last executing test programs: 55.883813653s ago: executing program 0 (id=27): openat(0xffffffffffffff9c, &(0x7f0000002400)='.\x00', 0x0, 0xa0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0xb}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 55.802089593s ago: executing program 0 (id=28): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b006cff8570768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000056, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@inlinecrypt}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") (async) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000056, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@inlinecrypt}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_open_dev$video(&(0x7f0000000040), 0x400, 0x0) (async) r3 = syz_open_dev$video(&(0x7f0000000040), 0x400, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r3, 0xc0485630, &(0x7f00000001c0)={0x80, "0661631b98efeedc94741299bfcfcf4d316fc2a59e5887634bd010c15554a521", 0x2, 0x6, 0x2, 0x400, 0x8}) ioctl$VIDIOC_S_FMT(r3, 0xc0d05640, &(0x7f0000000340)={0x9, @raw_data="b0dad05d1b7a341f0cb07a8be68ca1497877d15072b71fdb05b3fa3bb4306192182b3bde6ac1da56fff68224252f66dcc70ac0c022bf50e5df3f7eacbb87513bf7c4d76f2c5a99f7a6afd66740ebcf595a2b81d74d76523a18e0c6d3452bbfe9eb4027bea4e33fdb142b313a197ca0f7105c54efcd79845bf25761ad57a290cf0f40a3cc2a937bd59088a9a1fa791a5f9369424b6eed136a80ee6fa35f40ba6bcfd7e9fd3324ced8b5f025f363c66bd26426fd954ec1a3b297626aa311770fcc7ff10eb8acf65cdc"}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCGETS(r4, 0x5401, 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r6, 0x205, 0xfffffffc, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x48, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x4, 0x0, "7d91b3ccaf4c63521df8f969a9a3ef8377d86e2c440fb055", "8fc99fa615e832d5f00ce4a5807ebb53fbfc8fbe4761a7cfe44dcf957dbdc946"}}}}}}}, 0x0) (async) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x48, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x4, 0x0, "7d91b3ccaf4c63521df8f969a9a3ef8377d86e2c440fb055", "8fc99fa615e832d5f00ce4a5807ebb53fbfc8fbe4761a7cfe44dcf957dbdc946"}}}}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x200400c0) 55.518301975s ago: executing program 0 (id=30): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x5) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000640)=ANY=[@ANYRESHEX=r0, @ANYRES16=r4, @ANYRES32=r2, @ANYRES32=r5, @ANYBLOB="d5063300800000ffffffffffffff080211000001", @ANYRES64=0x0, @ANYRESHEX=r5, @ANYRESHEX=r2], 0x6f4}, 0x1, 0x0, 0x0, 0x4044800}, 0x4000004) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') lseek(r7, 0x1, 0x1) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000000440)=[{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000001100)="0dda2dfa03009ffadfa4bfb48c76fb296526ae98655ee4c429d1f245af4d9bcc0b787eb0619e69f27ab98c3754b47c0b61", 0x31}], 0x1, &(0x7f0000000b00)=[@assoc={0x10, 0x117, 0x4, 0x1a}], 0x10, 0x10}], 0x1, 0x0) getdents64(r7, 0xffffffffffffffff, 0x43) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYRESHEX=r10, @ANYRES16=r10, @ANYRESOCT=0x0, @ANYRES32=r11, @ANYBLOB="24002f653d303e48000000013ab37fd72d748f840000000000000000cbf0d98800ffffff"], 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) madvise(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x64) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYRES32=r7, @ANYRESOCT=r10, @ANYBLOB="00002bbd7000fedb00552b0000000800539f", @ANYRESOCT=r11, @ANYRES32=r9, @ANYRESDEC, @ANYBLOB="0c0005000201aaaaaaaaaaaa08000200", @ANYRESDEC=r1, @ANYBLOB, @ANYRES32, @ANYRESDEC=r6], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x800) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES8=r10], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24040840) 54.861912299s ago: executing program 0 (id=42): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x400040) ioctl$EVIOCSABS20(r0, 0x401845e0, 0xffffffffffffffff) (async) ioctl$EVIOCSABS20(r0, 0x401845e0, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x4, 0x1]) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000080)=[@timestamp, @mss={0x2, 0x9}, @window={0x3, 0x2, 0x8}, @timestamp], 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000080)=[@timestamp, @mss={0x2, 0x9}, @window={0x3, 0x2, 0x8}, @timestamp], 0x4) mremap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1000, 0x6, &(0x7f0000ff3000/0x1000)=nil) (async) mremap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1000, 0x6, &(0x7f0000ff3000/0x1000)=nil) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000140)={0x2, 0x73, &(0x7f00000000c0)="d45aa7319ce36a8f9b5eb14cf792611f552ff4e373f10b1a7571861d086f91260e6b9f34c7f613b671fe85bca1b27da74717888ef7e410c2e740d47dfad59396fe5c208f5d1eeec87db83ea8ea98d6a85a01014214bcbf0a5b3965c709d48913abb8f74ac13fb14bc9c9d2fd31d8f2b5f7fe8b"}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) ioctl$XFS_IOC_FSGEOMETRY_V4(r2, 0x8070587c, &(0x7f00000001c0)) (async) ioctl$XFS_IOC_FSGEOMETRY_V4(r2, 0x8070587c, &(0x7f00000001c0)) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x7dd60000) recvfrom$inet(r2, &(0x7f0000000240)=""/149, 0x95, 0x40000002, &(0x7f0000000300)={0x2, 0x4e22, @empty}, 0x10) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/fscaps', 0xc8082, 0x0) getpeername$inet(r3, &(0x7f0000000380)={0x2, 0x0, @local}, &(0x7f00000003c0)=0x10) (async) getpeername$inet(r3, &(0x7f0000000380)={0x2, 0x0, @local}, &(0x7f00000003c0)=0x10) munmap(&(0x7f0000ff4000/0x4000)=nil, 0x4000) (async) munmap(&(0x7f0000ff4000/0x4000)=nil, 0x4000) r4 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0}, &(0x7f0000000480)=0xc) getgroups(0x2, &(0x7f00000004c0)=[0x0, 0xee00]) (async) getgroups(0x2, &(0x7f00000004c0)=[0x0, 0xee00]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee00}}, './file0\x00'}) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000bc0)=@filter={'filter\x00', 0xe, 0x4, 0x670, [0x0, 0x20000540, 0x200007b4, 0x20000972], 0x0, &(0x7f0000000400), &(0x7f0000000540)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x11, 0x1b, 0x9100, 'bond_slave_1\x00', 'macvlan1\x00', 'bond0\x00', 'batadv_slave_1\x00', @local, [0xff, 0xff, 0xff, 0x0, 0xff], @local, [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], 0x6e, 0xe6, 0x11e, [], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x9, 0x80, {0x7}}}}, @common=@AUDIT={'AUDIT\x00', 0x8}], @common=@dnat={'dnat\x00', 0x10, {{@local, 0xfffffffffffffffc}}}}, {0x5, 0x0, 0xf7, 'wlan1\x00', 'ip6_vti0\x00', 'pimreg\x00', 'veth1_vlan\x00', @broadcast, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, [0x0, 0xff, 0x0, 0xff, 0xff], 0xee, 0xee, 0x126, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x7, 0x8863}}}, @ipvs={{'ipvs\x00', 0x0, 0x28}, {{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0x0, 0x0, 0xff], 0x4e23, 0x4, 0x2, 0x4e21, 0x4, 0x8}}}], [], @common=@mark={'mark\x00', 0x10, {{0xffffffe0, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{0x11, 0x3c, 0x8864, 'batadv0\x00', 'veth1_macvtap\x00', 'veth1_to_team\x00', 'pimreg1\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @random="349429b8a8ed", [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], 0x10e, 0x13e, 0x18e, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'macvlan0\x00', 'macsec0\x00', 0x10, 0x2, 0x1, 0x0, 0x810000, 0x5, {0x4}, {0x1}}}}, @pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x7, 0x1}}}], [@common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x8, {0xf4}}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x1, [{0x11, 0x6, 0xdada, 'veth1_macvtap\x00', 'veth0_to_team\x00', 'veth1\x00', 'dummy0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0xff, 0xff], 0xae, 0xde, 0x20e, [@owner={{'owner\x00', 0x0, 0x18}, {{0xffffffffffffffff, r6, r7, r9, 0x4, 0x1}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x7f, 'system_u:object_r:systemd_logind_sessions_t:s0\x00'}}}}]}]}, 0x6e8) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r8) sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, r10, 0x1725, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0xc}}}}, ["", "", "", "", ""]}, 0x20}}, 0x4040040) getsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000d80), &(0x7f0000000dc0)=0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000e00)) mkdirat(0xffffffffffffff9c, &(0x7f0000000e40)='./file0\x00', 0x76) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000e40)='./file0\x00', 0x76) sendmmsg$inet(r8, &(0x7f0000001300)=[{{&(0x7f0000000e80)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000ec0)="e15e8d7df036af08307e35da6ed967ce9326aa0f297e2199b9211ceb2940a9a24aa5004ab39b1310ca0cfd7498509389eea071455d6f78e64b18d7f4920de972115f5953801d82f8c866cb3ffff00db1101498aac5b39c5623b71d0682d9b59e48494ab8dc96167f41c98ff6aa40e4a244c3151af624c5de26e167429e5b2f6046fa8787801907ab049890e152afff06f0890a3bd0fea484723942d8608e55ce12a232647b3d4d7eec999146029ec0d6662ab3b11af277ff1a81729759d29d52f308226df018443d1f136943b5061993b9cbb06e90436e369729c5e0fda26bc1c105869b40493c1c89e9ae6ae4b186f7d6121932590e", 0xf6}, {&(0x7f0000000fc0)="cc5a0799bf2c27b2aa3b9b1b0668720e10354af9bcf2310d3231f47ef012a27be213726c75f7cf65274df5307d66afe9739da4c10e9da455b035f6", 0x3b}, {&(0x7f0000001000)="8e6ad109edbfb5fa418f297dbbaad4fa72d5defeb74677bab4d6", 0x1a}, {&(0x7f0000001040)="91edd84e26dc2f3fa3a54da8aa98a50729e6451d74319a58b17a4c8232cc9f978e3218abd4e83db8ba4335c2239c12c82b7297d7c129e604ad14203d1303de8df11ebd57b1ea1acd6d52a90788cb39646d81cc6bf3b5e94a32d7fbcbf2563213b8af868f9074ff67af2e8615e8744c78d0c800b4d54e39de909622fc7a2cc5babe34edf884f584218ffa1980e3e5b23259f22d80d20d5db8ed04d074a0c40b406b", 0xa1}, {&(0x7f0000001100)="3a49a66f97d327cb895efd198ed9758caf35afc7de0b5dc9405f0cfc625b39", 0x1f}, {&(0x7f0000001140)="f12e7e289dbdfcf39655503a4561d46a83078d13f5572b64fe1f9ed2ccfba80c96884c8df0702d6fc16c3e3aaf07ef503063cde0cd2911bf61366ae0ecb8c651ff4b95a66e9b13635398d841f609cd5bb79d190b73e0cf55a8cf854b80ff3f91", 0x60}, {&(0x7f00000011c0)="5a1c972833175333a242e2b8d25dd6084dcd246294e27038a358e2f0981e78129787319d6c575eab731786bd7c291abe7b03ba1b2175fe1709d8ef2311bc6c23e87544143c0e0ea9ce2ec8591f6ba9a893d0cad8fe8f429c96a727953c91d83ac0f768f702b445d4c6dff29014d7d6d08e000909ee208330fe769fba14e5be4643d2e216d228877db92d24b9cc8fa90e58aa8df53d10170c06", 0x99}], 0x7}}], 0x1, 0x4000040) r11 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001340), 0x500, 0x0) r12 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r11, 0xc0189371, &(0x7f0000001380)={{0x1, 0x1, 0x18, r12}, './file0\x00'}) accept(r3, &(0x7f00000013c0)=@in={0x2, 0x0, @loopback}, &(0x7f0000001440)=0x80) sched_setscheduler(r5, 0x5, &(0x7f0000001480)=0x249f) (async) sched_setscheduler(r5, 0x5, &(0x7f0000001480)=0x249f) 54.770143633s ago: executing program 0 (id=45): syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89f6, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async, rerun: 64) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) (rerun: 64) write(r1, &(0x7f0000000000)='7', 0x1) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000001c0)='vlan0\x00') (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40800) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x569882, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40084}, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000000c0)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}}, 0x0) (async) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r4, 0x29, 0x10, &(0x7f0000000000)=0x82, 0x4) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e03, 0xffe00000, @remote, 0x4}, 0x1c) (async) sendto$inet6(r4, 0x0, 0x0, 0x26004844, 0x0, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r7 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x0, 0x4, 0x0, 0x0, 0xfffffffc}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffffb, 0x0, 0x0, 0x1000}}]}]}}}]}, 0x6c}}, 0x0) (async) connect$can_j1939(r2, &(0x7f0000000100)={0x1d, r8, 0x3, {0x0, 0x1, 0x5}, 0xff}, 0x18) (async, rerun: 32) ptrace$setregset(0x4205, r5, 0x403, &(0x7f0000000000)={0x0, 0x4c}) (rerun: 32) 54.283176237s ago: executing program 0 (id=48): mkdirat(0xffffffffffffff9c, 0x0, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100fdffff000013e194ba000000180001800e0001006574683a766c616e3000000004000280"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x20004080) r3 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000180)=0x1) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f00000000c0)={0x1, {0xf8000002, 0x8b8, 0xc4f, 0x6}}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0x0, 0x800, 0x30323953, 0x7, 0xfd0, 0x5, 0xb, 0x94, 0x0, 0x8, 0x1, 0x6e9ea1bddf701c2a}}) 49.783614309s ago: executing program 2 (id=83): ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x7, {0x1ff, 0x3, 0x7, 0x6}}) 49.670275285s ago: executing program 2 (id=85): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) write$cgroup_pid(r0, &(0x7f00000000c0)=r1, 0x12) socket$inet_udp(0x2, 0x2, 0x0) syz_extract_tcp_res(&(0x7f0000000100), 0x80, 0xb3f) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000002180)={0x20, 0x0, r2, {0x6, 0x0, 0x7, 0x7}}, 0x20) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f00000021c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r5, &(0x7f0000002200)='devices.deny\x00', 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=@bloom_filter={0x1e, 0x0, 0x8e, 0x4, 0x102, 0xffffffffffffffff, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5, 0x9}, 0x50) r7 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f00000022c0)) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000002300)={@ipv4={'\x00', '\xff\xff', @empty}, @private2, @remote, 0x2, 0xb10, 0xe, 0x400, 0x9, 0x40}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f00000023c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000002440)) writev(r7, &(0x7f0000002500)=[{&(0x7f0000002480)="b8aba207eb024c87b81d77a8df227f8585f17f9d207ae3d98ef7924d47c0a966f43a1940706aa948e79613ca8690e447f222c7768eba25c5562c3f403091f76f64e03229a52d790a16dd6949347f6f810ad38327b1d0e51b46b1685483262277", 0x60}], 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002580), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r9, &(0x7f0000002680)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002640)={&(0x7f00000025c0)={0x44, r10, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}]}, 0x44}}, 0x4000040) prlimit64(r1, 0x2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000026c0)={{0x1, 0x1, 0x18, r6, {0x1}}, './file1\x00'}) write$FUSE_DIRENTPLUS(r11, &(0x7f0000002700)={0xb0, 0x0, 0x0, [{{0x5, 0x2, 0x5, 0xc3ce, 0x5, 0x5, {0x6, 0x9, 0x1, 0x2, 0x101, 0xa35b, 0x8000, 0x80, 0xc, 0x8000, 0x2, r3, r4, 0x7}}, {0x6, 0xbd, 0x1, 0x1, '!'}}]}, 0xb0) quotactl_fd$Q_SYNC(r0, 0xffffffff80000100, 0x0, 0x0) read$ublk_bdev(r11, &(0x7f00000027c0)=""/92, 0x5c) r12 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000002840), 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r12, 0xc400941d, &(0x7f0000003880)={0x0, 0x80000001, 0x0, 0x1}) 49.644273072s ago: executing program 2 (id=86): r0 = socket(0x1d, 0x2, 0x6) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000700)) mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2000000000000008, 0x5, 0x3) mbind(&(0x7f00000a3000/0x1000)=nil, 0x1000, 0x4002, &(0x7f0000000040)=0x2000000000000008, 0x9, 0x0) 49.5753673s ago: executing program 2 (id=87): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x1000804, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xff, 0x28e, &(0x7f0000000f40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0xfffffffffffffffe) write(r1, &(0x7f0000000000)='3', 0x4e) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000700)=ANY=[], 0x68) mmap$IORING_OFF_CQ_RING(0x0, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) 49.479395327s ago: executing program 2 (id=88): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x20, &(0x7f0000000740)={&(0x7f0000000540)=""/242, 0xf2, 0x0, &(0x7f0000000640)=""/239, 0xef}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000007d123d57d108d222609e", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000100"/28], 0x48) migrate_pages(0x0, 0x6fb8, &(0x7f0000000240)=0xfffffffffffffe4f, &(0x7f0000000300)=0xe) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r2, &(0x7f0000000340), &(0x7f0000000280)=""/157}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r6, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x4004000) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000500)) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000940)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x70bd27, 0x25dfdbfb, {0x2, 0x1f, 0x0, 0xcb}, [@IFA_LOCAL={0x8, 0x2, @empty}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040814}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x4, @remote, 0xb}, 0x1c) r8 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='\x00', 0x1, 0xfffffffffffffffe) r9 = socket$inet6(0xa, 0x4, 0x26) setsockopt$inet6_int(r9, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) recvmmsg(r9, &(0x7f0000000400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=""/17, 0x11}, 0x53}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r9, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r9, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r10 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000080)={r8, r10, r8}, &(0x7f00000003c0)=""/200, 0xc8, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6000000000383a00fc000000000000000000000000090000fe8000000000000000000000ff0f00aa02009078000000016002834300013a0120010000000000000000000000000001fe8000000000000000000000000000bb005cefbd266831e31787e136203d4cbe766bff551d0e8877859f211178e9350134ac8eb789ef9192422526f1cb628f7ace"], 0x0) 49.106487819s ago: executing program 2 (id=93): r0 = syz_open_dev$video(0x0, 0x485, 0x141400) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xa, 0x3, 0x7, 0xfffffffe}}) 49.054161834s ago: executing program 32 (id=93): r0 = syz_open_dev$video(0x0, 0x485, 0x141400) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xa, 0x3, 0x7, 0xfffffffe}}) 38.921935887s ago: executing program 33 (id=48): mkdirat(0xffffffffffffff9c, 0x0, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100fdffff000013e194ba000000180001800e0001006574683a766c616e3000000004000280"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x20004080) r3 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000180)=0x1) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f00000000c0)={0x1, {0xf8000002, 0x8b8, 0xc4f, 0x6}}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0x0, 0x800, 0x30323953, 0x7, 0xfd0, 0x5, 0xb, 0x94, 0x0, 0x8, 0x1, 0x6e9ea1bddf701c2a}}) 14.538724983s ago: executing program 6 (id=458): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018e58, &(0x7f0000000000)={[{@quota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@auto_da_alloc}, {@jqfmt_vfsold}, {@dax_never}, {@usrjquota}]}, 0x1, 0x61d, &(0x7f0000001680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) syz_read_part_table(0x1061, &(0x7f0000000000)="$eJzsz7FNBDEUBNBZtF57AxKCrYcmoA1IiaAeCiCgGiSoAgkZre90Jdxd8F7wZY9Hln64qJJknfO03fWaviQvHyObPsdLeu+j93O7z20fdWlJzTTy37eS3J++e83X3/E4Jy3zTStp415Tep7XJI/10PjOw/t5twUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA6/QfAAD//xZmENg=") fsetxattr$system_posix_acl(r0, &(0x7f0000000100)='system.posix_acl_default\x00', 0x0, 0x0, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) setreuid(0x0, 0xee00) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0xdd, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60fa050000481100fe8000000000000000000000000013aafe8000000000000000000000000000aa4e200e22"], 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x20c38000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f0000004d80)=[{{&(0x7f0000000bc0), 0x80, &(0x7f0000000e40)=[{&(0x7f0000000c80)=""/201, 0xc9}, {&(0x7f0000000d80)=""/110, 0x6e}, {&(0x7f0000000e00)=""/48, 0x30}], 0x3, &(0x7f0000001880)=""/4096, 0x1000}}, {{&(0x7f0000002880)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000004e40)=""/4105, 0x1009}, {&(0x7f0000003900)=""/237, 0xed}], 0x2, &(0x7f0000003a40)=""/89, 0x59}}, {{&(0x7f0000003ac0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003d40)=[{&(0x7f0000003b40)=""/223, 0xdf}, {&(0x7f0000003c40)=""/68, 0x44}, {&(0x7f0000000c40)=""/48, 0x30}, {&(0x7f0000003d00)=""/22, 0x16}], 0x4, &(0x7f0000003d80)=""/4083, 0xff3}, 0x2}], 0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x8) 14.102182858s ago: executing program 1 (id=467): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x40, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x5}]}]}, 0x40}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='configfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) lremovexattr(&(0x7f0000000680)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001680)=@known='user.incfs.size\x00') 14.083466187s ago: executing program 1 (id=469): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001f4ff00850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r5, 0x10f, 0x89, &(0x7f00000000c0), &(0x7f0000000140)=0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r7, 0xf) wait4(r7, 0x0, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000080), &(0x7f0000000100)=0x40) tkill(r7, 0x3) 13.948144846s ago: executing program 1 (id=473): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r5, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, 0x0, 0x0) sendto$inet(r5, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x2) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3ff, 0x44, 0x80000002, 0x8, 0x6}, 0x20) sendto$inet(r5, &(0x7f0000000540)="6752db188ff3f3af0af70b6ffc1f06caef4042ba0a4f3b33f05793a77e64eb0e1755b353e5016dfe1abe1a7284e498128ae713efbeed4fd40cefc7e54db9bd0a3b5502b85e34efcaa4f82f799d68217757b9ba58c4fc006938387c1bf193cd29b6212a6f2af86c368650e9c7c75b8820d1d1d849869897d66060c9f176b6e567bcf40ec5a9ff316770853ea7521716960e8c86fecfc1be72582eaf8ba20a47b0fb35ed067031eb31f78a3b14", 0xfffffffffffffe8d, 0x4c050, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r6, 0x0) close(r6) connect$netlink(0xffffffffffffffff, 0x0, 0x0) truncate(0x0, 0x40200) write(0xffffffffffffffff, &(0x7f0000000500), 0x0) shutdown(r1, 0x1) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300011802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) 12.198527761s ago: executing program 1 (id=476): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000fdffffff00"/28], 0x50) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) r1 = socket$rds(0x15, 0x5, 0x0) r2 = socket(0x23, 0x80805, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x24622, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x521, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJn/s3aZNCj0AKnQphQWt1k68bVT1QjlVCFVC9MhhGxInimLHUeyUJuwhe+SORCVOcOLMAYkDUk/ckTjAjUs5IBVYITVISBh5bCfOHydWNrHb+PeTRn4zz57vvR3Ne9bnzbwAxtadiNiPiOmIeDciZjvHk84Wb7a31vs+efJo+eDJo+Ukms13/plk9a1j0fOZlmc658xHxA/eivhRciLonyLqu3sbS5VKebtzqNiobhXru3v316tLa+W18maptLiwOP/6g9dKV9bXl6q/+fhWRPz+d1/+6I/73/pJq1kznbreflyldtenDuO0TEbE964j2AhMdPozfZkPX+pDXKU0Ij4XES9n9/9sTGRX87jjl+nbQ2wdAHAdms3ZaM727gMAN12a5cCStNDJBcxEmhYK7RzeC3E7rdTqjXurtZ3NlXaubC6m0tX1Snm+kyuci6lkdX2yvJCVu/uVcunE/oOIeD4ifpa7le0XlmuVlVF+8QGAMfbMifl/Ktee/wGAGy5/VMyNsh0AwPDkR90AAGDozP8AMH7M/wAwfsz/ADB+zP8AMH7M/wAwVr7/9tutrXnQef71ynu7Oxu19+6vlOsbherOcmG5tr1VWKvV1rJn9lQvOl+lVttaeDV23i82yvVGsb6797Ba29lsPMye6/2wPDWUXgEA53n+pQ//kkTE/hu3si16nvd/4Vz94nW3DrhO6agbAIzMxKgbAIzM6dW+gHEhHw/j63/NZjN61u6NiMeHpZ6Hgfb9L0IfDBQmtW4ofPrc/eJT5P+BzzT5fxhfl8v/+y4PN8FR/r9p6Q8YM81mYs1/ABgzcvxAckF97+//882encF+/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAbaSbbkrTQWQt8JtK0UIh4NiLmYipZXa+U5yPiuYj4c24q19pfiAjrBgHAZ1n696Sz/tfd2VdmTtZO5/6TrQs+HRE//sU7P39/qdHYXoiYTv51eLzxQed4aRTtBwAu0p2nu/N41ydPHi13t2G25+PvtBcXbcU96GztmsmYzF7zWa7h9r+Tzn5b6/vKxBXE338cEV84q/9JlhuZ66x8ejJ+K/azQ42fHoufZnXt19a/xeevoC0wbj5sjT9vnnX/pXEnez37/s9nI9TT645/B6fGv/Rw/JvoM/7dGTTGq3/47qmDzdl23eOIL01GHHRP3jP+dOMnfeK/MmD8v774lZf71TV/GXE3zup/cixWsVHdKtZ39+6vV5fWymvlzVJpcWFx/vUHr5WKWY662M1Un/aPN+491y9+q/+3+8TPX9D/rw/Y/1/9990ffvWc+N/82tnX/4Vz4rfmxG8MGH/p9m/z/epa8Vf69P+i639vwPgf/W1vZcC3AgBDUN/d21iqVMrbT1/In/ue9CpCDFBIIvavOcRRIffrn7518ZtzQ2vPJQvRr2ri09LCG1PIXXOIXFzVCUc9MgHX7eimH3VLAAAAAAAAAAAAAACAfobxl0+j7iMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA31/8DAAD//70U1ik=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="b7080000000000007b8af8ff02000000b7080000000016007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040100f0ffffffb702000008000000182300003e9f", @ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x6, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0xb, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x4) listen(r2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000001580)='/dev/fuse\x00') ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) 11.609762636s ago: executing program 6 (id=478): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r3, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES32=0x0, @ANYRES8=r4], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 11.030725651s ago: executing program 1 (id=482): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x1, r0, &(0x7f0000000100)='e=', 0x2, 0x8000}]) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="bfa400000000000085000000162300009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0x4e, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @icmp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@empty, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}]}}, @timestamp={0xd, 0x0, 0x0, 0x0, 0xfffe, 0x2}}}}}, 0x0) 9.343027978s ago: executing program 6 (id=486): r0 = mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r0, &(0x7f0000000040)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x33b81df2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f00000000c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x3) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000940)={0x60, 0x3f, 0x0, 0x600, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000400)=@gcm_256={{0x304}, "bd3477bcd0fc636b", "0aad493bc51309768e6917ea79c5de0422179793d17743f2dede9600", "fdc4e7fa", 'T8\x00'}, 0x38) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x11a, 0x4, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @empty}}, 0xff8, 0x3fff}, 0x90) r6 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r6, 0x2) r7 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r5, &(0x7f0000000180)={0x2, 0xce20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x1, &(0x7f0000000980)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}, {@grpquota}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@inlinecrypt}, {@max_batch_time={'max_batch_time', 0x3d, 0x186b}}]}, 0xfe, 0x799, &(0x7f00000001c0)="$eJzs3c1rHGUYAPBnNp+m1UYQbL00Jy2UbtoaWwWh8SSChYKebcNmG2I22ZLdlCbkYBFBEEGLB0Evnv2oN28ievZv8CIiLVXTYsWDrMx+JJtukm7TTdI2vx9M8r4zs/PMs7Pzvu/uDLsB7FpD6Z9MxIGI+CiJ2Fefn0RET7XUHTFaW+/20mIunZKoVN74M6muc2tpMRdNj0ntqVf2R8SP70UczrTGLc0vTI0VCvnZen24PH1huDS/cGRyemwiP5GfOXFsZOT4yRdOnuhcrn//vLD3+sevPvfN6L/vPn31w5+SGI299WXNeXTKUAzVn5Oe9Cms+b7TUR4MyU7vAJuSnppdtbM8DsS+6KqWAIBHWdr/VwCAXSbR/wPALtP4HODW0mKuMe3sJxLb68YrEdFfy79xfbO2pLt+za6/eh104Fay6spIEhGDHYi/PyI+/+6tr9Iptug6JMBa3rkcEecGh1rb/2TlnoVNOtrGOkN31LV/sH1+SMc/L641/sssj39ijfFP3xrn7mYMRfTWN1fVev5nrq0K2nCqA8Hr47+Xa/e2pYk2jf+Wb1ob7KrXHk8rByNispBP27YnIuJQ9PSdnyzkj20Q49DN/26ut2yoafz315W3v0zjp/9X1shc6+5b/ZjxsfLY/eTc7MbliGe6V+7tu93S/jeOeuv498xGGz64Unztpfc/W2+1NP8038bUmv/WqnwR8WysnX9DsuH9icPp4T9a+7t2jG9//XRgvfjNxz+d0viN9wLbIT3+AxvnP5g0369Z6mz8u+e//Ppf3qH09d+bvFkt99bnXRorl2ePRfQmr7fOP76ytUa9sX6af23Di72xKv+V9i9Zo/1L3xOeazPH7ut/fL35/LdWmv/4PR3/ey9cvT3VtV789o7/SLV0qD6nnfav3R28n+cOAAAAAAAAAAAAAAAAAAAAAAAAANqViYi9kWSyy+VMJput/Yb3UzGQKRRL5cPni3Mz41H9rezB6Mk0vupyX62eNL7/dLCpfvyO+vMR8WREfNL3WLWezRUL4zudPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADU7Vnn9/9Tv/ft9N4BAFumv2VOpVKpNNdv5jdcDAA8dFr7fwDgUaf/B4DdR/8PALuP/h8Adh/9PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFvszOnT6VT5Z2kxl9bHL87PTRUvHhnPl6ay03O5bK44eyE7USxOFPLZXHH6btsrFIsXRmJm7tJwOV8qD5fmF85OF+dmymcnp8dOxdl8z7ZkBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3pjS/MDVWKORnH4nCBxHxAOyGQmcLvx35Zf9G61y5y8t4tI1Y/fUT4gFJeecLO9wwAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwk/g8AAP//Ez0kyA==") r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r8, 0x0, 0x0) listen(r7, 0x3a5) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, &(0x7f0000000cc0)=[{&(0x7f0000000a40)="072285b5c9a1582c3f3c047fa3fc73972b5f4900e1fda014f849246bf5905891a86692acd39baacf43f322e65e778370e8589e00350cb8b603b6bc7c1dd2b231462c07d87c99dd9d1e874c89a52e289f94f54996f5d7d08bf297806abce1125077e943c051b35a7e87aa967d2f39aafc7dca68f8248d84166b607ce36cd643912c7f1d68bd6ede71806d0ae5cd50e4bf2322123fa3fabddae94f052e47a9a571505b82f80e3bb1426442d476b932a3a46dddc0daeab775b0ecf2e2249cfc1586e0b924fbfab9bf106e23e5120da8e6781eba05ce968e79c9ccffaa85ead2efd391a3817d02b647d82ab377", 0xeb}, {&(0x7f0000000b40)="faf267b3b7247ab4cf6dd38cc543e1a79748b570a70c27b7e29ab8f60368d1d1e66096fa62525122ef0dbbc7ccc46a7a1002e8d0dc6f189f4e3628b699ba1214046afb6985a414cb48f133c10393", 0x4e}, {&(0x7f0000000bc0)}, {&(0x7f0000000c00)="f26f4180465c302994f76400f25693b71de11275ea25aae7804e572ebf8a788dbb9b0717a50063becd79974ec5ef6852876c484d440602bfc4f4b2e41cc0f2b44d9e923abec5d21d1169973a25875ebe47f74f845b1772b9f890e046974922d19757d4b10363a2fab01180b91cbc4015411a97235ad99051928f97d78cd72ce2ba287e39ab503c982712f9", 0x8b}], 0x4) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000140)={0x18, r10, 0x3, 0x0, &(0x7f0000000180)=[{0xffffffffffffedca, 0xfffffffffffffff9}, {0x7ff, 0x107e}, {0x12df, 0x2000000000000003}]}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 8.122305014s ago: executing program 3 (id=490): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{0x0, 0x4}, 'syz0\x00', 0x4b}) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x8fb5, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x2808080, &(0x7f00000005c0)={[{@uni_xlate}, {@shortname_win95}, {@uni_xlateno}, {@uni_xlate}, {@uni_xlate}, {@fat=@check_normal}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@numtail}, {@fat=@nfs_stale_rw}, {@shortname_lower}, {@rodir}, {@numtail}]}, 0x81, 0x2ae, &(0x7f0000001980)="$eJzs3c+KI0UYAPCvJ52ZjArJwZMINujB07CzT7BBRljMSemDXlTcLMgkLEwgsCrGPXkXPPkOvoMP4MU38OBR8OYexJakO3+nM2wkZmX297vM11X1VVdV18xAoCufvD68fPBo9PDJV79Gq5XE0b24F0+T6MRRzH0TAMBt8rQo4o+iFHF8Y9t0Vl+0q6ujw4wQANi39f//AMCL4IMPP3qv2+tdvJ9lrYjht+M8iYhhMs7L+u7D+DwG0Y870Y6/IoqFMn7lfu8i0iybfxgwPo08Yvjxz9V19/eIWf55tKNzPf/d+72L86wUbw0n43x65+nPZryURHSLpOzobrTj1YiiGVUny/y7NfmRH8fbb/5Qjf/vfpxFO375LB7FIB7Muljmf32eZe8U3//5ZTmDPCKZjPOTWbulonGwhwIAAAAAAAAAAAAAAAAAAAAAwK13li10Vs/PmZ8GeHZWXz87H6hRcz5QdcLPZOV8nTtZls2P8RnnzSjz03gtjfS5Th4AAAAAAAAAAAAAAAAAAAD+J0aPv7j8dDDoX60FPxWbJTVB9UZ/VCXpSlW6XnVzPzXB5Y8Ru2c9SxCNamiD5Not5hN65g7T7Y1PdhnYaV0/cbRtDdNBlIP/bvdFeGOnCU6D4l+s83x3TTfJDY0bMXrcqt8kKzvztOrsajR7QKfbNu16UNQsXWNr1vGe9tjxy/vdtNMZNxeLud6mNX2SKyXNPf+mbEj+iz8/AAAAAAAAAAAAAAAAAADAiuVLv/Hbtconz2VIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBwy+//XwTR2SzZDCZVcr8ufSM4uRrV3LZz4GkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwy/0TAAD//0dFVzc=") r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r6, &(0x7f0000000f80)=""/4096, 0x1000) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) mremap(&(0x7f00000d5000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x6083, 0x3) 8.115521733s ago: executing program 6 (id=491): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@jqfmt_vfsv0}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000001680)='./file1/../file0\x00', 0x0, 0x204898, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x210000, &(0x7f0000000740), 0x1, 0x7bf, &(0x7f0000000d00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) recvmsg$inet_nvme(r1, &(0x7f0000000b00)={&(0x7f0000000940)=@can, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000009c0)=""/193, 0xc1}], 0x1}, 0x40000020) lseek(r0, 0x7, 0x3) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002abd70000010000000000000000000000000000000000001fc0200000000000000000000000000014e240000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000003c00000000000000ffffffffffffffff0000000000200000000000000000000000000000000000002f00000000000000feffffffff7f400002000000000000080100000000000000010000000000000044000500fe8000000000000000000000000000bb000000003c00000002000000ac1414bb00000000000000000000000006000000040100"/180], 0xfc}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) recvfrom$unix(r1, &(0x7f0000000780)=""/199, 0xc7, 0x40002020, 0x0, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file0/../file0\x00', 0x8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') socket$inet_smc(0x2b, 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r5, 0x6f2d, 0x9) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x1c, r8, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x2000c198) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000005500)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000054c0)={&(0x7f00000043c0)=ANY=[@ANYBLOB="1d110000", @ANYRES16=0x0, @ANYBLOB="040028bd7000fedbdf252d00000008000300", @ANYRES32=r9, @ANYBLOB="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"], 0x1100}, 0x1, 0x0, 0x0, 0x1}, 0x4) read$FUSE(r6, &(0x7f0000002380)={0x2020}, 0xfffffffffffffe59) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001640)={&(0x7f0000000b40)="79bcb25933fea2807cc054e458da09d8944c16b77e12ea668035ac9774b0537500e4d0b6fd9b23fc655a00cdea3fe718a7817905a6a3699b7c8ac45b818825e2a5c0d7bc087387dfdcd53cd3fe5ded1a7e6923dcd5a4cd84854963d9116d216225c51d539039166c14a273d572e163", &(0x7f0000001800)=""/232, &(0x7f00000014c0)="2e847c5e622608c8a2a686e18610253e6967b264e9efec4ce41bdfc55b8c6e744bf61bde93a44d3039bd816ee0c58df870cd51179b514b49a215d31adaece8a0a235c00721394faa357c25b29b27f273a391df2c790ff016ec4b5a9a6b6da8ea83a3aebe95b22b933803a12d092a7c7a2bfb74155ae18d91f10e414b003a3d06c2ea8b7b033e7f0c9d2b82c7e349cc81d2ded8442e0c497dad0397c46e19f13a0f028c72d409c3c55da767ea16a7bc939c9e64b2c9423e5bbbeeefb854d427c041d5143f70d46d1d39a12fb9ae2f97b12503199e22b8bf4bd99bd21015e5ddfa2d0c889b8a48da58f4", &(0x7f00000016c0)="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", 0x8, r5, 0x4}, 0x38) 7.451302627s ago: executing program 5 (id=492): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x72) r0 = inotify_init1(0x800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @remote}}}}, &(0x7f0000000540)=0xe8) setuid(r1) inotify_rm_watch(r0, 0x0) mount$nfs(&(0x7f0000000000)='127.0.0.1:/export\x00', &(0x7f0000000100)='./mnt\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={[{'addr=127.0.0.1'}, {'port=2049'}, {'proto=tcp'}, {'vers=3'}]}) 7.126002056s ago: executing program 5 (id=494): r0 = socket(0x2c, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) r2 = dup(r1) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000240)={0x20, 0x1, 0x2, 0x41, 0x0, 0x5, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="12000000040000000800000002"], 0x50) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="dcefcc4e15d959df3423f94d59e615fec28364e7a897ce0d06c4ca5768c444895071b243a27570411d59551d57e852aa3d279a50d67623d3db693604de55c0390975395f54c8ea26ba86127433cec0aa54dcf9f955914698b501e859ba399a77ee110b47ffa6fd0a63bbbd00a42e68c62b90fee436a822507016c522a9b696b8aaff8d74db521c6939bafa642c0f785b9dac960fc0f06bdaabbc3ff86b"], 0x18}}, 0x48880) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="020300090e000000ff000e000a004e22"], 0x70}}, 0x8810) add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crc32c-intel\x00'}}) r5 = add_key$user(&(0x7f0000000f80), &(0x7f0000000fc0)={'syz', 0x3}, &(0x7f0000000000)='H', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r5, 0x0, 0x0) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x200002, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8008700b, &(0x7f0000000300)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, 0x0, 0x0}, 0x20) setsockopt$bt_BT_POWER(r0, 0x11b, 0x9, 0x0, 0x0) r7 = socket$inet6(0xa, 0x80000, 0x1) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000080)=0x6d91, 0x4) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000200)={'tunl0\x00', &(0x7f00000001c0)={'syztnl0\x00', r9, 0x0, 0x80, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0xfc, 0x4, 0x0, @empty, @local}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x4, 0x2, {{0x5, 0x4, 0x0, 0x24, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, @multicast1, @broadcast}}}}) r10 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r10, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x7, 0x10, 0x2, 0x1}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r10, 0x84, 0x1b, &(0x7f00000000c0)={r11, 0xa, "d100ab1ce8c4fa7604a7"}, &(0x7f0000000100)=0x12) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x8004, 0x0, 0x81, 0xffffffff}) r12 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101080, 0x0) ioctl$COMEDI_DEVCONFIG(r12, 0x40946400, 0x0) 7.072964288s ago: executing program 6 (id=495): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0xb, @raw_data="1a36633fe66d7b3b4c336bde9ba9529370e2fda23a48e893b5ee2fec62d75f3a65a9ce049f6cc17df4ee444d4efdbdae2819f4f320b8092c6092a39f32080229137e2ca4572b07fb553c7b1885ea7a1faa40a525f5749242471b99d7004eea64c0dbfc6e8a893960819c0e481556de4235b6fc7b0966af3b59989949130608cd2ca80cc97b34d066f930a5936546a67ee1dc440dce9c7046115396c056d5dccca0e14232802cca257fcf00a6886614410b207428738e6f4c93bbac7dee5a9d9584bdb4e7a1fc89fc"}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001a00)={{0xffffffffffffffff, &(0x7f0000000040)='squashfs\x00', 0x12600, &(0x7f0000000180)={@_ha_fsid={[0x3, 0x5]}, {0x2, 0x86a, 0x7, 0xed1}}, 0xfffffffa, &(0x7f00000003c0), &(0x7f0000000440)=0x837}, 0x3, &(0x7f0000001980)=[{0x0, 0x9, &(0x7f0000000480)='\'\xa6:}!:\x00', &(0x7f00000004c0)="f9c916b330843c06b62ac85112b6d7c7af24228787d8e7cee60f0dd41eb8aee16afba7cb37148b9bffd716f498f13f6d8ef87f0535692063", 0x38}, {0x1, 0xcb87, &(0x7f0000000840)='\x00', &(0x7f0000000880)="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", 0x1000, 0x2}, {0x2, 0xfffffffb, &(0x7f0000001880)='/:%&@)@\xc8\x00', &(0x7f00000018c0)="50c9f95806a382ab1bf2937a22d357e392a26522ee9837abe38662a07183d27549291f346a333acd26121c99c2fea887dc3087f703c9ce0f80ecac5033bc2c74076e9d17876132a1beeeeb5a27d74c8f9baf6eebf3239930d08fe723c5cf0eff0adfa63f889983b3bb9d4572ff4911ca0183b1a57b286ad7cc9980ef8dc8e40392b1758b98bb8dc49ec67dbc0d56a5428a15557bbb746f3f034998481cbcd179", 0xa0, 0x32}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000001a80)) connect$inet6(r5, &(0x7f0000000100)={0xa, 0xffff, 0x0, @mcast2={0xff, 0x3}, 0x3}, 0x1c) setsockopt$sock_linger(r5, 0x1, 0x3d, &(0x7f00000001c0)={0x1}, 0x8) syz_emit_ethernet(0xa6, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2a0210", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x18, "ffffffffffffff8000000000"}]}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) sendmmsg$sock(r5, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="dce4c739", 0x4}], 0x1}}], 0x1, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="5800000010000304001300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000002800128009000100766c616e00000000180002800c000200160000001f00000006000100fc0f000008000500", @ANYRES32=r11, @ANYBLOB="08f14f00a319", @ANYRES32=r11, @ANYBLOB], 0x58}}, 0x40488c4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x29, 0x8, 0xf, 0xfffffff8, 0x8, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x0, 0x8000, 0x2}}) fstat(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000740)={{{@in=@empty, @in=@private=0xa010102, 0x4e21, 0x0, 0x4e20, 0x4, 0x2, 0x0, 0xa0, 0x4c, r12, r13}, {0xdb5b, 0x3, 0xa, 0x4, 0x2856bb3d, 0x2, 0x4, 0x3}, {0x0, 0x5, 0x8, 0x8}, 0x2, 0x6e6bbf, 0x0, 0x0, 0x3, 0x1}, {{@in=@empty, 0x4d6, 0x3c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x24}, 0x3504, 0x1, 0x3, 0x10, 0xb5e, 0x8005}}, 0xe8) 6.718083087s ago: executing program 1 (id=497): r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x8, &(0x7f0000001680)=""/51, &(0x7f0000000000)=0x33) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000480)={{}, 'syz0\x00'}) ioctl$UI_SET_SNDBIT(r4, 0x4004556a, 0x2) ioctl$UI_DEV_CREATE(r4, 0x5501) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) writev(r5, &(0x7f0000001600)=[{&(0x7f0000000500)="fbdad67669fbd6f179fc34855424a9a46a342e1da28ead6df127429b0539dc69b303eaefa417e7bcf086b19c9f8843c53f0f679e45bde26e45da037f186e427b5107", 0x42}], 0x1) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x200000, &(0x7f0000000480)={[{@nombcache}, {@resuid}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@user_xattr}]}, 0x3, 0x480, &(0x7f0000000a40)="$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") r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000000602, 0x0) r7 = dup(r6) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x1, @loopback, 0x3}}}, 0x30) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r8, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x202000) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x10142, 0x0) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8917, &(0x7f0000000000)={'wg1\x00', @random="0200e97fffff"}) write$UHID_INPUT(r9, &(0x7f0000000400)={0x8, {"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", 0x1000}}, 0xfffffe69) 5.950601563s ago: executing program 34 (id=497): r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x8, &(0x7f0000001680)=""/51, &(0x7f0000000000)=0x33) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000480)={{}, 'syz0\x00'}) ioctl$UI_SET_SNDBIT(r4, 0x4004556a, 0x2) ioctl$UI_DEV_CREATE(r4, 0x5501) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) writev(r5, &(0x7f0000001600)=[{&(0x7f0000000500)="fbdad67669fbd6f179fc34855424a9a46a342e1da28ead6df127429b0539dc69b303eaefa417e7bcf086b19c9f8843c53f0f679e45bde26e45da037f186e427b5107", 0x42}], 0x1) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x200000, &(0x7f0000000480)={[{@nombcache}, {@resuid}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@user_xattr}]}, 0x3, 0x480, &(0x7f0000000a40)="$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") r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000000602, 0x0) r7 = dup(r6) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x1, @loopback, 0x3}}}, 0x30) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r8, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x202000) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x10142, 0x0) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8917, &(0x7f0000000000)={'wg1\x00', @random="0200e97fffff"}) write$UHID_INPUT(r9, &(0x7f0000000400)={0x8, {"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", 0x1000}}, 0xfffffe69) 5.928219452s ago: executing program 6 (id=499): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300068c1) (async) setsockopt$sock_attach_bpf(r1, 0x6, 0x3, &(0x7f0000000080), 0x4) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x4052}, 0x4000) (async) close(0x3) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWFLOWTABLE={0x17c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0xc0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x70, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'wg0\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x1a4}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) socket$igmp6(0xa, 0x3, 0x2) (async) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000100)) (async) sendmmsg$inet(r0, &(0x7f0000000500)=[{{&(0x7f0000000040)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000080)="bb6d5948e0c791af", 0x8}, {&(0x7f00000000c0)="dfd3d40556e25f9a6ab13a896f855382f2daed532eae4eaa2adddfba5f336059942ba14f40d5c21a46779bc6e3eab3829987706c46808f8c7a89f63862fba405ef286fe24fa53e55f357d1f7540b6e3c9e56bf27ec87a463aefa4b30eef4343690cf0ba8480c4cbff146f97abf0031682370ccc15d750e04b9a187f39b1b47c5b161a9f0abbc6936e2a1da4fa33f6c9c0d791d43b8b5cbfe66969c32ef95a6d1883756c6350936f21eb249c35a39ea3445a38b", 0xb3}, {&(0x7f0000000180)="d3525d9f268bf08665542b0caf6c491bfe0dab8f88c26493ac6ea272d5129c9e2ffacfa9aa7f0581834137a174c4574a1341b1a5d503462fd224640833cc42b015e72be42c3b382d59072ab5c0377993fe6e5f08371f10acefedc4291495896289effef0b8dccf624638c9e1acc20d2a0ba876104e963b9a797a8bb216d7e5065a6a75962173cb5d98e8ca7fc438b74f1fd6fc15360583df2226168b8d111999c0af632ea2bfffa0b814f8540bf7d53d3a529eefae3616200f9422a3f377bda97a0cac851fc98823a62199af09391e62dbc1413ccda22ae2d3f9b90d37e9d5412a6d2bd4f4432ef4c63ea2e7a756", 0xee}, {&(0x7f0000000280)="fcbdc8cde56586d9a05f788560f2d52a3089c9f4168f033c87bb13a0824278dc4a4cc85ead86d63e432d8a784ea7698f9b", 0x31}], 0x4, &(0x7f0000000300)=[@ip_retopts={{0x54, 0x0, 0x7, {[@ssrr={0x89, 0x17, 0x4f, [@loopback, @dev={0xac, 0x14, 0x14, 0x25}, @broadcast, @rand_addr=0x64010100, @empty]}, @lsrr={0x83, 0x2b, 0xa5, [@dev={0xac, 0x14, 0x14, 0x14}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @rand_addr=0x64010102, @rand_addr=0x64010101, @broadcast, @empty, @multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x2b}]}, @noop]}}}], 0x58}}, {{&(0x7f0000000380)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f00000003c0), 0x0, &(0x7f0000000440)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_retopts={{0x7c, 0x0, 0x7, {[@lsrr={0x83, 0x27, 0x4, [@multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x2e}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x24}, @local]}, @timestamp_prespec={0x44, 0xc, 0x2b, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x33}, 0x2}]}, @noop, @generic={0x82, 0x10, "9dcee7c22228ef868f14971dc4fc"}, @lsrr={0x83, 0xf, 0xd0, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @cipso={0x86, 0x16, 0xfffffffffffffffd, [{0x2, 0x10, "fef8517d95ecd3bcfac8cd9befa4"}]}, @noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0xb0}}], 0x2, 0x4002851) 5.838948459s ago: executing program 35 (id=499): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300068c1) (async) setsockopt$sock_attach_bpf(r1, 0x6, 0x3, &(0x7f0000000080), 0x4) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x4052}, 0x4000) (async) close(0x3) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWFLOWTABLE={0x17c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0xc0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x70, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'wg0\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x1a4}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) socket$igmp6(0xa, 0x3, 0x2) (async) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000100)) (async) sendmmsg$inet(r0, &(0x7f0000000500)=[{{&(0x7f0000000040)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000080)="bb6d5948e0c791af", 0x8}, {&(0x7f00000000c0)="dfd3d40556e25f9a6ab13a896f855382f2daed532eae4eaa2adddfba5f336059942ba14f40d5c21a46779bc6e3eab3829987706c46808f8c7a89f63862fba405ef286fe24fa53e55f357d1f7540b6e3c9e56bf27ec87a463aefa4b30eef4343690cf0ba8480c4cbff146f97abf0031682370ccc15d750e04b9a187f39b1b47c5b161a9f0abbc6936e2a1da4fa33f6c9c0d791d43b8b5cbfe66969c32ef95a6d1883756c6350936f21eb249c35a39ea3445a38b", 0xb3}, {&(0x7f0000000180)="d3525d9f268bf08665542b0caf6c491bfe0dab8f88c26493ac6ea272d5129c9e2ffacfa9aa7f0581834137a174c4574a1341b1a5d503462fd224640833cc42b015e72be42c3b382d59072ab5c0377993fe6e5f08371f10acefedc4291495896289effef0b8dccf624638c9e1acc20d2a0ba876104e963b9a797a8bb216d7e5065a6a75962173cb5d98e8ca7fc438b74f1fd6fc15360583df2226168b8d111999c0af632ea2bfffa0b814f8540bf7d53d3a529eefae3616200f9422a3f377bda97a0cac851fc98823a62199af09391e62dbc1413ccda22ae2d3f9b90d37e9d5412a6d2bd4f4432ef4c63ea2e7a756", 0xee}, {&(0x7f0000000280)="fcbdc8cde56586d9a05f788560f2d52a3089c9f4168f033c87bb13a0824278dc4a4cc85ead86d63e432d8a784ea7698f9b", 0x31}], 0x4, &(0x7f0000000300)=[@ip_retopts={{0x54, 0x0, 0x7, {[@ssrr={0x89, 0x17, 0x4f, [@loopback, @dev={0xac, 0x14, 0x14, 0x25}, @broadcast, @rand_addr=0x64010100, @empty]}, @lsrr={0x83, 0x2b, 0xa5, [@dev={0xac, 0x14, 0x14, 0x14}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @rand_addr=0x64010102, @rand_addr=0x64010101, @broadcast, @empty, @multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x2b}]}, @noop]}}}], 0x58}}, {{&(0x7f0000000380)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f00000003c0), 0x0, &(0x7f0000000440)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_retopts={{0x7c, 0x0, 0x7, {[@lsrr={0x83, 0x27, 0x4, [@multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x2e}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x24}, @local]}, @timestamp_prespec={0x44, 0xc, 0x2b, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x33}, 0x2}]}, @noop, @generic={0x82, 0x10, "9dcee7c22228ef868f14971dc4fc"}, @lsrr={0x83, 0xf, 0xd0, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @cipso={0x86, 0x16, 0xfffffffffffffffd, [{0x2, 0x10, "fef8517d95ecd3bcfac8cd9befa4"}]}, @noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0xb0}}], 0x2, 0x4002851) 5.801056652s ago: executing program 5 (id=500): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001a00010000000080fbdbdf250a808000000000000000000008000100"], 0x2c}}, 0x20000050) (async, rerun: 32) r1 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x21081e, &(0x7f00000009c0)={[{@nomblk_io_submit}, {@data_err_ignore}, {@discard}]}, 0x1, 0x515, &(0x7f00000010c0)="$eJzs3U9sHFcZAPBv1vHfuHVaegAEbWgLAUVZ25s2qnqAckIIVUL0CFJq7I1leddredelNjk4Z65IROIER44cOOfEnQuCG5dwQOKPFRQjcRg0s7Nhbe8mq8T2ut7fTxrNm3mT+b4XZ97zvs3uC2BkXY2IvYiYiIiPI2KuOJ8UW3zQ3rLrHu/fXT7Yv7ucRJp+9M8kr8/ORdefyVwu7jkVET/4TsSPk+Nxmzu760u1WnWrOJ5v1Tfnmzu7N9bqS6vV1epGpXJr8dbCezffrZxYW9+oTxSlLz/8w943fpqlNVuc6W7HSWo3ffxJnMyliPjeaQQbgrGiPRPDToTnUoqIVyPizfz5n4ux/KcJAFxkaToX6Vz3MQBw0ZXyObCkVC7mAmajVCqX23N4r8VMqdZotq7faWxvrLTnyq7EeOnOWq26UMwVXoqI7Hgxr8vrk+y4cuT4ZkS8EhE/n5zOj8vLjdrKMH/xAYARdvnI+P/vyfb4DwBccFPDTgAAOHPGfwAYPcZ/ABg9xn8AGD3t8X962GkAAGfI638AGD3GfwAYKd//8MNsSw+K779e+WRne73xyY2VanO9XN9eLi83tjbLq43Gav6dPfVn3a/WaGwuvhPbn1755mazNd/c2b1db2xvtG7n3+t9uzqeX7V3Bi0DAPp55Y0Hf06yEfn96XyLrrUcxoeaGXDaSsNOABiasWEnAAyN1b5gdL3Aa3zTA3BB9Fii95CpXh8QStM0Pb2UgFN27QuDzP8nA/QQwGdN1/y//wUMI8b8P4wu8/8wutI0GXTN/xj0QgDgfPP7P9Dn3b1Xi/1vijcHfrRy9Ir7p5kVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnG+d9X/LxVrgs1EqlcsRL0XElRhP7qzVqgsR8XJE/GlyfDI7XhxyzgDAiyr9LSnW/7o29/bsoarXLz8pTkTET3750S8+XWq1tv4YMZH8a7JzvnW/OF/pHeC0WwAAPF1nnM73XS/kH+/fXe5sZ5nP378dEVPt+Af7E3FQxN951FmbeCrGI2LmURLdaxUnXXMXL2LvXkR8vlf7k5jN50DaK58ejZ/FfulM45cOxS/lde199nfxuRPIBUbNg6z/+aDX81eKq/m+9/OfnT2JtdOL/i+71fJB3gf+P36n/xvr0/9dHTTGO7//brs0fbzuXsQXL0V0Yh909T+d+Emf+G8PGP8vX3r9zX516a8irkXv+N2x5lv1zfnmzu6NtfrSanW1ulGpjMWthfduvluZz+eo5/uPBv94//rL/eqy9s/0iT/1jPZ/dcD2//q/H//wK0+J//W3esUvxWtPiZ+NiV8bMP7SzO+m+tVl8Vf6tP9ZP//r/W6aHF5Q/OFfd48tGw4ADE9zZ3d9qVarbiko5IXfxrlIo3ch+yd7DtLoWfjWqdw5nTtWNRG9L/7ZW+1n+khVmj5X9H49xknMugHnwZOHPiL+M+xkAAAAAAAAAAAAAACAns7i01HDbiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX1/8CAAD//3ZK0g4=") (async, rerun: 32) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000000000000ff014000000000000000000000000000000080000000000000000000000080000000000000000000000000000000000200000000001000000000000000000000000000000000000000000000f419a9fd21fa243d09655998e100"/108]) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x10, &(0x7f0000000a80)={[{@rodir}, {@numtail}, {@utf8no}, {@shortname_lower}, {@shortname_lower}, {@utf8}, {@fat=@dmask={'dmask', 0x3d, 0x1ff}}, {@utf8no}, {@numtail}, {@fat=@tz_utc}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@utf8}, {@numtail}, {@utf8no}, {@shortname_mixed}]}, 0x3, 0x27b, &(0x7f0000000640)="$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") (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) getsockopt$MRT(r2, 0x0, 0xd0, &(0x7f0000000100), &(0x7f0000000180)=0x4) (async, rerun: 32) recvmmsg(r4, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) (async, rerun: 32) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280), 0x282000, 0x0) write$qrtrtun(r6, &(0x7f00000002c0)="d11890d26ab0f4bb9db0477bf13ec2817b93849801ef303a3829c517a9", 0x1d) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) fsopen(0x0, 0x0) (async) ioctl$sock_ifreq(0xffffffffffffffff, 0x891e, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x7}}, './bus\x00'}) (async) r7 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000340)={'ipvlan0\x00', {0x2, 0x4e23, @remote}}) 5.740988848s ago: executing program 3 (id=502): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000082}, 0x0) 5.486442924s ago: executing program 3 (id=503): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write(0xffffffffffffffff, &(0x7f0000000440)="ee74beb002c394b80bfd8a352526e5f6f250810c0157a1d4c5317e03ec45adbae517967bbfcb0e6ed70ce0856067c8f29e5bc5f7c3903a9e740139a63a3f35a604c9a52082d61fa9f790d8237a81e13dae110976b8593008272a737d7299c64c763068eabb9c78c210f9d586215da0f9fe0dd2cac3365bc6763abf90669022b2cfb84fbe4b7a", 0x86) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xfff1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xc47f, 0xd, 0xfff, 0xfffffffa, 0x9ca0}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8004}, 0x40) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56561, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xfff1, 0x8}, {0x10, 0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1c, 0x2, [@TCA_GRED_MAX_P={0x8, 0x4, 0x2}, @TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x1, 0x4}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20002000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.220380295s ago: executing program 5 (id=504): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r1) (async) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000000)={0x2, [0x8, 0xb]}, 0x8) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newsa={0x15c, 0x10, 0x1, 0x0, 0xfffffffe, {{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {@in=@broadcast, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x84}, [@replay_esn_val={0x1c, 0x17, {0x0, 0xffffffff}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @sa_dir={0x5, 0x21, 0x2}]}, 0x15c}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000180)=r4) (async) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000180)=r4) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 3.452930187s ago: executing program 3 (id=509): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0xc00, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001400), 0x8002, 0x0) ioctl$RTC_RD_TIME(r7, 0x80247009, 0xfffffffffffffffe) r8 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_DQEVENT(r8, 0x80885659, &(0x7f0000000140)={0x0, @src_change}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0xe, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x859}, 0x40080) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r6) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, r10, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x80000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x48000) 2.899985023s ago: executing program 4 (id=511): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newtaction={0x174, 0x30, 0x200, 0x0, 0x0, {}, [{0x160, 0x1, [@m_connmark={0x15c, 0x15, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x4, 0x10000000, 0x8, 0x5}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9c6, 0x5, 0x0, 0x7, 0x8000}, 0xb}}]}, {0xf4, 0x6, "9296d47654691ceb9c1cc8be41abac4fd686bb46966131e7797944dda3c7bafaa12a63214ec08fc4beba8c20a7e21743dec7ed5f53d304ea43dccfa49479a317afdcc69e4d556ce827841713fcd5b78982b2a343c769c16b2ea6b02d17d7c3774e43384ac7be90bb91cedd16b7d3fea833401aec48ef62ba5fba6362a5469548a47ee610c15c475914ba8c49ab7815a5c6de204ab38e63d2004dcd583f4b112b81f61217ba52e66e15e671939b388223137304e6908a69e25464ce8c7cc16e73c950a861c6f0b2a932af65abfc2a1bef04f79893d7f886792cf088e9f08747064c8f7d3f211439fee945941a43bee13d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x174}}, 0x0) 2.729528156s ago: executing program 4 (id=512): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000082}, 0x0) 2.569674432s ago: executing program 4 (id=513): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x5, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f0000000080), &(0x7f0000001500)=@udp6=r0, 0x2000000}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x20, 0x1, 0x2, 0x801, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x4}]}, 0x20}}, 0x40000) 2.418184441s ago: executing program 4 (id=514): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e23, 0x6, 0x4e22, 0x2, 0x2, 0x20, 0xa0, 0x1d, r0}, {0x7, 0x7, 0x1, 0xd5d, 0xfffffffffffffffb, 0x0, 0x0, 0x5c2}, {0xe, 0x7, 0xb1b}, 0x401, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@multicast1, 0x4d8, 0x2a}, 0x39573c4e467c4e, @in=@dev={0xac, 0x14, 0x14, 0x2c}, 0x3502, 0x4, 0x0, 0x40, 0x401, 0x30, 0x7}}, 0xe8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) close(0x3) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000300)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x0, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x0, 0x0, 0x2, 0x1, 0x6}}, 0xf0}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r2, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) r3 = syz_open_dev$vim2m(&(0x7f0000000140), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix_mp={0x8e0, 0xffff8000, 0x34325852, 0x6, 0x3, [{0xbf8, 0x6}, {0xc00}, {0x3, 0x58b}, {0x14, 0x5}, {0x9, 0x4000069a}, {0x7, 0x3}, {0x81, 0x5}, {0x4, 0x17}], 0x7b, 0x2, 0x8, 0x2, 0x4}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710031000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x64, '\x00', 0x0, @sk_msg}, 0x94) 2.35606945s ago: executing program 4 (id=515): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r1, 0x5602, 0xfffffffffffffffe) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000180)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETVNETBE(r5, 0x400454de, &(0x7f0000000140)) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c000f"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r12 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r12, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x4, 0x0, @private2}}}, 0x32) sendmmsg(r12, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) ioctl$VHOST_NET_SET_BACKEND(r7, 0x8008af83, &(0x7f00000000c0)={0x2, r6}) r13 = dup3(r6, r5, 0x80000) ioctl$VIDIOC_S_INPUT(r13, 0xc0045627, &(0x7f0000000300)=0x9) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x9, '\x00', r4, r13, 0x2, 0x5, 0x5}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r3, 0x18000000000002a0, 0x48, 0xaf, &(0x7f0000000100)="c3941108a8000000009e08e086dd3ddd5e4cf73d9da674ebca0ce0510e656d14ccecebc51c669fa2c8c63d9b60879b1691088a165b47b112d55312223baba55ec5e6a8a10196a0a7ba01d00edaa257e6dd385979ceb51787dab408dfc44e08449ec766cb0d0cb70a59b2bb6cb0b0ca626cb1b190586da7bb", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) 1.897971211s ago: executing program 3 (id=516): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0xc4}, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r1, 0x4) (async) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000040)) 1.71812571s ago: executing program 5 (id=517): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write(0xffffffffffffffff, &(0x7f0000000440)="ee74beb002c394b80bfd8a352526e5f6f250810c0157a1d4c5317e03ec45adbae517967bbfcb0e6ed70ce0856067c8f29e5bc5f7c3903a9e740139a63a3f35a604c9a52082d61fa9f790d8237a81e13dae110976b8593008272a737d7299c64c763068eabb9c78c210f9d586215da0f9fe0dd2cac3365bc6763abf90669022b2cfb84fbe4b7a", 0x86) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000080)) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xfff1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xc47f, 0xd, 0xfff, 0xfffffffa, 0x9ca0}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8004}, 0x40) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56561, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xfff1, 0x8}, {0x10, 0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1c, 0x2, [@TCA_GRED_MAX_P={0x8, 0x4, 0x2}, @TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x1, 0x4}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20002000}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.662533936s ago: executing program 3 (id=518): syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x200c801, &(0x7f0000000000), 0x1, 0x64f, &(0x7f00000011c0)="$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") r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000000)=0x1) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000340)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000900)="$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") r6 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r6, &(0x7f0000002240)=""/237, 0xfdef, 0x4eb) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000080)={0x20004, r4, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x59, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000280)={0x1, r9, 0xff, 0x100007, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000140)={0x2, r9, 0xfffffff8, 0xffffffff, 0xe, 0x6, 0xeada}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000180)={r8}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r12, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0xffffffffffffff87, &(0x7f0000000540)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) 1.250373196s ago: executing program 4 (id=519): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) syz_emit_ethernet(0x7f, &(0x7f0000000100)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x49, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b29ab", 0x0, 0x11, 0x0, @private1, @remote, [@dstopts], "fb36eeca6fad50b3fc2c2a584d16ca5545"}}}}}}}, 0x0) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)={0x5, 0x1, 0xa, 0x4009}) 0s ago: executing program 5 (id=520): r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x400454da, &(0x7f0000000000)) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f00000026c0)='\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0xa9) write(r3, &(0x7f0000000600)='sessname=s+ device_path=/dev/ram0 path=ip:027.0.0.1', 0x33) kernel console output (not intermixed with test programs): T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 44.042608][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 44.042931][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 44.043155][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 44.054865][ T5236] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 44.068115][ T5242] FAULT_INJECTION: forcing a failure. [ 44.068115][ T5242] name failslab, interval 1, probability 0, space 0, times 0 [ 44.068630][ T5242] CPU: 1 UID: 0 PID: 5242 Comm: syz.3.96 Not tainted syzkaller #0 PREEMPT [ 44.068653][ T5242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 44.068659][ T5242] Call trace: [ 44.068663][ T5242] show_stack+0x2c/0x3c (C) [ 44.068689][ T5242] __dump_stack+0x30/0x40 [ 44.068702][ T5242] dump_stack_lvl+0xd8/0x12c [ 44.068715][ T5242] dump_stack+0x1c/0x28 [ 44.068726][ T5242] should_fail_ex+0x41c/0x590 [ 44.068736][ T5242] should_failslab+0xc4/0x120 [ 44.068745][ T5242] __kmalloc_noprof+0x108/0x6b8 [ 44.068756][ T5242] tomoyo_realpath_from_path+0xbc/0x4dc [ 44.068767][ T5242] tomoyo_check_open_permission+0x1c4/0x394 [ 44.068776][ T5242] tomoyo_file_open+0x78/0xcc [ 44.068786][ T5242] security_file_open+0xbc/0x258 [ 44.068796][ T5242] do_dentry_open+0x2a8/0xfc0 [ 44.068808][ T5242] vfs_open+0x44/0x2dc [ 44.068820][ T5242] path_openat+0x21fc/0x2a60 [ 44.068830][ T5242] do_file_open+0x1c8/0x2e8 [ 44.068840][ T5242] do_sys_openat2+0x114/0x1e8 [ 44.068851][ T5242] do_sys_open+0xb0/0xe0 [ 44.068863][ T5242] __arm64_sys_openat+0xa8/0xc4 [ 44.068875][ T5242] invoke_syscall+0x98/0x244 [ 44.068887][ T5242] el0_svc_common+0xec/0x23c [ 44.068898][ T5242] do_el0_svc+0x4c/0x5c [ 44.068910][ T5242] el0_svc+0x64/0x260 [ 44.068921][ T5242] el0t_64_sync_handler+0x44/0x104 [ 44.068931][ T5242] el0t_64_sync+0x198/0x19c [ 44.070024][ T5242] ERROR: Out of memory at tomoyo_realpath_from_path. [ 44.072607][ T5242] syz.3.96 uses obsolete (PF_INET,SOCK_PACKET) [ 44.119307][ T631] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.234811][ T631] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.412704][ T631] bridge_slave_1: left allmulticast mode [ 44.412751][ T631] bridge_slave_1: left promiscuous mode [ 44.413268][ T631] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.418128][ T631] bridge_slave_0: left allmulticast mode [ 44.418167][ T631] bridge_slave_0: left promiscuous mode [ 44.418261][ T631] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.425059][ T631] dvmrp0: left allmulticast mode [ 44.518016][ T631] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 44.538202][ T631] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 44.578280][ T631] bond0 (unregistering): Released all slaves [ 44.582081][ T5239] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.582149][ T5239] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.582288][ T5239] bridge_slave_0: entered allmulticast mode [ 44.582793][ T5239] bridge_slave_0: entered promiscuous mode [ 44.586438][ T5239] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.586503][ T5239] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.586591][ T5239] bridge_slave_1: entered allmulticast mode [ 44.587066][ T5239] bridge_slave_1: entered promiscuous mode [ 44.598958][ T5239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.600166][ T5239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.616837][ T5239] team0: Port device team_slave_0 added [ 44.620735][ T5239] team0: Port device team_slave_1 added [ 44.631970][ T631] tipc: Left network mode [ 44.637680][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.637710][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.637726][ T5239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.639678][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.639690][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.639701][ T5239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.708766][ T5239] hsr_slave_0: entered promiscuous mode [ 44.709166][ T5239] hsr_slave_1: entered promiscuous mode [ 44.709540][ T5239] debugfs: 'hsr0' already exists in 'hsr' [ 44.709550][ T5239] Cannot create hsr debugfs directory [ 44.898740][ T631] hsr_slave_0: left promiscuous mode [ 44.899883][ T631] hsr_slave_1: left promiscuous mode [ 44.900512][ T631] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.900533][ T631] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.903800][ T631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.903837][ T631] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.911629][ T631] veth1_macvtap: left promiscuous mode [ 44.911685][ T631] veth0_macvtap: left promiscuous mode [ 44.911734][ T631] veth1_vlan: left promiscuous mode [ 44.911779][ T631] veth0_vlan: left promiscuous mode [ 45.013772][ T631] team0 (unregistering): Port device team_slave_1 removed [ 45.041415][ T631] team0 (unregistering): Port device team_slave_0 removed [ 46.086122][ T50] Bluetooth: hci3: command tx timeout [ 46.690371][ T5220] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 46.706529][ T5239] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 46.723210][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 46.729847][ T5239] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 46.730300][ T5239] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 46.736185][ T5239] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 46.738299][ T5239] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 46.784774][ T5239] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 46.785156][ T5239] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 46.793119][ T5239] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 46.854185][ T5280] Illegal XDP return value 4294964480 on prog (id 12) dev syz_tun, expect packet loss! [ 46.857758][ T5280] set_capacity_and_notify: 2 callbacks suppressed [ 46.864580][ T5280] loop4: detected capacity change from 0 to 512 [ 46.865053][ T5280] EXT4-fs: Ignoring removed bh option [ 46.865082][ T5280] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.870477][ T5280] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 46.871059][ T5280] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 46.871157][ T5280] EXT4-fs (loop4): orphan cleanup on readonly fs [ 46.871690][ T5280] Quota error (device loop4): do_insert_tree: Free block already used in tree: block 4 [ 46.871720][ T5280] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 46.871749][ T5280] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.100: Failed to acquire dquot type 1 [ 46.871760][ T5280] loop4: lost filesystem error report for type 5 error -5 [ 46.876036][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 46.876055][ C1] EXT4-fs (loop4): last error at time 46: ext4_acquire_dquot:7041 [ 46.876514][ T5280] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.100: Invalid block bitmap block 0 in block_group 0 [ 46.876531][ T5280] loop4: lost filesystem error report for type 5 error -117 [ 46.893305][ T5280] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.100: Invalid block bitmap block 0 in block_group 0 [ 46.893347][ T5280] loop4: lost filesystem error report for type 5 error -117 [ 46.903469][ T5280] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.100: Invalid block bitmap block 0 in block_group 0 [ 46.903515][ T5280] loop4: lost filesystem error report for type 5 error -117 [ 46.911542][ T5280] Quota error (device loop4): write_blk: dquota write failed [ 46.911608][ T5280] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 46.912389][ T5280] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.100: Failed to acquire dquot type 1 [ 46.918001][ T5280] Quota error (device loop4): write_blk: dquota write failed [ 46.918048][ T5280] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 46.918063][ T5280] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.100: Failed to acquire dquot type 1 [ 46.925306][ T5280] EXT4-fs (loop4): 1 orphan inode deleted [ 46.941965][ T5280] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.952025][ T5239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.970493][ T5239] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.991328][ T5280] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.100: deleted inode referenced: 12 [ 46.996543][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.996610][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.020721][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.020770][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.022703][ T5308] netlink: 20 bytes leftover after parsing attributes in process `syz.3.103'. [ 47.022716][ T5308] netlink: 16 bytes leftover after parsing attributes in process `syz.3.103'. [ 47.071257][ T4712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.261311][ T4404] 8021q: adding VLAN 0 to HW filter on device eth0 [ 47.325623][ T5335] tipc: Enabling of bearer rejected, failed to enable media [ 47.507473][ T5239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.658262][ T4404] 8021q: adding VLAN 0 to HW filter on device eth1 [ 47.720769][ T5239] veth0_vlan: entered promiscuous mode [ 47.731794][ T5378] netlink: 24 bytes leftover after parsing attributes in process `syz.1.113'. [ 47.733986][ T5378] netlink: 'syz.1.113': attribute type 1 has an invalid length. [ 47.741487][ T5239] veth1_vlan: entered promiscuous mode [ 47.761745][ T5239] veth0_macvtap: entered promiscuous mode [ 47.763018][ T5239] veth1_macvtap: entered promiscuous mode [ 47.771815][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.774882][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.921091][ T652] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.921857][ T652] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.947118][ T592] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.951942][ T5394] loop3: detected capacity change from 0 to 512 [ 47.953359][ T592] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.019723][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.019754][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.054758][ T5395] tmpfs: Bad value for 'nr_blocks' [ 48.079491][ T592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.079538][ T592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.174952][ T50] Bluetooth: hci3: command tx timeout [ 48.245289][ T5404] loop5: detected capacity change from 0 to 512 [ 48.277696][ T5404] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.94: corrupted in-inode xattr: invalid size in ea xattr [ 48.277743][ T5404] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 48.281686][ T5404] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.94: couldn't read orphan inode 15 (err -117) [ 48.286409][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 48.286425][ C1] EXT4-fs (loop5): initial error at time 48: ext4_iget_extra_inode:5180: inode 15 [ 48.286446][ C1] EXT4-fs (loop5): last error at time 48: ext4_iget_extra_inode:5180: inode 15 [ 48.292324][ T5404] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.317263][ T5404] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.94: bg 0: block 4: invalid block bitmap [ 48.358204][ T5239] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.411185][ T4404] 8021q: adding VLAN 0 to HW filter on device eth2 [ 49.128641][ T5430] netlink: 76 bytes leftover after parsing attributes in process `syz.1.116'. [ 49.128691][ T5430] netlink: 60 bytes leftover after parsing attributes in process `syz.1.116'. [ 49.132713][ T30] audit: type=1400 audit(49.110:2): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="_" object="w" requested=w pid=5428 comm="syz.1.116" saddr=127.0.0.1 daddr=127.0.0.1 netif=lo [ 49.172155][ T4404] 8021q: adding VLAN 0 to HW filter on device eth3 [ 49.188637][ T5430] netlink: 'syz.1.116': attribute type 39 has an invalid length. [ 50.247825][ T50] Bluetooth: hci3: command tx timeout [ 50.378323][ T5498] warning: `syz.4.122' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 50.550982][ T5523] loop5: detected capacity change from 0 to 1024 [ 50.552692][ T5520] netlink: 12 bytes leftover after parsing attributes in process `syz.4.125'. [ 50.569705][ T5523] EXT4-fs: Mount option(s) incompatible with ext2 [ 50.616814][ T5456] cgroup: fork rejected by pids controller in /syz1 [ 50.769678][ T5551] netlink: 28 bytes leftover after parsing attributes in process `syz.5.127'. [ 50.769726][ T5551] netlink: 'syz.5.127': attribute type 7 has an invalid length. [ 50.769736][ T5551] netlink: 'syz.5.127': attribute type 8 has an invalid length. [ 50.769746][ T5551] netlink: 4 bytes leftover after parsing attributes in process `syz.5.127'. [ 50.780446][ T5551] loop5: detected capacity change from 0 to 256 [ 50.828435][ T5551] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 51.152050][ T5590] capability: warning: `syz.3.129' uses deprecated v2 capabilities in a way that may be insecure [ 51.249752][ T5591] syz.3.129 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 51.269394][ T5591] loop3: detected capacity change from 0 to 512 [ 51.359419][ T5591] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 51.382741][ T5591] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 51.385829][ T5591] EXT4-fs (loop3): Remounting filesystem read-only [ 51.386546][ T5591] EXT4-fs (loop3): 1 truncate cleaned up [ 51.387028][ T5591] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.430858][ T5595] loop4: detected capacity change from 0 to 512 [ 51.461198][ T5595] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.517401][ T4712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.600619][ T5605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.132'. [ 51.913400][ T5591] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.994271][ T5627] loop3: detected capacity change from 0 to 1024 [ 51.998188][ T5627] EXT4-fs: Ignoring removed mblk_io_submit option [ 51.999756][ T5627] EXT4-fs: Ignoring removed oldalloc option [ 52.037917][ T5627] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 52.086961][ T5627] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.138: bg 0: block 112: padding at end of block bitmap is not set [ 52.151550][ T4725] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 52.227591][ T5639] loop3: detected capacity change from 0 to 2048 [ 52.289587][ T5639] loop3: p2 < > p3 < > [ 52.326612][ T50] Bluetooth: hci3: command tx timeout [ 52.350042][ T5623] loop4: detected capacity change from 0 to 32768 [ 52.388132][ T5623] loop4: p1 p2 p3 [ 52.397108][ T5645] netlink: 16 bytes leftover after parsing attributes in process `syz.3.143'. [ 52.405606][ T5645] geneve2: entered promiscuous mode [ 52.687441][ T4706] udevd[4706]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 52.691479][ T4736] udevd[4736]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 52.693856][ T4704] udevd[4704]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 53.463336][ T5662] loop3: detected capacity change from 0 to 1024 [ 53.490371][ T5662] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 53.494675][ T5662] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.149: bg 0: block 112: padding at end of block bitmap is not set [ 53.499481][ T5662] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 35 with max blocks 1 with error 28 [ 53.502128][ T5662] EXT4-fs (loop3): This should not happen!! Data will be lost [ 53.502128][ T5662] [ 53.503996][ T5662] EXT4-fs (loop3): Total free blocks count 0 [ 53.505117][ T5662] EXT4-fs (loop3): Free/Dirty block details [ 53.506740][ T5662] EXT4-fs (loop3): free_blocks=0 [ 53.507682][ T5662] EXT4-fs (loop3): dirty_blocks=16 [ 53.508687][ T5662] EXT4-fs (loop3): Block reservation details [ 53.509854][ T5662] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 53.531288][ T4725] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 53.532107][ T4725] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 53.581625][ T5666] loop3: detected capacity change from 0 to 512 [ 53.583373][ T5666] EXT4-fs: Ignoring removed bh option [ 53.583420][ T5666] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.587812][ T5666] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 53.589380][ T5666] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 53.589477][ T5666] EXT4-fs (loop3): orphan cleanup on readonly fs [ 53.608650][ T5669] netlink: 8 bytes leftover after parsing attributes in process `syz.5.151'. [ 53.610790][ T5666] Quota error (device loop3): do_insert_tree: Free block already used in tree: block 4 [ 53.610841][ T5666] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 53.610893][ T5666] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.150: Failed to acquire dquot type 1 [ 53.610911][ T5666] fserror_report: 3 callbacks suppressed [ 53.610924][ T5666] loop3: lost filesystem error report for type 5 error -5 [ 53.616691][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 53.616703][ C0] EXT4-fs (loop3): last error at time 309: ext4_acquire_dquot:7041 [ 53.626776][ T5666] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.150: Invalid block bitmap block 0 in block_group 0 [ 53.626815][ T5666] loop3: lost filesystem error report for type 5 error -117 [ 53.630639][ T5666] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.150: Invalid block bitmap block 0 in block_group 0 [ 53.630672][ T5666] loop3: lost filesystem error report for type 5 error -117 [ 53.634830][ T5666] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.150: Invalid block bitmap block 0 in block_group 0 [ 53.634859][ T5666] loop3: lost filesystem error report for type 5 error -117 [ 53.639421][ T5666] Quota error (device loop3): write_blk: dquota write failed [ 53.639473][ T5666] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 53.639503][ T5666] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.150: Failed to acquire dquot type 1 [ 53.639519][ T5666] loop3: lost filesystem error report for type 5 error -28 [ 53.647458][ T5666] Quota error (device loop3): write_blk: dquota write failed [ 53.647503][ T5666] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 53.647517][ T5666] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.150: Failed to acquire dquot type 1 [ 53.647529][ T5666] loop3: lost filesystem error report for type 5 error -28 [ 53.648108][ T5666] EXT4-fs (loop3): 1 orphan inode deleted [ 53.656940][ T5666] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.671260][ T873] IPVS: starting estimator thread 0... [ 53.674304][ T5675] loop4: detected capacity change from 0 to 512 [ 53.698974][ T4725] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.699708][ T5677] netlink: 'syz.1.154': attribute type 34 has an invalid length. [ 53.699722][ T5677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.154'. [ 53.706605][ T5678] loop5: detected capacity change from 0 to 512 [ 53.717546][ T5675] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.152: corrupted in-inode xattr: invalid ea_ino [ 53.717585][ T5675] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 53.717736][ T5675] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.152: couldn't read orphan inode 15 (err -117) [ 53.717755][ T5675] loop4: lost filesystem error report for type 5 error -117 [ 53.718540][ T5675] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.738344][ T5678] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (1966!=2687) [ 53.738578][ T5677] bond1: option lacp_strict: invalid value (64) [ 53.741453][ T5678] EXT4-fs (loop5): group descriptors corrupted! [ 53.750018][ T5677] bond1 (unregistering): Released all slaves [ 53.756652][ T5676] IPVS: using max 60 ests per chain, 144000 per kthread [ 53.765927][ T5682] loop3: detected capacity change from 0 to 512 [ 53.791603][ T5682] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.795400][ T5675] evm: overlay not supported [ 53.826736][ T5690] overlay: filesystem on ./file0 not supported as upperdir [ 53.832265][ T5682] EXT4-fs error (device loop3): __ext4_add_entry:2412: inode #12: comm syz.3.155: Directory hole found for htree leaf block 0 [ 54.098978][ T4725] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.162542][ T4712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.256974][ T4721] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 54.284744][ T4721] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 54.289530][ T4721] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 54.294024][ T4721] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 54.296821][ T4721] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 54.534065][ T5717] xt_TPROXY: Can be used only with -p tcp or -p udp [ 54.603820][ T5720] sctp: [Deprecated]: syz.5.162 (pid 5720) Use of struct sctp_assoc_value in delayed_ack socket option. [ 54.603820][ T5720] Use struct sctp_sack_info instead [ 54.676761][ T5726] loop4: detected capacity change from 0 to 256 [ 54.691377][ T5726] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 54.691416][ T5726] FAT-fs (loop4): Filesystem has been set read-only [ 54.695634][ T5726] netlink: 16 bytes leftover after parsing attributes in process `syz.4.163'. [ 54.706795][ T5726] bond0: entered promiscuous mode [ 54.710032][ T5726] bond_slave_0: entered promiscuous mode [ 54.711479][ T5726] bond_slave_1: entered promiscuous mode [ 54.726868][ T5726] gretap0: entered promiscuous mode [ 54.732937][ T5726] hsr1: entered promiscuous mode [ 54.758521][ T5729] loop5: detected capacity change from 0 to 512 [ 54.762082][ T5729] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 54.768989][ T5729] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 54.769072][ T5729] EXT4-fs (loop5): 1 truncate cleaned up [ 54.769579][ T5729] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.819350][ T5701] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.821706][ T5701] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.823575][ T5701] bridge_slave_0: entered allmulticast mode [ 54.825350][ T5239] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.828634][ T5701] bridge_slave_0: entered promiscuous mode [ 54.863681][ T778] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.882569][ T5701] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.882625][ T5701] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.882799][ T5701] bridge_slave_1: entered allmulticast mode [ 54.883334][ T5701] bridge_slave_1: entered promiscuous mode [ 54.892051][ T5740] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 54.894232][ T5740] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 54.907788][ T5740] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 54.912820][ T5740] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 54.912889][ T5740] System zones: 0-2, 18-18, 34-35 [ 54.918352][ T5740] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.933008][ T5701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.939001][ T5701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.957247][ T5239] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.977686][ T5745] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 54.981219][ T5745] EXT4-fs (loop3): 1 truncate cleaned up [ 54.982071][ T5745] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.985557][ T778] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.010692][ T5701] team0: Port device team_slave_0 added [ 55.018426][ T5701] team0: Port device team_slave_1 added [ 55.048406][ T5701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.048447][ T5701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.048462][ T5701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.049665][ T5701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.049674][ T5701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.049688][ T5701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.084514][ T5701] hsr_slave_0: entered promiscuous mode [ 55.084866][ T5701] hsr_slave_1: entered promiscuous mode [ 55.088824][ T5701] debugfs: 'hsr0' already exists in 'hsr' [ 55.089453][ T5701] Cannot create hsr debugfs directory [ 55.119336][ T5751] openvswitch: netlink: Actions may not be safe on all matching packets [ 55.121628][ T5751] netlink: 64 bytes leftover after parsing attributes in process `syz.5.169'. [ 55.150176][ T778] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.154720][ T5745] syzkaller0: entered promiscuous mode [ 55.154754][ T5745] syzkaller0: entered allmulticast mode [ 55.159497][ T5755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.171'. [ 55.159541][ T5755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.171'. [ 55.170811][ T5745] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 55.173796][ T5751] overlayfs: null uuid in non-single lower fs '/syz5', falling back to xino=off,index=off,nfs_export=off. [ 55.289677][ T5768] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 55.295823][ T778] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.300668][ T5768] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 55.303028][ T5770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.174'. [ 55.307580][ T4725] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.320825][ T5701] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 55.348347][ T5701] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.350302][ T5701] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 55.397171][ T5701] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.397700][ T5701] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 55.404506][ T5701] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.407140][ T5701] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 55.418251][ T5701] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.443077][ T5701] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.443131][ T5701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.443206][ T5701] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.443235][ T5701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.749964][ T778] bridge_slave_1: left allmulticast mode [ 55.750004][ T778] bridge_slave_1: left promiscuous mode [ 55.750091][ T778] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.753031][ T778] bridge_slave_0: left allmulticast mode [ 55.753046][ T778] bridge_slave_0: left promiscuous mode [ 55.753123][ T778] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.753902][ T5794] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.776199][ T5794] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.177: corrupted in-inode xattr: invalid ea_ino [ 55.776606][ T5794] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 55.786044][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 55.786090][ C0] EXT4-fs (loop5): initial error at time 311: ext4_iget_extra_inode:5180: inode 15 [ 55.786135][ C0] EXT4-fs (loop5): last error at time 311: ext4_iget_extra_inode:5180: inode 15 [ 55.786992][ T5794] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.177: couldn't read orphan inode 15 (err -117) [ 55.787022][ T5794] loop5: lost filesystem error report for type 5 error -117 [ 55.788859][ T5794] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.838569][ T5239] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.873780][ T5808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.178'. [ 55.899446][ T5807] Bluetooth: MGMT ver 1.23 [ 55.905350][ T5807] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 55.939849][ T778] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.962651][ T5802] Injecting memory failure for pfn 0x13f4a8 at process virtual address 0x20276000 [ 55.969811][ T5802] Memory failure: 0x13f4a8: keeping poisoned page in swap cache [ 55.971806][ T5802] Memory failure: 0x13f4a8: recovery action for clean swapcache page: Recovered [ 55.973909][ T5802] Injecting memory failure for pfn 0x13f4a6 at process virtual address 0x20277000 [ 55.976168][ T5802] Memory failure: 0x13f4a6: keeping poisoned page in swap cache [ 55.977785][ T5802] Memory failure: 0x13f4a6: recovery action for clean swapcache page: Recovered [ 55.981093][ T778] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.007102][ T778] bond0 (unregistering): Released all slaves [ 56.019077][ T452] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.020701][ T452] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.107197][ T5701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.214910][ T5701] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.240146][ T452] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.240206][ T452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.240761][ T452] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.240786][ T452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.300154][ T5825] Injecting memory failure for pfn 0x13e387 at process virtual address 0x20276000 [ 56.308004][ T5825] Memory failure: 0x13e387: keeping poisoned page in swap cache [ 56.309747][ T5825] Memory failure: 0x13e387: recovery action for clean swapcache page: Recovered [ 56.311492][ T5825] Injecting memory failure for pfn 0x13e388 at process virtual address 0x20277000 [ 56.314264][ T5825] Memory failure: 0x13e388: keeping poisoned page in swap cache [ 56.315779][ T5825] Memory failure: 0x13e388: recovery action for clean swapcache page: Recovered [ 56.318506][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 56.318587][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 56.324475][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 56.324528][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 56.324603][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 56.324628][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 56.324692][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 56.324714][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 56.324787][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 56.324809][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 56.324875][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 56.324896][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 56.324956][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 56.324977][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 56.324998][ T5833] ldm_validate_partition_table(): Disk read failed. [ 56.325048][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 56.325069][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 56.325128][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 56.325149][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 56.325207][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 56.325228][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 56.325306][ T5833] Dev loop7: unable to read RDB block 0 [ 56.325548][ T5833] loop7: unable to read partition table [ 56.325620][ T5833] loop7: partition table beyond EOD, truncated [ 56.325638][ T5833] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 56.334441][ T4721] Bluetooth: hci5: command tx timeout [ 56.345570][ T5833] ldm_validate_partition_table(): Disk read failed. [ 56.345821][ T5833] Dev loop7: unable to read RDB block 0 [ 56.361766][ T5833] loop7: unable to read partition table [ 56.361866][ T5833] loop7: partition table beyond EOD, truncated [ 56.407866][ T5577] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.408667][ T5577] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.408691][ T5577] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.408710][ T5577] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.468579][ T5841] [U] v3f"S/4:XTzWtlW= [ 56.471315][ T5844] [U] v3f"S/4:XTzWtlW= [ 56.564184][ T5827] netlink: 80 bytes leftover after parsing attributes in process `syz.1.184'. [ 56.573266][ T5855] FAT-fs (loop5): bogus number of FAT sectors [ 56.573313][ T5855] FAT-fs (loop5): Can't find a valid FAT filesystem [ 56.642811][ T778] hsr_slave_0: left promiscuous mode [ 56.644674][ T778] hsr_slave_1: left promiscuous mode [ 56.648241][ T778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.649768][ T778] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.654936][ T778] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.660625][ T778] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.675008][ T778] veth1_macvtap: left promiscuous mode [ 56.675063][ T778] veth0_macvtap: left promiscuous mode [ 56.675117][ T778] veth1_vlan: left promiscuous mode [ 56.675171][ T778] veth0_vlan: left promiscuous mode [ 56.709442][ T5872] ext4: Bad value for 'min_batch_time' [ 56.815598][ T778] team0 (unregistering): Port device team_slave_1 removed [ 56.820598][ T778] team0 (unregistering): Port device team_slave_0 removed [ 56.887113][ T4404] 8021q: adding VLAN 0 to HW filter on device eth4 [ 57.014294][ T5701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.053410][ T5888] 9p: Bad value for 'rfdno' [ 57.053654][ T5895] fuse: Bad value for 'fd' [ 57.056159][ T5888] fuse: Bad value for 'fd' [ 57.442516][ T5701] veth0_vlan: entered promiscuous mode [ 57.453137][ T5701] veth1_vlan: entered promiscuous mode [ 57.457096][ T5918] __nla_validate_parse: 1 callbacks suppressed [ 57.457135][ T5918] netlink: 7 bytes leftover after parsing attributes in process `syz.1.199'. [ 57.498891][ T5918] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 57.502661][ T5701] veth0_macvtap: entered promiscuous mode [ 57.517980][ T5701] veth1_macvtap: entered promiscuous mode [ 57.530244][ T5701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.542407][ T5701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.587251][ T5577] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.587311][ T5577] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.587336][ T5577] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.587353][ T5577] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.609385][ T5921] Injecting memory failure for pfn 0x11f4d6 at process virtual address 0x20001000 [ 57.613737][ T5921] Memory failure: 0x11f4d6: Sending SIGBUS to syz.4.201:5921 due to hardware memory corruption [ 57.615905][ T5921] Memory failure: 0x11f4d6: recovery action for dirty LRU page: Recovered [ 57.618060][ T5921] Injecting memory failure for pfn 0x11fda2 at process virtual address 0x20002000 [ 57.621650][ T5921] Memory failure: 0x11fda2: recovery action for clean LRU page: Recovered [ 57.623802][ T5921] Injecting memory failure for pfn 0x13bc06 at process virtual address 0x20003000 [ 57.624001][ T5921] Memory failure: 0x13bc06: recovery action for clean LRU page: Recovered [ 57.628886][ T778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.628918][ T778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.640323][ T4404] 8021q: adding VLAN 0 to HW filter on device eth6 [ 57.646752][ T778] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.646786][ T778] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.868893][ T5932] syzkaller0: entered promiscuous mode [ 57.868930][ T5932] syzkaller0: entered allmulticast mode [ 57.874323][ T4404] 8021q: adding VLAN 0 to HW filter on device eth5 [ 57.887030][ T5951] netlink: 40 bytes leftover after parsing attributes in process `syz.6.156'. [ 58.215708][ T4404] 8021q: adding VLAN 0 to HW filter on device eth7 [ 58.251385][ T5981] netlink: 'syz.3.207': attribute type 1 has an invalid length. [ 58.270971][ T5981] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.309457][ T5981] bond1: (slave geneve3): making interface the new active one [ 58.318954][ T5981] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 58.406265][ T4721] Bluetooth: hci5: command tx timeout [ 58.474287][ T5997] set_capacity_and_notify: 8 callbacks suppressed [ 58.474337][ T5997] loop3: detected capacity change from 0 to 1024 [ 58.474753][ T5997] EXT4-fs: Ignoring removed bh option [ 58.481081][ T5997] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 58.490581][ T5997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.567330][ T4725] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.638294][ T6013] loop4: detected capacity change from 0 to 1024 [ 58.641892][ T6013] ext4: Unknown parameter 'fsname' [ 58.699556][ T6024] loop1: detected capacity change from 0 to 256 [ 58.729255][ T6029] syzkaller0: entered promiscuous mode [ 58.731534][ T6029] syzkaller0: entered allmulticast mode [ 58.735253][ T5577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.751719][ T6027] can0: slcan on ptm0. [ 58.760438][ T6028] loop3: detected capacity change from 0 to 1024 [ 58.762638][ T6028] EXT4-fs: inline encryption not supported [ 58.763917][ T6028] EXT4-fs: Ignoring removed bh option [ 58.811304][ T6028] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 58.841684][ T6028] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.852102][ T6028] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.714762][ T6040] loop6: detected capacity change from 0 to 512 [ 59.799775][ T6048] loop4: detected capacity change from 0 to 2048 [ 59.871415][ T4347] loop4: p2 < > p4 [ 59.877789][ T6026] can0 (unregistered): slcan off ptm0. [ 59.880975][ T4347] loop4: p4 size 8192 extends beyond EOD, truncated [ 59.884661][ T6048] loop4: p2 < > p4 [ 59.885909][ T6048] loop4: p4 size 8192 extends beyond EOD, truncated [ 59.922860][ T4347] loop4: p2 < > p4 [ 59.924197][ T4347] loop4: p4 size 8192 extends beyond EOD, truncated [ 59.979043][ T6060] netlink: 40 bytes leftover after parsing attributes in process `syz.4.218'. [ 60.082872][ T6067] netlink: 'syz.3.221': attribute type 33 has an invalid length. [ 60.082906][ T6067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.221'. [ 60.082934][ T6067] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 60.124061][ T592] wlan1: Trigger new scan to find an IBSS to join [ 60.177717][ T6077] ima: rule for LSM 'u' is undefined [ 60.179733][ T30] audit: type=1807 audit(316.159:3): action=measure func=FILE_CHECK obj_type=u res=0 [ 60.179773][ T30] audit: type=1802 audit(316.159:4): pid=6077 uid=0 auid=4294967295 ses=4294967295 subj=_ op=update_policy cause=invalid-policy comm="syz.6.222" res=0 errno=0 [ 60.187025][ T6075] ima: policy update failed [ 60.227793][ T30] audit: type=1802 audit(316.169:5): pid=6075 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.6.222" res=0 errno=0 [ 60.270389][ T6084] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 60.277859][ T6084] macsec1: entered promiscuous mode [ 60.280409][ T6091] loop6: detected capacity change from 0 to 128 [ 60.281884][ T6091] vfat: Unknown parameter 'ioc' [ 60.299639][ T6087] fuse: Bad value for 'group_id' [ 60.299668][ T6087] fuse: Bad value for 'group_id' [ 60.490100][ T6110] netlink: 'syz.6.227': attribute type 10 has an invalid length. [ 60.556900][ T4721] Bluetooth: hci5: command tx timeout [ 60.583967][ T6112] loop3: detected capacity change from 0 to 512 [ 60.594983][ T6112] EXT4-fs: Mount option(s) incompatible with ext2 [ 60.713412][ T6110] syz_tun: entered promiscuous mode [ 60.733931][ T6110] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 60.769244][ T652] bond0: (slave bond_slave_0): interface is now down [ 60.769284][ T652] bond0: (slave bond_slave_1): interface is now down [ 60.769308][ T652] bond0: (slave syz_tun): interface is now down [ 60.778436][ T6110] netlink: 'syz.6.227': attribute type 1 has an invalid length. [ 60.784117][ T6110] 8021q: VLANs not supported on wg0 [ 60.787340][ T719] bond0: (slave bond_slave_0): interface is now down [ 60.787380][ T719] bond0: (slave bond_slave_1): interface is now down [ 60.787406][ T719] bond0: (slave syz_tun): interface is now down [ 60.807755][ T719] bond0: (slave bond_slave_0): interface is now down [ 60.807785][ T719] bond0: (slave bond_slave_1): interface is now down [ 60.807808][ T719] bond0: (slave syz_tun): interface is now down [ 60.826109][ T719] bond0: (slave bond_slave_0): interface is now down [ 60.826141][ T719] bond0: (slave bond_slave_1): interface is now down [ 60.826165][ T719] bond0: (slave syz_tun): interface is now down [ 60.848098][ T719] bond0: (slave bond_slave_0): interface is now down [ 60.848153][ T719] bond0: (slave bond_slave_1): interface is now down [ 60.848164][ T719] bond0: (slave syz_tun): interface is now down [ 60.853073][ T719] bond0: now running without any active interface! [ 61.000356][ T6133] loop6: detected capacity change from 0 to 256 [ 61.000824][ T6133] vfat: Unknown parameter 'nonumtaJl' [ 61.130443][ T6145] mmap: syz.4.233 (6145) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 61.130475][ T6147] fuse: Unknown parameter 'dd' [ 61.139483][ T6147] loop1: detected capacity change from 0 to 512 [ 61.141457][ T6147] EXT4-fs: Ignoring removed i_version option [ 61.145445][ T6147] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.176223][ T6147] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.178756][ T6151] netlink: 4 bytes leftover after parsing attributes in process `syz.6.235'. [ 61.249027][ T6151] hsr_slave_1 (unregistering): left promiscuous mode [ 61.258151][ T6163] netlink: 53 bytes leftover after parsing attributes in process `syz.4.236'. [ 61.258189][ T6163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.236'. [ 61.258739][ T6163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.236'. [ 61.258751][ T6163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.236'. [ 61.267651][ T6162] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 61.326899][ T6159] veth0: entered promiscuous mode [ 61.327440][ T6159] veth0_virt_wifi: entered promiscuous mode [ 61.333066][ T30] audit: type=1326 audit(317.309:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6171 comm="syz.6.238" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac7792a8 code=0x7ffc0000 [ 61.333118][ T30] audit: type=1326 audit(317.309:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6171 comm="syz.6.238" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac7792a8 code=0x7ffc0000 [ 61.334095][ T6158] veth0_virt_wifi: left promiscuous mode [ 61.334233][ T6158] veth0: left promiscuous mode [ 61.337591][ T30] audit: type=1326 audit(317.319:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6171 comm="syz.6.238" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac7792a8 code=0x7ffc0000 [ 61.338568][ T30] audit: type=1326 audit(317.319:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6171 comm="syz.6.238" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac7792a8 code=0x7ffc0000 [ 61.355976][ T30] audit: type=1326 audit(317.329:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6171 comm="syz.6.238" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffac7792a8 code=0x7ffc0000 [ 61.361268][ T30] audit: type=1326 audit(317.329:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6171 comm="syz.6.238" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac7792a8 code=0x7ffc0000 [ 61.371254][ T30] audit: type=1326 audit(317.339:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6171 comm="syz.6.238" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac7792a8 code=0x7ffc0000 [ 61.393496][ T6172] netlink: 8 bytes leftover after parsing attributes in process `syz.6.238'. [ 61.393547][ T6172] netlink: 'syz.6.238': attribute type 30 has an invalid length. [ 61.405369][ T6172] netlink: 'syz.6.238': attribute type 30 has an invalid length. [ 61.436110][ T719] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.436176][ T719] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.436197][ T719] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.436212][ T719] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.449244][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.528712][ T6193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.528822][ T6193] batadv_slave_1: entered promiscuous mode [ 61.544296][ T6184] FAT-fs (loop4): Directory bread(block 1285) failed [ 61.544344][ T6184] FAT-fs (loop4): Directory bread(block 1286) failed [ 61.544359][ T6184] FAT-fs (loop4): Directory bread(block 1287) failed [ 61.544399][ T6184] FAT-fs (loop4): Directory bread(block 1288) failed [ 61.810268][ T6190] netlink: 'syz.6.244': attribute type 3 has an invalid length. [ 61.852590][ T6194] loop6: p1 p3 < > [ 61.938911][ T6209] overlayfs: missing 'lowerdir' [ 62.003838][ T4704] udevd[4704]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 62.005381][ T4706] udevd[4706]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 62.009303][ T6212] EXT4-fs (loop5): Test dummy encryption mode enabled [ 62.012333][ T6212] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.029932][ T6212] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 62.035146][ T6215] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 62.040942][ T6215] bridge1: entered promiscuous mode [ 62.102596][ T5239] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.256379][ T6245] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.257: Parent and EA inode have the same ino 15 [ 62.256422][ T6245] loop5: lost filesystem error report for type 5 error -117 [ 62.258920][ T6245] EXT4-fs (loop5): Remounting filesystem read-only [ 62.259023][ T6245] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -30) [ 62.259073][ T6245] EXT4-fs (loop5): 1 orphan inode deleted [ 62.259558][ T6245] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.332072][ T6248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 62.577216][ T4721] Bluetooth: hci5: command tx timeout [ 63.105735][ T5239] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.131299][ T719] wlan1: Trigger new scan to find an IBSS to join [ 63.263501][ T6304] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 63.276781][ T6301] xt_hashlimit: size too large, truncated to 1048576 [ 63.277935][ T6305] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.283452][ T6304] EXT4-fs (loop5): 1 truncate cleaned up [ 63.300925][ T6304] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.405606][ T6302] overlayfs: failed to resolve './bus': -2 [ 63.412723][ T6316] ubifs: Bad value for 'auth_key' [ 63.423545][ T6318] EXT4-fs: Ignoring removed bh option [ 63.460851][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.470994][ T6318] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 63.527167][ T4721] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 63.527223][ T4721] Bluetooth: hci1: Injecting HCI hardware error event [ 63.528087][ T50] Bluetooth: hci1: hardware error 0x00 [ 63.680088][ T4712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 63.693497][ T6332] __nla_validate_parse: 4 callbacks suppressed [ 63.693743][ T6332] netlink: 96 bytes leftover after parsing attributes in process `syz.6.275'. [ 63.833033][ T6350] veth2: entered promiscuous mode [ 63.833064][ T6350] veth2: entered allmulticast mode [ 64.056464][ T6348] netlink: 144 bytes leftover after parsing attributes in process `syz.4.281'. [ 64.146975][ T5239] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.189752][ T6361] process 'syz.1.286' launched './file0' with NULL argv: empty string added [ 64.252287][ T6368] ip_tables: iptables: counters copy to user failed while replacing table [ 64.262947][ T6368] set_capacity_and_notify: 10 callbacks suppressed [ 64.263583][ T6368] loop4: detected capacity change from 0 to 8 [ 64.281866][ T6368] SQUASHFS error: Failed to read block 0x6e6: -5 [ 64.281901][ T6368] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 64.281909][ T6368] SQUASHFS error: Unable to read directory block [631:26] [ 64.440502][ T6378] netlink: 20 bytes leftover after parsing attributes in process `syz.5.292'. [ 64.488155][ T1543] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.488211][ T1543] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.492173][ T9] cfg80211: failed to load regulatory.db [ 64.604755][ T6390] IPVS: length: 226 != 24 [ 64.669613][ T6405] loop6: detected capacity change from 0 to 512 [ 64.670067][ T6405] /dev/loop6: Can't open blockdev [ 64.752639][ T6409] loop1: detected capacity change from 0 to 256 [ 64.753068][ T6409] vfat: Unknown parameter 'fscontext' [ 65.117761][ T6414] loop1: detected capacity change from 0 to 512 [ 65.251737][ T6423] loop3: detected capacity change from 0 to 512 [ 65.253618][ T6423] EXT4-fs: Ignoring removed nobh option [ 65.266552][ T6423] EXT4-fs warning (device loop3): ext4_xattr_inode_get:546: inode #11: comm syz.3.302: ea_inode file size=0 entry size=6 [ 65.266752][ T6423] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.302: iget: bad extra_isize 90 (inode size 256) [ 65.266785][ T6423] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 65.268263][ T6423] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.302: error while reading EA inode 11 err=-117 [ 65.268296][ T6423] loop3: lost filesystem error report for type 5 error -117 [ 65.269478][ T6423] EXT4-fs (loop3): 1 orphan inode deleted [ 65.272198][ T6423] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.328287][ T4725] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.416410][ T6388] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 65.416477][ T6388] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 65.432361][ T6388] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 65.441123][ T6388] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 65.441168][ T6388] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 65.443727][ T6388] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 65.448522][ T6388] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 65.448582][ T6388] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 65.451744][ T6388] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 65.455702][ T6388] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 65.455901][ T6388] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 65.457806][ T6388] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 65.567682][ T6427] netlink: 24 bytes leftover after parsing attributes in process `syz.3.303'. [ 65.576804][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 65.576841][ T30] audit: type=1326 audit(321.559:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6429 comm="syz.5.304" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff82b792a8 code=0x0 [ 65.583632][ T6428] netlink: 24 bytes leftover after parsing attributes in process `syz.3.303'. [ 65.757585][ T50] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 66.087748][ T778] wlan1: Creating new IBSS network, BSSID 7a:34:4d:1d:a1:b5 [ 66.457024][ T6448] netlink: 24 bytes leftover after parsing attributes in process `syz.5.304'. [ 66.651025][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 66.697506][ T6470] loop4: detected capacity change from 0 to 2048 [ 66.707730][ T6470] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.092833][ T6475] loop6: detected capacity change from 0 to 512 [ 67.159979][ T6475] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.623132][ T50] Bluetooth: hci5: command 0x0c1a tx timeout [ 67.623160][ T4714] Bluetooth: hci3: command 0x0c1a tx timeout [ 67.623198][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 67.808467][ T6484] loop5: detected capacity change from 0 to 4096 [ 67.829526][ T6484] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.861994][ T4712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.885322][ T6489] Injecting memory failure for pfn 0x219070 at process virtual address 0x20276000 [ 67.920519][ T5239] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.949927][ T6489] Memory failure: 0x219070: unhandlable page. [ 67.949972][ T6489] Memory failure: 0x219070: recovery action for get hwpoison page: Ignored [ 68.045304][ T5701] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.054806][ T6497] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd83 [ 68.188735][ T6500] loop6: detected capacity change from 0 to 2048 [ 68.193176][ T6503] loop4: detected capacity change from 0 to 512 [ 68.193595][ T6503] EXT4-fs: inline encryption not supported [ 68.201889][ T6503] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #15: comm syz.4.323: corrupted inode contents [ 68.201929][ T6503] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 68.202101][ T6503] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 68.202112][ T6503] loop4: lost filesystem error report for type 5 error -117 [ 68.202225][ T6503] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #15: comm syz.4.323: corrupted inode contents [ 68.202236][ T6503] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 68.202343][ T6503] EXT4-fs error (device loop4): ext4_evict_inode:315: inode #15: comm syz.4.323: mark_inode_dirty error [ 68.202353][ T6503] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 68.202510][ T6503] EXT4-fs (loop4): 1 orphan inode deleted [ 68.202968][ T6503] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.227140][ T4721] Bluetooth: hci0: unexpected event for opcode 0x204e [ 68.464382][ T6500] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.550198][ T6500] netlink: 'syz.6.321': attribute type 1 has an invalid length. [ 68.550247][ T6500] netlink: 'syz.6.321': attribute type 1 has an invalid length. [ 68.583119][ T4712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.583531][ T5701] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.705680][ T6515] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 68.705885][ T6515] System zones: 1-3, 19-19, 35-36 [ 68.712775][ T6515] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 68.883660][ T6525] netlink: 'syz.6.326': attribute type 1 has an invalid length. [ 68.918186][ T6525] bond1: entered promiscuous mode [ 68.918431][ T6525] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.919055][ T6525] netlink: 'syz.6.326': attribute type 1 has an invalid length. [ 68.921159][ T6525] netlink: 'syz.6.326': attribute type 1 has an invalid length. [ 68.921248][ T6525] netlink: 'syz.6.326': attribute type 1 has an invalid length. [ 68.921305][ T6525] netlink: 'syz.6.326': attribute type 1 has an invalid length. [ 68.921357][ T6525] netlink: 'syz.6.326': attribute type 1 has an invalid length. [ 68.921406][ T6525] netlink: 'syz.6.326': attribute type 1 has an invalid length. [ 68.921554][ T6525] netlink: 'syz.6.326': attribute type 1 has an invalid length. [ 68.991194][ T6525] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.991422][ T6525] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 68.991453][ T6525] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 68.992675][ T6525] bond1: (slave ip6gre1): making interface the new active one [ 68.992693][ T6525] ip6gre1: entered promiscuous mode [ 68.994282][ T6525] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 69.093669][ T5239] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.111985][ T6546] EXT4-fs: user quota file already specified [ 69.201094][ T6557] 9p: Bad value for 'wfdno' [ 69.230394][ T6559] netlink: 88 bytes leftover after parsing attributes in process `syz.5.335'. [ 69.248054][ T6557] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 69.284371][ T6563] set_capacity_and_notify: 3 callbacks suppressed [ 69.284527][ T6563] loop5: detected capacity change from 0 to 256 [ 69.312889][ T6565] bond1: Removing last ns target with arp_interval on [ 69.318677][ T6563] netlink: 36 bytes leftover after parsing attributes in process `syz.5.336'. [ 69.460566][ T6578] loop1: detected capacity change from 0 to 8192 [ 69.686398][ T4719] Bluetooth: hci5: command 0x0c1a tx timeout [ 69.694593][ T4714] Bluetooth: hci3: command 0x0c1a tx timeout [ 69.706839][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 69.717629][ T6578] loop1: p2 < > p4 < > [ 69.717657][ T6578] loop1: partition table partially beyond EOD, truncated [ 69.717762][ T6578] loop1: p2 start 16776960 is beyond EOD, truncated [ 69.771952][ T4706] udevd[4706]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 69.872961][ T6587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.344'. [ 70.104268][ T6603] capability: warning: `syz.4.350' uses 32-bit capabilities (legacy support in use) [ 70.124350][ T6605] loop4: detected capacity change from 0 to 8 [ 70.127006][ T6605] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 70.129509][ T6605] unable to read xattr id index table [ 70.131210][ T6605] SQUASHFS error: zlib decompression failed, data probably corrupt [ 70.132910][ T6605] SQUASHFS error: Failed to read block 0x9b: -5 [ 70.134234][ T6605] SQUASHFS error: Unable to read metadata cache entry [99] [ 70.135824][ T6605] SQUASHFS error: Unable to read inode 0x127 [ 71.138350][ T6629] loop3: detected capacity change from 0 to 128 [ 71.140939][ T6632] loop6: detected capacity change from 0 to 128 [ 71.145257][ T6632] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 71.149915][ T6632] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 71.155301][ T6629] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.231133][ T6640] loop1: detected capacity change from 0 to 512 [ 71.240570][ T6640] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 71.240618][ T6640] EXT4-fs (loop1): group descriptors corrupted! [ 71.258569][ T652] Bluetooth: hci2: Frame reassembly failed (-84) [ 71.503011][ T6646] netlink: 12 bytes leftover after parsing attributes in process `syz.5.359'. [ 71.699956][ T6669] 9p: Bad value for 'rfdno' [ 71.766184][ T4719] Bluetooth: hci4: command 0x0c1a tx timeout [ 71.766231][ T4719] Bluetooth: hci5: command 0x0c1a tx timeout [ 71.766261][ T4719] Bluetooth: hci3: command 0x0c1a tx timeout [ 71.828408][ T30] audit: type=1326 audit(327.809:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6689 comm="syz.1.373" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6f792a8 code=0x0 [ 71.998373][ T5701] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.360046][ T6729] loop5: detected capacity change from 0 to 512 [ 72.360434][ T6729] EXT4-fs: Ignoring removed bh option [ 72.360446][ T6729] EXT4-fs: Ignoring removed i_version option [ 72.360455][ T6729] EXT4-fs: Ignoring removed mblk_io_submit option [ 72.360464][ T6729] EXT4-fs: inline encryption not supported [ 72.361846][ T6729] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 72.372053][ T6729] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 72.372192][ T6729] EXT4-fs (loop5): orphan cleanup on readonly fs [ 72.372705][ T6729] Quota error (device loop5): do_insert_tree: Free block already used in tree: block 4 [ 72.372736][ T6729] Quota error (device loop5): qtree_write_dquot: Error -5 occurred while creating quota [ 72.372765][ T6729] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.375: Failed to acquire dquot type 1 [ 72.372777][ T6729] loop5: lost filesystem error report for type 5 error -5 [ 72.373019][ T6729] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.375: Invalid block bitmap block 0 in block_group 0 [ 72.373032][ T6729] loop5: lost filesystem error report for type 5 error -117 [ 72.373301][ T6729] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.375: Invalid block bitmap block 0 in block_group 0 [ 72.373313][ T6729] loop5: lost filesystem error report for type 5 error -117 [ 72.376035][ C1] EXT4-fs (loop5): error count since last fsck: 3 [ 72.376049][ C1] EXT4-fs (loop5): last error at time 328: ext4_read_block_bitmap_nowait:483 [ 72.376927][ T6729] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.375: Invalid block bitmap block 0 in block_group 0 [ 72.376948][ T6729] loop5: lost filesystem error report for type 5 error -117 [ 72.377160][ T6729] Quota error (device loop5): write_blk: dquota write failed [ 72.377190][ T6729] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 72.377203][ T6729] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.375: Failed to acquire dquot type 1 [ 72.377213][ T6729] loop5: lost filesystem error report for type 5 error -28 [ 72.377459][ T6729] Quota error (device loop5): write_blk: dquota write failed [ 72.377487][ T6729] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 72.377497][ T6729] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.375: Failed to acquire dquot type 1 [ 72.377512][ T6729] loop5: lost filesystem error report for type 5 error -28 [ 72.377771][ T6729] EXT4-fs (loop5): 1 orphan inode deleted [ 72.398700][ T6729] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.422845][ T5239] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.440909][ T6732] loop5: detected capacity change from 0 to 256 [ 73.003696][ T6752] loop6: detected capacity change from 0 to 8 [ 73.005518][ T6752] squashfs: Unknown parameter '' [ 73.052142][ T6754] loop6: detected capacity change from 0 to 512 [ 73.055313][ T6754] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 73.080909][ T6754] EXT4-fs warning (device loop6): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 73.082037][ T6754] EXT4-fs (loop6): mount failed [ 73.103411][ T6072] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.114268][ T6754] vfat: Unknown parameter '' [ 73.169030][ T4719] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.171929][ T4719] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.174529][ T4719] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.180328][ T4719] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.182542][ T4719] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.286072][ T50] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 73.333984][ T6629] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.494947][ T6781] EXT4-fs: Ignoring removed orlov option [ 73.498478][ T6072] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.509436][ T6781] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.589328][ T4725] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.617539][ T6072] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.663563][ T6766] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.663614][ T6766] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.663701][ T6766] bridge_slave_0: entered allmulticast mode [ 73.664182][ T6766] bridge_slave_0: entered promiscuous mode [ 73.666340][ T6766] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.666479][ T6766] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.666612][ T6766] bridge_slave_1: entered allmulticast mode [ 73.667092][ T6766] bridge_slave_1: entered promiscuous mode [ 73.677290][ T6766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.678786][ T6766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.689590][ T6766] team0: Port device team_slave_0 added [ 73.690547][ T6766] team0: Port device team_slave_1 added [ 73.703080][ T6766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.703098][ T6766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.703112][ T6766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.705538][ T6766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.705553][ T6766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.705564][ T6766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.791554][ T6766] hsr_slave_0: entered promiscuous mode [ 73.792796][ T6766] hsr_slave_1: entered promiscuous mode [ 73.802012][ T6798] vfat: Unknown parameter 'nonumtai' [ 73.808215][ T6072] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.847414][ T4714] Bluetooth: hci5: command 0x0c1a tx timeout [ 73.983349][ T6072] bridge_slave_1: left allmulticast mode [ 73.983387][ T6072] bridge_slave_1: left promiscuous mode [ 73.983502][ T6072] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.994614][ T6072] bridge_slave_0: left allmulticast mode [ 73.994652][ T6072] bridge_slave_0: left promiscuous mode [ 73.994761][ T6072] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.113487][ T6823] trusted_key: syz.1.394 sent an empty control message without MSG_MORE. [ 74.597594][ T6072] gretap0 (unregistering): left promiscuous mode [ 74.635367][ T6072] bond0 (unregistering): left promiscuous mode [ 74.635403][ T6072] bond_slave_0: left promiscuous mode [ 74.635486][ T6072] bond_slave_1: left promiscuous mode [ 74.654190][ T6072] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.679404][ T6854] set_capacity_and_notify: 13 callbacks suppressed [ 74.680765][ T6854] loop3: detected capacity change from 0 to 512 [ 74.682577][ T6854] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 74.684308][ T6854] EXT4-fs (loop3): 1 truncate cleaned up [ 74.685402][ T6854] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.691829][ T6072] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.701638][ T6854] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.398: invalid indirect mapped block 2185560079 (level 0) [ 74.708220][ T6854] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.398: invalid indirect mapped block 65535 (level 2) [ 74.711876][ T6854] EXT4-fs error (device loop3): __ext4_get_inode_loc:4886: comm syz.3.398: Invalid inode table block 0 in block_group 0 [ 74.718344][ T6072] bond0 (unregistering): Released all slaves [ 74.723402][ T6854] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 74.732776][ T6854] EXT4-fs error (device loop3): ext4_splice_branch:479: inode #13: comm syz.3.398: mark_inode_dirty error [ 74.737589][ T6854] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.398: bg 0: block 46: invalid block bitmap [ 74.744418][ T6854] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 74.745688][ T6864] EXT4-fs error (device loop3): __ext4_get_inode_loc:4886: comm syz.3.398: Invalid inode table block 0 in block_group 0 [ 74.750927][ T6854] EXT4-fs error (device loop3): __ext4_get_inode_loc:4886: comm syz.3.398: Invalid inode table block 0 in block_group 0 [ 74.755532][ T6864] EXT4-fs error (device loop3): __ext4_get_inode_loc:4886: comm syz.3.398: Invalid inode table block 0 in block_group 0 [ 74.783583][ T4404] 8021q: adding VLAN 0 to HW filter on device eth8 [ 74.828501][ T6867] loop5: detected capacity change from 0 to 128 [ 74.832020][ T6867] FAT-fs (loop5): bogus number of reserved sectors [ 74.832067][ T6867] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 74.832085][ T6867] FAT-fs (loop5): Can't find a valid FAT filesystem [ 74.928417][ T6876] input: syz0 as /devices/virtual/input/input6 [ 75.000969][ T4725] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.123852][ T6887] loop6: detected capacity change from 0 to 512 [ 75.141841][ T6887] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 75.145744][ T6887] EXT4-fs (loop6): orphan cleanup on readonly fs [ 75.147484][ T6887] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.405: Block bitmap for bg 0 marked uninitialized [ 75.147513][ T6887] loop6: lost filesystem error report for type 5 error -117 [ 75.148109][ T6887] EXT4-fs (loop6): Remounting filesystem read-only [ 75.148223][ T6887] EXT4-fs (loop6): 1 orphan inode deleted [ 75.148701][ T6887] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 75.195255][ T5701] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.206368][ T4714] Bluetooth: hci0: command tx timeout [ 75.385573][ T6072] hsr_slave_0: left promiscuous mode [ 75.387377][ T6072] hsr_slave_1: left promiscuous mode [ 75.387940][ T6072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.387954][ T6072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.389927][ T6072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.389938][ T6072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.393298][ T6072] veth1_macvtap: left promiscuous mode [ 75.393326][ T6072] veth0_macvtap: left promiscuous mode [ 75.393385][ T6072] veth1_vlan: left promiscuous mode [ 75.393421][ T6072] veth0_vlan: left promiscuous mode [ 75.489696][ T6072] team0 (unregistering): Port device team_slave_1 removed [ 75.493520][ T6072] team0 (unregistering): Port device team_slave_0 removed [ 75.527296][ T6914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.409'. [ 75.530715][ T6914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.409'. [ 75.534879][ T6914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.409'. [ 75.600059][ T6910] bond1: option miimon: invalid value (18446744073709551609) [ 75.600098][ T6910] bond1: option miimon: allowed values 0 - 2147483647 [ 75.603950][ T6910] bond1 (unregistering): Released all slaves [ 75.797252][ T6939] loop6: detected capacity change from 0 to 512 [ 75.799236][ T6939] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.825636][ T6939] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.841577][ T6939] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 75.841642][ T6939] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 75.841668][ T6939] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.413: Failed to acquire dquot type 1 [ 75.890431][ T5701] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.901055][ T6766] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.910525][ T6766] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.916932][ T6766] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.927403][ T6766] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.927821][ T6766] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.946973][ T6766] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.947429][ T6766] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.955415][ T6766] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.965795][ T6953] sctp: [Deprecated]: syz.3.415 (pid 6953) Use of struct sctp_assoc_value in delayed_ack socket option. [ 75.965795][ T6953] Use struct sctp_sack_info instead [ 76.104344][ T6766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.114828][ T6766] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.159715][ T719] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.159771][ T719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.160333][ T719] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.160353][ T719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.252902][ T6982] netlink: 24 bytes leftover after parsing attributes in process `syz.1.417'. [ 76.281669][ T6987] loop6: detected capacity change from 0 to 1024 [ 76.282349][ T6987] ext4: Unknown parameter '' [ 76.385254][ T6994] netlink: 24 bytes leftover after parsing attributes in process `syz.1.419'. [ 76.412175][ T7004] loop6: detected capacity change from 0 to 512 [ 76.419241][ T7004] EXT4-fs (loop6): Test dummy encryption mode enabled [ 76.423744][ T6766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.431554][ T7004] EXT4-fs (loop6): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.435571][ T7004] EXT4-fs (loop6): shut down requested (2) [ 76.480422][ T7012] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 76.510420][ T5701] EXT4-fs (loop6): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 76.581165][ T7012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.421'. [ 76.595528][ T7012] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 76.606420][ T7031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.421'. [ 76.606628][ T7028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.421'. [ 76.657625][ T6766] veth0_vlan: entered promiscuous mode [ 76.659449][ T6766] veth1_vlan: entered promiscuous mode [ 76.691075][ T6766] veth0_macvtap: entered promiscuous mode [ 76.694805][ T6766] veth1_macvtap: entered promiscuous mode [ 76.700148][ T6766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.702773][ T6766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.707895][ T5579] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.708086][ T5579] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.708151][ T5579] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.708213][ T5579] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.804271][ T7045] loop1: detected capacity change from 0 to 128 [ 76.821168][ T7043] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 76.821424][ T719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.821435][ T719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.828654][ T7045] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.853808][ T7048] netlink: 32 bytes leftover after parsing attributes in process `syz.6.428'. [ 76.859615][ T5579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.859653][ T5579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.877496][ T4713] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.896921][ T7048] netlink: 52 bytes leftover after parsing attributes in process `syz.6.428'. [ 77.022315][ T7064] block2mtd: device name too long [ 77.029354][ T7064] loop6: detected capacity change from 0 to 512 [ 77.061123][ T7064] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.065804][ T7064] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.433: corrupted xattr block 33: invalid header [ 77.074540][ T7064] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.433: corrupted xattr block 33: invalid header [ 77.080516][ T7064] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.433: corrupted xattr block 33: invalid header [ 77.309717][ T4714] Bluetooth: hci0: command tx timeout [ 77.381917][ T5701] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.407461][ T7088] loop6: detected capacity change from 0 to 256 [ 77.464885][ T7091] loop6: detected capacity change from 0 to 512 [ 77.465253][ T7091] EXT4-fs: Ignoring removed mblk_io_submit option [ 77.468036][ T7091] EXT4-fs (loop6): orphan cleanup on readonly fs [ 77.468069][ T7091] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 77.469886][ T7091] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.437: attempt to clear invalid blocks 2 len 1 [ 77.469904][ T7091] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 77.470255][ T7091] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 77.471943][ T7091] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.437: invalid indirect mapped block 1819239214 (level 0) [ 77.471969][ T7091] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 77.474292][ T7091] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.437: invalid indirect mapped block 1819239214 (level 1) [ 77.474310][ T7091] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 77.475438][ T7091] EXT4-fs (loop6): 1 truncate cleaned up [ 77.475873][ T7091] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.495040][ T5701] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.522174][ T7094] FAULT_INJECTION: forcing a failure. [ 77.522174][ T7094] name failslab, interval 1, probability 0, space 0, times 0 [ 77.525016][ T7094] CPU: 0 UID: 0 PID: 7094 Comm: syz.1.438 Tainted: G L syzkaller #0 PREEMPT [ 77.525041][ T7094] Tainted: [L]=SOFTLOCKUP [ 77.525045][ T7094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 77.525051][ T7094] Call trace: [ 77.525055][ T7094] show_stack+0x2c/0x3c (C) [ 77.525079][ T7094] __dump_stack+0x30/0x40 [ 77.525092][ T7094] dump_stack_lvl+0xd8/0x12c [ 77.525104][ T7094] dump_stack+0x1c/0x28 [ 77.525116][ T7094] should_fail_ex+0x41c/0x590 [ 77.525125][ T7094] should_failslab+0xc4/0x120 [ 77.525134][ T7094] __kmalloc_noprof+0x108/0x6b8 [ 77.525144][ T7094] security_prepare_creds+0x60/0x35c [ 77.525154][ T7094] prepare_creds+0x500/0x7d0 [ 77.525166][ T7094] lookup_user_key+0x1a4/0xd4c [ 77.525176][ T7094] __arm64_sys_add_key+0x34c/0x43c [ 77.525184][ T7094] invoke_syscall+0x98/0x244 [ 77.525196][ T7094] el0_svc_common+0xec/0x23c [ 77.525208][ T7094] do_el0_svc+0x4c/0x5c [ 77.525220][ T7094] el0_svc+0x64/0x260 [ 77.525230][ T7094] el0t_64_sync_handler+0x44/0x104 [ 77.525240][ T7094] el0t_64_sync+0x198/0x19c [ 77.636486][ T7100] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.440: corrupted inode contents [ 77.636535][ T7100] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 77.641237][ T7100] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 77.645150][ T7100] loop1: lost filesystem error report for type 5 error -117 [ 77.645801][ T7100] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.440: corrupted inode contents [ 77.646038][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 77.646055][ C1] EXT4-fs (loop1): initial error at time 333: ext4_do_update_inode:5742: inode 15 [ 77.646071][ C1] EXT4-fs (loop1): last error at time 333: ext4_orphan_del:303 [ 77.655913][ T7100] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 77.656973][ T7100] EXT4-fs error (device loop1): ext4_evict_inode:315: inode #15: comm syz.1.440: mark_inode_dirty error [ 77.657019][ T7100] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 77.661576][ T7104] Dev loop4: unable to read RDB block 7 [ 77.661598][ T7104] loop4: unable to read partition table [ 77.661650][ T7100] EXT4-fs (loop1): 1 orphan inode deleted [ 77.661657][ T7104] loop4: partition table beyond EOD, truncated [ 77.661666][ T7104] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 77.662079][ T7100] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.715247][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.758701][ T7115] WARNING! power/level is deprecated; use power/control instead [ 77.764553][ T7115] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 77.864095][ T7123] EXT4-fs (loop3): 1 truncate cleaned up [ 77.867438][ T7123] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.885841][ T4725] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.996400][ T7147] tipc: Started in network mode [ 77.997426][ T7147] tipc: Node identity fe9b2bf06331, cluster identity 4711 [ 77.998883][ T7147] tipc: Enabled bearer , priority 0 [ 78.000759][ T7147] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 78.009841][ T7143] tipc: Disabling bearer [ 78.287189][ T7151] xfrm1: entered promiscuous mode [ 78.288427][ T7151] xfrm1: entered allmulticast mode [ 78.440943][ T30] audit: type=1400 audit(334.419:48): lsm=SMACK fn=smack_inode_rename action=denied subject="_" object="l" requested=rw pid=7160 comm="syz.6.456" name="file1" dev="tmpfs" ino=347 [ 78.493297][ T7165] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.496721][ T7165] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 78.499504][ T7165] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 78.501311][ T7165] EXT4-fs (loop6): orphan cleanup on readonly fs [ 78.504708][ T7165] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #3: block 3: comm syz.6.458: lblock 3 mapped to illegal pblock 3 (length 1) [ 78.504746][ T7165] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 78.508988][ T7165] Quota error (device loop6): write_blk: dquota write failed [ 78.509006][ T7165] Quota error (device loop6): find_free_dqentry: Can't write quota data block 3 [ 78.509061][ T7165] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 78.509089][ T7165] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.458: Failed to acquire dquot type 0 [ 78.509101][ T7165] loop6: lost filesystem error report for type 5 error -117 [ 78.516959][ T7165] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 3: comm syz.6.458: lblock 3 mapped to illegal pblock 3 (length 1) [ 78.517051][ T7165] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 78.517230][ T7165] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 78.517253][ T7165] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.458: Failed to acquire dquot type 0 [ 78.517264][ T7165] loop6: lost filesystem error report for type 5 error -117 [ 78.517456][ T7165] EXT4-fs error (device loop6): ext4_free_blocks:6718: comm syz.6.458: Freeing blocks not in datazone - block = 0, count = 4096 [ 78.517468][ T7165] loop6: lost filesystem error report for type 5 error -117 [ 78.517698][ C0] EXT4-fs (loop6): error count since last fsck: 5 [ 78.517714][ C0] EXT4-fs (loop6): initial error at time 334: ext4_map_blocks:833: inode 3: block 3 [ 78.517733][ C0] EXT4-fs (loop6): last error at time 334: ext4_free_blocks:6718 [ 78.517769][ T7165] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 3: comm syz.6.458: lblock 3 mapped to illegal pblock 3 (length 1) [ 78.517787][ T7165] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 78.519404][ T7165] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 78.519434][ T7165] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.458: Failed to acquire dquot type 0 [ 78.519446][ T7165] loop6: lost filesystem error report for type 5 error -117 [ 78.519631][ T7165] EXT4-fs (loop6): 1 orphan inode deleted [ 78.528809][ T7165] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.725159][ T7173] validate_nla: 25 callbacks suppressed [ 78.725211][ T7173] netlink: 'syz.1.461': attribute type 21 has an invalid length. [ 78.766793][ T7179] tipc: Started in network mode [ 78.768015][ T7179] tipc: Node identity 626c4d5013a, cluster identity 4711 [ 78.769658][ T7179] tipc: Enabled bearer , priority 0 [ 78.773380][ T7179] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 78.801406][ T7178] tipc: Disabling bearer [ 78.835031][ T7189] netlink: 'syz.3.466': attribute type 1 has an invalid length. [ 78.853342][ T7189] bond2: entered promiscuous mode [ 78.855034][ T7189] 8021q: adding VLAN 0 to HW filter on device bond2 [ 78.868647][ T7189] 8021q: adding VLAN 0 to HW filter on device bond2 [ 78.871077][ T7189] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 78.873403][ T7189] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 78.877628][ T7189] bond2: (slave ip6gre1): making interface the new active one [ 78.879252][ T7189] ip6gre1: entered promiscuous mode [ 78.881091][ T7189] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 78.972068][ T7200] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.973979][ T7200] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 79.001901][ T7202] i2c i2c-0: new_device: Can't parse I2C address [ 79.002023][ T7205] i2c i2c-0: new_device: Can't parse I2C address [ 79.003781][ T7200] EXT4-fs (loop3): 1 truncate cleaned up [ 79.004255][ T7200] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.059211][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 79.084436][ T7200] EXT4-fs (loop3): shut down requested (0) [ 79.178904][ T7213] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 79.366630][ T4714] Bluetooth: hci0: command tx timeout [ 79.425158][ T4725] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.414108][ T7210] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 80.414317][ T7210] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 80.414534][ T7210] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 80.415297][ T7210] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 80.415367][ T7210] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 80.776840][ T7210] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 81.132831][ T7229] tipc: Enabling of bearer rejected, failed to enable media [ 81.158558][ T7227] __nla_validate_parse: 267 callbacks suppressed [ 81.158608][ T7227] netlink: 16 bytes leftover after parsing attributes in process `syz.3.475'. [ 81.238466][ T7232] set_capacity_and_notify: 6 callbacks suppressed [ 81.238552][ T7232] loop1: detected capacity change from 0 to 512 [ 81.292256][ T7232] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 81.398050][ T7232] Quota error (device loop1): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 81.398224][ T7232] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 81.398321][ T7232] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.476: Failed to acquire dquot type 0 [ 81.406811][ T7232] overlayfs: failed to set uuid (/file0, err=-117); falling back to uuid=null. [ 81.456273][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 81.584813][ T5701] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.027832][ T4713] EXT4-fs error (device loop1): ext4_readdir:265: inode #11: block 4: comm syz-executor: path /110/file1/lost+found: bad entry in directory: directory entry overrun - offset=12, inode=2, rec_len=67332, size=2048 fake=1 [ 82.035978][ T4713] EXT4-fs error (device loop1): ext4_empty_dir:3101: inode #11: block 4: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=2, rec_len=67332, size=2048 fake=1 [ 82.119157][ T4713] EXT4-fs warning (device loop1): ext4_empty_dir:3104: inode #11: comm syz-executor: directory missing '..' [ 82.119755][ T4713] EXT4-fs error (device loop1): ext4_readdir:265: inode #11: block 4: comm syz-executor: path /110/file1/lost+found: bad entry in directory: directory entry overrun - offset=12, inode=2, rec_len=67332, size=2048 fake=1 [ 82.120698][ T4713] EXT4-fs error (device loop1): ext4_empty_dir:3101: inode #11: block 4: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=2, rec_len=67332, size=2048 fake=1 [ 82.132627][ T4713] EXT4-fs warning (device loop1): ext4_empty_dir:3104: inode #11: comm syz-executor: directory missing '..' [ 82.133231][ T4713] EXT4-fs error (device loop1): ext4_readdir:265: inode #11: block 4: comm syz-executor: path /110/file1/lost+found: bad entry in directory: directory entry overrun - offset=12, inode=2, rec_len=67332, size=2048 fake=1 [ 82.143248][ T4713] EXT4-fs error (device loop1): ext4_empty_dir:3101: inode #11: block 4: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=2, rec_len=67332, size=2048 fake=1 [ 82.144293][ T4713] EXT4-fs warning (device loop1): ext4_empty_dir:3104: inode #11: comm syz-executor: directory missing '..' [ 82.144884][ T4713] EXT4-fs error (device loop1): ext4_readdir:265: inode #11: block 4: comm syz-executor: path /110/file1/lost+found: bad entry in directory: directory entry overrun - offset=12, inode=2, rec_len=67332, size=2048 fake=1 [ 82.147234][ T4713] EXT4-fs error (device loop1): ext4_empty_dir:3101: inode #11: block 4: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=2, rec_len=67332, size=2048 fake=1 [ 82.148663][ T4713] EXT4-fs warning (device loop1): ext4_empty_dir:3104: inode #11: comm syz-executor: directory missing '..' [ 82.150595][ T4713] EXT4-fs error (device loop1): ext4_readdir:265: inode #11: block 4: comm syz-executor: path /110/file1/lost+found: bad entry in directory: directory entry overrun - offset=12, inode=2, rec_len=67332, size=2048 fake=1 [ 82.157677][ T4713] EXT4-fs warning (device loop1): ext4_empty_dir:3104: inode #11: comm syz-executor: directory missing '..' [ 82.167379][ T4713] EXT4-fs warning (device loop1): ext4_empty_dir:3104: inode #11: comm syz-executor: directory missing '..' [ 82.169277][ T4713] EXT4-fs warning (device loop1): ext4_empty_dir:3104: inode #11: comm syz-executor: directory missing '..' [ 82.175249][ T4713] EXT4-fs warning (device loop1): ext4_empty_dir:3104: inode #11: comm syz-executor: directory missing '..' [ 82.334079][ T4713] EXT4-fs warning (device loop1): ext4_empty_dir:3104: inode #11: comm syz-executor: directory missing '..' [ 82.336838][ T4713] EXT4-fs warning (device loop1): ext4_empty_dir:3104: inode #11: comm syz-executor: directory missing '..' [ 83.088005][ T7259] x_tables: duplicate underflow at hook 2 [ 83.135018][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 83.135099][ T50] Bluetooth: hci5: command 0x0c1a tx timeout [ 83.135143][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 83.877832][ T7269] loop3: detected capacity change from 0 to 256 [ 84.012885][ T7267] loop6: detected capacity change from 0 to 2048 [ 84.042079][ T7267] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.042164][ T7267] EXT4-fs: inline encryption not supported [ 84.063746][ T7267] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 84.880811][ T5701] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.965608][ T7276] tipc: Enabling of bearer rejected, failed to enable media [ 85.206382][ T4714] Bluetooth: hci0: command 0x0c1a tx timeout [ 85.477020][ T7291] loop6: detected capacity change from 0 to 512 [ 85.487462][ T7291] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 85.586818][ T7291] EXT4-fs (loop6): 1 truncate cleaned up [ 85.598990][ T7291] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.798125][ T7297] loop4: detected capacity change from 0 to 1024 [ 85.839524][ T7297] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.945671][ T5701] EXT4-fs error (device loop6): ext4_lookup:1785: inode #11: comm syz-executor: iget: bad extra_isize 46 (inode size 256) [ 85.987481][ T5701] EXT4-fs (loop6): Remounting filesystem read-only [ 86.171860][ T7097] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.185147][ T6907] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 86.257324][ T6766] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.314971][ T6071] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.318482][ T6071] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.449165][ T7302] could not allocate digest TFM handle crc32c-intel [ 86.522993][ T7281] input: syz0 as /devices/virtual/input/input7 [ 86.549381][ T7097] bond0: (slave syz_tun): Releasing backup interface [ 86.564887][ T7281] loop3: detected capacity change from 0 to 256 [ 86.750383][ T6071] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.750468][ T6071] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.018177][ T6071] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.018245][ T6071] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.134053][ T6071] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.134135][ T6071] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.286369][ T4714] Bluetooth: hci0: command 0x0c1a tx timeout [ 87.352337][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.354178][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.355691][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.357349][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.358909][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.360132][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.361751][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.362974][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.365117][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.366607][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.368354][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.369495][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.370915][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.372060][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.373575][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.374801][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.376482][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.377722][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.379546][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.381106][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.382543][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.383686][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.385177][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.454398][ T7319] binder: 7317:7319 ioctl c0306201 20000080 returned -14 [ 87.460598][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.463437][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.464906][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.468077][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.469331][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.470824][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.472012][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.473516][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.474712][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.476259][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.477425][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.478889][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.480154][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.481549][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.482676][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.484083][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.485276][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.486979][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.488256][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.489681][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.490890][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.492348][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.493499][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.495114][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.496629][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.498082][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.499300][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.500753][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.501941][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.503408][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.504633][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.506520][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.507758][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.509551][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.510771][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.512302][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.516087][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.579307][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.579358][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.580244][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.580269][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.580373][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.580394][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.580479][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.580503][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.580599][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.580619][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.580716][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.580735][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.580823][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.580841][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.580924][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.580942][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.581023][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.581042][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.581129][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.581148][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.581229][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.581248][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.581329][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.581348][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.581431][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.581449][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.581545][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.581567][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.581655][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.581674][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.581756][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.581775][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.581858][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.581876][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.581965][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.581983][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.582065][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.582083][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.582164][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.582183][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.582264][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.582282][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.582370][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.582389][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.582470][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.582488][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.582578][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.582597][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.582685][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.582703][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.582793][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.582812][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.582893][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.582911][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.582993][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.583011][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.583092][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.583110][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.583199][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.583217][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.584134][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.584155][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.584246][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.584264][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.584347][ T7325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.584366][ T7325] binder: 7317:7325 ioctl 4018620d 20003280 returned -16 [ 87.769308][ T7330] binder: BINDER_SET_CONTEXT_MGR already set [ 87.773859][ T7330] binder: 7317:7330 ioctl 4018620d 20000040 returned -16 [ 87.775562][ T7330] binder: BINDER_SET_CONTEXT_MGR already set [ 87.798296][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.806411][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.810074][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.816412][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.821358][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.827167][ T7330] binder: 7317:7330 ioctl 4018620d 20000040 returned -16 [ 87.830072][ T7330] binder: BINDER_SET_CONTEXT_MGR already set [ 87.844859][ T7330] binder: 7317:7330 ioctl 4018620d 20000040 returned -16 [ 87.852067][ T7330] binder: BINDER_SET_CONTEXT_MGR already set [ 87.856607][ T7330] binder: 7317:7330 ioctl 4018620d 20000040 returned -16 [ 87.859478][ T7331] binder: 7317:7331 context manager tried to acquire desc 0 [ 87.861169][ T7331] binder: 7317:7331 ioctl c0306201 200003c0 returned -22 [ 87.862864][ T7331] binder: 7317:7331 context manager tried to acquire desc 0 [ 87.865320][ T7331] binder: 7317:7331 ioctl c0306201 200003c0 returned -22 [ 87.877048][ T7331] binder: 7317:7331 context manager tried to acquire desc 0 [ 87.882596][ T7332] binder: 7317:7332 got transaction to invalid handle, 1 [ 87.890056][ T7331] binder: 7317:7331 ioctl c0306201 200003c0 returned -22 [ 87.890243][ T7331] binder: 7317:7331 context manager tried to acquire desc 0 [ 87.890282][ T7331] binder: 7317:7331 ioctl c0306201 200003c0 returned -22 [ 87.890388][ T7331] binder: 7317:7331 context manager tried to acquire desc 0 [ 87.890426][ T7331] binder: 7317:7331 ioctl c0306201 200003c0 returned -22 [ 87.890537][ T7331] binder: 7317:7331 context manager tried to acquire desc 0 [ 87.890574][ T7331] binder: 7317:7331 ioctl c0306201 200003c0 returned -22 [ 87.890670][ T7331] binder: 7317:7331 context manager tried to acquire desc 0 [ 87.890704][ T7331] binder: 7317:7331 ioctl c0306201 200003c0 returned -22 [ 87.918528][ T7330] binder: BINDER_SET_CONTEXT_MGR already set [ 87.918586][ T7330] binder: 7317:7330 ioctl 4018620d 20000040 returned -16 [ 87.918735][ T7330] binder: BINDER_SET_CONTEXT_MGR already set [ 87.918759][ T7330] binder: 7317:7330 ioctl 4018620d 20000040 returned -16 [ 87.918855][ T7330] binder: BINDER_SET_CONTEXT_MGR already set [ 87.918877][ T7330] binder: 7317:7330 ioctl 4018620d 20000040 returned -16 [ 87.918980][ T7330] binder: BINDER_SET_CONTEXT_MGR already set [ 87.919002][ T7330] binder: 7317:7330 ioctl 4018620d 20000040 returned -16 [ 87.919090][ T7330] binder: BINDER_SET_CONTEXT_MGR already set [ 87.919111][ T7330] binder: 7317:7330 ioctl 4018620d 20000040 returned -16 [ 87.919196][ T7330] binder: BINDER_SET_CONTEXT_MGR already set [ 87.919216][ T7330] binder: 7317:7330 ioctl 4018620d 20000040 returned -16 [ 87.919299][ T7330] binder: BINDER_SET_CONTEXT_MGR already set [ 87.919318][ T7330] binder: 7317:7330 ioctl 4018620d 20000040 returned -16 [ 87.942918][ T7332] binder: 7317:7332 cannot find target node [ 87.946412][ T7332] binder: 7317:7332 transaction call to 0:0 failed 4/29201/-22, code 0 size 112-24 line 3252 [ 87.949906][ T7330] binder: BINDER_SET_CONTEXT_MGR already set [ 87.954843][ T7330] binder: 7317:7330 ioctl 4018620d 20000040 returned -16 [ 87.957462][ T7330] binder: BINDER_SET_CONTEXT_MGR already set [ 87.958910][ T7330] binder: 7317:7330 ioctl 4018620d 20000040 returned -16 [ 87.961899][ T7330] binder: BINDER_SET_CONTEXT_MGR already set [ 87.970022][ T7330] binder: 7317:7330 ioctl 4018620d 20000040 returned -16 [ 87.973460][ T7331] binder: 7317:7331 context manager tried to acquire desc 0 [ 87.973535][ T7331] binder: 7317:7331 ioctl c0306201 200003c0 returned -22 [ 87.973678][ T7331] binder: 7317:7331 context manager tried to acquire desc 0 [ 87.973715][ T7331] binder: 7317:7331 ioctl c0306201 200003c0 returned -22 [ 87.973827][ T7331] binder: 7317:7331 ioctl c0306201 200003c0 returned -22 [ 87.973934][ T7331] binder: 7317:7331 ioctl c0306201 200003c0 returned -22 [ 87.974047][ T7331] binder: 7317:7331 ioctl c0306201 200003c0 returned -22 [ 87.974151][ T7331] binder: 7317:7331 ioctl c0306201 200003c0 returned -22 [ 87.974255][ T7331] binder: 7317:7331 ioctl c0306201 200003c0 returned -22 [ 87.999679][ T7330] binder: BINDER_SET_CONTEXT_MGR already set [ 87.999741][ T7330] binder: 7317:7330 ioctl 4018620d 20000040 returned -16 [ 87.999892][ T7330] binder: BINDER_SET_CONTEXT_MGR already set [ 87.999915][ T7330] binder: 7317:7330 ioctl 4018620d 20000040 returned -16 [ 88.000012][ T7330] binder: BINDER_SET_CONTEXT_MGR already set [ 88.000034][ T7330] binder: 7317:7330 ioctl 4018620d 20000040 returned -16 [ 88.000130][ T7330] binder: BINDER_SET_CONTEXT_MGR already set [ 88.000151][ T7330] binder: 7317:7330 ioctl 4018620d 20000040 returned -16 [ 88.000236][ T7330] binder: BINDER_SET_CONTEXT_MGR already set [ 88.000255][ T7330] binder: 7317:7330 ioctl 4018620d 20000040 returned -16 [ 88.000339][ T7330] binder: BINDER_SET_CONTEXT_MGR already set [ 88.000357][ T7330] binder: 7317:7330 ioctl 4018620d 20000040 returned -16 [ 88.000440][ T7330] binder: BINDER_SET_CONTEXT_MGR already set [ 88.000462][ T7330] binder: 7317:7330 ioctl 4018620d 20000040 returned -16 [ 88.021726][ T7331] binder: 7317:7331 ioctl c0306201 200003c0 returned -22 [ 88.027539][ T7331] binder: 7317:7331 ioctl c0306201 200003c0 returned -22 [ 88.030607][ T7330] binder: BINDER_SET_CONTEXT_MGR already set [ 88.037696][ T7330] binder: 7317:7330 ioctl 4018620d 20000040 returned -16 [ 88.041988][ T7330] binder: BINDER_SET_CONTEXT_MGR already set [ 88.042057][ T7330] binder: 7317:7330 ioctl 4018620d 20000040 returned -16 [ 88.042161][ T7330] binder: BINDER_SET_CONTEXT_MGR already set [ 88.042193][ T7330] binder: 7317:7330 ioctl 4018620d 20000040 returned -16 [ 88.042281][ T7330] binder: BINDER_SET_CONTEXT_MGR already set [ 88.042311][ T7330] binder: 7317:7330 ioctl 4018620d 20000040 returned -16 [ 88.042396][ T7330] binder: BINDER_SET_CONTEXT_MGR already set [ 88.042424][ T7330] binder: 7317:7330 ioctl 4018620d 20000040 returned -16 [ 88.042518][ T7330] binder: BINDER_SET_CONTEXT_MGR already set [ 88.042548][ T7330] binder: 7317:7330 ioctl 4018620d 20000040 returned -16 [ 88.058229][ T7331] binder: 7317:7331 ioctl c0306201 200003c0 returned -22 [ 88.062451][ T7331] binder: 7317:7331 ioctl c0306201 200003c0 returned -22 [ 88.068822][ T7331] binder: 7317:7331 ioctl c0306201 200003c0 returned -22 [ 88.068976][ T7331] binder: 7317:7331 ioctl c0306201 200003c0 returned -22 [ 88.069077][ T7331] binder: 7317:7331 ioctl c0306201 200003c0 returned -22 [ 88.069172][ T7331] binder: 7317:7331 ioctl c0306201 200003c0 returned -22 [ 88.069266][ T7331] binder: 7317:7331 ioctl c0306201 200003c0 returned -22 [ 88.069365][ T7331] binder: 7317:7331 ioctl c0306201 200003c0 returned -22 [ 88.069459][ T7331] binder: 7317:7331 ioctl c0306201 200003c0 returned -22 [ 88.069559][ T7331] binder: 7317:7331 ioctl c0306201 200003c0 returned -22 [ 88.069658][ T7331] binder: 7317:7331 ioctl c0306201 200003c0 returned -22 [ 88.091993][ T7330] binder: BINDER_SET_CONTEXT_MGR already set [ 88.094999][ T7330] binder: 7317:7330 ioctl 4018620d 20000040 returned -16 [ 88.096914][ T7330] binder: BINDER_SET_CONTEXT_MGR already set [ 88.096923][ T7330] binder: 7317:7330 ioctl 4018620d 20000040 returned -16 [ 88.097002][ T7330] binder: BINDER_SET_CONTEXT_MGR already set [ 88.097009][ T7330] binder: 7317:7330 ioctl 4018620d 20000040 returned -16 [ 88.097109][ T7330] binder: BINDER_SET_CONTEXT_MGR already set [ 88.097117][ T7330] binder: 7317:7330 ioctl 4018620d 20000040 returned -16 [ 88.097188][ T7330] binder: BINDER_SET_CONTEXT_MGR already set [ 88.097195][ T7330] binder: 7317:7330 ioctl 4018620d 20000040 returned -16 [ 88.097267][ T7330] binder: BINDER_SET_CONTEXT_MGR already set [ 88.097274][ T7330] binder: 7317:7330 ioctl 4018620d 20000040 returned -16 [ 88.119358][ T7331] binder: 7317:7331 ioctl c0306201 200003c0 returned -22 [ 88.128115][ T7331] binder: 7317:7331 ioctl c0306201 200003c0 returned -22 [ 88.137490][ T7331] binder: 7317:7331 ioctl c0306201 200003c0 returned -22 [ 88.142709][ T7331] binder: 7317:7331 ioctl c0306201 200003c0 returned -22 [ 88.142832][ T7331] binder: 7317:7331 ioctl c0306201 200003c0 returned -22 [ 88.142928][ T7331] binder: 7317:7331 ioctl c0306201 200003c0 returned -22 [ 88.510099][ T7326] loop5: detected capacity change from 0 to 512 [ 88.517026][ T7343] tipc: Enabling of bearer rejected, failed to enable media [ 88.731074][ T6071] bridge_slave_1: left allmulticast mode [ 88.731131][ T6071] bridge_slave_1: left promiscuous mode [ 88.731318][ T6071] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.742632][ T4798] binder: undelivered TRANSACTION_ERROR: 29201 [ 88.822674][ T6071] bridge_slave_0: left allmulticast mode [ 88.829565][ T6071] bridge_slave_0: left promiscuous mode [ 88.829795][ T6071] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.895962][ T7367] loop4: detected capacity change from 0 to 512 [ 88.902462][ T7367] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 88.913576][ T7367] EXT4-fs error (device loop4): __ext4_iget:5533: inode #11: block 2: comm syz.4.505: invalid block [ 88.913652][ T7367] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 88.916107][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 88.916157][ C1] EXT4-fs (loop4): initial error at time 344: __ext4_iget:5533: inode 11: block 2 [ 88.916238][ C1] EXT4-fs (loop4): last error at time 344: __ext4_iget:5533: inode 11: block 2 [ 88.926376][ T4714] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.929180][ T4714] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.931351][ T4714] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.937315][ T7367] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.505: couldn't read orphan inode 11 (err -117) [ 88.937382][ T7367] loop4: lost filesystem error report for type 5 error -117 [ 88.940656][ T4714] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.942631][ T7367] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.950351][ T4714] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.195880][ T6766] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.383511][ T6071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.411183][ T6071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.423612][ T6071] bond0 (unregistering): Released all slaves [ 89.438347][ T6071] bond1 (unregistering): Released all slaves [ 89.590716][ T7388] tps6598x 0-0003: probe with driver tps6598x failed with error -22 [ 89.591587][ T7388] i2c i2c-0: new_device: Instantiated device tps25750 at 0x03 [ 89.631262][ T7375] syzkaller0: entered promiscuous mode [ 89.631324][ T7375] syzkaller0: entered allmulticast mode [ 89.667428][ T7391] IPv6: sit1: Disabled Multicast RS [ 89.669823][ T7391] sit1: entered allmulticast mode [ 89.672643][ T6071] tipc: Left network mode [ 89.856220][ T50] Bluetooth: hci1: command tx timeout [ 91.056982][ T50] Bluetooth: hci2: command tx timeout [ 91.197126][ T4404] 8021q: adding VLAN 0 to HW filter on device eth8 [ 91.435655][ T7442] tipc: Enabling of bearer rejected, failed to enable media [ 91.532672][ T7446] loop3: detected capacity change from 0 to 1024 [ 91.550825][ T7446] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 91.551380][ T7446] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 91.551456][ T7446] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 91.553111][ T7446] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 91.582214][ T7446] EXT4-fs error (device loop3): ext4_get_journal_inode:5900: inode #17: comm syz.3.518: iget: bad i_size value: 4398046511204 [ 91.582294][ T7446] loop3: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 91.586057][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 91.586109][ C1] EXT4-fs (loop3): initial error at time 347: ext4_get_journal_inode:5900: inode 17 [ 91.586176][ C1] EXT4-fs (loop3): last error at time 347: ext4_get_journal_inode:5900: inode 17 [ 91.592863][ T7446] EXT4-fs (loop3): no journal found [ 91.699639][ T7446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.709302][ T7446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.745658][ T6071] hsr_slave_0: left promiscuous mode [ 91.760185][ T6071] hsr_slave_1: left promiscuous mode [ 91.762182][ T6071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.764469][ T6071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.773866][ T6071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.775750][ T6071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.810033][ T6071] veth1_macvtap: left promiscuous mode [ 91.816967][ T6071] veth0_macvtap: left promiscuous mode [ 91.817293][ T6071] veth1_vlan: left promiscuous mode [ 91.817407][ T6071] veth0_vlan: left promiscuous mode [ 91.926485][ T50] Bluetooth: hci1: command tx timeout [ 92.064489][ T7446] loop3: detected capacity change from 0 to 512 [ 92.075544][ T7446] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 92.085970][ T7446] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 92.088149][ T7446] System zones: 1-12 [ 92.112262][ T7446] EXT4-fs (loop3): 1 truncate cleaned up [ 92.114679][ T7446] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.148727][ T7446] netlink: 'syz.3.518': attribute type 11 has an invalid length. [ 92.536230][ T6071] team0 (unregistering): Port device team_slave_1 removed [ 92.572838][ T6071] team0 (unregistering): Port device team_slave_0 removed [ 93.137846][ T50] Bluetooth: hci2: command tx timeout [ 93.150649][ T7471] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 93.189248][ T592] rtrs_client L2023: ** replaying previous printk message ** [ 93.189248][ T592] rtrs_client L2023: : CM error (CM event: address error, err: -ENODEV) [ 93.189307][ T592] ================================================================== [ 93.189316][ T592] BUG: KASAN: null-ptr-deref in trace_event_raw_event_rtrs_clt_conn_class+0x220/0x480 [ 93.189339][ T592] Read of size 255 at addr 0000000000000000 by task kworker/u8:6/592 [ 93.189348][ T592] [ 93.189356][ T592] CPU: 1 UID: 0 PID: 592 Comm: kworker/u8:6 Tainted: G L syzkaller #0 PREEMPT [ 93.189368][ T592] Tainted: [L]=SOFTLOCKUP [ 93.189372][ T592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 93.189378][ T592] Workqueue: ib_addr process_one_req [ 93.189398][ T592] Call trace: [ 93.189402][ T592] show_stack+0x2c/0x3c (C) [ 93.189420][ T592] __dump_stack+0x30/0x40 [ 93.189435][ T592] dump_stack_lvl+0xd8/0x12c [ 93.189448][ T592] print_report+0x58/0x84 [ 93.189459][ T592] kasan_report+0x8c/0xc4 [ 93.189473][ T592] kasan_check_range+0x17c/0x1ac [ 93.189485][ T592] __asan_memcpy+0x3c/0x84 [ 93.189499][ T592] trace_event_raw_event_rtrs_clt_conn_class+0x220/0x480 [ 93.189517][ T592] __traceiter_rtrs_rdma_error_recovery+0x74/0xc8 [ 93.189531][ T592] rtrs_rdma_error_recovery+0x2d4/0x400 [ 93.189546][ T592] rtrs_clt_rdma_cm_handler+0x498/0x1a18 [ 93.189560][ T592] cma_cm_event_handler+0xbc/0x4c8 [ 93.189573][ T592] addr_handler+0x210/0x3c4 [ 93.189585][ T592] process_one_req+0x26c/0x440 [ 93.189597][ T592] process_scheduled_works+0x788/0x10b8 [ 93.189610][ T592] worker_thread+0x798/0xbd0 [ 93.189622][ T592] kthread+0x304/0x3d4 [ 93.189634][ T592] ret_from_fork+0x10/0x20 [ 93.189646][ T592] ================================================================== [ 93.189676][ T592] Disabling lock debugging due to kernel taint [ 93.189918][ T7471] rtrs_client L2641: : init_conns() failed: err=-EHOSTUNREACH path=@ip:27.0.0.1 [:0] [ 93.189947][ T7471] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 [ 93.189956][ T7471] Mem abort info: [ 93.189962][ T7471] ESR = 0x0000000096000006 [ 93.189970][ T7471] EC = 0x25: DABT (current EL), IL = 32 bits [ 93.189978][ T7471] SET = 0, FnV = 0 [ 93.189985][ T7471] EA = 0, S1PTW = 0 [ 93.189992][ T7471] FSC = 0x06: level 2 translation fault [ 93.189999][ T7471] Data abort info: [ 93.190005][ T7471] ISV = 0, ISS = 0x00000006, ISS2 = 0x00000000 [ 93.190012][ T7471] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 93.190020][ T7471] GCS = 0, Overlay = 0, DirtyBit = 0 [ 93.190028][ T7471] user pgtable: 4k pages, 48-bit VAs, pgdp=000000012ff0b000 [ 93.190037][ T7471] [0000000000000000] pgd=0800000136323403, p4d=0800000136323403, pud=0800000144f18403, pmd=0000000000000000 [ 93.190072][ T7471] Internal error: Oops: 0000000096000006 [#1] SMP [ 93.236756][ T7471] Modules linked in: [ 93.237441][ T7471] CPU: 1 UID: 0 PID: 7471 Comm: syz.5.520 Tainted: G B L syzkaller #0 PREEMPT [ 93.239238][ T7471] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 93.240158][ T7471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 93.241858][ T7471] pstate: a3400005 (NzCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 93.243129][ T7471] pc : __pi_memcpy_generic+0x110/0x22c [ 93.244058][ T7471] lr : __asan_memcpy+0x68/0x84 [ 93.244864][ T7471] sp : ffff800093ed6f30 [ 93.245544][ T7471] x29: ffff800093ed6f30 x28: 1fffe000194af401 x27: 0000000000000000 [ 93.246930][ T7471] x26: ffff800093ed6f80 x25: 1fffe0001a798751 x24: dfff800000000000 [ 93.248354][ T7471] x23: ffff7000127dadf0 x22: ffff8000845810b8 x21: ffff0000c1901034 [ 93.249720][ T7471] x20: 0000000000000000 x19: 00000000000000ff x18: 1fffe00034bbbe28 [ 93.251087][ T7471] x17: 2048434145524e55 x16: 54534f48452d3d72 x15: 0000000000000000 [ 93.252482][ T7471] x14: ffff0000c1901034 x13: 0000000000000007 x12: 0000000000000000 [ 93.253879][ T7471] x11: ffff600018320227 x10: 0000000000000000 x9 : dfff800000000000 [ 93.255264][ T7471] x8 : 0000000000000001 x7 : 0000000000000000 x6 : 7461705f746c6326 [ 93.256656][ T7471] x5 : ffff0000c1901133 x4 : 00000000000000ff x3 : ffff8000845810b8 [ 93.258080][ T7471] x2 : 00000000000000ff x1 : 0000000000000000 x0 : ffff0000c1901034 [ 93.259482][ T7471] Call trace: [ 93.260043][ T7471] __pi_memcpy_generic+0x110/0x22c (P) [ 93.260968][ T7471] trace_event_raw_event_rtrs_clt_conn_class+0x220/0x480 [ 93.262183][ T7471] __traceiter_rtrs_clt_close_conns+0x74/0xc8 [ 93.263237][ T7471] rtrs_clt_close_conns+0x2f0/0x40c [ 93.264100][ T7471] rtrs_clt_open+0xa6c/0xd54 [ 93.264900][ T7471] rnbd_clt_map_device+0xcb8/0x1f64 [ 93.265799][ T7471] rnbd_clt_map_device_store+0x900/0xad8 [ 93.266766][ T7471] dev_attr_store+0x6c/0x90 [ 93.267549][ T7471] sysfs_kf_write+0xe0/0x108 [ 93.268360][ T7471] kernfs_fop_write_iter+0x260/0x3b8 [ 93.269267][ T7471] vfs_write+0x51c/0xa0c [ 93.270011][ T7471] ksys_write+0x12c/0x228 [ 93.270734][ T7471] __arm64_sys_write+0x84/0x98 [ 93.271551][ T7471] invoke_syscall+0x98/0x244 [ 93.272343][ T7471] el0_svc_common+0x19c/0x23c [ 93.273140][ T7471] do_el0_svc+0x4c/0x5c [ 93.273861][ T7471] el0_svc+0x64/0x260 [ 93.274560][ T7471] el0t_64_sync_handler+0x44/0x104 [ 93.275453][ T7471] el0t_64_sync+0x198/0x19c [ 93.276225][ T7471] Code: cb01000e b4fffc2e eb0201df 540004a3 (a940342c) [ 93.277414][ T7471] ---[ end trace 0000000000000000 ]--- [ 93.736604][ T7471] Kernel panic - not syncing: Oops: Fatal exception [ 93.737816][ T7471] SMP: stopping secondary CPUs [ 93.738596][ T7471] Kernel Offset: disabled [ 93.739308][ T7471] CPU features: 0x14000000,003c0008,27020a02,a84ff6a7 [ 93.740496][ T7471] Memory Limit: none [ 94.172653][ T7471] Rebooting in 86400 seconds..