last executing test programs: 4.091097713s ago: executing program 2 (id=159): syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000480)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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") r0 = fanotify_init(0x200, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x8, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@posixacl}, {@cache_readahead}, {@fscache}, {@afid={'afid', 0x3d, 0x8}}, {@noextend}], [{@obj_user={'obj_user', 0x3d, 'net_prio.prioidx\x00'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}]}}) r2 = syz_io_uring_setup(0x7ce6, &(0x7f00000005c0)={0x0, 0x800ffff, 0x1, 0x1, 0x3}, &(0x7f0000000000)=0x0, &(0x7f0000000580)=0x0, &(0x7f0000000180)=0x0) r6 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_FUTEX_WAITV={0x35, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r10}}) syz_io_uring_submit(r3, r8, r5, &(0x7f0000000380)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r2, 0x0, 0x0, 0x8, 0x2, 0x1, {0x0, 0x0, r2}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000002c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0x975, 0x0, 0x0, 0x1000, 0x3, 0x0, 0x0, 0x114}}}, &(0x7f0000000340)) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r0, 0x161, 0x40000867, r11, 0x0) 3.898438555s ago: executing program 2 (id=162): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) futex(&(0x7f0000000080)=0x8000207, 0x8, 0x3, 0x0, 0x0, 0x1) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)={&(0x7f0000000300)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xbc}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES16=r2], 0x7c}, 0x1, 0x0, 0x0, 0x20048000}, 0x4044004) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3800000003000000000000000000020000000900010073797ac713e2eeae18af3d2869300000000009000300fff500006d0697540c0002400008000000"], 0x60}}, 0x0) 3.714134418s ago: executing program 2 (id=165): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x100}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r0, r1}, 0xc) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi2\x00', 0x200001, 0x0) ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000100)={0x2, 0x3, 0x3, 0x4, 0x101, 0xd}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000140)={0x0, 0x3f, "04dd4ceddd3813c5c84a8dac6d53136a5f57305e3e3501a83e6e119054b5392e12fc84b7870708853a2519e0b14ed547c51620135ca0065edd4e4ddd932ac3"}, &(0x7f00000001c0)=0x47) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={r3, @in={{0x2, 0x4e21, @local}}, 0x3, 0x1}, 0x90) recvmsg$unix(r0, &(0x7f0000000500)={&(0x7f00000002c0), 0x6e, &(0x7f0000000400)=[{&(0x7f0000000340)=""/18, 0x12}, {&(0x7f0000000380)=""/37, 0x25}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000440)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x40000100) ioctl$VIDIOC_DECODER_CMD(r8, 0xc0485660, &(0x7f0000000540)={0x0, 0x1}) vmsplice(r8, &(0x7f00000005c0), 0x0, 0xa) ioctl$COMEDI_CMD(0xffffffffffffffff, 0x80506409, &(0x7f0000000680)={0x8, 0x10000, 0x20, 0xbda1, 0x100, 0x9, 0x20, 0x4, 0x80, 0x73, 0x4, 0x3, &(0x7f0000000600)=[0x200, 0x9, 0x7, 0x3, 0x5, 0xc866], 0x6, &(0x7f0000000640)="d5930fb4c27e24245bd56a98e2da632ee120c80bf5fcaa4a483b26ff35289b7b16aa52de24766dc7b13a06e83a18064f4cf4bf", 0x33}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000780)={'sit0\x00', &(0x7f0000000700)={@remote, 0x1, 0x0, 0x70, 0x0, [{@private}, {@local}, {@remote}, {@initdev}, {@initdev}, {@loopback}, {@local}]}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, &(0x7f00000007c0)={0x0, 0x0, {}, {0x0, @usage, 0x0}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000bc0)={{r2}, {@val={r11}, @actul_num={@void, 0x8, 0x67}}}) setsockopt$MRT_DONE(r5, 0x0, 0xc9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000c40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r10, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x3c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1d8}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x3bb}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000d40), 0x400100, 0x0) ioctl$TUNSETCARRIER(r13, 0x400454e2, &(0x7f0000000d80)) kcmp$KCMP_EPOLL_TFD(r6, r6, 0x7, r0, &(0x7f0000000dc0)={r9, r8, 0x4}) listen(r8, 0x4f0e000) ioctl$F2FS_IOC_GET_FEATURES(r13, 0x8004f50c, &(0x7f0000000e00)) syz_genetlink_get_family_id$team(&(0x7f0000000e40), r4) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc) recvmmsg(r10, &(0x7f0000004700)=[{{&(0x7f0000000e80)=@x25={0x9, @remote}, 0x80, &(0x7f0000001100)=[{&(0x7f0000000f00)=""/90, 0x5a}, {&(0x7f0000000f80)=""/95, 0x5f}, {&(0x7f0000001000)=""/199, 0xc7}], 0x3, &(0x7f0000001140)=""/53, 0x35}, 0x3cd89af3}, {{&(0x7f0000001180)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001780)=[{&(0x7f0000001200)=""/125, 0x7d}, {&(0x7f0000001280)=""/208, 0xd0}, {&(0x7f0000001380)=""/196, 0xc4}, {&(0x7f0000001480)=""/173, 0xad}, {&(0x7f0000001540)=""/180, 0xb4}, {&(0x7f0000001600)=""/92, 0x5c}, {&(0x7f0000001680)=""/179, 0xb3}, {&(0x7f0000001740)=""/42, 0x2a}], 0x8, &(0x7f0000001800)=""/41, 0x29}, 0x7}, {{&(0x7f0000001840)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000003ac0)=[{&(0x7f00000018c0)=""/171, 0xab}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/153, 0x99}, {&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/77, 0x4d}], 0x5}, 0x9}, {{&(0x7f0000003b40)=@ax25={{}, [@remote, @default, @bcast, @netrom, @rose, @netrom, @rose, @rose]}, 0x80, &(0x7f0000003d00)=[{&(0x7f0000003bc0)=""/14, 0xe}, {&(0x7f0000003c00)=""/85, 0x55}, {&(0x7f0000003c80)=""/95, 0x5f}], 0x3, &(0x7f0000003d40)=""/43, 0x2b}, 0x81}, {{&(0x7f0000003d80)=@phonet, 0x80, &(0x7f0000004480)=[{&(0x7f0000003e00)=""/2, 0x2}, {&(0x7f0000003e40)=""/255, 0xff}, {&(0x7f0000003f40)=""/217, 0xd9}, {&(0x7f0000004040)=""/249, 0xf9}, {&(0x7f0000004140)=""/165, 0xa5}, {&(0x7f0000004200)=""/145, 0x91}, {&(0x7f00000042c0)=""/120, 0x78}, {&(0x7f0000004340)=""/222, 0xde}, {&(0x7f0000004440)=""/32, 0x20}], 0x9, &(0x7f0000004540)=""/24, 0x18}, 0x8000}, {{&(0x7f0000004580)=@ll, 0x80, &(0x7f00000046c0)=[{&(0x7f0000004600)=""/105, 0x69}, {&(0x7f0000004680)=""/61, 0x3d}], 0x2}, 0x7fffffff}], 0x6, 0x10000, &(0x7f0000004880)={0x0, 0x989680}) mknodat(r9, &(0x7f00000048c0)='./file0/file0\x00', 0x8000, 0xfffffffe) ioctl$VT_OPENQRY(r8, 0x5600, &(0x7f0000004900)) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000004b00)={&(0x7f0000004940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004980)=[{}, {}, {}], &(0x7f0000004a80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000004ac0)=[0x0, 0x0, 0x0, 0x0], 0x3, 0x4, 0x9}) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000004b80)={0x8, r2, 0x2}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000004bc0)={0x1, 'veth0_to_bridge\x00', 0x4}, 0x18) 3.637414602s ago: executing program 2 (id=166): process_madvise(0xffffffffffffffff, &(0x7f0000000200)=[{0xffffffffffffffff}], 0x1, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x4}, 0x6) close(r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'team_slave_0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0/file0\x00'}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sysvipc/msg\x00', 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000ec0)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, '#\xd91e0n\xde3\x8d\xbdcJN\xe3;\x81\xb13\x1d\x02\xaa=M\xa43LO[\xa4g\x90\v\xe2\xa5\xea\'q\xe9\xcb7\x98\\q\xda\x04E[\xa3~'}}, {@smackfshat={'smackfshat', 0x3d, 'e{\x9b\xff\xd0'}}, {@smackfsdef={'smackfsdef', 0x3d, 'geneve\x0e\xc8\xbb\xf3\xa6\x87\xa7x\x13\xd3P\xfb.y0\x00'}}, {@uid_lt}, {@subj_user={'subj_user', 0x3d, '[@/\'+]'}}, {@euid_lt}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x30, 0x64, 0x33, 0x62, 0x37, 0x4], 0x2d, [0x39, 0x61, 0x30, 0x65], 0x2d, [0x39, 0x32, 0x31, 0x65], 0x2d, [0x66, 0x39, 0x33, 0x36], 0x2d, [0x65, 0x35, 0x63, 0x37, 0x38, 0x31, 0x0, 0x34]}}}, {@flag='mand'}, {@dont_appraise}]}, 0x3, 0x583, &(0x7f0000000800)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r5, 0x10000) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="66a73d", @ANYRES64=r5, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYRES64=0x0]) sendfile(r4, r5, 0x0, 0x4000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x22802, 0x1a1) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000240)={0xd2f4, 0xab, 0x3, 0x7}) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) pidfd_send_signal(r7, 0x18, 0x0, 0x2) ioctl$DVB_DEMUX_DMX_EXPBUF(r6, 0xc00c6f3e, &(0x7f0000000100)={0x67, 0x80000, r2}) setreuid(0x0, 0xee00) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_pidfd_open(r8, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r9, 0xff0a, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_tracing={0x1a, 0x12, &(0x7f0000000ec0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x4, 0xe2, &(0x7f00000003c0)=""/226, 0x40f00, 0x10, '\x00', r1, 0x17, r2, 0x8, &(0x7f0000000540)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x3652, r3, 0x0, &(0x7f00000005c0)=[r6], 0x0, 0x10, 0x7}, 0x94) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x1, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x5, 0x0) mq_getsetattr(r3, 0x0, &(0x7f0000000300)) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e6572000e004000028008000240000000840800034000000007080004400000000f08000140000000001c0005800c0001007061796c6f6164000c00028008000240000000050900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a20a1b2d67e9c"], 0xa8}}, 0x0) 3.481824104s ago: executing program 2 (id=173): syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000000240)={[{@auto_da_alloc_val}, {@grpid}, {@bh}, {@data_err_ignore}, {@noauto_da_alloc}, {@grpquota}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@errors_continue}, {@nolazytime}, {@norecovery}, {@acl}]}, 0xfe, 0x495, &(0x7f0000000940)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r0, 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') add_key$fscrypt_v1(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffff9) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, 0x0, 0xb7, 0x0, &(0x7f00000003c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0xa4) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r2, 0x4b47, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$usbmon(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x10, r1, 0x1) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010008000000feffffff1e00000018000180140002006e657464487673696d431ea70f8b817e719c8bcf6c30000000000000e88f1a681f45dce3a4df25aa40adb5ac70f87e6e62da"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000000)={0x3, 0x4e, "d55b214ef3260ff839b26bb9ec864c8231c8489916b25e194eee14022e1b9d201b309aaf33c063dab3d0a8e9e24ab5192f1420970d4107c417a7fa32b507d4785599c9f9ce40216c01303ad9561d"}) 1.852677271s ago: executing program 2 (id=188): syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) (async) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001080)={0xc, {"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", 0x1000}}, 0x1006) (async) write$UHID_INPUT(r1, &(0x7f0000001080)={0xc, {"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", 0x1000}}, 0x1006) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000080)={0x28, 0x4, r3, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000040)={0xc, r3}) ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f0000000300)={0x18, r3}) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/module/damon_reclaim/parameters/enabled\x00', 0x1, 0x88) mkdirat(r4, &(0x7f0000000280)='./sys/module/damon_reclaim/parameters/addr_unit\x00', 0x0) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/damon_reclaim/parameters/addr_unit\x00', 0x2, 0x0) write(r5, &(0x7f0000000180)='3\x00', 0x2) (async) write(r5, &(0x7f0000000180)='3\x00', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/damon_reclaim/parameters/enabled\x00', 0x2, 0x0) write(r6, &(0x7f0000000240)='Y\x00', 0x2) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x12, &(0x7f0000000180)=0x101, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r9, 0x89e1, 0x0) 1.566577677s ago: executing program 32 (id=188): syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) (async) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001080)={0xc, {"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", 0x1000}}, 0x1006) (async) write$UHID_INPUT(r1, &(0x7f0000001080)={0xc, {"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", 0x1000}}, 0x1006) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000080)={0x28, 0x4, r3, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000040)={0xc, r3}) ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f0000000300)={0x18, r3}) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/module/damon_reclaim/parameters/enabled\x00', 0x1, 0x88) mkdirat(r4, &(0x7f0000000280)='./sys/module/damon_reclaim/parameters/addr_unit\x00', 0x0) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/damon_reclaim/parameters/addr_unit\x00', 0x2, 0x0) write(r5, &(0x7f0000000180)='3\x00', 0x2) (async) write(r5, &(0x7f0000000180)='3\x00', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/damon_reclaim/parameters/enabled\x00', 0x2, 0x0) write(r6, &(0x7f0000000240)='Y\x00', 0x2) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x12, &(0x7f0000000180)=0x101, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r9, 0x89e1, 0x0) 876.839059ms ago: executing program 0 (id=194): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_io_uring_setup(0x72ef, &(0x7f0000000400)={0x0, 0x595f, 0x10, 0x2, 0x185}, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000500)=@IORING_OP_BIND=@ipv4={0x38, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x1, 0x0) fchdir(r8) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@gettaction={0x14, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) 876.518867ms ago: executing program 1 (id=195): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20, @rand_addr=0x1000000}, 0x10) r1 = gettid() ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000200)=r1) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 797.516897ms ago: executing program 0 (id=197): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@oldalloc}, {@errors_remount}, {@nodioread_nolock}, {@bh}]}, 0xfe, 0x5a1, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) r1 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000e, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000080)={0xa, 0x2, 0x1, "464905e100000000000000007f0000000000000000000000000000ee000000ff", 0x30314442}) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f00000000c0)={0x3, "a8df7802997c0f0f26a793d1c00000000000000000000500", 0x2, 0x5, 0x1, 0x3200e0, 0x4000000, 0x2}) get_mempolicy(0x0, 0xfffffffffffffffe, 0x4000000000006, &(0x7f0000ff4000/0x2000)=nil, 0x3) 720.163315ms ago: executing program 1 (id=200): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRES8=r0], &(0x7f00000002c0)='syzkaller\x00', 0x800, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x46, 0x0, 0x0, 0x5d}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x8, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000d00)=r3, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 686.134171ms ago: executing program 1 (id=201): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f0000000180)=0x1, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r1, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3}, &(0x7f0000000500), &(0x7f0000000540)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791148000000000069001c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={&(0x7f0000000040)="4667415cfcfa3ff8bae46e6ed03f0522eb250e7529e18bf25a530af51401839b5b9c448a007f1ee352368baabea32a088ebcf10dd8db1e9002d1a062d499cbf9e9ea06301b89b442addfeeeaf9957a280d87ce4115a2c23c275af92c3dbededef66e74cfacd00886fc9a8593203bab43a237762ee4f46fb4e690470bf973a03936c9ba0a231f085b7e92d03a2200437439bc7a1d1737e8c60f1cdd73294fae6707fc", &(0x7f00000002c0)=""/246, &(0x7f00000003c0)="2266a8a560cb68cf5800475d14a2002015af1ca56db0caf86c62804e1172cbcdde4e70e5a2cb8ccd87e31b6a80cae408aab8a3a6ac5015694963177dcc9e01c9c29e4c1e61920e05134fc049c81cbe943f5e69e29b3896d07581022cd5de2ce389a50ffddd8f795c94d64574030434cb5e617ae4ae3344f96c7d9f7e4e950f0f435ea3d975547971075799", &(0x7f0000000480)="5bc7f0474a5c25de6df6ab9cf99aeb74ac2c9b319623f61c92abc0b4147a3dc2e6e149792ceac4582ac97e658cc2df2a1d391fd700cab41c99d23f7699ce9c14ce173c943120e2a37ef1f9602eb51c18532a9714f82f4fbabc2ca9a3a1a665b3956e32015038e9e03cfe3857ead94c24070614128a7e74935fafd8", 0x5, r3, 0x4}, 0x38) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000200000000007400", @ANYRES32=r1, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 648.24934ms ago: executing program 0 (id=202): syz_emit_ethernet(0x2a, &(0x7f0000000040)={@multicast, @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev, @rand_addr, @empty, @dev}}}}, 0x0) r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) socket$inet_icmp(0x2, 0x2, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') r2 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x20e00, 0x0) io_setup(0x3, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000000000)=[&(0x7f0000000080)={0x0, 0x0, 0x10, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000080)={0x5, {{0xa, 0x4e23, 0xffff, @mcast1, 0x400}}, 0x1, 0x7, [{{0xa, 0x4e23, 0x7, @mcast1}}, {{0xa, 0x4e22, 0xb0b, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}}, {{0xa, 0x4e22, 0x3ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffff}}, {{0xa, 0x4e23, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}, {{0xa, 0x4e22, 0x1c, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}}, {{0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}, {{0xa, 0x4e20, 0xc39, @mcast1, 0x3}}]}, 0x410) 637.87847ms ago: executing program 1 (id=204): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x4]}, 0x8, 0x80800) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x14, 0x2, 0x9, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x404c0c0) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x4]}, 0x8, 0x80800) (async) io_setup(0x206, &(0x7f0000000200)) (async) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x14, 0x2, 0x9, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x404c0c0) (async) 548.818565ms ago: executing program 4 (id=205): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r2 = accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x4d, @multicast}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000100)={r1, 0x1, 0x6, @random="b3e1af68ca36"}, 0x10) 532.520393ms ago: executing program 4 (id=207): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vcsn(&(0x7f0000000040), 0x5, 0x169803) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@generic={0x8f, 0x1, 0x1, 0xbc, 0xfffffffe}]}, &(0x7f0000000c40)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000099c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0xfe}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) 532.229944ms ago: executing program 3 (id=208): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000040)={[{@mblk_io_submit}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@sysvgroups}, {@grpid}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0x1, 0x47a, &(0x7f00000006c0)="$eJzs28uPFMUfAPBv9z6AH4/lh/gAUVeJyUbjLrugcvCi0cQYjCZ6wOM6O5ANA2vY1QgSWYzxZGJI9Ew8Gv0LvBkTo55MuHryZEiIcgE8remebpgdZni4M8yy8/kkPVPVXT1VNdWP6qqZAPrWaPaSRGyKiN8jYqQeXZ5gtP525dKpytVLpypJLC299VeSp7t86VSlTFrut7GIjKUR6adJkcly8ydOHpmu1arHi/jEwtH3JuZPnHzmg6PTh6uHq8em9u/ft3fy+eemnu1IPbN6Xd758dyuHa++c/b1ysGz7/7yXVbeTcX2xnp0ymhW8b+Xcs3bnux0Zj22uSGcDPawINyRgYjImmsoP/9HYiCuN95IvPJJTwsHdFV2b1rXfvPiErCGJdHrEgC9Ud7os+ffcrlLXY9V4eKL9QegrN5XiqW+ZTDSIs1Q0/NtJ41GxMHFf85lS3RpHAIAoNHnla8ODEfER1e/fS3re4xERDke9ED++kf+uqWYQ9kaEf+PiG0RcV9EbI+I+4u0D0bEQyssz439n/TCCj/yprL+3wvF3Nby/l/Z+4utA0Vsc17/oeTQbK26J9bl38lYDK3L4pM3yeOHl89/0W5bY/8vW7L8y75gUY4Lg00DdDPTC9N5p7QDLp6J2DnYqv7JtZmAJCJ2RMTOO/voLWVg9qlvdrVL1Lr+l8/dVg4dmGda+jqr3mJW/8Voqn8paZyfnL1hfnJifdSqeybqR0Urv/722Zvt8r91+3fXxWr9vaH9m5NsTRrna+c7m/9/PP7T4eTtfJ55uFj34fTCwvHJiOHkQB5ftn7q+r5lvEyfHf9ju1uf/9uKfbL6PxwR2UH8SEQ8GhGPFWV/PCKeiIjdN6njzy/duv6R9qj9z0TMtLz+XTv+m9r/zgMDR376vl3+t9f++/LQWLEmv/7dQqviZJeL5gKu5LsDAACAe0Wa/wY+ScevhdN0fLz+G/7t8b+0Nje/8PShufePzcT5LfXxz7Qc6RopxkNrs7XqZLJYfGJ9fHSqGCsux0v3FuPGXw5syOPjlbnaTI/rDv1uY5vzP/PnQK9LB3TZhpZrp4bvekGAHmieR0+XR0+/ES4GsFb5vzb0r/L8b/O83/g/GGCNcf+H/tXq/D/dFDcXAGuT+z/0L+c/9Kn0xxXs7KkA7nXu/9CXVvK//i4G1q+OYvQmsFobJQ9ElIF0VZRHoEuBXl+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOuPfAAAA//+Pc+dq") 523.897846ms ago: executing program 0 (id=209): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20, @rand_addr=0x2000000}, 0x10) r1 = gettid() ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000200)=r1) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 516.174394ms ago: executing program 1 (id=210): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3}, 0x50) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'xfrm0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0x2, 0xffff}, {0x3, 0xffe0}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x2, 0xb, 0x5}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8805}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x13, 0xffffffc0, 0x4, 0xa69, 0x42108, r4, 0x3, '\x00', r6, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x50) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r3, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r3, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r9, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x4}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0xe}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x40}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4005}, 0x4010) connect$tipc(r8, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x4, 0x3}}, 0x10) accept4$tipc(0xffffffffffffffff, &(0x7f0000000640), &(0x7f0000000680)=0x10, 0x800) (async) accept4$tipc(0xffffffffffffffff, &(0x7f0000000640), &(0x7f0000000680)=0x10, 0x800) socket$can_raw(0x1d, 0x3, 0x1) (async) r10 = socket$can_raw(0x1d, 0x3, 0x1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14) sendmsg$can_raw(r10, &(0x7f0000000380)={&(0x7f00000002c0)={0x1d, r11}, 0x10, &(0x7f0000000340)={&(0x7f0000000300)=@can={{0x1, 0x0, 0x0, 0x1}, 0x5, 0x3, 0x0, 0x0, "a5363511c415f57c"}, 0x10}, 0x1, 0x0, 0x0, 0x24040080}, 0x90) (async) sendmsg$can_raw(r10, &(0x7f0000000380)={&(0x7f00000002c0)={0x1d, r11}, 0x10, &(0x7f0000000340)={&(0x7f0000000300)=@can={{0x1, 0x0, 0x0, 0x1}, 0x5, 0x3, 0x0, 0x0, "a5363511c415f57c"}, 0x10}, 0x1, 0x0, 0x0, 0x24040080}, 0x90) 380.179898ms ago: executing program 3 (id=211): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xf8, r1, 0x708, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x98, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xb}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2617}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x80000001}]}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x4}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x2}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x7}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x4}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x3}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000084}, 0x400c804) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r4, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x20044000) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, r6, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast2}, @GTPA_MS_ADDR6={0x14, 0xc, @private1}, @GTPA_FAMILY={0x5, 0xd, 0xb}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20000001) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r7, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004010}, 0x40) (async) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r7, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004010}, 0x40) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, r1, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) r9 = accept4$packet(0xffffffffffffffff, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000800)=0x14, 0x180800) getsockname$packet(r9, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000880)=0x14) (async) getsockname$packet(r9, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000880)=0x14) connect$unix(0xffffffffffffffff, &(0x7f00000008c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x48, r10, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}]}, 0x48}, 0x1, 0x0, 0x0, 0x900}, 0xc080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r11, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r4, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000bc0), 0x802, 0x0) (async) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000bc0), 0x802, 0x0) write$uinput_user_dev(r12, &(0x7f0000000c00)={'syz0\x00', {0x2, 0xfff8, 0xfffd, 0x2400}, 0x28, [0x7, 0x5, 0x2, 0x7, 0x2, 0x7ff, 0x4, 0x1, 0x7, 0x0, 0x0, 0x2, 0x629, 0x4, 0x6e8, 0x5c0, 0x3, 0x3, 0xffffffc0, 0xd, 0xd6, 0x8, 0x401, 0x1, 0x8, 0x0, 0xfffffffb, 0xbf, 0x3, 0xb48, 0x2, 0x1, 0x81, 0x4, 0x6, 0xce85, 0x8, 0x2, 0x8, 0x9, 0x5d4cf6e1, 0x200000, 0xfff, 0x4, 0xfff, 0x3, 0x1, 0xacb4, 0x6, 0x1d, 0x1ff, 0x5, 0x9, 0xf77f, 0x7fffffff, 0x3, 0xd9, 0x800, 0x7fffffff, 0x1, 0x0, 0x7, 0x6, 0x9], [0x2, 0x0, 0x7, 0xffffff7f, 0x4, 0xd, 0x75, 0x7f, 0xb1fa, 0x401, 0x3, 0xfffffff7, 0x8, 0x6, 0x9, 0x100, 0x0, 0xf8f, 0x1, 0x2, 0x6, 0x87c6, 0xf77, 0x4, 0x5, 0xffff, 0xfffffff8, 0x1528e33, 0x100, 0x2, 0x2, 0x5, 0x3, 0x4, 0x1, 0x7, 0x4, 0x1, 0x7f, 0x2, 0xd2c, 0x0, 0x8000, 0xfffffff8, 0x3, 0x10001, 0xa93a, 0x7, 0x0, 0xeb, 0xad0, 0xb, 0x6, 0x3, 0xff, 0xfffffff7, 0x2, 0x1, 0x2, 0xfffffffe, 0x7, 0x80, 0x7f, 0x4], [0x2, 0x401, 0x8, 0xfffff211, 0x5, 0x6, 0x0, 0x1, 0x7, 0x2c0, 0x4, 0x9, 0x401, 0x7, 0x3, 0xfffffff8, 0xfff, 0x2, 0x49a, 0x8, 0x7, 0x3800, 0x4, 0x9, 0x9, 0xcc, 0xfffffc9f, 0x1f1, 0x200, 0x401, 0x81, 0x9, 0x80000000, 0xc64e, 0x1, 0x3, 0x0, 0x3, 0x4, 0x49, 0x8, 0x43, 0x0, 0x1, 0x1, 0x0, 0x2, 0xa24, 0xa7, 0x7fffffff, 0x80000001, 0xa97, 0x9, 0x0, 0xa51d, 0x7, 0x7f, 0x6, 0x2, 0x2, 0x9, 0x4, 0x5a, 0x3], [0x8001, 0x6, 0x3, 0xc8e2b811, 0x6, 0x9962, 0x6, 0x44b042d6, 0x9, 0x7, 0x51, 0x7, 0x8001, 0xd, 0x10000, 0x78, 0x5, 0xfff, 0x7, 0x5, 0xfffffff9, 0xffffe71a, 0x3, 0x0, 0x2, 0x1, 0x7, 0x2, 0x80000001, 0x1ff, 0x2, 0x5, 0x58, 0xa, 0x2, 0x4, 0x4ac, 0x0, 0x80, 0x0, 0x1, 0x4000, 0x0, 0x81, 0x10001, 0x9, 0x7, 0x2, 0xd14a, 0xe6c3, 0x2, 0x0, 0x7ff, 0x401, 0x5, 0x8, 0x100, 0x4137, 0x1, 0x4, 0x9, 0x8, 0x5fc]}, 0x45c) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000020c0)={&(0x7f0000001080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@decl_tag={0x7, 0x0, 0x0, 0x11, 0x2, 0x4}, @typedef={0xa, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x30, 0x5f, 0x0, 0x5f, 0x61]}}, &(0x7f00000010c0)=""/4096, 0x3b, 0x1000, 0x1, 0x2}, 0x28) (async) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000020c0)={&(0x7f0000001080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@decl_tag={0x7, 0x0, 0x0, 0x11, 0x2, 0x4}, @typedef={0xa, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x30, 0x5f, 0x0, 0x5f, 0x61]}}, &(0x7f00000010c0)=""/4096, 0x3b, 0x1000, 0x1, 0x2}, 0x28) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r14 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r14, 0x84, 0x12, &(0x7f0000002100), &(0x7f0000002140)=0x4) dup(r13) (async) r15 = dup(r13) r16 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002180), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r15, 0x89e0, &(0x7f00000021c0)={r9, r16}) (async) ioctl$sock_kcm_SIOCKCMATTACH(r15, 0x89e0, &(0x7f00000021c0)={r9, r16}) sched_setscheduler(0x0, 0x2, &(0x7f0000002280)=0x7fff) 379.667052ms ago: executing program 0 (id=212): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xb, 0x7fff}}, './bus\x00'}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000001b00)=""/4119, 0x1017) mknodat(r0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x103) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c00000b0400000000000000000200010050000480200001800700010063740000140002800800014000000002080002400000000d2c0001800b0001007470726f787900001c00028008000340000000000800014000000002080002400000000c0900010073797a30000000000900050000007a3200000000140000001100010000000000000000000000000a000000"], 0xa4}, 0x1, 0x0, 0x0, 0x20000811}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)={0x3c, r3, 0x1, 0x0, 0x0, {0x49}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}}, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={&(0x7f0000000100), 0x10, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000002060104000000000000000002000000050001000700000009000200d4145bff235116d811000300686173683a69702c70133d740000000005000400010000000500050002000000"], 0x4c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={&(0x7f0000000600), 0x10, &(0x7f0000000700)={&(0x7f0000000800)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={&(0x7f0000000a00), 0xc, &(0x7f0000000b00)={&(0x7f0000000780)=@deltaction={0x5c, 0x31, 0x10, 0x70bd25, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x5c}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000040)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @empty}, @echo={0x8, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00'}}}}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r7, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r7, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x188000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES32=r3, @ANYRES8=r0], 0x2c}, 0x1, 0x0, 0x0, 0x4004100}, 0x20000000) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/msg\x00', 0x1800, 0x0) preadv(r8, &(0x7f0000000740)=[{&(0x7f0000000640)=""/217, 0xd9}], 0x1, 0x5, 0x80009) r9 = syz_open_dev$vim2m(&(0x7f00000004c0), 0x4, 0x2) ioctl$NILFS_IOCTL_GET_SUSTAT(r9, 0x80306e85, &(0x7f0000000540)) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x68) ioctl$FS_IOC_FIEMAP(r10, 0xc020660b, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000036630000000001000000000000000700000002000000000000000000"]) 338.988049ms ago: executing program 4 (id=213): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff07000000000000000000008500000011000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 333.144416ms ago: executing program 3 (id=214): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (async) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000500)=0xfffffffc, 0x4) (async) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/19, 0x13}}], 0x1, 0x45833af96e4a38ff, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) (async) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00022b8070000200000002000000080061000000000008003f00f3ff6b"], 0x24}, 0x1, 0x0, 0x0, 0x4048040}, 0x20000000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x9, 0x9}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x9, 0x0, 0x4, 0x1, 0x8000}}, {0x4}}]}, @qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x7}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000840}, 0x4c840) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {0xfff3}, {0xf, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r10, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xd}}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000e00)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000ec0)={'syztnl1\x00', &(0x7f0000000e40)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x3, 0x7fffffff, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private2, 0x700, 0x30, 0x6, 0x463}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000f40)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001940)={&(0x7f00000019c0)={0x708, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6658}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x70}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xdb}}}]}}, {{0x8}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8b}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xe0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x2, 0x0, 0x81, 0x10000}, {0x81, 0x0, 0xa, 0x1}, {0x1, 0x7, 0x1, 0x7}, {0x5, 0x6, 0xfd, 0x1ff}, {0x0, 0x2, 0x99, 0x2}, {0x4, 0xa, 0xbe, 0x400}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1c4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x8, 0x4a, 0x4, 0x3}, {0x77a6, 0x9, 0xf0, 0x7ff}, {0x3a6, 0x2, 0x3, 0x10000}, {0xfff, 0x7f, 0x6, 0x898}, {0xfffe, 0x3, 0x2}]}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}]}, 0x708}, 0x1, 0x0, 0x0, 0x10040010}, 0x40040) (async) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000b1", @ANYRES16=r1, @ANYBLOB="00002abd7000fddbdf251600000008000300", @ANYRES32=r4, @ANYBLOB="0a001a00ffffffffffff00000a00060008021100000000000a000600ffffffffffff0000"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20008000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x6, &(0x7f00000010c0)=@raw=[@generic={0x73, 0xa, 0x2, 0xffc0}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x200000a}, @generic, @generic={0x95}], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 251.664502ms ago: executing program 3 (id=215): pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INIT(r1, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede) read$FUSE(r0, &(0x7f0000000bc0)={0x2020}, 0x2020) fcntl$setpipe(r1, 0x407, 0x2000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x10, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x7, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1f}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x19}}}, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x48}, 0x94) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82100000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 245.503031ms ago: executing program 4 (id=216): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xd2c}}, './file0\x00'}) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), r2, r3}}, 0x18) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x1, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x10b85}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan1\x00'}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0) 144.46369ms ago: executing program 3 (id=217): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipv6_delrule={0x30, 0x18, 0xc961a4b31a2c6a35, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0xff, 0x3, 0x0, 0x6}, [@FRA_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x30}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0xfffffffffffffd81, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x400, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f0000000200)={&(0x7f00000001c0)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000100)="2d00000080584d", 0x7}], 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000000000000000000010020"], 0x40}, 0xc004) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x1b8, 0xc8, 0x8, 0x0, 0x5803, 0x318, 0x2e8, 0x2e8, 0x318, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0xffffff00], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0x190, 0x1b8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0xfd, 0x3}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x81}}}, {{@ipv6={@remote, @loopback, [], [], 'pim6reg1\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x6, 0xfffffffe, 0x2, 'pptp\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) (async) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = socket$kcm(0xa, 0x3, 0x3a) (async) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x4000850) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) (async) socket$nl_route(0x10, 0x3, 0x0) 77.368459ms ago: executing program 1 (id=218): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x48}}, 0x4000) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, 0x40, 0x200, 0x70bd29, 0x25dfdbfd, {0x17}, [@nested={0xc, 0x12c, 0x0, 0x1, [@typed={0x7, 0xe1, 0x0, 0x0, @binary="906530"}]}, @generic="55f022a3964686aead5a90f9416cc4c883bdb75052f8a490eaffe1a1d237da2d786f4acc221986139931d47fd0e79015a710e092320983c6b2e71d84c7", @generic="d5b9f3fcb505a26f83b208075ec78fdf85af2dab", @typed={0x8, 0xe8, 0x0, 0x0, @ipv4=@empty}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40040d1}, 0x2000) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x20, 0x0, 0xfffff034}, {0x50, 0x1, 0x0, 0x80000000}, {0x6, 0x80, 0xfd, 0xfffffffd}]}, 0x10) r3 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x800) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r4, &(0x7f00000001c0), &(0x7f0000000280)=""/190}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000000), &(0x7f0000000040)='%-010d \x00'}, 0x20) 32.749306ms ago: executing program 4 (id=219): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e24, 0xfdffffb1, @mcast1, 0x5}, {0xa, 0x4e24, 0x5, @private2, 0x56500}, 0xfffc, {[0x5447, 0x3, 0x1, 0x1, 0x800, 0xffffffff, 0x9, 0x6b7e828]}}, 0x5c) 1.117242ms ago: executing program 0 (id=220): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6800001f060a010400000000000000000a0000010900010073797a3100000000340004803000018008000100636d700024000280080001400000001008000240000000011000038009000100407327c3600000000900020073797a3200000000050007401c000000140000001100010000000000000000000500000a"], 0x90}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x20a000, 0x0) (async) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0xfffffffffffffeb5) (async, rerun: 64) r4 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f00000021c0)) (async) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x4, @broadcast, 'veth0_to_hsr\x00'}}, 0x1e) sendfile(r2, r1, 0x0, 0x1) 273.459µs ago: executing program 3 (id=221): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20, @rand_addr=0x3000000}, 0x10) r1 = gettid() ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000200)=r1) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 0s ago: executing program 4 (id=222): r0 = socket$inet_tcp(0x2, 0x1, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x6) (async, rerun: 64) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) (async, rerun: 64) listen(r0, 0x5) (async, rerun: 64) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$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") (rerun: 64) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f0000000000)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0x9ab7, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) r3 = accept$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180), 0x4) (async) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000200)=@gcm_128={{0x303}, "1234567812345678", "12345678123456781234567812345678", "12345678", "1234567812345678"}, 0x28) (async) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TLS_RX(r3, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x303}, "1234567812345678", "12345678123456781234567812345678", "12345678", "1234567812345678"}, 0x28) (async, rerun: 32) sendto$inet(r1, &(0x7f0000000300)='\x00', 0x4000, 0x40, 0x0, 0x0) (rerun: 32) recvfrom$inet(r3, &(0x7f0000000400), 0x4000, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.194' (ED25519) to the list of known hosts. [ 27.860013][ T4702] cgroup: Unknown subsys name 'net' [ 27.961192][ T4702] cgroup: Unknown subsys name 'cpuset' [ 27.963343][ T4702] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.079326][ T4702] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 28.866669][ T4716] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 28.868579][ T4716] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 28.874522][ T4718] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 28.874833][ T4721] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 28.876433][ T4718] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 28.879058][ T4718] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 28.880310][ T4721] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 28.882498][ T4721] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 28.882669][ T4721] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 28.883000][ T4718] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 28.884996][ T4723] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 28.885253][ T4723] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 28.885396][ T4723] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 28.885581][ T4721] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 28.885924][ T4721] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 28.886125][ T4721] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 28.897076][ T4716] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 28.898513][ T4716] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 28.911601][ T4718] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 28.924774][ T4718] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 28.924916][ T4718] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 28.930388][ T4721] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 28.931718][ T4718] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 28.935519][ T4721] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 28.937291][ T4715] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.216760][ T4722] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.217079][ T4722] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.217149][ T4722] bridge_slave_0: entered allmulticast mode [ 29.217651][ T4722] bridge_slave_0: entered promiscuous mode [ 29.234433][ T4722] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.234499][ T4722] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.234567][ T4722] bridge_slave_1: entered allmulticast mode [ 29.235029][ T4722] bridge_slave_1: entered promiscuous mode [ 29.242875][ T4722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.243798][ T4722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.252161][ T4722] team0: Port device team_slave_0 added [ 29.270518][ T4722] team0: Port device team_slave_1 added [ 29.283569][ T4727] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.283880][ T4727] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.283995][ T4727] bridge_slave_0: entered allmulticast mode [ 29.284461][ T4727] bridge_slave_0: entered promiscuous mode [ 29.290917][ T4722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.290940][ T4722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.290953][ T4722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.291855][ T4722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.291862][ T4722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.291875][ T4722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.301745][ T4727] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.301806][ T4727] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.301858][ T4727] bridge_slave_1: entered allmulticast mode [ 29.302324][ T4727] bridge_slave_1: entered promiscuous mode [ 29.321465][ T4722] hsr_slave_0: entered promiscuous mode [ 29.321875][ T4722] hsr_slave_1: entered promiscuous mode [ 29.333701][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.335288][ T4713] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.337223][ T4713] bridge_slave_0: entered allmulticast mode [ 29.339033][ T4713] bridge_slave_0: entered promiscuous mode [ 29.342402][ T4727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.343447][ T4727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.348651][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.348853][ T4713] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.348913][ T4713] bridge_slave_1: entered allmulticast mode [ 29.349330][ T4713] bridge_slave_1: entered promiscuous mode [ 29.370488][ T4727] team0: Port device team_slave_0 added [ 29.371466][ T4727] team0: Port device team_slave_1 added [ 29.374676][ T4713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.375655][ T4713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.408253][ T4727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.408279][ T4727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.408292][ T4727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.409070][ T4727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.409078][ T4727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.409091][ T4727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.419404][ T4713] team0: Port device team_slave_0 added [ 29.438100][ T4713] team0: Port device team_slave_1 added [ 29.443090][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.443167][ T4712] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.443226][ T4712] bridge_slave_0: entered allmulticast mode [ 29.443678][ T4712] bridge_slave_0: entered promiscuous mode [ 29.444890][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.444909][ T4712] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.444955][ T4712] bridge_slave_1: entered allmulticast mode [ 29.445392][ T4712] bridge_slave_1: entered promiscuous mode [ 29.458887][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.458913][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.458927][ T4713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.459568][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.459575][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.459590][ T4713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.461313][ T4712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.462395][ T4712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.490665][ T4727] hsr_slave_0: entered promiscuous mode [ 29.490989][ T4727] hsr_slave_1: entered promiscuous mode [ 29.491193][ T4727] debugfs: 'hsr0' already exists in 'hsr' [ 29.491243][ T4727] Cannot create hsr debugfs directory [ 29.504332][ T4712] team0: Port device team_slave_0 added [ 29.505718][ T4713] hsr_slave_0: entered promiscuous mode [ 29.506026][ T4713] hsr_slave_1: entered promiscuous mode [ 29.506232][ T4713] debugfs: 'hsr0' already exists in 'hsr' [ 29.506243][ T4713] Cannot create hsr debugfs directory [ 29.512446][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.513820][ T4719] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.515190][ T4719] bridge_slave_0: entered allmulticast mode [ 29.516832][ T4719] bridge_slave_0: entered promiscuous mode [ 29.517698][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.517728][ T4719] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.517816][ T4719] bridge_slave_1: entered allmulticast mode [ 29.518218][ T4719] bridge_slave_1: entered promiscuous mode [ 29.526788][ T4712] team0: Port device team_slave_1 added [ 29.547639][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.547666][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.547680][ T4712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.554052][ T4719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.558133][ T4719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.563900][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.563927][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.563942][ T4712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.589343][ T4712] hsr_slave_0: entered promiscuous mode [ 29.591130][ T4712] hsr_slave_1: entered promiscuous mode [ 29.592408][ T4712] debugfs: 'hsr0' already exists in 'hsr' [ 29.593520][ T4712] Cannot create hsr debugfs directory [ 29.595339][ T4719] team0: Port device team_slave_0 added [ 29.596152][ T4719] team0: Port device team_slave_1 added [ 29.623213][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.623239][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.623251][ T4719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.624149][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.624158][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.624169][ T4719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.667408][ T4722] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.670946][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.681199][ T4719] hsr_slave_0: entered promiscuous mode [ 29.682626][ T4719] hsr_slave_1: entered promiscuous mode [ 29.683964][ T4719] debugfs: 'hsr0' already exists in 'hsr' [ 29.685193][ T4719] Cannot create hsr debugfs directory [ 29.686476][ T4722] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.689517][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.689891][ T4722] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.691707][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.695421][ T4722] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.698036][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.743773][ T4722] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.743824][ T4722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.743970][ T4722] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.743998][ T4722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.749516][ T4727] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.750745][ T4727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.751058][ T4727] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.753082][ T4727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.757711][ T4727] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.760388][ T4727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.760707][ T4727] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.762361][ T4727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.784342][ T4727] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.784391][ T4727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.784483][ T4727] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.784516][ T4727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.790649][ T4713] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.793325][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.796938][ T4713] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.799247][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.799558][ T4713] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.801479][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.807494][ T4713] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.810027][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.829792][ T4722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.834753][ T3853] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.836264][ T3853] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.839314][ T3853] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.840653][ T3853] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.852222][ T4722] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.852943][ T4712] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.854605][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.855221][ T4712] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.856411][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.858027][ T4727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.870295][ T4712] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.872629][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.878905][ T3853] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.878982][ T3853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.879634][ T3853] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.879658][ T3853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.888378][ T4712] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.891240][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.895322][ T4727] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.904339][ T4722] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.909516][ T4719] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.911762][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.914963][ T4719] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.917420][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.920123][ T4719] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.922301][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.927852][ T3853] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.927891][ T3853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.928387][ T4719] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.933811][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.962006][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.962057][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.973013][ T4712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.982580][ T4712] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.987411][ T4713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.997285][ T3805] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.997331][ T3805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.003367][ T3805] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.003410][ T3805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.015700][ T4713] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.028016][ T4712] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.028056][ T4712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.036352][ T1437] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.036379][ T1437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.036936][ T1437] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.036958][ T1437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.072770][ T4713] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.106985][ T4719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.131005][ T4719] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.161102][ T924] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.161152][ T924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.161954][ T924] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.161974][ T924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.168355][ T4719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.182233][ T4722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.193887][ T4722] veth0_vlan: entered promiscuous mode [ 30.229600][ T4722] veth1_vlan: entered promiscuous mode [ 30.237211][ T4722] veth0_macvtap: entered promiscuous mode [ 30.243491][ T4722] veth1_macvtap: entered promiscuous mode [ 30.254571][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.263989][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.284959][ T4727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.287894][ T4713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.324442][ T4713] veth0_vlan: entered promiscuous mode [ 30.337396][ T4713] veth1_vlan: entered promiscuous mode [ 30.342182][ T4712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.347640][ T3805] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.347672][ T3805] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.378494][ T4713] veth0_macvtap: entered promiscuous mode [ 30.381246][ T4713] veth1_macvtap: entered promiscuous mode [ 30.384148][ T4727] veth0_vlan: entered promiscuous mode [ 30.394507][ T4727] veth1_vlan: entered promiscuous mode [ 30.397969][ T3805] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.398013][ T3805] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.403321][ T4719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.405936][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.409028][ T3805] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.411913][ T3805] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.413719][ T3805] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.415412][ T3805] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.425048][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.436155][ T4712] veth0_vlan: entered promiscuous mode [ 30.445511][ T4712] veth1_vlan: entered promiscuous mode [ 30.471399][ T4727] veth0_macvtap: entered promiscuous mode [ 30.473794][ T4727] veth1_macvtap: entered promiscuous mode [ 30.479534][ T1437] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.481234][ T3734] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.481257][ T3734] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.481274][ T3734] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.488268][ T1437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.488279][ T1437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.506538][ T4712] veth0_macvtap: entered promiscuous mode [ 30.507826][ T4712] veth1_macvtap: entered promiscuous mode [ 30.516577][ T4727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.517669][ T4727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.520628][ T924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.520639][ T924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.524469][ T4722] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.530849][ T4719] veth0_vlan: entered promiscuous mode [ 30.533263][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.537046][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.544631][ T4719] veth1_vlan: entered promiscuous mode [ 30.546107][ T3805] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.546402][ T3805] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.546466][ T3805] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.547279][ T3805] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.547339][ T3805] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.547366][ T3805] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.553553][ T4719] veth0_macvtap: entered promiscuous mode [ 30.554748][ T4719] veth1_macvtap: entered promiscuous mode [ 30.559830][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.575640][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.600352][ T3805] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.601736][ T3805] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.601824][ T3805] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.601992][ T3805] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.602122][ T3805] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.602259][ T3805] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.642923][ T4894] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 30.667305][ T4894] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'. [ 30.678221][ T1437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.680919][ T1437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.684954][ T4894] loop0: detected capacity change from 0 to 512 [ 30.688367][ T4894] ======================================================= [ 30.688367][ T4894] WARNING: The mand mount option has been deprecated and [ 30.688367][ T4894] and is ignored by this kernel. Remove the mand [ 30.688367][ T4894] option from the mount to silence this warning. [ 30.688367][ T4894] ======================================================= [ 30.689936][ T4894] EXT4-fs: Ignoring removed oldalloc option [ 30.691564][ T4894] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 30.763628][ T4894] process 'syz.0.1' launched './file0' with NULL argv: empty string added [ 30.889629][ T4716] Bluetooth: hci3: command tx timeout [ 30.997358][ T4715] Bluetooth: hci4: command tx timeout [ 30.997675][ T4715] Bluetooth: hci2: command tx timeout [ 30.997888][ T4715] Bluetooth: hci0: command tx timeout [ 30.998078][ T4715] Bluetooth: hci1: command tx timeout [ 31.131857][ T3805] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.131949][ T924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.131970][ T924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.137159][ T3805] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.155625][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.157319][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.176231][ T4900] loop0: detected capacity change from 0 to 8 [ 31.176628][ T4900] squashfs: Unknown parameter '%' [ 31.205063][ T4902] Invalid source name [ 31.206048][ T4902] UBIFS error (pid: 4902): cannot open "usb0", error -22 [ 31.211644][ T3805] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.211677][ T3805] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.253946][ T3805] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.253981][ T3805] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.765288][ T4916] vlan2: entered promiscuous mode [ 31.993457][ T4916] hsr0: entered promiscuous mode [ 31.996530][ T4916] vlan2: entered allmulticast mode [ 31.996543][ T4916] hsr0: entered allmulticast mode [ 31.996552][ T4916] hsr_slave_0: entered allmulticast mode [ 31.996565][ T4916] hsr_slave_1: entered allmulticast mode [ 32.052835][ T4916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9'. [ 32.055009][ T4916] hsr_slave_0: left promiscuous mode [ 32.056181][ T4916] hsr_slave_1: left promiscuous mode [ 32.169326][ T4921] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9'. [ 32.231856][ T4929] syz.2.13 uses obsolete (PF_INET,SOCK_PACKET) [ 32.256939][ T4925] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11'. [ 32.355708][ T4927] loop0: detected capacity change from 0 to 1024 [ 32.377383][ T4927] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 32.384529][ T4927] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.12: corrupted xattr block 84: invalid header [ 32.391201][ T4927] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.12: corrupted xattr block 84: invalid header [ 32.397989][ T4927] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.12: corrupted xattr block 84: invalid header [ 32.403884][ T4927] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.12: corrupted xattr block 84: invalid header [ 32.411973][ T4927] EXT4-fs error (device loop0): ext4_free_blocks:6718: comm syz.0.12: Freeing blocks not in datazone - block = 0, count = 16 [ 32.417235][ T13] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 112: padding at end of block bitmap is not set [ 32.418058][ T13] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 32.418074][ T13] EXT4-fs (loop0): This should not happen!! Data will be lost [ 32.418074][ T13] [ 32.418081][ T13] EXT4-fs (loop0): Total free blocks count 0 [ 32.418088][ T13] EXT4-fs (loop0): Free/Dirty block details [ 32.418097][ T13] EXT4-fs (loop0): free_blocks=16 [ 32.418106][ T13] EXT4-fs (loop0): dirty_blocks=16 [ 32.418112][ T13] EXT4-fs (loop0): Block reservation details [ 32.418117][ T13] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 32.436535][ T4927] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz.0.12: data will be lost [ 32.443293][ T4927] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 32.703407][ T4956] loop0: detected capacity change from 0 to 256 [ 32.704707][ T4956] vfat: Unknown parameter 'r(8B^mXumtail' [ 32.721793][ T4956] loop0: detected capacity change from 0 to 512 [ 32.723674][ T4956] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.746894][ T4956] EXT4-fs (loop0): 1 orphan inode deleted [ 32.747822][ T4956] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.788927][ T12] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 32.789003][ T12] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:0: Failed to release dquot type 1 [ 32.789562][ T12] EXT4-fs (loop0): Remounting filesystem read-only [ 32.790934][ T4956] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.911152][ T4979] ip_tables: iptables: counters copy to user failed while replacing table [ 32.950675][ T4985] loop1: detected capacity change from 0 to 1024 [ 32.960170][ T4989] loop0: detected capacity change from 0 to 512 [ 32.966196][ T4985] EXT4-fs: Ignoring removed mblk_io_submit option [ 32.966232][ T4985] EXT4-fs: Ignoring removed oldalloc option [ 32.969020][ T4716] Bluetooth: hci3: command tx timeout [ 32.984248][ T4985] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 32.991172][ T4989] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.998820][ T4989] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.24: corrupted xattr block 33: invalid header [ 33.006206][ T4989] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.24: corrupted xattr block 33: invalid header [ 33.009368][ T4989] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.24: corrupted xattr block 33: invalid header [ 33.020989][ T4985] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm syz.1.25: lblock 0 mapped to illegal pblock 0 (length 1) [ 33.029511][ T4985] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 33.029549][ T4985] EXT4-fs (loop1): This should not happen!! Data will be lost [ 33.029549][ T4985] [ 33.036093][ T4985] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.25: bg 0: block 112: padding at end of block bitmap is not set [ 33.058686][ T4716] Bluetooth: hci1: command tx timeout [ 33.058727][ T4716] Bluetooth: hci0: command tx timeout [ 33.058753][ T4716] Bluetooth: hci2: command tx timeout [ 33.058771][ T4716] Bluetooth: hci4: command tx timeout [ 33.072841][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 28 [ 33.072874][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 33.072874][ T12] [ 33.072896][ T12] EXT4-fs (loop1): Total free blocks count 0 [ 33.072910][ T12] EXT4-fs (loop1): Free/Dirty block details [ 33.072923][ T12] EXT4-fs (loop1): free_blocks=0 [ 33.072936][ T12] EXT4-fs (loop1): dirty_blocks=64 [ 33.072946][ T12] EXT4-fs (loop1): Block reservation details [ 33.076932][ T4722] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 33.078290][ T12] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 33.083687][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 33.083706][ T12] EXT4-fs (loop0): This should not happen!! Data will be lost [ 33.083706][ T12] [ 33.083714][ T12] EXT4-fs (loop0): Total free blocks count 0 [ 33.083722][ T12] EXT4-fs (loop0): Free/Dirty block details [ 33.083865][ T12] EXT4-fs (loop0): free_blocks=65280 [ 33.083879][ T12] EXT4-fs (loop0): dirty_blocks=31 [ 33.083890][ T12] EXT4-fs (loop0): Block reservation details [ 33.083897][ T12] EXT4-fs (loop0): i_reserved_data_blocks=31 [ 33.084686][ T4713] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 33.088165][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.118270][ T5003] loop0: detected capacity change from 0 to 2048 [ 33.123995][ T5003] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=4 [ 33.126183][ T5003] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 33.130764][ T5003] EXT4-fs (loop0): mount failed [ 33.138990][ T5003] warning: `syz.0.27' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 33.222399][ T5009] loop0: detected capacity change from 0 to 512 [ 33.222788][ T5009] EXT4-fs: Ignoring removed mblk_io_submit option [ 33.226441][ T5009] EXT4-fs: journaled quota format not specified [ 33.245346][ T5003] fuse: fd is not a fuse device [ 33.316668][ T5013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.316886][ T5013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.320421][ T5013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.320580][ T5013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.542144][ T5036] 9p: Bad value for 'rfdno' [ 33.559314][ T5036] evm: overlay not supported [ 33.575068][ T5034] netlink: 'syz.4.35': attribute type 39 has an invalid length. [ 33.791174][ T5043] mmap: syz.4.37 (5043) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 33.869856][ T5045] No such timeout policy "syz1" [ 33.881590][ T5041] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 33.933598][ T5048] synth uevent: /bus/platform/drivers/usb-conn-gpio: unknown uevent action string [ 33.982929][ T5053] loop4: detected capacity change from 0 to 2048 [ 33.993602][ T5053] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.001753][ T5053] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.007667][ T5057] IPVS: set_ctl: invalid protocol: 51 172.20.20.20:20003 [ 34.019796][ T5057] syzkaller1: entered promiscuous mode [ 34.019831][ T5057] syzkaller1: entered allmulticast mode [ 34.109641][ T5059] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.42: invalid indirect mapped block 4294967295 (level 1) [ 34.109751][ T5059] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 34.116367][ T5059] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.42: invalid indirect mapped block 4294967295 (level 1) [ 34.116408][ T5059] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 34.118666][ C0] EXT4-fs (loop4): error count since last fsck: 2 [ 34.118679][ C0] EXT4-fs (loop4): initial error at time 34: ext4_free_branches:1023: inode 11 [ 34.118698][ C0] EXT4-fs (loop4): last error at time 34: ext4_free_branches:1023: inode 11 [ 34.129306][ T5059] EXT4-fs (loop4): 2 truncates cleaned up [ 34.129820][ T5059] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.179927][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.269624][ T5069] ext4: Unknown parameter 'fowner<00000000000000000000' [ 34.289953][ T5071] netlink: 32 bytes leftover after parsing attributes in process `syz.3.46'. [ 34.295692][ T5073] xt_hashlimit: size too large, truncated to 1048576 [ 34.362889][ T5073] netlink: 'syz.2.47': attribute type 21 has an invalid length. [ 34.364569][ T5073] netlink: 128 bytes leftover after parsing attributes in process `syz.2.47'. [ 34.366345][ T5073] netlink: 43 bytes leftover after parsing attributes in process `syz.2.47'. [ 34.428434][ T5095] hsr0: entered allmulticast mode [ 34.428472][ T5095] hsr_slave_0: entered allmulticast mode [ 34.428486][ T5095] hsr_slave_1: entered allmulticast mode [ 34.429277][ T5095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.52'. [ 34.438367][ T5095] hsr_slave_0: left promiscuous mode [ 34.439782][ T5095] hsr_slave_1: left promiscuous mode [ 34.449452][ T5095] hsr0 (unregistering): left allmulticast mode [ 34.502146][ T5099] netlink: 'syz.4.53': attribute type 11 has an invalid length. [ 34.526967][ T5104] random: crng reseeded on system resumption [ 34.589645][ T5114] gadgetfs: bound to dummy_udc driver [ 34.681022][ T5119] EXT4-fs: Ignoring removed bh option [ 34.681060][ T5119] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.693570][ T5119] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 34.693617][ T5119] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 34.693636][ T5119] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.60: Corrupt directory, running e2fsck is recommended [ 34.694286][ T5119] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 34.694401][ T5119] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.60: corrupted in-inode xattr: e_name out of bounds [ 34.694419][ T5119] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 34.694757][ T5119] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.60: couldn't read orphan inode 15 (err -117) [ 34.694819][ T5119] loop3: lost filesystem error report for type 5 error -117 [ 34.695392][ T5119] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.721378][ T5119] netlink: 108 bytes leftover after parsing attributes in process `syz.3.60'. [ 34.740032][ T5125] fuse: fd is not a fuse device [ 35.058631][ T4716] Bluetooth: hci3: command 0x040f tx timeout [ 35.125936][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.129413][ T4715] Bluetooth: hci4: command 0x040f tx timeout [ 35.130115][ T4715] Bluetooth: hci2: command tx timeout [ 35.130134][ T4715] Bluetooth: hci0: command tx timeout [ 35.130148][ T4715] Bluetooth: hci1: command tx timeout [ 35.181880][ T5141] netlink: 316 bytes leftover after parsing attributes in process `syz.0.65'. [ 35.397066][ T5158] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.443495][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.523808][ T5168] 9p: Bad value for 'rfdno' [ 35.563899][ T5170] ext4: Invalid gid '0x00000000ffffffff' [ 35.621615][ T30] audit: type=1326 audit(35.600:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5174 comm="syz.4.78" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=167 compat=0 ip=0xffffa4f79228 code=0x0 [ 35.695467][ T5184] set_capacity_and_notify: 6 callbacks suppressed [ 35.699686][ T5184] loop2: detected capacity change from 0 to 512 [ 35.710061][ T5182] loop4: detected capacity change from 0 to 512 [ 35.714578][ T5184] EXT4-fs: Ignoring removed mblk_io_submit option [ 35.744548][ T5182] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.751572][ T5184] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.793375][ T5184] faux_driver vgem: [drm] Unknown color mode 265; guessing buffer size. [ 35.814047][ T5192] loop3: detected capacity change from 0 to 4096 [ 35.814353][ T5192] EXT4-fs: Ignoring removed nobh option [ 35.819128][ T5192] EXT4-fs (loop3): Test dummy encryption mode enabled [ 35.822321][ T5192] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.824394][ T5192] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.870473][ T5192] __nla_validate_parse: 2 callbacks suppressed [ 35.870521][ T5192] netlink: 92 bytes leftover after parsing attributes in process `syz.3.81'. [ 35.915792][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.956908][ T4727] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.981430][ T5200] loop1: detected capacity change from 0 to 1024 [ 35.983097][ T5200] EXT4-fs: Ignoring removed bh option [ 35.987396][ T5201] loop4: detected capacity change from 0 to 2048 [ 36.020303][ T5200] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 36.066341][ T5200] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.081611][ T5209] netlink: 'syz.4.86': attribute type 1 has an invalid length. [ 36.220159][ T5212] loop0: detected capacity change from 0 to 512 [ 36.223632][ T5212] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 36.230279][ T5212] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 36.240374][ T5210] netlink: 'syz.1.85': attribute type 18 has an invalid length. [ 36.302185][ T5212] EXT4-fs (loop0): 1 truncate cleaned up [ 36.302676][ T5212] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.334644][ T5222] netlink: ct family unspecified [ 36.334688][ T5222] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 36.342286][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.605456][ T5228] netlink: 'syz.0.91': attribute type 1 has an invalid length. [ 36.607463][ T5228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.91'. [ 36.710393][ T5233] loop0: detected capacity change from 0 to 512 [ 36.712464][ T5233] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 36.716606][ T5233] EXT4-fs error (device loop0): ext4_init_orphan_info:618: comm syz.0.93: orphan file block 0: bad magic [ 36.719246][ T5233] loop0: lost filesystem error report for type 5 error -117 [ 36.719848][ T5233] EXT4-fs (loop0): mount failed [ 36.894084][ T4722] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.957184][ T5243] loop0: detected capacity change from 0 to 512 [ 36.963057][ T5243] EXT4-fs (loop0): Number of reserved GDT blocks insanely large: 65535 [ 37.104539][ T5253] netlink: 28 bytes leftover after parsing attributes in process `syz.3.99'. [ 37.104585][ T5253] netlink: 28 bytes leftover after parsing attributes in process `syz.3.99'. [ 37.114975][ T5253] Zero length message leads to an empty skb [ 37.138774][ T4721] Bluetooth: hci3: command 0x040f tx timeout [ 37.208769][ T4721] Bluetooth: hci1: command 0x0419 tx timeout [ 37.208791][ T4715] Bluetooth: hci0: command tx timeout [ 37.209403][ T4721] Bluetooth: hci2: command tx timeout [ 37.209442][ T4721] Bluetooth: hci4: command 0x040f tx timeout [ 37.277903][ T5261] tipc: Started in network mode [ 37.277941][ T5261] tipc: Node identity 6ad67a73282d, cluster identity 4711 [ 37.278927][ T5261] tipc: Enabled bearer , priority 0 [ 37.281334][ T5261] syzkaller0: entered promiscuous mode [ 37.281348][ T5261] syzkaller0: entered allmulticast mode [ 37.330479][ T5261] tipc: Resetting bearer [ 37.355129][ T5260] tipc: Resetting bearer [ 37.451146][ T5274] loop3: detected capacity change from 0 to 2048 [ 37.471891][ T5274] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.492867][ T4807] IPVS: starting estimator thread 0... [ 37.508185][ T5260] tipc: Disabling bearer [ 37.598597][ T5278] IPVS: using max 60 ests per chain, 144000 per kthread [ 37.622923][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.627352][ T5280] loop4: detected capacity change from 0 to 512 [ 37.635203][ T5280] EXT4-fs (loop4): Test dummy encryption mode enabled [ 37.635244][ T5280] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 37.640312][ T5280] EXT4-fs (loop4): 1 truncate cleaned up [ 37.648804][ T5280] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.743047][ T5289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.107'. [ 37.801914][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.118975][ T5306] netlink: 'syz.3.112': attribute type 8 has an invalid length. [ 38.169813][ T5306] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 38.169853][ T5306] overlayfs: overlapping lowerdir path [ 38.776329][ T5348] netlink: 824 bytes leftover after parsing attributes in process `syz.1.125'. [ 38.784209][ T5349] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 38.789136][ T5349] EXT4-fs (loop4): orphan file too big: 4294967295 [ 38.790682][ T5349] EXT4-fs (loop4): mount failed [ 38.840454][ T5355] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 39.057037][ T5371] Injecting memory failure for pfn 0x137d20 at process virtual address 0x20000000 [ 39.109658][ T5371] Memory failure: 0x137d20: Failed to invalidate [ 39.109690][ T5371] Memory failure: 0x137d20: dirty LRU page still referenced by 2 users [ 39.109947][ T5371] Memory failure: 0x137d20: recovery action for dirty LRU page: Failed [ 39.109991][ T24] IPVS: starting estimator thread 0... [ 39.198758][ T5374] IPVS: using max 60 ests per chain, 144000 per kthread [ 39.209374][ T4718] Bluetooth: hci3: command 0x040f tx timeout [ 39.299249][ T4715] Bluetooth: hci1: command 0x0419 tx timeout [ 39.300525][ T4718] Bluetooth: hci4: command 0x040f tx timeout [ 39.313107][ T5382] netlink: 144 bytes leftover after parsing attributes in process `syz.3.135'. [ 39.911762][ T5401] Dev loop9: unable to read RDB block 7 [ 39.911799][ T5401] loop9: unable to read partition table [ 39.912726][ T5401] loop9: partition table beyond EOD, truncated [ 39.912750][ T5401] loop_reread_partitions: partition scan of loop9 () failed (rc=-5) [ 40.030317][ T5409] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 40.032320][ T5409] unable to read xattr id index table [ 40.034157][ T5409] SQUASHFS error: zlib decompression failed, data probably corrupt [ 40.035822][ T5409] SQUASHFS error: Failed to read block 0x9b: -5 [ 40.036994][ T5409] SQUASHFS error: Unable to read metadata cache entry [99] [ 40.038383][ T5409] SQUASHFS error: Unable to read inode 0x127 [ 40.046217][ T5410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.143'. [ 40.116458][ T5410] bond1 (unregistering): Released all slaves [ 40.152067][ T5414] EXT4-fs: Ignoring removed bh option [ 40.163773][ T5415] netlink: 'syz.3.145': attribute type 1 has an invalid length. [ 40.175466][ T5414] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.332267][ T5423] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 40.339645][ T5424] Bluetooth: MGMT ver 1.23 [ 40.340565][ T5424] 8021q: VLANs not supported on ip_vti0 [ 40.351094][ T4727] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.366029][ T5425] /dev/loop3: Can't open blockdev [ 40.443050][ T5423] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.449783][ T5423] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.147: corrupted xattr block 33: invalid header [ 40.465622][ T5430] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 40.468514][ T5423] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.147: corrupted xattr block 33: invalid header [ 40.474415][ T5423] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.147: corrupted xattr block 33: invalid header [ 40.486918][ T5430] EXT4-fs warning (device loop4): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop4. [ 40.523464][ T5436] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.579780][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.735455][ T5452] set_capacity_and_notify: 10 callbacks suppressed [ 40.735497][ T5452] loop4: detected capacity change from 0 to 8192 [ 41.090187][ T5452] loop4: p1[EZD] p3 p4 [ 41.090219][ T5452] loop4: partition table partially beyond EOD, truncated [ 41.121039][ T5452] loop4: p3 start 150994944 is beyond EOD, truncated [ 41.121084][ T5452] loop4: p4 size 50331648 extends beyond EOD, truncated [ 41.308601][ T4716] Bluetooth: hci3: command 0x040f tx timeout [ 41.370380][ T4718] Bluetooth: hci1: command 0x0419 tx timeout [ 41.372749][ T4716] Bluetooth: hci4: command 0x040f tx timeout [ 41.392508][ T5466] loop0: detected capacity change from 0 to 256 [ 41.422192][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.455213][ T30] audit: type=1326 audit(41.420:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5468 comm="syz.4.156" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4f79228 code=0x0 [ 41.558812][ T5471] loop2: detected capacity change from 0 to 8192 [ 41.781121][ T5486] loop4: detected capacity change from 0 to 1024 [ 41.784091][ T5488] loop1: detected capacity change from 0 to 256 [ 41.789089][ T5486] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.791839][ T5488] vfat: Unknown parameter 'nonu' [ 41.806136][ T5488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.164'. [ 41.831907][ T5490] bond1: down delay (257) is not a multiple of miimon (41943040), value rounded to 0 ms [ 41.831951][ T5490] bond1: peer notification delay (7) is not a multiple of miimon (41943040), value rounded to 0 ms [ 41.836779][ T5486] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 41.838485][ T5486] System zones: 0-1, 3-36 [ 41.839180][ T5488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.164'. [ 41.839203][ T5488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.164'. [ 41.839227][ T5488] netlink: 'syz.1.164': attribute type 19 has an invalid length. [ 41.839241][ T5488] netlink: 'syz.1.164': attribute type 20 has an invalid length. [ 41.846616][ T5490] netlink: 'syz.3.158': attribute type 3 has an invalid length. [ 41.852260][ T5486] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.893445][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.925271][ T5499] loop2: detected capacity change from 0 to 1024 [ 41.927862][ T5502] loop1: detected capacity change from 0 to 256 [ 41.947886][ T4728] udevd[4728]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 41.956093][ T5179] udevd[5179]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 41.960637][ T5502] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 41.963528][ T5502] FAT-fs (loop1): Filesystem has been set read-only [ 41.965331][ T5502] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 41.967208][ T5502] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 41.970633][ T5502] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 41.972237][ T5502] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 41.973919][ T5502] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 41.975563][ T5502] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 41.977196][ T5502] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 41.982167][ T5502] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 41.982281][ T5502] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 41.999764][ T5499] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.004098][ T5499] fuse: Unknown parameter 'f' [ 42.014392][ T30] audit: type=1400 audit(297.983:4): lsm=SMACK fn=smack_inode_permission action=denied subject="_" object="geneve" requested=x pid=5498 comm="syz.2.166" name="file0" dev="loop2" ino=12 [ 42.028485][ T5510] loop4: detected capacity change from 0 to 512 [ 42.101461][ T5515] loop3: detected capacity change from 0 to 512 [ 42.104312][ T5515] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 42.195584][ T5515] EXT4-fs error (device loop3): __ext4_iget:5533: inode #11: block 2: comm syz.3.171: invalid block [ 42.195645][ T5515] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 42.196251][ T5515] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.171: couldn't read orphan inode 11 (err -117) [ 42.196286][ T5515] loop3: lost filesystem error report for type 5 error -117 [ 42.347571][ T5515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.038854][ T5518] WARNING! power/level is deprecated; use power/control instead [ 43.104040][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.185542][ T5531] netlink: 'syz.3.176': attribute type 83 has an invalid length. [ 43.223544][ T5533] loop1: detected capacity change from 0 to 512 [ 43.228456][ T5533] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 43.237895][ T5533] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.179: bg 0: block 104: invalid block bitmap [ 43.237937][ T5533] loop1: lost filesystem error report for type 5 error -117 [ 43.238557][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 43.238581][ C0] EXT4-fs (loop1): initial error at time 299: ext4_validate_block_bitmap:432 [ 43.238599][ C0] EXT4-fs (loop1): last error at time 299: ext4_validate_block_bitmap:432 [ 43.238890][ T5533] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 43.238902][ T5533] loop1: lost filesystem error report for type 5 error -117 [ 43.239034][ T5533] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.179: invalid indirect mapped block 1 (level 1) [ 43.239047][ T5533] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 43.239282][ T5533] EXT4-fs (loop1): 1 truncate cleaned up [ 43.241225][ T5533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.287295][ T4722] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.296354][ T5538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.180'. [ 43.399987][ T5548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 43.400462][ T5550] netlink: 'syz.1.184': attribute type 1 has an invalid length. [ 43.404750][ T5548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 43.412317][ T5550] 8021q: adding VLAN 0 to HW filter on device bond1 [ 43.429834][ T5550] vlan2: entered allmulticast mode [ 43.429866][ T5550] bond1: entered allmulticast mode [ 43.441480][ T5550] bond1: (slave dummy0): making interface the new active one [ 43.441512][ T5550] dummy0: entered allmulticast mode [ 43.444278][ T5550] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 43.452427][ T5550] netlink: 'syz.1.184': attribute type 10 has an invalid length. [ 43.452459][ T5550] netlink: 40 bytes leftover after parsing attributes in process `syz.1.184'. [ 43.452525][ T5550] dummy0: entered promiscuous mode [ 43.458062][ T5550] bond1: (slave dummy0): Releasing active interface [ 43.458092][ T5550] dummy0: left allmulticast mode [ 43.529495][ T5559] veth0_to_bond: entered allmulticast mode [ 43.535245][ T5559] binder: BINDER_SET_CONTEXT_MGR already set [ 43.535278][ T5559] binder: 5558:5559 ioctl 4018620d 20004a80 returned -16 [ 43.535402][ T5559] binder: 5558:5559 context manager tried to acquire desc 0 [ 43.535416][ T5559] binder: 5558:5559 ioctl c0306201 200004c0 returned -22 [ 43.535556][ T5559] binder: 5558:5559 got transaction to invalid handle, 1 [ 43.535590][ T5559] binder: 5558:5559 cannot find target node [ 43.535611][ T5559] binder: 5558:5559 transaction call to 0:0 failed 4/29201/-22, code 0 size 0-0 line 3252 [ 43.535739][ T5559] binder: 5558:5559 BC_FREE_BUFFER no match for buffer at offset ffffffffdf003000 [ 43.539383][ T5559] EXT4-fs: Ignoring removed nobh option [ 43.554963][ T5559] EXT4-fs (loop1): invalid first ino: 0 [ 43.591806][ T4727] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.598173][ T10] binder: undelivered TRANSACTION_ERROR: 29201 [ 44.426438][ T5564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.189'. [ 44.504284][ T4086] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.512807][ T4718] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 44.515188][ T4718] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 44.517406][ T4718] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 44.525234][ T4718] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 44.526895][ T4718] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 44.564965][ T5564] netlink: 24 bytes leftover after parsing attributes in process `syz.1.189'. [ 44.595808][ T5573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.192'. [ 44.619776][ T4086] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.635438][ T5573] bridge0: port 3(syz_tun) entered blocking state [ 44.635495][ T5573] bridge0: port 3(syz_tun) entered disabled state [ 44.635616][ T5573] syz_tun: entered allmulticast mode [ 44.636206][ T5573] syz_tun: entered promiscuous mode [ 44.636452][ T5573] bridge0: port 3(syz_tun) entered blocking state [ 44.636482][ T5573] bridge0: port 3(syz_tun) entered forwarding state [ 44.638925][ T5573] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 44.646073][ T5582] tc_dump_action: action bad kind [ 44.738641][ T30] audit: type=1326 audit(300.703:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5590 comm="syz.0.197" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2b79228 code=0x7ffc0000 [ 44.738695][ T30] audit: type=1326 audit(300.703:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5590 comm="syz.0.197" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2b79228 code=0x7ffc0000 [ 44.738714][ T30] audit: type=1326 audit(300.703:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5590 comm="syz.0.197" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffffa2b79228 code=0x7ffc0000 [ 44.738729][ T30] audit: type=1326 audit(300.703:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5590 comm="syz.0.197" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffa2b78f20 code=0x7ffc0000 [ 44.738744][ T30] audit: type=1326 audit(300.703:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5590 comm="syz.0.197" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffa2b5c0ec code=0x7ffc0000 [ 44.738758][ T30] audit: type=1326 audit(300.703:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5590 comm="syz.0.197" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=215 compat=0 ip=0xffffa2b78fcc code=0x7ffc0000 [ 44.738772][ T30] audit: type=1326 audit(300.703:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5590 comm="syz.0.197" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa2b5c0ec code=0x7ffc0000 [ 44.738786][ T30] audit: type=1326 audit(300.703:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5590 comm="syz.0.197" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffa2b78e50 code=0x7ffc0000 [ 44.770131][ T5591] EXT4-fs: Ignoring removed oldalloc option [ 44.770156][ T5591] EXT4-fs: Ignoring removed bh option [ 44.792549][ T5591] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 44.800334][ T5591] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.197: lblock 0 mapped to illegal pblock 0 (length 1) [ 44.804408][ T5591] EXT4-fs (loop0): Remounting filesystem read-only [ 44.812172][ T4086] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.834333][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 44.874868][ T5606] netlink: 28 bytes leftover after parsing attributes in process `syz.3.203'. [ 44.891350][ T4086] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.901185][ T5606] bridge0: port 4(veth0) entered blocking state [ 44.901236][ T5606] bridge0: port 4(veth0) entered disabled state [ 44.901355][ T5606] veth0: entered allmulticast mode [ 44.901869][ T5606] veth0: entered promiscuous mode [ 44.902070][ T5606] bridge0: port 4(veth0) entered blocking state [ 44.902099][ T5606] bridge0: port 4(veth0) entered forwarding state [ 45.004342][ T5621] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.028355][ T5621] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.208: iget: bad extra_isize 90 (inode size 256) [ 45.028401][ T5621] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 45.028759][ C0] EXT4-fs (loop3): initial error at time 300: ext4_xattr_inode_iget:441: inode 11 [ 45.028798][ C0] EXT4-fs (loop3): last error at time 300: ext4_xattr_inode_iget:441: inode 11 [ 45.036333][ T5621] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.208: error while reading EA inode 11 err=-117 [ 45.036363][ T5621] loop3: lost filesystem error report for type 5 error -117 [ 45.039065][ T5621] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.208: iget: bad extra_isize 90 (inode size 256) [ 45.039097][ T5621] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 45.043311][ T5621] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.208: error while reading EA inode 11 err=-117 [ 45.043342][ T5621] loop3: lost filesystem error report for type 5 error -117 [ 45.047321][ T5621] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.208: iget: bad extra_isize 90 (inode size 256) [ 45.047350][ T5621] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 45.051581][ T5621] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.208: error while reading EA inode 18 err=-117 [ 45.051614][ T5621] loop3: lost filesystem error report for type 5 error -117 [ 45.056319][ T5621] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.208: iget: bad extra_isize 90 (inode size 256) [ 45.056355][ T5621] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 45.060281][ T5621] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.208: error while reading EA inode 18 err=-117 [ 45.060312][ T5621] loop3: lost filesystem error report for type 5 error -117 [ 45.064700][ T5621] EXT4-fs (loop3): 1 orphan inode deleted [ 45.065154][ T5621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.093720][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.094026][ T5622] bond1: option lacp_active: invalid value (254) [ 45.110826][ T5622] bond1 (unregistering): Released all slaves [ 45.122342][ T5624] tipc: Started in network mode [ 45.122381][ T5624] tipc: Node identity 7f000001, cluster identity 4711 [ 45.122933][ T5624] tipc: Enabled bearer , priority 10 [ 45.203085][ T5568] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.203159][ T5568] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.203256][ T5568] bridge_slave_0: entered allmulticast mode [ 45.207809][ T5568] bridge_slave_0: entered promiscuous mode [ 45.208288][ T5640] overlay: ./bus is not a directory [ 45.215043][ T5624] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 45.215184][ T5624] tipc: Enabled bearer , priority 10 [ 45.215276][ T5628] tipc: Enabling of bearer rejected, already enabled [ 45.244434][ T4086] bridge_slave_1: left allmulticast mode [ 45.244475][ T4086] bridge_slave_1: left promiscuous mode [ 45.245004][ T4086] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.249700][ T4086] bridge_slave_0: left allmulticast mode [ 45.249736][ T4086] bridge_slave_0: left promiscuous mode [ 45.249815][ T4086] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.349387][ T4086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.372718][ T4086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.378337][ T5658] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 45.378364][ T5658] IPv6: NLM_F_CREATE should be set when creating new route [ 45.378436][ T5658] IPv6: NLM_F_CREATE should be set when creating new route [ 45.410766][ T4086] bond0 (unregistering): Released all slaves [ 45.412941][ T5568] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.413007][ T5568] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.413123][ T5568] bridge_slave_1: entered allmulticast mode [ 45.413620][ T5568] bridge_slave_1: entered promiscuous mode [ 45.434453][ T5568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.437639][ T5568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.476451][ T5568] team0: Port device team_slave_0 added [ 45.481833][ T5568] team0: Port device team_slave_1 added [ 45.635298][ T5568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.635332][ T5568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.635346][ T5568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.635992][ T5568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.636000][ T5568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.636013][ T5568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.725358][ T4404] 8021q: adding VLAN 0 to HW filter on device eth0 [ 45.771229][ T5693] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.771648][ T5693] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.786647][ T5702] netlink: 28 bytes leftover after parsing attributes in process `syz.0.226'. [ 45.792773][ T5568] hsr_slave_0: entered promiscuous mode [ 45.795720][ T5568] hsr_slave_1: entered promiscuous mode [ 45.797422][ T5568] debugfs: 'hsr0' already exists in 'hsr' [ 45.798762][ T5568] Cannot create hsr debugfs directory [ 45.858819][ T5706] netlink: 'syz.1.227': attribute type 2 has an invalid length. [ 45.887276][ T5708] set_capacity_and_notify: 4 callbacks suppressed [ 45.888613][ T5708] loop3: detected capacity change from 0 to 4096 [ 45.894760][ T5708] EXT4-fs (loop3): invalid first ino: 0 [ 45.912214][ T5706] |2;: entered promiscuous mode [ 45.932561][ T5568] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 45.935042][ T5568] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 45.936608][ T5568] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 45.938732][ T5568] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 45.940365][ T5568] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 45.942523][ T5568] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 45.944099][ T5568] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 45.946195][ T5568] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 46.127864][ T4086] hsr_slave_0: left promiscuous mode [ 46.130932][ T4086] hsr_slave_1: left promiscuous mode [ 46.132557][ T4086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.134405][ T4086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.137116][ T4086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.139782][ T4086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.145825][ T4086] veth1_macvtap: left promiscuous mode [ 46.147373][ T4086] veth0_macvtap: left promiscuous mode [ 46.222730][ T4086] team0 (unregistering): Port device team_slave_1 removed [ 46.226962][ T4086] team0 (unregistering): Port device team_slave_0 removed [ 46.285395][ T4404] 8021q: adding VLAN 0 to HW filter on device eth1 [ 46.286766][ T24] tipc: Node number set to 2130706433 [ 46.296310][ T5568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.308790][ T5568] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.312180][ T3734] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.312228][ T3734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.318051][ T924] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.318098][ T924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.478043][ T5568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.490531][ T4404] 8021q: adding VLAN 0 to HW filter on device eth2 [ 46.569232][ T4718] Bluetooth: hci4: command tx timeout [ 46.572911][ T5568] veth0_vlan: entered promiscuous mode [ 46.576240][ T5568] veth1_vlan: entered promiscuous mode [ 46.595129][ T5568] veth0_macvtap: entered promiscuous mode [ 46.597866][ T5568] veth1_macvtap: entered promiscuous mode [ 46.604532][ T5568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.608647][ T5568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.631358][ T4086] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.631403][ T4086] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.631426][ T4086] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.642214][ T924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.642243][ T924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.651352][ T924] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.658195][ T4086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.658226][ T4086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.678395][ T4404] 8021q: adding VLAN 0 to HW filter on device eth3 [ 48.648593][ T4718] Bluetooth: hci4: command tx timeout [ 50.728587][ T4718] Bluetooth: hci4: command tx timeout [ 52.808575][ T4718] Bluetooth: hci4: command tx timeout [ 59.613034][ T924] [ 59.613511][ T924] ====================================================== [ 59.614665][ T924] WARNING: possible circular locking dependency detected [ 59.615816][ T924] syzkaller #0 Tainted: G L [ 59.616839][ T924] ------------------------------------------------------ [ 59.618078][ T924] kworker/u8:4/924 is trying to acquire lock: [ 59.619159][ T924] ffff0000d1ae2938 (jbd2_handle){++++}-{0:0}, at: wait_transaction_locked+0x174/0x228 [ 59.620852][ T924] [ 59.620852][ T924] but task is already holding lock: [ 59.622180][ T924] ffff0000d1ae4c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x170/0x2dc [ 59.623971][ T924] [ 59.623971][ T924] which lock already depends on the new lock. [ 59.623971][ T924] [ 59.625765][ T924] [ 59.625765][ T924] the existing dependency chain (in reverse order) is: [ 59.627329][ T924] [ 59.627329][ T924] -> #2 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 59.628774][ T924] percpu_down_read_internal+0x5c/0x294 [ 59.629833][ T924] ext4_writepages+0x170/0x2dc [ 59.630699][ T924] do_writepages+0x284/0x47c [ 59.631571][ T924] __writeback_single_inode+0x140/0x1880 [ 59.632643][ T924] writeback_single_inode+0x400/0xb20 [ 59.633662][ T924] write_inode_now+0x170/0x208 [ 59.634563][ T924] iput+0x7cc/0xc2c [ 59.635313][ T924] ext4_xattr_block_set+0x1460/0x21e8 [ 59.636347][ T924] ext4_expand_extra_isize_ea+0xaf4/0x1384 [ 59.637451][ T924] __ext4_expand_extra_isize+0x2a4/0x378 [ 59.638564][ T924] __ext4_mark_inode_dirty+0x394/0x828 [ 59.639645][ T924] ext4_evict_inode+0x798/0xfb8 [ 59.640617][ T924] evict+0x4c0/0x74c [ 59.641353][ T924] iput+0x8f0/0xc2c [ 59.642080][ T924] ext4_process_orphan+0x24c/0x2c0 [ 59.643032][ T924] ext4_orphan_cleanup+0x7d4/0xd20 [ 59.644016][ T924] ext4_fill_super+0x4628/0x4e14 [ 59.644901][ T924] get_tree_bdev_flags+0x388/0x43c [ 59.645883][ T924] get_tree_bdev+0x2c/0x3c [ 59.646748][ T924] ext4_get_tree+0x28/0x38 [ 59.647610][ T924] vfs_get_tree+0x90/0x28c [ 59.648442][ T924] fc_mount+0x24/0xac [ 59.649217][ T924] do_new_mount+0x2a4/0x538 [ 59.650084][ T924] path_mount+0x5f0/0xa88 [ 59.650935][ T924] do_mount+0xe8/0x148 [ 59.651679][ T924] __arm64_sys_mount+0x33c/0x388 [ 59.652598][ T924] invoke_syscall+0x98/0x244 [ 59.653456][ T924] el0_svc_common+0xec/0x23c [ 59.654328][ T924] do_el0_svc+0x4c/0x5c [ 59.655141][ T924] el0_svc+0x64/0x260 [ 59.655922][ T924] el0t_64_sync_handler+0x44/0x104 [ 59.656940][ T924] el0t_64_sync+0x198/0x19c [ 59.657748][ T924] [ 59.657748][ T924] -> #1 (&ei->xattr_sem){++++}-{4:4}: [ 59.659002][ T924] down_write+0x50/0xc0 [ 59.659812][ T924] ext4_xattr_set_handle+0x134/0xde4 [ 59.660891][ T924] ext4_initxattrs+0xa8/0x11c [ 59.661776][ T924] security_inode_init_security+0x244/0x370 [ 59.662871][ T924] ext4_init_security+0x44/0x58 [ 59.663804][ T924] __ext4_new_inode+0x286c/0x3308 [ 59.664759][ T924] ext4_create+0x1f4/0x408 [ 59.665568][ T924] path_openat+0x11f8/0x2a60 [ 59.666414][ T924] do_file_open+0x1c8/0x2e8 [ 59.667262][ T924] do_sys_openat2+0x114/0x1e8 [ 59.668152][ T924] do_sys_open+0xb0/0xe0 [ 59.668947][ T924] __arm64_sys_openat+0xa8/0xc4 [ 59.669820][ T924] invoke_syscall+0x98/0x244 [ 59.670745][ T924] el0_svc_common+0xec/0x23c [ 59.671648][ T924] do_el0_svc+0x4c/0x5c [ 59.672424][ T924] el0_svc+0x64/0x260 [ 59.673195][ T924] el0t_64_sync_handler+0x44/0x104 [ 59.674121][ T924] el0t_64_sync+0x198/0x19c [ 59.674978][ T924] [ 59.674978][ T924] -> #0 (jbd2_handle){++++}-{0:0}: [ 59.676265][ T924] __lock_acquire+0x17c0/0x2ebc [ 59.677224][ T924] lock_acquire+0x140/0x364 [ 59.678118][ T924] wait_transaction_locked+0x17c/0x228 [ 59.679183][ T924] start_this_handle+0x57c/0x1bcc [ 59.680186][ T924] jbd2__journal_start+0x260/0x534 [ 59.681203][ T924] __ext4_journal_start_sb+0x228/0x948 [ 59.682211][ T924] ext4_do_writepages+0xabc/0x3bc0 [ 59.683136][ T924] ext4_writepages+0x198/0x2dc [ 59.684016][ T924] do_writepages+0x284/0x47c [ 59.684878][ T924] __writeback_single_inode+0x140/0x1880 [ 59.685879][ T924] writeback_sb_inodes+0x798/0x1720 [ 59.686842][ T924] __writeback_inodes_wb+0xec/0x210 [ 59.687798][ T924] wb_writeback+0x3d0/0x10cc [ 59.688664][ T924] wb_workfn+0xa78/0xda8 [ 59.689498][ T924] process_scheduled_works+0x788/0x10b8 [ 59.690536][ T924] worker_thread+0x798/0xbd0 [ 59.691406][ T924] kthread+0x304/0x3d4 [ 59.692195][ T924] ret_from_fork+0x10/0x20 [ 59.693060][ T924] [ 59.693060][ T924] other info that might help us debug this: [ 59.693060][ T924] [ 59.694848][ T924] Chain exists of: [ 59.694848][ T924] jbd2_handle --> &ei->xattr_sem --> &sbi->s_writepages_rwsem [ 59.694848][ T924] [ 59.697184][ T924] Possible unsafe locking scenario: [ 59.697184][ T924] [ 59.698492][ T924] CPU0 CPU1 [ 59.699409][ T924] ---- ---- [ 59.700354][ T924] rlock(&sbi->s_writepages_rwsem); [ 59.701297][ T924] lock(&ei->xattr_sem); [ 59.702483][ T924] lock(&sbi->s_writepages_rwsem); [ 59.703814][ T924] lock(jbd2_handle); [ 59.704486][ T924] [ 59.704486][ T924] *** DEADLOCK *** [ 59.704486][ T924] [ 59.705853][ T924] 4 locks held by kworker/u8:4/924: [ 59.706694][ T924] #0: ffff0000c1fe7940 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x734/0x10b8 [ 59.708554][ T924] #1: ffff800093977c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x73c/0x10b8 [ 59.710713][ T924] #2: ffff0000d1ae60d8 (&type->s_umount_key#31){++++}-{4:4}, at: super_trylock_shared+0x24/0xdc [ 59.712486][ T924] #3: ffff0000d1ae4c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x170/0x2dc [ 59.714310][ T924] [ 59.714310][ T924] stack backtrace: [ 59.715309][ T924] CPU: 0 UID: 0 PID: 924 Comm: kworker/u8:4 Tainted: G L syzkaller #0 PREEMPT [ 59.717077][ T924] Tainted: [L]=SOFTLOCKUP [ 59.717851][ T924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 59.719664][ T924] Workqueue: writeback wb_workfn (flush-259:0) [ 59.720736][ T924] Call trace: [ 59.721268][ T924] show_stack+0x2c/0x3c (C) [ 59.722042][ T924] __dump_stack+0x30/0x40 [ 59.722794][ T924] dump_stack_lvl+0xd8/0x12c [ 59.723590][ T924] dump_stack+0x1c/0x28 [ 59.724285][ T924] print_circular_bug+0x328/0x330 [ 59.725149][ T924] check_noncircular+0x158/0x174 [ 59.725983][ T924] __lock_acquire+0x17c0/0x2ebc [ 59.726811][ T924] lock_acquire+0x140/0x364 [ 59.727594][ T924] wait_transaction_locked+0x17c/0x228 [ 59.728562][ T924] start_this_handle+0x57c/0x1bcc [ 59.729480][ T924] jbd2__journal_start+0x260/0x534 [ 59.730381][ T924] __ext4_journal_start_sb+0x228/0x948 [ 59.731323][ T924] ext4_do_writepages+0xabc/0x3bc0 [ 59.732196][ T924] ext4_writepages+0x198/0x2dc [ 59.733016][ T924] do_writepages+0x284/0x47c [ 59.733829][ T924] __writeback_single_inode+0x140/0x1880 [ 59.734842][ T924] writeback_sb_inodes+0x798/0x1720 [ 59.735778][ T924] __writeback_inodes_wb+0xec/0x210 [ 59.736699][ T924] wb_writeback+0x3d0/0x10cc [ 59.737492][ T924] wb_workfn+0xa78/0xda8 [ 59.738227][ T924] process_scheduled_works+0x788/0x10b8 [ 59.739157][ T924] worker_thread+0x798/0xbd0 [ 59.739887][ T924] kthread+0x304/0x3d4 [ 59.740572][ T924] ret_from_fork+0x10/0x20 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 59.992406][ T4712] bridge0: port 3(syz_tun) entered disabled state [ 59.994567][ T4712] syz_tun (unregistering): left allmulticast mode [ 59.995895][ T4712] syz_tun (unregistering): left promiscuous mode [ 59.997151][ T4712] bridge0: port 3(syz_tun) entered disabled state [ 60.092075][ T3734] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.220239][ T3734] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.310284][ T3734] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.391126][ T3734] netdevsim netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.526826][ T3734] bridge_slave_1: left allmulticast mode [ 60.526859][ T3734] bridge_slave_1: left promiscuous mode [ 60.526945][ T3734] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.532218][ T3734] bridge_slave_0: left allmulticast mode [ 60.532244][ T3734] bridge_slave_0: left promiscuous mode [ 60.532329][ T3734] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.568459][ T3734] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.591015][ T3734] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.620686][ T3734] bond0 (unregistering): Released all slaves [ 60.740482][ T4404] 8021q: adding VLAN 0 to HW filter on device eth4 [ 60.850003][ T4404] 8021q: adding VLAN 0 to HW filter on device eth5 [ 60.853226][ T3734] hsr_slave_0: left promiscuous mode [ 60.854288][ T3734] hsr_slave_1: left promiscuous mode [ 60.854579][ T3734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.854590][ T3734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.855605][ T3734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.855614][ T3734] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.863389][ T3734] veth1_macvtap: left promiscuous mode [ 60.863421][ T3734] veth0_macvtap: left promiscuous mode [ 60.863476][ T3734] veth1_vlan: left promiscuous mode [ 60.863527][ T3734] veth0_vlan: left promiscuous mode [ 60.926417][ T3734] team0 (unregistering): Port device team_slave_1 removed [ 60.928908][ T3734] team0 (unregistering): Port device team_slave_0 removed [ 61.079247][ T4404] 8021q: adding VLAN 0 to HW filter on device eth6 [ 61.181188][ T4404] 8021q: adding VLAN 0 to HW filter on device eth7 [ 61.224648][ T3734] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.300294][ T3734] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.390463][ T3734] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.460638][ T3734] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.580315][ T3734] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.653968][ T3734] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.659048][ T4404] 8021q: adding VLAN 0 to HW filter on device eth8 [ 61.713106][ T3734] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.757255][ T3734] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.774740][ T4404] 8021q: adding VLAN 0 to HW filter on device eth9 [ 61.871051][ T3734] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.879599][ T4404] 8021q: adding VLAN 0 to HW filter on device eth10 [ 61.906355][ T3734] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.961780][ T3734] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.977737][ T4404] 8021q: adding VLAN 0 to HW filter on device eth11 [ 62.031171][ T3734] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.071102][ T4404] 8021q: adding VLAN 0 to HW filter on device eth12 [ 62.115108][ T3734] bridge_slave_1: left allmulticast mode [ 62.115139][ T3734] bridge_slave_1: left promiscuous mode [ 62.115214][ T3734] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.121421][ T3734] bridge_slave_0: left allmulticast mode [ 62.121447][ T3734] bridge_slave_0: left promiscuous mode [ 62.121521][ T3734] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.128007][ T3734] bridge_slave_1: left allmulticast mode [ 62.128238][ T3734] bridge_slave_1: left promiscuous mode [ 62.128303][ T3734] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.132152][ T3734] bridge_slave_0: left allmulticast mode [ 62.132177][ T3734] bridge_slave_0: left promiscuous mode [ 62.132242][ T3734] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.137202][ T3734] bridge_slave_1: left allmulticast mode [ 62.137227][ T3734] bridge_slave_1: left promiscuous mode [ 62.137294][ T3734] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.147800][ T3734] bridge_slave_0: left allmulticast mode [ 62.148412][ T3734] bridge_slave_0: left promiscuous mode [ 62.148470][ T3734] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.225663][ T3734] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.251160][ T3734] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.289827][ T3734] bond0 (unregistering): Released all slaves [ 62.293925][ T3734] bond1 (unregistering): Released all slaves [ 62.311234][ T3734] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.339537][ T3734] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.349990][ T3734] bond0 (unregistering): Released all slaves [ 62.371013][ T3734] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.390324][ T3734] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.439424][ T3734] bond0 (unregistering): Released all slaves [ 62.441198][ T4404] 8021q: adding VLAN 0 to HW filter on device eth14 [ 62.509785][ T3734] |2;: left promiscuous mode [ 62.546730][ T4404] 8021q: adding VLAN 0 to HW filter on device eth13 [ 62.551604][ T3734] tipc: Left network mode [ 62.660455][ T4404] 8021q: adding VLAN 0 to HW filter on device eth15 [ 62.772429][ T4404] 8021q: adding VLAN 0 to HW filter on device eth16 [ 62.882419][ T4404] 8021q: adding VLAN 0 to HW filter on device eth17 [ 62.982485][ T4404] 8021q: adding VLAN 0 to HW filter on device eth18 [ 63.077009][ T4404] 8021q: adding VLAN 0 to HW filter on device eth19 [ 63.111981][ T3734] hsr_slave_0: left promiscuous mode [ 63.113310][ T3734] hsr_slave_1: left promiscuous mode [ 63.113488][ T3734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.113498][ T3734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.115978][ T3734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.115988][ T3734] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.121107][ T3734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.122520][ T3734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.124220][ T3734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.124241][ T3734] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.128220][ T3734] hsr_slave_0: left promiscuous mode [ 63.129636][ T3734] hsr_slave_1: left promiscuous mode [ 63.129855][ T3734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.129867][ T3734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.133589][ T3734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.133812][ T3734] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.139960][ T3734] veth1_macvtap: left promiscuous mode [ 63.139990][ T3734] veth0_macvtap: left promiscuous mode [ 63.140020][ T3734] veth1_vlan: left promiscuous mode [ 63.140047][ T3734] veth0_vlan: left promiscuous mode [ 63.144244][ T3734] veth1_macvtap: left promiscuous mode [ 63.144265][ T3734] veth0_macvtap: left promiscuous mode [ 63.144301][ T3734] veth1_vlan: left promiscuous mode [ 63.144328][ T3734] veth0_vlan: left promiscuous mode [ 63.148341][ T3734] veth1_macvtap: left promiscuous mode [ 63.148361][ T3734] veth0_macvtap: left promiscuous mode [ 63.148398][ T3734] veth1_vlan: left promiscuous mode [ 63.148422][ T3734] veth0_vlan: left promiscuous mode [ 63.272457][ T3734] team0 (unregistering): Port device team_slave_1 removed [ 63.274728][ T3734] team0 (unregistering): Port device team_slave_0 removed [ 63.348480][ T3734] team0 (unregistering): Port device team_slave_1 removed [ 63.350824][ T3734] team0 (unregistering): Port device team_slave_0 removed [ 63.401614][ T3734] team0 (unregistering): Port device team_slave_1 removed [ 63.403888][ T3734] team0 (unregistering): Port device team_slave_0 removed [ 64.092504][ T3734] IPVS: stop unused estimator thread 0... [ 64.489143][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.489187][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.491080][ T866] cfg80211: failed to load regulatory.db