]}, @timestamp_prespec={0x44, 0x1c, 0x2f, 0x3, 0x5, [{@rand_addr=0x64010101, 0xb048}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@rand_addr=0x64010100}]}, @cipso={0x86, 0x5f, 0x3, [{0x1, 0x6, "73b3a19f"}, {0x1, 0x7, "7047761eaa"}, {0x5, 0x12, "af5cbf7611ab88c50000d466758d26ed"}, {0x5, 0x2}, {0x0, 0x4, '9Y'}, {0x7, 0x11, "006ccf4c6db384f1b03c972e1b7abc"}, {0x2, 0x12, "0ef497e1ccb1946f204914b17b5eae81"}, {0x5, 0x11, "ebb981fb7cd6ef7ee62e97ed7c662e"}]}, @timestamp_prespec={0x44, 0x24, 0x44, 0x3, 0x5, [{@empty, 0xc}, {@local, 0x2}, {@remote}, {@private=0xa010102, 0x57}]}, @cipso={0x86, 0x2f, 0x3, [{0x5, 0x6, "6a45d01c"}, {0x2, 0x5, '\\mM'}, {0x6, 0x7, "c752303b37"}, {0x5, 0x5, "14cf58"}, {0x7, 0x12, "1c87d23b58c026b9b6377e3a226d0473"}]}, @cipso={0x86, 0x45, 0x1, [{0x6, 0xf, "104ccefda912ed3a5fbbcf9fe0"}, {0x7, 0xb, "dfbe6247e8d7a57536"}, {0x1, 0x6, "e7143bee"}, {0x7, 0x10, "81dd6decfc8fa471622012518eec"}, {0x0, 0x6, "e4ad402b"}, {0x6, 0x9, "5cf9c09590890f"}]}, @timestamp_prespec={0x44, 0x34, 0xd9, 0x3, 0x3, [{@multicast2, 0x7}, {@empty, 0x2}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x7}, {@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1c677627}, {@private=0xa010100, 0x8}]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="400000001000ffff2abd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="006400002312010000000500", @ANYRES32=r7, @ANYBLOB="cac456082ddec3c77785797d34a60effb41420227f10fda0fb8aa32e263a2bc0755eb1b687e54bd7ffde9737efade328d744fd237dfdbe7bf77e7a82915ac7ac9768b29f3eb8e44bdba7d781bc485d460dc991e09bf2eb29c2685d"], 0x40}, 0x1, 0x0, 0x0, 0x20004050}, 0x20048040) 9.392825081s ago: executing program 3 (id=854): socket$xdp(0x2c, 0x3, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x4c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x17, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x0, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x0, 0x1, 0x3}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000300)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x6f, r4}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="680000001000ffff2bbd7000bbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100a0500231a0500480012800e00010069703665727370616e00000034000280060003003000000014000700fc020000000000000000000f0000000014000600fc020000001600fcff000000000000010e6a6f15032d8edd8483f274e1e645295e458d723e4846539e4390f4976fb1f3ecd08495379ad7561f2ed040124e074724fe1e0ec5e702996c80736fded311"], 0x68}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) 9.32862569s ago: executing program 3 (id=858): r0 = socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setrlimit(0x5, &(0x7f0000000080)={0x3, 0x5}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) setresuid(0xee00, 0xee00, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8, 0x0, 0x10000000}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x9, 0xd, 0x401, 0x4}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xfe56}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x80, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3d, 0x14, 0x64, 0x0, 0x5, 0x4, 0x0, @remote, @empty}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) r6 = accept(r2, 0x0, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capget(&(0x7f0000000040)={0x19980330, r1}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x2, 0x6, 0x758, 0x450, 0x450, 0x0, 0x0, 0x450, 0x688, 0x688, 0x688, 0x688, 0x688, 0x6, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x32, 0x0, 0x0, 0x0, 0x0, @empty, @empty, @private2, [], [0x0, 0xff], [0x0, 0x0, 0x0, 0xffffffff], 0x2022, 0x50}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x8000007f], 'bridge0\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x3}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x2000}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xff], [], 'dummy0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xf0, 0x48000000}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@loopback, 0x5, 0xc}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x210, 0x238, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d3], 0x1, 0x9, 0x3}}, @common=@rt={{0x138}, {0x0, [0x0, 0xc], 0x0, 0x0, 0x1, [@empty, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, @empty, @remote, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7e3) 8.434064577s ago: executing program 3 (id=867): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000002f40)=0xfffffffd, 0x4) 8.258979962s ago: executing program 3 (id=872): r0 = syz_open_procfs(0x0, &(0x7f0000000680)='cmdline\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000cc0)=ANY=[@ANYBLOB="000086dd0203050009000a004000683739ed002889fffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/3, 0x3}, {0x0, 0x3}], 0x2, 0x0, 0x0) 7.862883423s ago: executing program 3 (id=879): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4000000000000007911480000000000711133000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x11, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff96}, 0x3e) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x380470a, &(0x7f0000000a00)={[{@quota}, {@bsdgroups}, {@lazytime}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0xffffffffffffffcc}, {0x4}}}]}, 0x34}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x22042, 0x20) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x200, 0x100000002, 0x7ab2, 0xfff}) 7.777769517s ago: executing program 37 (id=879): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4000000000000007911480000000000711133000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x11, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff96}, 0x3e) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x380470a, &(0x7f0000000a00)={[{@quota}, {@bsdgroups}, {@lazytime}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0xffffffffffffffcc}, {0x4}}}]}, 0x34}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x22042, 0x20) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x200, 0x100000002, 0x7ab2, 0xfff}) 5.02361176s ago: executing program 2 (id=918): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000340)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000900)="$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") setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c000780"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x9c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xff}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x62}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x41}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xfff}]}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x82}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x200000, &(0x7f00000068c0)=ANY=[@ANYBLOB='uni_xlate=1,iocharset=cp949,shortname=winnt,codepage=864,nonumtail=0,iocharset=cp85xlate=0,nonumtail=0,shortname=lower,uni_xlate=1,shortname=win95,shortname=win95,iocharset=iso8859-14,\x00\x00\x00\x00\x00\x00\x00'], 0x81, 0x29b, &(0x7f0000000580)="$eJzs3c9qK1UYAPBv0iRNVEgWrkRwQBeuwr33CW6QChezUrLQjV5sC5KEQgMB/2Dsyr3gynfwHXwAN76BC5eCO7sQR5KZSdI0bY3EVOrvt5kvc74v509OWyjMyUevjgbHZ+PTiy9+jkYjicrTeBqXSbSjEqWvAgB4SC6zLH7LcnflVqMeEVmreFXZw/AAgH/BNn//AYCH4b33P3in2+sdvZumjYjR15N+Evk1b++exicxjJN4FK34IyJbyOOXnvWOopqm5T8DJs3oR4w+/LF43f01Yl7/OFrRXq+vF1npXLwxmk76s55n11q8kER0syRPeRKteDkiq0XxJvnl7We9oyfp9fro1+PN178rxv/nSXSiFT99HGcxjOP5Wyzrv3ycpm9l3/7+eT6DfkQynfQP53lL2cFePhAAAAAAAAAAAAAAAAAAAAAAAP4XOulCe/X8nPI0wE5nc/uN5wMVJ/xMV87XeZSmaXmMz6Rfi7y+Gq9Uo3p/MwcAAAAAAAAAAAAAAAAAAID/jvGnnw2eD4cn51eCH7JZ0Lw1Zz2ortwpH+u/u2pzMPg+YvuqvxPEQTG0YXKti6Rs2kFfh9skNzd1GpWb1rA6jHzw32w/sNd2NcFbg3J3DZ4ncUdyY/MmWdl15TY8HydbbMhsw9Id3FhV39Hc6y/+0/LmxoWazbi2WMyrVY3ZJ7lyp7bjn5Q1yc5/9wAAAAAAAAAAAAAAAAAAAFctH/qNX641XtzLkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg75bf/78Ior1+Zz2YFsXzO5Xbkw/Pxxu6be95mgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxwfwUAAP//5OlVhQ==") r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x81c0, 0x8103) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) lsetxattr$trusted_overlay_nlink(0x0, 0x0, 0x0, 0x0, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', &(0x7f0000000400)=ANY=[], 0x0, 0x1400) ioctl$UFFDIO_UNREGISTER(r5, 0x8010aa01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 4.51273618s ago: executing program 2 (id=922): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000540)="42d120fb9243a1cc2ae2aa58fc7211294ecca48a6a04fc8e09c31356250eef19e68ab899ecb73916bd2d1b511f019e4674020d78d8091cdab46ef3a50d6699be178112d4e3e1360436da7d9e7f4a1370b9e8876e74311e972be41532be24c16de19d977d0185a2c8aa522b9014db6e93a1f57bfb1392ee494888065eb37d", 0x7e}, {&(0x7f00000005c0)="2c977829d04edc392a5bdbfcfab744f3419ff08bdc3907ca911bfd71d94872a7b24f9eaa971cd5a6396ee4b91362f7c2679a1ce6687f3350ad7e171714c8d32a658bcc0dc36e87171532ac0fb8138eef2d511cba46ad7dba487af20f0d1bee51d716dd52f43a62c9b67cf9cc745f08fb5f4a57db405c8d4c21981eb26af2d9e5210bbbbd5fa822a4a802e0b8fd87c4a44cfe52b65406fc4d03d8e2bdec2d8a2ce15539241dc77d42a22593ed66eac04e11971561e3ef61b4160189b99b11d742ad35f61fe425c85420fdde5d131fdb74b1988e", 0xd3}, {&(0x7f00000006c0)="e9557d96e5c6da82bdcb816f3c20039d08a27d", 0x13}, {&(0x7f0000000780)="f595e4d16f0fc46fd7250fee6a44dc08f86e2b55e616de18782517261cbc4a5dc50e61db4ab37b66867075754b0e68cb6290dfed5d6cd7d15132004f2d3b45a89d028f725aead17f020575f71a06b2287f33b53feb99149de53a1ed0373a2f9ae29ee5997500d4c7b4216377316a6c167971b0354826449687e610892f32ddef4728584d0907ece38ad33dab563e91e8ba64de4f3d13f480680ba2c7ffc0dd047765f534636c72b27a2f7486dcd0a86808c4dfc95832d529309cf1a4ebfcde18f43a9051e7fc68d452d4ff78abd7a47f70ee", 0xd2}, {&(0x7f0000000880)="e52a8c28324e32a7d9c45c3c03e5821de56f5c95f95855bb9abb78d99262ad95ad2ad189333dcb00d69358d703d18a6f", 0x30}, {&(0x7f00000008c0)="1d91a7ccb5d30fccc10f7b6f8a08fb7ca9eee33d09bb64dda63fe32d625eefe83453d9851ac1c9b0f78326e2ee1f975c9c8aa650f3e98eb3dfd249c875cce108", 0x40}], 0x6, &(0x7f0000000980)=[@dontfrag={{0x14, 0x29, 0x3e, 0x4}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}], 0x30}, 0x4) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'veth0_to_batadv\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xf63, 0x5}, {0x800}]}}) ptrace$getenv(0x4201, r5, 0x37e, &(0x7f0000000040)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"/306], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r7, 0x0, 0xfffffffffffffced, 0x4, 0x0, 0x0, 0x1800000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r1, 0x33, 0x1, 0xffffff7a, &(0x7f0000000080)=[0x0], 0x1, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)=ANY=[@ANYRES32=r1, @ANYRES32=r7, @ANYBLOB="3300000010000000ff440000", @ANYRES32, @ANYBLOB, @ANYRES64=r9], 0x20) syz_emit_ethernet(0xd81, &(0x7f00000001c0)=ANY=[], 0x0) 4.368222868s ago: executing program 2 (id=923): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80c0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000003c0)=0x6e) listen(r1, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) timer_gettime(r0, &(0x7f0000000080)) r3 = dup(r2) ioctl$TCXONC(r2, 0x540a, 0x0) write$6lowpan_control(r3, &(0x7f00000007c0)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r6, 0x2}}, 0x18) setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @loopback={0x100000}, 0x6}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) write$FUSE_INIT(r3, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_buf(r8, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, &(0x7f0000000140)={0x3b}, 0x8) sendmmsg$inet6(r8, &(0x7f0000004400)=[{{&(0x7f0000002080)={0xa, 0x4e1f, 0x2, @rand_addr=' \x01\x00', 0xd1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000100)="d5", 0x1}], 0x1}}], 0x1, 0x20002845) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000005c0)={{&(0x7f00000e4000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x1) 4.049325576s ago: executing program 2 (id=932): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@block_validity}, {@errors_remount}, {@nombcache}]}, 0x1, 0x44f, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() r1 = socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a}) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x2800000, &(0x7f00000010c0)={[{@debug}, {@jqfmt_vfsv0}, {@inlinecrypt}, {@errors_remount}, {@test_dummy_encryption_v1}, {@usrquota}, {@delalloc}, {@nogrpid}, {@grpquota}]}, 0x1, 0xbd0, &(0x7f0000000480)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000080)=ANY=[], 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0x5, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0) r5 = accept4$unix(r3, 0x0, 0x0, 0x0) recvfrom$unix(r5, &(0x7f0000000140)=""/263, 0x107, 0x20, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x38) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000300)) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) 3.159321368s ago: executing program 2 (id=951): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000140)=r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, 0x6, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x844}, 0x840) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x6, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYRESHEX=r3, @ANYBLOB="010000000000000000000100000014000180060001000a0000000800050000000000"], 0x28}}, 0x0) 2.444209991s ago: executing program 2 (id=959): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fadvise64(r0, 0x100000001, 0x7, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x1) 2.387339548s ago: executing program 38 (id=959): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fadvise64(r0, 0x100000001, 0x7, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x1) 2.007406034s ago: executing program 8 (id=967): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x4004) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) syz_read_part_table(0x1069, &(0x7f0000001080)="$eJzsz7FNw0AYBeBnW7ZBQMMErigYgTUQQ7CFG6agoWYCqLJLpDSZIN1FZyvKBkmK7yv+0/16T6cLVzUkmdqk5PG/WTZvu+1n8v36UC99Mw/Jc3MuzOtxV0eb/Th9tUlKKX/rJumWwLjM9/uur+VDKeWn5rpsXk4vP+Xj96KfBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAbdQwAAP//x2UTnQ==") 1.878610888s ago: executing program 5 (id=969): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80000}}, {@quota}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$eJzs3cFvG1kZAPDPTpw4aXaTXfYACHbL7kJBVZ3E3Y1We4DlhBBaCbFHkNqQuFEUO45ipzShh/TMFYlKnODIH8C5J+5cENy4lANSgQjUIHEwmvEkdVO7iZrEzsa/nzSa9+ZN/L3XdN6rvyZ+AQytqxGxGxFjEXE7Iqaz67nsiE/aR3Lf0737S/t795dy0Wp99s9c2p5ci46vSVzJXrMYET/6XsRPcy/GbWzvrC1Wq5XNrD7brG3MNrZ3bqzWFlcqK5X1cnlhfmHuo5sfls9srO/UxrLSVx//cfdbP0+6NZVd6RzHWWoPvXAYJzEaET84j2ADMJKNZ2zQHeGV5CPizYh4N33+p2Mk/W4CAJdZqzUdrenOOgBw2eXTHFguX8pyAVORz5dK7RzeWzGZr9Ybzet36lvry+1c2UwU8ndWq5W5LFc4E4VcUp9Py8/q5SP1mxHxRkT8cnwirZeW6tXlQf7DBwCG2JUj6/9/xtvrPwBwyRUH3QEAoO+s/wAwfKz/ADB8rP8AMHza6//EoLsBAPSR9/8AMHys/wAwVH746afJ0drPPv96+e721lr97o3lSmOtVNtaKi3VNzdKK/X6SvqZPbXjXq9ar2/MfxBb92a+vdFozja2d27V6lvrzVvp53rfqhTSu3b7MDIAoJc33nn0l1yyIn88kR7RsZdDYaA9A85bftAdAAZmZNAdAAbGbl8wvE7xHl96AD7vuuzN202x2y8ItVqt1jl0CeiPa1+S/4dh1ZH/91PAMGTk/2F4yf/D8Gq1cifd8z9OeiMAcLHJ8QM9fgzgzez8u+w/B36yfPSOh+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwWETNRyN1ZrVbmIuL1iPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3+1HNNb185LI5FxM9+/dmv7i02m5t/ihjL/Wv84HrzYXa93P/eAwDHO1in03PHG/mne/eXDo5+9ufJdyOi2I6/vzcW+4fxR2M0PRejEBGT/85l9bZcR+7iNHYfRMQXu40/F1NpDqS98+nR+Ens1/oaP/9c/Hza1j4nfxZfOIO+wLB5lMw/n3R7/vJxNT13f/6L6Qx1etn8l7zU0n46Bz6LfzD/jfSY/66eNMYHf/h+uzSRffGz3Z6fPIj48mjEQez9jvnnIH6uR/z3Txj/r195+91eba3fRFyL7vE7Y802axuzje2dG6u1xZXKSmW9XF6YX5j76OaH5dk0Rz3bezX4x8fXX+/Vlox/skf84jHj//oJx//b/93+8ddeEv+b73WLn4+3XhI/WRO/ccL4i5O/L/ZqS+Iv9xj/cd//6yeM//hvOy9sGw4ADE5je2dtsVqtbCooXPxC8lf2AnSja+E7/Yo1Ft2bfvFe+5k+0tRqvVKsXjPGWWTdgIvg8KGPiP8OujMAAAAAAAAAAAAAAEBX/fiNpUGPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMvr/wEAAP//M+fPJQ==") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@getnexthop={0x20, 0x76, 0xb0d, 0x0, 0x0, {0x3, 0x2}, [@NHA_MASTER={0x8, 0xa, 0x1}]}, 0x20}}, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x3, 0x129, 0x2000000000800001, 0x622, 0x2, 0x7, 0xab9c, 0xfffffffffffffffd, 0x107fe}) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x3) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 1.87666853s ago: executing program 9 (id=970): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071118200000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) connect$unix(r3, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRESOCT=r1, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r7], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r7, @ANYRES32=r0, @ANYRES8=r7], 0x3c}}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendto$inet(r8, &(0x7f0000000340)="5d522cfacb4719263f039b278abbe328fa56377f6e488ec8d6405071964390328d2d74c2d55b15b9c60f4fe35b45befd62bdd3a8b92cb1fb7e2cbd9be434f85b2bda8cfe75453d02c96ba328f6f45ec1473ba4b28a44caaead0ab36389bb7bec6e", 0x61, 0x2000c000, 0x0, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r7, @ANYBLOB="000014000a000100aaaaaaaeaaaa000008000f00010000003e11859a3351e595fc6522303ecd2fe0412ad5804dc9e8bde88de007f9ab798191cb7644fdb058e834a9b9d0ffbdaa25858ca385f7b40983bbd331faab301bd7d19c4d359dc6d16f2127646cfbd216df0e81a242"], 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0) 1.860844858s ago: executing program 8 (id=971): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0x3, 0x0, r0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x2c, r4, 0x801, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x6, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}]}, @TIPC_NLA_NET={0x0, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0x0, 0x4, 0x4}]}, @TIPC_NLA_NET={0x0, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0x0, 0x3, 0xb}, @TIPC_NLA_NET_NODEID_W1={0x0, 0x4, 0x1a}, @TIPC_NLA_NET_NODEID_W1={0x0, 0x4, 0x69a}, @TIPC_NLA_NET_NODEID_W1={0x0, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x0, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x0, 0x2, 0xbe}, @TIPC_NLA_NET_NODEID_W1={0x0, 0x4, 0x64}, @TIPC_NLA_NET_ID={0x0, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x0, 0x2, 0x10}, @TIPC_NLA_NET_NODEID_W1={0x0, 0x4, 0x5bbe}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x2400c000) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb4, r4, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xa0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x59c}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5928e999}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8692}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0103000000000000000005"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 1.541906413s ago: executing program 4 (id=972): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0xc0e00, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) 1.518149784s ago: executing program 4 (id=973): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000009c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x3938700}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004000000050015"], 0x4c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c61"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) setuid(0xee01) (async) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x65) (async) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0300000004000100040000000adfff48e4a17107", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="0000000400"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000dc334000000000009500"/32], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x3, 0x8, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000042ffffff000000000800200018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000855600000c000000b70000000000000095"], &(0x7f0000000c40)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES16=r3, @ANYRES32=r6, @ANYRES8=r5, @ANYRES16=r8, @ANYRES16=r4, @ANYBLOB="ce8c", @ANYRESHEX=r7, @ANYRES8=r6, @ANYRESDEC], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x20, 0x70bd26, 0x0, {0x0, 0x0, 0x4, 0x0, 0x48994}}, 0xfffffffffffffdfa}}, 0x20040040) (async) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) (async) r12 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r12, 0x8028640c, &(0x7f0000000080)={0xe000003, 0x0, 0x0, 0xffffffff, 0x4}) (async) r13 = socket(0x1, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r10, 0x1, 0x40, &(0x7f0000000cc0)=0x800004, 0x4) (async) getsockopt$SO_TIMESTAMP(r13, 0x1, 0x1d, 0x0, &(0x7f00000000c0)) sendto$packet(r10, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.451035823s ago: executing program 4 (id=974): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() (async) r0 = getpid() setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x8000000000000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$vga_arbiter(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='trylock me'], 0xf) socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000180), &(0x7f00000001c0)=0x8) (async) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000180), &(0x7f00000001c0)=0x8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000001ec0)={0x1, &(0x7f0000001e80)=[{0x0, 0x1000}]}) r5 = socket$kcm(0x10, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40086203, 0xffffffffffffffff) (async) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40086203, 0xffffffffffffffff) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d80000001a0081044e81f782db4cb9041c1d0800fe007c05e8fe55a1080001000002020000000000080005007a010401a80016002000034004020000035c0461c9d67f4f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee501534eedba07d6e239b7a1ca16854695d1f79064485e75106300fa125f3d4ece1a0fa80983a3f1fdb3fefe626503fd22d1cc58463d0346a61fde641561ee9c851dc0c1cd706ff2f41398d8e7429039e7ff837d3150d78569e4243b96f7e5080199891344de62a210156a7b0a", 0xd8}], 0x1}, 0x20054000) 1.408605806s ago: executing program 5 (id=975): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20000, 0x6a) 1.374140489s ago: executing program 8 (id=976): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x27}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000001580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffde61}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xfffffd14, 0x0, &(0x7f0000000400)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x74, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x1, "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"}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd26, 0x25dfdbfc, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10002}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}, @FRA_DST={0x8, 0x1, @empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001bc0)={0x18, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x20000000) 1.247043108s ago: executing program 8 (id=977): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendmmsg$sock(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x4f, 0x3}}], 0x10}}], 0x1, 0x20000000) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x20400, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000000)={0x0, 0x8}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002100), 0x202200, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000002140)={0x10, 0x100010, 0x1, 0x400, 0x3, 0x6, 0x1, 0xe9, 0x1}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1, 0x0, 0xd66}, 0x0) close(0x4) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) read$FUSE(r2, &(0x7f00000000c0)={0x2020}, 0x2020) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x1517) 1.245929618s ago: executing program 5 (id=978): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0x6, @remote, 0xa}}, 0xe20, 0x7, 0x2, 0x1ff, 0x3}, &(0x7f0000000580)=0x98) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000005c0)={r1, 0x9, 0x1}, &(0x7f0000000680)=0x8) lseek(r0, 0x8000000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x8, 0x4, 0x4, 0x7}, 0x50) r2 = socket(0x200000000000011, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000900)={&(0x7f0000000700)=@isdn={0x22, 0x0, 0x0, 0x9}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000780)="e0", 0x1}], 0x1, &(0x7f0000000a40)=[{0x10}], 0x6}, 0x0) ioctl$XFS_IOC_GETPARENTS(r2, 0xc028583e, &(0x7f0000000480)={{[0x7ff, 0x2, 0x6, 0x7]}, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000300)=[{{@align=0xfff, {0x6, 0x8, 0x4, 0x1}}, 0x54d7, 0x0, '\':@U$\x00'}, {{@align=0x3, {0x8, 0x9e, 0x7, 0x1}}, 0x2, 0x0, 'pagemap\x00'}, {{@_ha_fsid={[0x84, 0x4fe60a02]}, {0x401, 0x100, 0x2b368311, 0xfffffffffffffffc}}, 0xffff, 0x0, '\\!):$\x00'}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f00000007c0)="e02742e8680d85ff9782762f0813", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x410001ff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f00000000c0)={0x18, 0x1, 0x2, "3a0700000001000000abcb6b23b7b208ff4b5c080000010000002100", 0x3231564e}) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r7, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x20}}, 0x10, 0x0}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r8, &(0x7f00000000c0)="ad57877f678615cea5858470ef9a9ce63f4388845b68d100479307c5d3db3216b7807206e76d92cff1013bd30a2e69ed768a65bc12b293c353bfd1a7c490b96aa3b3ee5d2f8197de941b151d00e13907b094edaa74621c59ccb3f96c04cacc0a81e98e6c72427f5a9775c5e4f2c8d78f12cdff12ebf387c786566c3de8cbf582d7", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r8, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 1.200649763s ago: executing program 9 (id=979): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @private=0xa010100}, 0x10) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @loopback}}}, 0x84) close_range(r0, r0, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x6, 0x400000) sendmsg$inet_sctp(r0, &(0x7f00000013c0)={&(0x7f00000001c0)=@in6={0xa, 0x4e23, 0x7fffffff, @mcast1, 0x6}, 0x1c, &(0x7f0000001380)=[{&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="2b677f468039facec2aad40d2fcf2902e6d38e1016a38864493514068d45061a7a3a5f5a0ed0624ed802bb14479fed1f2588ba00f707a0293a90b00c344668235d8e22c561a2e307e6737ae1fa9c0f293ee2d2d04962f96300f362bcc18e18dce661b17a3c7b6e3c98ff67e57d059b03efe061047585e01e931d16d296ae5f20", 0x80}, {&(0x7f0000001280)="4643c45440e06243b621884c99a6557ff956d92d71729710d2fdaebe84684d6dd874d6ed5bd33a8d3a045be2a137013686fd56b0a6a6f24b8d5e77fdc65ff78d634aa76513e131c3b4dae1d0076cb253e0b437bd90098fffad491ba2a7909494d51a57bae74a829b52d40c76d3aec1d627e4c8db27a40e8d408a1b59137e025b776dc6a5454800ec076c03123e07cd7acb3ab7b4da3265541601351cd1f9037e51b6b18488cd18f0d23988b76bd5f969e4d38125542a3918057668e292a100d77cd9766770a090a684e37cfe47cab7d8aa2d27b0bab7685344d917a53a4e07ec95e5d70e", 0xe4}], 0x3, 0x0, 0x0, 0x884}, 0x8884) close_range(r1, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x5f5b, &(0x7f0000001400)={0x0, 0x472b, 0x2, 0x1, 0x164}, &(0x7f0000001480), &(0x7f00000014c0), &(0x7f0000001500)) read$FUSE(0xffffffffffffffff, &(0x7f0000001540)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000003580)={0x18, 0xfffffffffffffff5, r2, {0x6}}, 0x18) getpeername$inet(r0, &(0x7f00000035c0)={0x2, 0x0, @dev}, &(0x7f0000003600)=0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r5, 0x111, 0x5, 0x7, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000003640), r6) r7 = syz_mount_image$fuse(&(0x7f0000003680), &(0x7f00000036c0)='./file0\x00', 0x0, &(0x7f0000003700)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x10}}, {@default_permissions}, {@default_permissions}], [{@measure}, {@audit}, {@euid_eq={'euid', 0x3d, r3}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@subj_role={'subj_role', 0x3d, 'NLBL_MGMT\x00'}}]}}, 0x0, 0x0, &(0x7f0000003840)="87481dfdacf39b35978ec313cbd7b1deb7534853659db99257c809e1de8b954eff071f946687e08e90a2826550522fc8084459f4848ea63df2203673e0db393e58792a69671ca6231e4012373b86ee4da99c8e82665a2a1a3e74ac4aaf83e4f440a56a4cd7c84e2baa633e85a240f8bb3a0ca85c93350744b6fae3a20862e8990649b4b294930fb3f65e1e0af8faa5252e0881bbc8b8d8153e51ca6bb64921a204d5a7802b8ecc5093c9f0b63b31835465809ed746b9232155e64b35a0929c4fac435fce974aba9f74854405f829153810980328d9b9a278b830d3138f8c2eceb4") r8 = openat(r7, &(0x7f0000003940)='./file0\x00', 0x408000, 0x142) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, &(0x7f0000003980)={{0x1, 0x1, 0x18, r1, {r3, r4}}, './file0\x00'}) setresuid(r3, r10, r3) ioctl$vim2m_VIDIOC_QUERYBUF(r8, 0xc0585609, &(0x7f0000003ac0)=@multiplanar_userptr={0x5, 0x0, 0x4, 0x1, 0x1000, {0x77359400}, {0x3, 0x0, 0x60, 0x7f, 0x8, 0x6, "98f71fbb"}, 0x3, 0x2, {&(0x7f0000003a40)=[{0x2, 0xffffffff, {&(0x7f00000039c0)}, 0x7}, {0x8, 0xc, {&(0x7f0000003a00)}, 0x3}]}, 0x30, 0x0, r9}) newfstatat(0xffffffffffffff9c, &(0x7f0000003c00)='./file0\x00', &(0x7f0000003c40)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) mount$nfs(&(0x7f0000003b40)='\'-\x00', &(0x7f0000003b80)='./file0\x00', &(0x7f0000003bc0), 0x1110010, &(0x7f0000003cc0)={[{'!'}, {'#/(,)\\]'}, {'euid'}, {'&\'*{^'}], [{@euid_lt={'euid<', r12}}]}) r13 = dup(r1) sendmsg$nl_xfrm(r13, &(0x7f0000004040)={&(0x7f0000003d00)={0x10, 0x0, 0x0, 0x84041004}, 0xc, &(0x7f0000004000)={&(0x7f0000003d40)=@delsa={0x284, 0x11, 0x100, 0x70bd27, 0x25dfdbff, {@in6=@empty, 0x4d6, 0x2, 0x63}, [@algo_comp={0x11d, 0x3, {{'lzjh\x00'}, 0x6a8, "1cc2e66f8f4e6aa97e99732cbb1aa366ff09d180b93e1d346a9277503e3a68a5d89f30922afb12178fe8cf41567ba2a21287cec717ddb758fbf4baa39bb25074abe62785d70b6ee528842203553a7b4a7958631d017063fafb909c75a316a7cbe819a9abe85eaa495b8b99e7ecbefbda401f494d4f5fc8df0309cda7a052969afa0ac5947e4b7feb46d35dcd3323ec7d9420ad5c62655be929fbddf12420c2c303d0a311c321915f85f8505e8c4b37844deeac290df3d27acbbf73bd1befe945ec1d82766f97be38511c57c16e79396b56d8508a36"}}, @policy_type={0xa, 0x10, {0x1}}, @algo_crypt={0xb4, 0x2, {{'ctr-blowfish-asm\x00'}, 0x360, "da032f8da51232003828a7845c1602fc7caaeb5e1fa7ef3821ca1e5cfcd00478b10d861733d2d3eb3c4fdeedfc1bb2b184d28b4175907ebbbbf83a57477740835a6abc9017fee4559c2c1bd39e00984572801633a0e014c763941399c1cd77c047085b5e8725641aec52c41a"}}, @user_kmaddress={0x2c, 0x13, {@in6=@ipv4={'\x00', '\xff\xff', @local}, @in=@broadcast, 0x0, 0x2}}, @replay_thresh={0x8, 0xb, 0x6}, @address_filter={0x28, 0x1a, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x1a}, 0xa, 0x4, 0x5a}}, @mark={0xc, 0x15, {0x35075c, 0x9}}, @offload={0xc, 0x1c, {0x0, 0x1}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x7}]}, 0x284}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000180) ioctl$FS_IOC_FSGETXATTR(r9, 0x801c581f, &(0x7f0000004080)={0x26c255a4, 0x6, 0x8, 0xffffffff, 0xd5400}) mount$fuse(0x0, &(0x7f00000040c0)='./file0\x00', &(0x7f0000004100), 0x80004, &(0x7f0000004140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r11}, 0x2c, {[{@default_permissions}], [{@dont_hash}, {@pcr={'pcr', 0x3d, 0x13}}, {@uid_eq={'uid', 0x3d, r12}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@smackfsroot={'smackfsroot', 0x3d, 'fuse\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}}) recvfrom$inet(r13, &(0x7f0000004240)=""/28, 0x1c, 0xa000, &(0x7f0000004280)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) close_range(r1, r9, 0x0) ioctl$SIOCGSKNS(r8, 0x894c, &(0x7f00000042c0)={'sit0\x00', 0x300}) shutdown(0xffffffffffffffff, 0x1) 1.161167272s ago: executing program 4 (id=980): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) syz_clone(0x280000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x52, &(0x7f00000006c0)={@local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x4e20, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x10, 0x0, 0x0, 0x0, {[@generic={0x5, 0x2}]}}}}}}}}, 0x0) 1.066683205s ago: executing program 9 (id=981): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x4, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}, @TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x44}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r4}, 0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304, 0x39}, "4506000000927650", '\x00', "c5f54bb3"}, 0x28) (async) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r6, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000580)=[0x1389, 0x5, 0xf, 0xffff, 0x0, 0x1ed, 0x2, 0x3, 0xbf, 0x4, 0x72, 0x81, 0xfffffff7, 0xffff794b, 0xa1b], 0x0, 0x4}) (async) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) io_setup(0x2, &(0x7f0000000280)) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) (async) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x5}}, 0x1c}}, 0x0) (async) setsockopt$llc_int(r9, 0x10c, 0x3, &(0x7f0000000080), 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008b000000bf0900000000000055090100000000009500000000000000bfd1000000000000b70200000000000085000000ba000000b7000000000000009500000000000000"], &(0x7f0000001a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000440)={r0, 0x0, {0x0, 0x0, 0x0, 0x8, 0x800000000000, 0x0, 0x0, 0x10, 0xf3abbd6a3f4fb0e8, "2401010000000000000d0ec0c1b4e9b1c4369d03740250ceaac500b1b3d741dd17c1c50d38ef2a565ef1e85c58d36500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d20000000100", "24431a1e58a68e174f0000000000ef8a07580000000000002000", [0x5]}}) 1.051319781s ago: executing program 9 (id=982): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0xc0e00, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) 1.007853746s ago: executing program 9 (id=983): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x8) close(0x3) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto(r5, 0x0, 0x0, 0x20000080, 0x0, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x7c, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f0000000580)="17", 0xfffffffffffffc4f, 0x10008095, 0x0, 0x0) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, r3, 0x25, 0x0, @void}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r6}, 0x8) syz_open_dev$vcsn(&(0x7f0000000340), 0x8, 0x4000) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f00000001c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r8 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0x4, {0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}}, 0x3a) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r6, r7, 0x4, r2}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) r9 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x3, 0xfffffffa, @mcast2, 0x9}, 0x1c) write$binfmt_script(r9, &(0x7f00000000c0), 0x28) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, 0x4e, 0x201, 0x70bd2d, 0x0, {0x9}, [@typed={0x8, 0x6d, 0x0, 0x0, @ipv4=@broadcast}]}, 0x1c}}, 0x8086) 854.775032ms ago: executing program 5 (id=984): r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000000)={0x7, 'syz_tun\x00', {0x8}, 0x6}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r2, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x29}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x23}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x4040000) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r2, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}]}, 0x54}}, 0x44800) r3 = syz_open_dev$hidraw(&(0x7f00000002c0), 0x5, 0x182100) ioctl$HIDIOCSFEATURE(r3, 0xc0404806, &(0x7f0000000300)="20c508eb1abcb5f2405f17b071c2a66b51e6fd2c9f0b62e957cc29a8f0689ad0b55cf39d7b916b8b93f005b76d372f3cb59dee6f55e681a14c4e05199ddc") close_range(0xffffffffffffffff, r3, 0x2) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000340)=0x3, 0x4) r4 = syz_open_dev$mouse(&(0x7f0000000380), 0x8156, 0x80000) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f00000003c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xb}}, 0x10) r5 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000440)) mount_setattr(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x800, &(0x7f0000000480)={0x76, 0x1, 0x80000, {r5}}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000004c0)={0xc0000008}) write$hidraw(r4, &(0x7f0000000500)="8ae1c2063a62d759311a4938dae923fd9e8b0a0ce2d44cb136c8faecb87363bbe5ebc4240b6b08fd32d8c5ca8c125669614617d56a2143efd8c130e616edafb448609c2fa72ae56034ae0e4b14b812be80b8d3fc40edaef63ac0635105520bafeed80920115c31fec6b9b291553c5e27aa08b3509593e7", 0x77) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000580)={0x0, 0x4, [0x10000, 0xf, 0x100000000, 0x8001, 0x130, 0x7]}) ioctl$NILFS_IOCTL_GET_CPINFO(r3, 0x80186e82, &(0x7f0000000740)={&(0x7f00000005c0)=[{0x3, 0x0, 0x6, 0x7fffffffffffffff, 0x7, 0x8, 0x23917c90, 0x7}, {0x1, 0x0, 0x200, 0x7a, 0x8, 0x7fffffffffffffff, 0x8, 0xe}, {0x0, 0x0, 0x5, 0x33ad, 0x6, 0x2, 0x7f2f, 0x7f}, {0x3, 0x0, 0x7af, 0xa762, 0xbafe, 0xa, 0x3}, {0x0, 0x0, 0x7, 0x2, 0x0, 0x784b730a, 0x81, 0x5}, {0x1, 0x0, 0x7, 0x0, 0x8000000000000000, 0x10, 0x3d84, 0x8000}], 0x6, 0x38, 0x0, 0x2}) r6 = getpid() ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000780)) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f00000007c0), &(0x7f0000000800)=0x4) ioctl$sock_x25_SIOCDELRT(r4, 0x890c, &(0x7f0000000840)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0x6, 'ip6tnl0\x00'}) setpriority(0x1, r6, 0x5) sendmsg$nl_xfrm(r4, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)=@flushpolicy={0x78, 0x1d, 0x1, 0x70bd2b, 0x25dfdbfc, "", [@replay_val={0x10, 0xa, {0x70bd2c, 0x70bd2c, 0x8}}, @coaddr={0x14, 0xe, @in=@broadcast}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd28, 0x70bd27, 0x70bd26, 0x70bd2c, 0xd58}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @proto={0x5, 0x19, 0x6c}, @sec_ctx={0x16, 0x8, {0x12, 0x8, 0x0, 0x1, 0xa, "3248f1a19917e1728676"}}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x4040804) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b80)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r7, &(0x7f0000000c80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x64, r8, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4008000) 779.338812ms ago: executing program 5 (id=985): r0 = syz_usbip_server_init(0x5) r1 = openat$smackfs_ambient(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r1, &(0x7f0000000040)={'${'}, 0x3) faccessat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x88) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f00000000c0)={0x9, 0x5, 0x5, 0x10000, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) preadv(r2, &(0x7f0000001280)=[{&(0x7f0000000180)=""/13, 0xd}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/142, 0x8e}], 0x3, 0x6, 0xa) r3 = openat$panthor(0xffffffffffffff9c, &(0x7f00000012c0), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000001300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000001580)={{r0}, r4, 0x0, @inherit={0x50, &(0x7f0000001500)={0x1, 0x1, 0x10001, 0x7f, {0x10, 0x1, 0x1, 0x400, 0x6}, [0x44]}}, @subvolid=0x4}) r5 = syz_open_dev$loop(&(0x7f0000002580), 0x9b88, 0x400200) ioctl$IOC_PR_CLEAR(r5, 0x401070cd, 0x0) syz_open_dev$hidraw(&(0x7f00000025c0), 0xe8e, 0x7f0a7facdb8da7b1) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$OCFS2_IOC_GROUP_ADD64(r6, 0x40186f03, &(0x7f0000002600)={0xb, 0x84, 0xfcd7, 0x6}) r7 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000002640), 0x40000) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000026c0)={'caif0\x00', &(0x7f0000002680)=@ethtool_link_settings={0x4d, 0xac, 0x10, 0xf1, 0x2, 0x8, 0x7, 0x4, 0x5, 0x3, [0x3, 0x3, 0x5, 0x7, 0x80000001, 0x6, 0x6, 0x2], [0x6, 0xa6]}}) fcntl$addseals(r0, 0x409, 0x4) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000002700)={0x500, 0x80000, r1}) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000002780), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r8, &(0x7f00000028c0)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x8a400200}, 0xc, &(0x7f0000002880)={&(0x7f00000027c0)={0x90, r9, 0x400, 0x70bd25, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfffffffc}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0xd}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x2a61}}]}, 0x90}, 0x1, 0x0, 0x0, 0x44890}, 0x4) ioctl$DRM_IOCTL_SG_ALLOC(r3, 0xc0106438, &(0x7f0000002900)={0x27}) socket$xdp(0x2c, 0x3, 0x0) setsockopt$PNPIPE_ENCAP(r8, 0x113, 0x1, &(0x7f0000002940), 0x4) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000002a40)={&(0x7f0000002980)="4b02f9caa6ebab34bcbd592a8e94038bd825bbd9f4013f184fe29d0473e63d1dc2aa6edac530e22c58ffd7111310334ffbdc56a7445223a17e843efe16089102bf79d4b03e164c54bbf047087042a23ee6902d49749551ada2a3bfeb90e81bc9e89996848d889266427cb5ac7e4e49348fb0f920bbe78e45ae611508deade50f7963b1e31624b45761724a", 0x8b}) ioctl$TIOCGICOUNT(r8, 0x545d, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000002b80)={&(0x7f0000002a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002ac0)=[0x0], &(0x7f0000002b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002b40)=[0x0, 0x0, 0x0], 0x7, 0x1, 0x9, 0x3}) ioctl$DRM_IOCTL_MODE_GETFB(r8, 0xc01c64ad, &(0x7f0000002bc0)={r10}) preadv(r8, &(0x7f0000003fc0)=[{&(0x7f0000002c00)=""/44, 0x2c}, {&(0x7f0000002c40)=""/4096, 0x1000}, {&(0x7f0000003c40)=""/71, 0x47}, {&(0x7f0000003cc0)=""/119, 0x77}, {&(0x7f0000003d40)=""/204, 0xcc}, {&(0x7f0000003e40)=""/123, 0x7b}, {&(0x7f0000003ec0)=""/235, 0xeb}], 0x7, 0x80, 0xb1) 178.197484ms ago: executing program 8 (id=986): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r0, &(0x7f0000003880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x30}}], 0x2, 0x40004000) r1 = socket$netlink(0x10, 0x3, 0x9) close_range(r1, 0xffffffffffffffff, 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000440)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x3) r3 = socket(0x26, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), r3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0], 0x0, 0x23, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xdf, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) sendmsg$can_j1939(r3, &(0x7f0000000a40)={&(0x7f0000000900)={0x1d, r5, 0x2, {0x1, 0xf0, 0x3}, 0xfd}, 0x18, &(0x7f0000000a00)={&(0x7f0000000940)="da2c53d5f84068fab30e36d19f984dc09da04e55219d7e81e9657d39ae9a2e19b453d2dacf89dc55a842b742af567a90110238d3c7bb8c50cd7a4bb1fff7642105c03bed6ac74fef894cba4f430424b1f968e42d784466aacf77dcb2fdd5e5fed379bb5d3b446866b2479288d67043a86ec4c13bc307180a756fc0c3303261961f2c4c85833a200c582fa3e5e3dad5f699c796e8bba6197d71", 0x99}}, 0x44140) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x18, r7, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4cc04}, 0x4040140) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc001f00b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000c6000000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000d000000000095000000000000008553903b9160622f5a30b6e0ea9bec578878a544cc7584e2326c8d055ebd772086600884f6f4156b927c03cedb748a4e84c892f28e3434d2cbbe960bc0625897598e826a77541d"], &(0x7f0000000180)='GPL\x00', 0x7fff, 0x5a, &(0x7f00000001c0)=""/90, 0xc3200, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340), 0x10, 0x6}, 0x94) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000700)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="5000000010000304000000040000000000000000", @ANYRES32=0x0, @ANYRESHEX=r5, @ANYRES32=r10], 0x50}, 0x1, 0xba01}, 0x20) r11 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000040)) 176.079709ms ago: executing program 4 (id=987): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x154, 0x18, 0x1, 0x70bd27, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x7, 0x5, 0x3, 0x2, 0xff, "71ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe14c93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c", 0x0, "5c8d03000000000000002a5e15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0x5, 0x1, 0xf5, 0x2}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x1}, 0x5, 0x0, 0x0, 0x0, "54831bdbae1d82b3"}, 0x6}}]}, 0x154}}, 0x240448c8) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f00000001c0)=ANY=[@ANYBLOB="696f636861727365743d564e19757466382c73686f72746e616d653d77696e6e742c757466383d312c757466383d302c73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e39352c757466383d302c726f6469722c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e"], 0x1, 0x26c, &(0x7f0000000340)="$eJzs3U9rU1kYB+A3bTpJC0OyGCgzDMwdZjOr0HaYfcrQgWECipKFriw2RWlqoYWCLtruit9Bv4Iu3QouxK1fQASpghvrqgshEm//JDWJjZpG7PNs+nLu++Ock17upYueXPl1eWlhZW1xd3cn8vlMZMtRjr1MFGMkRiO1FQDA92Sv0Yg3jdSw1wIAnA7vfwA4e3q9/zNbh2PnT39lAMCgfNHf/yMDWRIAMGAXL13+f7ZSmbuQJPmI5e316no1/Zlen12M61GPWkxFId5FNA6l9b//VeamkqaXxcgvb46k+c316mh7fjoKUeycn05SUW3mDvJjMbGffzYRtZiJQvzUOT/TMf9D/PlHy/ylKMTTq7ES9ViIZjbN5yJiYzpJ/jlXOZbPfegDAAAAAAAAAAAAAAAAAAAAAIBBKCWHiu3n36Tn95RK3a6n+dbzgcZ7nQ/U2Dx2vk42fskOd+8AAAAAAAAAAAAAAAAAAADwrVi7eWtpvl6vrfYqbjy592gnlwY+2dy7yOzP219qu2fP+Ml2caz48fcXdzpdykWu38/n84qxiGgdSfanfPjbACf9WsXjnWs//7U2+Xe3nsi2jtxubrWtp8uNlB3UB/66ENG1J9/3Ddla3D8oym8/6jm4lWqr48P+xU3eLc8/2Hj+6qSpHg+NxuggHkUAAAAAAAAAAAAAAAAAAHDmHf3T77BXAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADDc/T9//0WuWgbyXdt3hr2HgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4H0AAAD//7qXlSU=") syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="f3bbbbbb"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)=""/4096) 174.970267ms ago: executing program 5 (id=988): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x2c, 0x24, 0x200, 0x40000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000400}, 0x8000004) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x22, 0x3, 0x50000}]}) io_setup(0x2, &(0x7f0000000000)=0x0) socket$xdp(0x2c, 0x3, 0x0) syz_clone3(&(0x7f0000000080)={0x21800000, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaabaaaaaaaaaaaa0086dd604dd708001806bbfe8000e42d00000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c200009078000003039600"], 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x2, &(0x7f0000000040)=0x9, 0x4) getsockopt$inet_opts(r2, 0x0, 0x2, 0x0, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000100)={[], [{@fsname={'fsname', 0x3d, 'ext3\x00'}}]}, 0xfd, 0x4c2, &(0x7f0000000380)="$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") mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x4c04, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x2c, 0x24, 0x200, 0x40000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000400}, 0x8000004) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x22, 0x3, 0x50000}]}) (async) io_setup(0x2, &(0x7f0000000000)) (async) socket$xdp(0x2c, 0x3, 0x0) (async) syz_clone3(&(0x7f0000000080)={0x21800000, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) io_submit(r1, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaabaaaaaaaaaaaa0086dd604dd708001806bbfe8000e42d00000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c200009078000003039600"], 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$inet_int(r2, 0x0, 0x2, &(0x7f0000000040)=0x9, 0x4) (async) getsockopt$inet_opts(r2, 0x0, 0x2, 0x0, &(0x7f0000000080)) (async) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000100)={[], [{@fsname={'fsname', 0x3d, 'ext3\x00'}}]}, 0xfd, 0x4c2, &(0x7f0000000380)="$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") (async) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x4c04, 0x0) (async) 154.867583ms ago: executing program 8 (id=989): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x3, 0x25a, &(0x7f0000000240)="$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") syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="040e03fb0520"], 0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x5, @empty, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x140) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000080), &(0x7f00000001c0)=r0}, 0x20) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000005) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x146, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x110, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x20}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x18, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, '\x00'/12}, {0x3, 0x1, '\x00\x00\x00\x00\x00\x00'}, {0x18, 0x13, "7c5eedeead5d05b87f9a168ce9fa5053c7dba3f0bfbdedf001ccf4f4c7e1c0ffffffdbd75df7cd7eeab451ca0a9ee0f0146904f6d1d7f3ba386b75cb6cb259f3cf09c554b9ca2ceafb4e1735936011a5fb6caedf2de4d3d66ef12adef12a2e51ee8dbcc44a35c94addd32e245f8bb0ef39b811d2b15fbbd165ede9c4b62806d93140e62eec2ca5a8c75f5cc4f8ed50c13bb26c028a5c"}]}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0) 215.248µs ago: executing program 9 (id=990): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x80000000, 0x3, 0x9, 0xf, 0x3, 0x5, 0xfc, 0x0, 0xff, 0x0, 0x0, 0x6, 0xff, 0x0, 0x5}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0}) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRES64=r0], 0x31) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000071104d00cf6aacceb632622ff3000000009500000700000000000000000000000000f0408809f149973840b65659b80f810500df73b17bb9dfbac6d76a255df3437bb654658fe9d9abc7091536811aefab390b0af20f366efa8e001711fe7b4b187dec5fe08748af97fe7ee477ea2a29f81371f660c8880b76c14b9d3c0c0539ebbaabf03d27ec8d7b2c66c2a6dc4cc9845780976fd81130603ac4f2c23dba8bbf04f8c381f6858222132507e78169f2da17ff613dda3161266b05eb05a42f42c47ad05e5193f2f9ca666f90"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x1b, 0x5, 0x428, 0x0, 0x1c8, 0xffffffff, 0x0, 0x1c8, 0x390, 0x390, 0xffffffff, 0x390, 0x390, 0x5, &(0x7f0000000140), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x1f}, @loopback, 0xff000000, 0xffffff00, 'bridge0\x00', 'ipvlan0\x00', {0xff}, {0xff}, 0x33, 0x2, 0x40}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@inet=@set2={{0x28}, {{0x0, 0x4}}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x12, @empty, @remote, @port=0x4e22, @icmp_id=0x65}}}}, {{@ip={@local, @loopback, 0xff000000, 0xffffff00, 'pim6reg\x00', 'veth1\x00', {}, {}, 0x88, 0x1, 0x40}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x0, 0x2, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @empty, @local, @gre_key=0x8338, @icmp_id=0x68}}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4, 0x0, 0x1}}, @common=@addrtype={{0x30}, {0x880, 0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x6, @loopback, @rand_addr=0x64010100, @icmp_id=0x65, @icmp_id=0x64}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x4, 0x4}, {0x1, 0x4, 0x6}, 0xb07, 0x36b}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) 0s ago: executing program 4 (id=991): r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000)={0x9, @remote}, &(0x7f0000000040)=0x12, 0x800) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000000080)={0x25}) (async) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000000080)={0x25}) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000003c0)="ae", 0x1, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r2}) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r2}) statx(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x1000, 0x20, &(0x7f00000003c0)) kernel console output (not intermixed with test programs): type 5 error -117 [ 61.550669][ T6341] EXT4-fs (loop6): Remounting filesystem read-only [ 61.550706][ T6341] EXT4-fs warning (device loop6): ext4_evict_inode:287: xattr delete (err -30) [ 61.550740][ T6341] EXT4-fs (loop6): 1 orphan inode deleted [ 61.551219][ T6341] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.569423][ T6360] syz.5.354: attempt to access beyond end of device [ 61.569423][ T6360] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 61.569523][ T6360] syz.5.354: attempt to access beyond end of device [ 61.569523][ T6360] loop5: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 61.569566][ T6360] syz.5.354: attempt to access beyond end of device [ 61.569566][ T6360] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 61.569600][ T6360] syz.5.354: attempt to access beyond end of device [ 61.569600][ T6360] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 61.569639][ T6360] syz.5.354: attempt to access beyond end of device [ 61.569639][ T6360] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 61.569671][ T6360] syz.5.354: attempt to access beyond end of device [ 61.569671][ T6360] loop5: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 61.569704][ T6360] syz.5.354: attempt to access beyond end of device [ 61.569704][ T6360] loop5: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 61.569734][ T6360] syz.5.354: attempt to access beyond end of device [ 61.569734][ T6360] loop5: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 61.569771][ T6360] syz.5.354: attempt to access beyond end of device [ 61.569771][ T6360] loop5: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 61.589593][ T6348] Buffer I/O error on dev loop5, logical block 161, async page read [ 61.589641][ T6348] Buffer I/O error on dev loop5, logical block 162, async page read [ 61.589662][ T6348] Buffer I/O error on dev loop5, logical block 163, async page read [ 61.589681][ T6348] Buffer I/O error on dev loop5, logical block 164, async page read [ 61.589700][ T6348] Buffer I/O error on dev loop5, logical block 165, async page read [ 61.589718][ T6348] Buffer I/O error on dev loop5, logical block 166, async page read [ 61.589737][ T6348] Buffer I/O error on dev loop5, logical block 167, async page read [ 61.589757][ T6348] Buffer I/O error on dev loop5, logical block 168, async page read [ 61.589810][ T6348] Buffer I/O error on dev loop5, logical block 161, async page read [ 61.589833][ T6348] Buffer I/O error on dev loop5, logical block 162, async page read [ 61.609320][ T6330] netlink: 'syz.2.347': attribute type 11 has an invalid length. [ 61.666596][ T6030] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.705563][ T6365] netlink: 132 bytes leftover after parsing attributes in process `syz.1.357'. [ 61.709292][ T6365] loop1: detected capacity change from 0 to 512 [ 61.765081][ T6377] loop3: detected capacity change from 0 to 512 [ 61.765416][ T6377] EXT4-fs: Ignoring removed oldalloc option [ 61.771472][ T6377] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 61.772937][ T6377] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #11: comm syz.3.358: corrupted in-inode xattr: invalid ea_ino [ 61.772952][ T6377] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 61.774062][ T6377] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.358: couldn't read orphan inode 11 (err -117) [ 61.774079][ T6377] loop3: lost filesystem error report for type 5 error -117 [ 61.774696][ T6377] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.799270][ T6373] vlan0: entered allmulticast mode [ 61.799310][ T6373] veth0_vlan: entered allmulticast mode [ 62.350582][ T6395] netlink: 68 bytes leftover after parsing attributes in process `syz.6.364'. [ 62.406313][ T6401] loop5: detected capacity change from 0 to 128 [ 62.550283][ T6407] loop6: detected capacity change from 0 to 1024 [ 62.565364][ T6407] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 62.604968][ T6030] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 62.770328][ T6422] loop5: detected capacity change from 0 to 8 [ 62.774940][ T6422] squashfs: Unknown parameter '' [ 62.782874][ T6422] squashfs: Unknown parameter '' [ 62.790981][ T6422] squashfs: Unknown parameter '' [ 62.792234][ T6422] squashfs: Unknown parameter '' [ 62.799339][ T6422] squashfs: Unknown parameter '' [ 62.800233][ T6422] squashfs: Unknown parameter '' [ 62.801808][ T6422] squashfs: Unknown parameter '' [ 62.802679][ T6422] squashfs: Unknown parameter '' [ 62.812942][ T6422] squashfs: Unknown parameter '' [ 62.827626][ T6422] squashfs: Unknown parameter '' [ 62.828518][ T6422] squashfs: Unknown parameter '' [ 62.829330][ T6422] squashfs: Unknown parameter '' [ 62.831658][ T6422] squashfs: Unknown parameter '' [ 62.935391][ T6425] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 62.935420][ T6425] IPv6: NLM_F_CREATE should be set when creating new route [ 62.935442][ T6425] IPv6: NLM_F_CREATE should be set when creating new route [ 62.949725][ T4342] hid_parser_main: 91 callbacks suppressed [ 62.949759][ T4342] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.953800][ T4342] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 63.056200][ T6438] netlink: 'syz.6.378': attribute type 1 has an invalid length. [ 63.109996][ T6445] gretap1: entered promiscuous mode [ 63.132126][ T6439] fido_id[6439]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 63.167908][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 63.167948][ T30] audit: type=1326 audit(68.151:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6451 comm="syz.3.382" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c5789e8 code=0x0 [ 63.173468][ T30] audit: type=1326 audit(68.161:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6451 comm="syz.3.382" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c5789e8 code=0x0 [ 63.183357][ T6433] EXT4-fs: Ignoring removed mblk_io_submit option [ 63.187637][ T6433] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 63.196935][ T50] Bluetooth: hci1: command tx timeout [ 63.288754][ T6465] tc_dump_action: action bad kind [ 63.299544][ T6466] tc_dump_action: action bad kind [ 63.808201][ T50] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 63.810297][ T50] CPU: 1 UID: 0 PID: 50 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT [ 63.810316][ T50] Tainted: [L]=SOFTLOCKUP [ 63.810320][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 63.810327][ T50] Workqueue: hci2 hci_rx_work [ 63.810348][ T50] Call trace: [ 63.810352][ T50] show_stack+0x2c/0x3c (C) [ 63.810367][ T50] __dump_stack+0x30/0x40 [ 63.810378][ T50] dump_stack_lvl+0xd8/0x12c [ 63.810389][ T50] dump_stack+0x1c/0x28 [ 63.810398][ T50] sysfs_warn_dup+0x9c/0xb8 [ 63.810411][ T50] sysfs_create_dir_ns+0x190/0x1f4 [ 63.810423][ T50] kobject_add_internal+0x28c/0x6e8 [ 63.810436][ T50] kobject_add_varg+0x98/0xe4 [ 63.810447][ T50] kobject_add+0x110/0x1cc [ 63.810457][ T50] device_add+0x390/0x9e4 [ 63.810467][ T50] hci_conn_add_sysfs+0xc0/0x1f4 [ 63.810476][ T50] le_conn_complete_evt+0xc3c/0x109c [ 63.810484][ T50] hci_le_conn_complete_evt+0x114/0x40c [ 63.810497][ T50] hci_le_meta_evt+0x2d4/0x49c [ 63.810506][ T50] hci_event_packet+0x4e4/0xa00 [ 63.810514][ T50] hci_rx_work+0x2fc/0xd1c [ 63.810525][ T50] process_one_work+0x78c/0x173c [ 63.810535][ T50] process_scheduled_works+0xdc/0x13c [ 63.810546][ T50] worker_thread+0x770/0xbd0 [ 63.810556][ T50] kthread+0x2f0/0x3c0 [ 63.810565][ T50] ret_from_fork+0x10/0x20 [ 63.812569][ T50] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 63.812655][ T50] Bluetooth: hci2: failed to register connection device [ 64.503582][ T1573] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.503652][ T1573] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.843790][ T6499] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 64.843814][ T6499] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 64.847965][ T6499] vhci_hcd vhci_hcd.0: Device attached [ 64.857474][ T6499] vhci_hcd vhci_hcd.0: port 0 already used [ 65.004345][ T26] cfg80211: failed to load regulatory.db [ 65.098300][ T6531] netlink: 12 bytes leftover after parsing attributes in process `syz.5.400'. [ 65.098349][ T6531] netlink: 36 bytes leftover after parsing attributes in process `syz.5.400'. [ 65.133992][ T10] usb 13-1: SetAddress Request (2) to port 0 [ 65.134060][ T10] usb 13-1: new SuperSpeed USB device number 2 using vhci_hcd [ 65.192963][ T6539] netlink: 216 bytes leftover after parsing attributes in process `syz.5.402'. [ 65.193004][ T6539] netlink: 24 bytes leftover after parsing attributes in process `syz.5.402'. [ 65.193432][ T6539] netlink: 16 bytes leftover after parsing attributes in process `syz.5.402'. [ 65.215812][ T6541] netlink: 'syz.3.403': attribute type 30 has an invalid length. [ 65.273840][ T50] Bluetooth: hci1: command tx timeout [ 65.294650][ T6554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.403'. [ 65.294691][ T6554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.403'. [ 65.294716][ T6554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.403'. [ 65.294734][ T6554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.403'. [ 65.294750][ T6554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.403'. [ 65.425977][ T6557] netlink: 'syz.2.406': attribute type 1 has an invalid length. [ 66.385926][ T6571] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.386716][ T6571] bridge_slave_1: left allmulticast mode [ 66.408248][ T6571] bridge_slave_1: left promiscuous mode [ 66.408419][ T6571] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.424613][ T6587] set_capacity_and_notify: 14 callbacks suppressed [ 66.424643][ T6587] loop5: detected capacity change from 0 to 1024 [ 66.431017][ T6587] EXT4-fs: test_dummy_encryption requires encrypt feature [ 66.446847][ T6583] overlay: ./file0 is not a directory [ 66.531242][ T6600] loop6: detected capacity change from 0 to 512 [ 66.783916][ T6600] EXT4-fs mount: 3 callbacks suppressed [ 66.786217][ T6600] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.791961][ T6600] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.809278][ T6607] loop3: detected capacity change from 0 to 512 [ 66.814630][ T6607] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 66.822600][ T6607] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 66.822769][ T6607] EXT4-fs (loop3): orphan cleanup on readonly fs [ 66.823418][ T6607] Quota error (device loop3): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 66.823517][ T6607] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 66.823530][ T6607] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 66.825970][ T6607] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #16: comm syz.3.419: iget: immutable or append flags not allowed on symlinks [ 66.825987][ T6607] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 66.833036][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 66.833050][ C1] EXT4-fs (loop3): initial error at time 71: ext4_orphan_get:1397: inode 16 [ 66.833068][ C1] EXT4-fs (loop3): last error at time 71: ext4_orphan_get:1397: inode 16 [ 66.833203][ T6607] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.419: couldn't read orphan inode 16 (err -117) [ 66.833218][ T6607] loop3: lost filesystem error report for type 5 error -117 [ 66.834066][ T6607] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 66.855574][ T4678] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.862029][ T6600] loop6: detected capacity change from 0 to 4096 [ 66.879127][ T6600] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.940693][ T6030] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.978652][ T6617] binder: 6616:6617 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 68.119075][ T6644] Injecting memory failure for pfn 0x139010 at process virtual address 0x20000000 [ 68.124423][ T6644] Memory failure: 0x139010: Sending SIGBUS to syz.3.428:6644 due to hardware memory corruption [ 68.124466][ T6644] Memory failure: 0x139010: recovery action for unsplit thp: Failed [ 68.156467][ T6647] loop2: detected capacity change from 0 to 512 [ 68.156835][ T6647] EXT4-fs: Ignoring removed oldalloc option [ 68.175139][ T6647] EXT4-fs (loop2): 1 truncate cleaned up [ 68.176758][ T6647] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.286064][ T6659] netlink: 'syz.3.432': attribute type 30 has an invalid length. [ 68.349391][ T6662] can0: slcan on ttyS3. [ 68.364479][ T4669] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.397659][ T6660] can0 (unregistered): slcan off ttyS3. [ 68.561365][ T6681] syz_tun: entered allmulticast mode [ 69.220291][ T6665] syz_tun: left allmulticast mode [ 69.297192][ T6703] loop2: detected capacity change from 0 to 512 [ 69.303458][ T6703] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 69.303580][ T6703] EXT4-fs (loop2): orphan cleanup on readonly fs [ 69.306663][ T6703] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 69.310521][ T6703] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 69.319720][ T6703] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #13: comm syz.2.437: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 69.319758][ T6703] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 69.323056][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 69.323071][ C1] EXT4-fs (loop2): last error at time 74: ext4_ext_check_inode:521: inode 13 [ 69.328709][ T6703] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.437: couldn't read orphan inode 13 (err -117) [ 69.328745][ T6703] loop2: lost filesystem error report for type 5 error -117 [ 69.331629][ T6703] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.340680][ T6703] EXT4-fs error (device loop2): ext4_lookup:1785: comm syz.2.437: inode #15: comm syz.2.437: iget: illegal inode # [ 69.359479][ T6706] loop3: detected capacity change from 0 to 1024 [ 69.365022][ T6706] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.383803][ T6706] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 69.384004][ T6706] bridge2: entered promiscuous mode [ 69.398289][ T4678] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.427093][ T4669] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.982500][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 70.344774][ T6733] sctp: [Deprecated]: syz.6.443 (pid 6733) Use of int in max_burst socket option. [ 70.344774][ T6733] Use struct sctp_assoc_value instead [ 70.562233][ T6740] loop3: detected capacity change from 0 to 512 [ 70.588332][ T6740] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.667820][ T4678] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.881364][ T6761] loop2: detected capacity change from 0 to 256 [ 70.882026][ T6761] vfat: Deprecated parameter 'posix' [ 70.882036][ T6761] FAT-fs: "posix" option is obsolete, not supported now [ 70.887459][ T6761] __nla_validate_parse: 54 callbacks suppressed [ 70.890749][ T6761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.448'. [ 71.236577][ T6779] netlink: 'syz.2.451': attribute type 15 has an invalid length. [ 71.236750][ T6779] dlm: plock device version mismatch: kernel (1.2.0), user (1.255.0) [ 71.396603][ T6800] netlink: 264 bytes leftover after parsing attributes in process `syz.3.456'. [ 71.905995][ T6803] loop3: detected capacity change from 0 to 256 [ 72.014698][ T6798] loop5: detected capacity change from 0 to 2048 [ 72.041732][ T6798] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.045696][ T6811] overlayfs: failed to resolve './bus': -2 [ 72.075543][ T4982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.118470][ T6822] netlink: 8 bytes leftover after parsing attributes in process `syz.5.458'. [ 72.124852][ T6822] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 72.131551][ T6819] loop6: detected capacity change from 0 to 512 [ 72.158289][ T6819] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.159356][ T6822] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 72.170977][ T921] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.189119][ T6030] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.352741][ T6849] loop3: detected capacity change from 0 to 2048 [ 72.602024][ T6849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.637646][ T4678] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.074579][ T6887] netlink: 8 bytes leftover after parsing attributes in process `syz.5.469'. [ 73.197004][ T6899] loop6: detected capacity change from 0 to 512 [ 73.199678][ T6899] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 73.206388][ T6899] EXT4-fs (loop6): orphan cleanup on readonly fs [ 73.206958][ T6899] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.471: bad orphan inode 15 [ 73.206975][ T6899] loop6: lost filesystem error report for type 5 error -117 [ 73.207252][ T6899] ext4_test_bit(bit=14, block=18) = 1 [ 73.207264][ T6899] is_bad_inode(inode)=0 [ 73.207269][ T6899] NEXT_ORPHAN(inode)=1023 [ 73.207273][ T6899] max_ino=32 [ 73.207277][ T6899] i_nlink=0 [ 73.211650][ T6899] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2972: inode #15: comm syz.6.471: corrupted xattr block 19: e_value size too large [ 73.211674][ T6899] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 73.212192][ T6899] EXT4-fs warning (device loop6): ext4_evict_inode:287: xattr delete (err -117) [ 73.214854][ T6899] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 73.282442][ T6913] loop5: detected capacity change from 0 to 512 [ 73.286146][ T6913] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 73.286841][ T6030] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.305271][ T6913] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.474: iget: bad i_size value: 38620345925642 [ 73.307633][ T6913] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 73.307952][ T6913] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.474: couldn't read orphan inode 15 (err -117) [ 73.311654][ T6913] loop5: lost filesystem error report for type 5 error -117 [ 73.312451][ T6913] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.493219][ T6923] EXT4-fs error (device loop5): __ext4_iget:5481: inode #16: block 50331678: comm syz.5.474: invalid block [ 73.755058][ T6930] fuse: Invalid rootmode [ 73.808818][ T6934] loop6: detected capacity change from 0 to 512 [ 73.810305][ T6934] overlayfs: failed lookup in lower (newroot/35, name='file0', err=-40): overlapping layers [ 73.812090][ T6934] overlayfs: failed lookup in lower (newroot/35, name='file0', err=-40): overlapping layers [ 73.813523][ T6934] overlayfs: failed lookup in lower (newroot/35, name='file0', err=-40): overlapping layers [ 74.806906][ T4982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.807881][ T6958] Injecting memory failure for pfn 0x14990a at process virtual address 0x2050a000 [ 74.818550][ T6958] Memory failure: 0x14990a: recovery action for clean LRU page: Recovered [ 74.835094][ T6960] netlink: 'syz.6.488': attribute type 1 has an invalid length. [ 74.843418][ T6960] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.845773][ T6960] netlink: 4 bytes leftover after parsing attributes in process `syz.6.488'. [ 74.850782][ T6964] netlink: 25 bytes leftover after parsing attributes in process `syz.5.486'. [ 74.850827][ T6964] netlink: 25 bytes leftover after parsing attributes in process `syz.5.486'. [ 74.868999][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.485'. [ 74.906306][ T6960] bond1: (slave ip6gretap1): making interface the new active one [ 74.949907][ T6960] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 74.955507][ T6969] loop5: detected capacity change from 0 to 128 [ 74.955805][ T6969] ext4: Unknown parameter 'obj_user' [ 75.007123][ T6980] loop5: detected capacity change from 0 to 256 [ 75.246316][ T6985] netlink: 80 bytes leftover after parsing attributes in process `syz.6.493'. [ 75.251725][ T6980] syzkaller0: entered promiscuous mode [ 75.256088][ T6980] syzkaller0: entered allmulticast mode [ 75.434628][ T6994] loop5: detected capacity change from 0 to 512 [ 75.449302][ T6994] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 75.452657][ T6994] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 75.455292][ T6994] System zones: 0-2, 18-18, 34-34 [ 75.457710][ T6994] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.495: bad orphan inode 15 [ 75.459606][ T6994] loop5: lost filesystem error report for type 5 error -117 [ 75.460002][ T6994] ext4_test_bit(bit=14, block=18) = 1 [ 75.462611][ T6994] is_bad_inode(inode)=0 [ 75.463375][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 75.463388][ C0] EXT4-fs (loop5): initial error at time 80: ext4_orphan_get:1423 [ 75.463404][ C0] EXT4-fs (loop5): last error at time 80: ext4_orphan_get:1423 [ 75.470465][ T6994] NEXT_ORPHAN(inode)=2264924160 [ 75.471438][ T6994] max_ino=32 [ 75.472656][ T6994] i_nlink=0 [ 75.474825][ T6994] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2972: inode #15: comm syz.5.495: corrupted xattr block 19: e_value out of bounds [ 75.477659][ T6994] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 75.477956][ T6994] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 75.480076][ T6994] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.484799][ T6993] EXT4-fs error (device loop5): ext4_search_dir:1474: inode #2: block 3: comm syz.5.495: bad entry in directory: directory entry overrun - offset=44, inode=262156, rec_len=4096, size=4096 fake=0 [ 75.498572][ T4982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.562364][ T6999] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.569773][ T6999] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 75.576142][ T6999] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 75.578684][ T6999] EXT4-fs (loop5): This should not happen!! Data will be lost [ 75.578684][ T6999] [ 75.580744][ T6999] EXT4-fs (loop5): Total free blocks count 0 [ 75.582070][ T6999] EXT4-fs (loop5): Free/Dirty block details [ 75.583517][ T6999] EXT4-fs (loop5): free_blocks=65280 [ 75.584701][ T6999] EXT4-fs (loop5): dirty_blocks=33 [ 75.585940][ T6999] EXT4-fs (loop5): Block reservation details [ 75.587226][ T6999] EXT4-fs (loop5): i_reserved_data_blocks=33 [ 75.590384][ T6999] Direct I/O collision with buffered writes! File: /file1 Comm: syz.5.497 [ 75.595425][ T6999] netlink: 4 bytes leftover after parsing attributes in process `syz.5.497'. [ 75.617365][ T5722] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 75.621192][ T4982] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 76.043656][ T7058] netlink: 16 bytes leftover after parsing attributes in process `syz.5.513'. [ 76.047008][ T7058] netlink: 24 bytes leftover after parsing attributes in process `syz.5.513'. [ 76.075259][ T7058] SET target dimension over the limit! [ 76.201723][ T7064] netlink: 'syz.3.516': attribute type 6 has an invalid length. [ 76.201756][ T7064] netlink: 48 bytes leftover after parsing attributes in process `syz.3.516'. [ 76.201822][ T7064] netlink: 'syz.3.516': attribute type 6 has an invalid length. [ 76.305776][ T7072] netlink: 16 bytes leftover after parsing attributes in process `syz.3.517'. [ 76.485586][ T7081] vfat: Unknown parameter 'uodepage' [ 76.489713][ T7081] batadv_slave_1: entered promiscuous mode [ 76.520974][ T7080] batadv_slave_1: left promiscuous mode [ 76.615109][ T7089] netlink: 'syz.3.522': attribute type 1 has an invalid length. [ 76.634429][ T7089] 8021q: adding VLAN 0 to HW filter on device bond3 [ 76.892103][ T7112] FAT-fs (loop3): Directory bread(block 32) failed [ 76.893375][ T7112] FAT-fs (loop3): Directory bread(block 33) failed [ 76.895833][ T7112] FAT-fs (loop3): Directory bread(block 34) failed [ 76.896886][ T7112] FAT-fs (loop3): Directory bread(block 35) failed [ 76.897948][ T7112] FAT-fs (loop3): Directory bread(block 36) failed [ 76.899034][ T7112] FAT-fs (loop3): Directory bread(block 37) failed [ 76.900269][ T7112] FAT-fs (loop3): Directory bread(block 38) failed [ 76.901575][ T4677] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 76.903767][ T7112] FAT-fs (loop3): Directory bread(block 39) failed [ 76.904992][ T4677] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 76.906743][ T7112] FAT-fs (loop3): Directory bread(block 40) failed [ 76.907905][ T4677] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 76.909224][ T7112] FAT-fs (loop3): Directory bread(block 41) failed [ 76.911640][ T4677] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 76.911921][ T4677] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 77.050522][ T7122] Smack: duplicate mount options [ 77.120084][ T7127] set_capacity_and_notify: 4 callbacks suppressed [ 77.124263][ T7127] loop3: detected capacity change from 0 to 256 [ 77.128618][ T7127] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 77.141725][ T7127] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 77.268784][ T7133] loop3: detected capacity change from 0 to 512 [ 77.288835][ T7133] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.364706][ T7141] Bluetooth: MGMT ver 1.23 [ 77.367256][ T7146] loop6: detected capacity change from 0 to 512 [ 77.466177][ T7113] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.468008][ T7113] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.469258][ T7155] loop6: detected capacity change from 0 to 1024 [ 77.469341][ T7113] bridge_slave_0: entered allmulticast mode [ 77.469841][ T7113] bridge_slave_0: entered promiscuous mode [ 77.470692][ T7113] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.471018][ T7113] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.471090][ T7113] bridge_slave_1: entered allmulticast mode [ 77.474049][ T7113] bridge_slave_1: entered promiscuous mode [ 77.480448][ T7155] EXT4-fs: Ignoring removed mblk_io_submit option [ 77.490774][ T7113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.492146][ T7113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.497745][ T7155] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 77.517291][ T7155] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: block 3: comm syz.6.536: lblock 3 mapped to illegal pblock 3 (length 3) [ 77.525486][ T7113] team0: Port device team_slave_0 added [ 77.526397][ T7113] team0: Port device team_slave_1 added [ 77.530766][ T7155] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 77.534615][ T7155] EXT4-fs (loop6): This should not happen!! Data will be lost [ 77.534615][ T7155] [ 77.537227][ T7155] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: block 8: comm syz.6.536: lblock 8 mapped to illegal pblock 8 (length 8) [ 77.546019][ T7155] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 77.546055][ T7155] EXT4-fs (loop6): This should not happen!! Data will be lost [ 77.546055][ T7155] [ 77.570488][ T7113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.570514][ T7113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.570528][ T7113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.571091][ T7113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.571097][ T7113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.571109][ T7113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.587436][ T6030] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 77.588224][ T6030] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 77.617944][ T4678] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.623445][ T7113] hsr_slave_0: entered promiscuous mode [ 77.625017][ T7113] hsr_slave_1: entered promiscuous mode [ 77.626207][ T7113] debugfs: 'hsr0' already exists in 'hsr' [ 77.627195][ T7113] Cannot create hsr debugfs directory [ 77.821162][ T7113] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 77.831703][ T7113] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.834823][ T7113] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 77.837351][ T7113] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.838549][ T7171] loop3: detected capacity change from 0 to 4096 [ 77.840489][ T7113] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 77.857153][ T7113] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.857469][ T7113] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 77.858154][ T7171] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.859550][ T7113] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.896910][ T7113] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.896960][ T7113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.897058][ T7113] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.897114][ T7113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.901631][ T7173] loop5: detected capacity change from 0 to 4096 [ 77.909768][ T7173] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.912591][ T7187] netlink: 'syz.3.542': attribute type 6 has an invalid length. [ 77.939862][ T7187] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz.3.542: invalid fast symlink length 131109 [ 77.965172][ T7173] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #15: comm syz.5.543: corrupted inode contents [ 77.967920][ T7173] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #15: comm syz.5.543: mark_inode_dirty error [ 77.970450][ T7173] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #15: comm syz.5.543: corrupted inode contents [ 77.973268][ T7173] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #15: comm syz.5.543: mark_inode_dirty error [ 77.975380][ T7173] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #15: comm syz.5.543: corrupted inode contents [ 77.977861][ T7173] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #15: comm syz.5.543: mark_inode_dirty error [ 77.980272][ T7173] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #15: comm syz.5.543: corrupted inode contents [ 77.985432][ T7173] EXT4-fs error (device loop5): ext4_truncate:4690: inode #15: comm syz.5.543: mark_inode_dirty error [ 77.987767][ T7173] EXT4-fs error (device loop5) in ext4_setattr:6120: Corrupt filesystem [ 78.023781][ T4678] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.059454][ T7173] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #15: comm syz.5.543: corrupted inode contents [ 78.086023][ T7173] netlink: 20 bytes leftover after parsing attributes in process `syz.5.543'. [ 78.091667][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.098275][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.109299][ T7192] loop3: detected capacity change from 0 to 128 [ 78.109738][ T7192] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 78.114946][ T7192] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 78.121175][ T7113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.172575][ T7113] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.180748][ T921] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.180794][ T921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.182579][ T921] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.182605][ T921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.239973][ T7113] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.291116][ T7199] devpts: Unknown parameter 'ma0400000000000' [ 78.304898][ T7202] IPVS: set_ctl: invalid protocol: 60 172.20.20.13:20000 [ 78.305274][ T7202] IPVS: set_ctl: invalid protocol: 60 172.20.20.13:20000 [ 78.307714][ T7202] netlink: 40 bytes leftover after parsing attributes in process `syz.2.549'. [ 78.330191][ T7204] syzkaller0: entered promiscuous mode [ 78.330226][ T7204] syzkaller0: entered allmulticast mode [ 78.422200][ T7210] loop3: detected capacity change from 0 to 1024 [ 78.433989][ T7210] EXT4-fs: Ignoring removed orlov option [ 78.449637][ T7210] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.480346][ T7210] netlink: 112 bytes leftover after parsing attributes in process `syz.3.550'. [ 78.539894][ T4678] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.540304][ T7113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.610832][ T4982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.633412][ T4677] Bluetooth: hci1: command 0x0405 tx timeout [ 78.722747][ T7113] veth0_vlan: entered promiscuous mode [ 78.730149][ T7113] veth1_vlan: entered promiscuous mode [ 78.763919][ T7113] veth0_macvtap: entered promiscuous mode [ 78.768928][ T7113] veth1_macvtap: entered promiscuous mode [ 78.781393][ T7113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.787605][ T7113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.802280][ T3443] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.802780][ T3443] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.802806][ T3443] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.802834][ T3443] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.844745][ T5722] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.844775][ T5722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.848939][ T7246] netlink: 16 bytes leftover after parsing attributes in process `syz.5.560'. [ 78.848981][ T7246] netlink: 16 bytes leftover after parsing attributes in process `syz.5.560'. [ 78.866455][ T3443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.866485][ T3443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.956836][ T50] Bluetooth: hci5: command tx timeout [ 79.264510][ T7258] netlink: 4 bytes leftover after parsing attributes in process `syz.5.563'. [ 79.477920][ T7269] loop5: detected capacity change from 0 to 2048 [ 79.531456][ T7269] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.630828][ T7279] netlink: 'syz.2.567': attribute type 4 has an invalid length. [ 79.882591][ T4982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.957353][ T7288] loop5: detected capacity change from 0 to 512 [ 79.960252][ T7288] EXT4-fs: Ignoring removed mblk_io_submit option [ 79.961480][ T7288] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 79.961497][ T7288] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 79.961508][ T7288] EXT4-fs (loop5): group descriptors corrupted! [ 80.137163][ T7303] netlink: 'syz.6.573': attribute type 8 has an invalid length. [ 80.149605][ T7303] bond0: entered promiscuous mode [ 80.149637][ T7303] bond_slave_0: entered promiscuous mode [ 80.149736][ T7303] bond_slave_1: entered promiscuous mode [ 80.157967][ T7303] gretap0: entered promiscuous mode [ 80.161701][ T7303] team0: entered promiscuous mode [ 80.161733][ T7303] team_slave_0: entered promiscuous mode [ 80.161803][ T7303] team_slave_1: entered promiscuous mode [ 80.176202][ T7303] hsr1: entered promiscuous mode [ 80.205195][ T7305] ipt_rpfilter: unknown options [ 80.226059][ T7306] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.244278][ T7310] binder: 7307:7310 BC_ACQUIRE_DONE u0000000000000002 node 2 cookie mismatch 00000000000000fc != 0000000000000000 [ 80.348675][ T6030] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.372222][ T7317] xt_l2tp: missing protocol rule (udp|l2tpip) [ 80.380712][ T7317] overlayfs: failed lookup in lower (newroot/2, name='bus', err=-40): overlapping layers [ 80.429409][ T7319] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 81.033303][ T50] Bluetooth: hci5: command tx timeout [ 81.207227][ T7325] __nla_validate_parse: 2 callbacks suppressed [ 81.207267][ T7325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.579'. [ 81.260440][ T7330] misc userio: The device must be registered before sending interrupts [ 81.291772][ T7332] netlink: 4 bytes leftover after parsing attributes in process `syz.6.581'. [ 81.309142][ T7332] team1: entered promiscuous mode [ 81.310097][ T7332] team1: entered allmulticast mode [ 81.311426][ T7332] 8021q: adding VLAN 0 to HW filter on device team1 [ 81.421376][ T7347] EXT4-fs (loop6): failed to open journal device unknown-block(0,0) -6 [ 81.436530][ T30] audit: type=1326 audit(86.421:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7353 comm="syz.7.587" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb29789e8 code=0x0 [ 81.674368][ T7382] capability: warning: `syz.6.594' uses 32-bit capabilities (legacy support in use) [ 82.692298][ T7403] set_capacity_and_notify: 2 callbacks suppressed [ 82.692344][ T7403] loop7: detected capacity change from 0 to 2048 [ 82.719380][ T7409] loop5: detected capacity change from 0 to 1024 [ 82.729415][ T7409] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.733340][ T7409] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 82.733386][ T7409] System zones: 0-1, 3-36 [ 82.736926][ T7409] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.767890][ T7403] loop7: p3 < > p4 < > [ 82.767920][ T7403] loop7: partition table partially beyond EOD, truncated [ 82.768028][ T7403] loop7: p3 start 4284289 is beyond EOD, truncated [ 82.846552][ T4982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.880151][ T4691] udevd[4691]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 82.909023][ T7420] netlink: 476 bytes leftover after parsing attributes in process `syz.5.605'. [ 82.979072][ T7423] loop3: detected capacity change from 0 to 8192 [ 82.985927][ T7427] loop5: detected capacity change from 0 to 512 [ 83.019776][ T7418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.027251][ T7427] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.134304][ T50] Bluetooth: hci5: command tx timeout [ 83.306764][ T7441] cgroup: subsys name conflicts with all [ 83.332733][ T7445] loop2: detected capacity change from 0 to 512 [ 83.335265][ T7445] EXT4-fs: Ignoring removed bh option [ 83.338778][ T7445] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 83.344678][ T7445] EXT4-fs (loop2): 1 truncate cleaned up [ 83.345522][ T7445] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.626209][ T7450] netlink: 'syz.7.613': attribute type 1 has an invalid length. [ 83.628007][ T7451] xfrm0: entered promiscuous mode [ 83.628029][ T7451] xfrm0: entered allmulticast mode [ 83.628344][ T7450] netlink: 'syz.7.613': attribute type 1 has an invalid length. [ 83.628399][ T7450] netlink: 'syz.7.613': attribute type 1 has an invalid length. [ 83.628448][ T7450] netlink: 'syz.7.613': attribute type 1 has an invalid length. [ 83.628494][ T7450] netlink: 'syz.7.613': attribute type 1 has an invalid length. [ 83.628544][ T7450] netlink: 'syz.7.613': attribute type 1 has an invalid length. [ 83.628592][ T7450] netlink: 'syz.7.613': attribute type 1 has an invalid length. [ 83.628634][ T7450] netlink: 'syz.7.613': attribute type 1 has an invalid length. [ 83.628683][ T7450] netlink: 'syz.7.613': attribute type 1 has an invalid length. [ 83.751547][ T4982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.786416][ T7459] loop7: detected capacity change from 0 to 128 [ 83.802918][ T7459] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.839116][ T4787] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 83.845004][ T4787] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 84.859005][ T4669] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.187401][ T7503] binder: 7502:7503 BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 85.187435][ T7503] binder: 7502:7503 ioctl c0306201 20000640 returned -22 [ 85.194498][ T50] Bluetooth: hci5: command tx timeout [ 85.243567][ T7508] netlink: 16 bytes leftover after parsing attributes in process `syz.5.628'. [ 85.465422][ T7516] input: syz1 as /devices/virtual/input/input7 [ 85.512360][ T7113] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.561061][ T7529] loop6: detected capacity change from 0 to 512 [ 85.563753][ T7529] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 85.603736][ T7529] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.635: bad orphan inode 131083 [ 85.603777][ T7529] loop6: lost filesystem error report for type 5 error -117 [ 85.606632][ T7529] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.630566][ T7529] syz.6.635 (pid 7529) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 85.665354][ T6030] EXT4-fs error (device loop6): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 86.498342][ T7547] bridge0: port 2(syz_tun) entered blocking state [ 86.498406][ T7547] bridge0: port 2(syz_tun) entered disabled state [ 86.498502][ T7547] syz_tun: entered allmulticast mode [ 86.499037][ T7547] syz_tun: entered promiscuous mode [ 86.499215][ T7547] bridge0: port 2(syz_tun) entered blocking state [ 86.499245][ T7547] bridge0: port 2(syz_tun) entered forwarding state [ 86.539741][ T7549] loop2: detected capacity change from 0 to 8 [ 86.542384][ T7549] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 86.543176][ T7549] unable to read xattr id index table [ 86.646851][ T7540] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.718505][ T7558] loop3: detected capacity change from 0 to 8 [ 86.722700][ T7558] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 86.728808][ T7553] loop2: detected capacity change from 0 to 8192 [ 86.732155][ T7558] unable to read xattr id index table [ 86.735109][ T7558] SQUASHFS error: zlib decompression failed, data probably corrupt [ 86.735134][ T7558] SQUASHFS error: Failed to read block 0x9b: -5 [ 86.735151][ T7558] SQUASHFS error: Unable to read metadata cache entry [99] [ 86.735164][ T7558] SQUASHFS error: Unable to read inode 0x127 [ 86.775756][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.795933][ T7553] loop2: p1 p2 p4 [ 86.796036][ T7553] loop2: p1 size 65536 extends beyond EOD, truncated [ 86.796597][ T7553] loop2: p2 start 861536256 is beyond EOD, truncated [ 86.796609][ T7553] loop2: p4 size 65536 extends beyond EOD, truncated [ 86.814731][ T7563] netlink: 12 bytes leftover after parsing attributes in process `syz.7.644'. [ 86.879171][ T7571] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 86.879627][ T7571] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 86.883599][ T7574] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 86.938277][ T4663] udevd[4663]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 86.942344][ T4691] udevd[4691]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 87.008426][ T4677] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.011069][ T4677] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.012679][ T4677] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.013702][ T4677] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.013963][ T4677] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.029975][ T7581] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 87.039461][ T7581] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.650: Invalid block bitmap block 0 in block_group 0 [ 87.039496][ T7581] loop2: lost filesystem error report for type 5 error -117 [ 87.039961][ T7581] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 87.039978][ T7581] loop2: lost filesystem error report for type 5 error -117 [ 87.040139][ T7581] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.650: attempt to clear invalid blocks 983261 len 1 [ 87.040156][ T7581] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 87.040304][ T7581] EXT4-fs error (device loop2): __ext4_get_inode_loc:4885: comm syz.2.650: Invalid inode table block 0 in block_group 0 [ 87.040316][ T7581] loop2: lost filesystem error report for type 5 error -117 [ 87.041575][ T7581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 87.041590][ T7581] loop2: lost filesystem error report for type 5 error -117 [ 87.041716][ T7581] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 87.041725][ T7581] loop2: lost filesystem error report for type 5 error -117 [ 87.042413][ T7581] EXT4-fs error (device loop2): __ext4_get_inode_loc:4885: comm syz.2.650: Invalid inode table block 0 in block_group 0 [ 87.042433][ T7581] loop2: lost filesystem error report for type 5 error -117 [ 87.042615][ T7581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 87.042624][ T7581] loop2: lost filesystem error report for type 5 error -117 [ 87.042743][ T7581] EXT4-fs error (device loop2): ext4_truncate:4690: inode #11: comm syz.2.650: mark_inode_dirty error [ 87.042755][ T7581] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 87.042865][ T7581] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 87.042879][ T7581] loop2: lost filesystem error report for type 5 error -117 [ 87.042995][ T7581] EXT4-fs error (device loop2): __ext4_get_inode_loc:4885: comm syz.2.650: Invalid inode table block 0 in block_group 0 [ 87.043006][ T7581] loop2: lost filesystem error report for type 5 error -117 [ 87.045354][ T7581] EXT4-fs (loop2): 1 truncate cleaned up [ 87.047519][ T7581] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.117641][ T4669] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.203916][ T7574] loop3: p2 < > p3 < p5 > p4 [ 87.203942][ T7574] loop3: partition table partially beyond EOD, truncated [ 87.204035][ T7574] loop3: p2 start 4278190080 is beyond EOD, truncated [ 87.204584][ T7574] loop3: p4 size 8192 extends beyond EOD, truncated [ 87.206123][ T7574] loop3: p5 size 8192 extends beyond EOD, truncated [ 87.418391][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.603628][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.682512][ T7600] EXT4-fs: Ignoring removed orlov option [ 87.703792][ T7600] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.726838][ T7600] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.652: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 87.737242][ T7578] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.740143][ T7578] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.740239][ T7578] bridge_slave_0: entered allmulticast mode [ 87.740717][ T7578] bridge_slave_0: entered promiscuous mode [ 87.744111][ T7578] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.744897][ T7578] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.744991][ T7578] bridge_slave_1: entered allmulticast mode [ 87.745884][ T7578] bridge_slave_1: entered promiscuous mode [ 87.760546][ T7578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.761686][ T7578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.768568][ T7578] team0: Port device team_slave_0 added [ 87.769846][ T7578] team0: Port device team_slave_1 added [ 87.788294][ T7578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.788324][ T7578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.788342][ T7578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.789333][ T7578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.789340][ T7578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.789351][ T7578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.852107][ T7611] set_capacity_and_notify: 4 callbacks suppressed [ 87.853426][ T7611] loop5: detected capacity change from 0 to 512 [ 87.868891][ T7113] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 87.870485][ T7113] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 87.896347][ T7611] EXT4-fs (loop5): 1 orphan inode deleted [ 87.896855][ T7611] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.998772][ T12] bridge_slave_1: left allmulticast mode [ 87.998810][ T12] bridge_slave_1: left promiscuous mode [ 87.998903][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.006018][ T12] bridge_slave_0: left allmulticast mode [ 88.006044][ T12] bridge_slave_0: left promiscuous mode [ 88.006121][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.119088][ T12] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 88.170285][ T12] gretap0 (unregistering): left promiscuous mode [ 88.208327][ T12] bond0 (unregistering): left promiscuous mode [ 88.208360][ T12] bond_slave_0: left promiscuous mode [ 88.208444][ T12] bond_slave_1: left promiscuous mode [ 88.211565][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.254967][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.294880][ T12] bond0 (unregistering): Released all slaves [ 88.297433][ T12] bond1 (unregistering): Released all slaves [ 88.302822][ T7578] hsr_slave_0: entered promiscuous mode [ 88.303332][ T7578] hsr_slave_1: entered promiscuous mode [ 88.303539][ T7578] debugfs: 'hsr0' already exists in 'hsr' [ 88.303549][ T7578] Cannot create hsr debugfs directory [ 88.311177][ T4357] 8021q: adding VLAN 0 to HW filter on device eth8 [ 88.415017][ T4982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.439095][ T7654] loop5: detected capacity change from 0 to 512 [ 88.440674][ T7654] ext2: Unknown parameter 'seclabel' [ 88.461573][ T7113] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.540131][ T7578] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 88.565046][ T7578] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.631241][ T4677] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 88.632262][ T4677] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 88.632578][ T4677] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 88.632907][ T4677] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 88.633448][ T4677] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 88.639193][ T7578] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 88.644421][ T7578] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.649329][ T7578] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 88.652141][ T7578] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.652656][ T4357] 8021q: adding VLAN 0 to HW filter on device eth9 [ 88.657463][ T7578] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 88.660019][ T7578] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.669672][ T7673] loop2: detected capacity change from 0 to 1024 [ 88.688883][ T7677] netlink: 25 bytes leftover after parsing attributes in process `syz.5.665'. [ 88.691111][ T7677] netlink: 25 bytes leftover after parsing attributes in process `syz.5.665'. [ 88.696373][ T7673] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 88.768711][ T12] team0: left promiscuous mode [ 88.768744][ T12] team_slave_0: left promiscuous mode [ 88.768834][ T12] team_slave_1: left promiscuous mode [ 88.775400][ T12] hsr_slave_0: left promiscuous mode [ 88.776354][ T12] hsr_slave_1: left promiscuous mode [ 88.776610][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.776620][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.777576][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.777586][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.782592][ T12] veth1_macvtap: left promiscuous mode [ 88.782666][ T12] veth0_macvtap: left promiscuous mode [ 88.782695][ T12] veth1_vlan: left promiscuous mode [ 88.782718][ T12] veth0_vlan: left promiscuous mode [ 88.861126][ T7695] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 16: comm syz.2.663: path /122/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 88.988078][ T12] team0 (unregistering): Port device team_slave_1 removed [ 88.992926][ T12] team0 (unregistering): Port device team_slave_0 removed [ 89.033971][ T50] Bluetooth: hci1: command tx timeout [ 89.117868][ T7578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.138152][ T7578] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.148369][ T5722] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.148417][ T5722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.148973][ T5722] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.148999][ T5722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.170851][ T7578] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 89.170890][ T7578] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.317607][ T7674] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.325226][ T7674] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.325333][ T7674] bridge_slave_0: entered allmulticast mode [ 89.325801][ T7674] bridge_slave_0: entered promiscuous mode [ 89.326534][ T7674] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.326552][ T7674] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.326611][ T7674] bridge_slave_1: entered allmulticast mode [ 89.327033][ T7674] bridge_slave_1: entered promiscuous mode [ 89.351485][ T7674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.355936][ T4357] 8021q: adding VLAN 0 to HW filter on device eth10 [ 89.358753][ T7674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.379081][ T7674] team0: Port device team_slave_0 added [ 89.379918][ T7674] team0: Port device team_slave_1 added [ 89.414675][ T1199] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.425729][ T7578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.432711][ T7674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.432750][ T7674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.432767][ T7674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.444293][ T7674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.444303][ T7674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.444315][ T7674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.496556][ T1199] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.505827][ T7674] hsr_slave_0: entered promiscuous mode [ 89.506183][ T7674] hsr_slave_1: entered promiscuous mode [ 89.506380][ T7674] debugfs: 'hsr0' already exists in 'hsr' [ 89.506389][ T7674] Cannot create hsr debugfs directory [ 89.573895][ T1199] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.605923][ T4669] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 89.659535][ T1199] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.728179][ T4357] 8021q: adding VLAN 0 to HW filter on device eth11 [ 89.755821][ T7578] veth0_vlan: entered promiscuous mode [ 89.757074][ T7674] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 89.759193][ T7674] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.777108][ T7674] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 89.779386][ T7674] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.781054][ T7674] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 89.784224][ T7674] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.786134][ T7674] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 89.789517][ T7674] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.794693][ T7578] veth1_vlan: entered promiscuous mode [ 89.815371][ T7767] loop2: detected capacity change from 0 to 1024 [ 89.822724][ T7578] veth0_macvtap: entered promiscuous mode [ 89.837589][ T7767] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 89.839123][ T7578] veth1_macvtap: entered promiscuous mode [ 89.847488][ T7767] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 3: comm syz.2.668: lblock 3 mapped to illegal pblock 3 (length 1) [ 89.854600][ T7767] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 89.857267][ T7767] EXT4-fs (loop2): This should not happen!! Data will be lost [ 89.857267][ T7767] [ 89.883881][ T7767] validate_nla: 25 callbacks suppressed [ 89.885193][ T7767] netlink: 'syz.2.668': attribute type 10 has an invalid length. [ 89.896710][ T7578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.902478][ T7578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.905439][ T7767] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.905471][ T7767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.905544][ T7767] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.905564][ T7767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.906655][ T7767] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 89.925294][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.925344][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.925364][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.925380][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.003626][ T5722] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 4: comm kworker/u8:10: lblock 4 mapped to illegal pblock 4 (length 2) [ 90.004777][ T5722] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 90.004797][ T5722] EXT4-fs (loop2): This should not happen!! Data will be lost [ 90.004797][ T5722] [ 90.005253][ T5722] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:10: lblock 8 mapped to illegal pblock 8 (length 8) [ 90.007033][ T5722] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 90.007047][ T5722] EXT4-fs (loop2): This should not happen!! Data will be lost [ 90.007047][ T5722] [ 90.007597][ T4669] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 90.008335][ T4669] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 90.037474][ T7793] loop5: detected capacity change from 0 to 512 [ 90.048035][ T7793] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 90.061809][ T7797] loop2: detected capacity change from 0 to 512 [ 90.067168][ T7793] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.077818][ T7797] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 90.083862][ T1199] bridge_slave_1: left allmulticast mode [ 90.083896][ T1199] bridge_slave_1: left promiscuous mode [ 90.083989][ T1199] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.149201][ T1199] bridge_slave_0: left allmulticast mode [ 90.149238][ T1199] bridge_slave_0: left promiscuous mode [ 90.149326][ T1199] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.255929][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.5.672'. [ 90.301492][ T7808] EXT4-fs warning (device loop2): dx_probe:837: inode #2: comm syz.2.670: Unimplemented hash flags: 0x0001 [ 90.301522][ T7808] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.670: Corrupt directory, running e2fsck is recommended [ 90.301572][ T7808] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 3: comm syz.2.670: path /125/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 90.371801][ T1199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.384515][ T1199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.415694][ T1199] bond0 (unregistering): Released all slaves [ 90.419449][ T4357] 8021q: adding VLAN 0 to HW filter on device eth12 [ 90.468047][ T7814] binder: 7813:7814 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 90.468085][ T7814] binder: 7813:7814 ioctl c0306201 20000540 returned -22 [ 90.469948][ T7809] loop5: detected capacity change from 0 to 1024 [ 90.470333][ T7809] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.473093][ T7809] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 90.593715][ T7674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.609864][ T7674] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.631126][ T5722] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.631171][ T5722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.639977][ T921] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.640026][ T921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.700832][ T7674] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.703811][ T7842] loop2: detected capacity change from 0 to 4096 [ 90.713784][ T50] Bluetooth: hci5: command tx timeout [ 90.720334][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.720362][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.815142][ T5722] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.815175][ T5722] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.849155][ T7856] securityfs: Unknown parameter 'ճOK3Ҽ~!6].x2ET~k5VROѻq(KbN^?i1M'Hِ [ 90.849155][ T7856] ZyzC˔ '’s0ekL' [ 90.894073][ T1199] hsr_slave_0: left promiscuous mode [ 90.919670][ T1199] hsr_slave_1: left promiscuous mode [ 90.920045][ T1199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.920057][ T1199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.925469][ T1199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.925499][ T1199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.950557][ T1199] veth1_macvtap: left promiscuous mode [ 90.950609][ T1199] veth0_macvtap: left promiscuous mode [ 90.950643][ T1199] veth1_vlan: left promiscuous mode [ 90.950669][ T1199] veth0_vlan: left promiscuous mode [ 91.115647][ T50] Bluetooth: hci1: command tx timeout [ 91.178454][ T1199] team0 (unregistering): Port device team_slave_1 removed [ 91.191325][ T1199] team0 (unregistering): Port device team_slave_0 removed [ 91.319503][ T4357] 8021q: adding VLAN 0 to HW filter on device eth13 [ 91.426167][ T7674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.475044][ T7900] loop8: detected capacity change from 0 to 256 [ 91.522359][ T7908] netlink: 4 bytes leftover after parsing attributes in process `syz.5.686'. [ 91.573991][ T7909] netlink: 20 bytes leftover after parsing attributes in process `syz.5.686'. [ 91.578276][ T7900] FAT-fs (loop8): Directory bread(block 64) failed [ 91.578308][ T7900] FAT-fs (loop8): Directory bread(block 65) failed [ 91.578348][ T7900] FAT-fs (loop8): Directory bread(block 66) failed [ 91.578366][ T7900] FAT-fs (loop8): Directory bread(block 67) failed [ 91.578394][ T7900] FAT-fs (loop8): Directory bread(block 68) failed [ 91.578410][ T7900] FAT-fs (loop8): Directory bread(block 69) failed [ 91.578436][ T7900] FAT-fs (loop8): Directory bread(block 70) failed [ 91.578450][ T7900] FAT-fs (loop8): Directory bread(block 71) failed [ 91.578476][ T7900] FAT-fs (loop8): Directory bread(block 72) failed [ 91.578490][ T7900] FAT-fs (loop8): Directory bread(block 73) failed [ 91.612540][ T7674] veth0_vlan: entered promiscuous mode [ 91.618238][ T7674] veth1_vlan: entered promiscuous mode [ 91.637549][ T7674] veth0_macvtap: entered promiscuous mode [ 91.645974][ T7916] netlink: 20 bytes leftover after parsing attributes in process `syz.3.687'. [ 91.650368][ T7674] veth1_macvtap: entered promiscuous mode [ 91.678216][ T7674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.696940][ T7674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.708118][ T40] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.708167][ T40] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.708186][ T40] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.708203][ T40] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.742019][ T7921] veth0_virt_wifi: entered promiscuous mode [ 91.768675][ T1199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.768706][ T1199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.793714][ T921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.793749][ T921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.922446][ T4357] 8021q: adding VLAN 0 to HW filter on device eth14 [ 92.092030][ T7930] loop9: detected capacity change from 0 to 32768 [ 92.139382][ T7930] loop9: p2 p3 < p5 p6 p7 > p4 < p8 p9 p10 > [ 92.139497][ T7930] loop9: p2 start 524288 is beyond EOD, truncated [ 92.152503][ T7930] loop9: p6 start 50334720 is beyond EOD, truncated [ 92.152544][ T7930] loop9: p7 size 33554432 extends beyond EOD, truncated [ 92.155570][ T7930] loop9: p8 start 524288 is beyond EOD, truncated [ 92.160884][ T7930] loop9: p10 start 50334720 is beyond EOD, truncated [ 92.289491][ T7951] ptrace attach of "ci-upstream-gce-arm64/syz-executor exec"[4669] was attempted by "v [ 92.293411][ T4357] 8021q: adding VLAN 0 to HW filter on device eth15 [ 92.296679][ T7952] Filesystem uses "lzo" compression. This is not supported [ 92.375177][ T7890] Set syz1 is full, maxelem 65536 reached [ 92.460098][ T4659] udevd[4659]: inotify_add_watch(7, /dev/loop9p5, 10) failed: No such file or directory [ 92.465050][ T4690] udevd[4690]: inotify_add_watch(7, /dev/loop9p9, 10) failed: No such file or directory [ 92.468512][ T4663] udevd[4663]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 92.471602][ T4691] udevd[4691]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 92.477784][ T4662] udevd[4662]: inotify_add_watch(7, /dev/loop9p7, 10) failed: No such file or directory [ 92.574794][ T7971] ext4: Unknown parameter './file0' [ 92.844797][ T50] Bluetooth: hci5: command tx timeout [ 92.856279][ T7978] IPv6: addrconf: prefix option has invalid lifetime [ 92.915655][ T7989] set_capacity_and_notify: 2 callbacks suppressed [ 92.915852][ T7989] loop2: detected capacity change from 0 to 1024 [ 92.935539][ T7993] loop8: detected capacity change from 0 to 512 [ 92.962472][ T7993] EXT4-fs warning (device loop8): dx_probe:861: inode #2: comm syz.8.699: dx entry: limit 0 != root limit 125 [ 92.962512][ T7993] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.699: Corrupt directory, running e2fsck is recommended [ 92.963083][ T7993] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #2: block 8: comm syz.8.699: lblock 11 mapped to illegal pblock 8 (length 1) [ 92.963102][ T7993] loop8: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 92.963600][ T7993] EXT4-fs (loop8): Remounting filesystem read-only [ 92.963742][ T7993] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 93.040016][ T8003] Injecting memory failure for pfn 0x1451fe at process virtual address 0x20ffe000 [ 93.043190][ T8003] Memory failure: 0x1451fe: unhandlable page. [ 93.043213][ T8003] Memory failure: 0x1451fe: recovery action for get hwpoison page: Ignored [ 93.049559][ T8003] loop5: detected capacity change from 0 to 512 [ 93.051070][ T8003] EXT4-fs (loop5): Test dummy encryption mode enabled [ 93.051102][ T8003] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 93.056751][ T8003] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.703: bad orphan inode 131083 [ 93.056785][ T8003] loop5: lost filesystem error report for type 5 error -117 [ 93.077078][ T8003] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.077382][ T8003] bridge_slave_1: left allmulticast mode [ 93.077395][ T8003] bridge_slave_1: left promiscuous mode [ 93.077455][ T8003] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.089046][ T8003] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 93.135944][ T8016] netlink: 104 bytes leftover after parsing attributes in process `syz.8.705'. [ 93.157411][ T8020] loop3: detected capacity change from 0 to 512 [ 93.174514][ T8020] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 93.196926][ T8020] EXT4-fs (loop3): 1 truncate cleaned up [ 93.203187][ T50] Bluetooth: hci1: command tx timeout [ 93.373702][ T8028] loop8: detected capacity change from 0 to 8192 [ 93.541811][ T8034] loop2: detected capacity change from 0 to 1024 [ 93.661720][ T8034] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 93.661765][ T8034] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 93.661844][ T8034] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 93.664189][ T8034] EXT4-fs error (device loop2): ext4_get_journal_inode:5896: inode #5: comm syz.2.708: unexpected bad inode w/o EXT4_IGET_BAD [ 93.664208][ T8034] loop2: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 93.664412][ T8034] EXT4-fs (loop2): no journal found [ 93.664419][ T8034] EXT4-fs (loop2): can't get journal size [ 93.730369][ T8039] fuse: Unknown parameter './file0' [ 93.730515][ T8039] tmpfs: Unknown parameter 'n05^H:' [ 93.776825][ T8052] netlink: 12 bytes leftover after parsing attributes in process `syz.8.714'. [ 93.782106][ T8052] vlan2: entered promiscuous mode [ 93.783536][ T8052] bond0: entered promiscuous mode [ 93.784603][ T8052] bond_slave_0: entered promiscuous mode [ 93.785869][ T8052] bond_slave_1: entered promiscuous mode [ 94.056266][ T8067] netlink: 'syz.8.720': attribute type 12 has an invalid length. [ 94.056298][ T8067] netlink: 'syz.8.720': attribute type 29 has an invalid length. [ 94.056320][ T8067] netlink: 148 bytes leftover after parsing attributes in process `syz.8.720'. [ 94.669402][ T4786] hid (null): unknown global tag 0xe [ 94.671488][ T4786] hid (null): unknown global tag 0xd [ 94.672596][ T4786] hid (null): unknown global tag 0xe [ 94.674826][ T4786] hid (null): unknown global tag 0xd [ 94.677634][ T4786] hid (null): unknown global tag 0xe [ 94.680436][ T4786] hid-generic 0007:0002:0FFF.0005: reserved main item tag 0xe [ 94.681965][ T4786] hid-generic 0007:0002:0FFF.0005: collection stack underflow [ 94.683591][ T4786] hid-generic 0007:0002:0FFF.0005: item 0 1 0 12 parsing failed [ 94.685268][ T4786] hid-generic 0007:0002:0FFF.0005: probe with driver hid-generic failed with error -22 [ 94.805815][ T8097] xt_TCPMSS: Only works on TCP SYN packets [ 94.824841][ T8099] loop5: detected capacity change from 0 to 4096 [ 94.826645][ T8099] EXT4-fs: inline encryption not supported [ 94.835248][ T8099] EXT4-fs (loop5): Test dummy encryption mode enabled [ 94.846373][ T8099] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 94.846427][ T8099] System zones: 0-5 [ 94.886815][ T8099] EXT4-fs (loop5): Online defrag not supported with bigalloc [ 94.887094][ T50] Bluetooth: hci5: command tx timeout [ 94.938139][ T8104] sctp: [Deprecated]: syz.5.729 (pid 8104) Use of int in max_burst socket option deprecated. [ 94.938139][ T8104] Use struct sctp_assoc_value instead [ 95.143762][ T8134] netlink: 'syz.3.737': attribute type 13 has an invalid length. [ 95.143795][ T8134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.737'. [ 95.147343][ T921] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.147463][ T921] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.147491][ T921] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.147509][ T921] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.149668][ T8134] netlink: 'syz.3.737': attribute type 13 has an invalid length. [ 95.149680][ T8134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.737'. [ 95.274926][ T50] Bluetooth: hci1: command tx timeout [ 95.811295][ T8056] Set syz1 is full, maxelem 65536 reached [ 95.869456][ T8159] loop9: detected capacity change from 0 to 512 [ 95.873400][ T8159] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 95.889794][ T8159] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.744: casefold flag without casefold feature [ 95.891545][ T8162] batadv_slave_1: entered promiscuous mode [ 95.893820][ T8159] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 95.894248][ T8164] tipc: Enabling of bearer rejected, failed to enable media [ 95.897683][ T8159] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.744: couldn't read orphan inode 15 (err -117) [ 95.899884][ T8159] loop9: lost filesystem error report for type 5 error -117 [ 95.903046][ C1] EXT4-fs (loop9): error count since last fsck: 2 [ 95.903074][ C1] EXT4-fs (loop9): initial error at time 100: ext4_orphan_get:1397: inode 15 [ 95.903114][ C1] EXT4-fs (loop9): last error at time 100: ext4_orphan_get:1402 [ 95.905079][ T8161] batadv_slave_1: left promiscuous mode [ 95.977512][ T8164] netlink: 16 bytes leftover after parsing attributes in process `syz.5.746'. [ 96.198066][ T8206] netlink: 'syz.5.756': attribute type 1 has an invalid length. [ 96.205787][ T8206] 8021q: adding VLAN 0 to HW filter on device bond2 [ 96.209706][ T8206] binder: tried to use weak ref as strong ref [ 96.210014][ T8206] binder: 8205:8206 Acquire 1 refcount change on invalid ref 0 ret -22 [ 96.210140][ T8206] binder: 8205:8206 got transaction to invalid handle, 1 [ 96.210192][ T8206] binder: 8205:8206 cannot find target node [ 96.210211][ T8206] binder: 8205:8206 transaction async to 0:0 failed 7/29201/-22, code 0 size 72-24 line 3236 [ 96.220724][ T8206] bond2 (unregistering): Released all slaves [ 96.250663][ T8209] lo speed is unknown, defaulting to 1000 [ 96.250706][ T8209] lo speed is unknown, defaulting to 1000 [ 96.253963][ T8209] lo speed is unknown, defaulting to 1000 [ 96.256609][ T8209] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 96.258208][ T8209] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 96.283505][ T7838] binder: undelivered TRANSACTION_ERROR: 29201 [ 96.298766][ T8209] lo speed is unknown, defaulting to 1000 [ 96.299225][ T8209] lo speed is unknown, defaulting to 1000 [ 96.306947][ T8209] lo speed is unknown, defaulting to 1000 [ 96.308788][ T8209] lo speed is unknown, defaulting to 1000 [ 96.309498][ T8209] lo speed is unknown, defaulting to 1000 [ 96.309834][ T8209] lo speed is unknown, defaulting to 1000 [ 96.403763][ T8230] hsr0: entered allmulticast mode [ 96.404760][ T8230] hsr_slave_0: entered allmulticast mode [ 96.405785][ T8230] hsr_slave_1: entered allmulticast mode [ 96.414405][ T8232] tmpfs: Cannot retroactively limit inodes [ 96.859900][ T7674] EXT4-fs unmount: 19 callbacks suppressed [ 96.859945][ T7674] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.931375][ T8253] vlan0: entered allmulticast mode [ 96.932695][ T8253] veth0_vlan: entered allmulticast mode [ 96.963142][ T50] Bluetooth: hci5: command tx timeout [ 97.146660][ T8267] loop3: detected capacity change from 0 to 8192 [ 97.219092][ T8273] virtio-fs: tag not found [ 97.283430][ T8279] loop2: detected capacity change from 0 to 8192 [ 97.399874][ T8285] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (4096), stripe is disabled [ 97.416074][ T8285] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 2: comm syz.5.781: lblock 2 mapped to illegal pblock 2 (length 1) [ 97.419027][ T8285] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 97.421464][ T8289] netlink: 20 bytes leftover after parsing attributes in process `syz.8.782'. [ 97.423144][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 97.423157][ C1] EXT4-fs (loop5): initial error at time 102: ext4_map_blocks:791: inode 3: block 2 [ 97.423179][ C1] EXT4-fs (loop5): last error at time 102: ext4_map_blocks:791: inode 3: block 2 [ 97.429258][ T8285] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 97.430915][ T8285] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 48: comm syz.5.781: lblock 0 mapped to illegal pblock 48 (length 1) [ 97.433132][ T8285] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 97.433274][ T8285] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 97.433284][ T8285] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.781: Failed to acquire dquot type 0 [ 97.433295][ T8285] loop5: lost filesystem error report for type 5 error -117 [ 97.433404][ T8285] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 97.433417][ T8285] loop5: lost filesystem error report for type 5 error -117 [ 97.434826][ T8285] EXT4-fs error (device loop5): ext4_evict_inode:267: inode #11: comm syz.5.781: mark_inode_dirty error [ 97.434855][ T8285] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 97.435212][ T8285] EXT4-fs warning (device loop5): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 97.435265][ T8285] EXT4-fs (loop5): 1 orphan inode deleted [ 97.435703][ T8285] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.445569][ T921] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 97.453790][ T921] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 97.456047][ T921] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:4: Failed to release dquot type 0 [ 97.468332][ T8285] netlink: 16 bytes leftover after parsing attributes in process `syz.5.781'. [ 97.482980][ T4982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.483505][ T1199] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 97.483520][ T1199] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 97.483617][ T1199] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 97.483630][ T1199] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:5: Failed to release dquot type 0 [ 97.483639][ T1199] loop5: lost filesystem error report for type 5 error -117 [ 97.484550][ T4982] EXT4-fs error (device loop5): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 97.484566][ T4982] loop5: lost filesystem error report for type 5 error -117 [ 97.485445][ T4982] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 97.485459][ T4982] loop5: lost filesystem error report for type 5 error -117 [ 97.485544][ T4982] EXT4-fs error (device loop5): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 97.485554][ T4982] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 97.565536][ T8300] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 97.568028][ T8300] EXT4-fs (loop8): 1 truncate cleaned up [ 97.568485][ T8300] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.590708][ T8300] tc_dump_action: action bad kind [ 97.605263][ T8300] EXT4-fs error (device loop8): __ext4_iget:5481: inode #16: block 538: comm syz.8.785: invalid block [ 97.607609][ T8300] EXT4-fs (loop8): Remounting filesystem read-only [ 97.618563][ T7578] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.439020][ T4678] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 98.440843][ T4678] FAT-fs (loop3): Filesystem has been set read-only [ 98.586125][ T8335] set_capacity_and_notify: 2 callbacks suppressed [ 98.586351][ T8335] loop8: detected capacity change from 0 to 128 [ 98.586968][ T8335] EXT4-fs (loop8): Test dummy encryption mode enabled [ 98.588274][ T8335] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.671738][ T8341] netlink: 36 bytes leftover after parsing attributes in process `syz.5.794'. [ 98.680363][ T8341] netlink: 20 bytes leftover after parsing attributes in process `syz.5.794'. [ 98.757450][ T7578] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 98.794505][ T8352] loop5: detected capacity change from 0 to 128 [ 98.797489][ T8352] ubifs: Unknown parameter 'auh_hash_name' [ 98.841173][ T8356] loop2: detected capacity change from 0 to 512 [ 98.854479][ T8356] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 98.854532][ T8356] EXT4-fs: failed to create workqueue [ 98.854551][ T8356] EXT4-fs (loop2): mount failed [ 98.977855][ T8375] loop8: detected capacity change from 0 to 512 [ 99.262228][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 99.424684][ T8394] tmpfs: Bad value for 'mpol' [ 99.472837][ T8398] loop2: detected capacity change from 0 to 256 [ 99.608445][ T8406] 9p: Bad value for 'wfdno' [ 99.738448][ T8408] netlink: 28 bytes leftover after parsing attributes in process `syz.3.811'. [ 99.738490][ T8408] netlink: 28 bytes leftover after parsing attributes in process `syz.3.811'. [ 99.803766][ T8413] lo speed is unknown, defaulting to 1000 [ 99.915849][ T8416] loop8: detected capacity change from 0 to 512 [ 99.942895][ T8416] EXT4-fs: error -4 creating inode table initialization thread [ 99.943356][ T8416] EXT4-fs (loop8): mount failed [ 100.076700][ T8434] loop3: detected capacity change from 0 to 4096 [ 100.077065][ T8434] EXT4-fs: Ignoring removed mblk_io_submit option [ 100.082793][ T8434] EXT4-fs (loop3): Test dummy encryption mode enabled [ 100.088455][ T8434] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.190781][ T8443] loop9: detected capacity change from 0 to 256 [ 101.058413][ T4678] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.131664][ T8464] binder: tried to use weak ref as strong ref [ 101.131693][ T8464] binder: 8463:8464 Acquire 1 refcount change on invalid ref 0 ret -22 [ 101.165456][ T8461] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 101.167462][ T8461] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 101.177288][ T8466] netlink: 'syz.3.823': attribute type 6 has an invalid length. [ 101.281272][ T8482] loop9: detected capacity change from 0 to 1024 [ 101.289299][ T8482] EXT4-fs: Ignoring removed nobh option [ 101.297965][ T8482] EXT4-fs (loop9): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 101.306403][ T8484] binder: 8475:8484 tried to acquire reference to desc 0, got 1 instead [ 101.306579][ T8484] binder: 8475:8484 got transaction with invalid parent offset or type [ 101.306618][ T8484] binder: 8475:8484 transaction async to 8475:0 failed 14/29201/-22, code 0 size 96-24 line 3602 [ 101.316279][ T8482] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.319557][ T30] audit: type=1400 audit(106.301:26): lsm=SMACK fn=smack_inode_setattr action=denied subject="w" object="_" requested=w pid=8481 comm="syz.9.830" name="secretmem" dev="secretmem" ino=21158 [ 101.326728][ T30] audit: type=1400 audit(106.311:27): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=8481 comm="syz.9.830" name="/" dev="loop9" ino=2 [ 101.335930][ T30] audit: type=1400 audit(106.321:28): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=rw pid=8481 comm="syz.9.830" name="file1" dev="loop9" ino=15 [ 101.343987][ T30] audit: type=1400 audit(106.331:29): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=8481 comm="syz.9.830" name="/" dev="loop9" ino=2 [ 101.352832][ T30] audit: type=1400 audit(106.331:30): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=rw pid=8481 comm="syz.9.830" name="fuse" dev="devtmpfs" ino=94 [ 101.516582][ T8498] ip6t_srh: unknown srh invflags 4000 [ 101.861416][ T5722] Bluetooth: Error in BCSP hdr checksum [ 101.978354][ T8512] loop2: detected capacity change from 0 to 512 [ 102.130949][ T8512] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.832: Invalid inode bitmap blk 4 in block_group 0 [ 102.131023][ T8512] loop2: lost filesystem error report for type 5 error -117 [ 102.133879][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 102.133897][ C1] EXT4-fs (loop2): initial error at time 107: ext4_read_inode_bitmap:139 [ 102.133914][ C1] EXT4-fs (loop2): last error at time 107: ext4_read_inode_bitmap:139 [ 102.146914][ T39] Bluetooth: Error in BCSP hdr checksum [ 102.151914][ T8512] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.184957][ T7838] binder: undelivered TRANSACTION_ERROR: 29201 [ 102.424997][ T8534] lo speed is unknown, defaulting to 1000 [ 102.592230][ T7674] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.708112][ T4669] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.131014][ T8591] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 103.605673][ T4677] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 103.869347][ T8621] IPv6: sit1: Disabled Multicast RS [ 103.874338][ T8621] loop3: detected capacity change from 0 to 512 [ 103.888116][ T8621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.892300][ T8621] netlink: 32 bytes leftover after parsing attributes in process `syz.3.852'. [ 103.930825][ T4678] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.955394][ T8627] hugetlbfs: Bad value for 'nr_inodes' [ 103.956720][ T8627] netlink: 32 bytes leftover after parsing attributes in process `syz.2.855'. [ 103.976413][ T8629] ip6erspan0: entered allmulticast mode [ 104.123991][ T8644] loop2: detected capacity change from 0 to 512 [ 104.124593][ T8644] EXT4-fs: Ignoring removed nobh option [ 104.214680][ T8646] Cannot find add_set index 0 as target [ 104.721142][ T8644] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.862: invalid indirect mapped block 4294967295 (level 1) [ 104.721185][ T8644] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 104.726134][ T8644] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.862: invalid indirect mapped block 4294967295 (level 1) [ 104.726174][ T8644] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 104.732125][ T8644] EXT4-fs (loop2): 2 truncates cleaned up [ 104.734821][ T8644] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.776843][ T4669] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.903770][ T8680] loop3: detected capacity change from 0 to 512 [ 104.909174][ T8680] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 104.943320][ T8680] EXT4-fs (loop3): 1 orphan inode deleted [ 104.943350][ T8680] EXT4-fs (loop3): 1 truncate cleaned up [ 104.946327][ T8680] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.960568][ T8680] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 104.974823][ T8680] EXT4-fs (loop3): Remounting filesystem read-only [ 104.974935][ T8680] overlayfs: failed to set xattr on upper [ 104.974954][ T8680] overlayfs: ...falling back to redirect_dir=nofollow. [ 104.974966][ T8680] overlayfs: ...falling back to uuid=null. [ 104.995639][ T8687] loop9: detected capacity change from 0 to 128 [ 105.040189][ T8687] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.090426][ T50] Bluetooth: Wrong link type (-71) [ 105.090869][ T50] Bluetooth: Unknown BR/EDR signaling command 0x00 [ 105.090888][ T50] Bluetooth: Wrong link type (-22) [ 105.095205][ T8690] loop8: detected capacity change from 0 to 128 [ 105.097208][ T7674] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.102248][ T8690] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.142116][ T8699] loop5: detected capacity change from 0 to 512 [ 105.193109][ T50] Bluetooth: hci0: command 0x0401 tx timeout [ 105.212641][ T8588] bridge0: port 2(syz_tun) entered disabled state [ 105.226859][ T8588] syz_tun (unregistering): left allmulticast mode [ 105.226897][ T8588] syz_tun (unregistering): left promiscuous mode [ 105.226921][ T8588] bridge0: port 2(syz_tun) entered disabled state [ 105.314443][ T8717] syzkaller1: entered promiscuous mode [ 105.314475][ T8717] syzkaller1: entered allmulticast mode [ 105.335825][ T8714] loop5: detected capacity change from 0 to 1024 [ 105.365563][ T8714] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.387782][ T8588] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.517895][ T4982] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz-executor: missing EA_INODE flag [ 105.522671][ T4982] EXT4-fs (loop5): Remounting filesystem read-only [ 105.528115][ T4982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.660235][ T7578] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.696971][ T4677] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 105.699437][ T4677] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 105.699982][ T4677] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 105.704402][ T4677] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 105.705949][ T4677] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 105.805303][ T8759] netlink: 16 bytes leftover after parsing attributes in process `syz.8.883'. [ 105.805343][ T8759] netlink: 16 bytes leftover after parsing attributes in process `syz.8.883'. [ 105.953528][ T8792] loop2: detected capacity change from 0 to 8 [ 105.969064][ T8789] syzkaller0: entered promiscuous mode [ 105.970159][ T8789] syzkaller0: entered allmulticast mode [ 106.028925][ T8801] netlink: 28 bytes leftover after parsing attributes in process `syz.2.891'. [ 106.028963][ T8801] netlink: 28 bytes leftover after parsing attributes in process `syz.2.891'. [ 106.032165][ T8745] lo speed is unknown, defaulting to 1000 [ 106.048989][ T8802] netlink: 12 bytes leftover after parsing attributes in process `syz.5.884'. [ 106.168001][ T8824] netlink: 20 bytes leftover after parsing attributes in process `syz.2.895'. [ 106.186382][ T8745] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.186469][ T8745] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.186570][ T8745] bridge_slave_0: entered allmulticast mode [ 106.187099][ T8745] bridge_slave_0: entered promiscuous mode [ 106.188132][ T8745] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.188185][ T8745] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.188242][ T8745] bridge_slave_1: entered allmulticast mode [ 106.188749][ T8745] bridge_slave_1: entered promiscuous mode [ 106.197996][ T8745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.199094][ T8745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.208827][ T8745] team0: Port device team_slave_0 added [ 106.210190][ T8745] team0: Port device team_slave_1 added [ 106.221396][ T8745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.227257][ T8745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.232242][ T8745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.235314][ T8745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.241830][ T8745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.249292][ T8745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.288507][ T8835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.292615][ T8745] hsr_slave_0: entered promiscuous mode [ 106.297381][ T8835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.301427][ T8745] hsr_slave_1: entered promiscuous mode [ 106.302854][ T8745] debugfs: 'hsr0' already exists in 'hsr' [ 106.306547][ T8745] Cannot create hsr debugfs directory [ 106.386540][ T8844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.901'. [ 106.708321][ T8888] netlink: 'syz.2.906': attribute type 1 has an invalid length. [ 106.762283][ T8745] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.767232][ T8745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.768857][ T8745] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.776004][ T8745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.777612][ T8745] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.779860][ T8745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.783616][ T8745] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.787848][ T8745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.865026][ T8745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.871054][ T8745] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.883180][ T8745] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 106.884943][ T8745] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.905281][ T3683] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.905325][ T3683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.908489][ T3683] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.908526][ T3683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.045495][ T8923] bpf setsockopt: ignoring program buffer with optlen=30428 (max_optlen=4096) [ 107.258331][ T8925] bond1: option ad_select: invalid value (34) [ 107.260570][ T8925] bond1 (unregistering): Released all slaves [ 107.403835][ T8745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.420150][ T8944] loop9: detected capacity change from 0 to 512 [ 107.425244][ T8944] EXT4-fs (loop9): DAX unsupported by block device. [ 107.591213][ T8745] veth0_vlan: entered promiscuous mode [ 107.600776][ T8745] veth1_vlan: entered promiscuous mode [ 107.633226][ T8745] veth0_macvtap: entered promiscuous mode [ 107.636446][ T8745] veth1_macvtap: entered promiscuous mode [ 107.646152][ T8745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.647631][ T8745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.668411][ T921] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.668473][ T921] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.668495][ T921] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.668513][ T921] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.753762][ T4677] Bluetooth: hci3: command tx timeout [ 107.797708][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.797743][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.817210][ T8979] loop9: detected capacity change from 0 to 512 [ 107.817545][ T8979] ext4: Unknown parameter 'fowner' [ 107.831405][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.831436][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.961016][ T9004] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 107.982159][ T9004] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 107.982231][ T9004] System zones: 1-12 [ 107.995509][ T9004] EXT4-fs (loop2): 1 truncate cleaned up [ 107.996014][ T9004] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.006202][ T9009] squashfs: Bad value for 'errors' [ 108.066780][ T9004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.918'. [ 108.120060][ T9009] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.919: bg 0: block 5: invalid block bitmap [ 108.120100][ T9009] loop4: lost filesystem error report for type 5 error -117 [ 108.120288][ T9009] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 108.120299][ T9009] loop4: lost filesystem error report for type 5 error -117 [ 108.120411][ T9009] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.919: invalid indirect mapped block 3 (level 2) [ 108.120426][ T9009] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 108.120568][ T9009] EXT4-fs (loop4): 2 truncates cleaned up [ 108.121073][ T9009] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.131066][ T9009] EXT4-fs (loop4): shut down requested (2) [ 108.131179][ T9009] EXT4-fs warning (device loop4): empty_inline_dir:1785: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 108.522844][ T8745] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.811324][ T4669] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.004545][ T9069] set_capacity_and_notify: 3 callbacks suppressed [ 109.005930][ T9069] loop8: detected capacity change from 0 to 1024 [ 109.007758][ T9069] EXT4-fs (loop8): bad geometry: block count 4294901760 exceeds size of device (512 blocks) [ 109.120286][ T9076] loop5: detected capacity change from 0 to 2048 [ 109.154345][ T9076] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.171547][ T9096] __nla_validate_parse: 1 callbacks suppressed [ 109.172744][ T9096] netlink: 28 bytes leftover after parsing attributes in process `syz.9.929'. [ 109.197672][ T9076] netlink: 4 bytes leftover after parsing attributes in process `syz.5.927'. [ 109.209846][ T9102] loop8: detected capacity change from 0 to 512 [ 109.217504][ T9102] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 109.217534][ T9102] EXT4-fs (loop8): DAX unsupported by block device. [ 109.256278][ T4982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.288877][ T9110] loop2: detected capacity change from 0 to 512 [ 109.301865][ T9110] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 109.307953][ T9110] EXT4-fs (loop2): 1 truncate cleaned up [ 109.308430][ T9110] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.364449][ T9110] EXT4-fs error (device loop2): __ext4_iget:5481: inode #16: block 538: comm syz.2.932: invalid block [ 109.370407][ T9110] EXT4-fs (loop2): Remounting filesystem read-only [ 109.391852][ T9121] netlink: 16 bytes leftover after parsing attributes in process `syz.8.934'. [ 109.426466][ T9125] xt_hashlimit: size too large, truncated to 1048576 [ 109.500909][ T9136] netlink: 8 bytes leftover after parsing attributes in process `syz.9.935'. [ 109.834435][ T4677] Bluetooth: hci3: command tx timeout [ 109.950063][ T9179] 9pnet_fd: p9_fd_create_tcp (9179): problem binding to privport [ 110.032804][ T9191] netlink: 24 bytes leftover after parsing attributes in process `syz.9.947'. [ 110.106116][ T9191] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.106366][ T9191] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.254534][ T9211] loop8: detected capacity change from 0 to 256 [ 110.254903][ T9211] vfat: Unknown parameter '' [ 110.375057][ T9191] bridge_slave_0: left allmulticast mode [ 110.375091][ T9191] bridge_slave_0: left promiscuous mode [ 110.375178][ T9191] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.376480][ T9226] netlink: 12 bytes leftover after parsing attributes in process `syz.5.953'. [ 110.380091][ T9191] bridge_slave_1: left allmulticast mode [ 110.380106][ T9191] bridge_slave_1: left promiscuous mode [ 110.380160][ T9191] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.391852][ T9191] bond0: (slave bond_slave_0): Releasing backup interface [ 110.426023][ T9191] bond0: (slave bond_slave_1): Releasing backup interface [ 110.446497][ T9191] team0: Port device team_slave_0 removed [ 110.449068][ T9191] team0: Port device team_slave_1 removed [ 110.450314][ T9191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.451410][ T9191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.455830][ T9191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.456975][ T9191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.460345][ T9191] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 110.496823][ T9233] loop9: detected capacity change from 0 to 256 [ 110.790533][ T8883] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.865869][ T3443] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.982962][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 110.990799][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.995749][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 110.997714][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 110.998054][ T9255] netlink: 8 bytes leftover after parsing attributes in process `syz.5.961'. [ 111.001398][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 111.007982][ T3443] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.046859][ T9261] Soft offlining pfn 0x1491be at process virtual address 0x20000000 [ 111.073570][ T3443] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.144254][ T3443] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.159505][ T9252] lo speed is unknown, defaulting to 1000 [ 111.208949][ T9271] input: syz0 as /devices/virtual/input/input11 [ 111.290472][ T9280] netlink: 4 bytes leftover after parsing attributes in process `syz.5.966'. [ 111.320705][ T9280] team0: Port device team_slave_0 removed [ 111.376328][ T9285] loop8: detected capacity change from 0 to 8192 [ 111.416814][ T9293] loop5: detected capacity change from 0 to 512 [ 111.425968][ T9293] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.436975][ T9285] loop8: p1 < > p3 < > p4 [ 111.437005][ T9285] loop8: partition table partially beyond EOD, truncated [ 111.437097][ T9285] loop8: p1 start 4294967040 is beyond EOD, truncated [ 111.437108][ T9285] loop8: p3 start 4294965248 is beyond EOD, truncated [ 111.437117][ T9285] loop8: p4 size 851974 extends beyond EOD, truncated [ 111.464341][ T9299] netlink: 28 bytes leftover after parsing attributes in process `syz.9.970'. [ 111.535316][ T3443] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 111.535720][ T3443] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 111.535858][ T3443] bridge0: port 3(wlan1) entered disabled state [ 111.538223][ T3443] bridge_slave_1: left allmulticast mode [ 111.538237][ T3443] bridge_slave_1: left promiscuous mode [ 111.538297][ T3443] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.545948][ T3443] bridge_slave_0: left allmulticast mode [ 111.545975][ T3443] bridge_slave_0: left promiscuous mode [ 111.546057][ T3443] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.562337][ T4691] udevd[4691]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 111.690037][ T3443] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 111.810741][ T3443] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.813635][ T9322] Soft offlining pfn 0x21d09f at process virtual address 0x20001000 [ 111.818461][ T9322] Memory failure: 0x21d09f: unhandlable page. [ 111.838284][ T3443] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.864501][ T3443] bond0 (unregistering): Released all slaves [ 111.868406][ T3443] bond1 (unregistering): Released all slaves [ 111.887825][ T9252] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.889252][ T9252] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.890932][ T9252] bridge_slave_0: entered allmulticast mode [ 111.892698][ T9252] bridge_slave_0: entered promiscuous mode [ 111.896715][ T9252] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.898143][ T9252] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.899658][ T9252] bridge_slave_1: entered allmulticast mode [ 111.901454][ T9252] bridge_slave_1: entered promiscuous mode [ 111.913831][ T4677] Bluetooth: hci3: command tx timeout [ 111.915929][ T4982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.924416][ T9314] netlink: 28 bytes leftover after parsing attributes in process `syz.8.971'. [ 111.927855][ T4357] 8021q: adding VLAN 0 to HW filter on device eth0 [ 111.944886][ T9252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.031407][ T9252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.081721][ T9252] team0: Port device team_slave_0 added [ 112.092421][ T9252] team0: Port device team_slave_1 added [ 112.120686][ T9338] netlink: 'syz.5.978': attribute type 39 has an invalid length. [ 112.141388][ T9252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.141422][ T9252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.141450][ T9252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.158872][ T9252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.158911][ T9252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.158949][ T9252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.196054][ T9341] fuse: Bad value for 'fd' [ 112.333983][ T9252] hsr_slave_0: entered promiscuous mode [ 112.334387][ T9252] hsr_slave_1: entered promiscuous mode [ 112.334635][ T9252] debugfs: 'hsr0' already exists in 'hsr' [ 112.338688][ T9252] Cannot create hsr debugfs directory [ 112.527100][ T4357] 8021q: adding VLAN 0 to HW filter on device eth1 [ 112.576982][ T9376] vhci_hcd vhci_hcd.0: port 0 already used [ 112.627961][ T3443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.627995][ T3443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.629645][ T3443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.629654][ T3443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.635669][ T3443] hsr0: left allmulticast mode [ 112.635764][ T3443] veth1_macvtap: left promiscuous mode [ 112.635779][ T3443] veth0_macvtap: left promiscuous mode [ 112.635799][ T3443] veth1_vlan: left promiscuous mode [ 112.635822][ T3443] veth0_vlan: left promiscuous mode [ 112.745144][ T3443] team0 (unregistering): Port device team_slave_1 removed [ 112.749418][ T3443] team0 (unregistering): Port device team_slave_0 removed [ 112.930097][ T30] audit: type=1400 audit(117.911:31): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="${" object="_" requested=w pid=7578 comm="syz-executor" saddr=10.128.0.169 src=30028 daddr=10.128.0.85 dest=35440 netif=enp0s0 [ 113.012304][ T4357] 8021q: adding VLAN 0 to HW filter on device eth2 [ 113.033632][ T4677] Bluetooth: hci0: command tx timeout [ 113.051522][ T9396] netlink: 'syz.8.986': attribute type 31 has an invalid length. [ 113.067726][ T9396] netlink: 'syz.8.986': attribute type 10 has an invalid length. [ 113.069333][ T9396] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.069535][ T9396] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.075262][ T9396] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.075302][ T9396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.075407][ T9396] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.075445][ T9396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.081673][ T9396] bridge0: entered promiscuous mode [ 113.094194][ T9396] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 113.098814][ T9396] binder: 9395:9396 ioctl c018620c 20000040 returned -1 [ 113.138254][ T9252] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 113.145096][ T30] audit: type=1400 audit(118.121:32): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="${" object="_" requested=w pid=7578 comm="syz-executor" saddr=10.128.0.169 src=30028 daddr=10.128.0.85 dest=35440 netif=enp0s0 [ 113.145136][ T30] audit: type=1400 audit(118.131:33): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="${" object="_" requested=w pid=8649 comm="kworker/u8:11" saddr=10.128.0.169 src=30028 daddr=10.128.0.85 dest=35440 netif=enp0s0 [ 113.146342][ T30] audit: type=1400 audit(118.131:34): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="${" object="_" requested=w pid=9399 comm="sed" saddr=10.128.0.169 src=30028 daddr=10.128.0.85 dest=35440 netif=enp0s0 [ 113.146369][ T30] audit: type=1400 audit(118.131:35): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="${" object="_" requested=w pid=9399 comm="sed" saddr=10.128.0.169 src=30028 daddr=10.128.0.85 dest=35440 netif=enp0s0 [ 113.147408][ T30] audit: type=1400 audit(118.131:36): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="${" object="_" requested=w pid=4301 comm="udevd" saddr=10.128.0.169 src=30028 daddr=10.128.0.85 dest=35440 netif=enp0s0 [ 113.155359][ T9252] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 113.155702][ T9252] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 113.169455][ T9252] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 113.169754][ T9252] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.175570][ T9252] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 113.177879][ T30] audit: type=1400 audit(118.161:37): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="${" object="_" requested=w pid=3443 comm="kworker/u8:6" saddr=10.128.0.169 src=30028 daddr=10.128.0.85 dest=35440 netif=enp0s0 [ 113.180327][ T9252] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 113.188835][ T9252] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 113.199344][ T9405] loop8: detected capacity change from 0 to 128 [ 113.228891][ T9409] loop4: detected capacity change from 0 to 256 [ 113.229288][ T9409] vfat: Bad value for 'shortname' [ 113.361345][ T30] audit: type=1400 audit(118.341:38): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="${" object="_" requested=w pid=4663 comm="udevd" saddr=10.128.0.169 src=30028 daddr=10.128.0.85 dest=35440 netif=enp0s0 [ 113.361913][ T9252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.384144][ T30] audit: type=1400 audit(118.371:39): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="${" object="_" requested=w pid=23 comm="ksoftirqd/1" saddr=10.128.0.169 src=30028 daddr=10.128.0.85 dest=35440 netif=enp0s0 [ 113.393545][ T30] audit: type=1400 audit(118.381:40): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="${" object="_" requested=w pid=23 comm="ksoftirqd/1" saddr=10.128.0.169 src=30028 daddr=10.128.0.85 dest=35440 netif=enp0s0 [ 113.394132][ T9252] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.403043][ T1199] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.403089][ T1199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.414829][ T1199] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.414868][ T1199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.421185][ T4357] 8021q: adding VLAN 0 to HW filter on device eth3 [ 113.426851][ T9252] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.571651][ T9252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.583820][ T9252] veth0_vlan: entered promiscuous mode [ 113.592508][ T9252] veth1_vlan: entered promiscuous mode [ 113.602821][ T9252] veth0_macvtap: entered promiscuous mode [ 113.608210][ T9252] veth1_macvtap: entered promiscuous mode [ 113.612834][ T9252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.619536][ T9252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.622427][ T1199] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.622529][ T1199] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.622551][ T1199] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.622565][ T1199] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.653612][ T8649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.653643][ T8649] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.670704][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.670733][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.993330][ T4677] Bluetooth: hci3: command tx timeout [ 115.113206][ T4677] Bluetooth: hci0: command tx timeout [ 117.193146][ T4677] Bluetooth: hci0: command tx timeout [ 119.273218][ T4677] Bluetooth: hci0: command tx timeout [ 119.913605][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 119.914799][ T30] audit: type=1400 audit(124.901:47): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="${" object="_" requested=w pid=8649 comm="kworker/u8:11" saddr=10.128.0.169 src=30028 daddr=10.128.0.85 dest=35440 netif=enp0s0 [ 119.977499][ T30] audit: type=1400 audit(124.961:48): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="${" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30028 daddr=10.128.0.85 dest=35440 netif=enp0s0 [ 125.923476][ T1573] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.923527][ T1573] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.890171][ T30] audit: type=1400 audit(131.871:49): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="${" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30028 daddr=10.128.0.85 dest=35440 netif=enp0s0 [ 127.195332][ T30] audit: type=1400 audit(132.181:50): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="${" object="_" requested=w pid=12 comm="kworker/u8:0" saddr=10.128.0.169 src=30028 daddr=10.128.0.85 dest=35440 netif=enp0s0 [ 140.713794][ T30] audit: type=1400 audit(145.701:51): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="${" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30028 daddr=10.128.0.85 dest=35440 netif=enp0s0 [ 141.273832][ T30] audit: type=1400 audit(146.261:52): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="${" object="_" requested=w pid=1199 comm="kworker/u8:5" saddr=10.128.0.169 src=30028 daddr=10.128.0.85 dest=35440 netif=enp0s0 [ 153.593144][ T4677] Bluetooth: hci4: command 0x0406 tx timeout [ 168.805083][ T30] audit: type=1400 audit(173.791:53): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="${" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30028 daddr=10.128.0.85 dest=35440 netif=enp0s0 [ 169.897540][ T30] audit: type=1400 audit(174.881:54): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="${" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30028 daddr=10.128.0.85 dest=35440 netif=enp0s0 [ 187.354930][ T1573] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.354976][ T1573] ieee802154 phy1 wpan1: encryption failed: -22 [ 209.913053][ T4677] Bluetooth: hci1: command 0x0406 tx timeout [ 215.043794][ T4677] Bluetooth: hci5: command 0x0406 tx timeout [ 223.195629][ T30] audit: type=1400 audit(228.181:55): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="${" object="_" requested=w pid=23 comm="ksoftirqd/1" saddr=10.128.0.169 src=30028 daddr=10.128.0.85 dest=35440 netif=enp0s0 [ 225.193688][ T30] audit: type=1400 audit(230.181:56): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="${" object="_" requested=w pid=921 comm="kworker/u8:4" saddr=10.128.0.169 src=30028 daddr=10.128.0.85 dest=35440 netif=enp0s0 [ 235.513066][ T4677] Bluetooth: hci3: command 0x0406 tx timeout [ 235.513182][ T4681] Bluetooth: hci0: command 0x0406 tx timeout [ 248.794342][ T1573] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.794390][ T1573] ieee802154 phy1 wpan1: encryption failed: -22 [ 274.393806][ T31] INFO: task kworke ** replaying previous printk message ** [ 274.393806][ T31] INFO: task kworker/0:1:10 blocked for more than 143 seconds. [ 274.394918][ T31] Tainted: G L syzkaller #0 [ 274.394930][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 274.394938][ T31] task:kworker/0:1 state:D stack:0 pid:10 tgid:10 ppid:2 task_flags:0x4208060 flags:0x00000010 [ 274.394957][ T31] Workqueue: usb_hub_wq hub_event [ 274.394979][ T31] Call trace: [ 274.394983][ T31] __switch_to+0x2b0/0x6e0 (T) [ 274.394995][ T31] __schedule+0x1b74/0x2d24 [ 274.395004][ T31] schedule+0xa4/0x140 [ 274.395012][ T31] usb_kill_urb+0x1ac/0x314 [ 274.395023][ T31] usb_start_wait_urb+0x1cc/0x498 [ 274.395031][ T31] usb_control_msg+0x1d4/0x354 [ 274.395041][ T31] get_bMaxPacketSize0+0xb4/0x208 [ 274.395051][ T31] hub_port_init+0xbfc/0x1cf0 [ 274.395061][ T31] hub_event+0x1c40/0x3b20 [ 274.395070][ T31] process_one_work+0x78c/0x173c [ 274.395080][ T31] process_scheduled_works+0xdc/0x13c [ 274.395090][ T31] worker_thread+0x770/0xbd0 [ 274.395100][ T31] kthread+0x2f0/0x3c0 [ 274.395109][ T31] ret_from_fork+0x10/0x20 [ 274.395246][ T31] [ 274.395246][ T31] Showing all locks held in the system: [ 274.395251][ T31] 5 locks held by kworker/0:1/10: [ 274.395256][ T31] #0: ffff0000c2444140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x640/0x173c [ 274.395281][ T31] #1: ffff80008e9e7be0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x6a4/0x173c [ 274.395303][ T31] #2: ffff0000cba721d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x12c/0x3b20 [ 274.395325][ T31] #3: ffff0000cba77578 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x198c/0x3b20 [ 274.395347][ T31] #4: ffff0000cb548f60 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x19c0/0x3b20 [ 274.395370][ T31] 1 lock held by khungtaskd/31: [ 274.395374][ T31] #0: ffff800088ac66e0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x0/0x44 [ 274.395396][ T31] 2 locks held by pr/ttyAMA-1/41: [ 274.395405][ T31] 2 locks held by getty/4451: [ 274.395409][ T31] #0: ffff0000ca79c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 274.395432][ T31] #1: ffff80009228b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x354/0xf84 [ 274.395458][ T31] [ 274.395460][ T31] ============================================= [ 274.395460][ T31] [ 274.395466][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 274.436000][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT [ 274.437895][ T31] Tainted: [L]=SOFTLOCKUP [ 274.438688][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 274.440465][ T31] Call trace: [ 274.441052][ T31] show_stack+0x2c/0x3c (C) [ 274.441785][ T31] __dump_stack+0x30/0x40 [ 274.442468][ T31] dump_stack_lvl+0x30/0x12c [ 274.443177][ T31] dump_stack+0x1c/0x28 [ 274.443815][ T31] vpanic+0x594/0xaf4 [ 274.444494][ T31] vpanic+0x0/0xaf4 [ 274.445142][ T31] hung_task_panic+0x0/0x2c [ 274.445916][ T31] kthread+0x2f0/0x3c0 [ 274.446662][ T31] ret_from_fork+0x10/0x20 [ 274.447424][ T31] SMP: stopping secondary CPUs [ 274.448276][ T31] Kernel Offset: disabled [ 274.449020][ T31] CPU features: 0x08000000,003c0008,27020501,5427fea7 [ 274.450231][ T31] Memory Limit: none [ 274.617009][ T31] Rebooting in 86400 seconds..