last executing test programs: 3m40.551250004s ago: executing program 3 (id=11): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0xa0003) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000780)={0x0, 0x100, 0x4, 0x0, 0x3, [], [0x0, 0x0, 0x400, 0x10000], [0x0, 0x9, 0xfffffffc], [0x1, 0x0, 0x7]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f0000000580)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0xffffffffffffffff}}], [{@obj_type={'obj_type', 0x3d, '/dev/dri/card#\x00'}}, {@flag='nomand'}, {@dont_measure}, {@dont_appraise}]}, 0xfe, 0x57b, &(0x7f0000000700)="$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") setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000400)=0x1) write$cgroup_devices(r3, 0x0, 0xffdd) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="84019d", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x4040000) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f00000004c0)={r8, 0x0, 0x4, 0x0, 0x2, [], [0x0, 0x0, 0x100000, 0x10000], [0x0, 0x0, 0xfffffffc, 0x4], [0x1]}) 3m39.565509303s ago: executing program 3 (id=16): syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x22601, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000280)='blkio.bfq.sectors\x00', 0x0, 0x0) preadv2(r3, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x41}], 0x1, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) unshare(0x2040400) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000cc0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r1}]}}]}, 0x38}}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x0, "94c492eb2665203d36bec70800890100000000e1100a0000005900"}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x460, &(0x7f0000000380)="$eJzs3M9vFFUcAPDvzHaLBLAV8Qc/1CoaG3+0FFA5eFCjiQdMTPSgx6YtBFmooTURQhSMwZMxJt6NR/8FT3oxxpOJV70bEmK4AJ7WzO4M3d3uLrDsstD9fJJp35sffe+7b97Om3m7DWBkTWU/koitEfFXREzUs807TNV/Xb18duHa5bMLSVSr7/2b1Pa7cvnsQrFrcdyWPDOdRqRfJrG7Tbkrp88cn69Ulk7l+dnVEx/Prpw+8+KxE/NHl44undx/6NDBA3OvvLz/pb7EmdXpyq7PlvfsfPvDb985/HVT/C1x9MlUt43PVKt9Lm64tjWkk7EhVoRbUoqIrLnKtf4/EaVYa7yJeOuLoVYOGKhqtVrd0nnzuSqwgSXRnNflYVQUF/rs/rdYWgcBrw1u+DF0l16v3wBlcV/Nl/qWsUjzfcot97f9NBURH5z77/tsicE8hwAAaPJzNv55od34L42HG/a7P58bmoyIByJie0Q8GBE7IuKhiNq+j0TEo7dYfuskyfrxT3qxp8BuUjb+ezWf22oe/xWjv5gs5blttfjLyZFjlaV9+WsyHeVNWX6uSxm/vPnnN522NY7/siUrvxgL5vW4OLap+ZjF+dX524m50aXzEbvG2sWfXJ8JSCJiZ0Ts6rGMY8/9uKfTthvH30Uf5pmqP0Q8W2//c9ESfyHpPj85e19UlvbNFmfFer//ceHdTuXfVvx9cOl8FGfXuvbPTSaN87Urt17Ghb+/6nhP0+v5P568X0uP5+s+nV9dPTUXMZ4crle6cf3+tWOLfLF/dv5P723f/7fH2iuxOyKyk/ixiHg8Ip7I6/5kRDwVEXu7xP/bG09/1Hv8g5XFv9j2/a9T+68lxqN1TftE6fivPzUVOrku/mvd2/9gLTWdr7mZ97+bqVdvZzMAAADce9KI2BpJOnM9naYzM/XPy++ISCvLK6vPH1n+5ORi/TsCk1FOiyddEw3PQ+fy2/p6/nxE1D9aUGw/kD83/q60uZafWViuLA47eBhxWzr0/8w/pWHXDhg439eC0aX/w+jS/2F06f8wutr0/83DqAdw57W7/n8+hHoAd15L/zftByOj7P4fRljH/r+R//MPUNPD9T8ZRD2AO2plc9z4S/JdE8Vf6vHwDZuI8l1RjdtPVJO2jRvpsCt240Rxlbpb6nMvJYb3ngQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBP/wcAAP//vQDabw==") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0xff0c) r7 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="02050b070e00000029bd70000000000005000600000000000a004e2400000000fc01fcffffff00000000000000000001600000000000000002000100ffffff7eb10001010000000005000500fe0000000a"], 0x70}}, 0x484) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r7, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000180), 0x800000, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 3m39.295843453s ago: executing program 3 (id=22): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000340)={[{@test_dummy_encryption_v1}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}]}, 0x1, 0x249, &(0x7f0000000bc0)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=@newqdisc={0xa0, 0x24, 0x4ee4e6a52ff56561, 0x4, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0x0, 0x1}}}}, @TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x9, 0xff, 0x8, 0x0, 0x5, 0x8}}, {0x4}}, {{0x1c, 0x1, {0xf, 0x9, 0x5, 0x6, 0x0, 0x200, 0x2, 0xa}}, {0x18, 0x2, [0x7f, 0x3, 0x0, 0x6, 0x7ff, 0x6, 0x2, 0xd9, 0x5, 0x8]}}]}, @qdisc_kind_options=@q_mq={0x13}]}, 0xa0}}, 0x4040010) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8804) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000880)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x20000051) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x13) 3m37.770611436s ago: executing program 3 (id=31): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2000c16, &(0x7f00000000c0), 0xec, 0x273, &(0x7f0000000140)="$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") syz_emit_ethernet(0x6a, &(0x7f0000000400)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "fc414a", 0x34, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[@hopopts={0x0, 0x3, '\x00', [@hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x8, {0x1, 0x40000000000002b9, 0x2, 0x3}}]}], {0x0, 0x0, 0x4, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @val=0x80}}}}}}}}, 0x0) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000002940)=0x5, 0x4) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000003c0)) getegid() (async) getegid() getegid() mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/dynamic_debug/control\x00', 0x2, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r3, &(0x7f0000000500)='file n*t/sctp/* +', 0x11) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2d) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x4f73, 0x4) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x4f73, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0xfffffffb, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x12141, 0x0) syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x0) (async) r5 = syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000440), &(0x7f0000000480)=@v2={0x2000000, [{0x91c, 0x2}, {0x5, 0xc7}]}, 0x14, 0x0) fanotify_mark(0xffffffffffffffff, 0x400, 0x12, 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00') (async) fanotify_mark(0xffffffffffffffff, 0x400, 0x12, 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00') r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000100)={'ip6_vti0\x00', 0x2000}) ioctl$I2C_FUNCS(r5, 0x705, 0x0) (async) ioctl$I2C_FUNCS(r5, 0x705, 0x0) 3m37.438826824s ago: executing program 3 (id=37): gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x23}, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0x14}, 0x1, 0x0, 0x0, 0x60048040}, 0xc040444) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x303, 0x36}, "00000007e4008000", "8b3de2aabceef22f419e59f30000001504000000000200", "e73400", "000000d900"}, 0x38) 3m36.138719835s ago: executing program 0 (id=44): r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) r1 = fsmount(r0, 0x0, 0x71) ioctl$FITHAW(r1, 0xc0045878) getdents64(r1, &(0x7f0000000040)=""/129, 0x81) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001a00)={{r0, &(0x7f0000000100)='$\x00', 0x200040, &(0x7f0000000140)={@align=0x2, {0x8000, 0x1, 0x4}}, 0x4, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x1}, 0xa, &(0x7f00000018c0)=[{0x3, 0x0, &(0x7f0000000200)='^]\\.{', &(0x7f0000000240)="d3b4a7c4ce2d28625dc1651aaada90bedf184de46589f611d43b020b3ef343d496788a75ab302fa4968ea45d97b43436456a841e79829069771fbff6ffa513cd2c6321b361cc2fb7f8d3285bb8d2541ab7cfbcce2a82532e1cfd3634572c18e6bf671567cb167804e03a2103b78b059b", 0x70, 0x34}, {0x2, 0x6, &(0x7f00000002c0)=',\x00', &(0x7f0000000300)="6814bbfed92bfc556705df935c0e3281f6262d3fc59d23bcc45ce4f3be69e76dbdbae0428e47c92916cfc1c52f573e8c1f10ce079965f5b86c5cef24d8675351e2d0a75a7d84c6ef1b6797381ab36a8b665e96d2ec39d8088903664cb457cbc08f1c01a4351ad7bef7add129533801646db43c539addb529b5524d80df347a8a92ed62eef365d3a17c3dc433052e3c9f23d769e1b565f8cdc76629771ac2cb0be548df1d5bb5ff624c9446c55895a8ee7ad9e77844e46fdf2ac1", 0xba, 0x1a}, {0x1, 0x8, &(0x7f00000003c0)='@@^\xe2,\x00', &(0x7f0000000400)="52b7be0f1884e2ec17c36874cd993df19991faef1d7f2d2ef11934d4d74c29277a6de05592301287c3e337e78f531caa896f1a1ec74fcf44f8138369a6047de46eaa9aa79fdc35a1d787d5a24247", 0x4e, 0x22}, {0x3, 0x3, &(0x7f0000000480)='\x00', &(0x7f00000004c0)="dc59874e8fb2022e86fea55b9bf40c2d96cae38de70b83c25e57eb8351c527aff41c54ff68e3cda8cf8e918b115dc775f6cf87c8b19d02986c1d5a912a0ced9c3eef1cf869e197cb77d87374a43f85a7e48c61cd57024dd5fd30e82c151cebb8b6c5c09d8589423dda95c5857d9d0d98e2b7ce24d68a18d85942a934e3", 0x7d, 0x20}, {0x2, 0xfffffffe, &(0x7f0000000540)='\x00', &(0x7f0000000580)="c1e278cad44623ebe6ebe4e15b1ba7cdb81832824886ee5029a668b950f0eec392fb5b543ae836a37be01f4d96", 0x2d, 0x28}, {0x2, 0x3, &(0x7f00000005c0)='\x00', &(0x7f0000000600)="29eb34bc7c82c5a8cc9e5e2ae1d1898bb3ac1b50a82453234e30ecdf20804c0f60ca7b92d9cb51a3c009db444c00a1dde176835b13d2a20eb5c9af5e50ad7bce78a05243c301408eb2751503879e6d2999ca8c886dba4416f47eed813c65cd", 0x5f, 0x28}, {0x0, 0x9, &(0x7f0000000680)=',\x00', &(0x7f00000006c0)="7b8f3bced1a3806176daf1f4dc72a51b7ecffc3867adbc2895fe3f7024b91a3274d9d8241ff3044b18d2fe7c41136c4abb87c57e7dabfabee6f817fb5f585784981dc7bbc1fac0495f6725f6a797fa1209c295258a", 0x55, 0x10}, {0x2, 0x1, &(0x7f0000000740)='*+#\xc6@\x00', &(0x7f0000000780)="b0ab215a1c6c036c733b5c2098093eeb482d8737dfcc84d5b900d4d7e4a17c0bce3983b7e4224017f9", 0x29, 0x8}, {0x2, 0x6, &(0x7f00000007c0)='.\x00', &(0x7f0000000800)="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", 0x1000, 0x20}, {0x3, 0x80000001, &(0x7f0000001800)='}-]-\\{#\x00', &(0x7f0000001840)="3c51b659687ed8bf2d9c614f283425b97dfeb900829714abb2bd0a090dacbeceb85c771902b674486f485581991a0878a9c10f33dd50d12a9e6482674530e621923c52a99ff19a01bf46d892abaedb73c082b35d6e487a6ac046a277793e287cffa8e1ac5dfe3ed567b893afad8c8a6df7658b", 0x73, 0x18}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000001a80)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r4 = userfaultfd(0x80000) r5 = socket$kcm(0x29, 0x7, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001b00)=@generic={&(0x7f0000001ac0)='./file0\x00', r3}, 0x18) fcntl$setstatus(r4, 0x4, 0x10000) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000001b40)={0x0, 0x1, 0x6, @broadcast}, 0x10) close_range(r4, r2, 0x0) ioctl$EXT4_IOC_GETFSUUID(r5, 0x8008662c, &(0x7f0000001b80)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000001bc0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, &(0x7f0000001c40)=r6) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x1) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000001e00)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0xcc, 0x3, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xe1c}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xf40}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x93d}, @CTA_TIMEOUT_DCCP_REQUEST={0x8}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DCCP_RESPOND={0x8}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x4d1000}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x5dd}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x1ff}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4004041}, 0x20000004) getsockname$packet(r3, &(0x7f0000001e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001e80)=0x14) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000001ec0)={0x0}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001f80)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e23, @remote}, {0x2, 0x4e21, @multicast2}, 0x301, 0x0, 0x0, 0x0, 0x800, &(0x7f0000001f40)='ipvlan0\x00', 0x8, 0x7913, 0x8}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r8, &(0x7f00000020c0)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x2c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x884) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000002100)=0x10000) r9 = syz_open_dev$vcsn(&(0x7f0000002140), 0x0, 0x400000) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r9, 0xc0182101, &(0x7f0000002180)={r7, 0x77a0, 0x800}) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f00000021c0)={0x0, 0x800}, 0x8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002200)={0x0}, &(0x7f0000002240)=0xc) timer_create(0x0, &(0x7f0000002280)={0x0, 0xf, 0x1, @tid=r10}, &(0x7f00000022c0)=0x0) ioctl$PTP_EXTTS_REQUEST2(r3, 0x40103d0b, &(0x7f0000002300)={0xbea8, 0xf}) timer_gettime(r11, &(0x7f0000002340)) 3m36.129136059s ago: executing program 3 (id=45): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000029000000040000003c00000000000000280000000000000029000000390000003c02020100000000fc010000000000000000000000000000280000000000000029000000050000000002020100000000fe8000000000000000000000000000bb4a3477a22ffeb755669f19d16f6bc8834b158d7591c5f7665075488933e61e757d7eb763070f69c11061534b11b3d3508a4abc562df2efebbac772259f26d7d0772284487a5363bd1da9d2057d74b3726fc40532b2d75d"], 0x68}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x16d) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000021efdae031c0004000000ffffffff02"], 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x40001) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000000000000000000000010080001000100000b"], 0x1c}, 0x1, 0x0, 0x0, 0x404c4b5}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000010301"], 0x20}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000280)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, &(0x7f0000000580)={{r6}, r7, 0x10, @unused=[0x401, 0x8, 0x0, 0x5], @name="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"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000004fa000000000000825b440018000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000018000007b8a08ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000a6000000850000000700000095", @ANYRESDEC=r6, @ANYRES8], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) preadv(0xffffffffffffffff, &(0x7f0000002740)=[{&(0x7f0000000440)=""/92, 0x5c}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/44, 0x2c}, {&(0x7f00000025c0)=""/165, 0xa5}, {&(0x7f0000002680)=""/148, 0x94}], 0x5, 0x2, 0x7f165ba) setns(0xc9, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0x3) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000180)={&(0x7f000091d000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x2000, 0x3}) 3m36.014316459s ago: executing program 32 (id=45): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000029000000040000003c00000000000000280000000000000029000000390000003c02020100000000fc010000000000000000000000000000280000000000000029000000050000000002020100000000fe8000000000000000000000000000bb4a3477a22ffeb755669f19d16f6bc8834b158d7591c5f7665075488933e61e757d7eb763070f69c11061534b11b3d3508a4abc562df2efebbac772259f26d7d0772284487a5363bd1da9d2057d74b3726fc40532b2d75d"], 0x68}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x16d) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000021efdae031c0004000000ffffffff02"], 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x40001) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000000000000000000000010080001000100000b"], 0x1c}, 0x1, 0x0, 0x0, 0x404c4b5}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000010301"], 0x20}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000280)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, &(0x7f0000000580)={{r6}, r7, 0x10, @unused=[0x401, 0x8, 0x0, 0x5], @name="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"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000004fa000000000000825b440018000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000018000007b8a08ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000a6000000850000000700000095", @ANYRESDEC=r6, @ANYRES8], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) preadv(0xffffffffffffffff, &(0x7f0000002740)=[{&(0x7f0000000440)=""/92, 0x5c}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/44, 0x2c}, {&(0x7f00000025c0)=""/165, 0xa5}, {&(0x7f0000002680)=""/148, 0x94}], 0x5, 0x2, 0x7f165ba) setns(0xc9, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0x3) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000180)={&(0x7f000091d000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x2000, 0x3}) 3m36.012067945s ago: executing program 0 (id=48): syz_usb_connect(0x3, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x40, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x28}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16}, 0x6b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711243000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$can_j1939(0x1d, 0x2, 0x7) close(r1) socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00c9000201"], 0x22) 3m35.472603208s ago: executing program 0 (id=58): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x2000000, &(0x7f0000000200), 0x1, 0x445, &(0x7f0000001dc0)="$eJzs3E2IVeUbAPDnnJnxYxz/d/wTTUWglGgRjjrXahVoixZtXAhCH0JDXj/w6oR3ojShLBAhIlpIghDTMlrkokURQbSJoBYtCiJJqBZhWCEt2t2495w7XvQM2dXruU2/H5y573nvued5X85weB845wngP2tNRGyNiKGImIyISt6f5lu8lG2t445Vz+5rbUk0mzt+SyKJiFr17L7OuZL8c0X+s2UR8f+tSTw8fHXcxpGjB6br9drhfH/j7MFnNjaOHN2w/+D03tre2qHqlgemprbcX33wxs313MTLMTW1deS99WtOfvnxa9+0xjuWf9c9jxspWaBzWz+ClWikq50UXG8GzxunXv+o7DEAADdfmq/9h9vr/0oMRbZ4O3/uyUuVeHG07PEBAAAA16/ZHMo/AQAAgMUrkfsDAADAItd5DqBWPbuvs92sZw9W3BtxcVtEjGfxO+8XZ98Ot98fjvzd0pE+xL/rfB9O+g80Hi03/lc7y42/6t1y4899V278p9aVG/+nH8qNv3Z1ufFPzUR8si0rgHD1/S9t1zzoWBIRS/OaBsuv6exDf3vE6k8v3/+OXXX/S+fvf60zXc+LWCfnLpwo6p94JOLi8Yg7hoviJ/Pxk7ymQ682fH18V1H/qosRzbcj1kVx/OiKv3B9iI179tdrm7K/xfGrLzxeKerf/lk2/9EF4o/nxw111YnoxenRXR+sLOjfOZnFv+fu4ut/W9f8/5fX5hjvIf6a2+vbi/rXvZrF373A/Luv/6oe4nbM/dL4saj//S3XcVIAoGdpe22TpJPz7TSdnMzWe7fEaFqfaczet2fm2UO7szXQeIyknaVWth4ZSVr7m/O1SWd/6or9ar6GOFlZ3t6ffHqmvrvsyQMAAMAiNxbx/ROvfDix4or8/+dKlv8DAAAA/36t/P/OubfOtNp/FD4dCQAAAAyKerO337Xy/0snfv085P8AAACwaMn/AQAAYPHr5P9jC9T/W9lVu29TXn/4i8rI0j37l8XmsgcPAAAAXJNW/p9++9j5xpGjB6br9dphDY2BajyU/6cOyniSARtPvxsl3pwAAIC+uLzoL3skAAAAQP+kF5KIaG3rK2vHbl39zkT3t0uSP9vVAZZExHNndrz5/PTs7OHNrf7f5/tnT+f9U2XNAQAAAOjWydM7eTwAAAAAAAAAAAAAADD4bkY58bLnCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwI3zVwAAAP//QNGSjg==") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)={[{@xino_off}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3m35.095994553s ago: executing program 0 (id=60): ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r0], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000500)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000540)=0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x1412, 0x1, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x10014}, 0x20000000) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010180000000000000250200000008000a00", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0001f6bd7000eddb02000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="9addd671650bf6818a7e642ac7af80672e5b4e500f7f6502a6d916010000004cfe109053a0a5a465076194834c8305dbf066b74d0483b4c2a1815d8c6dcf461638c78e3cc6c205d330ed47705a15f259329842b2c8fb1eda367da1fd2c208cdb10166d54ced2d2371f38fae2d10000db1f5d29917f57849f4acbbfd9df76bb85b332b092dd1c"], 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x48011) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r11, {0x2, 0x4e23, @rand_addr=0x64010100}, 0x0, 0x4, 0x1, 0x3}}, 0x26) unshare(0x28000600) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) pwritev2(r12, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x2) copy_file_range(r11, &(0x7f00000003c0)=0x3ff, r12, 0x0, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r9, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r9, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) setxattr$security_capability(&(0x7f00000002c0)='./file2\x00', &(0x7f0000000300), &(0x7f0000000340)=@v1={0x1000000, [{0xffffffff, 0x4}]}, 0xc, 0x0) ioctl$IOMMU_IOAS_COPY(r12, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r9, r9, 0x3, 0xfffffffffffffffa, 0x100003fff}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r9, 0x0, &(0x7f00004f9000/0x4000)=nil, 0x4000, 0xf3}) ioctl$IOMMU_IOAS_MAP(r8, 0x3b85, &(0x7f0000000180)={0x28, 0x6, r9, 0x0, &(0x7f0000000100)='W', 0x1, 0x7a}) 3m35.010974774s ago: executing program 0 (id=61): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x4, 0xfffffffffffffffe, &(0x7f0000000000)=0x44) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000000)="5e026031f0604fedaee87083be2f718bc67a35510b91262691", 0x19}], 0x1) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = syz_clone(0x8202000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregset(0x4205, r6, 0x40a, &(0x7f00000001c0)={0x0}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000080)=0x85, 0x7, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004180)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x11, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r9, r7, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x1ee, &(0x7f0000000480)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "361db3", 0x1b8, 0x84, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[@srh={0x33, 0x2, 0x4, 0x1, 0x5, 0x50, 0x7fff, [@local]}, @routing={0xc, 0x6, 0x0, 0x7, 0x0, [@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}]}, @routing={0x32, 0x2, 0x0, 0xce, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}]}, @dstopts={0x29, 0x13, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x30, {0x3, 0xa, 0x9, 0x8001, [0x59c, 0x9, 0xffffffffffffffff, 0x3, 0x6]}}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @ra={0x5, 0x2, 0x3a}, @pad1, @enc_lim={0x4, 0x1, 0xb}, @hao={0xc9, 0x10, @local}, @hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @calipso={0x7, 0x10, {0x3, 0x2, 0x1, 0x4, [0xffffffffffffffff]}}]}, @srh={0x32, 0x2, 0x4, 0x1, 0x82, 0x0, 0x7, [@ipv4={'\x00', '\xff\xff', @local}]}, @fragment={0x6c, 0x0, 0x10, 0x0, 0x0, 0x8, 0x67}, @routing={0x6c, 0x10, 0x1, 0x7f, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x1a}, @local, @rand_addr=' \x01\x00', @private1, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}]}]}}}}}, 0x0) 3m33.657559931s ago: executing program 0 (id=69): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$PTP_EXTTS_REQUEST(r1, 0x40103d02, &(0x7f00000001c0)={0x401}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6, 0x9, 0x0, 0x1, 0xf9ffffff}, {0x66, 0x0, 0x0, 0x256c7520}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc9}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000019000b08ffffffe12400000002180000f9"], 0x44}, 0x1, 0x0, 0x0, 0x811}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) 1m1.230177344s ago: executing program 33 (id=69): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$PTP_EXTTS_REQUEST(r1, 0x40103d02, &(0x7f00000001c0)={0x401}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6, 0x9, 0x0, 0x1, 0xf9ffffff}, {0x66, 0x0, 0x0, 0x256c7520}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc9}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000019000b08ffffffe12400000002180000f9"], 0x44}, 0x1, 0x0, 0x0, 0x811}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) 49.890892292s ago: executing program 6 (id=291): unshare(0x22020600) (async) unshare(0x50040480) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x3c, 0x453, 0x4, 0x70bd29, 0x25dfdbfd, "13bd44a7ddae1cc3f57e8bd83bfa002e001b469a2bbba9bc7d5ea513acef3615d66f991439adb996c04d01", ["", "", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x4008080) (async) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200d25110031e3b001000"/26, @ANYRES32, @ANYBLOB="0400"/20, @ANYRES8=r0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00O\x00'/28, @ANYRES32=r0], 0x50) (async) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)={[{@test_dummy_encryption_v1}, {@acl}, {@noinit_itable}, {@noblock_validity}]}, 0x1, 0x5c4, &(0x7f0000000c40)="$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") (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x11) (async) ioctl$TCFLSH(r2, 0x8910, 0xffffffffffff7ffe) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0xfffffffe, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x7}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x44}}, 0x40000c0) (async) quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffff8001, 0x8001, 0xfffffffe, 0xfffffffffffffffe, 0x1, 0x7, 0xa8b2, 0x7, 0xfffffffe}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x17, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000008000000bf91000000000000b7020000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(0xffffffffffffffff, 0x4004e502, &(0x7f00000000c0)=0xffff7106) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8982, &(0x7f0000000000)={0x6, 'ip6erspan0\x00', {0x800}, 0x8}) (async) close(r4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'bridge_slave_1\x00', 0x0}) (async) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) (async) ptrace$setregs(0x4212, 0x0, 0x58, &(0x7f0000000080)="0100000000000000000000000000000000000000000000000000000001") (async) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async) r9 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r9, 0xc01064bd, &(0x7f0000000080)={0xffffffffffffffff, 0x60}) (async) socket(0x15, 0x80000, 0x7ff) socket$unix(0x1, 0x5, 0x0) 49.824024983s ago: executing program 6 (id=292): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x16, 0x6, 0x4, 0x2, 0x0, 0x0, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8919, [0x0, 0x7]}}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[], 0x9c}, 0x1, 0x0, 0x0, 0x4000081}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[], 0x9c}, 0x1, 0x0, 0x0, 0x4000081}, 0x40) 49.74082011s ago: executing program 6 (id=293): r0 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x7, 0x0, 0x4, "751538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f0000000100)={0x27, 0x0, 0x2, 0x2, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003c}, 0x60) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x32, 0x3d, 0x4, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0) 49.730123229s ago: executing program 6 (id=295): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dvmrp1\x00', 0x200}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0\x00', 0x0, &(0x7f0000000200)={[{@fat=@usefree}, {@utf8no}, {@uni_xlate}, {@uni_xlate}, {@utf8no}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@shortname_winnt}, {@utf8no}, {@shortname_lower}, {@shortname_lower}, {@utf8}, {@shortname_mixed}, {@fat=@nfs}, {@fat=@codepage={'codepage', 0x3d, '1251'}}, {@utf8no}]}, 0xfd, 0x2a8, &(0x7f0000000580)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) set_mempolicy(0x6005, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./binfmt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./binfmt\x00', &(0x7f0000000240)='binfmt_misc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./binfmt/status\x00', 0x1, 0x0) write(r4, &(0x7f0000000040)='1h', 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(0x0, 0x0) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4, 0x3}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) 48.848793534s ago: executing program 6 (id=300): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e22, 0x3ff, @remote, 0xff}}, 0x0, 0x0, 0x23, 0x0, "009b59557dc1b5123c64fcc67df9901d7a2e8a8ab8af14f15749796d758da20e43d329589647ea9f6a817312d894acc8525f60c827120fe6ba22affcc0260520dbbe61e312ce83b5f61534b6d6bb6ffd"}, 0xd8) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", '\x00\x00=*', "1202000000040030"}, 0x38) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x4e24, 0x9, @loopback, 0x1}}, 0x0, 0x0, 0x4b, 0x0, "5d9ed5ab7ede1bcf73742bc36c0ea13d3dec33e0b7cc1ff724fe1906cf9f7945230bc5d9dfea4ffd1e48aaf9a42d97f58da594d5eb926f70f03d01000000a6b62ee9d04ac1bf0bef969bcbd8e4700616"}, 0xd8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = dup3(r1, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000240)=0x7) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 48.06820807s ago: executing program 6 (id=307): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000005080), 0x0, 0x8000) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000001500)={0x28, 0x4000, 0x0, @my=0x1}, 0x10) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r7, 0x28, 0x2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000005c0)={0x0, 0x1}, 0x8) close(r6) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 47.969033377s ago: executing program 34 (id=307): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000005080), 0x0, 0x8000) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000001500)={0x28, 0x4000, 0x0, @my=0x1}, 0x10) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r7, 0x28, 0x2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000005c0)={0x0, 0x1}, 0x8) close(r6) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 23.60855757s ago: executing program 2 (id=532): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x861, 0x0, 0x0, 0x0, 0xd}, 0x30, 0x0) landlock_restrict_self(r1, 0x2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x2000, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0xd) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4) recvmmsg(r0, &(0x7f0000001140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/16, 0x10}, 0x9}], 0x1, 0x12000, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x40, 0x0, 0x10, 0x70bd29, 0x25dfdc02, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) io_setup(0x3, &(0x7f00000003c0)=0x0) io_submit(r4, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, r6, 0x5, 0x2, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r8) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r10, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = syz_io_uring_setup(0x6e11, &(0x7f0000000180)={0x0, 0xeeeb, 0x4000, 0x3, 0x2ae}, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_UNREGISTER_NAPI(r12, 0x1c, &(0x7f0000000300), 0x1) setsockopt$sock_attach_bpf(r11, 0x10f, 0x82, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 22.481460745s ago: executing program 2 (id=545): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000019300), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000019340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f000001a6c0)={0x0, 0x0, &(0x7f000001a680)={&(0x7f0000000040)={0x58, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}], @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 22.380624915s ago: executing program 2 (id=546): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x808080, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0x317c}], 0x1, 0x40002060, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000600)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}], 0x10) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x2, 0x4) shutdown(r0, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$rtc(&(0x7f00000000c0), 0x7, 0x80000) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800}) sendmmsg$sock(r3, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x4, &(0x7f0000000500)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r4, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = memfd_create(&(0x7f0000000240)='l2tp\x00', 0x6) io_setup(0x714, &(0x7f0000003280)=0x0) io_submit(r6, 0x1, &(0x7f0000006700)=[&(0x7f00000033c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x100000000, 0x0, 0x2}]) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r8, 0x84, 0x0, 0x0, &(0x7f0000003040)) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 21.380558621s ago: executing program 2 (id=553): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000100000000000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x9}, 0x94) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r2, 0x3, 0x0, @val=@iter={0x0}}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r8, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x6e, &(0x7f00000036c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3f86dd6100272400383afffe8000000000000000000000000000bbff020000000000cc50fc28000000000000000001030090780200000064f028be00073a00fe880000000000000000000000000101fe8000000000000000000000000000bb35553d57"], 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x41, 0xfffffffc, {0xa, 0x40, 0x9, 0xfd, r7}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0xbe2e5b1053dc3ea0}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r10, r9, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{r10}, &(0x7f0000000180), &(0x7f0000000100)=r4}, 0x4f) bind$inet(r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) sendto$inet6(r3, 0x0, 0x0, 0x240088d1, &(0x7f0000000400)={0xa, 0x2, 0x3ff, @loopback, 0xffffff1f}, 0x1c) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000100)=ANY=[@ANYBLOB="12011003020000082505a1a440004102030109023b0001017f4e04090400f1220206000d052406000005240076920d070905820200025f0c7f09050302000205090800"/77], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 20.560935848s ago: executing program 2 (id=566): mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x9e, &(0x7f00000000c0)={[{@orlov}, {@errors_remount}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x12e180c, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x2) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0x5, 0x12) 19.064063393s ago: executing program 2 (id=571): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) (async) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) (async) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) (async) syz_ublk_add_dev(r0, 0x0, r1, 0x0, &(0x7f0000000340)={0x2e, 0x40, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x2, 0x62c, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x6}}}, &(0x7f00000003c0)=0x0) syz_ublk_setup_queues(r0, r2, &(0x7f0000000200)={0x0, 0x8427, 0x0, 0xfffffffe, 0x34d}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c8b, 0x20, 0x3, 0x98}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x4000, 0x43, 0xffffffff}}], 0x1, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f0000000000)='syz0\x00', 0x1ff) openat$cgroup_devices(r3, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 64) socket(0x10, 0x3, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x20040091) (async) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) epoll_create1(0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) 4.993757204s ago: executing program 35 (id=571): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) (async) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) (async) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) (async) syz_ublk_add_dev(r0, 0x0, r1, 0x0, &(0x7f0000000340)={0x2e, 0x40, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x2, 0x62c, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x6}}}, &(0x7f00000003c0)=0x0) syz_ublk_setup_queues(r0, r2, &(0x7f0000000200)={0x0, 0x8427, 0x0, 0xfffffffe, 0x34d}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c8b, 0x20, 0x3, 0x98}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x4000, 0x43, 0xffffffff}}], 0x1, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f0000000000)='syz0\x00', 0x1ff) openat$cgroup_devices(r3, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 64) socket(0x10, 0x3, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x20040091) (async) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) epoll_create1(0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) 3.615370238s ago: executing program 4 (id=680): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r1 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000040)=0x82, 0x4) (async) listen(r1, 0x0) (async) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@caif=@rfm={0x25, 0x5, "cdfaaf7254f4ef6249f068fcdd7e1cbd"}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000001280)="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", 0x17e}, {&(0x7f0000001400)="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", 0xddd}], 0x2}, 0x800) pwritev(r0, &(0x7f0000000600)=[{&(0x7f0000000240)="02000000", 0x4}, {&(0x7f00000002c0)="f697079a161cfb7702311e629acda76933ddd0c24174eb4d4d28f9ff01d98c9541bb2515", 0x24}], 0x2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x14, 0x4, 0x4, 0x200002, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0xfffffffd}, 0x50) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x3c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "f7f8e05e18006b5c49148e65e7766136"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}}, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @private=0xa010101}, 0x10) (async) r7 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x92042, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r8, 0x0) write$smackfs_netlabel(r7, &(0x7f0000000000)=@l1={{0x2, 0x2e, 0x8, 0x2e, 0xb, 0x2e, 0x3}, 0x20, '/s\xf9s/fetlab^\xd9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xde\xdf8q/\x80\xe6\xd6\x9e\xda\xef\x7f\xd1\xaa)\xd0x'}, 0x80) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000007c0)={r3, &(0x7f0000000740), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000100)="140890307dd40130d14f6d7cf8704caa025b967e5ad4e7375ba7d4ff97254ecd88729ee535829a25601ffddd798f3ae271ce659d6e9e4d6e2bce2fa981c354b76d96d49a7006f72c9d1f", &(0x7f0000000180)=@tcp6, 0x4}, 0x20) 3.18105679s ago: executing program 4 (id=683): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x403, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x1c8) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xd, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xff4, &(0x7f0000003e00)=""/4084, 0x41000, 0x1a}, 0x94) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000880), 0x41) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_io_uring_setup(0x3158, &(0x7f0000000280)={0x0, 0x4000cfcb, 0x1042, 0x8003, 0x32b}, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r4, 0xb, &(0x7f0000000000), 0x0) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r4, 0x24, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$unix(0x1, 0x5, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @remote}, {0x2, 0x4e22, @multicast1}, 0x118, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x5, 0xfffb}) ioctl$BLKDISCARDZEROES(r3, 0x127c, &(0x7f00000003c0)) ioctl$UI_DEV_DESTROY(r0, 0x5502) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRES64=r2, @ANYRES16=0x0, @ANYRES8=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x14e) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$sock(r6, &(0x7f0000006c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@timestamping={{0x14, 0x1, 0x25, 0xffffffff}}], 0x18}}], 0x1, 0x20040004) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000200)={{0x0, 0x2, 0x2, 0x3}, 'syz0\x00', 0x2}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r7) munmap(&(0x7f0000a13000/0x1000)=nil, 0x1000) 2.90712089s ago: executing program 4 (id=688): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20cd02, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) 2.833631735s ago: executing program 5 (id=689): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x4e24, 0x9, @loopback, 0x1}}, 0x0, 0x0, 0x4b, 0x0, "5d9ed5ab7ede1bcf73742bc36c0ea13d3dec33e0b7cc1ff724fe1906cf9f7945230bc5d9dfea4ffd1e48aaf9a42d97f58da594d5eb926f70f03d01000000a6b62ee9d04ac1bf0bef969bcbd8e4700616"}, 0xd8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = dup3(0xffffffffffffffff, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000240)=0x7) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 2.772249396s ago: executing program 4 (id=690): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x7c, 0x30, 0xb, 0x5, 0x25dfdffd, {}, [{0x68, 0x1, [@m_ct={0x64, 0x1, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0xfffffffc, 0x0, 0x2, 0xff}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast1}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @loopback}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8410}, 0x40) r1 = syz_open_dev$video(&(0x7f0000000680), 0x18d94080, 0x40) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000000040)=[0x4, 0x1], 0x2) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x2, 0x0, 0x8000, 0x0, @private2, @loopback, 0x10, 0x8000, 0x8, 0x6}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x29, 0x3, 0x7, 0x10001, 0x1, @mcast1, @loopback, 0x8, 0xf800, 0x4, 0x7}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x67, &(0x7f0000000480)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'ip6tnl0\x00', &(0x7f0000000700)={'ip6_vti0\x00', 0x0, 0x2f, 0xa, 0xfb, 0x4, 0x12, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x700, 0x801f, 0x8, 0xfff}}) sendmsg$nl_route_sched(r2, &(0x7f0000002200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80408}, 0xc, &(0x7f00000021c0)={&(0x7f00000007c0)=@deltfilter={0x19c4, 0x2d, 0x800, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x8}, {0xe2aa00eb1c50185b, 0x1}, {0xffff, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x64}, @TCA_ROUTE4_IIF={0x8, 0x4, r5}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x22}}, @TCA_CHAIN={0x8, 0xb, 0xaff7}, @TCA_CHAIN={0x8, 0xb, 0xff}, @filter_kind_options=@f_matchall={{0xd}, {0x1948, 0x2, [@TCA_MATCHALL_ACT={0xe0, 0x2, [@m_simple={0xdc, 0x18, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, '\\\x00'}]}, {0xa7, 0x6, "504102fefef22a989b0fa4f109d55dbfefd232f459e9c254631fe9788952f1394cecdf0ceeb6a023b57d70893d6872b6ec7233bc78936d5cff309d8dd0a44c3567dbfbf9faebc1c8f9cbd7657f98712e25b4e4ff63837d0e8ed792b984e260fce6225626fdd515635e52e8a6c75b15bc44cdbc8acc27761b82573e3b7ea93aba9b949418b852ee6a4e9736f5ce085a79361d516ed4ead71cb43b3a0fe98947a9260d99"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xfff3}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_ACT={0x184c, 0x2, [@m_tunnel_key={0x124, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @loopback}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}]}, {0xae, 0x6, "bc3d93fd0d56f2f6c31f9d0abc32b08c2b35503c6edfaa10b7ea93d07bf570c218a98a2763852123e66046ec52a43a98efc705e96154221968f83d4ed13856e2c1789b22cc798b18fb4722c6679109f4e9d5d0f928afc7fccd2b0fa2236b9e73e64d230cc9c6bae1fc5e1cc63a426a303996bf1f73bfcb7972ba155e1f03df8f9a4e27b03612ef15448c243e04bfc91b534d7fb56c636f23a1c1b34d373553ae03a4bb22616abbabd27d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0xcc, 0xb, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x9, 0x7, 0x575e, 0x2}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x7, 0x3, 0x0, 0x1}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x57, 0x2, 0x5, 0xce}, 0x7ff}}]}, {0x47, 0x6, "2b25d3d9de750ba244292ede260c83e42d199356b7f38bb23395f9240a9c6145d40196b57f6b490393eb9e1c668934af47eee32e4652522b83d0ab39a5eead482596b2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0xf0, 0x12, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x1, 0x1, 0x6, 0x80000001}, 0x8}}]}, {0xa1, 0x6, "2556fb46f62cbfb86219d05e9910583851593d67238986db2d43b97522d86ee1cfe8e470455ce0bc14a2aa1d7e4d5d13e2f387f6132100565a6f9af495698648c734e8acaa65b8fb2394b57038b5443debcedebb82ff3ee56245da47e1ac485a994602daf6d39f4ebe61cca7eaa85d842934e8de4e6e9aa823cb975d8a5c88e24a16e23b6f854d7b1228bcefc7aab035d2b18242e041c53756dcd30ee0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mpls={0xd0, 0x1a, 0x0, 0x0, {{0x9}, {0x50, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x45e32}, @TCA_MPLS_TTL={0x5, 0x7, 0x2}, @TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_LABEL={0x8, 0x5, 0x6119}, @TCA_MPLS_TC={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x9, 0x1, 0x8, 0x2}, 0x4}}, @TCA_MPLS_TTL={0x5}]}, {0x57, 0x6, "20a920b42b9bc0672c9bd1864ef05270cba95c14ecba8ed8f2c258a7d48deefdd37e361bcaf78e580305b4b94e065fa85159bbe54cbbedffd34a3dfbdbb7cc32114ed6b25145045f3d52f1e94a7da4b7f11b68"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_bpf={0xb4, 0x1e, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x4c, 0x4, [{0x8000, 0x0, 0x6, 0x57}, {0x8769, 0x5, 0x5, 0x80}, {0x7, 0x4, 0x6, 0x1}, {0x9, 0x1, 0x6, 0x2}, {0x0, 0xa4, 0x5b, 0x2}, {0x8100, 0x9, 0xf, 0x2}, {0x0, 0xbb, 0x93, 0x80000001}, {0x8, 0x9, 0x1}, {0x2, 0x6, 0x5, 0x9}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x24, 0x6, "b5b313315150759f51bb339eaa9cdf7bf600"/32}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ctinfo={0x90, 0x7, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8}]}, {0x5a, 0x6, "888ee59ce324c2489baccdcd43d90badf6bf690d69a155b8ccb404bab53dc31abc5710c91e57871c458d7be82d40c35fb8fa5355f12fe991e3341a8e16b1b8a60eb326e5fa3411b618cbf697efd643ee767808c25ceb"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_simple={0x110, 0x17, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0xd9, 0x6, "5dcd3d0b25c29c9a0159abbbede59bc857d07d9cbabd9688952ff072393ba42aeaf060ed3e4f48e98fb70f5576cff1c9cce5b307c486b04d64566864ee823af5e24d01ceb576c95f9eb75956ba8d36f38ae377d0214154d0cf0d7c2e6f0c1d49c8b412fce72661105e1bd5b099dbad280198e62aab526c1742be9775df7cb48fca1da1507c79e5c360d08fb81df7ae4d5cf01dcb620be0a3f19a7359f42ad317dbc3cba479db4eb7a168537622e6564c23ae2d30b161ba567cd41c9f6d897a03af448fc219fa104e05c9d47f5e3552b250b5140cd2"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_xt={0x10e4, 0x4, 0x0, 0x0, {{0x7}, {0x1064, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0x102a, 0x6, {0x4, 'filter\x00', 0x3, 0x6, "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"}}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_HOOK={0x8}]}, {0x5c, 0x6, "9a737f23705dc88e1c9b1e86310d941d126f370c83ad1e82a337c1005cf25c9de1736167c7ff4a10075fceb73af67276180d37421e3c1d5123e6db3f996ca2ee5da0b633155b2d9012ed4ddaf91848c5c1fa712ff313022e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mirred={0x160, 0x18, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x1, 0x1, 0x0, 0x9}, 0x2, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x4, 0x8, 0x9, 0x891b}, 0x2, r7}}]}, {0xf4, 0x6, "dce4590432bebb3e6707b7cf6a0bcd2c28330cf1d65bac753c05d95d6cc19624a115ee7eb2cfae04ac8f979c226506fc2bf76bc9304754f056d0943278dd51472f2beb4d1a1958ac389d90dd19921991871188e4bedccd59ec735db507548c0ef26969934cdf1ef1ca7c489f54b8aaac97de863d163ca94d06aae48b76545762858c1f02e252e93d3661fe4c60958644c0a53f858c4fa146b6418542220ee33c86014856da28456c4183efe9c13156f02cac569daefe39ed7fb4e59b9f57746325788042ae84ec0d5da5f7900368e54a531e443e240770646b717b75e60e8d70d5db7377056241493e245f37417fd2be"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x19c4}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004001) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000001000390425bd7000fcdb3d9300000000", @ANYRES32=0x0, @ANYBLOB="1000000000100000400012800b000100697036746e6c000030000280140003002001000000000000000000000000000214000200fc01000000000000000000000000000004001300"], 0x60}}, 0x0) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000080)={0xa, 0x101, 0x2, {0x1000, 0x8, 0xaeb2, 0x7}}) 2.421022207s ago: executing program 4 (id=691): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bonding_masters\x00', 0x1, 0x102) write(r4, &(0x7f0000000140)='+bond', 0x5) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000001f80)=r3, 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.940676416s ago: executing program 1 (id=693): clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) setitimer(0x2, &(0x7f00000003c0)={{r0, r1/1000+60000}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x70}, 0x1, 0x7}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private0}, 0x1c) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000001fc0)=@ethtool_cmd={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2c, 0x0, 0xfffe}}) setsockopt$inet6_int(r2, 0x29, 0x46, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0605250c"], 0x9) userfaultfd(0x80001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) syz_emit_ethernet(0x7c, &(0x7f0000000140)=ANY=[@ANYBLOB="856b93462904038287ea87f219dd60381f3400462f00fc000000000000000000000000000000ff020000000000000000000000000001042081000000892f0de100000801000086dd88a888be00000000100000000100000400000000000000eb000000002011000002000000000000000000000008006558ff00000007b53e6005409db9e9903b3d6caac27917d2a2eb5bb33b247f300bc389c264"], 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000240)=0x7) fsmount(0xffffffffffffffff, 0x0, 0x20) prlimit64(r4, 0xc, &(0x7f0000000000)={0x1, 0x4}, &(0x7f0000000100)) 1.938181962s ago: executing program 5 (id=694): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b0f, &(0x7f0000000000)={'veth1_virt_wifi\x00', @random="26e9b23d7d00"}) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000001000030428bd7800fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000200000008000500", @ANYRES32=r7, @ANYBLOB="97ec82e10858354f"], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 1.632604435s ago: executing program 7 (id=696): r0 = socket(0x10, 0x3, 0x0) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$kcm(0x21, 0x2, 0x2) (async) clock_gettime(0x3, &(0x7f0000000180)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000140)={r2, r3/1000+60000}, 0x10) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x40008000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000005) close_range(r1, r1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="010000000a0000002f4900007f"], 0x50) (async) io_setup(0x2, &(0x7f0000000280)=0x0) (async) r6 = accept$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @loopback}, &(0x7f0000000580)=0x10) (async) r7 = eventfd2(0x500000, 0x800) io_cancel(r5, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x2, 0x3, r6, &(0x7f00000005c0)="517bcc4d4c92bfd93be6a749efe0f83798fa9499b7c8cdc1082fb8af98d14ff0d2a5ea543bc7d1500869ed2474dd0a14f1674915498c3a8574cf2330f9be7895070b449e695f3d018c349ab0b1f67e1a010d0a095f4657d066d3015f4cb9e8be7501b12ffde846328847412f3039d69b6704b756029ade34bac3bdd2744ba6702c", 0x81, 0x11, 0x0, 0x3, r7}, &(0x7f00000006c0)) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xca, r4}, 0x38) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7}, 0x38) (async) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x4e24, @multicast2}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000fc0)={{{@in6=@ipv4={""/10, ""/2, @remote}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000500)=0xe8) r9 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r9, 0x0, 0x0, 0x4050, 0x0, 0x0) (async) r10 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r10, 0x0, 0x0, 0x2004c080, 0x0, 0x0) (async) r11 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r11, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0xa3, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000540)={[], [{@uid_gt={'uid>', r8}}, {@mask={'mask', 0x3d, '^MAY_READ'}}]}, 0x1, 0x73a, &(0x7f0000000800)="$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") (async) r12 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r12, &(0x7f0000000200)='blkio.bfq.io_service_time\x00', 0x0, 0x0) (async) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) (async) ftruncate(0xffffffffffffffff, 0x51a9497) (async) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x870499, 0x0, 0xf, 0x0, 0x0) 1.55671982s ago: executing program 5 (id=697): writev(0xffffffffffffffff, &(0x7f0000000a00)=[{&(0x7f0000000a40)="aaf9cbbebec1c21b2b97fe8378b1a6f9b362b0ce28d64dcae763a477474cd92e109fff8cbeb8da39e130c0e87879555d7d691c5ffa0ac0fa49a8957e4836da102348dff8d9bf765e0ac0d619a539ea3d1bf88e4ed805f6577386bc995636ac2cea14b9677b", 0x65}, {&(0x7f0000000380)="0456d4856c4b88b97e45594f0ae6bff7d3ae9a40b7bd9bc564c9516b939abd7e0e204453a9bffc037cb73bf154d5f4e683b6a4bccd0badc5fef9de25180231f9dd5f0663c0093c594de5dc81cb1f638308ba1228e76cd56d8f18cf325b5608e2fd59232cdab0140400e36c6b8b179ae19b388dea13c9a8429dd4e528929af3733ecd6b773cf5122ee6bc3b7430be9233c4fcb61046bfed5c414966e88d2d05868fe5aa421397c33560a46fe8cbd9e02fda254d68d3308c0efc3c02c4845691aacc963d04f433dda8b8c0d00d0d00000000e0dd9ad1123fa4c2b54ba6a632d998bf3e678955c1c16d9a25109aa80dea218de038fd09c40748c2ef2c75", 0xfc}, {&(0x7f0000000540)="def015f646c27f13274cd20d6d707e2f6be3a3a4540325436209143b8ace92f28dfdf027c9cdba457301d0450aa6e7650bd347dbf0dcdc5f6b1d131a558a071e36419ed57189b720a6d2786ed2be1a91ad79bc258f6284b98db8c647affe92814cd09d97a0b5a8047994df7360a01e852caddeb47912a00549ed86327c1b14b6b3b090b4c2a32296a4d9f0b9bbb5840ad75fbb2bb3df4b200c41d139e60cc35006b9841298aee2a8c120128c9a3b9a36849b57d636a7640a086c6fb179e43db615a7a7e0bf884a9cef662e118ebd0d0006e1f2c6354400c103e9e6aa6928e6c0d6cda07b86ac1c99d36d7a05d2b6966f9677f8b7e06fe017058274843670481e938145da3c65fdc5d4aada074a4f9d6e5fe64d8b57b6c1c61b01010de5035fb9438275fb83c1d936365ca368080377ae68b303b56b63149e587bd2403d687ff465fc9758f98ba60c1c0e044505ff1038ae0da75fc0671c3ead7d62dac18dac4ef9dd0a0cc94053acc2334c911b64307682e4bc13dc0b08df0b2484964e8147034e21eacd96eb3bc8ee18dc8b17f5356f4f32d52f3829828f4c882a682880769d3676dbc314c235db21", 0x1a9}, {&(0x7f0000000900)="76dd182c4fc8b7d7b41f42cd3ef0d3f7feb19b374acf8c681bff5bae66052fbda7900cf7836f597d138f7ecbf63e380d722760d9256ca254325b69e2a1d1a97b7894004ffc5f56f20f00a2349239fb194534f51634f8f7f39fe6abedd86153c650ddeaba837e85408d900f572cb257d95fb3ba8428f16466973832818415ff2bc6e15b95ca667ba0ec92eda20a06f55c9ef1efab", 0x94}], 0x4) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) (async) read$FUSE(r0, &(0x7f00000031c0)={0x2020}, 0x202e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x2082, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a05000000000000000000010000000900010073797a30000000000900030073797a320000000044000000060a010400000000000000000100000008000b400000000014000480100001800a000100696e6e65720000000900010073797a3000000000050007", @ANYRES16=r1], 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.532891735s ago: executing program 8 (id=673): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TIOCGSOFTCAR(r0, 0x5434, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000080)='\x98') r1 = syz_mount_image$vfat(&(0x7f0000000840), &(0x7f0000000080)='./bus\x00', 0x2, &(0x7f0000000b40)=ANY=[], 0x1, 0x307, &(0x7f0000001b40)="$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") openat(r1, &(0x7f0000000100)='./file2\x00', 0x20000, 0x6ab858183a7ef6cb) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ff8000/0x1000)=nil) 1.486883132s ago: executing program 4 (id=698): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x4, 0xfffffffd}}, 0x10) (async) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000ffdbdf256a0000000d000300", @ANYRES32=r3, @ANYBLOB="0a000600ffffffffffff00000500d2000e000000"], 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x400c000) (async) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000160001002a126337c13aa5ff0f00000008000100", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x0) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r8, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x40000) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r10 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 32) close(r11) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r13, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x17, 0x18, 0x5, 0x2, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) (async) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r10, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r14, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) (async) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) 1.438091604s ago: executing program 5 (id=699): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1d3942, 0x9) listns(&(0x7f0000000040)={0x20, 0x0, 0x1, 0x10000000}, 0x0, 0x0, 0x0) (async) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c, &(0x7f0000000580), 0x3, 0x27b, &(0x7f0000000200)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) (async) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r3, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)='p', 0x1, 0x3}]) recvfrom(r0, 0x0, 0x0, 0x120, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) (async) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x2800402, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) pipe2(&(0x7f0000000340)={0x0, 0x0}, 0x0) (async) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) (async) unshare(0x22060600) tee(r1, r4, 0x7, 0x0) (async) r6 = fanotify_init(0x2, 0x0) fanotify_mark(r6, 0x1, 0x1009, r5, 0x0) vmsplice(r5, &(0x7f0000000300)=[{&(0x7f0000000a40)="8b", 0x1}], 0x1, 0x0) r7 = socket(0x10, 0x3, 0x0) (async) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, 0x3, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFACCT_FILTER={0x4}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x8000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r9, @ANYBLOB="00000000000000001c001a"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) (async) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) (async) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 1.364694373s ago: executing program 7 (id=700): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x50, r3, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_TYPE={0x8}]}]}, 0x50}}, 0x0) 1.362987377s ago: executing program 8 (id=701): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0xe9, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x4}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)=0x10) mmap(&(0x7f000007d000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x2000) setresuid(0x0, 0xee01, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x80000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x4001, 0x3, 0x208, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x3a0, 0x206, 0x240, 0x3a0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x98, 0xc0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0xff, {0x9184}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xb, 0x16, &(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYBLOB="f86efd2b55f8b21dfd40f1dc785e306344664b65f175e6667f982078995a1bf4e212c0cf3dd4d7d02a9b4d2002a3a8f07c3e1aa5ef1007973b47481f1b97728db2975473c49558d3f30003a4b8507006153c4ac460f5c7b13530ccb16da7cef77fc559a6e009989401000000f73e77670b1e330e1e999ba2302610e12af9500ba604bd33113262b50199888b72ce93c39291892dea39fa387d06b1a13885004847bda1bbed2423da9eb4f2ea72f9c8608855b96871a976b63f0fa89d5eaf78ed7221a265539285", @ANYRESOCT=r0, @ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 1.007627812s ago: executing program 1 (id=702): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e22, 0x3ff, @remote, 0xff}}, 0x0, 0x0, 0x23, 0x0, "009b59557dc1b5123c64fcc67df9901d7a2e8a8ab8af14f15749796d758da20e43d329589647ea9f6a817312d894acc8525f60c827120fe6ba22affcc0260520dbbe61e312ce83b5f61534b6d6bb6ffd"}, 0xd8) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", '\x00\x00=*', "1202000000040030"}, 0x38) r3 = dup3(r1, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 918.34991ms ago: executing program 1 (id=703): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) unshare(0xe060400) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet6(r1, &(0x7f0000004f00)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x27}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000240)="92", 0x1}], 0x1}}], 0x1, 0x240800d0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f00000005c0)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}, {@userxattr}]}) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r4}}]}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0xffffffffffffff89}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x18, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000640)=@req3={0x5, 0x9, 0x7, 0x0, 0xff, 0x10000, 0x2}, 0x1c) sendmmsg(r5, &(0x7f0000000480)=[{{&(0x7f0000000080)=@qipcrtr={0x2a, 0x3, 0x4000}, 0xcf, 0x0}}, {{&(0x7f0000000180)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000100), 0xb}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="6febdafcb624ee7fc504358ca6a481305729d3fea29f2aa9c75d67e19f6d17e4907d1faa43eeaab760e8d1804aae32e79484d4489a4de96b8f8d4ee235c25628d479598d72e4779657e2b699d4856d0d91ce162df451abd81ace4dbaac89123434b1ce973a0baf370ce0189cfc44d4bfe651452ded7f3a0ea004d366205720a62e4cd7e84bc7f5d5178bcdd1d2f290087b40f5312560cf51f1d566daad64f17d8bc4a78f5a5e189e1e6e"}, {&(0x7f0000000000)="238c2887aef52b1977d02867e33dc29ba361531879303adcf56f5d072cc1bcb2cecb91be6b71792e3d49fa248278d4f50000d8f6e59212f71de098ec1691bcec2fce211878ad4c"}, {&(0x7f0000000100)="8b79772fd0f9584f50d5a2ab86a9d1a84242234be65125f7e40179a2400e9ea0db81033e5737d938c3eea562185e786a026e4601d51b46ac899104ea7ba957c597f1f8841c90fb436bf96c56484bf2bd99fa4edc7c46af3229033b39e3f1bd9b25ebc6"}, {&(0x7f0000000300)}, {&(0x7f0000000340)="5a2dd42b17b44cb047f78bcd7421dc73472ccbff543bb085ef26b5b9a1c0659c7bc32d082c7bba0b0c156312c3493cba248e5de21e595ec1ba95e5bfd2a615276af3c7197f50cc1d3667047468b2f3d697aaa44f2d2273b9be68895159bc90d994e313f43553134223e457d8b277f89ab096dd3e"}, {&(0x7f00000003c0)="7b5dace7b3e996786e526c0bb7d0bc5cd6b5462415ebaaf0bb7b0331dac425ee1adee811ed9a25cb133ee98a78f9d1521c82dccb3a1c65"}], 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"]}}], 0x2, 0x2004c850) ioctl$SIOCSIFHWADDR(r2, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="14d4b37ed38e"}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$IOMMU_IOAS_IOVA_RANGES(r6, 0x3b84, &(0x7f0000000180)={0x20, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000540)={0x60, 0x0, &(0x7f00007ac000/0x4000)=nil, &(0x7f00008a8000/0x2000)=nil, 0x2000000, &(0x7f0000000840)=[{0x8000000000000000}], 0x1, 0xffff, 0x24, 0x0, 0x28, 0x2}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) 553.371223ms ago: executing program 1 (id=704): ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file1\x00'}) landlock_restrict_self(r0, 0x7) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000000), 0x2, 0xbd1, &(0x7f0000001340)="$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") madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_POISON(r2, 0xc020aa08, &(0x7f0000000200)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000000c0)='.\x00', 0xa4446d, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0) 552.769389ms ago: executing program 5 (id=705): r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000), 0x8) (async, rerun: 32) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 32) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x200000, 0x5) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r4 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r4, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @local, 0x0, 0x20}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000340)="f4001100052b3325fe80070000000000000000000009ffffffe000"/40, 0xfd1b}], 0x1}, 0x20040000) (async, rerun: 64) r5 = openat(r2, &(0x7f00000000c0)='./file0\x00', 0x250300, 0x100) (async, rerun: 64) r6 = syz_open_dev$loop(&(0x7f0000000040), 0x5, 0xa0040) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x541b, 0xffffffffffffffff) (async) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000480)={0xe, @sliced={0x101, [0xff01, 0x4, 0x9, 0x2, 0xfffb, 0xf1af, 0x0, 0x7, 0x2, 0x1, 0x6, 0x12, 0x0, 0x6, 0xc, 0xf, 0x28, 0xb4bb, 0xfffc, 0x5, 0x81, 0x9, 0x1, 0x0, 0x0, 0x5, 0x4, 0x9, 0x4, 0x45, 0x7, 0x80, 0x7, 0x8, 0x6, 0x4, 0x6, 0x3, 0x4, 0xf, 0x2, 0x4, 0x3, 0x2, 0x1000, 0x2, 0x2, 0x2], 0x1ff}}) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r5, 0xc0945662, &(0x7f0000000100)={0x1, 0x0, '\x00', {0x0, @reserved}}) 551.637509ms ago: executing program 8 (id=706): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000009, 0x13, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './trace/set_event\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x20, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x800) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000020000000000000040000007391f8ff000000009500000c85e7f400"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x8a) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace\x00', 0x84000, 0x4) write(r6, &(0x7f0000000300)='sub:*v', 0x6) 526.678519ms ago: executing program 7 (id=707): socket$kcm(0x10, 0x2, 0x0) r0 = fanotify_init(0x20, 0x40000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x29, 0x5, 0x0) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfa, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfe, 0x1, 0x20000000}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4e044}, 0x24000080) fanotify_mark(r0, 0x2, 0x4800100b, r1, &(0x7f0000000080)='./file0/file0\x00') 292.683919ms ago: executing program 7 (id=708): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f000001f000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f0000012000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x16) r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@ax25={{0x3, @netrom}, [@netrom, @default, @netrom, @remote, @remote, @bcast, @null, @netrom]}, &(0x7f0000000080)=0x80, 0x80800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 268.781753ms ago: executing program 1 (id=709): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x250, 0x0, 0xa, 0x1000000, 0x0, 0x0, 0x1b8, 0x230, 0x230, 0x1b8, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x2, 0x1}, {0x0, 0x3, 0x2}}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x4e00a86cb1fa42a1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x1, 0x3, 0x7, 0x1, 0x2, 0x2], 0x3, 0x6}, {0x2, [0x6, 0x1, 0x6, 0x5, 0x8, 0x1], 0x1, 0xa}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b0) (async) close(r0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41dee000000003a49490834eb1600040000000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) 242.371144ms ago: executing program 7 (id=710): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800eeffffff000000000000000010006112bfff000000009500000000b6000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) (async) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200c840, &(0x7f0000000080)={[{@discard}, {@noload}]}, 0x64, 0x526, &(0x7f0000000a40)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x3a}, @val={0x8, 0x3, r2}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x40804}, 0x8000) r3 = socket$inet6(0xa, 0x80001, 0x0) (async) setuid(0xee01) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x2000000) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r7 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0405626, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd, 0xffffffffffffffff, 0x0, 0x0}) sendmsg$inet6(r6, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000085) (async) r8 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') read$FUSE(r8, &(0x7f00000007c0)={0x2020}, 0x2020) (async) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x310) r9 = socket(0x10, 0x3, 0x0) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x28, 0x2, 0x3, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x11}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8041}, 0x48890) (async) sendmsg$nl_route(r9, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_OIF={0x8}]}, 0x28}}, 0x0) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r11, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) (async) listen(r11, 0x100) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000800)='./bus\x00', 0xc440, &(0x7f0000001e00)={[{@max_batch_time={'max_batch_time', 0x3d, 0xfffffffffffffffb}}, {@orlov}, {@max_batch_time}, {@usrquota}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@noload}, {@dax}, {@noinit_itable}, {@nogrpid}]}, 0x1, 0x5ca, &(0x7f0000000200)="$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") 32.548898ms ago: executing program 5 (id=711): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000440)={[{@data_err_ignore}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@noquota}, {@usrquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3a}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@jqfmt_vfsold}, {@nodelalloc}]}, 0x1, 0x48d, &(0x7f0000000c80)="$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") (async, rerun: 32) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x0, 0x783, &(0x7f0000001f80)="$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") (async) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async) sendto$inet6(r3, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x6}, 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000ac0)={0x0, 0x0, 0x1, "c8"}, 0x9) (async) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000340), 0x8) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000880)={0x0, 0x2904c, 0x1f0, 0x10003, '\x00', [{0x0, 0x5, 0x900, 0xffffffffffffffff, 0x0, 0xa}, {0xffffffff, 0x4, 0x9, 0xa}], ['\x00', '\x00']}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x3e, &(0x7f0000000480)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) (async) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000040)=0x9, 0x4) (async) recvmmsg(r4, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) (async, rerun: 32) r5 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x80, &(0x7f0000000540)=[@in6={0xa, 0x4e22, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, @in6={0xa, 0x4e24, 0x1, @private2, 0xfffffff9}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00', 0x2fd}, @in6={0xa, 0x4e23, 0x4, @local, 0x4}]}, &(0x7f0000000380)=0x10) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={r6, 0x7}, 0x8) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="997425bd7000fbdbdf2515000000400001800d0001007564703a73797a320d"], 0x54}}, 0x2400c000) 24.235227ms ago: executing program 1 (id=712): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x8, &(0x7f00000000c0)=[{0x9, 0x6, 0x7, 0x8}, {0x9, 0x7f, 0x4, 0xb8}, {0x7f, 0x1, 0x92, 0x200}, {0x8, 0x5, 0x0, 0x4}, {0x666, 0x6, 0x6, 0x4}, {0x2, 0x1, 0x81, 0x10}, {0x0, 0x3, 0xf7, 0x3}, {0x101, 0x7, 0x4, 0x8}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000240)={0x0, 0x0}) ptrace(0x4208, r3) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x9, 0x10, r1, 0xced3b000) msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r5 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x4, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, {}, 0x9, 0x0, 0x1, 0x0, 0x2}, {{@in=@empty, 0x1fffffc, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x22}, 0x0, 0x0, 0x1, 0x3}}, 0xe8) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x20004, r6, 0x2}) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r9, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) sendto$inet(r9, &(0x7f0000000180)='!', 0x1, 0x448c4, 0x0, 0x0) recvmmsg(r9, &(0x7f0000007ac0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=""/208, 0xd0}, 0xc}], 0x1, 0x2141, 0x0) r10 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r8}) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000080bc2a6152d8897800fbdbdf2505005400200000006e35675999dd1995f89e10df4066527b3cdfd30bbad158606e5353c4e0265ba73e159433582e8491a9aa363b7cc653b25061a9fbbe43d9659beed91a6389117018"], 0x18}, 0x1, 0x0, 0x0, 0x20008081}, 0x8000) 0s ago: executing program 7 (id=713): io_uring_setup(0x162e, &(0x7f00000002c0)={0x0, 0xd38b, 0x480, 0x1, 0x348}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)='\x00\x00', 0x2) (async) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) write$binfmt_script(r2, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) (async) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=[{0x18, 0x110, 0xc, "aa"}, {0x18, 0x110, 0x1, '\x00'}, {0x10, 0x115}], 0x40}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000240)=r5, 0x4) (async) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x9) (async) write$binfmt_elf64(r2, &(0x7f0000000200)=ANY=[], 0x1cb) close(r2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000700)=@newtaction={0x60, 0x30, 0x871a15abc695fa3d, 0x70bd2a, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xffffffff, 0x0, 0x30000002, 0x1, 0xffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) (async) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 29][ T5708] el0_svc_common+0xec/0x23c [ 55.723940][ T5708] do_el0_svc+0x4c/0x5c [ 55.723952][ T5708] el0_svc+0x64/0x260 [ 55.723963][ T5708] el0t_64_sync_handler+0x44/0x104 [ 55.723973][ T5708] el0t_64_sync+0x198/0x19c [ 56.034970][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 56.037406][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 56.040906][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 56.043626][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 56.046019][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 56.114573][ T5718] loop1: detected capacity change from 0 to 2048 [ 56.132858][ T5718] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.167988][ T5718] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 56.180822][ T4712] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 56.202811][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.304451][ T5710] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.305987][ T5710] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.307524][ T5710] bridge_slave_0: entered allmulticast mode [ 56.312269][ T5710] bridge_slave_0: entered promiscuous mode [ 56.314483][ T5710] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.315906][ T5710] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.317415][ T5710] bridge_slave_1: entered allmulticast mode [ 56.319243][ T5710] bridge_slave_1: entered promiscuous mode [ 56.328357][ T5710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.334378][ T5710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.343556][ T5710] team0: Port device team_slave_0 added [ 56.346511][ T5710] team0: Port device team_slave_1 added [ 56.354627][ T5710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.356050][ T5710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.361548][ T5710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.364326][ T5710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.365617][ T5710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.370969][ T5710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.392340][ T5710] hsr_slave_0: entered promiscuous mode [ 56.393861][ T5710] hsr_slave_1: entered promiscuous mode [ 56.394096][ T5710] debugfs: 'hsr0' already exists in 'hsr' [ 56.394113][ T5710] Cannot create hsr debugfs directory [ 56.440320][ T3674] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.472352][ T5710] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 56.474806][ T5710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.477121][ T5710] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 56.479646][ T5710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.480068][ T5710] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 56.481861][ T5710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.482227][ T5710] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 56.483154][ T5710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.490613][ T5710] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.490666][ T5710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.490836][ T5710] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.490864][ T5710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.504733][ T5710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.507829][ T3710] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.509689][ T3710] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.513980][ T5710] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.522644][ T3674] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.529165][ T3757] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.529204][ T3757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.535072][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.535117][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.558034][ T3674] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.644965][ T3674] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.671764][ T5710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.733870][ T3674] bridge_slave_1: left allmulticast mode [ 56.735054][ T3674] bridge_slave_1: left promiscuous mode [ 56.736319][ T3674] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.743257][ T3674] bridge_slave_0: left allmulticast mode [ 56.746082][ T3674] bridge_slave_0: left promiscuous mode [ 56.746235][ T3674] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.825658][ T3674] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.834734][ T3674] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.849430][ T3674] bond0 (unregistering): Released all slaves [ 56.865428][ T5710] veth0_vlan: entered promiscuous mode [ 56.867734][ T5710] veth1_vlan: entered promiscuous mode [ 56.877480][ T5710] veth0_macvtap: entered promiscuous mode [ 56.879480][ T5710] veth1_macvtap: entered promiscuous mode [ 56.883862][ T5710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.884990][ T5710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.921425][ T3845] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.921546][ T3845] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.921564][ T3845] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.921579][ T3845] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.952779][ T3845] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.952813][ T3845] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.963676][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.963715][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.021619][ T5797] loop6: detected capacity change from 0 to 512 [ 57.028321][ T5797] EXT4-fs: Ignoring removed orlov option [ 57.028374][ T5797] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.039658][ T4402] 8021q: adding VLAN 0 to HW filter on device eth4 [ 57.042425][ T5797] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 57.043907][ T5797] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.171: attempt to clear invalid blocks 2 len 1 [ 57.043926][ T5797] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 57.044843][ T5797] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 57.046530][ T5797] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.171: invalid indirect mapped block 1819239214 (level 0) [ 57.046548][ T5797] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 57.046801][ T5797] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.171: invalid indirect mapped block 1819239214 (level 1) [ 57.046814][ T5797] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 57.047863][ T5797] EXT4-fs (loop6): 1 truncate cleaned up [ 57.048497][ T5797] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.073272][ T5710] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.107633][ T3674] hsr_slave_0: left promiscuous mode [ 57.112470][ T3674] hsr_slave_1: left promiscuous mode [ 57.114301][ T3674] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.115748][ T3674] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.117596][ T3674] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.119271][ T3674] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.126935][ T3674] veth1_macvtap: left promiscuous mode [ 57.128176][ T3674] veth0_macvtap: left promiscuous mode [ 57.130402][ T3674] veth1_vlan: left promiscuous mode [ 57.131613][ T3674] veth0_vlan: left promiscuous mode [ 57.246292][ T3674] team0 (unregistering): Port device team_slave_1 removed [ 57.251370][ T3674] team0 (unregistering): Port device team_slave_0 removed [ 57.415023][ T4402] 8021q: adding VLAN 0 to HW filter on device eth5 [ 57.496023][ T3674] IPVS: stop unused estimator thread 0... [ 57.538013][ T4402] 8021q: adding VLAN 0 to HW filter on device eth7 [ 57.654918][ T4402] 8021q: adding VLAN 0 to HW filter on device eth6 [ 58.098836][ T50] Bluetooth: hci5: command tx timeout [ 60.168692][ T50] Bluetooth: hci5: command tx timeout [ 62.248708][ T50] Bluetooth: hci5: command tx timeout [ 64.328756][ T50] Bluetooth: hci5: command tx timeout [ 64.490660][ T1593] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.490708][ T1593] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.500993][ T866] cfg80211: failed to load regulatory.db [ 125.929002][ T1593] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.929046][ T1593] ieee802154 phy1 wpan1: encryption failed: -22 [ 153.610927][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 153.610978][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 153.611007][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 163.848548][ T4713] Bluetooth: hci3: command 0x0406 tx timeout [ 179.208969][ T4713] Bluetooth: hci5: command 0x0406 tx timeout [ 187.369084][ T1593] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.369128][ T1593] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.997297][ T5969] loop5: detected capacity change from 0 to 128 [ 193.095192][ T5969] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 193.115713][ T5969] xt_hashlimit: size too large, truncated to 1048576 [ 193.335257][ T4743] Bluetooth: hci3: unexpected event for opcode 0x201c [ 193.345839][ T5985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.348981][ T5985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.357166][ T5985] warning: `syz.5.177' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 193.821194][ T5994] loop6: detected capacity change from 0 to 512 [ 193.824375][ T5994] EXT4-fs: Ignoring removed mblk_io_submit option [ 193.879734][ T5994] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #15: comm syz.6.182: corrupted in-inode xattr: e_value size too large [ 193.882626][ T5994] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 193.882989][ T5994] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.182: couldn't read orphan inode 15 (err -117) [ 193.887208][ T5994] loop6: lost filesystem error report for type 5 error -117 [ 193.887895][ T5994] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.982208][ T5999] loop4: detected capacity change from 0 to 1024 [ 193.982579][ T5999] EXT4-fs: Ignoring removed oldalloc option [ 193.982588][ T5999] EXT4-fs: Ignoring removed orlov option [ 194.014279][ T5999] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.204886][ T6008] mmap: syz.4.184 (6008) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 194.306086][ T6005] EXT4-fs error (device loop6): ext4_append:79: inode #2: comm syz.6.182: Logical block already allocated [ 194.327811][ T6007] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.184: bg 0: block 112: padding at end of block bitmap is not set [ 194.721321][ T5710] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.767823][ T6019] loop6: detected capacity change from 0 to 2048 [ 194.795854][ T6019] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.860801][ T4741] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 195.191009][ T5710] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.448034][ T6034] loop4: detected capacity change from 0 to 4096 [ 195.678329][ T6039] loop2: detected capacity change from 0 to 8192 [ 195.687896][ T6039] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 196.529306][ T6037] loop6: detected capacity change from 0 to 512 [ 196.537736][ T6037] EXT4-fs: Ignoring removed oldalloc option [ 196.538558][ T6037] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 196.547705][ T6042] loop1: detected capacity change from 0 to 512 [ 196.553649][ T6042] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 196.566667][ T6042] EXT4-fs (loop1): 1 truncate cleaned up [ 196.571509][ T6042] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.940508][ T6050] loop4: detected capacity change from 0 to 512 [ 196.948896][ T6050] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 196.949045][ T6050] EXT4-fs (loop4): orphan cleanup on readonly fs [ 196.955622][ T6050] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 196.962277][ T6052] netlink: 188 bytes leftover after parsing attributes in process `syz.2.194'. [ 196.962303][ T6052] netlink: 'syz.2.194': attribute type 1 has an invalid length. [ 196.963566][ T6050] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 196.964536][ T6050] EXT4-fs error (device loop4): __ext4_iget:5533: inode #16: block 127754: comm syz.4.193: invalid block [ 196.964556][ T6050] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 196.965520][ T6050] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.193: couldn't read orphan inode 16 (err -117) [ 196.965539][ T6050] loop4: lost filesystem error report for type 5 error -117 [ 196.966404][ T6052] Bluetooth: MGMT ver 1.23 [ 196.966434][ T6052] Bluetooth: hci1: too big key_count value 4608 [ 196.967152][ T6050] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 196.982373][ T6052] 9p: Bad value for 'rfdno' [ 197.002491][ T5101] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 197.061145][ T4741] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.069543][ T6058] Cannot find add_set index 0 as target [ 197.074937][ T6058] loop2: detected capacity change from 0 to 128 [ 197.084127][ T6058] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 197.126697][ T4731] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 197.157218][ T6071] 9pnet_virtio: no channels available for device ./file0 [ 197.165963][ T6072] nbd: must specify a size in bytes for the device [ 197.185652][ T6077] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 197.187400][ T6077] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 197.206437][ T6077] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4222: comm syz.6.202: Allocating blocks 41-42 which overlap fs metadata [ 197.206477][ T6077] loop6: lost filesystem error report for type 5 error -117 [ 197.208478][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 197.208492][ C1] EXT4-fs (loop6): initial error at time 197: ext4_mb_mark_diskspace_used:4222 [ 197.208509][ C1] EXT4-fs (loop6): last error at time 197: ext4_mb_mark_diskspace_used:4222 [ 197.211179][ T6077] EXT4-fs (loop6): Remounting filesystem read-only [ 197.211240][ T6077] Quota error (device loop6): write_blk: dquota write failed [ 197.211250][ T6077] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 197.211326][ T6077] Quota error (device loop6): write_blk: dquota write failed [ 197.211359][ T6077] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 197.211412][ T6077] EXT4-fs (loop6): 1 truncate cleaned up [ 197.211876][ T6077] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.217120][ T30] audit: type=1326 audit(197.200:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6068 comm="syz.4.201" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa93792a8 code=0x7ffc0000 [ 197.235795][ T30] audit: type=1326 audit(197.220:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6068 comm="syz.4.201" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa93792a8 code=0x7ffc0000 [ 197.235842][ T30] audit: type=1326 audit(197.220:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6068 comm="syz.4.201" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa93792a8 code=0x7ffc0000 [ 197.245979][ T30] audit: type=1326 audit(197.230:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6068 comm="syz.4.201" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffffa93792a8 code=0x7ffc0000 [ 197.246021][ T30] audit: type=1326 audit(197.230:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6068 comm="syz.4.201" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa93792a8 code=0x7ffc0000 [ 197.255315][ T30] audit: type=1326 audit(197.240:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6068 comm="syz.4.201" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa93792a8 code=0x7ffc0000 [ 197.265818][ T6082] sctp: [Deprecated]: syz.4.201 (pid 6082) Use of struct sctp_assoc_value in delayed_ack socket option. [ 197.265818][ T6082] Use struct sctp_sack_info instead [ 197.274248][ T6081] Dev loop2: RDB in block 1 has bad checksum [ 197.283818][ T6085] sctp: [Deprecated]: syz.4.201 (pid 6085) Use of struct sctp_assoc_value in delayed_ack socket option. [ 197.283818][ T6085] Use struct sctp_sack_info instead [ 197.300157][ T5710] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.391527][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.794899][ T6094] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 198.496224][ T6111] netlink: 'syz.5.210': attribute type 1 has an invalid length. [ 198.546392][ T6111] 8021q: adding VLAN 0 to HW filter on device bond1 [ 198.576743][ T6110] bond1: (slave geneve2): making interface the new active one [ 198.577504][ T6110] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 198.593650][ T3845] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.602668][ T3845] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.606539][ T3845] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.608652][ T3845] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.636493][ T6122] binder: 6117:6122 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 198.642033][ T6122] binder: 6122 RLIMIT_NICE not set [ 198.660746][ T6123] binder: 6119:6123 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 198.668573][ T6123] binder: 6123 RLIMIT_NICE not set [ 198.682299][ T6125] set_capacity_and_notify: 3 callbacks suppressed [ 198.682343][ T6125] loop5: detected capacity change from 0 to 512 [ 198.711459][ T6125] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.717594][ T6125] netlink: 12 bytes leftover after parsing attributes in process `syz.5.214'. [ 198.734620][ T6139] netlink: 12 bytes leftover after parsing attributes in process `syz.5.214'. [ 198.775083][ T6143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.217'. [ 198.786011][ T6143] loop2: detected capacity change from 0 to 8 [ 198.788094][ T6143] squashfs: Bad value for 'errors' [ 198.792554][ T5101] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.830921][ T6149] netlink: 36 bytes leftover after parsing attributes in process `syz.5.218'. [ 198.913320][ T6158] netlink: 'syz.5.220': attribute type 1 has an invalid length. [ 198.989313][ T6166] netlink: 51 bytes leftover after parsing attributes in process `syz.5.224'. [ 199.012084][ T6168] loop5: detected capacity change from 0 to 512 [ 199.083206][ T6173] loop5: detected capacity change from 0 to 512 [ 199.086266][ T6175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.227'. [ 199.092884][ T6173] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 199.092913][ T6173] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 199.097161][ T6173] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 199.100227][ T6173] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 199.100275][ T6173] System zones: 0-2, 18-18, 34-35 [ 199.101101][ T6173] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.179714][ T6185] loop6: detected capacity change from 0 to 512 [ 199.181998][ T6185] EXT4-fs: quotafile must be on filesystem root [ 199.248345][ T6188] netlink: 8 bytes leftover after parsing attributes in process `syz.6.231'. [ 199.328773][ T6190] IPVS: length: 1152 != 8 [ 199.399280][ T6196] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 199.399314][ T6196] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 199.430550][ T6198] binder: BINDER_SET_CONTEXT_MGR already set [ 199.430578][ T6198] binder: 6197:6198 ioctl 4018620d 20004a80 returned -16 [ 199.504149][ T6204] netlink: 364 bytes leftover after parsing attributes in process `syz.1.237'. [ 199.511246][ T6207] loop4: detected capacity change from 0 to 128 [ 199.519174][ T6207] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 199.519462][ T6207] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 199.566585][ T6214] loop6: detected capacity change from 0 to 512 [ 199.656359][ T6221] loop4: detected capacity change from 0 to 512 [ 199.659885][ T6221] EXT4-fs (loop4): Couldn't mount because of unsupported optional features (1) [ 199.693261][ T6221] loop4: detected capacity change from 0 to 4096 [ 199.695807][ T6221] EXT4-fs (loop4): Test dummy encryption mode enabled [ 199.704310][ T6221] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.711918][ T6221] netlink: 'syz.4.241': attribute type 10 has an invalid length. [ 199.711955][ T6221] netlink: 67 bytes leftover after parsing attributes in process `syz.4.241'. [ 199.712246][ T6221] vlan1: entered promiscuous mode [ 199.730555][ T6221] team0: Port device vlan1 added [ 199.734081][ T4713] Bluetooth: hci4: unexpected event for opcode 0x2024 [ 199.780232][ T4741] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.929446][ T6248] IPv6: NLM_F_REPLACE set, but no existing node found! [ 199.937485][ T5101] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.011367][ T6254] binder: 6253:6254 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 200.011399][ T6254] binder: 6254 RLIMIT_NICE not set [ 200.011679][ T6248] loop4: detected capacity change from 0 to 4096 [ 200.012009][ T6248] EXT4-fs: inline encryption not supported [ 200.016900][ T6248] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 200.016912][ T6248] EXT4-fs (loop4): Test dummy encryption mode enabled [ 200.022860][ T6248] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 200.022916][ T6248] System zones: 0-5 [ 200.023763][ T6248] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.077997][ T6257] pimreg: entered allmulticast mode [ 200.095024][ T6257] pimreg: left allmulticast mode [ 200.098034][ T4741] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.158747][ T6269] EXT4-fs (loop1): unsupported descriptor size 320 [ 200.239690][ T6278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.241809][ T6278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.272941][ T6280] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.278043][ T6280] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 18: comm syz.1.254: lblock 17 mapped to illegal pblock 18 (length 1) [ 200.285670][ T6280] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 18: comm syz.1.254: lblock 17 mapped to illegal pblock 18 (length 1) [ 200.297972][ T6286] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 18: comm syz.1.254: lblock 17 mapped to illegal pblock 18 (length 1) [ 200.302512][ T6284] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 18: comm syz.1.254: lblock 17 mapped to illegal pblock 18 (length 1) [ 200.331648][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.337593][ T6290] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 200.337639][ T6290] EXT4-fs (loop6): Test dummy encryption mode enabled [ 200.352751][ T6290] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 200.352805][ T6290] System zones: 0-5 [ 200.355492][ T6290] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.397104][ T5710] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.416813][ T6296] batman_adv: batadv0: Adding interface: veth0 [ 200.416847][ T6296] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.416874][ T6296] batman_adv: batadv0: Interface activated: veth0 [ 200.427337][ T6296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.427377][ T6296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.433347][ T6296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.433385][ T6296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.437737][ T6296] batman_adv: batadv0: Interface deactivated: veth0 [ 200.437769][ T6296] batman_adv: batadv0: Removing interface: veth0 [ 200.691225][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 200.849019][ T6313] binder: 6309:6313 tried to acquire reference to desc 0, got 1 instead [ 200.849395][ T6313] binder: 6309:6313 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 200.849423][ T6313] binder: 6313 RLIMIT_NICE not set [ 200.899933][ T6315] binder: 6309:6315 got transaction to invalid handle, 3 [ 200.900031][ T6315] binder: 6309:6315 cannot find target node [ 200.901533][ T6315] binder: 6309:6315 transaction call to 0:0 failed 15/29201/-22, code 0 size 0-0 line 3252 [ 200.901711][ T6315] binder: undelivered TRANSACTION_ERROR: 29201 [ 200.917548][ T6317] EXT4-fs: Ignoring removed nomblk_io_submit option [ 200.919916][ T6317] EXT4-fs: Ignoring removed nomblk_io_submit option [ 200.925413][ T6317] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 200.934731][ T6317] EXT4-fs (loop5): 1 truncate cleaned up [ 200.937123][ T6317] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.017474][ T6319] usb3503 0-0008: unknown mode is requested [ 201.017688][ T6319] usb3503 0-0008: usb3503_probe: probed in standby mode [ 201.020590][ T6319] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 201.220684][ T5101] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.285825][ T6326] EXT4-fs: Ignoring removed mblk_io_submit option [ 201.290167][ T6326] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 201.299546][ T6328] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 201.315330][ T6328] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 201.323579][ T6328] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.264: bg 0: block 248: padding at end of block bitmap is not set [ 201.329331][ T6328] loop5: lost filesystem error report for type 5 error -117 [ 201.331833][ T6328] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.264: Failed to acquire dquot type 1 [ 201.338483][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 201.338520][ C1] EXT4-fs (loop5): last error at time 201: ext4_validate_block_bitmap:441 [ 201.338692][ T6328] loop5: lost filesystem error report for type 5 error -28 [ 201.344211][ T6328] EXT4-fs (loop5): 1 truncate cleaned up [ 201.344678][ T6328] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 201.378750][ T6328] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #2: block 3: comm syz.5.264: bad entry in directory: directory entry overrun - offset=92, inode=201326608, rec_len=4096, size=4096 fake=0 [ 201.413659][ T6332] FAULT_INJECTION: forcing a failure. [ 201.413659][ T6332] name failslab, interval 1, probability 0, space 0, times 0 [ 201.413697][ T6332] CPU: 0 UID: 0 PID: 6332 Comm: syz.2.266 Tainted: G L syzkaller #0 PREEMPT [ 201.413716][ T6332] Tainted: [L]=SOFTLOCKUP [ 201.413720][ T6332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 201.413725][ T6332] Call trace: [ 201.413728][ T6332] show_stack+0x2c/0x3c (C) [ 201.413750][ T6332] __dump_stack+0x30/0x40 [ 201.413764][ T6332] dump_stack_lvl+0xd8/0x12c [ 201.413776][ T6332] dump_stack+0x1c/0x28 [ 201.413787][ T6332] should_fail_ex+0x41c/0x590 [ 201.413796][ T6332] should_failslab+0xc4/0x120 [ 201.413806][ T6332] kmem_cache_alloc_noprof+0x94/0x5d8 [ 201.413816][ T6332] __kernfs_new_node+0xf0/0x7d8 [ 201.413827][ T6332] kernfs_new_node+0xe8/0x130 [ 201.413836][ T6332] __kernfs_create_file+0x60/0x2e0 [ 201.413847][ T6332] cgroup_addrm_files+0x694/0xaf8 [ 201.413860][ T6332] css_populate_dir+0x230/0x348 [ 201.413870][ T6332] cgroup_mkdir+0x744/0xbac [ 201.413881][ T6332] kernfs_iop_mkdir+0xe0/0x128 [ 201.413891][ T6332] vfs_mkdir+0x2dc/0x464 [ 201.413902][ T6332] filename_mkdirat+0x228/0x3f4 [ 201.413912][ T6332] __arm64_sys_mkdirat+0x9c/0xc0 [ 201.413923][ T6332] invoke_syscall+0x98/0x244 [ 201.413935][ T6332] el0_svc_common+0xec/0x23c [ 201.413947][ T6332] do_el0_svc+0x4c/0x5c [ 201.413958][ T6332] el0_svc+0x64/0x260 [ 201.413969][ T6332] el0t_64_sync_handler+0x44/0x104 [ 201.413980][ T6332] el0t_64_sync+0x198/0x19c [ 201.413995][ T6332] cgroup: cgroup_addrm_files: failed to add cgroup.max.depth, err=-12 [ 201.453706][ T6334] fuse: Bad value for 'fd' [ 201.479590][ T3757] EXT4-fs error (device loop5): ext4_release_dquot:7077: comm kworker/u8:7: Failed to release dquot type 1 [ 201.479628][ T3757] loop5: lost filesystem error report for type 5 error -117 [ 201.488155][ T5101] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 201.665051][ T6340] 9p: Bad value for 'rfdno' [ 201.746833][ T6344] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 201.747966][ T6344] EXT4-fs (loop4): 1 truncate cleaned up [ 201.753674][ T6344] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.832438][ T6351] netlink: 'syz.5.272': attribute type 21 has an invalid length. [ 201.832498][ T6351] netlink: 'syz.5.272': attribute type 1 has an invalid length. [ 202.237144][ T6363] __nla_validate_parse: 9 callbacks suppressed [ 202.237178][ T6363] netlink: 12 bytes leftover after parsing attributes in process `syz.5.274'. [ 202.247310][ T6363] netlink: 12 bytes leftover after parsing attributes in process `syz.5.274'. [ 202.258773][ T13] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.267601][ T3674] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.267844][ T3674] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.267867][ T3674] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.614258][ T4741] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.651183][ T6380] netlink: 32 bytes leftover after parsing attributes in process `syz.1.279'. [ 202.651289][ T6380] netlink: 32 bytes leftover after parsing attributes in process `syz.1.279'. [ 202.651344][ T6380] netlink: 32 bytes leftover after parsing attributes in process `syz.1.279'. [ 202.651390][ T6380] netlink: 32 bytes leftover after parsing attributes in process `syz.1.279'. [ 202.651440][ T6380] netlink: 32 bytes leftover after parsing attributes in process `syz.1.279'. [ 202.651481][ T6380] netlink: 32 bytes leftover after parsing attributes in process `syz.1.279'. [ 202.651519][ T6380] netlink: 32 bytes leftover after parsing attributes in process `syz.1.279'. [ 202.651558][ T6380] netlink: 32 bytes leftover after parsing attributes in process `syz.1.279'. [ 202.714067][ T6389] ieee802154 phy0 wpan0: encryption failed: -90 [ 202.830980][ T6397] binder: 6386:6397 cannot find target node [ 202.831024][ T6397] binder: 6386:6397 transaction call to 0:0 failed 23/29201/-22, code 0 size 0-0 line 3252 [ 202.831218][ T6397] binder: undelivered TRANSACTION_ERROR: 29201 [ 203.032198][ T6400] ext4: Unknown parameter '' [ 203.622914][ T6415] EXT4-fs: inline encryption not supported [ 203.660673][ T6415] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 203.676565][ T6415] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #3: block 1: comm syz.1.286: lblock 1 mapped to illegal pblock 1 (length 1) [ 203.676616][ T6415] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 203.677054][ T6415] EXT4-fs (loop1): Remounting filesystem read-only [ 203.677065][ T6415] __quota_error: 199 callbacks suppressed [ 203.677071][ T6415] Quota error (device loop1): write_blk: dquota write failed [ 203.677084][ T6415] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 203.677168][ T6415] EXT4-fs (loop1): 1 orphan inode deleted [ 203.677588][ T6415] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.777184][ T6419] bonding: bond is being created... [ 203.778545][ T6419] bonding: bond already exists [ 204.352880][ T6431] set_capacity_and_notify: 10 callbacks suppressed [ 204.352917][ T6431] loop6: detected capacity change from 0 to 512 [ 204.353242][ T6431] ext4: Unknown parameter '/dev/ptmx' [ 204.509285][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.626950][ T6446] loop6: detected capacity change from 0 to 256 [ 204.670519][ T6455] sctp: [Deprecated]: syz.1.297 (pid 6455) Use of int in maxseg socket option. [ 204.670519][ T6455] Use struct sctp_assoc_value instead [ 204.694155][ T6455] loop1: detected capacity change from 0 to 4096 [ 204.730577][ T6455] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.740236][ T6455] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.297: corrupted inode contents [ 204.744258][ T6455] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #15: comm syz.1.297: mark_inode_dirty error [ 204.747279][ T6455] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.297: corrupted inode contents [ 204.752279][ T6455] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.297: mark_inode_dirty error [ 204.756428][ T6455] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.297: corrupted inode contents [ 204.762827][ T6455] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.297: mark_inode_dirty error [ 204.766486][ T6455] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.297: corrupted inode contents [ 204.773286][ T6455] EXT4-fs error (device loop1): ext4_truncate:4691: inode #15: comm syz.1.297: mark_inode_dirty error [ 204.776934][ T6455] EXT4-fs error (device loop1) in ext4_setattr:6172: Corrupt filesystem [ 204.788096][ T6466] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.297: corrupted inode contents [ 205.184247][ T6522] loop5: detected capacity change from 0 to 4096 [ 205.203880][ T6522] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 205.224445][ T6522] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.225376][ T6522] EXT4-fs: Cannot change journaled quota options when quota turned on [ 205.364724][ T5710] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 205.371364][ T5710] FAT-fs (loop6): Filesystem has been set read-only [ 205.373180][ T5710] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 205.706742][ T6552] 9pnet_fd: Insufficient options for proto=fd [ 205.708256][ T6553] 9pnet_fd: Insufficient options for proto=fd [ 205.717827][ T4712] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 205.718749][ T4712] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 205.719274][ T4712] EXT4-fs warning (device loop1): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 205.721083][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.739001][ T6553] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 205.820561][ T6559] loop1: detected capacity change from 0 to 4096 [ 205.822205][ T6559] EXT4-fs: inline encryption not supported [ 205.843010][ T6559] EXT4-fs (loop1): Test dummy encryption mode enabled [ 205.857893][ T5101] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.875484][ T6559] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.907195][ T4743] Bluetooth: hci1: unexpected event for opcode 0x0c7a [ 205.913616][ T6568] loop2: detected capacity change from 0 to 512 [ 205.978904][ T6571] loop4: detected capacity change from 0 to 256 [ 205.979383][ T6571] vfat: Deprecated parameter 'posix' [ 205.979407][ T6571] FAT-fs: "posix" option is obsolete, not supported now [ 206.162221][ T6568] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.167905][ T6568] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.306: corrupted xattr block 33: invalid ea_ino [ 206.173629][ T6568] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.306: corrupted xattr block 33: invalid ea_ino [ 206.177450][ T6568] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.306: corrupted xattr block 33: invalid ea_ino [ 206.196149][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.208569][ T6573] loop5: detected capacity change from 0 to 128 [ 206.220724][ T4731] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.227562][ T6573] FAT-fs (loop5): bogus number of reserved sectors [ 206.227617][ T6573] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 206.227633][ T6573] FAT-fs (loop5): Can't find a valid FAT filesystem [ 206.240719][ T6573] nfs: Unknown parameter '' [ 206.245542][ T3674] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.315687][ T4713] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 206.317458][ T4713] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 206.319382][ T4713] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 206.320239][ T4713] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 206.320472][ T4713] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 206.359252][ T3674] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.512025][ T3674] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.590404][ T3674] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.623920][ T6609] loop1: detected capacity change from 0 to 512 [ 206.629950][ T6609] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 206.652589][ T6609] EXT4-fs (loop1): 1 truncate cleaned up [ 206.653087][ T6609] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.796163][ T3674] bridge_slave_1: left allmulticast mode [ 206.796200][ T3674] bridge_slave_1: left promiscuous mode [ 206.796283][ T3674] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.799663][ T3674] bridge_slave_0: left allmulticast mode [ 206.799678][ T3674] bridge_slave_0: left promiscuous mode [ 206.799746][ T3674] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.107332][ T3674] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.151269][ T3674] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.179948][ T3674] bond0 (unregistering): Released all slaves [ 207.455690][ T6581] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.457384][ T6581] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.457464][ T6581] bridge_slave_0: entered allmulticast mode [ 207.457918][ T6581] bridge_slave_0: entered promiscuous mode [ 207.463494][ T6581] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.465202][ T6581] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.466875][ T6581] bridge_slave_1: entered allmulticast mode [ 207.468763][ T6581] bridge_slave_1: entered promiscuous mode [ 207.477927][ T6581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.481122][ T6581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.491315][ T6581] team0: Port device team_slave_0 added [ 207.498220][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.523318][ T6637] loop5: detected capacity change from 0 to 1024 [ 207.529945][ T6637] EXT4-fs (loop5): inodes count not valid: 0 vs 32 [ 207.531880][ T6581] team0: Port device team_slave_1 added [ 207.574999][ T6581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.575036][ T6581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.575241][ T6581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.575823][ T6581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.575829][ T6581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.575839][ T6581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.613904][ T6646] tipc: Failed to remove unknown binding: 66,0,0/0:281777347/281777348 [ 207.614537][ T6646] tipc: Failed to remove unknown binding: 66,0,0/0:281777347/281777348 [ 207.642884][ T6581] hsr_slave_0: entered promiscuous mode [ 207.644989][ T6581] hsr_slave_1: entered promiscuous mode [ 207.645535][ T6581] debugfs: 'hsr0' already exists in 'hsr' [ 207.645546][ T6581] Cannot create hsr debugfs directory [ 207.684817][ T6657] binder_user_error: 6 callbacks suppressed [ 207.684855][ T6657] binder: 6649:6657 got transaction to invalid handle, 1 [ 207.685175][ T6657] binder: 6649:6657 cannot find target node [ 207.685202][ T6657] binder: 6649:6657 transaction call to 0:0 failed 27/29201/-22, code 0 size 72-24 line 3252 [ 207.689354][ T6657] binder: 6649:6657 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 207.689367][ T6657] binder: 6657 RLIMIT_NICE not set [ 207.696228][ T4402] 8021q: adding VLAN 0 to HW filter on device eth8 [ 207.739880][ T6662] binder: 6649:6662 got transaction to invalid handle, 3 [ 207.739915][ T6662] binder: 6649:6662 cannot find target node [ 207.740229][ T6662] binder: 6649:6662 transaction call to 0:0 failed 28/29201/-22, code 0 size 0-0 line 3252 [ 207.740391][ T6662] binder: undelivered TRANSACTION_ERROR: 29201 [ 207.760513][ T3674] hsr_slave_0: left promiscuous mode [ 207.762157][ T3674] hsr_slave_1: left promiscuous mode [ 207.767052][ T3674] veth1_macvtap: left promiscuous mode [ 207.768354][ T3674] veth0_macvtap: left promiscuous mode [ 207.770253][ T3674] veth1_vlan: left promiscuous mode [ 207.771506][ T3674] veth0_vlan: left promiscuous mode [ 207.798809][ T6663] scsi_nl_rcv_msg: discarding partial message [ 207.802688][ T6663] vfat: Unknown parameter 'uni_xlvte' [ 207.941194][ T3674] team0 (unregistering): Port device team_slave_1 removed [ 207.953300][ T3674] team0 (unregistering): Port device team_slave_0 removed [ 207.978234][ T6665] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.992956][ T6665] EXT4-fs error (device loop4): ext4_generic_delete_entry:2673: inode #2: block 16: comm syz.4.328: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 208.000417][ T6665] EXT4-fs error (device loop4) in ext4_delete_entry:2744: Corrupt filesystem [ 208.003565][ T6665] EXT4-fs warning (device loop4): ext4_rename_delete:3739: inode #2: comm syz.4.328: Deleting old file: nlink 1, error=-117 [ 208.021086][ T4741] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.165701][ T6581] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 208.168179][ T6581] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 208.169237][ T6581] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 208.170758][ T6581] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 208.171228][ T6581] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 208.173694][ T6581] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 208.174536][ T6581] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 208.176332][ T6581] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 208.216283][ T6581] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.216344][ T6581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.216424][ T6581] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.216453][ T6581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.246998][ T6581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.256332][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.257762][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.268309][ T6581] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.272201][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.272250][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.275362][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.275406][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.294021][ T4402] 8021q: adding VLAN 0 to HW filter on device eth9 [ 208.300010][ T6581] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 208.408739][ T4713] Bluetooth: hci0: command tx timeout [ 208.430213][ T6581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.445558][ T5621] binder: undelivered TRANSACTION_ERROR: 29201 [ 208.529856][ T6724] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.535358][ T4402] 8021q: adding VLAN 0 to HW filter on device eth10 [ 208.542427][ T6732] ext2: Bad value for 'mb_optimize_scan' [ 208.546612][ T6723] Cannot find set identified by id 0 to match [ 208.566012][ T6581] veth0_vlan: entered promiscuous mode [ 208.573626][ T6724] Cannot find set identified by id 0 to match [ 208.590356][ T6581] veth1_vlan: entered promiscuous mode [ 208.602247][ T6723] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 208.606869][ T6581] veth0_macvtap: entered promiscuous mode [ 208.609339][ T6723] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 208.615789][ T6581] veth1_macvtap: entered promiscuous mode [ 208.622514][ T6581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.626473][ T6581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.689080][ T3674] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.703876][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.705542][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.728079][ T3710] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.728113][ T3710] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.740452][ T3710] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.740499][ T3710] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.740723][ T3710] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.981763][ T4402] 8021q: adding VLAN 0 to HW filter on device eth11 [ 209.571702][ T6777] fuse: Bad value for 'fd' [ 209.642576][ T4731] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.905970][ T6789] set_capacity_and_notify: 6 callbacks suppressed [ 209.906012][ T6789] loop2: detected capacity change from 0 to 8192 [ 209.926646][ T6789] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 210.285835][ T6818] binder: 6811:6818 got transaction to invalid handle, 1 [ 210.287455][ T6818] binder: 6811:6818 cannot find target node [ 210.288843][ T6818] binder: 6811:6818 transaction call to 0:0 failed 32/29201/-22, code 0 size 72-24 line 3252 [ 210.292460][ T6818] binder: 6811:6818 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 210.295139][ T6818] binder: 6818 RLIMIT_NICE not set [ 210.300916][ T6817] loop5: detected capacity change from 0 to 4096 [ 210.307315][ T6817] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.343109][ T6825] binder: 6811:6825 got transaction to invalid handle, 3 [ 210.343144][ T6825] binder: 6811:6825 cannot find target node [ 210.343175][ T6825] binder: 6811:6825 transaction call to 0:0 failed 33/29201/-22, code 0 size 0-0 line 3252 [ 210.370474][ T6817] ext4: Unknown parameter './proc' [ 210.391087][ T5101] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.574160][ T6834] loop1: detected capacity change from 0 to 512 [ 210.578507][ T6834] ext4: Bad value for 'journal' [ 210.933131][ T4713] Bluetooth: hci0: command tx timeout [ 211.318161][ T6860] bridge_slave_0: left allmulticast mode [ 211.318200][ T6860] bridge_slave_0: left promiscuous mode [ 211.318309][ T6860] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.465959][ T6893] No source specified [ 211.482155][ T6897] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 211.485588][ T6897] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 211.490580][ T6899] bridge0: port 3(veth0) entered blocking state [ 211.490683][ T6899] bridge0: port 3(veth0) entered disabled state [ 211.490827][ T6899] veth0: entered allmulticast mode [ 211.491945][ T6898] loop1: detected capacity change from 0 to 512 [ 211.493768][ T6899] veth0: entered promiscuous mode [ 211.519266][ T6901] loop2: detected capacity change from 0 to 512 [ 211.519576][ T6901] ext4: Bad value for 'journal_dev' [ 211.701077][ T6920] loop1: detected capacity change from 0 to 512 [ 211.720707][ T6920] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.733907][ T6920] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.363: bg 0: block 217: padding at end of block bitmap is not set [ 211.767094][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.854417][ T6938] FAULT_INJECTION: forcing a failure. [ 211.854417][ T6938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.854456][ T6938] CPU: 0 UID: 0 PID: 6938 Comm: syz.1.365 Tainted: G L syzkaller #0 PREEMPT [ 211.854473][ T6938] Tainted: [L]=SOFTLOCKUP [ 211.854477][ T6938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 211.854483][ T6938] Call trace: [ 211.854486][ T6938] show_stack+0x2c/0x3c (C) [ 211.854507][ T6938] __dump_stack+0x30/0x40 [ 211.854520][ T6938] dump_stack_lvl+0xd8/0x12c [ 211.854532][ T6938] dump_stack+0x1c/0x28 [ 211.854543][ T6938] should_fail_ex+0x41c/0x590 [ 211.854552][ T6938] should_fail+0x14/0x24 [ 211.854559][ T6938] should_fail_usercopy+0x20/0x30 [ 211.854567][ T6938] _inline_copy_from_user+0x38/0x164 [ 211.854581][ T6938] __arm64_sys_signalfd4+0x110/0x1a4 [ 211.854600][ T6938] invoke_syscall+0x98/0x244 [ 211.854613][ T6938] el0_svc_common+0xec/0x23c [ 211.854625][ T6938] do_el0_svc+0x4c/0x5c [ 211.854636][ T6938] el0_svc+0x64/0x260 [ 211.854647][ T6938] el0t_64_sync_handler+0x44/0x104 [ 211.854657][ T6938] el0t_64_sync+0x198/0x19c [ 212.341757][ T6973] netlink: 'syz.5.368': attribute type 9 has an invalid length. [ 212.341793][ T6973] __nla_validate_parse: 82 callbacks suppressed [ 212.341813][ T6973] netlink: 232 bytes leftover after parsing attributes in process `syz.5.368'. [ 212.474411][ T6985] loop7: detected capacity change from 0 to 512 [ 212.474786][ T6985] ext2: Bad value for 'min_batch_time' [ 212.969854][ T4713] Bluetooth: hci0: command tx timeout [ 213.620838][ T7034] netlink: 156 bytes leftover after parsing attributes in process `syz.5.382'. [ 213.654424][ T7037] loop1: detected capacity change from 0 to 1024 [ 213.654724][ T7037] ext3: Bad value for 'mb_optimize_scan' [ 213.875627][ T7065] block2mtd: error: cannot open device [ 214.385073][ T4743] block nbd4: Receive control failed (result -32) [ 214.387418][ T7042] block nbd4: shutting down sockets [ 214.446448][ T7067] loop4: detected capacity change from 0 to 4096 [ 214.463224][ T7067] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.489038][ T7067] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #15: comm syz.4.387: corrupted inode contents [ 214.492894][ T7067] EXT4-fs error (device loop4): ext4_dirty_inode:6639: inode #15: comm syz.4.387: mark_inode_dirty error [ 214.494039][ T7067] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #15: comm syz.4.387: corrupted inode contents [ 214.494456][ T7067] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.387: mark_inode_dirty error [ 214.496199][ T7067] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #15: comm syz.4.387: corrupted inode contents [ 214.497430][ T7067] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.387: mark_inode_dirty error [ 214.498123][ T7067] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #15: comm syz.4.387: corrupted inode contents [ 214.499272][ T7067] EXT4-fs error (device loop4): ext4_truncate:4691: inode #15: comm syz.4.387: mark_inode_dirty error [ 214.502955][ T7067] EXT4-fs error (device loop4) in ext4_setattr:6172: Corrupt filesystem [ 214.526615][ T7071] loop2: detected capacity change from 0 to 4096 [ 214.559878][ T7067] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #15: comm syz.4.387: corrupted inode contents [ 214.606349][ T4741] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.671670][ T7087] tmpfs: Bad value for 'mpol' [ 214.681631][ T7084] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.047725][ T4743] Bluetooth: hci0: command tx timeout [ 215.111735][ T7114] syz.4.397 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 215.113829][ T7114] bond0: option mode: unable to set because the bond device has slaves [ 215.186955][ T7117] set_capacity_and_notify: 2 callbacks suppressed [ 215.188539][ T7117] loop4: detected capacity change from 0 to 512 [ 215.190207][ T7117] ext2: Bad value for 'mb_optimize_scan' [ 215.287416][ T7120] tps6598x 0-0003: probe with driver tps6598x failed with error -22 [ 215.288670][ T7120] i2c i2c-0: new_device: Instantiated device tps25750 at 0x03 [ 215.289303][ T7120] netlink: 'syz.1.400': attribute type 1 has an invalid length. [ 215.297537][ T7120] 8021q: adding VLAN 0 to HW filter on device bond1 [ 215.312895][ T7120] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 215.340979][ T7125] loop7: detected capacity change from 0 to 512 [ 215.351490][ T7125] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 215.382766][ T7125] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.474815][ T5101] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.786227][ T7140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.405'. [ 216.001712][ T7152] FAULT_INJECTION: forcing a failure. [ 216.001712][ T7152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.001744][ T7152] CPU: 0 UID: 0 PID: 7152 Comm: syz.4.408 Tainted: G L syzkaller #0 PREEMPT [ 216.001758][ T7152] Tainted: [L]=SOFTLOCKUP [ 216.001762][ T7152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 216.001768][ T7152] Call trace: [ 216.001771][ T7152] show_stack+0x2c/0x3c (C) [ 216.001791][ T7152] __dump_stack+0x30/0x40 [ 216.001803][ T7152] dump_stack_lvl+0xd8/0x12c [ 216.001815][ T7152] dump_stack+0x1c/0x28 [ 216.001826][ T7152] should_fail_ex+0x41c/0x590 [ 216.001836][ T7152] should_fail+0x14/0x24 [ 216.001843][ T7152] should_fail_usercopy+0x20/0x30 [ 216.001851][ T7152] bpf_verifier_vlog+0x3f4/0xbc0 [ 216.001863][ T7152] btf_verifier_log+0x120/0x1a0 [ 216.001873][ T7152] btf_func_proto_log+0x5a8/0x7a0 [ 216.001884][ T7152] __btf_verifier_log_type+0x3bc/0x5e4 [ 216.001894][ T7152] btf_func_proto_check_meta+0x118/0x154 [ 216.001905][ T7152] btf_parse_type_sec+0x36c/0x17a8 [ 216.001917][ T7152] btf_new_fd+0x33c/0xa24 [ 216.001926][ T7152] bpf_btf_load+0x144/0x190 [ 216.001934][ T7152] __sys_bpf+0x7f0/0x82c [ 216.001942][ T7152] __arm64_sys_bpf+0xd0/0xec [ 216.001950][ T7152] invoke_syscall+0x98/0x244 [ 216.001962][ T7152] el0_svc_common+0xec/0x23c [ 216.001974][ T7152] do_el0_svc+0x4c/0x5c [ 216.001985][ T7152] el0_svc+0x64/0x260 [ 216.001996][ T7152] el0t_64_sync_handler+0x44/0x104 [ 216.002006][ T7152] el0t_64_sync+0x198/0x19c [ 216.050506][ T7154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.409'. [ 216.178660][ T6581] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.587493][ T7171] loop5: detected capacity change from 0 to 512 [ 216.587890][ T7171] ext2: Bad value for 'mb_optimize_scan' [ 216.672432][ T7175] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 216.929108][ T7192] loop4: detected capacity change from 0 to 512 [ 217.004226][ T7197] bonding: bond is being created... [ 217.005381][ T7197] bonding: bond already exists [ 217.202094][ T7202] loop7: detected capacity change from 0 to 512 [ 217.202195][ T7192] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.206452][ T7202] EXT4-fs: Ignoring removed nobh option [ 217.212576][ T7202] fscrypt (loop7, inode 2): Error -61 getting encryption context [ 217.215060][ T7202] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -61 [ 217.217217][ T7202] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #13: comm syz.7.420: inode has both inline data and extents flags [ 217.219822][ T7202] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 217.222079][ T7202] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.420: couldn't read orphan inode 13 (err -117) [ 217.222121][ T7202] loop7: lost filesystem error report for type 5 error -117 [ 217.224009][ C1] EXT4-fs (loop7): error count since last fsck: 2 [ 217.224022][ C1] EXT4-fs (loop7): initial error at time 524505: ext4_orphan_get:1399: inode 13 [ 217.224039][ C1] EXT4-fs (loop7): last error at time 524505: ext4_orphan_get:1404 [ 217.224621][ T7202] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.418897][ T7209] fscrypt (loop7, inode 2): Error -61 getting encryption context [ 217.590008][ T6581] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.639090][ T7216] binder: 7215:7216 ioctl c0306201 0 returned -14 [ 217.710055][ T30] audit: type=1326 audit(524505.779:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7220 comm="syz.5.425" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff945792a8 code=0x7ffc0000 [ 217.710108][ T30] audit: type=1326 audit(524505.779:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7220 comm="syz.5.425" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff945792a8 code=0x7ffc0000 [ 217.710147][ T30] audit: type=1326 audit(524505.779:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7220 comm="syz.5.425" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=425 compat=0 ip=0xffff945792a8 code=0x7ffc0000 [ 217.715209][ T30] audit: type=1326 audit(524505.779:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7220 comm="syz.5.425" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff945792a8 code=0x7ffc0000 [ 217.715231][ T30] audit: type=1326 audit(524505.779:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7220 comm="syz.5.425" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff945792a8 code=0x7ffc0000 [ 217.715246][ T30] audit: type=1326 audit(524505.779:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7220 comm="syz.5.425" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff945792a8 code=0x7ffc0000 [ 217.715265][ T30] audit: type=1326 audit(524505.779:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7220 comm="syz.5.425" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff945792a8 code=0x7ffc0000 [ 217.715279][ T30] audit: type=1326 audit(524505.779:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7220 comm="syz.5.425" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=62 compat=0 ip=0xffff945792a8 code=0x7ffc0000 [ 217.715293][ T30] audit: type=1326 audit(524505.779:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7220 comm="syz.5.425" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff945792a8 code=0x7ffc0000 [ 217.715307][ T30] audit: type=1326 audit(524505.779:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7220 comm="syz.5.425" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff945792a8 code=0x7ffc0000 [ 217.749056][ T7192] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 217.796388][ T4741] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.809552][ T7232] loop5: detected capacity change from 0 to 512 [ 217.809917][ T7232] ext2: Bad value for 'mb_optimize_scan' [ 217.893780][ T7235] FAULT_INJECTION: forcing a failure. [ 217.893780][ T7235] name fail_futex, interval 1, probability 0, space 0, times 1 [ 217.893818][ T7235] CPU: 1 UID: 0 PID: 7235 Comm: syz.2.426 Tainted: G L syzkaller #0 PREEMPT [ 217.893835][ T7235] Tainted: [L]=SOFTLOCKUP [ 217.893840][ T7235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 217.893846][ T7235] Call trace: [ 217.893849][ T7235] show_stack+0x2c/0x3c (C) [ 217.893872][ T7235] __dump_stack+0x30/0x40 [ 217.893885][ T7235] dump_stack_lvl+0xd8/0x12c [ 217.893897][ T7235] dump_stack+0x1c/0x28 [ 217.893908][ T7235] should_fail_ex+0x41c/0x590 [ 217.893918][ T7235] should_fail+0x14/0x24 [ 217.893925][ T7235] get_futex_key+0x1ec/0x12b0 [ 217.893935][ T7235] futex_wait_setup+0x58/0x674 [ 217.893946][ T7235] __futex_wait+0x108/0x25c [ 217.893956][ T7235] futex_wait+0x108/0x2c0 [ 217.893967][ T7235] do_futex+0x320/0x378 [ 217.893976][ T7235] __arm64_sys_futex+0x2e4/0x418 [ 217.893986][ T7235] invoke_syscall+0x98/0x244 [ 217.893999][ T7235] el0_svc_common+0xec/0x23c [ 217.894010][ T7235] do_el0_svc+0x4c/0x5c [ 217.894025][ T7235] el0_svc+0x64/0x260 [ 217.894036][ T7235] el0t_64_sync_handler+0x44/0x104 [ 217.894047][ T7235] el0t_64_sync+0x198/0x19c [ 217.958741][ T7245] loop4: detected capacity change from 0 to 128 [ 217.964518][ T7244] loop2: detected capacity change from 0 to 1024 [ 218.034207][ T7252] loop7: detected capacity change from 0 to 512 [ 218.629794][ T7265] bonding: bond is being created... [ 218.738027][ T7265] bonding: bond already exists [ 218.933102][ T7273] overlayfs: missing 'lowerdir' [ 219.165292][ T7280] loop5: detected capacity change from 0 to 512 [ 219.174551][ T7280] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 219.192618][ T7280] EXT4-fs (loop5): 1 truncate cleaned up [ 219.261955][ T7285] netlink: 28 bytes leftover after parsing attributes in process `syz.4.441'. [ 219.263721][ T7285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.441'. [ 219.265723][ T7285] netlink: 28 bytes leftover after parsing attributes in process `syz.4.441'. [ 219.272063][ T7283] EXT4-fs: inline encryption not supported [ 219.281207][ T7283] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 219.281412][ T7283] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 219.349914][ T7283] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 219.350191][ T7283] EXT4-fs (loop2): orphan cleanup on readonly fs [ 219.352313][ T7283] EXT4-fs error (device loop2): ext4_quota_enable:7228: comm syz.2.438: Bad quota inum: 9, type: 2 [ 219.352333][ T7283] loop2: lost filesystem error report for type 5 error -117 [ 219.353642][ T7283] EXT4-fs (loop2): Remounting filesystem read-only [ 219.353658][ T7283] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-117, ino=9). Please run e2fsck to fix. [ 219.353796][ T7283] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 219.375452][ T7283] netlink: 100 bytes leftover after parsing attributes in process `syz.2.438'. [ 219.376515][ T7283] syzkaller0: entered promiscuous mode [ 219.377353][ T7283] syzkaller0: entered allmulticast mode [ 219.597948][ T7301] netlink: 100 bytes leftover after parsing attributes in process `syz.2.438'. [ 219.628373][ T7306] xt_hashlimit: size too large, truncated to 1048576 [ 219.746861][ T7309] x9: renamed from bridge_slave_0 (while UP) [ 220.091336][ T7331] binder: 7326:7331 tried to acquire reference to desc 0, got 1 instead [ 220.097784][ T7331] binder: 7326:7331 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 220.100616][ T7331] binder: 7331 RLIMIT_NICE not set [ 220.101737][ T7331] binder: 7331 RLIMIT_NICE not set [ 220.105045][ T7331] binder_debug: 2 callbacks suppressed [ 220.105080][ T7331] binder: release 7326:7331 transaction 45 out, still active [ 220.105102][ T7331] binder: release 7326:7331 transaction 38 in, still active [ 220.110140][ T7331] binder: undelivered TRANSACTION_COMPLETE [ 220.112672][ T7331] binder: release 7326:7331 transaction 38 out, still active [ 220.114326][ T7331] binder: undelivered TRANSACTION_COMPLETE [ 220.116775][ T7331] binder: send failed reply for transaction 45, target dead [ 220.119502][ T7331] binder: send failed reply for transaction 38, target dead [ 220.461002][ T7357] bond1: (slave syz_tun): Removing an active aggregator [ 220.472862][ T7357] bond1: (slave syz_tun): Releasing backup interface [ 220.534829][ T7357] x9: left allmulticast mode [ 220.536100][ T7357] x9: left promiscuous mode [ 220.537637][ T7357] bridge0: port 1(1x9) entered disabled state [ 220.541777][ T7357] bridge_slave_1: left allmulticast mode [ 220.543031][ T7357] bridge_slave_1: left promiscuous mode [ 220.544567][ T7357] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.630850][ T7357] bond0: (slave bond_slave_0): Releasing backup interface [ 220.733900][ T7379] bonding: bond is being created... [ 220.888059][ T7371] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 220.888206][ T7371] overlayfs: overlapping lowerdir path [ 220.888536][ T7357] bond0: (slave bond_slave_1): Releasing backup interface [ 220.930468][ T7357] team0: Port device team_slave_0 removed [ 220.940346][ T7357] team0: Port device team_slave_1 removed [ 220.940734][ T7357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.940746][ T7357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.953096][ T7357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.953129][ T7357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.955578][ T7357] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 220.968762][ T7368] syz_tun: entered allmulticast mode [ 221.035423][ T7379] bonding: bond already exists [ 221.360779][ T7405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.455'. [ 221.526956][ T7415] set_capacity_and_notify: 2 callbacks suppressed [ 221.530722][ T7415] loop4: detected capacity change from 0 to 1024 [ 221.705185][ T7429] loop5: detected capacity change from 0 to 512 [ 221.723669][ T7429] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.460: bg 0: block 5: invalid block bitmap [ 221.727909][ T7429] loop5: lost filesystem error report for type 5 error -117 [ 221.730854][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 221.730888][ C1] EXT4-fs (loop5): initial error at time 1048797: ext4_validate_block_bitmap:432 [ 221.730924][ C1] EXT4-fs (loop5): last error at time 1048797: ext4_validate_block_bitmap:432 [ 221.959849][ T7429] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 221.960043][ T7429] loop5: lost filesystem error report for type 5 error -117 [ 221.972205][ T7429] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.460: invalid indirect mapped block 3 (level 2) [ 221.972255][ T7429] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 221.982789][ T7429] EXT4-fs (loop5): 1 orphan inode deleted [ 221.982824][ T7429] EXT4-fs (loop5): 1 truncate cleaned up [ 222.020570][ T7429] netlink: 8 bytes leftover after parsing attributes in process `syz.5.460'. [ 222.020943][ T7429] syz.5.460 (pid 7429) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 222.257077][ T7450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.257311][ T7450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.457237][ T7461] netlink: 48 bytes leftover after parsing attributes in process `syz.4.464'. [ 222.457785][ T7461] netlink: 48 bytes leftover after parsing attributes in process `syz.4.464'. [ 222.458307][ T7461] netlink: 48 bytes leftover after parsing attributes in process `syz.4.464'. [ 222.473952][ T7465] netlink: 'syz.5.465': attribute type 9 has an invalid length. [ 222.474141][ T7465] netlink: 'syz.5.465': attribute type 11 has an invalid length. [ 222.553360][ T7470] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(70) [ 222.553386][ T7470] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 222.580153][ T7470] vhci_hcd vhci_hcd.0: Device attached [ 222.713434][ T7470] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(72) [ 222.713460][ T7470] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 222.714117][ T7470] vhci_hcd vhci_hcd.0: Device attached [ 222.823784][ T7499] bonding: bond is being created... [ 222.941065][ T7470] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(143) [ 222.941094][ T7470] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 222.941166][ T7470] vhci_hcd vhci_hcd.0: Device attached [ 222.956764][ T7470] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(152) [ 222.956792][ T7470] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 222.958121][ T7470] vhci_hcd vhci_hcd.0: Device attached [ 222.961212][ T7488] loop5: detected capacity change from 0 to 4096 [ 222.961561][ T7488] EXT4-fs: inline encryption not supported [ 222.966639][ T7488] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 222.966678][ T7488] EXT4-fs (loop5): Test dummy encryption mode enabled [ 222.971240][ T7470] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(156) [ 222.971258][ T7470] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 222.971313][ T7470] vhci_hcd vhci_hcd.0: Device attached [ 222.979641][ T7488] EXT4-fs mount: 16 callbacks suppressed [ 222.979680][ T7488] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.002446][ T7470] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(158) [ 223.002477][ T7470] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 223.002553][ T7470] vhci_hcd vhci_hcd.0: Device attached [ 223.012432][ T5620] usb 10-1: new low-speed USB device number 2 using vhci_hcd [ 223.019207][ T7470] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(161) [ 223.019227][ T7470] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 223.027751][ T7508] loop2: detected capacity change from 0 to 128 [ 223.034563][ T7470] vhci_hcd vhci_hcd.0: Device attached [ 223.040359][ T7508] FAT-fs (loop2): bogus number of reserved sectors [ 223.040392][ T7508] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 223.040413][ T7508] FAT-fs (loop2): Can't find a valid FAT filesystem [ 223.057426][ T7470] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(165) [ 223.057451][ T7470] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 223.062695][ T7470] vhci_hcd vhci_hcd.0: Device attached [ 223.071561][ T7470] vhci_hcd vhci_hcd.0: port 0 already used [ 223.615879][ T7488] 8021q: adding VLAN 0 to HW filter on device bond2 [ 223.631203][ T7544] can0: slcan on ttyS3. [ 223.732186][ T7544] can0 (unregistered): slcan off ttyS3. [ 223.756928][ T7544] Falling back ldisc for ttyS3. [ 223.785900][ T5101] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.858867][ T7570] binder: 7568:7570 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 223.858914][ T7570] binder: 7568:7570 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 223.858948][ T7570] binder: 7570 RLIMIT_NICE not set [ 223.889821][ T7550] loop7: detected capacity change from 0 to 8192 [ 223.973130][ T7580] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 223.977396][ T7580] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 224.056625][ T7585] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 224.061363][ T7585] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 224.081892][ T7588] binder: 7586:7588 ioctl 89f1 20000200 returned -22 [ 224.083807][ T7587] binder: 7586:7587 unknown command 4294967295 [ 224.086465][ T7587] binder: 7586:7587 ioctl c0306201 20000100 returned -22 [ 224.166984][ T7550] loop7: detected capacity change from 0 to 8192 [ 224.394904][ T7605] loop2: detected capacity change from 0 to 256 [ 224.397730][ T7605] vfat: Unknown parameter 'hash' [ 225.498237][ T7504] vhci_hcd: connection closed [ 225.498282][ T7501] vhci_hcd: connection closed [ 225.498997][ T7494] vhci_hcd: connection closed [ 225.502057][ T7485] vhci_hcd: connection closed [ 225.502364][ T7507] vhci_hcd: connection closed [ 225.515615][ T7479] vhci_hcd: connection reset by peer [ 225.516018][ T7514] vhci_hcd: connection closed [ 225.516094][ T7512] vhci_hcd: connection closed [ 225.535452][ T7195] vhci_hcd vhci_hcd.4: stop threads [ 225.538875][ T7195] vhci_hcd vhci_hcd.4: release socket [ 225.541853][ T7195] vhci_hcd vhci_hcd.4: disconnect device [ 225.543943][ T7195] vhci_hcd vhci_hcd.4: stop threads [ 225.543968][ T7195] vhci_hcd vhci_hcd.4: release socket [ 225.544480][ T7195] vhci_hcd vhci_hcd.4: disconnect device [ 225.548281][ T7195] vhci_hcd vhci_hcd.4: stop threads [ 225.549310][ T7195] vhci_hcd vhci_hcd.4: release socket [ 225.550430][ T7195] vhci_hcd vhci_hcd.4: disconnect device [ 225.552319][ T7195] vhci_hcd vhci_hcd.4: stop threads [ 225.553378][ T7195] vhci_hcd vhci_hcd.4: release socket [ 225.554489][ T7195] vhci_hcd vhci_hcd.4: disconnect device [ 225.555861][ T7195] vhci_hcd vhci_hcd.4: stop threads [ 225.556961][ T7195] vhci_hcd vhci_hcd.4: release socket [ 225.556991][ T7195] vhci_hcd vhci_hcd.4: disconnect device [ 225.559268][ T7195] vhci_hcd vhci_hcd.4: stop threads [ 225.559310][ T7195] vhci_hcd vhci_hcd.4: release socket [ 225.559344][ T7195] vhci_hcd vhci_hcd.4: disconnect device [ 225.562689][ T7195] vhci_hcd vhci_hcd.4: stop threads [ 225.562705][ T7195] vhci_hcd vhci_hcd.4: release socket [ 225.564818][ T7195] vhci_hcd vhci_hcd.4: disconnect device [ 225.566552][ T7195] vhci_hcd vhci_hcd.4: stop threads [ 225.567641][ T7195] vhci_hcd vhci_hcd.4: release socket [ 225.568925][ T7195] vhci_hcd vhci_hcd.4: disconnect device [ 225.617883][ T7642] loop7: detected capacity change from 0 to 256 [ 225.621821][ T5621] IPVS: starting estimator thread 0... [ 225.639919][ T7645] Bluetooth: MGMT ver 1.23 [ 225.704506][ T7648] loop5: detected capacity change from 0 to 256 [ 225.755969][ T7643] IPVS: using max 59 ests per chain, 141600 per kthread [ 225.888843][ T7659] loop5: detected capacity change from 0 to 8 [ 226.536086][ T7655] bonding: bond is being created... [ 226.539531][ T7655] bonding: bond already exists [ 226.690335][ T7670] netlink: 'syz.7.487': attribute type 1 has an invalid length. [ 226.873079][ T7677] loop5: detected capacity change from 0 to 512 [ 226.913379][ T7677] __nla_validate_parse: 35 callbacks suppressed [ 226.913429][ T7677] netlink: 60 bytes leftover after parsing attributes in process `syz.5.490'. [ 226.916910][ T7677] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 227.274301][ T7691] loop7: detected capacity change from 0 to 128 [ 227.279997][ T7691] EXT4-fs (loop7): Test dummy encryption mode enabled [ 227.289602][ T7691] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 227.754601][ T7703] netlink: 20 bytes leftover after parsing attributes in process `syz.1.493'. [ 227.882953][ T7725] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 227.886142][ T7725] overlayfs: failed to set xattr on upper [ 227.887470][ T7725] overlayfs: ...falling back to redirect_dir=nofollow. [ 227.888907][ T7725] overlayfs: ...falling back to uuid=null. [ 227.937651][ T7728] FAULT_INJECTION: forcing a failure. [ 227.937651][ T7728] name failslab, interval 1, probability 0, space 0, times 0 [ 227.937693][ T7728] CPU: 1 UID: 0 PID: 7728 Comm: syz.2.498 Tainted: G L syzkaller #0 PREEMPT [ 227.937709][ T7728] Tainted: [L]=SOFTLOCKUP [ 227.937713][ T7728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 227.937718][ T7728] Call trace: [ 227.937722][ T7728] show_stack+0x2c/0x3c (C) [ 227.937741][ T7728] __dump_stack+0x30/0x40 [ 227.937752][ T7728] dump_stack_lvl+0xd8/0x12c [ 227.937762][ T7728] dump_stack+0x1c/0x28 [ 227.937771][ T7728] should_fail_ex+0x41c/0x590 [ 227.937779][ T7728] should_failslab+0xc4/0x120 [ 227.937788][ T7728] __kmalloc_flags_noprof+0x140/0x724 [ 227.937797][ T7728] alloc_slab_obj_exts+0x68/0x1b4 [ 227.937805][ T7728] __memcg_slab_post_alloc_hook+0x40c/0x8cc [ 227.937813][ T7728] __kmalloc_noprof+0x3b8/0x6b8 [ 227.937821][ T7728] __d_alloc+0xb4/0x690 [ 227.937829][ T7728] d_alloc+0x54/0x17c [ 227.937836][ T7728] efivarfs_create_dentry+0x194/0x2fc [ 227.937847][ T7728] efivarfs_callback+0x10c/0x170 [ 227.937856][ T7728] efivar_init+0x210/0x400 [ 227.937865][ T7728] efivarfs_fill_super+0x280/0x2d8 [ 227.937874][ T7728] vfs_get_super+0xb8/0x148 [ 227.937883][ T7728] get_tree_single+0x30/0x40 [ 227.937891][ T7728] efivarfs_get_tree+0x28/0x38 [ 227.937900][ T7728] vfs_get_tree+0x90/0x28c [ 227.937909][ T7728] fc_mount+0x24/0xac [ 227.937917][ T7728] do_new_mount+0x2a4/0x538 [ 227.937926][ T7728] path_mount+0x5f0/0xa88 [ 227.937934][ T7728] do_mount+0xe8/0x148 [ 227.937943][ T7728] __arm64_sys_mount+0x33c/0x388 [ 227.937952][ T7728] invoke_syscall+0x98/0x244 [ 227.937962][ T7728] el0_svc_common+0xec/0x23c [ 227.937972][ T7728] do_el0_svc+0x4c/0x5c [ 227.937981][ T7728] el0_svc+0x64/0x260 [ 227.937990][ T7728] el0t_64_sync_handler+0x44/0x104 [ 227.937998][ T7728] el0t_64_sync+0x198/0x19c [ 227.974982][ T7731] Bluetooth: MGMT ver 1.23 [ 227.975012][ T7731] Bluetooth: hci0: unsupported parameter 5135 [ 227.975021][ T7731] Bluetooth: hci0: unsupported parameter 8192 [ 227.975029][ T7731] Bluetooth: hci0: unsupported parameter 5135 [ 227.975035][ T7731] Bluetooth: hci0: unsupported parameter 8192 [ 227.993497][ T5620] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 228.070987][ T7734] loop5: detected capacity change from 0 to 128 [ 228.133585][ T7734] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 228.143799][ T7734] ieee802154 phy0 wpan0: encryption failed: -22 [ 228.263018][ T5101] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 228.270694][ T6581] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 228.357122][ T7743] binder: 7741:7743 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 228.357157][ T7743] binder: 7743 RLIMIT_NICE not set [ 228.369817][ T7744] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.502'. [ 228.373204][ T7744] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.502'. [ 228.644118][ T7753] netlink: 'syz.7.504': attribute type 2 has an invalid length. [ 228.644226][ T7753] netlink: 'syz.7.504': attribute type 8 has an invalid length. [ 228.644289][ T7753] netlink: 132 bytes leftover after parsing attributes in process `syz.7.504'. [ 228.864544][ T7762] ptrace attach of "ci-upstream-gce-arm64/syz-executor exec"[4712] was attempted by "v [ 228.931280][ T7766] loop1: detected capacity change from 0 to 512 [ 228.954123][ T7766] ext2: Bad value for 'mb_optimize_scan' [ 229.392769][ T7776] loop7: detected capacity change from 0 to 1024 [ 229.414007][ T7776] EXT4-fs: inline encryption not supported [ 229.414142][ T7776] EXT4-fs: Ignoring removed bh option [ 229.421726][ T7776] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 229.447507][ T7776] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.467926][ T6581] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.553528][ T7784] loop2: detected capacity change from 0 to 256 [ 229.557556][ T7784] vfat: Unknown parameter 'nnonumtail' [ 229.572960][ T7784] loop2: detected capacity change from 0 to 8 [ 229.574827][ T7784] squashfs: Unknown parameter './file0' [ 229.633276][ T7789] overlay: Unknown parameter 'fowner>00000000000000000000' [ 229.692068][ T7791] loop2: detected capacity change from 0 to 512 [ 229.737924][ T7798] netlink: 48 bytes leftover after parsing attributes in process `syz.2.520'. [ 229.740056][ T7798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.520'. [ 229.930920][ T7806] loop4: detected capacity change from 0 to 8 [ 229.976651][ T7810] binder: 7808:7810 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 229.979413][ T7810] binder: 7810 RLIMIT_NICE not set [ 230.003792][ T7806] SQUASHFS error: Unable to read inode 0xa7 [ 230.013788][ T7813] tmpfs: Bad value for 'mpol' [ 230.204496][ T7820] SQUASHFS error: Unable to read directory block [631:26] [ 230.410073][ T7827] loop2: detected capacity change from 0 to 512 [ 230.415628][ T7827] ext4: Unknown parameter 'fowner>00000000000000000000' [ 230.948438][ T7852] netlink: 8 bytes leftover after parsing attributes in process `syz.5.535'. [ 231.003599][ T7856] Device name cannot be null; rc = [-22] [ 231.005207][ T7854] sock: sock_set_timeout: `syz.5.536' (pid 7854) tries to set negative timeout [ 231.047711][ T7854] netlink: 8 bytes leftover after parsing attributes in process `syz.5.536'. [ 231.052572][ T7860] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 231.107330][ T7862] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 231.138007][ T4741] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 231.186546][ T7865] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 231.186650][ T7869] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 231.188731][ T7865] netlink: 32 bytes leftover after parsing attributes in process `syz.5.538'. [ 231.381352][ T7882] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 231.385628][ T7882] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 231.385811][ T7882] EXT4-fs (loop4): orphan cleanup on readonly fs [ 231.385822][ T7882] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.543: bad orphan inode 3 [ 231.385835][ T7882] loop4: lost filesystem error report for type 5 error -117 [ 231.391729][ T7882] EXT4-fs (loop4): Remounting filesystem read-only [ 231.392324][ T7882] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 232.004400][ T7908] set_capacity_and_notify: 3 callbacks suppressed [ 232.004446][ T7908] loop5: detected capacity change from 0 to 256 [ 232.004832][ T7908] vfat: Bad value for 'shortname' [ 232.255545][ T4741] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 232.641360][ T7919] loop4: detected capacity change from 0 to 1024 [ 232.651009][ T7914] __nla_validate_parse: 1 callbacks suppressed [ 232.652340][ T7914] netlink: 20 bytes leftover after parsing attributes in process `syz.4.550'. [ 232.896077][ T7925] nvmet: adding nsid 1 to subsystem testsubsys [ 232.958107][ T7924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.958493][ T7924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.980528][ T7930] dummy0: entered promiscuous mode [ 232.985776][ T7930] dummy0: left promiscuous mode [ 233.084203][ T7938] netlink: 156 bytes leftover after parsing attributes in process `syz.4.557'. [ 233.140849][ T7941] loop7: detected capacity change from 0 to 8 [ 233.147313][ T7941] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 233.147344][ T7941] unable to read xattr id index table [ 233.147818][ T7941] SQUASHFS error: zlib decompression failed, data probably corrupt [ 233.147831][ T7941] SQUASHFS error: Failed to read block 0x9b: -5 [ 233.147839][ T7941] SQUASHFS error: Unable to read metadata cache entry [99] [ 233.147845][ T7941] SQUASHFS error: Unable to read inode 0x127 [ 233.203004][ T7945] netlink: 40 bytes leftover after parsing attributes in process `syz.5.559'. [ 233.212429][ T7945] netlink: 8 bytes leftover after parsing attributes in process `syz.5.559'. [ 233.262749][ T7944] mmap: syz.5.559 (7944): VmData 37625856 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 233.266224][ T7945] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 233.275365][ T7947] binder: 7946:7947 ioctl 40046210 0 returned -14 [ 233.539753][ T7951] loop7: detected capacity change from 0 to 512 [ 233.601862][ T7951] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 233.619584][ T7951] EXT4-fs error (device loop7): ext4_init_orphan_info:618: comm syz.7.562: orphan file block 0: bad magic [ 233.619626][ T7951] loop7: lost filesystem error report for type 5 error -117 [ 233.622384][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 233.622398][ C1] EXT4-fs (loop7): initial error at time 1573098: ext4_init_orphan_info:618 [ 233.622411][ C1] EXT4-fs (loop7): last error at time 1573098: ext4_init_orphan_info:618 [ 233.630968][ T7951] EXT4-fs (loop7): Remounting filesystem read-only [ 233.631272][ T7951] EXT4-fs (loop7): mount failed [ 233.908645][ T7964] loop2: detected capacity change from 0 to 512 [ 233.914023][ T7964] EXT4-fs: Ignoring removed orlov option [ 233.914071][ T7964] EXT4-fs: Ignoring removed mblk_io_submit option [ 233.953112][ T7964] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 233.955541][ T7964] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.566: attempt to clear invalid blocks 2 len 1 [ 233.955577][ T7964] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 233.958847][ T7964] EXT4-fs (loop2): Remounting filesystem read-only [ 233.962446][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 233.962461][ C1] EXT4-fs (loop2): initial error at time 1573099: ext4_clear_blocks:876: inode 13 [ 233.962477][ C1] EXT4-fs (loop2): last error at time 1573099: ext4_clear_blocks:876: inode 13 [ 233.974098][ T7964] EXT4-fs (loop2): 1 truncate cleaned up [ 233.976043][ T7964] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.049035][ T7970] netlink: 4 bytes leftover after parsing attributes in process `syz.5.568'. [ 234.202023][ C1] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 234.288687][ T4743] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 234.509879][ T7986] loop5: detected capacity change from 0 to 512 [ 234.517867][ T7986] ext2: Bad value for 'mb_optimize_scan' [ 234.836822][ T7992] loop1: detected capacity change from 0 to 512 [ 234.841009][ T7992] EXT4-fs: Ignoring removed nomblk_io_submit option [ 234.841054][ T7992] ext3: Unknown parameter 'uid>00000000000000000000' [ 235.366983][ T7999] bonding: bond is being created... [ 235.368535][ T7999] bonding: bond already exists [ 236.150732][ T8012] loop7: detected capacity change from 0 to 1024 [ 236.156745][ T8012] EXT4-fs: Ignoring removed bh option [ 236.185634][ T8012] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.328467][ T6581] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.452126][ T8035] syzkaller0: entered promiscuous mode [ 236.452164][ T8035] syzkaller0: entered allmulticast mode [ 236.461587][ T8035] tipc: Enabling of bearer rejected, failed to enable media [ 236.659352][ T8044] loop1: detected capacity change from 0 to 512 [ 236.659742][ T8044] ext2: Bad value for 'mb_optimize_scan' [ 236.744785][ T8046] loop4: detected capacity change from 0 to 512 [ 236.745833][ T8046] ext2: Bad value for 'mb_optimize_scan' [ 237.559217][ T8058] netlink: 'syz.5.592': attribute type 11 has an invalid length. [ 237.616507][ T8065] loop5: detected capacity change from 0 to 512 [ 237.631369][ T8065] /dev/loop5: Can't open blockdev [ 238.104068][ T8081] loop5: detected capacity change from 0 to 512 [ 238.172202][ T8081] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 238.179342][ T8081] EXT4-fs (loop5): 1 truncate cleaned up [ 238.183734][ T8081] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.200855][ T8089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.599'. [ 238.565907][ T5101] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.708561][ T8108] loop7: detected capacity change from 0 to 512 [ 238.713823][ T8108] ext2: Bad value for 'mb_optimize_scan' [ 238.801133][ T8110] bonding: bond is being created... [ 238.802194][ T8110] bonding: bond already exists [ 239.089090][ T8117] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 239.089734][ T8117] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 239.104078][ T8117] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 239.183873][ T8103] Injecting memory failure for pfn 0x1649fd at process virtual address 0x20ffd000 [ 239.214117][ T8103] Memory failure: 0x1649fd: recovery action for huge page: Recovered [ 239.348044][ T8129] loop4: detected capacity change from 0 to 512 [ 239.354665][ T8129] FAT-fs (loop4): bogus number of FAT sectors [ 239.354700][ T8129] FAT-fs (loop4): Can't find a valid FAT filesystem [ 239.691755][ T8138] loop7: detected capacity change from 0 to 4096 [ 239.714290][ T8136] hub 5-0:1.0: USB hub found [ 239.716999][ T8136] hub 5-0:1.0: 8 ports detected [ 239.752566][ T8138] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.193470][ T8144] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 240.208206][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 240.208239][ T30] audit: type=1326 audit(1573105.533:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8143 comm="syz.4.610" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa93792a8 code=0x0 [ 240.265928][ T6581] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.353952][ T8147] loop1: detected capacity change from 0 to 512 [ 240.438801][ T8147] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.446980][ T8147] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.611: corrupted xattr block 33: invalid header [ 240.459069][ T8147] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.611: corrupted xattr block 33: invalid header [ 240.463944][ T8147] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.611: corrupted xattr block 33: invalid header [ 240.551650][ T8154] bonding: bond is being created... [ 240.552663][ T8154] bonding: bond already exists [ 240.742787][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.785774][ T8156] netlink: 236 bytes leftover after parsing attributes in process `syz.1.613'. [ 240.787791][ T8156] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 241.252013][ T8167] netlink: 48 bytes leftover after parsing attributes in process `syz.4.616'. [ 241.403562][ T4743] Bluetooth: Frame is too long (len 10, expected len 4) [ 241.405918][ T8175] loop7: detected capacity change from 0 to 512 [ 241.411535][ T8175] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 241.427837][ T8175] EXT4-fs (loop7): 1 truncate cleaned up [ 241.428415][ T8175] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.854639][ T8190] loop4: detected capacity change from 0 to 512 [ 241.856473][ T8190] EXT4-fs: Ignoring removed mblk_io_submit option [ 241.858337][ T8190] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 241.873325][ T8190] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 241.873449][ T8190] EXT4-fs (loop4): orphan cleanup on readonly fs [ 241.882044][ T8190] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.622: bg 0: block 361: padding at end of block bitmap is not set [ 241.882116][ T8190] loop4: lost filesystem error report for type 5 error -117 [ 241.888253][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 241.888279][ C1] EXT4-fs (loop4): initial error at time 1573107: ext4_validate_block_bitmap:441 [ 241.888311][ C1] EXT4-fs (loop4): last error at time 1573107: ext4_validate_block_bitmap:441 [ 241.899459][ T8190] EXT4-fs (loop4): Remounting filesystem read-only [ 241.909018][ T8190] EXT4-fs (loop4): 1 truncate cleaned up [ 241.910779][ T8190] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 241.984743][ T4741] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 241.994139][ T8191] loop1: detected capacity change from 0 to 8192 [ 242.343017][ T6581] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.751583][ T8219] can0: slcan on ttyS3. [ 242.818739][ T8219] can0 (unregistered): slcan off ttyS3. [ 243.081591][ T8228] x_tables: duplicate underflow at hook 1 [ 243.429378][ T8239] loop4: detected capacity change from 0 to 256 [ 243.520923][ T8242] Injecting memory failure for pfn 0x1350a1 at process virtual address 0x20aba000 [ 243.578308][ T8243] loop5: detected capacity change from 0 to 256 [ 243.618099][ T8242] Memory failure: 0x1350a1: recovery action for clean LRU page: Recovered [ 243.618142][ T8242] Injecting memory failure for pfn 0x11d6c8 at process virtual address 0x20abb000 [ 243.622012][ T8242] Memory failure: 0x11d6c8: recovery action for clean LRU page: Recovered [ 243.622036][ T8242] Injecting memory failure for pfn 0x11d6c9 at process virtual address 0x20abc000 [ 243.622091][ T8242] Memory failure: 0x11d6c9: recovery action for clean LRU page: Recovered [ 243.622106][ T8242] Injecting memory failure for pfn 0x1372fe at process virtual address 0x20abd000 [ 243.622149][ T8242] Memory failure: 0x1372fe: recovery action for clean LRU page: Recovered [ 244.037536][ T8254] loop7: detected capacity change from 0 to 256 [ 244.039558][ T8254] vfat: Unknown parameter 'hash' [ 244.593905][ T8270] binder: BINDER_SET_CONTEXT_MGR already set [ 244.596423][ T8270] binder: 8263:8270 ioctl 4018620d 20004a80 returned -16 [ 244.598621][ T8270] binder: 8263:8270 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 244.601589][ T8270] binder: 8270 RLIMIT_NICE not set [ 244.740393][ T8274] loop5: detected capacity change from 0 to 512 [ 244.746366][ T8267] FAULT_INJECTION: forcing a failure. [ 244.746366][ T8267] name failslab, interval 1, probability 0, space 0, times 0 [ 244.746499][ T8267] CPU: 0 UID: 0 PID: 8267 Comm: syz.5.643 Tainted: G L syzkaller #0 PREEMPT [ 244.746511][ T8267] Tainted: [L]=SOFTLOCKUP [ 244.746514][ T8267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 244.746519][ T8267] Call trace: [ 244.746522][ T8267] show_stack+0x2c/0x3c (C) [ 244.746540][ T8267] __dump_stack+0x30/0x40 [ 244.746551][ T8267] dump_stack_lvl+0xd8/0x12c [ 244.746560][ T8267] dump_stack+0x1c/0x28 [ 244.746569][ T8267] should_fail_ex+0x41c/0x590 [ 244.746577][ T8267] should_failslab+0xc4/0x120 [ 244.746586][ T8267] __kmalloc_noprof+0x108/0x6b8 [ 244.746598][ T8267] sk_prot_alloc+0xc4/0x1e8 [ 244.746607][ T8267] sk_alloc+0x44/0x3ac [ 244.746614][ T8267] __netlink_create+0x78/0x23c [ 244.746623][ T8267] netlink_create+0x3b4/0x6a0 [ 244.746632][ T8267] __sock_create+0x31c/0x670 [ 244.746641][ T8267] __sys_socket_create+0xc0/0x11c [ 244.746649][ T8267] __sys_socket+0x44/0xec [ 244.746658][ T8267] __arm64_sys_socket+0x84/0x9c [ 244.746666][ T8267] invoke_syscall+0x98/0x244 [ 244.746676][ T8267] el0_svc_common+0xec/0x23c [ 244.746686][ T8267] do_el0_svc+0x4c/0x5c [ 244.746695][ T8267] el0_svc+0x64/0x260 [ 244.746704][ T8267] el0t_64_sync_handler+0x44/0x104 [ 244.746712][ T8267] el0t_64_sync+0x198/0x19c [ 245.075558][ T8288] tipc: Started in network mode [ 245.081005][ T8288] tipc: Node identity ac1414aa, cluster identity 4711 [ 245.083992][ T8288] tipc: New replicast peer: 172.20.20.187 [ 245.085546][ T8288] tipc: Enabled bearer , priority 10 [ 245.089435][ T8288] netlink: 16 bytes leftover after parsing attributes in process `syz.4.650'. [ 245.459337][ T8297] loop1: detected capacity change from 0 to 1024 [ 245.510797][ T8305] FAULT_INJECTION: forcing a failure. [ 245.510797][ T8305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.510960][ T8305] CPU: 0 UID: 0 PID: 8305 Comm: syz.5.652 Tainted: G L syzkaller #0 PREEMPT [ 245.510972][ T8305] Tainted: [L]=SOFTLOCKUP [ 245.510975][ T8305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 245.510980][ T8305] Call trace: [ 245.510983][ T8305] show_stack+0x2c/0x3c (C) [ 245.511000][ T8305] __dump_stack+0x30/0x40 [ 245.511011][ T8305] dump_stack_lvl+0xd8/0x12c [ 245.511020][ T8305] dump_stack+0x1c/0x28 [ 245.511030][ T8305] should_fail_ex+0x41c/0x590 [ 245.511038][ T8305] should_fail+0x14/0x24 [ 245.511044][ T8305] should_fail_usercopy+0x20/0x30 [ 245.511051][ T8305] simple_read_from_buffer+0xc4/0x238 [ 245.511061][ T8305] proc_fail_nth_read+0x1a8/0x248 [ 245.511069][ T8305] vfs_read+0x230/0x8c8 [ 245.511076][ T8305] ksys_read+0x12c/0x228 [ 245.511083][ T8305] __arm64_sys_read+0x84/0x98 [ 245.511089][ T8305] invoke_syscall+0x98/0x244 [ 245.511100][ T8305] el0_svc_common+0xec/0x23c [ 245.511109][ T8305] do_el0_svc+0x4c/0x5c [ 245.511118][ T8305] el0_svc+0x64/0x260 [ 245.511128][ T8305] el0t_64_sync_handler+0x44/0x104 [ 245.511136][ T8305] el0t_64_sync+0x198/0x19c [ 245.639488][ T8311] netlink: 20 bytes leftover after parsing attributes in process `syz.1.655'. [ 246.153354][ T8318] loop4: detected capacity change from 0 to 256 [ 246.158460][ T8318] vfat: Unknown parameter 'hash' [ 246.265717][ T8320] loop5: detected capacity change from 0 to 256 [ 246.268019][ T8320] vfat: Unknown parameter 'hash' [ 246.283704][ T5625] tipc: Node number set to 2886997162 [ 246.398015][ T8322] loop7: detected capacity change from 0 to 8 [ 246.554765][ T8324] netlink: 4 bytes leftover after parsing attributes in process `syz.7.659'. [ 246.612406][ T8331] loop7: detected capacity change from 0 to 128 [ 246.666750][ T8314] overlayfs: failed to resolve './file1': -2 [ 247.229701][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.232857][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.233119][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.233321][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.233526][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.233736][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.233901][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.234080][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.234267][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.234520][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.234703][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.234879][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.235025][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.235190][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.235334][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.235609][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.235761][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.235907][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.236073][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.236218][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.236361][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.236676][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.236836][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.236981][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.237193][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.237342][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.237486][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.237773][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.237921][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.238064][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.238205][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.238350][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.238494][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.238794][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.238907][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.239058][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.239265][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.239457][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.239639][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.239788][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.240024][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.240176][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.240415][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.240562][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.240745][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.240886][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.241027][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.241146][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.241287][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.241430][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.242525][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.242940][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.243084][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.243229][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.243375][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.243520][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.243721][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.243956][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.244150][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.244297][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.244439][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.244582][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.244764][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.244972][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.245135][ T4743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.895215][ T8378] loop1: detected capacity change from 0 to 512 [ 247.898276][ T8378] EXT4-fs: inline encryption not supported [ 247.901815][ T8378] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 247.909183][ T8378] EXT4-fs (loop1): 1 truncate cleaned up [ 247.913079][ T8378] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.378447][ T1593] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.378585][ T1593] ieee802154 phy1 wpan1: encryption failed: -22 [ 248.720460][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.811980][ T8389] Bluetooth: hci5: Frame reassembly failed (-84) [ 249.304848][ T4716] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 249.307087][ T4716] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 249.308796][ T4716] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 249.310536][ T4716] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 249.312096][ T4716] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 249.502445][ T8393] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.503912][ T8393] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.504035][ T8393] bridge_slave_0: entered allmulticast mode [ 249.507126][ T8393] bridge_slave_0: entered promiscuous mode [ 249.510751][ T8393] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.512431][ T8393] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.513952][ T8393] bridge_slave_1: entered allmulticast mode [ 249.515615][ T8393] bridge_slave_1: entered promiscuous mode [ 249.523934][ T4731] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.556288][ T8393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.566998][ T8393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.595945][ T7191] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.606248][ T8393] team0: Port device team_slave_0 added [ 249.609817][ T8393] team0: Port device team_slave_1 added [ 249.624359][ T8341] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 249.637103][ T8393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.647002][ T8393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.647061][ T8393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.647782][ T8393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.647797][ T8393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.647818][ T8393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.757665][ T8412] loop7: detected capacity change from 0 to 512 [ 249.760202][ T7191] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.770947][ T8412] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 249.778996][ T8412] EXT4-fs (loop7): 1 truncate cleaned up [ 249.784233][ T8412] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.786784][ T8393] hsr_slave_0: entered promiscuous mode [ 249.788093][ T8393] hsr_slave_1: entered promiscuous mode [ 249.788989][ T8393] debugfs: 'hsr0' already exists in 'hsr' [ 249.789001][ T8393] Cannot create hsr debugfs directory [ 249.876339][ T8416] input: syz0 as /devices/virtual/input/input3 [ 249.894970][ T8419] loop5: detected capacity change from 0 to 2048 [ 249.926989][ T7191] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.940980][ T8419] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.953373][ T8416] loop4: detected capacity change from 0 to 2048 [ 249.992171][ T8416] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.012625][ T8416] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 250.012652][ T8416] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 250.012715][ T8416] vhci_hcd vhci_hcd.0: Device attached [ 250.019023][ T8425] vhci_hcd: unknown pdu 1 [ 250.022810][ T6961] vhci_hcd vhci_hcd.4: stop threads [ 250.022844][ T6961] vhci_hcd vhci_hcd.4: release socket [ 250.022866][ T6961] vhci_hcd vhci_hcd.4: disconnect device [ 250.031007][ T5101] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.060184][ T7191] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.091659][ T8393] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 250.095672][ T8393] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 250.098475][ T8393] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 250.106273][ T8393] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 250.108175][ T8393] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 250.110678][ T8393] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 250.117757][ T8393] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 250.120188][ T8393] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 250.134491][ T8393] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.134536][ T8393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.134629][ T8393] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.134667][ T8393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.157628][ T8393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.166773][ T6956] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.168924][ T6956] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.187387][ T8393] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.199480][ T6962] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.199536][ T6962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.210421][ T6961] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.210462][ T6961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.289831][ T7191] bridge_slave_1: left allmulticast mode [ 250.289867][ T7191] bridge_slave_1: left promiscuous mode [ 250.289961][ T7191] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.296054][ T7191] bridge_slave_0: left allmulticast mode [ 250.297135][ T7191] bridge_slave_0: left promiscuous mode [ 250.298846][ T7191] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.304859][ T7191] tipc: Resetting bearer [ 250.365634][ T7191] tipc: Disabling bearer [ 250.396081][ T7191] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.415760][ T7191] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.446722][ T7191] bond0 (unregistering): (slave macvlan1): Releasing backup interface [ 250.494531][ T7191] bond0 (unregistering): Released all slaves [ 250.555384][ T7191] tipc: Left network mode [ 250.614665][ T6581] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.646710][ T4741] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.768941][ T8455] loop7: detected capacity change from 0 to 8192 [ 250.796826][ T4716] Bluetooth: hci5: command 0x1003 tx timeout [ 250.797997][ T4743] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 251.019414][ T8479] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 251.095255][ T8393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.103116][ T4402] 8021q: adding VLAN 0 to HW filter on device eth12 [ 251.126737][ T7191] hsr_slave_0: left promiscuous mode [ 251.133022][ T7191] hsr_slave_1: left promiscuous mode [ 251.134611][ T7191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.136087][ T7191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.138226][ T7191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.141549][ T7191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.143203][ T7191] batman_adv: batadv0: Removing interface: vlan2 [ 251.151373][ T7191] veth1_macvtap: left allmulticast mode [ 251.151409][ T7191] veth1_macvtap: left promiscuous mode [ 251.151440][ T7191] veth0_macvtap: left promiscuous mode [ 251.151483][ T7191] veth1_vlan: left promiscuous mode [ 251.151523][ T7191] veth0_vlan: left promiscuous mode [ 251.332219][ T8500] binder: 8498:8500 tried to acquire reference to desc 0, got 1 instead [ 251.336227][ T8500] binder: 8498:8500 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 251.338990][ T8500] binder: 8500 RLIMIT_NICE not set [ 251.339955][ T8500] binder: 8500 RLIMIT_NICE not set [ 251.346118][ T8500] binder: release 8498:8500 transaction 66 out, still active [ 251.346144][ T8500] binder: release 8498:8500 transaction 59 in, still active [ 251.351340][ T8500] binder: undelivered TRANSACTION_COMPLETE [ 251.351514][ T8500] binder: release 8498:8500 transaction 59 out, still active [ 251.351534][ T8500] binder: undelivered TRANSACTION_COMPLETE [ 251.351554][ T8500] binder: send failed reply for transaction 66, target dead [ 251.351574][ T8500] binder: send failed reply for transaction 59, target dead [ 251.361270][ T4743] Bluetooth: hci6: command tx timeout [ 251.425345][ T8505] binder: BINDER_SET_CONTEXT_MGR already set [ 251.426709][ T8505] binder: 8504:8505 ioctl 4018620d 20004a80 returned -16 [ 251.429647][ T8505] binder: 8504:8505 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 251.429676][ T8505] binder: 8505 RLIMIT_NICE not set [ 251.675540][ T7191] team0 (unregistering): Port device team_slave_1 removed [ 251.686598][ T7191] team0 (unregistering): Port device team_slave_0 removed [ 251.947441][ T8393] veth0_vlan: entered promiscuous mode [ 252.030182][ T8523] bonding: bond is being created... [ 252.032187][ T8523] bonding: bond already exists [ 252.152148][ T8393] veth1_vlan: entered promiscuous mode [ 252.240846][ T8393] veth0_macvtap: entered promiscuous mode [ 252.255488][ T8393] veth1_macvtap: entered promiscuous mode [ 252.282252][ T8393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.302808][ T8393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.323413][ T7637] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.325329][ T8526] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.325424][ T8526] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.325555][ T8526] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.343431][ T4743] Bluetooth: hci1: unexpected event for opcode 0x0c25 [ 252.397746][ T8539] netlink: 'syz.5.694': attribute type 1 has an invalid length. [ 252.446566][ T8539] bond3: entered promiscuous mode [ 252.449198][ T8539] 8021q: adding VLAN 0 to HW filter on device bond3 [ 252.458941][ T6956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.459062][ T6956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.476349][ T8540] netlink: 8 bytes leftover after parsing attributes in process `syz.5.694'. [ 252.486472][ T8540] vlan3: entered allmulticast mode [ 252.486507][ T8540] bond3: entered allmulticast mode [ 252.492473][ T8546] loop7: detected capacity change from 0 to 7 [ 252.513987][ T7637] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.515783][ T7637] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.539749][ T8546] Dev loop7: unable to read RDB block 7 [ 252.539792][ T8546] loop7: unable to read partition table [ 252.539862][ T8546] loop7: partition table beyond EOD, truncated [ 252.539882][ T8546] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 252.567518][ T8536] bond3: (slave bridge1): making interface the new active one [ 252.567548][ T8536] bridge1: entered promiscuous mode [ 252.567625][ T8536] bridge1: entered allmulticast mode [ 252.573288][ T8536] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 252.625765][ T4402] 8021q: adding VLAN 0 to HW filter on device eth13 [ 252.748073][ T8558] loop8: detected capacity change from 0 to 128 [ 252.868036][ T8575] loop5: detected capacity change from 0 to 256 [ 253.269905][ T8592] binder: 8590:8592 tried to acquire reference to desc 0, got 1 instead [ 253.272818][ T8592] binder: 8590:8592 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 253.276756][ T8592] binder: 8592 RLIMIT_NICE not set [ 253.278136][ T8592] binder: 8592 RLIMIT_NICE not set [ 253.280875][ T8592] binder: release 8590:8592 transaction 79 out, still active [ 253.280903][ T8592] binder: release 8590:8592 transaction 72 in, still active [ 253.285095][ T8592] binder: undelivered TRANSACTION_COMPLETE [ 253.361152][ T8595] loop1: detected capacity change from 0 to 512 [ 253.364498][ T8595] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 253.377380][ T8595] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.703: bad orphan inode 131083 [ 253.377419][ T8595] loop1: lost filesystem error report for type 5 error -117 [ 253.380434][ T8595] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.392122][ T4743] Bluetooth: hci6: command tx timeout [ 253.449306][ T8595] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #12: block 7: comm syz.1.703: bad entry in directory: directory entry overrun - offset=16, inode=1560281102, rec_len=1024, size=56 fake=0 [ 253.467090][ T8595] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 13: comm syz.1.703: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 253.603684][ T8595] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.735935][ T4402] 8021q: adding VLAN 0 to HW filter on device eth14 [ 253.737563][ T8602] loop1: detected capacity change from 0 to 4096 [ 253.817731][ T8602] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.863959][ T8602] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 253.964402][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.065662][ T8624] loop7: detected capacity change from 0 to 512 [ 254.069233][ T8622] Cannot find add_set index 0 as target [ 254.093733][ T8624] Quota error (device loop7): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 254.093787][ T8624] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 254.093814][ T8624] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.710: Failed to acquire dquot type 1 [ 254.093831][ T8624] loop7: lost filesystem error report for type 5 error -117 [ 254.099915][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 254.099934][ C1] EXT4-fs (loop7): last error at time 1573119: ext4_acquire_dquot:7041 [ 254.108525][ T8624] EXT4-fs (loop7): 1 truncate cleaned up [ 254.108987][ T8624] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.255447][ T6581] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.328964][ T8641] ------------[ cut here ]------------ [ 254.328995][ T8641] EA inode 11 i_nlink=0 [ 254.332390][ T8641] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x480/0x488, CPU#1: syz.5.711/8641 [ 254.335259][ T8641] Modules linked in: [ 254.335997][ T8641] CPU: 1 UID: 0 PID: 8641 Comm: syz.5.711 Tainted: G L syzkaller #0 PREEMPT [ 254.337906][ T8641] Tainted: [L]=SOFTLOCKUP [ 254.338721][ T8641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 254.340524][ T8641] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 254.341919][ T8641] pc : ext4_xattr_inode_update_ref+0x480/0x488 [ 254.343022][ T8641] lr : ext4_xattr_inode_update_ref+0x480/0x488 [ 254.344153][ T8641] sp : ffff800093e96f40 [ 254.344908][ T8641] x29: ffff800093e96fe0 x28: 0000000000000000 x27: 1fffe0001b4f3c3d [ 254.346422][ T8641] x26: ffff0000da79e040 x25: dfff800000000000 x24: ffff800093e96f60 [ 254.347944][ T8641] x23: ffff7000127d2dec x22: ffff80008a19c000 x21: 0000000000000000 [ 254.349416][ T8641] x20: 0000000000000001 x19: ffff0000da79e000 x18: 1fffe00034bbbe28 [ 254.350911][ T8641] x17: 0000000000000003 x16: ffff800088b37000 x15: 0000000000000000 [ 254.352438][ T8641] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 254.353961][ T8641] x11: ffff80008a5d5e28 x10: 0000000000000003 x9 : 273d87a502437d00 [ 254.355462][ T8641] x8 : 273d87a502437d00 x7 : 0000000000000000 x6 : 0000000000000000 [ 254.356970][ T8641] x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff80008015611c [ 254.358564][ T8641] x2 : 0000000000000006 x1 : ffff0000d03d0000 x0 : 0000000000000001 [ 254.360090][ T8641] Call trace: [ 254.360700][ T8641] ext4_xattr_inode_update_ref+0x480/0x488 (P) [ 254.361878][ T8641] ext4_xattr_inode_dec_ref_all+0x7f0/0xb84 [ 254.363016][ T8641] ext4_xattr_delete_inode+0x778/0x900 [ 254.364080][ T8641] ext4_evict_inode+0xa0c/0xfb8 [ 254.364958][ T8641] evict+0x4c0/0x74c [ 254.365679][ T8641] iput+0x8f0/0xc2c [ 254.366423][ T8641] ext4_process_orphan+0x24c/0x2c0 [ 254.367397][ T8641] ext4_orphan_cleanup+0x7d4/0xd20 [ 254.368376][ T8641] ext4_fill_super+0x4628/0x4e14 [ 254.369312][ T8641] get_tree_bdev_flags+0x388/0x43c [ 254.370262][ T8641] get_tree_bdev+0x2c/0x3c [ 254.371066][ T8641] ext4_get_tree+0x28/0x38 [ 254.371884][ T8641] vfs_get_tree+0x90/0x28c [ 254.372681][ T8641] fc_mount+0x24/0xac [ 254.373400][ T8641] do_new_mount+0x2a4/0x538 [ 254.374211][ T8641] path_mount+0x5f0/0xa88 [ 254.375022][ T8641] do_mount+0xe8/0x148 [ 254.375784][ T8641] __arm64_sys_mount+0x33c/0x388 [ 254.376687][ T8641] invoke_syscall+0x98/0x244 [ 254.377520][ T8641] el0_svc_common+0xec/0x23c [ 254.378376][ T8641] do_el0_svc+0x4c/0x5c [ 254.379149][ T8641] el0_svc+0x64/0x260 [ 254.379869][ T8641] el0t_64_sync_handler+0x44/0x104 [ 254.380790][ T8641] el0t_64_sync+0x198/0x19c [ 254.381596][ T8641] irq event stamp: 1454 [ 254.382340][ T8641] hardirqs last enabled at (1453): [] finish_task_switch+0x234/0x858 [ 254.384134][ T8641] hardirqs last disabled at (1454): [] el1_brk64+0x20/0x54 [ 254.385715][ T8641] softirqs last enabled at (1022): [] do_sve_acc+0x32c/0x4b8 [ 254.387341][ T8641] softirqs last disabled at (1020): [] do_sve_acc+0x10c/0x4b8 [ 254.388972][ T8641] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 254.418601][ T8641] EXT4-fs (loop5): 1 orphan inode deleted [ 254.420388][ T8641] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.709479][ T4402] 8021q: adding VLAN 0 to HW filter on device eth15 [ 254.959143][ T8631] syz_tun (unregistering): left allmulticast mode [ 255.054476][ T8631] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.225109][ T7637] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.343921][ T7637] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.412099][ T7637] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.491122][ T7637] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.616147][ T7637] bridge_slave_1: left allmulticast mode [ 255.617550][ T7637] bridge_slave_1: left promiscuous mode [ 255.618865][ T7637] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.622419][ T7637] bridge_slave_0: left allmulticast mode [ 255.623973][ T7637] bridge_slave_0: left promiscuous mode [ 255.625416][ T7637] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.785684][ T7637] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.813551][ T7637] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.851090][ T7637] bond0 (unregistering): Released all slaves [ 255.854790][ T7637] bond (unregistering): Released all slaves [ 255.860765][ T7637] bond1 (unregistering): Released all slaves [ 255.921102][ T7637] tipc: Disabling bearer [ 255.922902][ T7637] tipc: Left network mode [ 256.063517][ T4402] 8021q: adding VLAN 0 to HW filter on device eth16 [ 256.223279][ T7637] hsr_slave_0: left promiscuous mode [ 256.224703][ T7637] hsr_slave_1: left promiscuous mode [ 256.226747][ T7637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.228272][ T7637] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.230050][ T7637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.231931][ T7637] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.239781][ T7637] veth1_macvtap: left promiscuous mode [ 256.241147][ T7637] veth0_macvtap: left promiscuous mode [ 256.244586][ T7637] veth1_vlan: left promiscuous mode [ 256.366124][ T7637] team0 (unregistering): Port device vlan1 removed [ 256.397211][ T7637] team0 (unregistering): Port device team_slave_1 removed [ 256.416545][ T7637] team0 (unregistering): Port device team_slave_0 removed [ 256.470088][ T4402] 8021q: adding VLAN 0 to HW filter on device eth17 [ 256.669219][ T4402] 8021q: adding VLAN 0 to HW filter on device eth18 [ 256.796347][ T4402] 8021q: adding VLAN 0 to HW filter on device eth19 [ 257.174369][ T7637] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.174415][ T7637] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.241249][ T7637] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.241289][ T7637] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.331516][ T7637] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.331555][ T7637] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.399194][ T7637] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.399231][ T7637] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.543693][ T7637] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.609877][ T7637] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.638197][ T4402] 8021q: adding VLAN 0 to HW filter on device eth20 [ 257.687568][ T7637] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.757191][ T7637] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.767857][ T4402] 8021q: adding VLAN 0 to HW filter on device eth21 [ 257.872371][ T7637] veth0: left allmulticast mode [ 257.872409][ T7637] veth0: left promiscuous mode [ 257.872514][ T7637] bridge0: port 3(veth0) entered disabled state [ 257.877508][ T7637] bridge_slave_1: left allmulticast mode [ 257.878529][ T7637] bridge_slave_1: left promiscuous mode [ 257.886348][ T7637] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.888768][ T7637] bridge_slave_0: left allmulticast mode [ 257.888798][ T7637] bridge_slave_0: left promiscuous mode [ 257.888868][ T7637] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.894657][ T7637] bridge_slave_1: left allmulticast mode [ 257.894690][ T7637] bridge_slave_1: left promiscuous mode [ 257.894763][ T7637] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.898908][ T7637] bridge_slave_0: left allmulticast mode [ 257.900036][ T7637] bridge_slave_0: left promiscuous mode [ 257.901233][ T7637] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.975454][ T7637] bond1 (unregistering): (slave geneve2): Releasing active interface [ 258.024462][ T7637] bond3 (unregistering): (slave bridge1): Releasing backup interface [ 258.024488][ T7637] bridge1 (unregistering): left promiscuous mode [ 258.024515][ T7637] bridge1 (unregistering): left allmulticast mode [ 258.059843][ T7637] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.065947][ T7637] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.067983][ T7637] bond0 (unregistering): Released all slaves [ 258.070411][ T7637] bond (unregistering): Released all slaves [ 258.077286][ T7637] bond1 (unregistering): Released all slaves [ 258.081204][ T7637] bond2 (unregistering): Released all slaves [ 258.087086][ T7637] bond3 (unregistering): Released all slaves [ 258.136438][ T7637] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.164874][ T7637] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.168039][ T7637] bond0 (unregistering): Released all slaves [ 258.172611][ T4402] 8021q: adding VLAN 0 to HW filter on device eth23 [ 258.240462][ T7637] IPVS: stopping backup sync thread 7860 ... [ 258.325352][ T4402] 8021q: adding VLAN 0 to HW filter on device eth22 [ 258.464324][ T4402] 8021q: adding VLAN 0 to HW filter on device eth24 [ 258.588992][ T4402] 8021q: adding VLAN 0 to HW filter on device eth25 [ 258.636281][ T7637] hsr_slave_0: left promiscuous mode [ 258.637706][ T7637] hsr_slave_1: left promiscuous mode [ 258.638032][ T7637] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.640362][ T7637] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.643458][ T7637] hsr_slave_0: left promiscuous mode [ 258.644563][ T7637] hsr_slave_1: left promiscuous mode [ 258.644914][ T7637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.644925][ T7637] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.646065][ T7637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.646075][ T7637] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.656129][ T7637] veth1_macvtap: left promiscuous mode [ 258.656177][ T7637] veth0_macvtap: left promiscuous mode [ 258.656229][ T7637] veth1_vlan: left promiscuous mode [ 258.656264][ T7637] veth0_vlan: left promiscuous mode [ 258.749365][ T7637] team0 (unregistering): Port device team_slave_1 removed [ 258.753336][ T7637] team0 (unregistering): Port device team_slave_0 removed [ 258.871183][ T7637] team0 (unregistering): Port device team_slave_1 removed [ 258.877529][ T7637] team0 (unregistering): Port device team_slave_0 removed [ 259.067824][ T4402] 8021q: adding VLAN 0 to HW filter on device eth26 [ 259.197779][ T4402] 8021q: adding VLAN 0 to HW filter on device eth27 [ 259.310572][ T7637] IPVS: stop unused estimator thread 0... [ 259.399104][ T7637] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.486727][ T7637] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.580341][ T7637] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.639105][ T7637] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.751022][ T7637] bridge_slave_1: left allmulticast mode [ 259.751058][ T7637] bridge_slave_1: left promiscuous mode [ 259.751147][ T7637] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.830957][ T7637] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.871103][ T7637] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.900249][ T7637] bond0 (unregistering): Released all slaves [ 259.902540][ T7637] bond (unregistering): Released all slaves [ 260.035753][ T4402] 8021q: adding VLAN 0 to HW filter on device eth28 [ 260.251459][ T4402] 8021q: adding VLAN 0 to HW filter on device eth29 [ 260.260099][ T7637] hsr_slave_0: left promiscuous mode [ 260.261220][ T7637] hsr_slave_1: left promiscuous mode [ 260.261436][ T7637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.261456][ T7637] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.262770][ T7637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.262780][ T7637] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.268858][ T7637] veth1_macvtap: left promiscuous mode [ 260.268903][ T7637] veth0_macvtap: left promiscuous mode [ 260.268955][ T7637] veth1_vlan: left promiscuous mode [ 260.268989][ T7637] veth0_vlan: left promiscuous mode [ 260.373995][ T7637] team0 (unregistering): Port device team_slave_1 removed [ 260.377655][ T7637] team0 (unregistering): Port device team_slave_0 removed [ 260.576107][ T4402] 8021q: adding VLAN 0 to HW filter on device eth30 [ 260.699423][ T4402] 8021q: adding VLAN 0 to HW filter on device eth31