last executing test programs: 38.618509014s ago: executing program 3 (id=4): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x24, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x1c, r1, 0x1, 0x123, 0x234, {0x7}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @local, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f00000010c0)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x7}, 0x1c, &(0x7f0000001080)=[{&(0x7f00000011c0)="c9", 0x1}], 0x1}}], 0x1, 0x50) shutdown(r2, 0x1) getsockopt$bt_hci(r2, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) r3 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@mcast2, 0x78, r4}) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x8936, &(0x7f0000000000)) bpf$TOKEN_CREATE(0x24, &(0x7f0000001100), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0xc, 0x10, &(0x7f0000001200)=ANY=[@ANYBLOB="18000000070000000000000000000000b7080000020000007b8a00fe00000000870800000a0000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70400000800000085000000490000009500000000000000e9f6e76d504ae2b774fc157bfc"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 38.445491345s ago: executing program 3 (id=7): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x86c0, 0x0) close(r1) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x6, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0x6, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r7, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 37.941693155s ago: executing program 3 (id=9): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x4a) preadv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000300)=""/35, 0x23}], 0x2, 0x9, 0x40805) readv(r0, &(0x7f0000001840)=[{&(0x7f0000000380)=""/163, 0xa3}, {&(0x7f0000000440)=""/174, 0xae}, {&(0x7f0000000500)=""/64, 0x40}, {&(0x7f0000000100)=""/87, 0x57}], 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2e0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f91731dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0x4212, r5, 0x58, &(0x7f0000000080)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000580)=0x0) sched_setscheduler(r6, 0x6, &(0x7f0000000080)=0x7) r7 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000140)='vers\x00', &(0x7f0000000180)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000240)='addr\x00', &(0x7f0000000280)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) 36.638390097s ago: executing program 3 (id=31): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x35}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x39) r1 = socket$packet(0x11, 0x3, 0x300) getpriority(0x0, 0xffffffffffffffff) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000ac0)=r0, 0x4) syz_emit_ethernet(0x32, &(0x7f00000000c0)={@random="f1a2610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0x4, 0x0, @val=0x80}}}}}}}, 0x0) 20.041945471s ago: executing program 32 (id=31): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x35}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x39) r1 = socket$packet(0x11, 0x3, 0x300) getpriority(0x0, 0xffffffffffffffff) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000ac0)=r0, 0x4) syz_emit_ethernet(0x32, &(0x7f00000000c0)={@random="f1a2610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0x4, 0x0, @val=0x80}}}}}}}, 0x0) 19.473029059s ago: executing program 1 (id=240): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x80a00, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x180, r1, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xcb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8ff}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xb}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xdf}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4ef}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x300}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xde}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000001}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x48801}, 0x80) (async) write$uinput_user_dev(r0, &(0x7f00000002c0)={'syz0\x00', {0x3, 0x6, 0x100, 0xaa}, 0x56, [0x7, 0x1, 0x101, 0x64, 0xff, 0x7fff, 0x1, 0x1, 0x0, 0x390b, 0x4, 0x8000, 0x0, 0x70f, 0x4, 0x6, 0x5, 0x4, 0xf, 0x57, 0x9, 0x2, 0x10, 0x4, 0x6, 0x5, 0x23, 0xe, 0x9, 0x800, 0x9, 0x80000000, 0x2a, 0x4, 0x8, 0x0, 0x7, 0x3, 0x6000, 0x3, 0x81, 0x7ea2, 0x9, 0x68, 0x9c2, 0x1, 0x6, 0x80000001, 0x3, 0x5, 0x3b50e45f, 0x4, 0x3ff, 0x8, 0x25, 0x0, 0xffffff3c, 0x3, 0x100, 0x5, 0x7, 0x5, 0x4, 0x200], [0xea60, 0x1, 0x3, 0x1, 0x5, 0x80000001, 0x0, 0x8, 0x9, 0x0, 0x8, 0x8, 0xfff, 0x661, 0xc, 0xfe42, 0x5, 0x2, 0x9, 0xffff, 0xf760, 0x1, 0xffffffff, 0x3, 0xff, 0x8, 0x10, 0x3, 0x3, 0x9, 0xc02, 0x8, 0x8, 0x5, 0xe9, 0xbf09, 0x0, 0x4, 0x7ff, 0x8, 0x7, 0x800, 0x8, 0x0, 0x101, 0x8, 0x7, 0x3, 0xf, 0x8, 0x6, 0x7, 0x3, 0x4f, 0x8, 0x1, 0x1ff, 0x800, 0xfffffffd, 0xf, 0x5, 0x8, 0x5, 0x1ff], [0x1, 0x3, 0x2, 0x8, 0x1, 0x6, 0x5, 0x1, 0x0, 0x3, 0x101, 0x3, 0x51d, 0x7, 0x100, 0x3, 0x0, 0x9, 0x5, 0x6, 0x5, 0xf5, 0x40, 0x4, 0x6f, 0xd, 0x9, 0x10000, 0x8, 0xfffffff7, 0x3ff, 0x80000000, 0x80000000, 0x1, 0x1000, 0xd983, 0x61a, 0x0, 0x36b7, 0x64a, 0x8f, 0x4, 0x2da, 0x8, 0xfa75, 0x401, 0x2, 0x8, 0x2, 0x7, 0x80000000, 0x101, 0x8, 0x89, 0x4, 0x3, 0x1c7eda73, 0x5, 0x4, 0xcd65, 0x0, 0x380000, 0x95, 0x8], [0xee95, 0x7f, 0xfffffff8, 0x1, 0x3, 0x9, 0x9e7, 0x2, 0x2, 0x1, 0x5, 0x81, 0x69cd, 0x1714, 0x6c0e, 0x62685934, 0x2, 0x7f, 0x9, 0x1, 0x8, 0x5, 0x0, 0x9, 0xff, 0xcb6, 0x8, 0x2, 0x1, 0x0, 0x9, 0x2a09, 0x53, 0x62, 0x2, 0x400, 0xfffffff7, 0x2, 0x7, 0xef6, 0x5, 0x1, 0x9, 0x10001, 0x7, 0x9, 0x7, 0x4, 0x0, 0x24c, 0x7, 0x1, 0x346, 0xf, 0xf5ca, 0x80, 0x4, 0x40, 0xfffffff4, 0x2, 0x3, 0xffffffff, 0x3, 0x4]}, 0x45c) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000b80)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000800)={0x314, r2, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x5, 0x5a}}}}, [@NL80211_ATTR_FRAME={0x2c9, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x7fff}, @device_b, @device_b, @initial, {0x7, 0x30}}, 0xc0, 0x81, {0x0, 0x1a, @random="2b4d344b7f2d60c7984910266a23d836c4c732788fc51ca7bc00"}, @val={0x1, 0x5, [{0x4, 0x1}, {0x16}, {0x16}, {0xb, 0x1}, {0x6c, 0x1}]}, @val={0x2d, 0x1a, {0x300, 0x1, 0x0, 0x0, {0x2, 0x12ff, 0x0, 0xff, 0x0, 0x1, 0x1, 0x2}, 0x0, 0x3, 0x7f}}, [{0xdd, 0x9d, "b47b2ab16daa5225e4d0ecc5fe127d5b3a76587b905a818b80e1e7eff9536c1a0c8c3c677364021692c8954df8ca36a7cea08d4aededc08fb5afc1ca83ce9161d5fea261964b93e1f011cacf1a6c28994861644dca48ea48e1b50ba3c9446f8c1bf704042c3a79992162f32a7d311286023657a719d41171dd290986607b112c0f073d063d9586be046cca502b83089b7d33efbe00fb7e08f3c0bde839"}, {0xdd, 0x70, "2b2dd7498fdcd7355a50eb0f28a32ebadce859da5e76b628e1315c94ef5958318cc64723e1eab36c009b2ab31b27e2c554910096bb4fd5248e50d3bcb3f2f803a407c4bed259480f0798734584d34d7912c92dca6335b268140937558e0365f1507d16208cf649f47f5a8c090ac29d68"}, {0xdd, 0x11, "01b573c936cb9ad59a1a0794d08e1a01d3"}, {0xdd, 0x1e, "61230b8ae72c6b56c2b6a0bc4f8e1c34bd0256335a42f70bead4aaee0fed"}, {0xdd, 0xd4, "e5924572e2fba1ea9e80b63b4455e3daaa4f690fa528985a7de49b347cb74a9d7b2d5a74c563c1c8cc245f97f17cac3fb7a02ce3f23c3d03d86b6be4b227d0eb0058bec1bc24aed99d6fa8c2a38abee7f2659e534a7312dcfc1aa137683ac0ba04dc96de9a0cc8072d31e0b5605cb54a09f37b62826101f8ba8202f1511d3824c7bbef86b058e9ff84405eb74f2f1effec2dfbf14c64380830776a375b82814db3536c7a78b4d64a5d97f84955958a65292bea6bff66bb7eaacc46d9d2902f93505fb06666077527350ca171fe7a4f0fa7037f40"}, {0xdd, 0x4e, "a1203439b5d9bf1b2d1f8393449c06f6b3d4dae756c98c931d98192b464594d0cc7584bce4df5c470ed3d2726cd383b7a7ed5b7e05c5b8917532b38412e8c7355566c83123e6977ac8ab96146822"}]}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0x3ff, 0x1, 0xfbc, 0x2, 0x8, 0x4, 0x5]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xf4b}]}, 0x314}, 0x1, 0x0, 0x0, 0x20040090}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r4) (async) clock_gettime(0x0, &(0x7f0000000c00)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000c40)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000c80)=[{{r6, r7/1000+10000}, 0x2, 0x6, 0x7fffffff}, {{0x0, 0xea60}, 0x1f, 0x40, 0x9}, {{0x77359400}, 0x12, 0xfff, 0xffff}, {{0x77359400}, 0x0, 0x101, 0x2}, {{r8, r9/1000+10000}, 0x1, 0x5d8, 0x5}], 0x78) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r4) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x38, r10, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x3d}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x42f}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1265}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) r11 = socket(0x21, 0x2, 0x8) (async) syz_genetlink_get_family_id$team(&(0x7f0000000e40), r0) (async) r12 = openat$full(0xffffffffffffff9c, &(0x7f0000000e80), 0x19da01, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r12, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x14, r5, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x1) ioctl$sock_SIOCGPGRP(r12, 0x8904, &(0x7f0000000fc0)) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r12, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x78, r5, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "508fdd8feb6ab92bf63877373e836707a77bb4d361001435"}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x78}, 0x1, 0x0, 0x0, 0x890}, 0x5) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000001180)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001340)={'syztnl0\x00', &(0x7f00000011c0)={'erspan0\x00', r14, 0x700, 0x20, 0x3, 0x404, {{0x57, 0x4, 0x3, 0x4, 0x15c, 0x66, 0x0, 0x6, 0x4, 0x0, @multicast1, @local, {[@lsrr={0x83, 0x1b, 0xb0, [@broadcast, @multicast2, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @lsrr={0x83, 0x13, 0x40, [@private=0xa010100, @local, @local, @local]}, @noop, @ssrr={0x89, 0x23, 0x89, [@remote, @loopback, @local, @empty, @remote, @broadcast, @empty, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x3c, 0x6f, 0x1, 0xa, [{@broadcast, 0x4}, {@private=0xa010100, 0x9}, {@remote, 0x57}, {@remote, 0x2c4}, {@remote}, {@private=0xa010102, 0x40}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0xe}]}, @rr={0x7, 0x17, 0x74, [@loopback, @remote, @remote, @multicast2, @empty]}, @timestamp_addr={0x44, 0x24, 0x26, 0x1, 0x4, [{@empty, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@remote, 0x2}, {@multicast2, 0x5}]}, @cipso={0x86, 0x29, 0x3, [{0x2, 0x10, "6beb43af86551ee492eff65f51bf"}, {0x7, 0x10, "4e445457ec28a0f65461db0c0029"}, {0x1, 0x3, "19"}]}, @cipso={0x86, 0x54, 0x3, [{0x3, 0xd, "b3967a3ec84135a2225d8a"}, {0x0, 0x12, "ff1c11fe16d4f04c780ac6e0685d35e6"}, {0x6, 0x3, "9d"}, {0x7, 0xe, "1502ac77a00fb662ee9a7c9b"}, {0x5, 0x10, "136a55d6304b30002859334f1777"}, {0x2, 0x5, "c966d9"}, {0x1, 0x9, "a36500da23096f"}]}]}}}}}) sendmsg$NL80211_CMD_SET_MAC_ACL(r11, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x30, r10, 0x20, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048010}, 0x2400088c) r15 = accept4(r4, &(0x7f0000001480)=@l2tp, &(0x7f0000001500)=0x80, 0x0) ioctl$XFS_IOC_ERROR_INJECTION(0xffffffffffffffff, 0x40085874, &(0x7f0000001540)={r15, 0x5}) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000001600)={0x4, 0x6, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000015c0)={0x990a66, 0x800, '\x00', @p_u32=&(0x7f0000001580)=0x3}}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000001640)={'veth1_to_bridge\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000016c0)={{0x1, 0x1, 0x18, r12}, './file0\x00'}) 19.445913943s ago: executing program 1 (id=242): r0 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xc95e}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000090601020000000000000000010000050900020073797a3000000000050001000700000008000940000000012400088010"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 19.279257501s ago: executing program 1 (id=246): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff00000000000008060001080006040002bbbb3bbbbbbb000000000000200000007f000001"], 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000001200)={0x0, @in6={{0xa, 0x4e22, 0x6, @local, 0x2}}}, &(0x7f00000012c0)=0x84) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) bind$bt_hci(r0, &(0x7f0000000040), 0x6) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000001040)=[{0x96, 0x3, 0x9, 0x7fff7ffc}]}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) process_madvise(r3, &(0x7f00000002c0)=[{0x0, 0x5b}, {&(0x7f0000000040)="62e32c10936df560c8c3062b54bc7d1379ae69088177329c6e89a426bbe2e698bd3edc150b1ac8fe377e000687d7d85a18d37d9d03187b3c9ca4b193791a3e7a3faa21bf7086a5f0ede1bc860ab4496bc056a2c5011d8dafa16dc76ac90970bda2467bb49f0ccc9eb6ce63f440acbab4fc75be62f3008d1634931a2c65d05a9e0ad48ca04b54a62ca61293005cab66b3874ae0d286e004f16f6c546492752aaeddebd1ded1830d9be30a66c086d05fdc31c809fa14aabcd762c1c21e48ab11279ac040846f186032b2b7f6", 0xcb}], 0x2, 0x18, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file2\x00', 0x0) close_range(r1, 0xffffffffffffffff, 0x200000000000000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000001100)=@generic={0x0, 0x2db, 0x100}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') close_range(r6, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f0000001080)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f00000010c0)=ANY=[@ANYRES32=r0, @ANYRESDEC=r6, @ANYRESDEC=r6, @ANYRES32=r5]) read$FUSE(r5, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x0, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) write$FUSE_ENTRY(r8, 0x0, 0x0) r9 = dup(r4) write$UHID_INPUT(r9, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006) 19.08540701s ago: executing program 1 (id=251): r0 = syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0xc2041, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='jffs2\x00', 0x1214040, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) close_range(0xffffffffffffffff, r0, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x1, 0x1200) mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 18.988280584s ago: executing program 1 (id=253): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f00000020c0)={&(0x7f0000000640)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f0000001e40)=[@mask_cswp={0x58, 0x118, 0x9, {{0x7f, 0x3}, 0x0, 0x0, 0x7, 0x4, 0xffffffff, 0x3, 0xc, 0x7}}, @rdma_dest={0x18, 0x114, 0x2, {0x86, 0x40}}], 0x68, 0x20008011}, 0x0) r1 = socket(0x23, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0xc0841, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r3, 0x40043311, 0x0) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f0000000000)=0xe209) 18.509786223s ago: executing program 1 (id=258): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) mmap(&(0x7f0000198000/0x1000)=nil, 0x1000, 0x1002, 0x28011, r2, 0xffffffffffffc000) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) move_mount(0xffffffffffffff9c, 0x0, r3, 0x0, 0x146) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0x6a) 18.449916966s ago: executing program 33 (id=258): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) mmap(&(0x7f0000198000/0x1000)=nil, 0x1000, 0x1002, 0x28011, r2, 0xffffffffffffc000) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) move_mount(0xffffffffffffff9c, 0x0, r3, 0x0, 0x146) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0x6a) 11.226091843s ago: executing program 6 (id=371): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, 0x0, 0xfffffffffffffffe) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x29) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) sendto$inet(r2, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/153, 0x99}, 0x8000}], 0x1, 0x2000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000003a80)={@local, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @remote, @empty, @remote, @broadcast}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="840000001000010027bd700402d4df2500000000", @ANYRES32=r4, @ANYBLOB="916f0600c06a010064001280110001006272696467655f736c617665000000004c00058005001e00000000000500210000000000050009000000000005001b0001000000050019000200000008002200", @ANYRES8=r4], 0x84}}, 0x200088c2) 11.21820226s ago: executing program 6 (id=372): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0xf) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xba}]}, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101041, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r2, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r2, 0x400454cd, 0x300) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00b9072ee02cfa36f7cf39cabb831d7974c913ef04ea4e463347dd19023f11a0272f96d196ffaefed1188ccea42a13f4faf364eeada0e75dd9a630ad788c0e314d97f653ad041ab6b020fab3f608df1f1ec23d7d0027ff8fde237d2975a312692d4b77b283f5d86a63d2d1a91db5618c9c2973cb4e9628303c2f3c33c334225e11acf1acbdd50677eadbde3186f434"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x16, 0x17, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 11.159312914s ago: executing program 6 (id=373): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x20, 0x12, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}}, 0x20}}, 0x0) read(r0, &(0x7f0000000140)=""/166, 0xa6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f00000005c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000060000000000000000000000791000000000002786075109d9823600aed5386d6c958d12737e4e8146b017669e447296b9ab62d36f32df376bbcacc41a779f806cf52d7a7eff2e1f7f4ff7eec97f07d5dacbbe2696568d01914e90e128ffcb5d610254ef173b2a9c04537fd7"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000420000000600000007ffffffffffe200", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000100)}, 0x40000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x3, 0x3, 0x0, 0x5, 0x6, 0x2000201, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x800000, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0x0, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x1185, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x6, 0x6823, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x7, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x6, 0x2, 0x2, 0x42c2, 0x6, 0x6, 0x0, 0x1, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) lsm_set_self_attr(0x64, &(0x7f00000005c0)=ANY=[@ANYBLOB='f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00#\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000040)=0x52, 0x4) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000000)=0xf, 0xff09) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f0000000180)={[{@fat=@nfs}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@rodir}, {@shortname_win95}, {@shortname_win95}, {@rodir}, {@shortname_winnt}, {@uni_xlate}, {@fat=@check_normal}, {@shortname_lower}, {@utf8no}, {@numtail}, {@rodir}, {@shortname_win95}, {@utf8no}, {@utf8no}]}, 0x2, 0x292, &(0x7f0000000cc0)="$eJzs3cFqK1UYAOB/mkmTKJgsXInQAV24Kq1P0CIVxIKgZKEutNgUpAmFFgpVMe3KJ3Dj1udxI76AD6C4swtxLulM0uTeSUvubZty7/dt+vOf8+f8M2dou5mTr98eHO4fnRxc/PBnNJtJrGzFVlwm0YmVGDuPSn/8XZ0HAB65yzyPf/JCo0idzc6oz6lMV+69OQDgXkz//V92LwDAw/js8y8+3t7d3fk0y5oRg59Ou0kUP4vx7YP4NvrRi41ox38R+UQRf/jR7k6k2Ugn3h0MT7ujysFXv5Wfv/1XxFX9ZrSjM13fmtRvZoWp+uFptx6vletv9aP3ya/Rjjer13//uv4yL+ujuxrvvTPV/3q04/dv4ij6sR/F/zrj+h83s+yD/Od/v/9ylB3VvxERjdifuVN57aH3BgAAAAAAAAAAAAAAAAAAAACAl9d6NtGZPX9nfPD/DeM3nA80nDqfZyPLsjwp5l/Xp/FWmi7z0gEAAAAAAAAAAAAAAAAAAODRODn77nCv3+8d32kwfq+/Yij+n800ImLO56S3r7W2aIdRK1vrJxGLXVc9GleVt0+uLXjHWqN+esdJGne3Bckk05oeWotirVGmVQRTmcWW+OXZjWvGVTB+ug73knmbOw6aVQ/JCwfJedXjV5tbtfp0plVeQcXk1g2rr77+XD3n7TlDSUTUJzezHGpVT67f7T0c72HtIX4NAQAAAAAAAAAAAAAAAAAAM+//VwxeLKEhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFiC6+//XyAYlsXz5uS1UZBGmVnyJQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAKeBIAAP//UwJnXQ==") sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) 10.10712109s ago: executing program 6 (id=377): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB="2c6f626a5f7207000000002e0000ea26de004d2208fc414d630815ec2191519244adb53cec31ddc7b9b58f32238fac4fbdc332b1719e34d6"], 0x25, 0x357, &(0x7f0000000e00)="$eJzs3T9sG2UUAPDnXhqnESUekCqYDBsSqpogBpgSVUWqyABFFv8WLJryJzaVYmEpDHG8gComEAsSTGwdYOyMGBBiY2ClSKiAWKjEUKkRh84+2+fYocmQ0MLvN1RP7/vefe/Op94lSr682on1i8fj0s2bN2JurhQzy2eX41YpKnEskujbjqk+mJ2eBwDucrfSNP5I++48+6P5QeTZDwD3rt7z//WTo0T5AMVX7juMlgCAQ7bPr/+fnZq9fGhtAQCHaOL5/8jY8K5v888MfyYAALh3Pf/Sy8+srEZcqFbnIprvt2vtWjw1Gl+5FG9GI9biTCzETkT/RaH/tpD9+/T51XNnqplfKlHLKtq1iGanXeu/KawkvfpyLMZCVPL6dFifZPWLvfpqRGx3eutHs9SuHY/5fP0f52MtlmIhHpiojzi/em6pmh+g1hzUdyK6MTc4iaz/07EQ378Wl6MRFyOrHfW/tVitnk1Xx+rbV8u9eRF/Hv2HAgAAAAAAAAAAAAAAAAAAAADAf97p6lBluP9N2uy037uwe0JlbH+cWn843x+o298fKC0Pdue5kuzeH2h8f552bSaO/atnDgAAAAAAAAAAAAAAAAAAAHeP1uZs1BuNtY3W5rvrxaBTyLz97Rdfn4jB0Exe+lYyqoo8OXacwcTCkZMYLpEOy9NkbE4eJBGDydv1q9eGHRfnlIdnMVGeBeWJoVLeU73ROPnwz59Oq/orC7Z7mSQmLst4UMrXLww1788ScxGxs1fV3sHSHeZcT9N0r/KtTyarohQxEwduYx/BNzfeePDx1qknepmv8k0fHn1s4YXrH3/+23q9Ed3+lWk0ZjdaO+k+jpz1OjmUFO6fUn6dS1PuhOlBd5TpbrQ268kPv7/40Iff7ZqcTL9/0mLmnb3X+nJ3ZrYflCIqg4vwT60en3LzTw9euT28ew/+wZ36bLl+beunX/dbVfhPwkYdAAAAAAAAAAAAAAAAAABwJAq/K34ATz53eB0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNEb/f3/QtCdyOwnuN2JyaHy2kZrz8VPHOmpAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwP/Z3AAAA//+TD3P9") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x240008d0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$eJzs3c1rHOUfAPDvbF76+vs1hVLUgwR6sFK7aRJfKgitR9FiQe91SbahZNMt2U1pYqHtwYJ4kSKIWBD/AO8eizcv+lcUtFCkBD14icxmtt1ks9kk3bqp8/nAtM8zz2yeeeaZ59nv7MyyAeTWaPpPIeLFiPgyiTjUUjYYWeHo6nbLj65PpUsSKysf/ZFEkq1rbp9k/x/IMi9ExE+fRZwotNdbW1yaLVUq5fksP1afuzJWW1w6eWmuNFOeKV+emJw8/cbkxNtvvdmztr56/q9vPrz33ukvji1//cODw3eSOBsHs7LWdjyFm62Z0RjNjslQnF234XgPKttNku1tPvys9oPtGcjG+VCkc8ChGMhGPfDfdyMiVoCcSox/yKlmHNC8tu/RdfBz4+G7qxdA7e0fXP1sJPY2ro32LydrrozS692RHtSf1vHj73fvpEt0+RziRg/qA2i6eSsiTg0Ots9/STb/7dypxofHm1tfR97ef6Cf7qXxz2sbxT+Fx/FPbBD/HNhg7O5E9/FfeNCDajpK4793Nox/H09dIwNZ7n+NmG8ouXipUj4VEf+PiOMxtCfNb3Y/5/Ty/ZVOZa3xX7qk9TdjwWw/HgzuWfua6VK99DRtbvXwVsRLT+LfJNrm/72NWHd9/6fH43ya+OXzrnUcLd99uVNZ9/a36n0EvPJ9xCsb9v+TO1rJ5vcnxxrnw1jzrGj35+2jv3aqf3vt7720//dv3v6RpPV+bW37dXy39+9yp7Kdnv/DyceNdPNG4rVSvT4/HjGcfNC+fuLJa5v55vZp+48f23z+2+j83xcRn2yx/beP3O646W7o/+lt9f/2E/ff//TbTvVvrf9fb6SOZ2u2Mv9tdQef5tgBAAAAAADAblOIiIORFIqP04VCsbj6fMeR2F+oVGv1ExerC5eno/Fd2ZEYKjTvdB9qeR5iPHsetpmfWJefjIjDEfHVwL5GvjhVrUz3u/EAAAAAAAAAAAAAAAAAAACwSxzo8P3/1G8D/d474Jnzk9+QX13Hfy9+6QnYlbz/Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj/kl/EPAAAAAAAAAAAAAAAAAAAAAAAAAAAAPXX+3Ll0WVl+dH0qzU9fXVyYrV49OV2uzRbnFqaKU9X5K8WZanWmUi5OVee6/b1KtXplfCIWro3Vy7X6WG1x6cJcdeFy/cKludJM+UJ56F9pFQAAAAAAAAAAAAAAAAAAADxfaotLs6VKpTzfj8TPhYj+1b7lxJnYFbux40TSrZfPZCfD2qLhtjVrEpElBp/VzicR0e9Dl+NEnycmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjxTwAAAP///b4wHA==") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0xf6) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) chdir(&(0x7f0000000380)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan1\x00'}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}]}, 0x40}}, 0x8000) 9.599099058s ago: executing program 6 (id=381): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000040)={0x10}, 0x1) (async) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_emit_ethernet(0x26, &(0x7f0000000a00)={@random="02aaab4ee459", @multicast, @val={@val={0x88a8, 0x0, 0x1, 0x4}, {0x8100, 0x2, 0x0, 0x3}}, {@can={0xc, {{0x3, 0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, "ffff00"}}}}, 0x0) (async) getsockname(r4, 0x0, 0x0) (async) pread64(0xffffffffffffffff, 0x0, 0x0, 0x81f) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000060000000800000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xd, &(0x7f0000000480)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) 8.89785372s ago: executing program 6 (id=386): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000180)='./bus/../file0\x00', 0x282006, &(0x7f0000000200), 0x3, 0x593, &(0x7f00000003c0)="$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") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x1000}}}}}}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f00000001c0)) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x8402, 0x8d) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x92012, r2, 0x26000) lgetxattr(&(0x7f0000000040)='./bus/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', '$\x00'}, &(0x7f0000000300)=""/21, 0x15) 8.860511553s ago: executing program 34 (id=386): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000180)='./bus/../file0\x00', 0x282006, &(0x7f0000000200), 0x3, 0x593, &(0x7f00000003c0)="$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") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x1000}}}}}}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f00000001c0)) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x8402, 0x8d) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x92012, r2, 0x26000) lgetxattr(&(0x7f0000000040)='./bus/../file0\x00', &(0x7f0000000280)=@random={'btrfs.', '$\x00'}, &(0x7f0000000300)=""/21, 0x15) 4.516117789s ago: executing program 0 (id=419): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x80000000, 0x3, 0x9, 0xf, 0x3, 0x5, 0xfc, 0x0, 0xff, 0x0, 0x0, 0x6, 0xff, 0x0, 0x5}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect$uac1(0x0, 0xbb, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406b1d010140000102"], 0x0) ioctl$EVIOCRMFF(r2, 0x40085503, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0}) 2.059775702s ago: executing program 4 (id=447): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x3, 0xffffffffffffffff, 0x4) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) set_mempolicy(0x4001, 0x0, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0xc, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'Z'}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x118}}, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) 1.958997793s ago: executing program 4 (id=449): openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c6101, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x10, 0x3, [0x3, 0x8, 0x4]}, &(0x7f0000000240)=0xe) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={r2, 0x8, 0x2008000, 0x9}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc/thread-self/fail-nth\x00', &(0x7f00000003c0)='proc\x00', 0x31c020, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) pipe2(0x0, 0x10000) r4 = socket$nl_generic(0x10, 0x3, 0x10) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="3400a5b8", @ANYRES16=r6, @ANYBLOB="1102000000000000000001000000200001801400040000000000000000000000000000000001060001000a000000"], 0x34}}, 0x0) connect$inet(r1, &(0x7f0000000500)={0x2, 0x4e24, @loopback}, 0x10) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000380)={'gre0\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0x1, 0x20, 0x5, 0x7, {{0x1f, 0x4, 0x1, 0x21, 0x7c, 0x64, 0x0, 0xea, 0x2f, 0x0, @multicast1, @empty, {[@timestamp={0x44, 0xc, 0x5c, 0x0, 0x4, [0x3, 0x3]}, @timestamp={0x44, 0x18, 0xe3, 0x0, 0xb, [0x3, 0x1, 0x0, 0x6, 0x401]}, @ra={0x94, 0x4}, @cipso={0x86, 0x2d, 0x2, [{0x2, 0x3, '7'}, {0x0, 0x11, "b9660cf0b719de82e859430a3d324e"}, {0xd11e0b07360d88f9, 0xc, "c0a2296eff625862fcdc"}, {0x6, 0x7, "ce44f35253"}]}, @end, @end, @generic={0x86, 0x11, "9e23ff2b9248d10c3a81c21fa7d276"}]}}}}}) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x802, &(0x7f0000000480)=ANY=[], 0x1, 0x2a4, &(0x7f0000000580)="$eJzs3T9rc2UUAPBzkzSNOqSIiyJ4QQen0rq6NEoFsZMSQR002BYkCYUWAlYwduoncPR7+BFcXPwGgqvg1g6VKzf33ia16R/65k3h7e83nd7nnvOc3KckU06+eXPY3z1I4uTsz2i1kqhtxVacJ7EWtaj8FI0AAF4c51kW/2QPyWzUFt8NALAMxed/4bF7AQCW47Mvvvyks7Oz/WmatuL19umom0TE8HTULdY7+/FdDGIvNqIdFxHZpSL+6OOd7WikubV4ZzgedfPM4de/l/U7f0dM8jejHWvz8zfTwmX+y1V3aXT2V6o/2vHa/Pz3/p8fw3F0m/Hu2zP9r0c7/vg2DmIQu5HnTvN/3EzTD7Ofz374Kt8mz09q0V2d3DeV1Zd0JAAAAAAAAAAAAAAAAAAAAAAAPAHraZoU43sm83vyS5P5OaNu/WKyvp5WZuf7jKv5QElVqJgPlEU5omecxS/VfJ2NNE2z8sZpfiPeaPhhAQAAAAAAAAAAAAAAAAAAAMgdfX/c7w0Ge4cLCappANXX+h9aZ2vmyltx3O/Vby64ev+9ZqcN5L3eenM0GrGgx3JX8FLez8Irr04P9/MogupgFrrXqx8URY/7vbRcqh5yv5fctVerOrhfZ5ea8ayNZZN/iYvs6pm2Llu9mtVc0NNovjJ36d8sy+5X5/2/ijMqrySTERv3232lDOa+wDxoXT+L324ueONbRn0hbzwAAAAAAAAAAAAAAAAAAMA10y/9zlk8uTW19tyaAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAlm/7+fxW0IuLqlWvBuEy+7Z4yaMbh0SO/RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ6A/wIAAP//4ipOSw==") r10 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x133042, 0x19) sendfile(r10, r10, 0x0, 0x400) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f0000000840)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00022abd7000ffdbdf25060000003c000680060005004e220000050002000800000008000700", @ANYRES32=r8, @ANYBLOB="0500020007000000050002000e00000008000700", @ANYRES32=r9, @ANYBLOB="060005004e230000240d3f303fa8f9c70b0ade0a8f57f96a17e67acca5c925cba0e38198fe6295d0b13e0860b44371ffb7315f39c66826c7e08f12190a7e68248b93ec22e05c29ef03e16ee3a12358107dbfc60b13f83a4d82419ec5799bf1223ccdc8bf762c9cc0871f30e6b90222c3cf2d88c12f90176c4711abdfaf2d9843079bded5d6cd04b4d24c89d627f913ce3f07b09027c3ac827205d7c1"], 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0xc080) r11 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r11, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r11, 0x5) 1.913974989s ago: executing program 2 (id=450): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0x0, 0x110) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in=@loopback, @in6=@local}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000300)=0xe8) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x1, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x4004000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000940)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, r2, 0x101, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) r3 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0x0, 0x4ea, &(0x7f0000000380)="$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") munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) r4 = userfaultfd(0x1) syz_emit_ethernet(0x3c, &(0x7f0000000d80)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@llc_tr={0x11, {@llc={0x42, 0x80, '/', "1d2237cf1aa32a95382023ecb8dc46afb86d42958ee668e133192144fac54a9a4fc51dbdfeac40"}}}}}, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x67d}) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000fee000/0x10000)=nil, 0x10000}) fchmod(r3, 0x100) 1.743556756s ago: executing program 2 (id=453): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x8, 0x5}, {0x0, 0x5}, {0xa}]}]}}, &(0x7f0000000000)=""/59, 0x3e, 0x3b, 0x1, 0xa}, 0x28) r0 = fsmount(0xffffffffffffffff, 0x0, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x0, 0x80000, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000084) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x2, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x8, 0x3, 0x0, [{@broadcast}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xd7e}]}, @ssrr={0x89, 0x3, 0xce}, @lsrr={0x83, 0x3, 0xfc}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0x0, 0x0, 0x2}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) truncate(0x0, 0x410800f000) shmget(0x1, 0x1000, 0x100, &(0x7f0000ffd000/0x1000)=nil) getuid() r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) r4 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000000c0)={0x40000000}) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000700)="580000001400add427323b472545b45602117fffffff81000e220e2280007f000001e801000500000000003ac7100003ffffffffd3daffffffffffe7ee000000deff000000ddbd57cff2ffe293a2afebd998c88d5d6b3710", 0x58}], 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000000)='veth1_to_team\x00', 0x10) setsockopt$inet_int(r8, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r7) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x60, r9, 0x109, 0x2000000, 0x25dfdbfc, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xb}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xdcb2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) 1.686066075s ago: executing program 4 (id=454): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x4) fchdir(r1) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x101500c, &(0x7f0000000080)={[{@nodiscard}, {@block_validity}, {@inlinecrypt}]}, 0x3, 0x470, &(0x7f0000000240)="$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") r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x3}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}}]}, 0x40}}, 0x0) 1.620369962s ago: executing program 2 (id=455): r0 = socket$inet6(0xa, 0x2, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x20001) (async, rerun: 32) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0xc08, 0x3, 0x1e8, 0x0, 0x5002004a, 0xb, 0x2e8, 0xea13, 0x380, 0x3c8, 0x3c8, 0x380, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x248) (rerun: 32) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000180)=0xb, 0x4) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) (async, rerun: 32) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) (rerun: 32) ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f00000000c0)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000940)={'tunl0\x00', &(0x7f00000007c0)={'gre0\x00', 0x0, 0x10, 0x91, 0x37, 0x6, {{0x58, 0x4, 0x1, 0x37, 0x160, 0x67, 0x0, 0xee, 0x29, 0x0, @broadcast, @local, {[@timestamp={0x44, 0x20, 0x9b, 0x0, 0x0, [0x5, 0x5, 0x10001, 0x200, 0x7, 0x28, 0x0]}, @ssrr={0x89, 0x17, 0x6d, [@multicast2, @rand_addr=0x64010101, @remote, @rand_addr=0x64010100, @empty]}, @generic={0x88, 0x3, "10"}, @timestamp_addr={0x44, 0x34, 0x39, 0x1, 0xb, [{@private=0xa010100, 0x301f}, {@multicast2, 0x40}, {@local, 0x10000}, {@local, 0x2b8}, {@dev={0xac, 0x14, 0x14, 0x13}, 0xffffff69}, {@empty, 0x10001}]}, @timestamp_addr={0x44, 0x44, 0x34, 0x1, 0x4, [{@loopback, 0xf6000}, {@multicast1, 0x1b}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@local, 0x10}, {@multicast1, 0x4}, {@multicast2, 0x6}, {@local, 0x6}, {@rand_addr=0x64010101, 0x5}]}, @cipso={0x86, 0x4d, 0x3, [{0x5, 0x2}, {0x5, 0xc, "6042beb2da6d3b9b9f49"}, {0x7, 0x3, 'R'}, {0x7, 0x10, "54a53d89c30d47c913ccf7514c49"}, {0x1, 0xb, "8e0e113d6f95fca952"}, {0x2, 0x10, "593a44eecb10b4d89e7036f3cf4b"}, {0x5, 0xb, "37de93f2ee6268c82f"}]}, @cipso={0x86, 0x49, 0xffffffffffffffff, [{0x1, 0xf, "e6803163ccdaddcf2c820fb52b"}, {0x7, 0x2}, {0x6, 0x11, "fd6aec76bc8ab11a466d56eecbd8a2"}, {0x2, 0x6, "6f928a3f"}, {0x7, 0x8, "e535db9f6caa"}, {0x6, 0x4, 'oW'}, {0x1, 0xf, "f8698c6856b98e4f82486a03fe"}]}, @end]}}}}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c51a1aaf175a9d59559f29c09ff5e337e791be17c1ef703647852fe9e1b3ab3e6cd1c3b84b92c9822e232e0052c33bec0c49ee12b56b36e6c5be956e7791334289cd58966289930fe24f617b6c", 0x8d}, {&(0x7f0000000640)="146d7d1fe23f2a38218e567b79d540f9855f11c272611653b571eabff1ae51d8da60a58cf2d3edc698914eaa6fb32bf9bab8b33a", 0x34}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="05000000f5fffffffbffffff0900000015040000", @ANYRES32=0x1, @ANYBLOB="0200000000000000000000000000000400000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="000000000400"/28], 0x50) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async, rerun: 32) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') (rerun: 32) preadv(r5, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x35d3, 0x2) 1.617356008s ago: executing program 5 (id=456): r0 = syz_socket_connect_nvme_tcp() userfaultfd(0x80801) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0xde02a79dd964b6b2) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="74727a24517d9510203116b928fb2f", @ANYRES64=r2, @ANYRES32=r6, @ANYRESHEX=r3, @ANYBLOB="2c7665729fc86f6e3d3970323030302c00"]) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r5, @ANYRES16=r4], 0x15) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x100, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}}}, 0x24}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x9, 0x1a4, 0x85c, 0x5}) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x41100, 0x4b, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$VHOST_SET_OWNER(r8, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f00000001c0)={0x2, 0x1, 0x0, 0x0, 0x0, 0xd5e855c9ff29405c}) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000000880)) ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f0000000080)) socket$packet(0x11, 0x2, 0x300) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x80, 0x0, 0x0, 0x40f00, 0x0, '\x00', r7, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)=ANY=[@ANYRES32=r9, @ANYRES32=r10, @ANYBLOB='.'], 0x20) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, &(0x7f0000000a80)=""/4096, &(0x7f0000001a80)=0x1000) 1.614275805s ago: executing program 4 (id=457): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 64) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) (rerun: 64) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0xfffffffd, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) (async) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) shutdown(r0, 0x1) r5 = io_uring_setup(0xf08, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000000000000001"], 0x30}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x20, &(0x7f0000000000)=[r5], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r6, 0xf505, 0x0) (async, rerun: 32) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r7, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x200400c0}, 0x10) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)={0x28, 0x13, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) (async) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000000)={0x4, 0x8, {0x54, 0xfff7, 0x0, {0x7ff}, {0x42c4, 0x2}, @rumble={0x7ff, 0xc2}}, {0x51, 0x9, 0x3, {0x920e, 0xc78}, {0x7, 0xa}, @rumble={0xfcb8, 0x2}}}) 1.489743748s ago: executing program 4 (id=458): recvmmsg(0xffffffffffffffff, &(0x7f0000004380)=[{{&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000000280)=[{0x0}], 0x1, &(0x7f00000002c0)=""/134, 0x86}, 0x1000}, {{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/20, 0x14}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/149, 0x95}, {&(0x7f0000001cc0)=""/230, 0xe6}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/4096, 0x1000}], 0x7}, 0xad1}, {{0x0, 0x0, &(0x7f0000004240)=[{&(0x7f0000003f00)=""/217, 0xd9}, {&(0x7f0000004000)=""/223, 0xdf}, {&(0x7f0000004100)=""/8, 0x8}, {&(0x7f0000004140)=""/217, 0xd9}], 0x4}, 0x2}], 0x3, 0x60, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty, 0xfe}, 0x1, {[0x0, 0x0, 0x0, 0x5, 0x1, 0xe3]}}, 0x5c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="603fcdff", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fedbdf2505000000080001007063690011000200303030303a30303a31302e300000000008000300020000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030002000000"], 0x60}, 0x1, 0x0, 0x0, 0xa000}, 0x40000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0x2, &(0x7f0000000140)={0x8, 0x5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = gettid() tkill(r7, 0xb) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 1.489148302s ago: executing program 5 (id=459): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x30, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close(0x3) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000280)={0x0, 0xfffff800, 0x9, 0x112}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 1.444455814s ago: executing program 0 (id=460): r0 = socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) r2 = socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x7}, {&(0x7f0000000280)=""/19, 0x13}, &(0x7f0000002040)=[{&(0x7f00000002c0)=""/35, 0x23}, {&(0x7f0000000340)=""/64, 0x40}, {&(0x7f00000005c0)=""/149, 0x95}, {&(0x7f0000001040)=""/4096, 0x1000}], 0x4, 0x8, 0x5}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x4}], 0x60}, 0x4000804) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44) ioctl$sock_inet_SIOCGARP(r2, 0x8954, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x5c, @dev={0xac, 0x14, 0x14, 0x27}, 0x4e22, 0x1, 'dh\x00', 0x0, 0x2, 0x28}, 0x2c) ioctl$AUTOFS_IOC_FAIL(r7, 0x9361, 0xf8aa) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r8, 0x6, 0x19, &(0x7f00000001c0)=0x8, 0x4) sendmmsg$inet(r8, &(0x7f00000000c0)=[{{&(0x7f0000000000)={0x2, 0x4e28, @multicast1}, 0x10, 0x0}}], 0x1, 0x20008000) shutdown(r8, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000009500000700000000a84dd05b14b8f32b001f19e896a650c5a7cce6fd7ec46eaea0e39f69465695dcacc7de5d761005a1b46ddb37be7453f81228608dcc268a86583e9a45316859d68dfe5e9592b18bd1f37756616236b0c865bbf66c5cab6b708ce71474475a70d10ca031b959613ae8218b4401d8c2c5a161918006a0e47cd32051e95f1046faf5e060fa609ddc92"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0) 665.521345ms ago: executing program 5 (id=463): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xce22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) listen(r0, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r1, 0x2) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000100)="2821dcd1e2", 0x5}, {0x0}], 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r3, &(0x7f0000000900)=[{&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000001240)=""/106, 0x6a}], 0x2, 0x7, 0x20000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206050000000000000000000700000014000780080011400000000008001240e9af1d6d7c0000ffff05f1000006000000050005000200000005000400000000000900020073797a310000000013000300686173683a6e65742c6966"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) close(r4) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="b700000000df7f004e0000000600000018230000", @ANYRESDEC=r4, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r6, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, 0x94) read$FUSE(r4, &(0x7f00000012c0)={0x2020}, 0x2020) syz_open_dev$tty1(0xc, 0x4, 0x4) 572.309249ms ago: executing program 4 (id=465): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20) (async) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001040)={'vxcan1\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xa, r2, 0x0, 0x0}, 0x10) (async) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) (async) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0/file0/file0\x00', 0x0) ppoll(&(0x7f0000000800)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) (async) unshare(0x40400) (async) r3 = socket$igmp(0x2, 0x3, 0x2) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x0, 0xc8}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480), 0xc0202, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000200)="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", 0x200}, {0x0, 0x20000}], 0x2) (async) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000001680)=@filter={'filter\x00', 0xe, 0x3, 0x12e, [0x0, 0x200000001280, 0x2000000012b0, 0x20000000143e], 0x0, 0x0, &(0x7f0000001280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x6, 0x4, 0x201, 'pim6reg0\x00', 'macvtap0\x00', 'bridge_slave_1\x00', 'nr0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0x0, 0xff, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x19}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1a6) (async) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2408c3, 0x0) r7 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x7, &(0x7f0000000780)={0x10, 0x8, 0x5}, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) (async) io_uring_enter(r7, 0x1, 0x1, 0x1, 0x0, 0x0) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, 0x0, 0x0) (async) syz_emit_ethernet(0x22, &(0x7f0000000800)=ANY=[@ANYBLOB="bbbbbbbbaa0800450000140000000001029078020202c8e000000100000000000000"], 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x388, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ipv6={@local, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], [0xff000000, 0xff000000, 0xff000000, 0xff], 'veth0\x00', 'veth0\x00', {}, {}, 0x0, 0x10, 0x2, 0x6a}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0xe, 0x4, 0x1, [0x40, 0x101, 0xd0, 0x8, 0x6, 0x5, 0x5, 0x1, 0x8, 0xff10, 0xfff, 0x7f, 0x5, 0xfffc, 0x7, 0x8], 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@remote, @local, [0xff000000, 0xffffff00, 0x0, 0xff], [0x0, 0xffffff00, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'ip6_vti0\x00', {0xff}, {}, 0xc6, 0x72, 0x4, 0xbff3f39039468d84}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) 375.162756ms ago: executing program 0 (id=467): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000540)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) bind$unix(r2, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) (async) io_setup(0x8, &(0x7f0000004200)=0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') io_submit(r3, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x1c, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x883e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x8000) (async, rerun: 64) get_mempolicy(&(0x7f0000000140), &(0x7f0000000180), 0x2, &(0x7f0000bfd000/0x400000)=nil, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x4a) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="40000000100000030000e2ffffff00007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000200012800b6b741b7772696467651000100002800c00217e9692277516544100"], 0x40}, 0x1, 0x0, 0x0, 0x24004044}, 0x11) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 370.797916ms ago: executing program 7 (id=468): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000002880), 0x329040, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21486, &(0x7f0000000140), 0x0, 0x7ab, &(0x7f00000001c0)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) openat$full(0xffffffffffffff9c, &(0x7f0000002880), 0x329040, 0x0) (async) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21486, &(0x7f0000000140), 0x0, 0x7ab, &(0x7f00000001c0)="$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") (async) 369.828343ms ago: executing program 2 (id=469): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x3, 0x2bc, &(0x7f00000015c0)="$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") (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x50, &(0x7f00000001c0)={0x0, 0x0}, 0x10) r1 = socket$kcm(0x10, 0x5, 0x4) syz_emit_ethernet(0x21e, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f00000000c0)={0x0, 'wlan0\x00', {0x4}, 0xfff7}) (async) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e272f750375ed08a56331dbf9ed7a15e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800020004000000bdad446b9bbc7ace5b0dd385dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff00"/137, 0x89}], 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @rand_addr=0x640100fc}, 0x10) (async) connect$inet(r4, &(0x7f0000000200)={0x2, 0x4e22, @remote}, 0xa) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, 0x0, 0x18) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000004900010000000000000000000a00806e08000000e0000001140001800d5c2e93f10c000200"/51], 0x40}, 0x1, 0x0, 0x0, 0x22004008}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x3, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_SEQ_ADJ_REPLY={0x3c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4c47fcc0}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xa}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48084}, 0x4) (async) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r2) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000ffdbdf25090000006400038008000100010000000800030004000000140002007665744e315f6d616376746170000000060004000200000008000500e0000000140002006970766c616e31"], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000540)={0x38, r5, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffff0}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4a}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40d4}, 0x4040941) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000002a82, 0x0) r7 = dup(r6) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x2, 0x9, 0x8001}}, 0x30) (async) ioctl$VHOST_VDPA_GET_GROUP_NUM(r7, 0x8004af81, &(0x7f0000000580)) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x58}}, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') (async) syz_pidfd_open(0x0, 0x0) 369.397529ms ago: executing program 5 (id=470): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000009840)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}}}, &(0x7f0000000200)=0xe8) setuid(r3) utimensat(r2, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000ffdbdf254300000008000300", @ANYRES32=r1, @ANYBLOB='\f\x00X\x00,\x00\x00\x00\x00\x00\x00\x00\f\x00X\x00Z\x00\x00\x00\x00\x00\x00\x00\f\x00X'], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES8], 0x1, 0x2be, &(0x7f00000004c0)="$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") truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) 365.974141ms ago: executing program 0 (id=471): ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000000)='veth0_to_bond\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x0, 0x2, 0x1, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x4, 0x6}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @dev, @dev}, &(0x7f0000000180)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000c40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c00)={&(0x7f00000001c0)=@newtaction={0xa38, 0x30, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [{0x424, 0x1, [@m_vlan={0x11c, 0x7, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x229}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xf62}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x969}]}, {0xd7, 0x6, "71e646834cfe74b6c8bc5fe8aa608c11256a6f43581b9779c5ae7c24a5a01155e03cb90c16b0d1681112c5c749d68e837fcfc802502d219c410ce5752cacb952da58a6c40f895ed0f6fd42b89134f417f82d3de1a002b915859dcf223a5936f452d19665fedd2afe9e467401baa3a8f4e61ffdca1478c7d2a40e1756bca6cc7de3af1140846140a11b0ffe730a8f0b6b71bded88b468a05ebdea21455154a7c00cb91da77e39d5452590b4eef5a52b64fd3b19e741aeafad497e0729cf81e66cafe396c17fab7ce226f166946beb09142e47ea"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_csum={0x108, 0x20, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x7, 0x7, 0x0, 0x941}, 0x3c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x9, 0x0, 0x0, 0x1ff}, 0x35}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x20000005, 0x4, 0x5}, 0x51}}]}, {0x86, 0x6, "2dbfe5e6692f39eede521b043459c9e58127f168095f0580c6075646b63e95b6a8d5c760c8e4f9c89eb06a2449f5c1860a218593fb52e55f1ebdd8213c3752a737a30d897d9a9cc7acf24ef6688454cae9e10f3fe3672c579df954306e9b809335cbc375ff058037b878214ccd8a2fda7f241032e400b8708b8f84af1782d885ee82"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_csum={0x110, 0xc, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x1, 0x2000000c, 0x400, 0x9}, 0x6e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x240, 0xffffffffffffffff, 0x7fffffff, 0xb}, 0x5d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x10, 0x10000000, 0x9, 0x7}, 0x8}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x61, 0x20000000, 0x6, 0x2}, 0x13}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xb, 0x675, 0x1, 0x8, 0x86}, 0xb}}]}, {0x57, 0x6, "c77795575d959a4b3d1199e74ca0172e75b0ca006b2a9991a79f387aa23dfabcb1cee40e4e61858cad2d366c5d7b3dcba0431362f67e38fcff35017369d1a13e89edc4adbd7d031c937a70b83536ad8d2132d5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_vlan={0xec, 0x11, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x2, 0x10000000, 0x200, 0x3}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x87c, 0x4, 0x5, 0x6, 0x1}, 0x3}}]}, {0x86, 0x6, "0aef842ed65eb64822ab8b6f09bc13fd5fe8d7aba22811621e0a179b06dfefa3a3c148a2ed81f89ba97af1ae70a271e8385adcf50651f2c7e982cb10d43d44a6e8f429e4d2beecc08a18e3a0bcd0d00decccabbfd50796ed025312623c9f311cd21769eaec0aa7376963194a679bed109e98b5193720d1b2afe28ab403c0753507f4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0x600, 0x1, [@m_ife={0xcc, 0xe, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x10, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x48}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x91, 0x6, "35624c84890ab22bb32629b8914176a83228012e96e3bbeb23b37010bc04791fa7c5e9f9367fde1e9f4610efc6ce750b02ce2186fd267ed742e67afeadb2bf5fa93d47b7f01875f9c6910dd8520d7a057ed1ecbda4624993046346a690c856ff60962a20b9fc9ec8f31d652ae26a5d1150c9b3f82bbee881c5e1a13e74f262d81b37030bf9c7907a6202f28270"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_gact={0x14c, 0x16, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0xb1, 0x30000001}}, @TCA_GACT_PARMS={0x18, 0x2, {0xd3, 0xffffffff, 0x6, 0x5, 0x100}}, @TCA_GACT_PARMS={0x18, 0x2, {0x80000000, 0x0, 0x8, 0x5, 0x8000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x19a, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1316, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x2, 0x3, 0x1, 0xffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x2, 0x4, 0x101, 0x5}}]}, {0x9b, 0x6, "ece2a569b88cc420fc9a0ca0eb5a19b57abf3a9f50d5f003d334441d6cc42fad9b48c39e02b80fb4419328b53edd87ac64bf31e8b33e518145fc8434b40a47b37a57d15edbcedbde25c8e445176802049617b099a8f8b29166f2c5ed757f2cdf07d9cb68a2459434717e4bb3f6957cbaae2f7341839fcb7ac8f043c4f943e3bde882fdd577c291236a10c61657693adf1279a3c99c8197"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ct={0x15c, 0x19, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @dev={0xac, 0x14, 0x14, 0x3a}}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @loopback}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010101}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_MARK={0x8, 0x5, 0x1}]}, {0xf4, 0x6, "3a0607917fd723a7b2ad95e08ff5385e5d4fec0e52ad41e74bc0ddc15d4ec0d54fbb2a21789c49e68dee0351f52812bc1833eac199ac9f8990b06d045b4c537fe494bb051207c424c5d279cce45e3fd37efec0f18fcf715634c3539446a57289fefc89e9e8a6be17f444c48470298d0fa37648c0a985b06f29795f11665486cc5488dbcb36693bbcad064701dc04274cf2cead845e2ae4317b174a9dcc9a4c1a8eedc2bc271707272b7ee856c22d4f40d9b3cd2c91f3c0198d8b1388b435db7af238a996959adb5ff4373493736f4af0a0d6287c0f148c543a09a59c7bdae236838736bff9bacda38250799c9cb0be08"}, {0xc}, {0xc, 0x8, {0x5, 0x1}}}}, @m_mirred={0xa8, 0x8, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x3, 0x5, 0xffffffff, 0x5b}, 0x2, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x7, 0x6, 0x7, 0x3}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x7, 0x10000000, 0x7, 0x10001}, 0x4, r2}}]}, {0x1c, 0x6, "3905a1a1df184aabc8583ef5d22a7b80e03bb2392dc617b5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x9a31221b7cdb49a0, 0x2}}}}, @m_connmark={0x174, 0x20, 0x0, 0x0, {{0xd}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd6, 0xe, 0x4, 0x0, 0x4}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0xe, 0x6, 0x11a8, 0x1f6}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x4, 0x3, 0x800, 0xca15}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x1ff, 0x8, 0x8, 0x5}, 0x7ff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xe3, 0x4, 0x10000000, 0xfffff4be, 0x2}, 0x7f}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x2, 0x7, 0x1, 0x7}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x9, 0x10000000, 0x6, 0x1ff}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x772, 0x6, 0x6, 0xb1ef}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x40, 0x80000001, 0x7, 0x2, 0x4}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x10001, 0x4, 0x9, 0x2}, 0x5}}]}, {0x29, 0x6, "c96315eb2d48e41008401e44a4982988a2b95755df2246e9e559ead7ec62a673b32b97037d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_sample={0x6c, 0xe, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x100}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x800}]}, {0x20, 0x6, "83b32fd47587e5e77a693f9fa805d5b3cdd22a257d8f0d744a3e61f5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xa38}, 0x1, 0x0, 0x0, 0x8080}, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x2686, &(0x7f0000000cc0)={0x0, 0x7f90, 0x8, 0x0, 0x385}, &(0x7f0000000d40)=0x0, &(0x7f0000000d80), &(0x7f0000000dc0)) r6 = mmap$IORING_OFF_PBUF_RING(0x0, 0x1, 0x2000004, 0x20010, 0xffffffffffffffff, 0x84f38a23) r7 = syz_ublk_setup_io_uring(0x15fd, &(0x7f0000000e00)={0x0, 0x4d6f, 0x1044, 0x1, 0x1}, &(0x7f0000000e80)=0x0, &(0x7f0000000ec0), &(0x7f0000000f00)=0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r11 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000f40), 0x0, 0x0) syz_io_uring_submit(r5, r6, r9, &(0x7f0000000f80)=@IORING_OP_TEE={0x21, 0xa, 0x0, @fd_index=0x5, 0x0, 0x0, 0x3, 0x2, 0x0, {0x0, r10, r11}}) r12 = shmget(0x2, 0x4000, 0x10, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_STAT_ANY(r12, 0xf, &(0x7f0000001000)=""/71) ioctl$sock_SIOCGIFCONF(r11, 0x8912, &(0x7f0000001080)=@buf) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f00000010c0)={0x1, 0x0, 0x9, 0x7}, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) ioctl$UBLK_U_CMD_START_DEV(r11, 0xc0207506, &(0x7f0000001140)={0x0, 0xffff, 0x0, 0x0, 0x0}) sched_setscheduler(r13, 0x1, &(0x7f00000011c0)=0x9) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000001300)=[{&(0x7f0000001200)=""/239, 0xef}], 0x1) io_uring_setup(0x2e8c, &(0x7f0000001340)={0x0, 0x3d9a, 0x2000, 0x3, 0x15e, 0x0, r7}) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r4, 0x40109441, &(0x7f00000013c0)={0x3, 0x4, 0x9}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001400)) socket$netlink(0x10, 0x3, 0x14) r14 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001440), 0x80c01, 0x0) bind$pptp(r14, &(0x7f0000001480)={0x18, 0x2, {0x1, @rand_addr=0x64010101}}, 0x1e) syz_io_uring_submit$UBLK(r8, r6, r9, &(0x7f00000024c0)=@ublk_io_commit_and_fetch_sqe={0x2e, 0x18, 0x0, r14, 0xc0107521, 0x0, 0x0, 0x0, 0x1, {}, 0x0, r10, '\x00', {0x0, 0xf6a, 0x3, &(0x7f00000014c0)=@buf_1k="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"}}) getsockopt$inet_sctp_SCTP_ASSOCINFO(r11, 0x84, 0x1, &(0x7f0000002540)={0x0, 0x9, 0x0, 0x8000, 0x1, 0x1}, &(0x7f0000002580)=0x14) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r14, 0x84, 0x7b, &(0x7f00000025c0)={r15, 0xffffff01}, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) 364.626722ms ago: executing program 2 (id=472): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3004006, &(0x7f0000000ac0)={[{@user_xattr}, {@abort}, {@nolazytime}, {@user_xattr}, {@delalloc}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7ffbba14}}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x56d, &(0x7f0000000540)="$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") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) syz_open_procfs(r4, &(0x7f0000000200)='net/bnep\x00') (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 64) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x40d}, @TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', @remote}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r8, &(0x7f0000000000)='3', 0x4e) fstat(r7, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000440)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r9, 0x1, 0xd8, 0x6, @broadcast}, 0x14) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1030c1, 0x10) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r12, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ioctl$EXT4_IOC_MOVE_EXT(r11, 0x40305829, &(0x7f0000000180)={0x17c04, r0, 0x84, 0x75ea, 0xffffffff, 0x200000000000000}) 364.296514ms ago: executing program 7 (id=473): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept(r0, 0x0, &(0x7f0000000ac0)) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000b00)='veth1_vlan\x00') sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="440000001800ffff00000000000000000afaff00"], 0x44}}, 0x0) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000001c0), &(0x7f0000000200)=ANY=[@ANYBLOB='enc=r'], 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000040)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x20) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000040)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8, 0x400000}, 0x20) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000b40)=ANY=[@ANYBLOB="33e70a466e2060a09f11435c83525c9a9fc9d2036796c945b94d764d22dda72570f63743760b42b701a929a7070200cb010000004e24a56ba1dc479a8a11c2bd9db8e37c2815592ac077dceeac6a2f2a4d6162cde1fc2c772a16cc59331026fb79d96b3fde33d1f2e464b3df080b3f68073b1a428c626df3b3ece5881812f9632ba838b020f2546e417def91ea4c9a335094138007423f3f273efaf78d6c09e2b74bb5d538", @ANYRES16=r6, @ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x80}, 0x40000) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000a40)={{r2, &(0x7f0000000080)='-\x00', 0x28a00, &(0x7f00000000c0)={@_ha_fsid={[0x0, 0x9]}, {0xff, 0x3183, 0x8, 0x2}}, 0x1000, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x8b}, 0x0, &(0x7f0000000940)}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec2, 0x0, r7, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000040)="7e402a0518d7d7bd633811e5996d", 0x0, 0x200, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x2, 0x9}, 0x50) 363.586605ms ago: executing program 5 (id=474): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff00}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xc2}}]}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0xfdd, &(0x7f0000001e00)=""/4061}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, &(0x7f00000001c0)=@caif, &(0x7f0000000240)=0x80) r1 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000400), 0x1, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000440)={0x1b, 0x1, 0x40, "51b5d3da650071061f8711b4850cd9c58d3c77a15dcb38a66d1753f495451bc4", 0x20363059}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x1, 0x0) fchdir(r3) sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x2, 0x9, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff00}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xc2}}]}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0xfdd, &(0x7f0000001e00)=""/4061}, 0x94) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) (async) getsockname(r0, &(0x7f00000001c0)=@caif, &(0x7f0000000240)=0x80) (async) fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000400), 0x1, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000440)={0x1b, 0x1, 0x40, "51b5d3da650071061f8711b4850cd9c58d3c77a15dcb38a66d1753f495451bc4", 0x20363059}) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r1, 0x1, 0x0) (async) fchdir(r3) (async) sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x2, 0x9, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4) (async) 362.914557ms ago: executing program 0 (id=475): syz_clone(0x62005000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x190cf311, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0x0, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) pipe2$9p(&(0x7f0000000010)={0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xfffe, 0x8) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000140)={0x980912}) mount$9p_fd(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d568aedd1a2633e19689ec904814d2e8cd4c40f5ffd668f720f5a049bef7c6e746b233fec9439dd3d0dcbba96bfa76c61acf422a6321bf8d54deadd8b55d23494f8524e3ffb3c6d6bf77f6729c2194fb582c18486a324a8f7", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl1\x00', r6, 0x0, 0x4, 0xfe, 0x102, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}, @empty, 0x8000, 0x0, 0xbe6}}) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x5, [@enum={0x3, 0x4, 0x0, 0x6, 0x4, [{0xd, 0x6}, {0x3, 0x7f}, {0x6, 0xffffffff}, {0xd, 0x6}]}, @type_tag={0x3, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x0, 0x5f, 0x0]}}, &(0x7f0000000580)=""/206, 0x55, 0xce, 0x1, 0x0, 0x10000, @value=r3}, 0x28) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r11, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r12, 0x4) r13 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xb, 0x1, &(0x7f0000000280)=@raw=[@alu={0x4, 0x1, 0x1, 0xa, 0xc, 0x10, 0x8}], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', r8, @fallback=0x1c, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x5, 0x9, 0x0, 0x3}, 0x10, r12, r13, 0x2, 0x0, &(0x7f0000000740)=[{0x3, 0x5, 0x9, 0x1}, {0x1, 0x5, 0x5, 0x6}], 0x10, 0x48}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r8, 0x0, 0x5, 0x64, 0x7, 0x0, @private2, @mcast2, 0x0, 0x8000, 0x2, 0xa174}}) write$P9_RVERSION(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="15d8000065ffff002000000800"], 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r14 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/virtio/devices/virtio0/features\x00', 0x0, 0x0) read(r14, &(0x7f0000000000)=""/256, 0x100) 349.336619ms ago: executing program 7 (id=476): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) rseq(0x0, 0x0, 0x1, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x3d) setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000300)=0x2, 0x4) recvmmsg(r0, &(0x7f0000003300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/74, 0x4a}, 0x2}], 0x1, 0x20, 0x0) 285.935911ms ago: executing program 5 (id=477): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./bus\x00', 0x1112009, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000300), 0x4) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x40208, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0/file0'}}, {@nfs_export_off}]}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000000)={0x0, 0x8}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@initdev}}, &(0x7f0000000680)=0xe8) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r1, 0xee01, 0x1000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000500)='0 1234567890123456789012345678901234567890123456789012345678901234567890\n\x00', 0x49) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000340)="a28e8378aff727a3f6a97b2d170889d6228623930023538dc21d28c49c526090431168462abab4eb1054191318bc57dbd3a20de5e4441bc8e53966287a1b8e8c6942b8e277fc8a39bed0c119fc42a298822497b30ffe4c91aa7067b83c97744a2e47206997b70074fad0aaff5fee62516a95467e4b65d3db4d3b2cac4a174e419ea1e3334e2d03addb1246be4dcc2b0560e562", 0x93) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, 0x0, 0x0) setsockopt$inet_mtu(r5, 0x0, 0xa, 0x0, 0x0) setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={r2, 0xee01}, 0xc) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000180)={0x84, @multicast2, 0x15, 0x2, 'sh\x00', 0x1, 0x4, 0xb}, 0x2c) socket(0x10, 0x2, 0x0) 285.160608ms ago: executing program 7 (id=478): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000190000006600000000edffff15000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x8, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff4e}, 0x23) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) r3 = epoll_create1(0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r4, 0x1, 0x31, &(0x7f0000001600), 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, 0x4}, 0x1c) close_range(r3, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c04, &(0x7f0000000040), 0xff, 0x26d, &(0x7f00000004c0)="$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") r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x188000, 0x85) getdents64(r5, 0x0, 0x4f) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0a285057e3061b9781e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)=""/137, 0x89}, {&(0x7f0000002c80)=""/4154, 0x103a}, {&(0x7f0000000600)=""/225, 0xe1}, {&(0x7f0000000140)=""/159, 0x9f}, {&(0x7f0000000380)=""/170, 0xaa}, {&(0x7f00000002c0)=""/166, 0xa6}, {&(0x7f0000001700)=""/146, 0x92}], 0x7}, 0x10102) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) io_uring_setup(0x4117, &(0x7f0000000740)={0x0, 0xe9e5, 0x1, 0x3, 0x80000000, 0x0, r3}) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r1, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0x6, @loopback, 0x3ff}}}, 0x84) 184.760381ms ago: executing program 0 (id=479): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f00000002c0)={[{@resuid}, {@jqfmt_vfsv0}, {@minixdf}]}, 0x5, 0x50c, &(0x7f0000001640)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000040)="7fba84b6886d0f97f30a9dab09ac0331910b1b7dd9cbf80d7634c7f971a8c1ade83b35f04c3a4f35729a886497c34321ddadac11bf78", 0x36}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400060000120800040043000000a80016000a00014006000d3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0) 171.942361ms ago: executing program 2 (id=480): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x208205, &(0x7f0000000280)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x883}}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@lazytime}]}, 0x81, 0x63d, &(0x7f0000000600)="$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") r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mknodat(r3, &(0x7f0000000100)='./file0/file0\x00', 0x8910, 0x4) getdents64(r2, &(0x7f0000000000)=""/49, 0x31) getdents64(r2, 0x0, 0xfe22) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010004000000fedbdf250e00000008000300", @ANYRES32, @ANYBLOB="0c00990000000000fd77ebff15000e001c"], 0x4c}}, 0x0) write(r5, &(0x7f0000000000)="ac077532b230d1d84bbf53f17b0950acbf8d8047054d525d12cbd2706e6080df6057d6729372d9d9ebe28c8ab1fdb12a695699b45022638c0bc3a1aaaebb9949a9dc92bc", 0x44) r6 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_register$IORING_UNREGISTER_NAPI(r6, 0x1c, &(0x7f0000000280), 0x1) statx(0xffffffffffffff9c, &(0x7f00000017c0)='./file0\x00', 0x4000, 0x800, 0x0) 117.921769ms ago: executing program 7 (id=481): r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x9, 0x2, [0x5, 0x8001]}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r1, 0x1b5}, &(0x7f00000000c0)=0x8) r3 = socket(0x1a, 0x4, 0xdaab) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLCREATE(r5, &(0x7f0000000180)={0x18, 0xf, 0x1, {{0x4, 0x0, 0x4}, 0xfffff801}}, 0x18) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x4001, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000200)={'wlan1\x00', @broadcast}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)={r1, 0x49, "7d615872bec7f0e86e5fec35cc1077617e5e506c44489da37ceee91adb78b2690b3afaed4038412fd775a8f581ad32957157b0089d052b3a0e6c52e0a10715c8587a0a75cb51bf029c"}, &(0x7f00000002c0)=0x51) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000300)=r7, 0x4) splice(r5, &(0x7f0000000340)=0x8, r3, &(0x7f0000000380)=0x3, 0x7, 0x6) fstat(r5, &(0x7f00000003c0)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x102, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000480)=0x4) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x18, 0x1407, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000008) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000005c0), 0x4) ioctl$XFS_IOC_ERROR_INJECTION(r4, 0x40085874, &(0x7f0000000600)={r8, 0xd}) socket$xdp(0x2c, 0x3, 0x0) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000640), 0x303, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r9, 0x84, 0x77, &(0x7f0000000680)={r2, 0xa7, 0x6, [0x6, 0xc3a, 0x0, 0x2, 0x0, 0x8]}, &(0x7f00000006c0)=0x14) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000700)={0x7, 0x2, 0x0, 0x2}, 0x10) r10 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) pwritev2(r10, &(0x7f00000029c0)=[{&(0x7f0000000740)="677894f809ab9d07587e07e32358139921c211cd2b61dc9acd0e89ac70950c3e3f55fb91055cb3c1cf1e3549364f3d528d7af61f4e7fdefd7428652c632b36594cd5bbbca1ff593a18b3e003b8ea74fb80260f6dd737c1c1849304a0658659b8d5ecd2b110ca10ab5a8b96579c530ecee13461532c2f6e9ab4b3d5888bb2232cf5d07e11dad8756d2d9c16a50dd00c0577fe5051747e553523d8abb7aaf65a4038576177d840dc9c460d1604ca898f864c0d14d4a79250ddbb1133ccfecd70bff2b43edafb3098d56540b168cddd4722352bfd2b400121387f65deec710e3000c3b41a5789b008dfaec56e71b2f65ef13b5c8180838cd1693c5732aca9a927e84a47bc5a1ee8dcff26e370fad29a366a06e2ecaaa708e318ef021ec6a1f96d549f5f789fd4a19705520975dc6227e2a3b6c752e06b5928a84fe5b9e80fe63ea8f9e458444f968b0aea8d19fa129cb893768c1e6f14ecb57f85d6ab8ea597f1170ec9225ee8e2b097079e4747f6a2f5e6e0e5c4b4957fa44c8464722cc3e2d615669016e1781a465013c0b4dea4b60bbd11283daa56ad586425c95191b77459809c90fd58ef3766704fac45812fa261487c9252f454a08943e715cc13fc937f0cd3625c3fb3f497e9fee56b86e851d98b02d145cb4aa40aeed301398ec157bcda4a5b201e0d86338c0f0929ad5d306782e462b7baa2915df800419dbee691b8d305f83a93a5c5d3219a506c7fe963eadb517d8f5da976ecc43ed0e95d59867074316612766b6029f88a982b905426cd37541c70763ea715628683832a0b7cee972fb59cac1c633fcfd25f8937d5e9c43384b1fb2b57f5426406190ef42ee011200c0b85271bb1f40efe8db9cee6b83113d91f964ec0c57d7ea6904bb7dc02e0353cdc76ca114840746bb9ada97b003464905cb065605717ba7878ec1809da105893cce5deaab0e7701706cc0a7c2c70d9a7acfdd48fb0f9eb04544daa07885a36344f4462be654be3ce7e6d68670b61614135b5886e228e4b9dd36df7390b7dce5c80e21fa3c012388aeaa6465fcd5c34d89bad959c62bc5664bac0d4a4b871a0da45d98ffb7f2ea30517466748751804e01acce225f5a28e32ce1d6b4c5a22dc8f8f578b8d424c5104f038b63ba1a9a5a02f9253788d98a95e68859d9f842690ec6f73fa274786c427f4f435206a6d2af3b1361f39edcc7b26040c32e1fcd10f7a400b1a1433f568487713e18f644a1803f9b62c30fecae3101c535bc7540cd17252be6bef57cacf871b6daddebfa697fc8ebde2233af1905924a2bc8fbaa82d49e9a000fbec6202479172ffb4c26e86e4b23cfacb602f6d47c39472a16e437ea3c90be5b74048008a4b9b434dfd6f3b1cf903d9e263b1d04741aa314a3e20c8f258162ea3b572a10b52b111ae45c98ff7992b39cdfb243701dc7c5ebbb94ef8c4d6f39ccc03d30c03a93bf0760501ed322c392e3084c216b9d12a42fbc782eb673d5980d7bddfa1739e5505bc26e525add55ba22f983020533d7efa0df87bf401c04d9fdaab19a7b38716e3ce06070bf3a329168b84408705c5b3dbc6d93e73222e44dbe50c0f67cc9284f596cbd8238d0a9eb59100f8333831d46d68ffd97c7e1670218d5af7547c3caca881958b61ede3c8fd1204ba50520b467929cd56d64c983bd9456209c4efe25c77a554ee2ddf4514f8f53d50681b5686a1dfc6e27b9169da58acbf6e2dfa01917b2ad2811d9e3a18cbab34bfee91d50278462e32ab1792c4152223d71d89f4ea26327fa2b124a2bd7785bb6feb1af86abbebbe9d5d5cdc77d5e9b56c3c3ecee6f88a2b93f5a5c1ab824dc6eed76050544378d03b353c768ef8937b679194263a924d5d29c4201cc5c8a266087c74e1958e1039f441a58ff5ff6242d0ba0afa83dec7692c548fae55e90297027e62745cba9b3fa7e150cc332596ba28469e4c2dfb51dede1e8eef116ad1889b4136e9fdd150b9a768b3e4962bf7dd52fc2371e7100f11a479ab1069e9af260456bd01d94b2ca82577d061ddef4499c9e245474067e397f74a8782b774c712de2fc9fb153d747763696deb5f282ceba698df2f38150629dfe57447960b5776a27f4a4d5c59cf37a4f46f5ca507227504470aff83e137edc52e3ad574e74f14b331412bb17ae1dbaceb9ac5a2b964e7bdb77d8df71f7d5a44820f99d642351822b4ffd3408766ceaa36bfb0a762c395c77823fb94a241e80c582f4050705c454baed23f5884d06e251b1d374b697d150714ce26f243d4d9c9ecdbd0c8c2fb877ad29686583e971662f12b824a22ecd5a305289e64d2bf9c2cd90d8afb64a959d0e218c98e28c3d4ca455be770e827b0290fe08befb9f735de543e0e87c5c427fea63aa26bf5098b05a53af8b04395c8cdb7ddd4e4a75234b3191bfa7869748520cfa7f8230740210b1a79cc5e9d81d679abc14df1ac084d9bf0730ba0f029241edecab49da014e0a65dfbe56923654fcb1fbbf7f5deee5b9891d7385ab80cddc556525178adaf8ec312c776aeba4a58d8a3149da357cecf088c30afbd98f6b450d90e032ed7e65fd5d5eceaf18301a3461cb5914e6b5ae7eb4871d87b52968384584e2673dbd1739424eaf35572943462d5a3bc668a03721f4abedaafd024ed01220d39e1de02713725c853a5b27768c4b8a17d7ee36a2a0b07b2d60597e8dbad03557de2dda3fbd2694f9c828fdf10ea6508525bdb85ec99ea6221b0124e302d9df07519fff3ec7783e4330dea0895e208a1be80335f35e094548fe2b2da9746302b398e80e6f91504e54f1f0e249dcbbf1bd4f375e51e40990a8a362f251c18af95bf1f4165afb54ed5093797ce7c214250b2c4acb2b95a516e65ce184969a589219543228714d369f3b5279f51d5bf0a9e93b85c44a6d94b957fea76cc2987a19f2adb18cf3138757790d8e9849d4d2f0946193501c5454a1d82f549f9a423916a12ea1ea2fedb5aa517df9ec89bca8f57d108abc897a2cef95fdba4864765a30155364765b05dba0f619413b8e2a57eaf05585f3846f347bf9f95dbca9a1cc38be105e5b11561cbb75a38c82daf54d1ffea1f23c5af5302a99f0dded42bbfbca561d72b4aab07b622ad8b2e285645fbc4e3b9edd9bcd85353adf609718268798ff9fd1849c2260b179eb1cf887d9c6fce8f0c4d1d13d3238ee1b3c967f47fe388a9fdb64aaf649c817a735edf4e2bf83a847916774303f35c5ccffcbfcc235ce4bba7cd38b75f944a1ea863e11720835d063c95563b2def636b1f9c2471a46603c29af87d50c15217f31c6b4d46d449ef91d6e3656a22ac811780020ea27b18e3a6e72e15a723412f86a65b98c5c4de885ff1d97a3a90b392ffcfec7b8df21de0cf7eb7398ca96944a81a26fc5feb7a41a5ad04176d3d8e6acdfa8ac808bbb382dedc3ebe0e1cdf31b022977f11b6d255da4d5fcc9c5ed2a332accf4bb208a2f773c6f19659d43ef5ff12a112360163790bebdb9d6af5c591d17eaf1c29785235a6c1bb5f10e2a1a6f95f6e71353b09f60edd684355c9d9e11c369aaa3581f2ecb06caf49ef7c23bf107093d9525a8836e38582a3e39ac6be328dc18f0cec1c6e54846c02efc7e7276a46d892a1d5c41a65ef0703184cb3232cd183fa27484cbdeb86238f6c3f133f837a433af031c03bf6378017beeacbdc4e22418865f66a090ed23b931ab8f8b6b8af4e7f2fe5cccaa85399e86ff891a6fd9ef0c43d4fe573cb8279ed4ea38369ba9e20c13a9890b0982bc35d12d83ee82f1ee64f84008aa41cbd7c364fe2b41e42b77e271638c4fa9c13dd030458396227fa1c3ca2a220e53ff9ef5ea8f704e983d1746a16416073ff1f8e883928ce9ed1a399e978da02b8b053508cfb24052625e53692c1a828588d05fa015357a1413cd42a088df9c7ebfbf38e7ea42181331ae5644afe0681dd0cd4325f9df226c3cdef45be990fffe90d0ecf2eaa9abd744960b518d508b0ff28425d29db421b941e73b85afa1b64be187e38c92a246352d5fb5901979717dcc939a3366390cef5f24ce238b9d4b96938ad82307b5b6c4550ad028fb45e31ee82244a7f970e155485b56e1ba28bca8872768b51470342b04f607f07e5c0acebb061d9b41b3d07ef8857c39266a19b534a91a9131e65f032059b6b2c24ceef1c7a0022e659fb64cc9e44c520a32e1c6be2ca2984264588bf088292e200802a80d619742aef5c8a04b96f4c025c332130f2b6581b32a26d76b8f8a0f8d4f31ca865b46abdc9898fd221b0ad3f4d752a0734ccc4081e33895264d3533bbe5f4ea2385bc02adc77c5b4e0ea301652a0fef4a3fd6b8c33dbe825d56e027cc0fc880bd4e9ac3a24702c8ff2f97cdf91283e57c0e3a16e0c7ce814f48ce4ee950411739b80c18d93030680896fa58e838983c848788393b38650df6586263492420a9cefbb5065cb42199ed3113d0f7cd0cd8572ef2739467f36809b5d4710f066a62f777a79a49efb276f81d25ba750317d9872d3f146f42f7c8b69cb91b3c327dc928bcaa868feea423f554623d1228ed8fdeeb6933d9f51b11c7cedc3f50570f8c4be7cb2987db8eb855ef946d031e6f4f6025007c2ce72c544a2da31879bede3ba5cb5146bf4718b9d949e4825f85f973965e2ebb9a07ea7d1899fd8c3771270c71a12d0c9615795b04c8010f5dedf458e9b28b96922e061488554554757b314fd143286a4b40179b9c96e577b57c3b5385f2575a75f29975174298b3e87ba80cb5dbbe5f4c6aebd24e91e9572e85def0d6629fe65af15372165edb9a4950466909c7bd72085d9491dceab45bf43922b18abbfe9fb0088b663ff882a13182cd0f5c7d018027b611454f453b8412c5524beaeb043a4c8024efc6adad4f23f670d46d2160a54d6c2246fd74b034b877d90143f0dfa24c36a3092ed57d6d730537d5a2239352a4bb5a637d1eb086681d0f86b3a4acdfa9cc0693ae6de012c90ded1a557dc042200d5614d9c656c982836402e4c06c933d0e4a3913800cb6cf3e87b123988c945b5044b45164fbf7cf1937d52914497f60eea179e32df631176095f1ba81052a8c5ace41ab8d257b27a79e306b36d4eb847227832b269672c6e736b1bedc9e33f31eefcb8022268d9b3b2c1b59822c403274f0021f83d5954d236ff28682754dbdd74c9170b96030c4593f90a8e07070bfc6eff1e8cd12705bccb9e000158f90d6b2c18a85c7b68bb3b568491d9683e257f637608e1d9424e453dc8c03e6f3ed7a7cf82d86b1069577cc32f56bf55aabdda26a18af5fe80968e911980cf9073c566dc0803a32b6752a8fed9ef494a727ba98135419518fbf9cc27ff70e5b4ef6cf6c32fea0d4286515e0e7643794822f9527d60cb182e1930bf04c8ccf8f46ec71d1324f8d75bd2eefbcbe66ac8ccc569966721c733da44c5edea573cce44dc14aff96f759779af95f76bff626bafd2201b8bf187f4e959f29f5e3440bcc7d84229d3bf0dd0fa8e608c06acd0fed98383bdd8bf8657dbe6dfeb2379dcc768eb255bbc004da20932383317c59b50229176bc3ebc4f6c61dd5bc059910d3c14abbc0d7627c88de34c7ec87204fd2577005837027e8cd1e8baf075bc22e14cbf5d05d33d885f26774b2aab354b2fe93dd5edecdff0e7c524b4ff5be253ccd297753097234470353abec428baaac53fb88b734e1c3f078cce3e7f7f78f4a1c0624deedcbdd62a954e5a274ef1e5ad202958b76e45bf99c5e134c5b86b55485a839cf9bc76ed38171b7aa0ad501808d9f31832314da5", 0x1000}, {&(0x7f0000001740)="330242782609a4fef6111e3c9ff3b23c40c595e55692869c3f78d41834565498a54073c910563e70d2d3f67dd88ded61828129e08c804685faa927cc64f70d9c6782480718e659c71e3988081ed5d51757d77269760b205e5ff90f725b322c061aa94193336daba2cb5623a1597521c31357d4a460457a8acdf3de85a8d931f410bbf2338ef1c609b6314633bb80af39c16da23671ba0310c38455d45e809c80cb1e61ab5db4563e19b261b5f6fb", 0xae}, {&(0x7f0000001800)="f99355ede2d3d9a2729e9742d0415c407a90c6baab1d38c6f79f66c59c83f48979d60309cd0aff88cd5253c5b703d79c9f", 0x31}, {&(0x7f0000001840)="241d5e000086f01d2aa92f38b088e8c2149e044177205e00e33697b10832c7d0e8994cb87f0f3950493cb801db001b6870531679a092547e340cae350ded95563c477508353b04034198daea034eea0d899e616a24505749f1bc06924286f2ac8475b54c18bc4bc53c53e08a624e2f72e1b21e30b5a0aad051b01add45c2caa5454ffc730ef37fe8f3acdb9b121440f59f1c7dc2e7e214294d5f7bb6b2b508e41c0d53ccf6c69d9378d4c0549cc19e048c", 0xb1}, {&(0x7f0000001900)="730905b9125c9519ac911c123822ee361e4155210189cfb8ff352746add6e7b5d5f01d05625c5a24f153256329f67f95b0e8c55fd0b48edb08ed94c4e0231d90fdfa1df297843de4ff35f8e5558d67045b0adab2eb2e4e0248d4b1459b62f24becdf77d8e34f5e2f9493dcb495ab1434d99b64ce351df45bdac2dc8d10a024c0069c4f40dc177a378053f4bd", 0x8c}, {&(0x7f00000019c0)="05565d687e148366d684fed2437665a02d777afb9dc822cda0a36fa333670d3b5b269a3e8f600c36a740929ffb86778de77d65625c16ea87e2cddb743816dfa92f4ff23f9d828ef0e0732a195d2ce28e75482627d63d8c511b0edb25963410ef50b965baa216afe1fcdf9341892ba208fdf4c32a95a1143b429da4da855d54e983157c27db8f2ab36d8c150827329781e846919d884e07a478f9936894f14fa23ed8764992272670b2f995b36addb3c3727335909f91c5c449cd3c7c868ae9d94fd731b59ea2d146ab8735a7b2e96650ec592f685b4f6cfa6c63f331659cd97ba4aca2d67355ac8158c3e980be886e4e86d270dd3410925e6feba17d88ab48671c606d61ebc4d1a0f40d845dc2c7275b6e57a9232081ec1f063c9bb0f761d465a0b467982547f85b7e288b32b8d16b4fb27b849b21c6f7be3ed908638794d3300df6b7b6ab99ceeb62e3e844e58c2d594ac2a37074a930c4fdcd098055a4a2ebc4b14c29696f1776546af9e8af35967a13a110aeab5e1d422382d240c6fee0ee20ba3f8966e9819f9d91cc16bc387c859e23bf4c798ba907f93056bb4d772f0b90dbc67a90342aa2b68d3a8808b16e128a20ec9f97f2a2dd2367017ad0773180ba3911c90873511a600b6c410951d5764d58ddeac8fa37eaf33ca348e0d5d79c6f2daf5169e51e24f9a28a39df3c848e5095caa739d0b0d172abe84caab50704fe6e98cfaee89e6d665d7f655dabc9d964167e60f87001b6a02a0669b24f2e2cb678325c0f4ed0ee68daede04c5a532052802b3f7b75a627ef120540c763e59f284ddf53d13ebb539901b6957328b99337a945f892c213066cb6d7a56db82d32afa72b2285f7100748fca04df7ba45d0623faceaf28b3cb819c40d2c4fbd71f1a1aedf9f0eb895c582b622cdc63e8cc86c851c9c9f5170636c7906052c9ce1abd490635dcf077c897b2349b4e73005a553b6039cb71c8546b191b3d1bd18a0bfcbefdb8fb647d39ebdb6a98ba5727f2e747d63a76a1daf94b704e6f19e5d3a588cca80b879f2aea4760945cb7b7856c0e301cb389f718a971e8c0b1f2a2edfc367c7de5dce604062ca085f522a5d797a7834fe386073ade83aa2d906f0478518b096cb1c02cab6ac3dd5d1b85219a01a86e6e18eab7b493c525c0c527d26d5f8ccf4579f9528f6feead992c3c936b26c72982b1463639d2a3e3b7e3e40bc8fd5f3a40a31bc63630814f113996d95139b8959cb4ba371171643e3ac97aecc20e684cad7d232eae6bae1a5f6c5febb0c246d264900660677d49e8b19a961996e99bf243bc7356e3cd24655beeb915af52c6d7801d70700cb795684a49e598a1bc956a0e06c0ccf93dab0aa7a62075393b461dc9d87edd48af7218ff6708986619fe9b307ca90ebbd4c25841ba2291ae3d87b4c16f94423faa7d4cdc49342ab83e79baa7b5b6cc9134025581513d1994169e45367764f713e63cacc832fc95cde33b389fd07abb18e0ef4a6e3e257c5bed2708d80941739b4a9e9e11eb18d2ab6104835384b73c99f43dfdd95eb8f02b5268d979c906f45f969aad3263d78d13ab0da0a67dafd02d00387bea0dcea0995f4eb710403a2bd1903321a5ac6e99bc1ca14bcb5da9a736080f130c4f9f201ec7266b00a5247d812d6cce6e6be29e35a34724d791a3f215910d555208dd11a2da642051cce8a4974a9891efb2ba3be8ca5d4999a86cf17071475f7d19c599e5a7d09038bd3f84887ad9fbed7c92078453462417cab3f82990dad435dbdae154fce250550a61b004f2ac62b89483e0bc6b869dfa9e601c1ac75cb1e81acc34850d79d9f463278f20fc5d2d829d32c71590d58bfe31dbe2210fb19745728a2498b52b1173067255a464613da978240911d4a9cf046fa87c6de2bb22ead9a2ae4ea9911136ed8bcfd60bed0eafcc01a6ec51ced6cf46bf1afa7c3710925519af14bb2e5d942c84eabeb0ba661c491236f22458ab78e06cd586a57d904d3addf8ab647b0f54a6055e4b0b2dcfd83421fc7f9b967be4f9f7a3ed6fdb05fa9aff4db50cdcc9d61dd7ddc4b984b5393614960ef204a4d37d932ee52889a9db868c0b75a16fe9fe43df7e62d4af7228f7f687a84de48e0d5bdbedf0368539683d5842c9cb25aab42e2b1b7563898c7edbe571dae0ef261cd851458d3967f84161ba2343734306ab7b0e6cd3a03fa70bdda36de12a6787e0b53020ccdc0704c3b3026bf25bbe9f647d0f2481a328b10e4e0af04e97406b8e1c053e3a76bcb2e7dc19d24699996b3ea8b1d816db3f877c1ef45adcb86438d6fdaa1cf3e8517e5fecd5a5bd8aa7054e244dc2f12728ff439eead7825ff3be2e1ee7adcb9dfb28a441c56e24292d30b4ba54082025339f8b660d8959aff7de940bd2af527908f72e91344d4ed8750044fbee574a781d0d69c22802e8c2ad734785fdf4ee0d356ec307e6bde55da924f51d9974cf184a3f563a20482816ed2b4797fb157661e7abb1c818154edeb8f52331d95d1b5d04e3954adb9df600effd4c682030bc82c8db854bed984c3f1140f3058cf89015cb47bb0bada2ed90bcdcaf086c7ede1b0fbcc0c1778905c1ba90352039b89b96c7e47155ba96cf488fc65a187538b55c775e8ce92f5fed20e7a565efdc1a20d6e965576bccc63dcd3793f99ec4ccaf739d17a238438958569268ac0e8cdb195105e40b92a3fb46930695372a167ed2a2ce6e61ddc3838cbd6176c4a0749c022ccba4a0d84ad742cdf831905d26c1eadb582e692e045c32fac13ecc1fcbb8ab3f77a8b3203810af1dbf34570406e8d37198af6283714cce071041afdc60aca5a87351b7d54ed8d24df9220561f3201a3cb8976a3432cbaca32641c15ce63620a431cfefd3b497b0e55a9dff2ae5b6cce6530f8e9488909ac2dac61b1435e4fa31480211a9e1fc8a50e3f4be8634621129cfa6ce470723545d8aab208e76df437d8d38a4b7491fd6fa4fb7fc010e29ff10c02021d9a87461f4f333e48533eaac4ed8f63a725afa40dc57048dc735594388df3ad7018f004980c3d30f07fb987cef2a98e545a634a3bfde831ddc2f49a72055c9971e0e9656f5326b12464e9811fb63dcac6cde021acd18ef92d9eeaf12bedfa380baaa8170ec3926ea52354dad2a52d43d5d78d104a733a82c663ccfa10cadd79598d5f5ab46130d6894d6f81ffc60ec3e4d5b039cc1c54e60877a2c3aa0c117937d4363020f8eaddc696a13555ddc33fd77cd9c7ba471ba4da3fc38af299b50511421036025e59f89ed72202ed9f3ccc1b6a771534846224c191923f23fa00b09f857d74a3375d90257faf38a6b5915d0ee8f2f3a3178c2332ba3fd313b294ef0bcdc97ee8fef72f9c56e1986f404657afd67ae8551e23fac04c5e06d751a6e32180aa739522d4a1a0acfd57f1ed08a3684a47c91065d72db6b76c9a38c9beb6a6cdeabf65e5003a35794bad07f04d72f41b4cdeed6bb9c83878f03e49959e0b5dbbccb2302728edf6ee41f860c24271f4d80e85ea87032c5af1ee4b13a32051c70d6c137a70fdfa6a9314610a6e0b96a39841c98a1eb4a277f03a9aade5ac2c9f1d0e7b10e3899fed5238c58f65561efee548630fa412f0af32b54fead7c3551f1c3f0873cd34dca196ca77826d25e809934c0112f6a4ca390c64591c789564042f375887389e5febcb5becc658167e058d12a1543658b3af578153042f2c34a13ba3bc260834a1f2951d49172fb0922b5448d7d492dde9ddf7c3b0fe9f39309f38df26150180d53e1f9c011b5773c08141494f81d56ebd04e7cd0ff3eb5aec14da7f8ca1ba18e01523aca4730c54092a37cb59646164c14a18183dba09f26a0d7c616b2d21aa011c7622b42bd8f846310d60d977a16f05614b8379855370b389e4dca69127b7f3ac1379bc3dbd3274ab2b58a81062a2dbbd5e2e876767087d768dfeb01cb1cfd90660725950eab073f9803eba4d9edcb63dd74464b38a9d61c9a7fc5626a212b713030c87f5181a982cad2d8a7bae4ffa3f6d90da415fe67f7568ed006242cc2e17a88d631f2a3c7a3ab4690474dc1fa7d78e8f06f8d8d24e533bbe339a3f131e4a518cd630c76f03b17b025d0441ac0fe0b62010e3cc34c2d43c8b4b362e8b7bc0fffab14f3b6c559b164e13aa78264166d05fbffc1b081345feb6ed87df65933db42073c5854968d507ce23a42dde4a9a55f7bf5608fc60d7f4b6b3585b9001172bb0887e0160a1408764b68a501b6b4d7a7dfa06d2bc1ac6db80f5fc4b420fb15ea374678ef7d8fed1aeec0c69556dab19aeb186fb73d84295eabd8d109cd754090c3577b4dafd98c36beb1cd57a0751f79fbbeeeff60d2ec5326ee2768cd3a57ed0a427f6fb923ad82ce7de2acf6ca9024f202b1569e2a699c1a7fb79a8ba8e54cf9b494df68a17b631781e17e5441e52433a49cc56dc97483079e8fe7b0cf910531f6b4ff7d0339b9fcdd7ac2fc351ffa077aef31d8f20f084762b381e4da6aa2da37d08b43d56203d9e41daf8c48825591629e5a07185d36ed54c48d8110cc2bd2518129a0da058a00a23df9315ebbe0724a3f1baeaa478c4f42cd9cfd1e0b89e0eee079a27b51fcb8a4636456ef8dbdcaf28b83100da20ae7ab80a25598bea7c985179923e5b102b02ca6a0947f77e6e975fc17b0bb37d5e4fa724496a9058bd21bedb059e100def4f1ff2d2e7f06d46c63e691ee779fa2e980dc7d6967e74abcb93e635271b8e9fa90f517bee1f28f855f897a98576167fbd0e951e7b8022be8dde5d89140efe41d1099d556519bcdb360252ca6c1715674e29eef0eca591ab9425fa3f4f5cd6037e18c5b5b9e43d7507a909b0c07730f2c670e96343c75e87958fc98c4a3d4d7b00247a335dbb36856f03648729a64321a0e00e08106d15897941665fda26eed7e3b16bf0b09f9cc8b6feea60ed485f8c3b4936fedd67789538ec12f56b66a6d6c835d8e8af8701c882da23ca6f63406a01b9d1b2066ef38c2cea950dcc17283458f2de4c8c2aeaa978b4598cd83c11fdb2e230fe46fb17f2331ca829501281a1027d866fe4bf8818142aba3bdc92c7c148abb0f3e913a1f6c5c79f0b5f6fdeb0b9e928332411fb6eb19d4f01fc039b849bf552602c4dc29c5fe4ef70a75725038b276402c9952fd445895136ccaaf9bccee2a675aa6e25f153ebdd4f633083018423a3f542e3444c9a841c076e158e44e5f4a5985a38b4e29cfda59bea99a317d0f03f560c45167eb2aaf8ac33e3fef57679cd35c1b28ad1cfbcf9ee9fe0d8bc40b7c6522762b150d2459742f7235768bfe22d78e9c0f3bb3405f5ba9389e72c63e778fa4fdd07ef442b0aa1155cea1c010153268e5ab4a4458a8e61208fa1dfacdcb1963a2bc709b6118b06939f85fe81a1cbf0594ee710c28b4f662d31dd1c21927646e904023b9625d793cec9d775cddb4d574f9c5e96071cc4e2f0fc5e51087ef01eecc4ef501f7ef9a0e67f1d5969c40f81be0e8d93bf2a2f8e5c0c2e9e4f05fe9958abbb59fc205ffb2325b574abb070ce9322535192208ff046da9948dcc1b48d6517b5ec30bd09c4c95d5e1c0e4bf93a73b68e0fe081b94323fdb43854367093b7833009da34a72b1201186126660ebbd72f04a45c0f340dba3125cfff13ce324e7e8ec1d421876606b54726e62ea8b2f7b80e4576cd85e79ecd26d5818497e65c2735fa653db6b632c37cae9d4d4bbcc1ae649d7f0db854de63d7ea417c35b1e1c5e023a7aa12b80764b141c0bae4c1044fb4404b1c71652d817769b0ec91", 0x1000}], 0x6, 0x6, 0x48000, 0xa) ioctl$EVIOCGPROP(r9, 0x80404509, &(0x7f0000002a40)=""/81) setsockopt$IP_VS_SO_SET_EDIT(r9, 0x0, 0x483, &(0x7f0000002ac0)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x4, 'wrr\x00', 0x30, 0x0, 0xc}, 0x2c) faccessat(r9, &(0x7f0000002b00)='./file0\x00', 0x90) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000002b40)={0x8, 'veth1_vlan\x00', {'sit0\x00'}, 0x3}) setsockopt$inet_icmp_ICMP_FILTER(r9, 0x1, 0x1, &(0x7f0000002b80)={0x2}, 0x4) 0s ago: executing program 7 (id=482): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f0000000540), 0x1, 0x79e, &(0x7f00000007c0)="$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") listxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000640)=""/210, 0xd2) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000a40)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x22}}, {@noauto_da_alloc}, {@quota}, {@oldalloc}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") 0s ago: executing program 2 (id=485): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r2], 0x3c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) close(r2) ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f0000000000)={0x5, 0x1}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.180' (ED25519) to the list of known hosts. [ 136.104556][ T4723] cgroup: Unknown subsys name 'net' [ 136.274503][ T4723] cgroup: Unknown subsys name 'cpuset' [ 136.276607][ T4723] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 136.423986][ T4723] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 138.781797][ T4746] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 138.782196][ T4746] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 138.783395][ T4749] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 138.783734][ T4749] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 138.784027][ T4749] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 138.784184][ T4749] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 138.784535][ T4749] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 138.784817][ T4749] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 138.785176][ T4747] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 138.785695][ T4741] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 138.786004][ T4741] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 138.786157][ T4741] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 138.786472][ T4741] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 138.786680][ T4741] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 138.787101][ T4746] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 138.787303][ T4746] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 138.787577][ T4746] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 138.787871][ T4746] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 138.788092][ T4746] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 138.788556][ T4746] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 138.788984][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 138.789348][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 138.789546][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 138.793483][ T4736] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 138.825623][ T4736] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 139.137268][ T4743] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.137553][ T4743] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.137633][ T4743] bridge_slave_0: entered allmulticast mode [ 139.138138][ T4743] bridge_slave_0: entered promiscuous mode [ 139.139640][ T4743] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.139662][ T4743] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.139718][ T4743] bridge_slave_1: entered allmulticast mode [ 139.140177][ T4743] bridge_slave_1: entered promiscuous mode [ 139.170118][ T4743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.186656][ T4735] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.188183][ T4735] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.189834][ T4735] bridge_slave_0: entered allmulticast mode [ 139.191688][ T4735] bridge_slave_0: entered promiscuous mode [ 139.194468][ T4743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.209560][ T4743] team0: Port device team_slave_0 added [ 139.210847][ T4735] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.212208][ T4735] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.214055][ T4735] bridge_slave_1: entered allmulticast mode [ 139.215723][ T4735] bridge_slave_1: entered promiscuous mode [ 139.237461][ T4743] team0: Port device team_slave_1 added [ 139.245210][ T4735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.257164][ T4735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.257535][ T4743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.257545][ T4743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.257557][ T4743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.273685][ T4743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.273717][ T4743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.273732][ T4743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.284573][ T4743] hsr_slave_0: entered promiscuous mode [ 139.284960][ T4743] hsr_slave_1: entered promiscuous mode [ 139.285340][ T4734] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.285401][ T4734] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.285454][ T4734] bridge_slave_0: entered allmulticast mode [ 139.285906][ T4734] bridge_slave_0: entered promiscuous mode [ 139.286970][ T4734] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.286991][ T4734] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.287073][ T4734] bridge_slave_1: entered allmulticast mode [ 139.287492][ T4734] bridge_slave_1: entered promiscuous mode [ 139.301323][ T4740] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.301366][ T4740] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.301466][ T4740] bridge_slave_0: entered allmulticast mode [ 139.301914][ T4740] bridge_slave_0: entered promiscuous mode [ 139.302727][ T4740] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.302747][ T4740] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.302790][ T4740] bridge_slave_1: entered allmulticast mode [ 139.305638][ T4740] bridge_slave_1: entered promiscuous mode [ 139.313346][ T4740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.317630][ T4735] team0: Port device team_slave_0 added [ 139.318634][ T4734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.319576][ T4734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.342859][ T4740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.346918][ T4735] team0: Port device team_slave_1 added [ 139.351624][ T4734] team0: Port device team_slave_0 added [ 139.368421][ T4734] team0: Port device team_slave_1 added [ 139.375468][ T4745] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.375907][ T4745] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.375968][ T4745] bridge_slave_0: entered allmulticast mode [ 139.376436][ T4745] bridge_slave_0: entered promiscuous mode [ 139.377541][ T4745] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.377562][ T4745] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.377646][ T4745] bridge_slave_1: entered allmulticast mode [ 139.378041][ T4745] bridge_slave_1: entered promiscuous mode [ 139.383307][ T4735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.383317][ T4735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.383330][ T4735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.383922][ T4735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.383929][ T4735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.383943][ T4735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.394639][ T4735] hsr_slave_0: entered promiscuous mode [ 139.394930][ T4735] hsr_slave_1: entered promiscuous mode [ 139.395127][ T4735] debugfs: 'hsr0' already exists in 'hsr' [ 139.395173][ T4735] Cannot create hsr debugfs directory [ 139.398358][ T4734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.398366][ T4734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.398378][ T4734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.398875][ T4734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.398881][ T4734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.398894][ T4734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.406242][ T4740] team0: Port device team_slave_0 added [ 139.412069][ T4745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.412958][ T4745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.432197][ T4740] team0: Port device team_slave_1 added [ 139.446456][ T4745] team0: Port device team_slave_0 added [ 139.449682][ T4740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.451055][ T4740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.453109][ T4740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.453744][ T4740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.453751][ T4740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.453763][ T4740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.458226][ T4734] hsr_slave_0: entered promiscuous mode [ 139.458553][ T4734] hsr_slave_1: entered promiscuous mode [ 139.458753][ T4734] debugfs: 'hsr0' already exists in 'hsr' [ 139.458763][ T4734] Cannot create hsr debugfs directory [ 139.467778][ T4745] team0: Port device team_slave_1 added [ 139.488473][ T4745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.489762][ T4745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.489797][ T4745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.491701][ T4740] hsr_slave_0: entered promiscuous mode [ 139.492350][ T4740] hsr_slave_1: entered promiscuous mode [ 139.492560][ T4740] debugfs: 'hsr0' already exists in 'hsr' [ 139.492571][ T4740] Cannot create hsr debugfs directory [ 139.502284][ T4745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.503213][ T4745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.503239][ T4745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.547864][ T4745] hsr_slave_0: entered promiscuous mode [ 139.548238][ T4745] hsr_slave_1: entered promiscuous mode [ 139.548444][ T4745] debugfs: 'hsr0' already exists in 'hsr' [ 139.548454][ T4745] Cannot create hsr debugfs directory [ 139.600519][ T4743] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 139.605325][ T4743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 139.609159][ T4743] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 139.611483][ T4743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 139.613344][ T4743] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 139.615840][ T4743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 139.618895][ T4743] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 139.621156][ T4743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 139.649898][ T4743] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.649954][ T4743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.650118][ T4743] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.650154][ T4743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.660790][ T4735] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 139.663712][ T4735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 139.664084][ T4735] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 139.666041][ T4735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 139.670004][ T4735] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 139.672238][ T4735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 139.684972][ T4735] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 139.687381][ T4735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 139.698863][ T4734] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 139.701445][ T4734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 139.703410][ T4734] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 139.705675][ T4734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 139.707476][ T4734] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 139.709743][ T4734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 139.716885][ T4734] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 139.719562][ T4734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 139.723746][ T4735] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.723796][ T4735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.723888][ T4735] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.723920][ T4735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.738428][ T4740] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 139.741443][ T4740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 139.744053][ T4740] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 139.746263][ T4740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 139.747988][ T4740] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 139.750606][ T4740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 139.752591][ T4740] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 139.755032][ T4740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 139.780402][ T4734] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.780452][ T4734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.780527][ T4734] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.780554][ T4734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.789463][ T4745] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 139.791720][ T4745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 139.795753][ T4743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.797997][ T4745] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 139.800227][ T4745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 139.800539][ T4745] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 139.802842][ T4745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 139.807940][ T4740] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.807983][ T4740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.808056][ T4740] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.808087][ T4740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.809662][ T4745] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 139.811652][ T4745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 139.817669][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.819068][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.821285][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.822698][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.825422][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.826974][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.829234][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.830641][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.846631][ T4743] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.856795][ T4735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.860362][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.860419][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.860783][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.860802][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.877705][ T4735] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.886749][ T3527] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.886799][ T3527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.896706][ T4734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.900989][ T3527] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.901031][ T3527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.913575][ T4745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.919788][ T4740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.930553][ T4734] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.934854][ T4745] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.946131][ T4735] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.954947][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.954994][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.955370][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.955388][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.956090][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.956109][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.965977][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.966002][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.975430][ T4740] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.999335][ T3527] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.999384][ T3527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.025242][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.025296][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.148520][ T4743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.181570][ T4743] veth0_vlan: entered promiscuous mode [ 140.191925][ T4743] veth1_vlan: entered promiscuous mode [ 140.207834][ T4743] veth0_macvtap: entered promiscuous mode [ 140.210385][ T4743] veth1_macvtap: entered promiscuous mode [ 140.215669][ T4743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.219209][ T4743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.225024][ T40] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.225085][ T40] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.225112][ T40] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.228359][ T4735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.264883][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.273557][ T3527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.273594][ T3527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.292837][ T4745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.301335][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.301363][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.319973][ T4745] veth0_vlan: entered promiscuous mode [ 140.325360][ T4740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.332329][ T4745] veth1_vlan: entered promiscuous mode [ 140.365918][ T4743] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 140.367112][ T4734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.369897][ T4745] veth0_macvtap: entered promiscuous mode [ 140.380184][ T4745] veth1_macvtap: entered promiscuous mode [ 140.381982][ T4740] veth0_vlan: entered promiscuous mode [ 140.396693][ T4740] veth1_vlan: entered promiscuous mode [ 140.405084][ T4740] veth0_macvtap: entered promiscuous mode [ 140.422100][ T4735] veth0_vlan: entered promiscuous mode [ 140.426587][ T4740] veth1_macvtap: entered promiscuous mode [ 140.432959][ T4745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.436565][ T4734] veth0_vlan: entered promiscuous mode [ 140.438629][ T4734] veth1_vlan: entered promiscuous mode [ 140.442744][ T4735] veth1_vlan: entered promiscuous mode [ 140.445551][ T4740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.446643][ T4740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.450023][ T4745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.465988][ T4734] veth0_macvtap: entered promiscuous mode [ 140.466753][ T4914] Injecting memory failure for pfn 0x11ea70 at process virtual address 0x20001000 [ 140.470738][ T4734] veth1_macvtap: entered promiscuous mode [ 140.477381][ T4914] Memory failure: 0x11ea70: recovery action for clean LRU page: Recovered [ 140.479136][ T4914] Injecting memory failure for pfn 0x11e9ed at process virtual address 0x20002000 [ 140.482559][ T4914] Memory failure: 0x11e9ed: recovery action for clean LRU page: Recovered [ 140.482645][ T4914] Injecting memory failure for pfn 0x11eaec at process virtual address 0x20003000 [ 140.482732][ T4914] Memory failure: 0x11eaec: recovery action for clean LRU page: Recovered [ 140.487917][ T4734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.488860][ T4734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.495252][ T40] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.496470][ T40] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.496513][ T40] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.496544][ T40] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.496575][ T40] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.496601][ T40] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.496625][ T40] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.496651][ T40] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.496677][ T40] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.496705][ T1219] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.496738][ T1219] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.552803][ T4735] veth0_macvtap: entered promiscuous mode [ 140.561465][ T3527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.561510][ T3527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.566453][ T4735] veth1_macvtap: entered promiscuous mode [ 140.588569][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.588611][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.622324][ T4735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.627611][ T3527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.627648][ T3527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.634149][ T4735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.638697][ T3527] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.685223][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.685257][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.704723][ T3527] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.705411][ T3527] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.705553][ T3527] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.705691][ T3527] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.724158][ T3527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.724191][ T3527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.734351][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.734384][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.779891][ T1219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.779932][ T1219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.808099][ T1219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.808136][ T1219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.814516][ T50] Bluetooth: hci3: command tx timeout [ 140.814655][ T50] Bluetooth: hci0: command tx timeout [ 140.814823][ T50] Bluetooth: hci1: command tx timeout [ 140.893307][ T4739] Bluetooth: hci2: command tx timeout [ 140.903569][ T4739] Bluetooth: hci4: command tx timeout [ 140.970152][ T4929] loop4: detected capacity change from 0 to 512 [ 140.984071][ T4927] loop2: detected capacity change from 0 to 1024 [ 141.012501][ T4929] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.5: corrupted in-inode xattr: invalid ea_ino [ 141.012590][ T4929] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 141.012914][ T4929] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.5: couldn't read orphan inode 15 (err -117) [ 141.012951][ T4929] loop4: lost filesystem error report for type 5 error -117 [ 141.015588][ T4929] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.024884][ T4927] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.080550][ T4929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 141.096926][ T4929] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz.4.5: invalid fast symlink length 39 [ 141.216251][ T4942] ======================================================= [ 141.216251][ T4942] WARNING: The mand mount option has been deprecated and [ 141.216251][ T4942] and is ignored by this kernel. Remove the mand [ 141.216251][ T4942] option from the mount to silence this warning. [ 141.216251][ T4942] ======================================================= [ 141.216454][ T4942] cgroup: Unknown subsys name 'cpuset' [ 141.227093][ T4942] Zero length message leads to an empty skb [ 141.410761][ T4735] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.584420][ T4952] trusted_key: syz.4.10 sent an empty control message without MSG_MORE. [ 141.676617][ T4965] loop1: detected capacity change from 0 to 8 [ 141.699465][ T4965] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 141.701385][ T4965] unable to read xattr id index table [ 141.705267][ T4965] SQUASHFS error: zlib decompression failed, data probably corrupt [ 141.707038][ T4965] SQUASHFS error: Failed to read block 0x9b: -5 [ 141.708463][ T4965] SQUASHFS error: Unable to read metadata cache entry [99] [ 141.710169][ T4965] SQUASHFS error: Unable to read inode 0x127 [ 141.754612][ T4975] loop0: detected capacity change from 0 to 256 [ 141.768014][ T4968] loop1: detected capacity change from 0 to 512 [ 141.788496][ T4965] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 141.788536][ T4965] FAT-fs (loop1): Filesystem has been set read-only [ 141.788986][ T4965] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 141.832945][ T4745] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.907711][ T4982] netlink: 200 bytes leftover after parsing attributes in process `syz.0.17'. [ 141.926711][ T4985] netlink: 260 bytes leftover after parsing attributes in process `syz.4.19'. [ 141.946202][ T4980] loop2: detected capacity change from 0 to 4096 [ 141.947936][ T4980] EXT4-fs: inline encryption not supported [ 141.952828][ T4980] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 141.956213][ T4980] EXT4-fs (loop2): Test dummy encryption mode enabled [ 141.961062][ T4980] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 141.962662][ T4980] System zones: 0-5 [ 141.967063][ T4980] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.011199][ T4992] Cannot find del_set index 1 as target [ 142.017261][ T4745] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.019320][ T4995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22'. [ 142.038040][ T5001] Cannot find del_set index 1 as target [ 142.895872][ T50] Bluetooth: hci3: command tx timeout [ 142.895944][ T4739] Bluetooth: hci0: command tx timeout [ 142.906572][ T5054] loop1: detected capacity change from 0 to 8 [ 142.973289][ T50] Bluetooth: hci2: command tx timeout [ 142.974993][ T4739] Bluetooth: hci4: command tx timeout [ 143.030147][ T5058] netlink: 12 bytes leftover after parsing attributes in process `syz.1.35'. [ 143.032215][ T5058] netlink: 20 bytes leftover after parsing attributes in process `syz.1.35'. [ 143.055970][ T5027] i2c-slave-eeprom 0-1022: i2c_slave_register: not supported by adapter [ 143.056295][ T5027] i2c-slave-eeprom 0-1022: probe with driver i2c-slave-eeprom failed with error -95 [ 143.056524][ T5027] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x22 [ 143.058914][ T5027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.30'. [ 143.167963][ T5069] loop2: detected capacity change from 0 to 512 [ 143.172832][ T5069] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #17: comm syz.2.36: invalid orphan symlink nlink 1 [ 143.172877][ T5069] loop2: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 143.173069][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 143.173080][ C0] EXT4-fs (loop2): initial error at time 398: ext4_orphan_get:1399: inode 17 [ 143.173098][ C0] EXT4-fs (loop2): last error at time 398: ext4_orphan_get:1399: inode 17 [ 143.176951][ T5069] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.36: couldn't read orphan inode 17 (err -117) [ 143.176973][ T5069] loop2: lost filesystem error report for type 5 error -117 [ 143.179014][ T5069] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.182931][ T5069] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.36: bg 0: block 7: invalid block bitmap [ 143.222509][ T5069] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 13: comm syz.2.36: bad entry in directory: directory entry overrun - offset=92, inode=0, rec_len=196732, size=1024 fake=0 [ 143.263693][ T4745] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.304658][ T5075] netlink: 64 bytes leftover after parsing attributes in process `syz.4.38'. [ 143.311827][ T5074] loop2: detected capacity change from 0 to 128 [ 143.312289][ T5074] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 143.317430][ T5074] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 143.420530][ T5086] loop2: detected capacity change from 0 to 256 [ 143.542307][ T5094] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.621861][ T4745] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.676568][ T5099] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.2.43: corrupted xattr block 95: invalid header [ 143.676628][ T5099] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 143.677426][ T5099] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 143.678193][ T5099] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.43: bg 0: block 7: invalid block bitmap [ 143.678211][ T5099] loop2: lost filesystem error report for type 5 error -117 [ 143.679838][ T5099] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 143.679851][ T5099] loop2: lost filesystem error report for type 5 error -117 [ 143.680061][ T5099] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2972: inode #11: comm syz.2.43: corrupted xattr block 95: invalid header [ 143.680077][ T5099] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 143.681432][ T5099] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 143.681560][ T5099] EXT4-fs (loop2): 1 orphan inode deleted [ 143.685192][ T5099] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.709900][ T5099] 9p: Bad value for 'rfdno' [ 143.720530][ T4745] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.877749][ T4739] Bluetooth: hci0: adv larger than maximum supported [ 144.093318][ T4739] Bluetooth: hci1: command tx timeout [ 144.169467][ T5125] geneve2: entered promiscuous mode [ 144.174824][ T5125] geneve2: entered allmulticast mode [ 144.235193][ T5131] netlink: 12 bytes leftover after parsing attributes in process `syz.4.54'. [ 144.246827][ T5131] erspan1: entered allmulticast mode [ 144.290677][ T5136] netlink: 12 bytes leftover after parsing attributes in process `syz.4.54'. [ 144.295018][ T5133] vfat: Unknown parameter '18446744073709551615™œÀ<[Æ£Ð{ú®!Ñ–'O“¦Y:˜0G-V3f_/QϲJªÔÇN' [ 144.300133][ T5136] erspan1: entered allmulticast mode [ 144.313237][ T5133] VFS: Lookup of 'file2' in squashfs loop0 would have caused loop [ 144.313701][ T5133] SQUASHFS error: Unable to read directory block [631:26] [ 144.314043][ T5133] VFS: Lookup of 'file2' in squashfs loop0 would have caused loop [ 144.553472][ T5169] capability: warning: `syz.2.59' uses deprecated v2 capabilities in a way that may be insecure [ 144.666954][ T5177] warning: `syz.2.61' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 144.755494][ T5186] gretap0: entered promiscuous mode [ 144.758388][ T5187] 0ªî{X¹¦: renamed from gretap0 [ 144.760442][ T5187] 0ªî{X¹¦: left promiscuous mode [ 144.760622][ T5187] 0ªî{X¹¦: entered allmulticast mode [ 144.763301][ T5187] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 144.854906][ T5192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.855134][ T5192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.958918][ T5199] tipc: Started in network mode [ 144.958972][ T5199] tipc: Node identity fe6aca0da3a6, cluster identity 4711 [ 144.959057][ T5199] tipc: Enabled bearer , priority 0 [ 144.959374][ T5199] syzkaller0: entered promiscuous mode [ 144.959384][ T5199] syzkaller0: entered allmulticast mode [ 144.974267][ T4739] Bluetooth: hci3: command tx timeout [ 144.989707][ T5199] tipc: Resetting bearer [ 145.017845][ T5206] binder: 5205:5206 ioctl c0306201 20000080 returned -14 [ 145.025827][ T5206] binder: 5205:5206 tried to acquire reference to desc 0, got 1 instead [ 145.025870][ T5206] binder: 5205:5206 ioctl c0306201 200003c0 returned -14 [ 145.026335][ T5206] binder: 5205:5206 got transaction with invalid fd, 1893105036 [ 145.026363][ T5206] binder: 5206:5205 translate fd array failed [ 145.026416][ T5206] binder: 5205:5206 transaction call to 5205:0 failed 5/29201/-9, code 0 size 112-24 line 3664 [ 145.027480][ T1502] binder: undelivered TRANSACTION_ERROR: 29201 [ 145.054940][ T50] Bluetooth: hci2: command tx timeout [ 145.055011][ T4739] Bluetooth: hci4: command tx timeout [ 145.126101][ T5210] EXT4-fs (loop1): 1 truncate cleaned up [ 145.126977][ T5210] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.172056][ T4743] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.337539][ T5233] fuse: Bad value for 'fd' [ 145.388004][ T5235] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.80: invalid indirect mapped block 256 (level 2) [ 145.390751][ T5235] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 145.392046][ T5235] EXT4-fs (loop1): 2 truncates cleaned up [ 145.393920][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 145.393933][ C1] EXT4-fs (loop1): initial error at time 400: ext4_free_branches:1023: inode 11 [ 145.393950][ C1] EXT4-fs (loop1): last error at time 400: ext4_free_branches:1023: inode 11 [ 145.400849][ T5235] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.598998][ T5245] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.616273][ T5245] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 145.621548][ T5245] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 145.681654][ T4745] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.728774][ T5248] EXT4-fs: Ignoring removed i_version option [ 145.731081][ T5248] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 145.731988][ T5248] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0002] [ 145.732036][ T5248] System zones: 1-12 [ 145.732221][ T5248] EXT4-fs (loop2): orphan cleanup on readonly fs [ 145.732373][ T5248] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.83: invalid indirect mapped block 12 (level 1) [ 145.732388][ T5248] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 145.732574][ T5248] EXT4-fs (loop2): Remounting filesystem read-only [ 145.732640][ T5248] EXT4-fs (loop2): 1 truncate cleaned up [ 145.735801][ T5248] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 145.778702][ T5248] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.83: error -EUCLEAN reading directory block [ 145.788351][ T4745] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 145.794010][ T5197] tipc: Resetting bearer [ 145.799191][ T5197] tipc: Disabling bearer [ 145.826323][ T5251] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 145.908571][ T5256] vfat: Unknown parameter 'ÿ' [ 145.935578][ T4739] Bluetooth: hci0: command tx timeout [ 146.039154][ T5261] set_capacity_and_notify: 10 callbacks suppressed [ 146.039195][ T5261] loop2: detected capacity change from 0 to 256 [ 146.068803][ T5261] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 146.068845][ T5261] FAT-fs (loop2): Filesystem has been set read-only [ 146.069923][ T5261] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 146.083817][ T5238] __nla_validate_parse: 60 callbacks suppressed [ 146.083867][ T5238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.81'. [ 146.109144][ T5238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.81'. [ 146.125242][ T5238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.81'. [ 146.183710][ T4739] Bluetooth: hci1: command tx timeout [ 146.204419][ T5238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.81'. [ 146.484369][ T4743] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.518378][ T5275] netlink: 24 bytes leftover after parsing attributes in process `syz.1.91'. [ 147.053862][ T4739] Bluetooth: hci3: command tx timeout [ 147.129314][ T5316] loop0: detected capacity change from 0 to 512 [ 147.133796][ T4739] Bluetooth: hci4: command tx timeout [ 147.133830][ T4739] Bluetooth: hci2: command tx timeout [ 147.153825][ T5316] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.174643][ T5316] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.102: bg 0: block 306: padding at end of block bitmap is not set [ 147.250231][ T4734] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.317354][ T5323] loop0: detected capacity change from 0 to 512 [ 147.372330][ T5329] loop4: detected capacity change from 0 to 512 [ 147.411290][ T5329] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 147.423862][ T5329] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 1024: comm syz.4.105: invalid block [ 147.423911][ T5329] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 147.426004][ T5329] EXT4-fs (loop4): 1 truncate cleaned up [ 147.432034][ T5329] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.444142][ T5329] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.105: Invalid block bitmap block 3 in block_group 0 [ 147.446437][ T5329] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.105: Invalid block bitmap block 3 in block_group 0 [ 147.450437][ T5329] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.105: Invalid block bitmap block 3 in block_group 0 [ 147.696340][ T5329] infiniband syz1: set active [ 147.697550][ T5329] infiniband syz1: added bridge_slave_0 [ 147.734666][ T5329] RDS/IB: syz1: added [ 147.741089][ T5329] smc: adding ib device syz1 with port count 1 [ 147.742570][ T5329] smc: ib device syz1 port 1 has no pnetid [ 147.957897][ T5350] 9p: Bad value for 'wfdno' [ 148.043177][ T5332] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 148.373524][ T1502] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 148.412473][ T4735] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.793112][ T1502] usb 1-1: Using ep0 maxpacket: 8 [ 148.853308][ T1502] usb 1-1: unable to get BOS descriptor or descriptor too short [ 148.853403][ T1502] usb 1-1: New USB device found, idVendor=13d3, idProduct=3401, bcdDevice=17.5f [ 148.856464][ T1502] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 148.856482][ T1502] usb 1-1: can't read configurations, error -71 [ 149.375075][ T5379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.120'. [ 149.378242][ T5379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.120'. [ 149.469835][ T5394] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.470186][ T5394] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.599673][ T5397] loop0: detected capacity change from 0 to 4096 [ 149.604367][ T5397] EXT4-fs (loop0): Test dummy encryption mode enabled [ 149.611091][ T5397] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.703780][ T4734] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.736274][ T5401] netlink: 16 bytes leftover after parsing attributes in process `syz.2.126'. [ 149.736626][ T5401] netlink: 16 bytes leftover after parsing attributes in process `syz.2.126'. [ 149.747663][ T5401] netlink: 48 bytes leftover after parsing attributes in process `syz.2.126'. [ 149.808598][ T5408] mmap: syz.2.126 (5408) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 149.879437][ T5413] ipvlan2: entered promiscuous mode [ 150.034324][ T5425] binder: 5424:5425 BC_FREE_BUFFER no match for buffer at offset 0 [ 150.043940][ T5427] binder: 5424:5427 BC_FREE_BUFFER no match for buffer at offset 0 [ 150.224468][ T5437] loop4: detected capacity change from 0 to 512 [ 150.229640][ T5437] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 150.231952][ T5437] EXT4-fs error (device loop4): __ext4_fill_super:5600: inode #2: comm syz.4.135: iget: special inode unallocated [ 150.231992][ T5437] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 150.232198][ T5437] EXT4-fs (loop4): get root inode failed [ 150.232207][ T5437] EXT4-fs (loop4): mount failed [ 150.233156][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 150.233169][ C0] EXT4-fs (loop4): initial error at time 405: __ext4_fill_super:5600: inode 2 [ 150.233189][ C0] EXT4-fs (loop4): last error at time 405: __ext4_fill_super:5600: inode 2 [ 150.507478][ T5467] binder: 5466:5467 tried to acquire reference to desc 0, got 1 instead [ 150.507623][ T5467] binder: 5466 invalid dec weak, ref 9 desc 1 s 1 w 0 [ 150.507833][ T5467] binder: 5466:5467 unknown command 0 [ 150.507852][ T5467] binder: 5466:5467 ioctl c0306201 20000180 returned -22 [ 150.508679][ T4739] Bluetooth: hci1: Malformed LE Event: 0x0b [ 150.771022][ T5483] netlink: 'syz.4.149': attribute type 1 has an invalid length. [ 150.965001][ T5496] loop4: detected capacity change from 0 to 1024 [ 150.978404][ T5496] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 151.042512][ T5499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.064996][ T5499] syz.2.151 uses obsolete (PF_INET,SOCK_PACKET) [ 151.217709][ T5496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.221105][ T5496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.225032][ T4739] Bluetooth: hci1: Dropping invalid advertising data [ 151.225060][ T4739] Bluetooth: hci1: Malformed LE Event: 0x02 [ 151.240012][ T5496] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 3: comm syz.4.153: lblock 3 mapped to illegal pblock 3 (length 3) [ 151.241228][ T5496] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 151.241245][ T5496] EXT4-fs (loop4): This should not happen!! Data will be lost [ 151.241245][ T5496] [ 151.286613][ T5501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.289277][ T5501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.752072][ T4735] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 151.756348][ T4735] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 151.854819][ T50] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 152.089179][ T5522] tipc: New replicast peer: 255.255.255.255 [ 152.090866][ T5522] tipc: Enabled bearer , priority 10 [ 152.140232][ T5526] bond0: entered promiscuous mode [ 152.140267][ T5526] bond_slave_0: entered promiscuous mode [ 152.140343][ T5526] bond_slave_1: entered promiscuous mode [ 152.148409][ T5526] batadv0: entered promiscuous mode [ 152.157789][ T5526] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 152.172473][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 152.174238][ T5526] bond0: left promiscuous mode [ 152.174260][ T5526] bond_slave_0: left promiscuous mode [ 152.174345][ T5526] bond_slave_1: left promiscuous mode [ 152.181017][ T5526] batadv0: left promiscuous mode [ 152.323166][ T5535] loop2: detected capacity change from 0 to 256 [ 152.609060][ T5551] loop0: detected capacity change from 0 to 8192 [ 152.625450][ T5553] loop2: detected capacity change from 0 to 512 [ 152.633362][ T5553] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 152.648542][ T5551] Dev loop0: RDB in block 1 has bad checksum [ 152.741066][ T5559] netlink: 'syz.1.173': attribute type 8 has an invalid length. [ 152.742647][ T5559] __nla_validate_parse: 11 callbacks suppressed [ 152.745268][ T5559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.173'. [ 152.922117][ T5568] ptrace attach of "ci-upstream-gce-arm64/syz-executor exec"[4743] was attempted by "ci-upstream-gce-arm64/syz-executor exec"[5568] [ 153.042756][ T5571] loop2: detected capacity change from 0 to 128 [ 153.067098][ T5571] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 153.155510][ T5576] netlink: 'syz.4.177': attribute type 8 has an invalid length. [ 153.155546][ T5576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.177'. [ 153.160263][ T5576] netlink: 'syz.4.177': attribute type 8 has an invalid length. [ 153.160863][ T5576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.177'. [ 153.175265][ T39] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.175309][ T39] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.175341][ T39] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.175360][ T39] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.204357][ T4357] tipc: Node number set to 1573702157 [ 153.757794][ T5591] loop1: detected capacity change from 0 to 512 [ 153.760957][ T5591] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 153.808528][ T5591] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.180: bg 0: block 184: padding at end of block bitmap is not set [ 153.808573][ T5591] loop1: lost filesystem error report for type 5 error -117 [ 153.810697][ T5591] EXT4-fs (loop1): Remounting filesystem read-only [ 153.810874][ T5591] EXT4-fs (loop1): 1 truncate cleaned up [ 153.815007][ T5591] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.826475][ T39] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 153.826507][ T39] Quota error (device loop1): write_blk: dquota write failed [ 153.826528][ T39] Quota error (device loop1): remove_free_dqentry: Can't write block (5) with free entries [ 153.826543][ T39] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 153.826556][ T39] Quota error (device loop1): write_blk: dquota write failed [ 153.826567][ T39] Quota error (device loop1): free_dqentry: Can't move quota data block (5) to free list [ 153.826605][ T39] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 153.826619][ T39] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 153.826659][ T39] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 153.911060][ T4745] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 154.026294][ T5611] loop4: detected capacity change from 0 to 128 [ 154.048313][ T5611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.184'. [ 154.155730][ T5617] binder: tried to use weak ref as strong ref [ 154.157316][ T5617] binder: 5616:5617 Acquire 1 refcount change on invalid ref 0 ret -22 [ 154.159197][ T5617] binder: 5616:5617 got transaction to invalid handle, 1 [ 154.160596][ T5617] binder: 5616:5617 cannot find target node [ 154.160644][ T5617] binder: 5616:5617 transaction async to 0:0 failed 12/29201/-22, code 0 size 0-0 line 3252 [ 154.164058][ T5617] binder: undelivered TRANSACTION_ERROR: 29201 [ 154.284456][ T5622] loop2: detected capacity change from 0 to 512 [ 154.284826][ T5622] EXT4-fs: Ignoring removed orlov option [ 154.297122][ T5622] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.330738][ T4745] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.362007][ T5626] loop2: detected capacity change from 0 to 128 [ 154.374467][ T5626] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 154.404415][ T4745] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 154.726437][ T5642] loop2: detected capacity change from 0 to 1024 [ 154.732391][ T5642] EXT4-fs: Ignoring removed bh option [ 154.752292][ T5642] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.811810][ T5646] netlink: 36 bytes leftover after parsing attributes in process `syz.1.195'. [ 154.837468][ T5648] process 'syz.1.195' launched '/dev/fd/14' with NULL argv: empty string added [ 154.848340][ T4745] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.903809][ T5651] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20002 [ 154.912690][ T5651] fuse: fd is not a fuse device [ 154.978598][ T5654] loop2: detected capacity change from 0 to 512 [ 154.984780][ T5654] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 154.999791][ T5654] EXT4-fs error (device loop2): ext4_init_orphan_info:618: comm syz.2.197: orphan file block 0: bad magic [ 154.999824][ T5654] loop2: lost filesystem error report for type 5 error -117 [ 155.009059][ T5654] EXT4-fs (loop2): Remounting filesystem read-only [ 155.009343][ T5654] EXT4-fs (loop2): mount failed [ 155.180821][ T5663] EXT4-fs: Invalid want_extra_isize 4 [ 155.214142][ T5663] ext4: Unknown parameter '' [ 155.224044][ T5663] ext4: Unknown parameter '' [ 155.249751][ T5663] ext4: Unknown parameter '' [ 155.321431][ T5663] ext4: Unknown parameter '' [ 155.344495][ T5669] FAULT_INJECTION: forcing a failure. [ 155.344495][ T5669] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 155.347096][ T5669] CPU: 0 UID: 0 PID: 5669 Comm: syz.0.201 Not tainted syzkaller #0 PREEMPT [ 155.347117][ T5669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 155.347127][ T5669] Call trace: [ 155.347131][ T5669] show_stack+0x2c/0x3c (C) [ 155.347152][ T5669] __dump_stack+0x30/0x40 [ 155.347165][ T5669] dump_stack_lvl+0xd8/0x12c [ 155.347177][ T5669] dump_stack+0x1c/0x28 [ 155.347189][ T5669] should_fail_ex+0x41c/0x590 [ 155.347198][ T5669] should_fail+0x14/0x24 [ 155.347205][ T5669] should_fail_usercopy+0x20/0x30 [ 155.347213][ T5669] _inline_copy_from_user+0x3c/0x174 [ 155.347227][ T5669] do_fcntl+0x29c/0x1568 [ 155.347238][ T5669] __arm64_sys_fcntl+0x118/0x1ac [ 155.347250][ T5669] invoke_syscall+0x98/0x244 [ 155.347262][ T5669] el0_svc_common+0xec/0x23c [ 155.347274][ T5669] do_el0_svc+0x4c/0x5c [ 155.347286][ T5669] el0_svc+0x64/0x260 [ 155.347297][ T5669] el0t_64_sync_handler+0x44/0x104 [ 155.347307][ T5669] el0t_64_sync+0x198/0x19c [ 155.361398][ T5663] ext4: Unknown parameter '' [ 155.381288][ T5669] EXT4-fs (loop0): Test dummy encryption mode enabled [ 155.384491][ T5663] ext4: Unknown parameter '' [ 155.392550][ T5669] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.406202][ T5663] ext4: Unknown parameter '' [ 155.419245][ T4734] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.465334][ T5663] ext4: Unknown parameter '' [ 155.472000][ T5663] ext4: Unknown parameter '' [ 155.478428][ T5663] ext4: Unknown parameter '' [ 155.621590][ T5683] binder: 5682:5683 tried to acquire reference to desc 0, got 1 instead [ 155.623396][ T5683] binder: 5682:5683 got reply transaction with no transaction stack [ 155.624974][ T5683] binder: 5682:5683 transaction reply to 0:0 failed 17/29201/-71, code 0 size 88-24 line 3155 [ 155.627006][ T5683] binder: 5682:5683 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 155.629151][ T5683] binder: 5683 RLIMIT_NICE not set [ 155.650224][ T5686] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 155.767766][ T5693] netlink: 68 bytes leftover after parsing attributes in process `syz.2.209'. [ 156.414033][ T5714] ubi0: attaching mtd0 [ 156.420225][ T5714] ubi0: scanning is finished [ 156.420281][ T5714] ubi0: empty MTD device detected [ 156.583183][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 156.659120][ T5714] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 156.659160][ T5714] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 156.659170][ T5714] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 156.659179][ T5714] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 156.659188][ T5714] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 156.659194][ T5714] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 156.659201][ T5714] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1273526278 [ 156.659209][ T5714] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 156.659625][ T5720] ubi0: background thread "ubi_bgt0d" started, PID 5720 [ 156.668623][ T5722] fuse: Bad value for 'fd' [ 156.687738][ T5719] /dev/loop0: Can't open blockdev [ 156.822940][ T5729] overlayfs: workdir and upperdir must reside under the same mount [ 156.871750][ T5734] binder: tried to use weak ref as strong ref [ 156.871785][ T5734] binder: 5733:5734 Acquire 1 refcount change on invalid ref 0 ret -22 [ 156.872384][ T5735] binder: 5733:5735 got transaction to invalid handle, 1 [ 156.872395][ T5735] binder: 5733:5735 cannot find target node [ 156.872408][ T5735] binder: 5733:5735 transaction call to 0:0 failed 20/29201/-22, code 0 size 72-24 line 3252 [ 156.877532][ T5735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.220'. [ 156.877552][ T5735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.220'. [ 156.877610][ T5736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.220'. [ 156.877619][ T5736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.220'. [ 156.922017][ T4357] binder: undelivered TRANSACTION_ERROR: 29201 [ 156.924417][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.924460][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.924476][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.924491][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.983974][ T5746] 9p: Bad value for 'rfdno' [ 157.026392][ T5749] can0: slcan on ptm0. [ 157.036617][ T5749] Driver unsupported XDP return value 0 on prog (id 25) dev N/A, expect packet loss! [ 157.104352][ T5748] can0 (unregistered): slcan off ptm0. [ 158.041322][ T39] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.118210][ T39] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.207982][ T39] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.266876][ T39] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.425993][ T39] bridge_slave_1: left allmulticast mode [ 158.426035][ T39] bridge_slave_1: left promiscuous mode [ 158.426593][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.429779][ T39] bridge_slave_0: left allmulticast mode [ 158.429807][ T39] bridge_slave_0: left promiscuous mode [ 158.429891][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.490624][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.505711][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.524071][ T39] bond0 (unregistering): Released all slaves [ 158.650678][ T4401] 8021q: adding VLAN 0 to HW filter on device eth0 [ 158.817904][ T4401] 8021q: adding VLAN 0 to HW filter on device eth1 [ 158.873978][ T39] hsr_slave_0: left promiscuous mode [ 158.875248][ T39] hsr_slave_1: left promiscuous mode [ 158.875562][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.875582][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.882462][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.882497][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.888725][ T39] veth1_macvtap: left promiscuous mode [ 158.888781][ T39] veth0_macvtap: left promiscuous mode [ 158.888877][ T39] veth1_vlan: left promiscuous mode [ 158.888918][ T39] veth0_vlan: left promiscuous mode [ 158.997236][ T39] team0 (unregistering): Port device team_slave_1 removed [ 159.001037][ T39] team0 (unregistering): Port device team_slave_0 removed [ 159.047632][ T4401] 8021q: adding VLAN 0 to HW filter on device eth2 [ 159.168550][ T4401] 8021q: adding VLAN 0 to HW filter on device eth3 [ 159.378673][ T5858] overlayfs: failed to resolve './file1': -2 [ 159.389518][ T5853] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 159.396353][ T5853] batadv_slave_1: entered promiscuous mode [ 159.404874][ T5851] batadv_slave_1: left promiscuous mode [ 159.422179][ T5855] set_capacity_and_notify: 13 callbacks suppressed [ 159.422224][ T5855] loop0: detected capacity change from 0 to 2048 [ 159.422525][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 159.424671][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 159.426994][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 159.432697][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 159.433002][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 159.452237][ T5868] loop8: detected capacity change from 0 to 7 [ 159.454612][ T5868] Dev loop8: unable to read RDB block 7 [ 159.454628][ T5868] loop8: unable to read partition table [ 159.454693][ T5868] loop8: partition table beyond EOD, truncated [ 159.454703][ T5868] loop_reread_partitions: partition scan of loop8 (þ被xü^>æ) failed (rc=-5) [ 159.546408][ T5879] loop0: detected capacity change from 0 to 512 [ 159.563540][ T5879] EXT4-fs warning (device loop0): dx_probe:861: inode #2: comm syz.0.234: dx entry: limit 0 != root limit 125 [ 159.563590][ T5879] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.234: Corrupt directory, running e2fsck is recommended [ 159.563836][ T5879] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #2: block 8: comm syz.0.234: lblock 11 mapped to illegal pblock 8 (length 1) [ 159.563852][ T5879] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 159.564391][ T5879] EXT4-fs (loop0): Remounting filesystem read-only [ 159.564484][ T5879] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 159.564925][ T5879] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.710914][ T5893] loop4: detected capacity change from 0 to 2048 [ 159.728120][ T5893] ext4: Unknown parameter 'nouser_xattr' [ 159.881931][ T4734] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.986648][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.988281][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.989986][ T5863] bridge_slave_0: entered allmulticast mode [ 159.991901][ T5863] bridge_slave_0: entered promiscuous mode [ 159.995408][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.996998][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.998650][ T5863] bridge_slave_1: entered allmulticast mode [ 160.000510][ T5863] bridge_slave_1: entered promiscuous mode [ 160.010740][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.014395][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.024324][ T5863] team0: Port device team_slave_0 added [ 160.026398][ T5863] team0: Port device team_slave_1 added [ 160.041396][ T5919] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 160.041439][ T5919] overlayfs: failed to set xattr on upper [ 160.041459][ T5919] overlayfs: ...falling back to redirect_dir=nofollow. [ 160.041472][ T5919] overlayfs: ...falling back to uuid=null. [ 160.049665][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.049697][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.049708][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.050222][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.050229][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.050242][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.106494][ T5863] hsr_slave_0: entered promiscuous mode [ 160.106879][ T5863] hsr_slave_1: entered promiscuous mode [ 160.107072][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 160.107082][ T5863] Cannot create hsr debugfs directory [ 160.128956][ T5925] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0 [ 160.131947][ T5922] tmpfs: Bad value for 'mpol' [ 160.166831][ T5928] fuse: Unknown parameter '' [ 160.205998][ T5863] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 160.212482][ T5863] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 160.219338][ T5863] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 160.225596][ T5863] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 160.227362][ T5863] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 160.236252][ T5863] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 160.236803][ T5863] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 160.254484][ T5863] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 160.302093][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.314717][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.325455][ T5863] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 160.327550][ T5863] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 160.331579][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.331642][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.334505][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.334551][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.447534][ T4743] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.535047][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.535593][ T5979] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 160.535605][ T5979] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 160.536231][ T5979] vhci_hcd vhci_hcd.0: Device attached [ 160.567443][ T5985] __nla_validate_parse: 256 callbacks suppressed [ 160.567488][ T5985] netlink: 12 bytes leftover after parsing attributes in process `syz.4.255'. [ 160.678516][ T5863] veth0_vlan: entered promiscuous mode [ 160.681183][ T5863] veth1_vlan: entered promiscuous mode [ 160.698826][ T5996] syzkaller0: entered promiscuous mode [ 160.698875][ T5996] syzkaller0: entered allmulticast mode [ 160.700564][ T5863] veth0_macvtap: entered promiscuous mode [ 160.707102][ T5863] veth1_macvtap: entered promiscuous mode [ 160.716728][ T5999] loop2: detected capacity change from 0 to 512 [ 160.717336][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.720503][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.737261][ T5999] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.257: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 160.740642][ T5999] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 160.743350][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 160.743379][ C1] EXT4-fs (loop2): initial error at time 415: ext4_iget_extra_inode:5180: inode 15 [ 160.743421][ C1] EXT4-fs (loop2): last error at time 415: ext4_iget_extra_inode:5180: inode 15 [ 160.745348][ T5999] EXT4-fs (loop2): Remounting filesystem read-only [ 160.746002][ T5999] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.764864][ T39] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.765969][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.766127][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.766142][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.795419][ T1455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.795450][ T1455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.803564][ T4357] usb 3-1: SetAddress Request (2) to port 0 [ 160.803630][ T4357] usb 3-1: new SuperSpeed USB device number 2 using vhci_hcd [ 160.829093][ T39] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.829141][ T39] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.859733][ T1455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.859772][ T1455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.935993][ T39] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.938656][ T39] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.992013][ T4739] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 160.995342][ T4739] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 160.997604][ T4739] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 160.999395][ T4739] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 161.001065][ T4739] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 161.025228][ T39] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.027553][ T39] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.056880][ T6015] netlink: 12 bytes leftover after parsing attributes in process `syz.5.260'. [ 161.061404][ T6015] erspan1: entered allmulticast mode [ 161.081469][ T39] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.081994][ T4745] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.082147][ T39] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.105042][ T6015] team0: entered promiscuous mode [ 161.105084][ T6015] team_slave_0: entered promiscuous mode [ 161.105177][ T6015] team_slave_1: entered promiscuous mode [ 161.110983][ T6015] macvlan2: entered promiscuous mode [ 161.112630][ T6015] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 161.169420][ T6024] 9p: Bad value for 'rfdno' [ 161.169546][ T6024] 9p: Bad value for 'rfdno' [ 161.169643][ T6024] 9p: Bad value for 'rfdno' [ 161.169725][ T6024] 9p: Bad value for 'rfdno' [ 161.170258][ T6024] 9p: Bad value for 'rfdno' [ 161.170341][ T6024] 9p: Bad value for 'rfdno' [ 161.170417][ T6024] 9p: Bad value for 'rfdno' [ 161.170493][ T6024] 9p: Bad value for 'rfdno' [ 161.170559][ T6024] 9p: Bad value for 'rfdno' [ 161.170628][ T6024] 9p: Bad value for 'rfdno' [ 161.170693][ T6024] 9p: Bad value for 'rfdno' [ 161.170764][ T6024] 9p: Bad value for 'rfdno' [ 161.170829][ T6024] 9p: Bad value for 'rfdno' [ 161.174389][ T6024] 9p: Bad value for 'rfdno' [ 161.174476][ T6024] 9p: Bad value for 'rfdno' [ 161.174548][ T6024] 9p: Bad value for 'rfdno' [ 161.174615][ T6024] 9p: Bad value for 'rfdno' [ 161.174683][ T6024] 9p: Bad value for 'rfdno' [ 161.174748][ T6024] 9p: Bad value for 'rfdno' [ 161.174821][ T6024] 9p: Bad value for 'rfdno' [ 161.174893][ T6024] 9p: Bad value for 'rfdno' [ 161.179039][ T6033] netlink: 20 bytes leftover after parsing attributes in process `syz.2.263'. [ 161.179861][ T6024] 9p: Bad value for 'rfdno' [ 161.179958][ T6024] 9p: Bad value for 'rfdno' [ 161.180614][ T6024] 9p: Bad value for 'rfdno' [ 161.180710][ T6024] 9p: Bad value for 'rfdno' [ 161.180862][ T6033] netlink: 256 bytes leftover after parsing attributes in process `syz.2.263'. [ 161.181020][ T6024] 9p: Bad value for 'rfdno' [ 161.181110][ T6024] 9p: Bad value for 'rfdno' [ 161.181785][ T6024] 9p: Bad value for 'rfdno' [ 161.181882][ T6024] 9p: Bad value for 'rfdno' [ 161.181965][ T6024] 9p: Bad value for 'rfdno' [ 161.182040][ T6024] 9p: Bad value for 'rfdno' [ 161.182898][ T6024] 9p: Bad value for 'rfdno' [ 161.182983][ T6024] 9p: Bad value for 'rfdno' [ 161.240575][ T39] bridge_slave_1: left allmulticast mode [ 161.240609][ T39] bridge_slave_1: left promiscuous mode [ 161.240713][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.248717][ T39] bridge_slave_0: left allmulticast mode [ 161.248752][ T39] bridge_slave_0: left promiscuous mode [ 161.248824][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.366040][ T6046] loop5: detected capacity change from 0 to 256 [ 161.367619][ T6046] vfat: Bad value for 'uni_xlate' [ 161.376410][ T5980] vhci_hcd: connection reset by peer [ 161.381125][ T1455] vhci_hcd vhci_hcd.0: stop threads [ 161.381419][ T1455] vhci_hcd vhci_hcd.0: release socket [ 161.382378][ T1455] vhci_hcd vhci_hcd.0: disconnect device [ 161.422038][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.453680][ T50] Bluetooth: hci2: command tx timeout [ 161.455658][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.466090][ T39] bond0 (unregistering): Released all slaves [ 161.577066][ T6058] loop4: detected capacity change from 0 to 512 [ 161.611518][ T6058] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.270: inode has both inline data and extents flags [ 161.611552][ T6058] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 161.614190][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 161.614202][ C0] EXT4-fs (loop4): initial error at time 416: ext4_orphan_get:1399: inode 15 [ 161.614220][ C0] EXT4-fs (loop4): last error at time 416: ext4_orphan_get:1399: inode 15 [ 161.614428][ T6058] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.270: couldn't read orphan inode 15 (err -117) [ 161.614443][ T6058] loop4: lost filesystem error report for type 5 error -117 [ 161.621491][ T6061] Injecting memory failure for pfn 0x138dcf at process virtual address 0x20001000 [ 161.626845][ T6058] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.653950][ T6061] Memory failure: 0x138dcf: Sending SIGBUS to syz.2.272:6061 due to hardware memory corruption [ 161.654109][ T6061] Memory failure: 0x138dcf: recovery action for dirty LRU page: Recovered [ 161.676688][ T6061] loop2: detected capacity change from 0 to 128 [ 161.677000][ T6061] EXT4-fs: Invalid want_extra_isize 2147483647 [ 161.701989][ T6058] tipc: Enabled bearer , priority 0 [ 161.705840][ T6058] syzkaller0: entered promiscuous mode [ 161.707287][ T6058] syzkaller0: entered allmulticast mode [ 161.715764][ T6057] tipc: Resetting bearer [ 161.731652][ T6057] tipc: Disabling bearer [ 161.742667][ T6075] capability: warning: `syz.2.274' uses 32-bit capabilities (legacy support in use) [ 161.826082][ T4735] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.924939][ T4401] 8021q: adding VLAN 0 to HW filter on device eth4 [ 161.929020][ T6010] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.930362][ T6010] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.933665][ T6010] bridge_slave_0: entered allmulticast mode [ 161.977000][ T6010] bridge_slave_0: entered promiscuous mode [ 161.982059][ T6010] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.985078][ T6010] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.985236][ T6010] bridge_slave_1: entered allmulticast mode [ 162.001715][ T6103] loop5: detected capacity change from 0 to 4096 [ 162.004511][ T6010] bridge_slave_1: entered promiscuous mode [ 162.011584][ T6116] netlink: 60 bytes leftover after parsing attributes in process `syz.0.276'. [ 162.011616][ T6116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.276'. [ 162.011645][ T6116] netlink: 60 bytes leftover after parsing attributes in process `syz.0.276'. [ 162.103288][ T6010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.146508][ T39] hsr_slave_0: left promiscuous mode [ 162.147941][ T39] hsr_slave_1: left promiscuous mode [ 162.148484][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.148498][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.156786][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.156816][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.177674][ T39] veth1_macvtap: left promiscuous mode [ 162.177723][ T39] veth0_macvtap: left promiscuous mode [ 162.177771][ T39] veth1_vlan: left promiscuous mode [ 162.177807][ T39] veth0_vlan: left promiscuous mode [ 162.193890][ T1092] IPVS: starting estimator thread 0... [ 162.303578][ T6127] IPVS: using max 60 ests per chain, 144000 per kthread [ 162.310915][ T6141] IPVS: lc: TCP 127.0.0.1:21 - no destination available [ 162.579651][ T39] team0 (unregistering): Port device team_slave_1 removed [ 162.585698][ T39] team0 (unregistering): Port device team_slave_0 removed [ 162.646897][ T6010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.684661][ T6010] team0: Port device team_slave_0 added [ 162.688541][ T6010] team0: Port device team_slave_1 added [ 162.709573][ T6010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.709603][ T6010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.709615][ T6010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.711460][ T6010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.711468][ T6010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.711483][ T6010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.721401][ T6150] Format for deleting device is "id" (uint). [ 162.747819][ T6010] hsr_slave_0: entered promiscuous mode [ 162.751505][ T6010] hsr_slave_1: entered promiscuous mode [ 162.823229][ T6164] loop4: detected capacity change from 0 to 256 [ 162.892311][ T6010] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 162.900061][ T6010] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 162.902052][ T6010] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 162.905592][ T6010] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 162.906235][ T6010] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 162.918741][ T6010] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 162.921535][ T6010] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 162.925200][ T6010] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 162.961993][ T4834] IPVS: starting estimator thread 0... [ 162.970255][ T6178] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 162.970309][ T6178] tipc: Enabled bearer , priority 10 [ 162.970914][ T6179] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 162.980282][ T4401] 8021q: adding VLAN 0 to HW filter on device eth5 [ 162.995919][ T6010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.008103][ T6010] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.027120][ T3527] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.027172][ T3527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.028531][ T3527] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.028552][ T3527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.048059][ T6010] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 163.050377][ T6010] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 163.073198][ T50] Bluetooth: hci3: command tx timeout [ 163.086775][ T6180] IPVS: using max 60 ests per chain, 144000 per kthread [ 163.103257][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 163.116000][ T6179] overlayfs: conflicting lowerdir path [ 163.198529][ T6195] syz.4.290 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 163.368335][ T6195] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 163.371297][ T6195] EXT4-fs (loop4): Remounting filesystem read-only [ 163.371629][ T6195] EXT4-fs (loop4): 1 truncate cleaned up [ 163.372109][ T6195] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.373139][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 163.463186][ T6201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.292'. [ 163.467093][ T6201] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 163.467107][ T6201] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 163.533468][ T50] Bluetooth: hci2: command tx timeout [ 163.606987][ T6010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.739979][ T4401] 8021q: adding VLAN 0 to HW filter on device eth6 [ 163.745274][ T6010] veth0_vlan: entered promiscuous mode [ 163.747500][ T6010] veth1_vlan: entered promiscuous mode [ 163.767699][ T6010] veth0_macvtap: entered promiscuous mode [ 163.778233][ T6010] veth1_macvtap: entered promiscuous mode [ 163.803920][ T6010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.810318][ T6010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.874464][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.875259][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.875283][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.875298][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.899960][ T3527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.899991][ T3527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.900617][ T6195] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.904637][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 163.907876][ T6238] No control pipe specified [ 163.941801][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.941838][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.075753][ T4401] 8021q: adding VLAN 0 to HW filter on device eth7 [ 164.152559][ T6272] syz_tun: entered allmulticast mode [ 164.209686][ T6268] syz_tun: left allmulticast mode [ 164.428149][ T6299] netlink: 236 bytes leftover after parsing attributes in process `syz.5.302'. [ 164.736054][ T6329] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.0.314:6329 [ 164.759477][ T6336] netlink: 'syz.0.315': attribute type 10 has an invalid length. [ 164.785441][ T6336] macvlan1: entered promiscuous mode [ 164.791385][ T6336] netlink: 'syz.0.315': attribute type 10 has an invalid length. [ 164.791491][ T6336] netlink: 'syz.0.315': attribute type 10 has an invalid length. [ 164.791552][ T6336] netlink: 'syz.0.315': attribute type 10 has an invalid length. [ 164.791608][ T6336] netlink: 'syz.0.315': attribute type 10 has an invalid length. [ 164.791661][ T6336] netlink: 'syz.0.315': attribute type 10 has an invalid length. [ 164.791720][ T6336] netlink: 'syz.0.315': attribute type 10 has an invalid length. [ 164.791768][ T6336] netlink: 'syz.0.315': attribute type 10 has an invalid length. [ 164.791815][ T6336] netlink: 'syz.0.315': attribute type 10 has an invalid length. [ 164.791869][ T6336] netlink: 'syz.0.315': attribute type 10 has an invalid length. [ 164.984043][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 165.133258][ T50] Bluetooth: hci3: command tx timeout [ 165.304397][ T6353] netlink: 20 bytes leftover after parsing attributes in process `syz.0.318'. [ 165.326320][ T6356] set_capacity_and_notify: 2 callbacks suppressed [ 165.328298][ T6356] loop2: detected capacity change from 0 to 512 [ 165.331977][ T6356] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.322: inode has both inline data and extents flags [ 165.332030][ T6356] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 165.332386][ T6356] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.322: couldn't read orphan inode 15 (err -117) [ 165.332408][ T6356] loop2: lost filesystem error report for type 5 error -117 [ 165.333495][ T6356] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.355779][ T4745] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.431152][ T6377] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 165.475305][ T6377] udc dummy_udc.0: failed to start USB Gadget filesystem: -12 [ 165.479729][ T6377] gadgetfs gadget.0: probe with driver gadgetfs failed with error -12 [ 165.481971][ T6377] gadgetfs expected dummy_udc controller not usbip-vudc [ 165.484651][ T6377] udc usbip-vudc.0: failed to start USB Gadget filesystem: -19 [ 165.487021][ T6377] UDC core: USB Gadget filesystem: couldn't find an available UDC [ 165.614794][ T50] Bluetooth: hci2: command tx timeout [ 165.772092][ T6386] loop6: detected capacity change from 0 to 512 [ 165.867120][ T4357] usb 3-1: device descriptor read/8, error -110 [ 165.911023][ T6386] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.952408][ T6386] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 165.958255][ T6386] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 165.958300][ T6386] EXT4-fs (loop6): This should not happen!! Data will be lost [ 165.958300][ T6386] [ 165.959045][ T6386] EXT4-fs (loop6): Total free blocks count 0 [ 165.959064][ T6386] EXT4-fs (loop6): Free/Dirty block details [ 165.959075][ T6386] EXT4-fs (loop6): free_blocks=65280 [ 165.959090][ T6386] EXT4-fs (loop6): dirty_blocks=33 [ 165.959098][ T6386] EXT4-fs (loop6): Block reservation details [ 165.959105][ T6386] EXT4-fs (loop6): i_reserved_data_blocks=33 [ 165.971667][ T6386] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 165.997713][ T6010] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 166.023134][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 166.059401][ T6401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.059588][ T6401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.115769][ T6405] Injecting memory failure for pfn 0x13d58a at process virtual address 0x20001000 [ 166.135702][ T6405] Memory failure: 0x13d58a: recovery action for clean LRU page: Recovered [ 166.135780][ T6405] Injecting memory failure for pfn 0x11f3a7 at process virtual address 0x20002000 [ 166.140095][ T6405] Memory failure: 0x11f3a7: recovery action for clean LRU page: Recovered [ 166.140278][ T6405] Injecting memory failure for pfn 0x136fbe at process virtual address 0x20003000 [ 166.145135][ T6405] Memory failure: 0x136fbe: recovery action for clean LRU page: Recovered [ 166.171916][ T6407] loop5: detected capacity change from 0 to 4096 [ 166.178811][ T6407] EXT4-fs (loop5): unsupported descriptor size 320 [ 166.265721][ T4357] usb usb3-port1: attempt power cycle [ 166.368636][ T6416] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 166.378709][ T6420] loop5: detected capacity change from 0 to 1024 [ 166.386421][ T6420] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 166.392645][ T6420] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 2: comm syz.5.338: lblock 2 mapped to illegal pblock 2 (length 1) [ 166.392684][ T6420] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 166.393460][ C0] EXT4-fs (loop5): initial error at time 421: ext4_map_blocks:791: inode 3: block 2 [ 166.393487][ C0] EXT4-fs (loop5): last error at time 421: ext4_map_blocks:791: inode 3: block 2 [ 166.403672][ T6420] EXT4-fs (loop5): Remounting filesystem read-only [ 166.403710][ T6420] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 166.403749][ T6420] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 166.403816][ T6420] EXT4-fs (loop5): 1 orphan inode deleted [ 166.404314][ T6420] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.416084][ T6420] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.535708][ T6426] loop6: detected capacity change from 0 to 1024 [ 166.810480][ T6426] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.829852][ T6431] usb usb8: usbfs: process 6431 (syz.2.342) did not claim interface 1 before use [ 166.835613][ T6010] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.839044][ T6431] usb usb8: usbfs: process 6431 (syz.2.342) did not claim interface 1 before use [ 166.991431][ T6445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.003733][ T4357] usb usb3-port1: unable to enumerate USB device [ 167.030785][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.344'. [ 167.053325][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 167.059819][ T6451] Injecting memory failure for pfn 0x139b60 at process virtual address 0x20001000 [ 167.066227][ T6451] Memory failure: 0x139b60: recovery action for clean LRU page: Recovered [ 167.068210][ T6451] Injecting memory failure for pfn 0x121933 at process virtual address 0x20002000 [ 167.068366][ T6451] Memory failure: 0x121933: recovery action for clean LRU page: Recovered [ 167.068416][ T6451] Injecting memory failure for pfn 0x1219bc at process virtual address 0x20003000 [ 167.068487][ T6451] Memory failure: 0x1219bc: recovery action for clean LRU page: Recovered [ 167.214709][ T50] Bluetooth: hci3: command tx timeout [ 167.271658][ T6456] netlink: 209592 bytes leftover after parsing attributes in process `syz.5.349'. [ 167.354636][ T6460] loop5: detected capacity change from 0 to 8192 [ 167.390905][ T6460] loop5: RDSK (0) [ 167.390905][ T6460] AHDI p2 p3 p4 [ 167.391047][ T6460] loop5: p2 start 67108614 is beyond EOD, truncated [ 167.391059][ T6460] loop5: p3 size 55780 extends beyond EOD, truncated [ 167.480562][ T4727] udevd[4727]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 167.578825][ T6479] fuse: Unknown parameter 'us' [ 167.582048][ T6480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.356'. [ 167.627487][ T6483] input: syz0 as /devices/virtual/input/input4 [ 167.693904][ T50] Bluetooth: hci2: command tx timeout [ 167.719593][ T6485] loop0: detected capacity change from 0 to 8192 [ 167.719945][ T6485] vfat: Unknown parameter '' [ 167.768424][ T6491] Injecting memory failure for pfn 0x12283f at process virtual address 0x20000000 [ 167.776811][ T6491] Memory failure: 0x12283f: Sending SIGBUS to syz.6.361:6491 due to hardware memory corruption [ 167.776871][ T6491] Memory failure: 0x12283f: recovery action for dirty LRU page: Recovered [ 167.776894][ T6491] Injecting memory failure for pfn 0x219070 at process virtual address 0x20001000 [ 167.776917][ T6491] Memory failure: 0x219070: unhandlable page. [ 167.776923][ T6491] Memory failure: 0x219070: recovery action for get hwpoison page: Ignored [ 167.806742][ T6496] syzkaller0: entered promiscuous mode [ 167.808005][ T6496] syzkaller0: entered allmulticast mode [ 168.093272][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 168.151761][ T6519] netlink: 24 bytes leftover after parsing attributes in process `syz.6.371'. [ 168.259149][ T6528] loop6: detected capacity change from 0 to 256 [ 168.722057][ C0] vcan0: j1939_tp_rxtimer: 0x00000000b972fe29: rx timeout, send abort [ 168.733612][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000b972fe29: 0x30100: (3) A timeout occurred and this is the connection abort to close the session. [ 169.133182][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 169.241225][ T6538] typec_fusb302 0-0022: I2C/SMBus block functionality not supported! [ 169.248422][ T6538] i2c i2c-0: new_device: Instantiated device typec_fusb302 at 0x22 [ 169.283854][ T6537] tc action pedit 'at' offset -4096 out of bounds [ 169.283896][ T6537] tc action pedit 'at' offset -4096 out of bounds [ 169.283921][ T6537] tc action pedit 'at' offset -4096 out of bounds [ 169.283933][ T6537] tc action pedit 'at' offset -4096 out of bounds [ 169.283943][ T6537] tc action pedit 'at' offset -4096 out of bounds [ 169.283953][ T6537] tc action pedit 'at' offset -4096 out of bounds [ 169.283963][ T6537] tc action pedit 'at' offset -4096 out of bounds [ 169.283972][ T6537] tc action pedit 'at' offset -4096 out of bounds [ 169.283980][ T6537] tc action pedit 'at' offset -4096 out of bounds [ 169.283989][ T6537] tc action pedit 'at' offset -4096 out of bounds [ 169.284025][ T6537] TC_ACT_REPEAT abuse ? [ 169.295953][ T50] Bluetooth: hci3: command tx timeout [ 169.306514][ T6542] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 169.332185][ T6546] loop0: detected capacity change from 0 to 256 [ 169.335633][ T6546] vfat: Unknown parameter 'shortnae' [ 169.350410][ T6550] loop6: detected capacity change from 0 to 256 [ 169.368769][ T6550] FAT-fs (loop6): data area starts beyond volume (274 > 64) [ 169.368804][ T6550] FAT-fs (loop6): Can't find a valid FAT filesystem [ 169.494562][ T6550] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.502682][ T6550] EXT4-fs (loop6): shut down requested (1) [ 169.504976][ T6550] overlayfs: failed to get origin (-5) [ 169.841960][ T6561] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 169.842007][ T6561] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 169.842028][ T6561] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.380: Failed to acquire dquot type 0 [ 169.842047][ T6561] loop2: lost filesystem error report for type 5 error -5 [ 169.844255][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 169.844270][ C1] EXT4-fs (loop2): initial error at time 424: ext4_acquire_dquot:7041 [ 169.844283][ C1] EXT4-fs (loop2): last error at time 424: ext4_acquire_dquot:7041 [ 169.860860][ T6561] EXT4-fs (loop2): 1 truncate cleaned up [ 169.897860][ T6561] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.934212][ T6561] 9p: Bad value for 'rfdno' [ 170.043820][ T6582] overlay: Unknown parameter 'appraise' [ 170.045719][ T6582] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 170.045821][ T6582] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 170.045832][ T6582] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.380: Failed to acquire dquot type 0 [ 170.173148][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 170.431591][ T6010] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.454051][ T6593] set_capacity_and_notify: 2 callbacks suppressed [ 170.454095][ T6593] loop0: detected capacity change from 0 to 8192 [ 170.514292][ T39] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.598755][ T4739] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 170.603265][ T4739] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 170.606995][ T4739] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 170.610595][ T4739] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 170.612248][ T4739] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 170.614667][ T6595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.385'. [ 170.658109][ T39] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.762491][ T39] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.783402][ T6633] Soft offlining pfn 0x219070 at process virtual address 0x20ffc000 [ 170.783435][ T6633] Soft offline: 0x219070: page already poisoned [ 170.783467][ T6633] Soft offlining pfn 0x219070 at process virtual address 0x20ffd000 [ 170.783478][ T6633] Soft offline: 0x219070: page already poisoned [ 170.783495][ T6633] Soft offlining pfn 0x219070 at process virtual address 0x20ffe000 [ 170.783505][ T6633] Soft offline: 0x219070: page already poisoned [ 170.810643][ T6630] syz.5.390 (6630) used obsolete PPPIOCDETACH ioctl [ 170.857710][ T39] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.024302][ T39] bridge_slave_1: left allmulticast mode [ 171.024339][ T39] bridge_slave_1: left promiscuous mode [ 171.024440][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.029798][ T39] bridge_slave_0: left allmulticast mode [ 171.031551][ T39] bridge_slave_0: left promiscuous mode [ 171.031642][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.110257][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.115529][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.134748][ T39] bond0 (unregistering): Released all slaves [ 171.213277][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 171.245905][ T6613] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.246034][ T6613] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.246161][ T6613] bridge_slave_0: entered allmulticast mode [ 171.250998][ T6613] bridge_slave_0: entered promiscuous mode [ 171.254111][ T6613] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.254156][ T6613] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.254217][ T6613] bridge_slave_1: entered allmulticast mode [ 171.254638][ T6613] bridge_slave_1: entered promiscuous mode [ 171.261475][ T6613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.262417][ T6613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.278853][ T6613] team0: Port device team_slave_0 added [ 171.281082][ T6613] team0: Port device team_slave_1 added [ 171.298579][ T6613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.300473][ T6613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.307576][ T6613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.310652][ T6613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.312031][ T6613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.313159][ T6613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.386942][ T4401] 8021q: adding VLAN 0 to HW filter on device eth8 [ 171.395584][ T6669] loop0: detected capacity change from 0 to 4096 [ 171.396527][ T6669] EXT4-fs (loop0): Test dummy encryption mode enabled [ 171.399314][ T6613] hsr_slave_0: entered promiscuous mode [ 171.399640][ T6613] hsr_slave_1: entered promiscuous mode [ 171.399834][ T6613] debugfs: 'hsr0' already exists in 'hsr' [ 171.399844][ T6613] Cannot create hsr debugfs directory [ 171.410365][ T6669] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.667124][ T4734] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.912102][ T6690] loop4: detected capacity change from 0 to 256 [ 171.934639][ T6690] vfat: Unknown parameter './file0' [ 171.959712][ T6690] loop4: detected capacity change from 0 to 256 [ 171.960043][ T6690] vfat: Unknown parameter './file0' [ 171.972197][ T6690] loop4: detected capacity change from 0 to 256 [ 171.973839][ T39] hsr_slave_0: left promiscuous mode [ 171.975037][ T6690] vfat: Unknown parameter './file0' [ 171.979193][ T39] hsr_slave_1: left promiscuous mode [ 171.979587][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.979600][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.985817][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.985858][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.986720][ T6690] loop4: detected capacity change from 0 to 256 [ 171.987108][ T6690] vfat: Unknown parameter './file0' [ 171.997681][ T6690] loop4: detected capacity change from 0 to 256 [ 171.997963][ T6690] vfat: Unknown parameter './file0' [ 172.002807][ T39] veth1_macvtap: left promiscuous mode [ 172.002868][ T39] veth0_macvtap: left promiscuous mode [ 172.002931][ T39] veth1_vlan: left promiscuous mode [ 172.002972][ T39] veth0_vlan: left promiscuous mode [ 172.010310][ T6690] loop4: detected capacity change from 0 to 256 [ 172.010591][ T6690] vfat: Unknown parameter './file0' [ 172.021103][ T6690] loop4: detected capacity change from 0 to 256 [ 172.021384][ T6690] vfat: Unknown parameter './file0' [ 172.086314][ T6690] loop4: detected capacity change from 0 to 256 [ 172.086672][ T6690] vfat: Unknown parameter './file0' [ 172.100747][ T6690] vfat: Unknown parameter './file0' [ 172.110800][ T6690] vfat: Unknown parameter './file0' [ 172.146604][ T6690] vfat: Unknown parameter './file0' [ 172.159690][ T6690] vfat: Unknown parameter './file0' [ 172.209243][ T6690] vfat: Unknown parameter './file0' [ 172.219303][ T6690] vfat: Unknown parameter './file0' [ 172.230042][ T6690] vfat: Unknown parameter './file0' [ 172.253111][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 172.377723][ T39] team0 (unregistering): Port device team_slave_1 removed [ 172.387807][ T39] team0 (unregistering): Port device team_slave_0 removed [ 172.655229][ T4739] Bluetooth: hci3: command tx timeout [ 172.749374][ T6613] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 172.758637][ T6613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 172.767880][ T6613] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 172.783706][ T6613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 172.788769][ T6613] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 172.803599][ T6613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 172.814480][ T6613] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 172.822269][ T6613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 172.881305][ T4745] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.923954][ T6729] netlink: 52 bytes leftover after parsing attributes in process `syz.5.402'. [ 172.924287][ T6729] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 173.012371][ T6734] scsi_nl_rcv_msg: discarding partial skb [ 173.062101][ T6613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.105657][ T6613] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.119434][ T6145] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.119480][ T6145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.140787][ T6145] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.140838][ T6145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.212789][ T6613] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 173.233735][ T6613] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.254803][ T6748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.403'. [ 173.291272][ T6751] binder: 6750:6751 BC_FREE_BUFFER no match for buffer at offset 0 [ 173.291761][ T6748] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.294027][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 173.305496][ T6751] binder: BINDER_SET_CONTEXT_MGR already set [ 173.305525][ T6751] binder: 6750:6751 ioctl 4018620d 20004a80 returned -16 [ 173.305664][ T6751] binder: 6750:6751 got transaction to invalid handle, 1 [ 173.305680][ T6751] binder: 6750:6751 cannot find target node [ 173.305698][ T6751] binder: 6750:6751 transaction call to 0:0 failed 23/29201/-22, code 0 size 0-24 line 3252 [ 173.343183][ T6748] 8021q: adding VLAN 0 to HW filter on device bond2 [ 173.344091][ T6748] bond1: (slave bond2): Enslaving as an active interface with an up link [ 173.414886][ T6748] bond1 (unregistering): (slave bond2): Releasing backup interface [ 173.494266][ T6748] bond1 (unregistering): Released all slaves [ 173.562194][ T6764] netlink: 14 bytes leftover after parsing attributes in process `syz.5.408'. [ 173.910746][ T6613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.023912][ T4401] 8021q: adding VLAN 0 to HW filter on device eth9 [ 174.259330][ T4401] 8021q: adding VLAN 0 to HW filter on device eth10 [ 174.277192][ T1502] binder: undelivered TRANSACTION_ERROR: 29201 [ 174.333115][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 174.390608][ T6784] IPv6: NLM_F_CREATE should be specified when creating new route [ 174.420472][ T6613] veth0_vlan: entered promiscuous mode [ 174.440319][ T6613] veth1_vlan: entered promiscuous mode [ 174.480937][ T6613] veth0_macvtap: entered promiscuous mode [ 174.499631][ T6613] veth1_macvtap: entered promiscuous mode [ 174.521962][ T6613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.532998][ T6613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.659215][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.678383][ T6844] erspan1: entered promiscuous mode [ 174.682818][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.690707][ T6844] erspan1: entered allmulticast mode [ 174.696016][ T1219] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.696615][ T3527] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.703180][ T39] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.703222][ T39] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.726560][ T1455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.726593][ T1455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.734114][ T4739] Bluetooth: hci3: command tx timeout [ 174.792994][ T6853] netlink: 14 bytes leftover after parsing attributes in process `syz.5.416'. [ 174.945948][ T6862] EXT4-fs: Ignoring removed oldalloc option [ 174.947148][ T6862] EXT4-fs: Ignoring removed bh option [ 174.948469][ T6850] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.961686][ T4401] 8021q: adding VLAN 0 to HW filter on device eth11 [ 174.971369][ T6862] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 175.022902][ T4745] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 175.095374][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.423'. [ 175.159791][ T4735] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.207541][ T6888] wireguard0: entered allmulticast mode [ 175.237228][ T6892] overlayfs: failed to resolve './bus': -2 [ 175.383124][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 175.383150][ T4357] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 175.452971][ T6915] ext4: Bad value for 'min_batch_time' [ 175.513137][ T4357] usb 1-1: device descriptor read/64, error -71 [ 176.123235][ T4357] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 176.253160][ T4357] usb 1-1: device descriptor read/64, error -71 [ 176.304855][ T6956] netlink: 80 bytes leftover after parsing attributes in process `syz.2.435'. [ 176.359013][ T6962] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 176.360847][ T6962] overlayfs: failed to set xattr on upper [ 176.362068][ T6962] overlayfs: ...falling back to redirect_dir=nofollow. [ 176.363875][ T4357] usb usb1-port1: attempt power cycle [ 176.366376][ T6962] overlayfs: ...falling back to uuid=null. [ 176.401654][ T6965] netlink: 24 bytes leftover after parsing attributes in process `syz.4.438'. [ 176.413245][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 176.624057][ T6989] set_capacity_and_notify: 36 callbacks suppressed [ 176.628266][ T6989] loop7: detected capacity change from 0 to 256 [ 176.628687][ T6989] vfat: Unknown parameter 'cod' [ 176.707728][ T4357] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 176.729631][ T4357] usb 1-1: device descriptor read/8, error -71 [ 176.813187][ T4739] Bluetooth: hci3: command tx timeout [ 176.963143][ T4357] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 176.986335][ T4357] usb 1-1: device descriptor read/8, error -71 [ 177.056819][ T7005] loop4: detected capacity change from 0 to 2048 [ 177.078539][ T7005] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.095379][ T4357] usb usb1-port1: unable to enumerate USB device [ 177.109058][ T4735] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.229123][ T7015] loop5: detected capacity change from 0 to 1024 [ 177.232013][ T7015] EXT4-fs: Ignoring removed bh option [ 177.252086][ T7015] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 177.453300][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 177.502814][ T7041] loop4: detected capacity change from 0 to 256 [ 177.569705][ T7041] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152) [ 177.569749][ T7041] FAT-fs (loop4): Filesystem has been set read-only [ 177.592405][ T7046] loop2: detected capacity change from 0 to 512 [ 177.617360][ T7046] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 177.617509][ T7046] EXT4-fs (loop2): orphan cleanup on readonly fs [ 177.622381][ T7046] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 177.622457][ T7046] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 177.622477][ T7046] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.450: Failed to acquire dquot type 1 [ 177.622499][ T7046] loop2: lost filesystem error report for type 5 error -5 [ 177.623064][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 177.623081][ C0] EXT4-fs (loop2): initial error at time 432: ext4_acquire_dquot:7041 [ 177.623107][ C0] EXT4-fs (loop2): last error at time 432: ext4_acquire_dquot:7041 [ 177.630324][ T7046] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.450: bg 0: block 40: padding at end of block bitmap is not set [ 177.630344][ T7046] loop2: lost filesystem error report for type 5 error -117 [ 177.633208][ T7046] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 177.633228][ T7046] loop2: lost filesystem error report for type 5 error -117 [ 177.633739][ T7046] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #16: comm syz.2.450: data will be lost [ 177.633881][ T7046] EXT4-fs (loop2): 1 truncate cleaned up [ 177.635642][ T7046] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 177.660997][ T5863] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 177.667154][ T4745] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.739911][ T7063] netlink: 4 bytes leftover after parsing attributes in process `syz.5.452'. [ 177.741358][ T7061] loop4: detected capacity change from 0 to 512 [ 177.751286][ T7061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.454'. [ 178.155516][ T7104] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 178.319334][ T1092] IPVS: starting estimator thread 0... [ 178.413448][ T7105] IPVS: using max 60 ests per chain, 144000 per kthread [ 178.503229][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 178.577579][ T4848] kernel write not supported for file /input/mice (pid: 4848 comm: kworker/0:5) [ 178.590023][ T7110] loop7: detected capacity change from 0 to 4096 [ 178.611728][ T7110] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 178.611773][ T7110] EXT4-fs (loop7): Test dummy encryption mode enabled [ 178.611802][ T7110] EXT4-fs (loop7): first meta block group too large: 184549376 (group descriptor block count 1) [ 178.864853][ T7126] netlink: 65039 bytes leftover after parsing attributes in process `syz.7.466'. [ 178.894426][ T4739] Bluetooth: hci3: command tx timeout [ 178.899150][ T7140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.467'. [ 178.899183][ T7140] netlink: 24 bytes leftover after parsing attributes in process `syz.0.467'. [ 178.917553][ T7132] ieee802154 phy0 wpan0: encryption failed: -22 [ 178.918404][ T7138] loop7: detected capacity change from 0 to 2048 [ 178.921327][ T7132] netlink: 56 bytes leftover after parsing attributes in process `syz.5.463'. [ 178.957441][ T7149] loop5: detected capacity change from 0 to 256 [ 178.962492][ T7149] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 178.967083][ T7149] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779264) [ 178.967120][ T7149] FAT-fs (loop5): Filesystem has been set read-only [ 179.035644][ T7156] netlink: 40 bytes leftover after parsing attributes in process `syz.7.473'. [ 179.040569][ T7153] loop2: detected capacity change from 0 to 1024 [ 179.040975][ T7153] EXT4-fs: Ignoring removed nomblk_io_submit option [ 179.070031][ T7153] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.117381][ T7172] 9p: Bad value for 'rfdno' [ 179.118252][ T7168] syzkaller0: entered allmulticast mode [ 179.151423][ T26] IPVS: starting estimator thread 0... [ 179.155926][ T7175] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 179.164950][ T7175] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:375: inode #2: comm syz.7.478: No space for directory leaf checksum. Please run e2fsck -D. [ 179.164983][ T7175] EXT4-fs error (device loop7): htree_dirblock_to_tree:1051: inode #2: comm syz.7.478: Directory block failed checksum [ 179.171141][ T7175] validate_nla: 25 callbacks suppressed [ 179.171179][ T7175] netlink: 'syz.7.478': attribute type 29 has an invalid length. [ 179.171415][ T7175] netlink: 'syz.7.478': attribute type 29 has an invalid length. [ 179.241718][ T4745] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.248335][ T6613] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 179.255883][ T7178] IPVS: using max 59 ests per chain, 141600 per kthread [ 179.265274][ T7182] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 179.312496][ T7188] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 179.317367][ T7188] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 179.321645][ T7182] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.330643][ T7188] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 179.330781][ T7188] EXT4-fs (loop2): orphan cleanup on readonly fs [ 179.338501][ T7188] EXT4-fs error (device loop2): ext4_read_inode_bitmap:169: comm syz.2.480: Inode bitmap for bg 0 marked uninitialized [ 179.338536][ T7188] loop2: lost filesystem error report for type 5 error -117 [ 179.341659][ T7188] EXT4-fs (loop2): Remounting filesystem read-only [ 179.345814][ T7188] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 179.373820][ T7188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.480'. [ 179.400897][ T7182] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 179.419357][ T4745] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.448724][ T4734] VFS: Lookup of 'ÿÿ' in ext4 loop0 would have caused loop [ 179.449052][ T4734] VFS: Lookup of 'ÿÿ' in ext4 loop0 would have caused loop [ 179.489675][ T7194] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.542830][ T7202] BUG: spinlock bad magic on CPU#1, syz.2.485/7202 [ 179.542850][ T7202] lock: 0xffff0000c707c800, .magic: 00000000, .owner: /-1, .owner_cpu: -2065442480 [ 179.542872][ T7202] CPU: 1 UID: 0 PID: 7202 Comm: syz.2.485 Not tainted syzkaller #0 PREEMPT [ 179.542882][ T7202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 179.542888][ T7202] Call trace: [ 179.542891][ T7202] show_stack+0x2c/0x3c (C) [ 179.542912][ T7202] __dump_stack+0x30/0x40 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 179.542927][ T7202] dump_stack_lvl+0xd8/0x12c [ 179.542938][ T7202] dump_stack+0x1c/0x28 [ 179.542950][ T7202] spin_dump+0x108/0x1dc [ 179.542963][ T7202] do_raw_spin_lock+0x1d4/0x2d0 [ 179.542974][ T7202] _raw_spin_lock_irq+0x60/0x70 [ 179.542986][ T7202] gadget_dev_open+0x50/0x1c4 [ 179.542997][ T7202] do_dentry_open+0x5c4/0xfc0 [ 179.543010][ T7202] vfs_open+0x44/0x2dc [ 179.543021][ T7202] path_openat+0x21fc/0x2a60 [ 179.543034][ T7202] do_file_open+0x1c8/0x2e8 [ 179.543044][ T7202] do_sys_openat2+0x114/0x1e8 [ 179.543056][ T7202] do_sys_open+0xb0/0xe0 [ 179.543067][ T7202] __arm64_sys_openat+0xa8/0xc4 [ 179.543079][ T7202] invoke_syscall+0x98/0x244 [ 179.543091][ T7202] el0_svc_common+0xec/0x23c [ 179.543102][ T7202] do_el0_svc+0x4c/0x5c [ 179.543114][ T7202] el0_svc+0x64/0x260 [ 179.543124][ T7202] el0t_64_sync_handler+0x44/0x104 [ 179.543134][ T7202] el0t_64_sync+0x198/0x19c [ 179.543314][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 179.623541][ T6613] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1 ** replaying previous printk message ** [ 179.696762][ T5014] ------------[ cut here ]------------ [ 179.696782][ T5014] refcount_t: underflow; use-after-free. [ 179.696901][ T5014] WARNING: lib/refcount.c:28 at refcount_warn_saturate+0x154/0x1f8, CPU#0: syz.2.24/5014 [ 179.701267][ T5014] Modules linked in: [ 179.701916][ T5014] CPU: 0 UID: 0 PID: 5014 Comm: syz.2.24 Not tainted syzkaller #0 PREEMPT [ 179.703362][ T5014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 179.705231][ T5014] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 179.706585][ T5014] pc : refcount_warn_saturate+0x154/0x1f8 [ 179.707619][ T5014] lr : refcount_warn_saturate+0x154/0x1f8 [ 179.708620][ T5014] sp : ffff8000982876c0 [ 179.709350][ T5014] x29: ffff8000982876c0 x28: 00007dfea244a488 x27: 0000000000000001 [ 179.710771][ T5014] x26: ffff800088b3b6a0 x25: 1fffe00019d18aab x24: 0000000000000003 [ 179.712219][ T5014] x23: ffff0000ce8c5558 x22: dfff800000000000 x21: 0000000000000000 [ 179.713637][ T5014] x20: ffff0000c707c840 x19: ffff80008a19d000 x18: 1fffe00034bb7428 [ 179.715066][ T5014] x17: 0000000000000003 x16: ffff800088b37000 x15: ffff80008030624c [ 179.716501][ T5014] x14: ffff800080304128 x13: 0000000000000001 x12: 0000000000000000 [ 179.717919][ T5014] x11: 0000000000000000 x10: 0000000000000002 x9 : 3367d117cb79bf00 [ 179.719634][ T5014] x8 : 3367d117cb79bf00 x7 : 0000000000000000 x6 : ffff80008048c60c [ 179.721363][ T5014] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f6830 [ 179.723062][ T5014] x2 : 0000000100000000 x1 : ffff0000cca7ba80 x0 : 0000000000000000 [ 179.724560][ T5014] Call trace: [ 179.725175][ T5014] refcount_warn_saturate+0x154/0x1f8 (P) [ 179.726236][ T5014] put_dev+0xcc/0xf8 [ 179.727000][ T5014] gadgetfs_kill_sb+0x48/0x80 [ 179.727927][ T5014] deactivate_locked_super+0xcc/0x148 [ 179.728984][ T5014] deactivate_super+0xd8/0xf8 [ 179.729827][ T5014] cleanup_mnt+0x318/0x3a8 [ 179.730619][ T5014] __cleanup_mnt+0x20/0x30 [ 179.731369][ T5014] task_work_run+0x1cc/0x25c [ 179.732180][ T5014] do_exit+0x58c/0x1a74 [ 179.732885][ T5014] do_group_exit+0x198/0x238 [ 179.733669][ T5014] get_signal+0xfb0/0x1094 [ 179.734434][ T5014] arch_do_signal_or_restart+0x288/0x444c [ 179.735420][ T5014] exit_to_user_mode_loop+0x70/0x17c [ 179.736353][ T5014] el0_svc+0x18c/0x260 [ 179.737105][ T5014] el0t_64_sync_handler+0x44/0x104 [ 179.738047][ T5014] el0t_64_sync+0x198/0x19c [ 179.738874][ T5014] irq event stamp: 76 [ 179.739602][ T5014] hardirqs last enabled at (75): [] _raw_spin_unlock_irq+0x30/0x80 [ 179.741280][ T5014] hardirqs last disabled at (76): [] __schedule+0x2f8/0x2d80 [ 179.742882][ T5014] softirqs last enabled at (8): [] fpsimd_restore_current_state+0x39c/0x9c8 [ 179.744678][ T5014] softirqs last disabled at (6): [] fpsimd_restore_current_state+0x44/0x9c8 [ 179.746541][ T5014] ---[ end trace 0000000000000000 ]--- [ 179.866865][ T4734] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.892012][ T39] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.014670][ T39] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.096701][ T39] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.175689][ T39] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.295450][ T39] bridge_slave_1: left allmulticast mode [ 180.295480][ T39] bridge_slave_1: left promiscuous mode [ 180.295561][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.298140][ T39] bridge_slave_0: left allmulticast mode [ 180.298153][ T39] bridge_slave_0: left promiscuous mode [ 180.298206][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.346375][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.374910][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.414012][ T39] bond0 (unregistering): Released all slaves [ 180.458639][ T39] IPVS: stopping backup sync thread 5925 ... [ 180.516815][ T4401] 8021q: adding VLAN 0 to HW filter on device eth12 [ 180.583195][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 180.633152][ T4401] 8021q: adding VLAN 0 to HW filter on device eth13 [ 180.713652][ T39] hsr_slave_0: left promiscuous mode [ 180.714924][ T39] hsr_slave_1: left promiscuous mode [ 180.716166][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.717615][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.719690][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.721138][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.729301][ T39] veth1_macvtap: left promiscuous mode [ 180.730437][ T39] veth0_macvtap: left promiscuous mode [ 180.731537][ T39] veth1_vlan: left promiscuous mode [ 180.732577][ T39] veth0_vlan: left promiscuous mode [ 180.805680][ T39] team0 (unregistering): Port device team_slave_1 removed [ 180.810100][ T39] team0 (unregistering): Port device team_slave_0 removed [ 180.839839][ T4401] 8021q: adding VLAN 0 to HW filter on device eth14 [ 180.949691][ T4401] 8021q: adding VLAN 0 to HW filter on device eth15 [ 181.093932][ T39] IPVS: stop unused estimator thread 0... [ 181.145298][ T39] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.145335][ T39] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.215882][ T39] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.215918][ T39] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.275281][ T39] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.275316][ T39] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.364758][ T39] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.364794][ T39] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.474980][ T39] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.526213][ T39] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.555259][ T4401] 8021q: adding VLAN 0 to HW filter on device eth16 [ 181.613208][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 181.616810][ T39] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.662564][ T4401] 8021q: adding VLAN 0 to HW filter on device eth17 [ 181.674824][ T39] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.766068][ T4401] 8021q: adding VLAN 0 to HW filter on device eth18 [ 181.774151][ T39] bridge_slave_1: left allmulticast mode [ 181.774183][ T39] bridge_slave_1: left promiscuous mode [ 181.774265][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.777943][ T39] bridge_slave_0: left allmulticast mode [ 181.777964][ T39] bridge_slave_0: left promiscuous mode [ 181.778025][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.782199][ T39] bridge_slave_1: left allmulticast mode [ 181.782223][ T39] bridge_slave_1: left promiscuous mode [ 181.782296][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.784428][ T39] bridge_slave_0: left allmulticast mode [ 181.784439][ T39] bridge_slave_0: left promiscuous mode [ 181.784487][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.855449][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.894398][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.914356][ T39] bond0 (unregistering): Released all slaves [ 181.917007][ T39] bond1 (unregistering): Released all slaves [ 181.936548][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.944112][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.993863][ T39] bond0 (unregistering): Released all slaves [ 182.085444][ T4401] 8021q: adding VLAN 0 to HW filter on device eth19 [ 182.182031][ T4401] 8021q: adding VLAN 0 to HW filter on device eth20 [ 182.272868][ T4401] 8021q: adding VLAN 0 to HW filter on device eth23 [ 182.378083][ T4401] 8021q: adding VLAN 0 to HW filter on device eth21 [ 182.469506][ T4401] 8021q: adding VLAN 0 to HW filter on device eth22 [ 187.373661][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.373703][ T1595] ieee802154 phy1 wpan1: encryption failed: -22