last executing test programs: 1m36.250840611s ago: executing program 4 (id=2243): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x0) r5 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x68, 0x0, &(0x7f0000002240)=[@free_buffer={0x40086303, r5}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000002180)={@fda={0x66646185, 0x3, 0x1, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000001180)=""/4096, 0x1000, 0x0, 0x2d}, @fda={0x66646185, 0x8, 0x2, 0x4}}, &(0x7f0000002200)={0x0, 0x20, 0x48}}}, @dead_binder_done, @free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 1m36.248869062s ago: executing program 4 (id=2244): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x2, &(0x7f0000000200)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = gettid() r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x3, 0x2, 0x3, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x7, 0x3, 0x4}}) bind$packet(r3, &(0x7f0000000480)={0x11, 0xfa, r4, 0x1, 0x1, 0x6, @multicast}, 0x14) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$int_in(r7, 0x5452, &(0x7f0000000940)=0x707987cd) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) recvmsg(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000500)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m36.122510103s ago: executing program 4 (id=2247): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f000034d000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000001180)=0xdd9, 0x6, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) (async, rerun: 32) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 32) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 1m35.967324017s ago: executing program 4 (id=2251): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-neonbs\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000700)={[{@nombcache}, {@discard}, {@lazytime}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@journal_dev={'journal_dev', 0x3d, 0x5}}, {@nolazytime}, {@nobarrier}]}, 0x6, 0x635, &(0x7f0000000780)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x100000000, 0x800, 0x3, 0x0, 0xffffffffffffffff, 0x7b, 0x0, 0x9e}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000002c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{r4}, &(0x7f0000001380), &(0x7f00000013c0)=r1}, 0x20) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r6, 0x40106f52, &(0x7f0000000000)={0x2e, &(0x7f0000000140)=[{0x3d, '\x00', @buffer={"f587bd5ad5df34e51501eaeaf1f7a1416c68c33ca58c3362f1bb3a7b8959ed24", 0x20}, 0x401}]}) setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x8, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000002c0)=0x20) 1m35.943112982s ago: executing program 4 (id=2253): r0 = syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@inlinecrypt}, {@quota}]}, 0x1, 0x511, &(0x7f0000005d80)="$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") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000340)='nv', 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1e, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40900000000000061111800000000008510000002000000850000000700000095000009000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x94) io_setup(0x200, &(0x7f0000000140)=0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/keycreate\x00') io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x0, 0xe542, r5, 0x0, 0x0, 0x1, 0x0, 0x0, r5}]) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x8, &(0x7f0000000180)=ANY=[@ANYRES64=r3, @ANYRES32=r2, @ANYRESHEX=r5], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x14, 0x0, &(0x7f00000000c0)="5a3ced39a3a6926660fb6c62fac263d716d6f897", 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7a}, 0x50) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) close(r1) 1m34.948220046s ago: executing program 4 (id=2280): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000200)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@nogrpid}, {@nodioread_nolock}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14b442, 0x82) pwritev2(r0, 0x0, 0x0, 0x5412, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000000a40)={0x0, 0xffffffffffffffff, 0x20004, 0x0, 0x85c, 0x5}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, 0x0) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) pipe2(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000880)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="4372207734dcfdaf4e03b402"]) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000900)=""/250, 0xfa}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000003200), 0xffffffffffffffff) umount2(&(0x7f0000000040)='.\x00', 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x290000, 0x0) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) close_range(r3, r6, 0x0) 1m34.877256407s ago: executing program 32 (id=2280): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000200)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@nogrpid}, {@nodioread_nolock}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14b442, 0x82) pwritev2(r0, 0x0, 0x0, 0x5412, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000000a40)={0x0, 0xffffffffffffffff, 0x20004, 0x0, 0x85c, 0x5}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, 0x0) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) pipe2(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000880)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="4372207734dcfdaf4e03b402"]) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000900)=""/250, 0xfa}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000003200), 0xffffffffffffffff) umount2(&(0x7f0000000040)='.\x00', 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x290000, 0x0) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) close_range(r3, r6, 0x0) 8.808265131s ago: executing program 1 (id=2678): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) mount$binderfs(&(0x7f0000000100), &(0x7f0000000180)='./binderfs2\x00', &(0x7f00000001c0), 0x1020474, &(0x7f0000000240)={[{@stats}, {@max={'max', 0x3d, 0x7}}], [{@dont_appraise}, {@obj_type={'obj_type', 0x3d, 'GPL\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@subj_role}, {@dont_measure}, {@measure}]}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000f6ffffff00000000fcffffff8500000030000000180100002020642500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f00000002c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) socket$inet6(0xa, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) getpid() (async) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) mount$binderfs(&(0x7f0000000100), &(0x7f0000000180)='./binderfs2\x00', &(0x7f00000001c0), 0x1020474, &(0x7f0000000240)={[{@stats}, {@max={'max', 0x3d, 0x7}}], [{@dont_appraise}, {@obj_type={'obj_type', 0x3d, 'GPL\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@subj_role}, {@dont_measure}, {@measure}]}) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000f6ffffff00000000fcffffff8500000030000000180100002020642500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r3, &(0x7f00000002c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async) 8.594134806s ago: executing program 1 (id=2680): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x2d6}, 0x10) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="65839dccb1ae7afbcba98a5eac1a59d9125e9d08f3dc960c00054088622bf3ae6e23e34995b518bea8cae9be8ff9eb092d5004fb0a4599b0a89f33eb1d3e43709503f5e0dcf16b77301e15e8381ccb515c69ad3aa1c3b9f6b1ea37bc1e073c23bc0a38ef7e5284ebf8e233e191545c4b86c5d5b7d2ebe35c395863bdea2742", 0x7f, r1) write(r0, &(0x7f0000000000)="240000001a005f0400f9f407000904018000200000000009000000000800010000000000", 0x24) 8.524158522s ago: executing program 1 (id=2681): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) timer_create(0x2, &(0x7f0000000180)={0x0, 0x2a, 0x5}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x2, 0x0, &(0x7f0000048000)=0xffffffff, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x181001, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000000)={0x8, 'vlan0\x00', {'vxcan1\x00'}}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f00000000c0)={0x4000000, 0x0, 0x0, 0x1, 0x200004}) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYRES8=r1], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x40080) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'gre0\x00', &(0x7f00000005c0)={'ip_vti0\x00', 0x0, 0x20, 0x729, 0x1, 0x5, {{0x43, 0x4, 0x2, 0x4, 0x10c, 0x6b, 0x0, 0xff, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x14}, {[@timestamp_addr={0x44, 0x14, 0x14, 0x1, 0xc, [{@broadcast, 0x3ff}, {@loopback, 0x7}]}, @timestamp_prespec={0x44, 0x54, 0xf4, 0x3, 0x1, [{@empty, 0x5}, {@multicast2, 0x5}, {@private=0xa010100, 0x1}, {@rand_addr=0x64010100, 0x8}, {@local, 0xffff}, {@empty, 0x100}, {@remote, 0xd}, {@loopback, 0x800}, {@local, 0x101}, {@multicast2, 0x242}]}, @timestamp_prespec={0x44, 0x44, 0x9f, 0x3, 0xb, [{@remote, 0x3}, {@remote, 0x1}, {@dev={0xac, 0x14, 0x14, 0x16}, 0xfffffffc}, {@empty, 0x5}, {@dev={0xac, 0x14, 0x14, 0x12}, 0xfffffffa}, {@local, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0xfa}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x2}]}, @lsrr={0x83, 0x27, 0xe8, [@loopback, @private=0xa010102, @local, @loopback, @empty, @private=0xa010101, @remote, @dev={0xac, 0x14, 0x14, 0x1f}, @multicast1]}, @ssrr={0x89, 0x23, 0xc2, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @broadcast, @multicast2, @empty, @broadcast]}]}}}}}) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r0, @ANYRES32=r7, @ANYBLOB="008400000000010400000c8004cae54d2f3b81000589126f93655f5e35825bf35266e7ff01000000"], 0x2c}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="03c90e706c5fbefeee7f6595833481ebf11124d32e85b0e8c3264c24b606c1cc050e3808bb3265225a41934726d3bc1324c620bb48153b352f51ab2a8937bcfd20e79d60a25a370dd05fc0e1ab60db8fb1d74a1c84ae227f8654ef7e47de9772a25d187d2247cd44ac5444173525c55c"], 0x74) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="956807ec42", @ANYRES16=r3, @ANYBLOB="00022bbd7000ffdbdf25050000005800018008000100", @ANYRES32=r4, @ANYBLOB="140002006d6163766c616e300000000000000000140002006d6163766c616e3000000000000000001400020070696d7265673000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYRES32=r0], 0x74}, 0x1, 0x0, 0x0, 0x4044000}, 0x20000000) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) exit(0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendto(r9, 0x0, 0x0, 0x4008080, &(0x7f0000000100)=@pptp={0x18, 0x2, {0x3, @multicast1}}, 0x80) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$sock_timeval(r10, 0x1, 0x43, 0x0, &(0x7f0000000080)) rt_sigprocmask(0x2, &(0x7f0000000000)={[0x9]}, &(0x7f0000000080), 0x8) 7.585814477s ago: executing program 1 (id=2690): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8c, &(0x7f0000000880)=ANY=[], 0x1, 0x2c7, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x42, 0x4) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x42, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x444}) (async) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x444}) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x53, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/109, 0x20001c34}], 0x1, 0x0) memfd_secret(0x0) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x214, 0x3f7, 0x2, 0x70bd25, 0x25dfdbfb, {0xfe, 0xfe, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, ["", "", "", ""]}, 0x214}}, 0xc0001) (async) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x214, 0x3f7, 0x2, 0x70bd25, 0x25dfdbfb, {0xfe, 0xfe, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, ["", "", "", ""]}, 0x214}}, 0xc0001) 7.508098499s ago: executing program 1 (id=2691): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40881}, 0x4000000) (async) prlimit64(0x0, 0x5, &(0x7f0000000040)={0x8, 0x8d}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r3 = getpid() r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000a80)={0x0, 0x1, 0xd, 0xa, 0x73, &(0x7f0000000680)="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"}) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) (async) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) (async) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81902) (async) sendmmsg$inet6(r2, &(0x7f0000001140)=[{{&(0x7f0000004440)={0xa, 0x4e32, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f0000000300)}}], 0x1, 0x0) shutdown(r2, 0x1) (async) setsockopt(r2, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) (async) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000380)={0x0, @in={{0x2, 0x6e20, @local}}}, 0x84) sendto$inet(r1, &(0x7f00000002c0)='-', 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x3, 0x0}}, 0x10) shutdown(r1, 0x1) recvfrom$inet(r1, 0x0, 0x0, 0x40000043, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x20000054}, 0x20000850) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wg1\x00'}) 6.410967685s ago: executing program 1 (id=2706): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x7c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x31, 0xe, {{{}, {0x7ffc}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x803, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xfe, 0x0, 0x0, 0x54, 0x68}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x14, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x4, 0x2, '`\a>\n@J'}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffd}]}, 0x7c}}, 0x90) (async) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x7c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x31, 0xe, {{{}, {0x7ffc}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x803, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xfe, 0x0, 0x0, 0x54, 0x68}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x14, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x4, 0x2, '`\a>\n@J'}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffd}]}, 0x7c}}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r4, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) listen(r0, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) r6 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000001140)={'pimreg\x00', {0x2, 0x4e21, @rand_addr=0x64010100}}) (async) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000001140)={'pimreg\x00', {0x2, 0x4e21, @rand_addr=0x64010100}}) fsmount(r6, 0x0, 0x4) (async) r7 = fsmount(r6, 0x0, 0x4) r8 = openat$cgroup_ro(r7, &(0x7f0000001100)='pids.events\x00', 0x5000000, 0x0) readv(r8, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) (async) readv(r8, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) preadv2(r10, &(0x7f0000000580)=[{&(0x7f0000000140)=""/251, 0xfb}, {&(0x7f0000000240)=""/189, 0xbd}, {&(0x7f0000000300)=""/193, 0xc1}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/78, 0x4e}, {&(0x7f00000004c0)=""/172, 0xac}], 0x6, 0x5, 0x8f27, 0x0) (async) preadv2(r10, &(0x7f0000000580)=[{&(0x7f0000000140)=""/251, 0xfb}, {&(0x7f0000000240)=""/189, 0xbd}, {&(0x7f0000000300)=""/193, 0xc1}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/78, 0x4e}, {&(0x7f00000004c0)=""/172, 0xac}], 0x6, 0x5, 0x8f27, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) 6.355951821s ago: executing program 33 (id=2706): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x7c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x31, 0xe, {{{}, {0x7ffc}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x803, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xfe, 0x0, 0x0, 0x54, 0x68}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x14, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x4, 0x2, '`\a>\n@J'}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffd}]}, 0x7c}}, 0x90) (async) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x7c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x31, 0xe, {{{}, {0x7ffc}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x803, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xfe, 0x0, 0x0, 0x54, 0x68}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x14, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x4, 0x2, '`\a>\n@J'}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffd}]}, 0x7c}}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r4, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) listen(r0, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) r6 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000001140)={'pimreg\x00', {0x2, 0x4e21, @rand_addr=0x64010100}}) (async) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000001140)={'pimreg\x00', {0x2, 0x4e21, @rand_addr=0x64010100}}) fsmount(r6, 0x0, 0x4) (async) r7 = fsmount(r6, 0x0, 0x4) r8 = openat$cgroup_ro(r7, &(0x7f0000001100)='pids.events\x00', 0x5000000, 0x0) readv(r8, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) (async) readv(r8, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) preadv2(r10, &(0x7f0000000580)=[{&(0x7f0000000140)=""/251, 0xfb}, {&(0x7f0000000240)=""/189, 0xbd}, {&(0x7f0000000300)=""/193, 0xc1}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/78, 0x4e}, {&(0x7f00000004c0)=""/172, 0xac}], 0x6, 0x5, 0x8f27, 0x0) (async) preadv2(r10, &(0x7f0000000580)=[{&(0x7f0000000140)=""/251, 0xfb}, {&(0x7f0000000240)=""/189, 0xbd}, {&(0x7f0000000300)=""/193, 0xc1}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/78, 0x4e}, {&(0x7f00000004c0)=""/172, 0xac}], 0x6, 0x5, 0x8f27, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) 4.503609359s ago: executing program 0 (id=2729): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0x5, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, 0x0, &(0x7f0000000700)=""/177}, 0x20) (async) r2 = socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f00000006c0)={&(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000040)="733dd64aa5901e23ff9f7680f542f1033afa3ca88def4e4c49f1750df3fb6f9ff145aad9279e4a93e6d009f88306e077b2ad888a22acb9429fb2b8f238b2596e053a94e286194bc37de3adaf2b7973aa28c21938640982b094a5ec60a6ef4278f2581d778b4fefdef01d77c6f8f612cd30c271c0219e58fd2d3329486c9445924d5ef3ee786e738e55cc8570cf6fe69f13c626f0aef5767753449d3f70739d405d31422e2af0dcd29e", 0xa9}, {&(0x7f0000000100)="ee6deffcb2118f73590e4b2e00bf42a6d0e7c2cb87b47fb2b1c979b92cac706704db63d338cfd8283f9d233680fa72c13c32241e3e531785a39d35c7898709c2e5956094894228b7", 0x48}, {&(0x7f00000002c0)="827935268404451ac441f44bb9d3a36c31adcad0236f142bf058c8974c9053dcedbdc278703e15ca513137502a06f343dc2da7ce15821edb9733ec4b28e83ed339f62bf487d2481b5a22d04ec7ad3bf4412a91fc73af1533b23f9ae59fdf04969e9c12c2abfe608108d7d09c8679f02657f837c70276b375b4e7f9243d9489fbecc8daa43b54a3b2eab45343332ad1c4c15bcd154dbb45", 0x97}, {&(0x7f0000000440)="2dd03bfe9fbd5810d6b1e7ca50768cc9a9259c7e6079ac629d377ddddb71ff77f27a6cdc1e17d307d7c945f963ff717a69176e2f580c33f97a07ab656d7b323267e6251ef3647fb852efc451bf28ee7bb2d9d83fd8397f7676e981ffb0aa6969ac3009ef002821f19cc56e0ce4d1d152368f7e054b362bef4ec4250789c5bc7650ab25e8637a4a7b92685782a94701de038e8fd1d81dbe665b6588ae21b3f02791d4b6138513060dca70f9efd3b77616d895a844924ce9433f614f40e4aba0cf36567c51c923f6b9912924512cbe", 0xce}], 0x4, &(0x7f0000000580)=[@ip_retopts={{0xbc, 0x0, 0x7, {[@end, @noop, @timestamp_prespec={0x44, 0x3c, 0x93, 0x3, 0x0, [{@loopback, 0x12000}, {@empty, 0x1}, {@remote, 0x7}, {@private=0xa010102, 0x408}, {@multicast2, 0x2}, {@multicast1, 0x6d}, {@broadcast, 0xdf}]}, @ra={0x94, 0x4, 0x1}, @noop, @timestamp={0x44, 0x18, 0x70, 0x0, 0x2, [0xe07, 0x5, 0x3491, 0x3, 0x32]}, @timestamp_prespec={0x44, 0x1c, 0xc6, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xe}, {@broadcast, 0x4}, {@private=0xa010102, 0x80000001}]}, @timestamp_prespec={0x44, 0x34, 0xa, 0x3, 0x4, [{@multicast2, 0x7}, {@private=0xa010100, 0x36ef}, {@rand_addr=0x64010101, 0x81}, {@multicast1, 0x6}, {@broadcast, 0xfffffffc}, {@remote, 0x3}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80000000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x85}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x108}, 0x4001) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001940)={0x0, @local, @multicast2}, &(0x7f0000001980)=0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a40)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001b00)={{r1, 0xffffffffffffffff}, &(0x7f0000001a80), &(0x7f0000001ac0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b80)={0x18, 0x26, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @jmp={0x5, 0x0, 0x6, 0x9, 0xf, 0x18, 0xfffffffffffffff0}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @jmp={0x5, 0x0, 0x4, 0x1, 0xa, 0x80, 0x4}, @call={0x85, 0x0, 0x0, 0xae}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000900)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000940)=""/4096, 0x7bc7fd2d1d83ded0, 0x10, '\x00', r4, 0x0, r5, 0x8, &(0x7f00000019c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000001a00)={0x4, 0xc, 0x305d, 0xfffffffd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001b40)=[r6, r0, r1, r1, r7, r1], 0x0, 0x10, 0xf}, 0x94) 4.440202844s ago: executing program 5 (id=2730): syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180055ea68ec85f0612e65ae27dc00000173e14d664b67984b5293f27f48a3771263470ed2c08e25176b9b1758f24b2d45cb01e9e57a4870e5ba36766574e80d11ad889efc3382a6c625aa4003b3b6cf07da28cb175c60d426fd12c579bfec4cd3ef22024eeb15a56e7ac1335ae7af50fb5ec21ab9bb1751f02160a289540aa8e6411d4a9a8bd951eeac1d0217ee1d86b7ca690c5c083bb71ff2e847c6f083b1e20f74efaebcd49dff8614dd4692ae"], &(0x7f0000000040)='GPL\x00', 0x400, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0x16, 0x0, @void}, 0x10) ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f0000000000)={0x2, "d0e11efb1b5b3a019abbd235d1fe9db1b8be182ffd8f57eab848ee51962387ab", 0x1, 0x20, 0x3, 0x30, 0x8, 0x1, 0x48c1, 0x6}) close(r0) 4.413835331s ago: executing program 5 (id=2732): socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000980)=@IORING_OP_SYMLINKAT={0x26, 0xe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000071102f000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) 4.393098974s ago: executing program 0 (id=2733): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4004) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x200000000114, 0x5, 0xffffffffffffffff, &(0x7f0000000000)=0xfffffe73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) wait4(r1, &(0x7f00000000c0), 0x1, &(0x7f0000000440)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050029bf7000000000000600000008000300d12ab203cd396051678085c448e295d3ac15aa8b9cb352d7501e8f4d40c489e45ec2cdf4c344297686b0b526a5acf18aaac41519543c9d03c7185480788e516ce493890a595f27dd3353cfbd76aff16f83603a6431e32b2de99ba27151209a3e7dbd0c9b544a08be450ff1fc67e6d939d1", @ANYRES32=r6, @ANYBLOB="0800050009000000"], 0x24}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES16=r9, @ANYBLOB="0b0528bd7000fedbdf2501"], 0x1c}, 0x1, 0x0, 0x0, 0x2405c000}, 0x4000000) mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x10, &(0x7f0000000300)={0x0, 0x1, 0x3}) 3.30274528s ago: executing program 0 (id=2735): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000300000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000100085005900000095000000000000000428b00c152ee2b894c00ee28a2e3f41eda6a9835a990218ab90a1619a0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r2 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x4e24, 0x10000, @remote, 0x8}}, 0x0, 0x0, 0x27, 0x0, "8048a11d6c1810397579a52b46f4ad9c6805ccc3753b10d73beb2d7fdb000f427df39f1487f366b9329db78460028045185ebbaecc5978f68f7246677cdd518c44409b0eff3a38e309bea04a8a2abd58"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="f6ea090003000060009ba53886dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) write$binfmt_script(r2, &(0x7f00000010c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0', [], 0xa, "123f26ce659316c4cf3c6d2314cabbeb5b1164990a453894d746146ca93e61ef9ff86c022b07b56c2041d73cbfbb5da390bacb448bdb96b1ced6efde9706e3a058dee5a98a5cecc491d5b0f85543043d0e8e2dd8e5fbe3d255ff512566f492cb3956d740db754f0da2a80a91d2c414ce5e9a3223470276aeb742c6"}, 0x181) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000340)=0x6, 0x4) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001280)={0x0, "7e670e68afe615ad69dd7b050d3c08f9"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000002280)={r4, 0x2, 0x1, [0x3, 0x7, 0x0, 0x4d2fb93d, 0xb12], [0x9, 0x6, 0x6, 0xfffffffffffffffa, 0x6, 0xfffffffffffffffd, 0x5, 0x2, 0x1, 0x5, 0x7, 0x8000, 0x1, 0x0, 0x7, 0x2, 0x0, 0xa6b, 0x7, 0x3, 0x1, 0x17, 0x3, 0xffffffff, 0xffffffffffffffff, 0x6, 0x7, 0x100000001, 0x6, 0x1, 0x9, 0x2, 0x5, 0x0, 0x7ff, 0x5, 0x2, 0x3ff, 0x9, 0x2, 0x1, 0x8, 0x100000000, 0x81, 0x0, 0x7, 0x5, 0x9, 0xffffffffffffffff, 0x4, 0x80000001, 0x1a4a, 0x7, 0x6, 0xe, 0x6, 0x6, 0x7, 0x0, 0x2, 0x37dc44f0, 0x1000, 0x9, 0xd7, 0x8, 0x400, 0xa, 0x7, 0x21, 0x7fffffffffffffff, 0x1, 0x9, 0xc0, 0x7, 0x9, 0x400, 0x2, 0x0, 0x6, 0xebb5, 0xd, 0x3, 0x3, 0xfffffffffffff800, 0x3ff, 0x81, 0x64, 0x10001, 0x7, 0x8, 0x9, 0x2, 0x3d7c, 0xffffffffffffffff, 0x1, 0x3, 0x3, 0x6, 0x7, 0x8, 0xace, 0x1, 0x7, 0x5, 0x0, 0x100, 0x8, 0x81, 0xad43, 0x200, 0x9, 0xc, 0x1, 0x7fffffff, 0x0, 0x4, 0xa5, 0x5, 0x100000001, 0x2, 0x100000001]}) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000380)=@gcm_128={{0x303}, "ec104bcd6488d2f6", "8f8c2a478c4e48f9575d967978dd13c9", "980900", "c69df17e8d1b3a58"}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) 2.809631773s ago: executing program 2 (id=2740): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x8) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x60}, 0x0) (async) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x5, 0x4) 2.696421305s ago: executing program 2 (id=2741): r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x10}}, 0x4044800) 2.547253626s ago: executing program 0 (id=2742): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c000280080003007499000008000880ffffffff0800040000000000"], 0x4c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f00000008c0)={[{@i_version}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@usrquota}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@data_journal}, {@sb={'sb', 0x3d, 0x4b98}}, {@mb_optimize_scan}]}, 0x1, 0x42f, &(0x7f0000000480)="$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") r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10001) write$char_usb(r1, &(0x7f0000000080)="949563afdfd9731b9de6e53908949966aa27b875d4342507be0495f6d25181a246444ad685b8a2534c706390397c8f88324a522118a709254540d25cfb4a28fe51f73e3ca1d132d11e54a742558a6f0e6deefa96b359f47c02cec2ea3ad6d8b17410d96f3b3ef68fee83be0a44c4741ed1e67d170ee8b8fda2c0020f588550a0eebf9f0078385d1dec4a8e40e3d8e2aefab196a5073db7a4df1ed96d687d86fbe652f2987f98905497bacf7614fe84", 0xaf) 2.481989883s ago: executing program 0 (id=2743): bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r0 = socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/firmware/fdt', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x226042) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000540)={0x2b, 0xc, 0x1, 0x3, 0x0, [@private2, @rand_addr=' \x01\x00', @private1, @loopback, @private2, @dev={0xfe, 0x80, '\x00', 0x38}]}, 0x68) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB='\x00\x00']) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000a00)=""/178, 0xb2}], 0x1}, 0x2}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x40000022, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x43}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.40426255s ago: executing program 0 (id=2744): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=0x0], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r1 = syz_io_uring_setup(0x5ffd, &(0x7f00000003c0)={0x0, 0xb382, 0x10100, 0x0, 0x163}, &(0x7f00000000c0), &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000000380)="27dc", 0x2) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x8000, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xfffffffffffffd63}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x26044028}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002ebd7000fddbdf254400000008000300", @ANYRES32=r8, @ANYBLOB="1c00238006000600ec00000005000e000400e8ff05000400"], 0x38}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4040050) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb0, r6, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x2}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "aa27d4fa8309cc7eb2a8f4a969"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, "4f01"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY={0x34, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "23a2abbdb413ff34b913042441"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "ca03a257"}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4008000}, 0x44001) 1.940707469s ago: executing program 5 (id=2750): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000000000000711144000000000085100000020000008500000076d0000095000000000000009500a50500000000dd51145901116feaca62898abdfcc36e593188556bc610b5f61badffa9d14d9025a30d46807e8a"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES32=r1, @ANYBLOB="06001c004e21000808000100ac1414", @ANYRES32, @ANYRESHEX=r0], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x46000) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x8040) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\t\x00'], 0x48) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bind$x25(r2, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) 1.893013856s ago: executing program 5 (id=2751): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r2, 0x5000940e, &(0x7f0000000640)={{r1}, "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"}) sched_setscheduler(0x0, 0x0, &(0x7f0000000000)=0x8) r3 = userfaultfd(0x801) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) sched_setscheduler(r0, 0x3, &(0x7f0000000040)=0x6) r5 = socket(0x2b, 0x1, 0x1) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3}, 0x1c) r6 = fanotify_init(0xf00, 0x1) fanotify_mark(r6, 0x105, 0x40009965, r4, 0x0) dup3(r3, r6, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @any, 0xee4c, 0x1}, 0xe) listen(r7, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) accept(r7, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 1.807365395s ago: executing program 3 (id=2753): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) r1 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000021400b59500000001000000000a407800", @ANYRES32=r3, @ANYBLOB="14000200000000000000000000000000000000010800080074030000"], 0x34}}, 0x0) shutdown(r0, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0xc, 0x14}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x28}}, 0x48000) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, r5, 0x5, 0x70bd2e, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x4}]]}, 0x30}, 0x1, 0x0, 0x0, 0x44840}, 0x4800) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000100)=0x40) getgroups(0x2, &(0x7f0000004640)=[0xffffffffffffffff, 0x0]) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000100)="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", 0x191) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r7, &(0x7f00000004c0), 0x48, 0x820b, 0x0) setsockopt$inet6_int(r7, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r7, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r8 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r8, &(0x7f0000000e80)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207e5bdf9ab8eed9ace110469c51f4f211dd9fad815eb5b273ac04e1edc679bcdf0a0d24482de5454be9003cb80714a95e136bb704ee58e707d1e69b3c3a1c2c37f9c0402e14abdeb32086a49aff25e5c0f0131d59b4783316b9fa2c71c51ce76942d5f519145c9e3bf0d4182b4a62970b2ce81d35a7afc8384b387b8e21f2051d90d92323a710cabe5275d335b64453e759251a140de480541d8dd7662a14296a59eba99b95bfdf5b22992c323865b471d13ad79867e2692fd4eece299a81e2b33336b6801f51c2ae8d73e4df90c9bd70cd535b72cbdf67754acdc44b3780450308d9c5527c3314eb7b2cc38b61e96403a30a8ba0c8a357aa04d3c62bc51bcf55cf214f44a909b29c30c18c3a43c86472612086664a80f2aa8490e58352732acb96eb46deab42895d1957a6029ad86e7a5ced6bde89c158aaee721954beeebe5973059007f7dd5459029af6d3f1d73d35f07d19b7cedfc80d1d7ef37f8b113f564afd0f093202929fef43e788619ca522c7f679dd2f27949d879b4dab46581a0e054b4ed1db37e43f528748b56ec5a54b7af198d4ae551046f7814fe3a5cbc1cc7cb6655fc198939b049f3c02443148c588e34d6ebef81096b4e48f468016d2bde0828664c0874d71e2d88b3bc04079d4a504255a83c3f07a4f1c3e5a4c66f55f36e51e344392487c8299d8d1bfb568780c0d57df48990cb5d6b35c3f7445f80312186d8598faf61072d4eefc961fb5a7e72b971c8f94a8346effd27362cee8d72a98b55e317de280d2d63ee83ca7140b7913122d402c536d914c8510c81d08f0ad1c952f5b7ad5e7ef72d7c58cb4d5bafbea535b381df6ebe94c62cf782cf7ab81c017c296a88ca91d641b45748d230cf5e87e5dbee4764ea4d131ae022e6bbf3ffc3ea7b264737d9db44354bfffa63d79bc403d3ac23fb615edc382d18b0daf1bbb2fbd708d1830ddac1c3f098b8cb1ef9a0019d804bf5d953110f12f3b9a8b9b7e0c61cb5d34116add1fc9a92721ffa5fdc83e1488cf88aa6e56ad2dd55e0aadd827cc7b4e7242f01241f49e905e5e7451092c28c3f6560a6a0002e5d91fc253a5a8fd8f27e42f4f02f5849528b7d93df9b0c568022acaff410e797e88d2f8eeadbba66e423335b843df734d203fa62a861b712da8f33d5ea721767871aa2cd53e659e505507de9a54d7e6fa3c20bbfb28cd6dd2b314dabbb59e9ce15c0a94ec3b3efc54eaaa27bd7576a687dcaf58dc182662539943014a02e76dc89f48c9f83cc7199038418f965ad3dc866098b89cabcac8691b0f51ffb71902337e49293309c4480a8f1b32411cc1b55a0ec0fe2c2572fe9d488a25bfc12ba74048e1d7beee93321c7aa49ea17cb9728dc46e5272154b3b995feacbacb8885621b335274af4df9365f8c8121ff323b572d320c8fc46acd6218b9579d43005e7b0506ccb14d9a0dac4cc6efaf5366c44342eaea8b5a11457f5afbea913ce4975ab67e6a85bc46e714ca5741da38a7cceb9e85d77fd03f83f7a5ecc7241e69e2bda327f769b48ba5f13662585c72778d12bd0e9a62a3d0dbe376d1aee81e6845c2cf23f42c458ae5668c8d387bf9ab224bc9703f1c08347be810d2f19278fe8d97560b3c9f1816667d0461a25e778eb1404dcaac1ed0a6a0745f3a5d2dc1b6babf98f5135d531cb26334ef2fec4c78c95b7193935139664fc65f17b047eb3dc39e251ba52ce33f8099719f1a789db1690347355e7b02d4c522692b9597fd31abb90f973ae4eb0bd0d900cdd887ff01d4845d7f0aee39b220a65a5aeee0fd386054070723c841c042d5339cc6325f07f0f733d124c6524f388ef7419f42c06278b8fceaa3a16b202dfb539b129762397e29cdd679ca6240272fa0c3e2e8c0a27aaa407f30b4024d0638dfca1bc9483db3ccc2880f", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) sendto$inet6(r8, 0x0, 0x0, 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0800120000000000"], 0x8, 0x0) msgrcv(0x0, &(0x7f00000080c0)={0x0, ""/84}, 0x5c, 0xda72ed5a9dc29567, 0x3800) 1.538697913s ago: executing program 2 (id=2754): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x2bd}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/keycreate\x00') write$vga_arbiter(r5, 0x0, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) (async) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 1.508629518s ago: executing program 3 (id=2755): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000040b708000000002d007b8af0ff00000000bfa1000000000000070a0000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.460369952s ago: executing program 2 (id=2756): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0xc5c, &(0x7f0000000380), 0x3, 0x459, &(0x7f0000000540)="$eJzs3MtvG0UYAPBvN48S2pJQyqMPIFAQEY+kaQv0wAEQSByKhAQHOEZJWpWmDWqCRKsIWoTKCSEk7ogj/wInuCDECYkr3FGlCuWSlpPR2ruN7dhu4tpxi38/ycnMzmxmPu+OPbtjJ4C+NZ79SCJ2RcSfETFaydZWGK/8ur66MntjdWU2iVLp3X+Scr211ZXZomqx3848M5FGpF8kcaBBu0sXLp6ZWViYP5/np5bPfjS1dOHiC6fPzpyaPzV/7sjx48eOTr/80pEXOxJn1qe1/Z8uHtz31gffvH3iq5r46+LokPFWhU+XSh1urrd2V6WTwQ3FI9vaGTZtICKywzVUHv+jMRDrB2803vy8p50DuqpUKpV2Ni++VAL+x5KozRvy0C+KN/q11ZU0VldmG10Hv9q96UfPXXutcgGUxX09f1RKBiPN6wzVXd920nhEvH/p3++yR3TnPgQAQI2fsvnP85V5x1rN/C+Nh6rq3ZevDY1FxP0RsSciHoiIvRHxYES57sMR8cgW269fJNk4/0mvthXYJmXzv1fyta3a+V8x+4uxgTy3uxz/UHLy9ML84fw5mYihHVl+ukUbP7/xx9fNyqrnf9kja7+YC+b9uDq4o3afuZnlmduJudq1yxH7BxvFn9xcCUgiYl9E7G+zjdPP/nCwWdmt429h4zrTlpW+j3imcvwvRV38haT1+uTUPbEwf3iqOCs2+u33K+80a/+24u+A7Pjf2/D8vxn/WFK9Xru09Tau/PVl02uads//4eS9cno43/bJzPLy+emI4eREpdPV24+s71vki/pZ/BOHGo//PbH+TByIiOwkfjQiHouIx/O+PxERT0bEoRbx//r6Ux+2H393ZfHPben4ryeGo35L48TAmV9+rGl0bEP8N1of/2Pl1ES+ZTOvf5vpV3tnMwAAANx90ojYFUk6eTOdppOTlc/L741IFxaXlp87ufjxubnKdwTGYigt7nSNVt0Pnc4v6yv5yxFR+WhBUX40v2/87cBIOT85u7gw1+vgoc/tbDL+M38P9Lp3QNd1YB0NuEsZ/9C/jH/oX8Y/9K8G498/bIE+0ej9/7Me9APYfnXj37If9BHX/9C/jH/oX8Y/9KWlkbj1l+RbJoq/1Obut5sY2fRX/bc5EUN3RDe6loj0juiGRJcSvX1dAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6JT/AgAA//9OFd7A") (async, rerun: 64) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x2009850, 0x0, 0x1, 0x0, 0x0) (async, rerun: 64) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) (async) socket(0x2, 0x2, 0x9) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 1.45953344s ago: executing program 3 (id=2757): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'hsr0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r5, 0x40047452, &(0x7f00000000c0)={0x18, 0x0, {0x1, @empty, 'geneve0\x00'}}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) close(r4) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000000)={[{@noblock_validity}, {@barrier_val={'barrier', 0x3d, 0x3ff}}, {@dax_never}, {@noblock_validity}]}, 0x1, 0x792, &(0x7f0000020c00)="$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") setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r7, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000024c10200000006125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 1.455607132s ago: executing program 2 (id=2758): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7ae69, 0x0, 0xfffffffc, {0x1c, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x4, 0x1900}}, 0x1c}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_BLANKSCREEN(r2, 0x560e, &(0x7f0000000000)) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) ioctl$TIOCGSOFTCAR(r2, 0x5419, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'netdevsim0\x00'}) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) vmsplice(r1, &(0x7f0000000600)=[{&(0x7f00000000c0)="8e1332025da6ae6ff6942cdcc1b0337fc9249192f7bb5882f130fce8478c3de2710e8fa184cf723bb81dbc9e977eb986380616", 0x33}, {&(0x7f0000000280)="dbd1396d47a2cecced42a7a1aad612f261c72ccb50f9d9b174204b40dde9d691085afec3fc7d369d671ab4728c8a32a515fe4cd53515b5d1b829b4ffd3d703e7d6a69ff640cbc3566bc766c7c36af00dd32f254f8e7165391a8fd44b2030560223dc022bb4165eb31a2c79b2c2d476124bac2484f82907a47cc61464973eaa37ed4f34b1435a1e5c4a027ce3262efe5d55df32ad38f2e240cd28a78e5b7110456424812fc6a5293bd56548720b550295eafec761880d41501eed6077046cc1585e487590ff9cf9575f39d835dd96d6372fcf5cccc510", 0xd6}, {&(0x7f0000000380)="7d2650831f02b2a19ebd42050922b808af2a955a27319cc6b02ec9dd37fdcfbda0037c0a5fb5676c4c60bc8b104fea015a2db882e56035e598dce0e2a1cd50afc1e4d9e826761468d5f08b16882d0310cd83edfd2029a7a07c4ef622470d480348804cf7c46fa0e190800e7c0c758bf4fe008e131add12230c8a87b91e0c95698954a0", 0x83}, {&(0x7f0000000440)="570391246fcdc6957f3920fab2a42d4916a18e888cc659ed05a1812464082740c2fa55efb2493b95ee3b708bdf5497db6e110438b23ccab6a9cb830e9ea97558cad01ffcee696e1862ce66dad587ff7b36f6a867a09a26a81c6d967372a175cbde118fd2165ef4502e9e9845db08594771920137d49692cf8dabb74de065635edd727bad9a34d6fccbc49d288d4d9f67f7ff2e", 0x93}, {&(0x7f0000000500)="e6ca018ba418555a9be68ef5f0416e5db43ee122ebafe83194d9594a20b4813929d7086bbd56b19a4fcde81460091065fe73b6833dd516db45cd25845e6a1c67d8386083d9f11480f5db822a91ac4bdf69d44a2a75570fed7c93e2db99ad3cac148a2e122c0417c870f1b9e45d79d22a88ebf9d7102bff76edebf41e2f5d7469a7780a9f8460d89c7abf5170a0528509fdf7542056f3b0ef3bcc56c1472a25c8ff0c4d18f0705fb7587fb114b1fa797d00202171324ad1099a832cf9f56e8a5fcfa733f1a2b1fa06dd029e13f8d31bb6f9d9c249e64935471887178a3513ca3f6598cdf4b3fcdc19b39135c0c7b37b2fb4ef1a90279a730e64", 0xf9}], 0x5, 0x10) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f00000031c0)={0x50, 0x0, r4, {0x7, 0x2d, 0x401, 0x1030808, 0x469, 0x1, 0x1, 0x80000000, 0x0, 0x0, 0x10, 0x8}}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r8 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@delalloc}]}, 0xff, 0x4a1, &(0x7f00000004c0)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="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", @ANYRESDEC=r8, @ANYBLOB="600001004683000014000300776c616e30000000000000000000000005000000000000001000060000010000060000000800000004001400"], 0x50}}, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000200)=0x4) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b559623af8295", 0x13c}], 0x2, 0x0, 0x48}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) 1.22176543s ago: executing program 6 (id=2760): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x101000, 0x90) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000003, 0x811, r2, 0x27648000) 1.179474718s ago: executing program 6 (id=2761): r0 = socket$inet(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ipvlan1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1d00000010000104020300"/20, @ANYRES32=0x0, @ANYBLOB="2825020000080000280012800c0001006d6163766c616e00180002800a0009000000000000000000080007000100000008000500", @ANYRESOCT=r1], 0x50}}, 0x800) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f0000000000)) 1.173702889s ago: executing program 3 (id=2762): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES8, @ANYBLOB="e1cc9e585bf1ccbca5939bce6200"/23, @ANYRESOCT, @ANYRESHEX=0x0, @ANYBLOB="48bdb0a10f32dcd5fdbfa532c164f4179256752b2122532551cd97b3bae22e012c39572a16bd3fbeeead717134851c249aa3fa8c446270ef0d055d733070c8447b23e34fe2c7d08088411097f670540e51c5b089386bac3b708aef00ad4d9b654acd5e0b20a266dcac6bcb13a3d4922d1851f7d82d24acc2d8f4ab02ef553f0885dc464506212505cbf180b9"], 0x1, 0x1e1, &(0x7f0000000340)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x28880, 0x85) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000640)={[{@dioread_nolock}, {@jqfmt_vfsv1}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}], [{@seclabel}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@euid_eq}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@pcr={'pcr', 0x3d, 0x4000000007}}, {@dont_appraise}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r1 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10}, 0x100) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a0000000200", 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)='E', 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1db002, 0x100) lseek(r0, 0x100, 0x1) getdents64(r0, 0x0, 0x4f) socket$nl_route(0x10, 0x3, 0x0) 1.173456948s ago: executing program 6 (id=2763): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001800010029bd7000fedbdf251d01050008000e00", @ANYRES32, @ANYBLOB="0c00241f", @ANYRES16=r3, @ANYBLOB="c1f310e4b672c57faad927fd57d1"], 0x44}}, 0x8000) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) 667.877491ms ago: executing program 5 (id=2764): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmmsg(r0, &(0x7f00000015c0)=[{{&(0x7f0000000000)=@rc, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000080)=""/38, 0x26}, {&(0x7f00000000c0)=""/4096, 0x1000}], 0x2, &(0x7f0000001100)=""/252, 0xfc}, 0x4ebf}, {{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001200)=""/152, 0x98}, {&(0x7f00000012c0)=""/40, 0x28}, {&(0x7f0000001300)=""/43, 0x2b}, {&(0x7f0000001340)=""/96, 0x60}, {&(0x7f00000013c0)}, {&(0x7f0000001400)=""/8, 0x8}, {&(0x7f0000001440)}], 0x7, &(0x7f0000001500)=""/133, 0x85}, 0x7ff}], 0x2, 0x10000, &(0x7f0000001640)={0x0, 0x989680}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000016c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001700)={'wg0\x00', 0x0}) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000001740)={@loopback, @loopback, 0x0}, &(0x7f0000001780)=0xc) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001840)={'syztnl0\x00', &(0x7f00000017c0)={'syztnl2\x00', 0x0, 0x7800, 0x1, 0x1, 0x9, {{0xf, 0x4, 0x2, 0x24, 0x3c, 0x67, 0x0, 0x8, 0x4, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x24, 0x71, 0x0, 0x2, [0x5, 0x2, 0xc, 0xa, 0x1, 0xf94f, 0xfff, 0x7]}, @noop, @end]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001900)={'ip6_vti0\x00', &(0x7f0000001880)={'syztnl1\x00', 0x0, 0x2, 0x0, 0x48, 0xc, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x20, 0x1, 0x0, 0x5}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001940)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000001b40)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001980)={0x174, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x174}, 0x1, 0x0, 0x0, 0xc880}, 0x805) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000001bc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x40, r8, 0x400, 0x70bd2d, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000810) (async) r9 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000001cc0)={0x0, @rand_addr, @multicast1}, &(0x7f0000001d00)=0xc) (async) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x11, r1, 0xfd662000) r10 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000001d40), &(0x7f0000001d80)=0x10, 0x80800) setsockopt$PNPIPE_HANDLE(r10, 0x113, 0x3, &(0x7f0000001dc0)=0x1, 0x4) (async) close(r10) (async) r11 = openat$mice(0xffffffffffffff9c, &(0x7f0000001e00), 0x880) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000001ec0)={'syztnl0\x00', &(0x7f0000001e40)={'ip6_vti0\x00', r3, 0x4, 0xc, 0x5, 0x9, 0x11, @private1={0xfc, 0x1, '\x00', 0x4}, @empty, 0x20, 0x8, 0x0, 0x5e6}}) (async) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001f40), r1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x1c, r12, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x19b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004800}, 0x48080) (async) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002080), r11) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r11, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x40, r13, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x17}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x40000) (async) write(r11, &(0x7f0000002180)="49f86f93d89e7045cd1db74238868f941b0e818b0a1c01ec6960", 0x1a) connect$unix(0xffffffffffffffff, &(0x7f00000021c0)=@file={0x0, './file0\x00'}, 0x6e) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002280), r11) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000022c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000002380)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x34, r14, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x80) (async) setsockopt$RDS_GET_MR_FOR_DEST(r11, 0x114, 0x7, &(0x7f00000024c0)={@vsock={0x28, 0x0, 0xffffffff, @host}, {&(0x7f00000023c0)=""/181, 0xb5}, &(0x7f0000002480), 0x51}, 0xa0) 667.385838ms ago: executing program 5 (id=2765): syz_ublk_setup_io_uring(0x73c1, &(0x7f0000000080)={0x0, 0xcd3b, 0x2, 0x2, 0x297}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) (async) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) munmap$IORING_OFF_SQES(r0, 0xc5059c) (async, rerun: 64) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000080000000000000004000000731139000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r1, 0x4, 0x10800) (async) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) openat(r1, &(0x7f00000000c0)='./file1\x00', 0x0, 0x80) (async) write$UHID_INPUT(r2, &(0x7f0000000a80)={0x8, {"f583cbbf26b0db8409d92421af484bbcc63c4d4ab3234551871e94925316cbd46971614d992d1b50d0c4a4ea4ae786b7777ed30090fe48732409ac41985846d5dffeda475a92de242d20316bfa7baf8f08dd8dde47279ce904d4c2fa2df79c772488d6c0772a3580eba66f0c7ae303b64b00954332986e815bdcc3908504d6694f7caa25d5fcf7c4a5bde2455a88142979d5b134a3a8bab7281535dc86431099338efaff2704e1a8239fec83c718a01e13f18bfd5820d56a9c8b76a04016bf894cb997e51333adb303445c12518b22c63c6628f5cd1dc0eb3a7b7d1ab7cbbb433cdde6e7b846f94035808deacc2d365ceaa6f1c1c25c5f5b01db1daee51dde4af4e11a69ec1926e2305c625d508e873a49c9d317873ca8f04e2f6d394742e671bacb21e7f30282798615a34f8c651e59b51c60f581956c796e7475257c9550cf7aa90b0acfc7a7ececd5df1fc24b57d0f489758c9d158ae0242f44af8e61be36c6cb9379480d8ac290f9f57bbeda440c211574f5d43757b34108bc4444365df6fc5934d0af541fe2ed3737b7a4dacf77b21a591397e9d967074758850dd0603262d093af55445aa6f85f1768428390b1cb740cf2b18b8835f2f2635edc93eb5a66a9cc5f63a0f6d1d717f29b804eb4e1ebe3873293280ec8d89147bcf58c9b6dcd1731f1f0048ab9c96508299bea412d1d7c80ecaa3fd83040d1fdc5f8010396abcca66acaba7b81964823b0747d3ef60813fe918c6e513d9d99309246a682238a04a75d03bbe4946fa90478b19fabe60b116fd624a1e576249c7a9285f1e399f4cc7b3ad97ac333cb56495c0c14c7abaa962f85af7b5d0ff76e41afe1c76f4d54c0489b3d799a93ba4851f3f8d91e84721415469c8d5e11e1258b49918aafad7d83630d22ef872778e5f3072ccaedd575cf59c5cef8c743eb9a79cf10eab0ae768c61b3a6760d078838b35200bc5f6810f0aedbd7f12d5f7bbb59445fdffab539a135831ce60c74dc62ffde42e04a365bfcecfff8d12252ad9ba777a057b8045e95095d2f8becb485bbd6a1450ab514437e4cd59aaabcb3cffe418e6cab8475bc187ca8f08ce8fccf2c54c5dd9820178737c9ff8aa025180c0de964c633078bafa0f812c53a225581f9ab821d686cbe89b3f9747ac3a71f0fedc4bb446ce2e8c4f2f8281d1de11bf6b28647c0bb4dcd3fe68d3e9638d6c40fe9042f79eb5ebc8cc4ff1b9fd55e8d6c59cb913e6802b91627d8cfd8e669e8c327829936df4ad85094fb08481f06e526847517afb0e465c9de78e4a38f68f69bee0b709c7c9a677e81da298c76e4b418cbb93b1b67bba537eb19ffc930563237cde841b4bff32633a36af7e962b4be587036181fa4eb1ccbae9609bb73994d7c98a64314a0d6479090cc9b5317b30f89e4524b526fce6a1fb7a8a14609f3f3fbde40e371a63c18e5d62ea11af551b512e6668412fc5d4fe9c80a2d3479c1daef338b3059c8f386c054962ca08171fd2fffa86ab27b15f26f37d38c3ad302fbe6c9b6a00fb8d63ad5bba5ea79057d708418165fa68699006444dea267f64d21ecf3777e49c452f999e65057f912ba6d0c329978acb8e167cf8b568c8af112fb279deb1138c08b8cbdbd85db8bbc7ad992c7a03338e1c556eac06b20aa2e952b81a117fa09924ad8314519525f66c3344ce54b1884642744feae0789a4e985db225a7b9a028ab40f657f87567863c4117b88c1e11ad243663a49ea0784477395e4e3b9c8a3ce52699f2ebbb9f9429b123370a0d20d02754c17ea559a931b5b9faa03b46236031d45f7816b4f1754107b2cae3141a0d10f4d0994b206924854cc706c2bc6630db297f11e4c271340ed9e3cee12cd10a3ff4e82ad538efec2d31f98d67648c16a7f738779940218278788b6bc6afcaac5cd19b921903f9435b84c6ec5a7830b2afb5518e0eccf2e50f21d4e40b9541669dbda3063e5daf81e2ac67af5965facb3439007c89d1bc6ac4694f5d31f097aa47f1540b732009f32dc8ac65683e4a01bc98948e2e8883d8b498cdd07e8d7b6575f89bebf83af8a352bd21d5014c503e220b409fdc9a65e0277f135eeecb9020543ca363d4f5f3de24c8738fd21f7c065ab94fa365133268a2d9a1a59fb687887341c4718125f48623837013fe03c4fa769f4cdf113e21178d0746b633ecfc9f1a855301081357f6e86474814f0e50093f843f0738b9b684606ac3da7844a6b4f2a7d458728079aad8d6936e331266de7eb8fde4e49a7a6b1d25d04ea22c9b790d49f2b301ada0c0b1b8366f79fdca3e7ddb2f0e7c3aa34e6eacb33d54aba80687ae41e230e2048f02ae251d970121d0aef9c2ec78f855c691b59c5225f49dac1a5b2c7da54d8efc9a82c5dac742fc150df54d0e5a1ab051ca360a2ddb52a6a391b2ece2785507e8bad357f5486319b0950f8700f177cc244a23705b6c9c17de449ef3f608a539871fe9f8e210024798e920088bb19da1cb7bcde4fd93159d885bb96546656fb61bcb6ae3c315405fbc3606661606a71c60b96841d4c5765a177ec67a2d57bb8cc9654f2cee6fd41597d000ed5b767f999437f01cf0af50ab844f9328cdb7a0fe3dbdbea90f76f2819bdb8caab0041214936c0c1dad7b53f28e334027934e9ddc301517c61b84d58ccd5d5cc21967f312f1c87473298383faeb234e747a2ed55f289b35b375e9caec732ff6b036a4a2161358f67d063a781b61d59724982558d482f89b3303c6a21b35a352d2b5cdd6cff77515fe8c8a91ff48f6a9876602535e1bd6911264a61c154668f340fbbf7b4a071a9fc7539a99c9b76e3815c56ea0f9bec0b1c2d9b167675c17551b7dd7c5100de05f373ae2a7ac9f8a3d2b7bbbcb80df8418334d2bed175a20f04793cee9487ab4893b624080a5c5a4c1f25e510f5a7f1deb4d532115b47c12bf6656b7bdabb44888ae0bba000469c48374c2516a4dce5cab8fff101b56f64d8f468de0ea19a1076f6448c60e8af4dd900e2be608a83826dc101ba1305e792d702f48d16fa569375bddf9f87174a752b05dda2ccfea0b564d05c227e39d3a6f5255ad23e559cf936f002bca907fdf2b044f32c72e5cfef9fc64a028a1569a1ac37c0932afc3f1a8d8e9e520622b188f9605d4637e9781afbb85688a54c06d2425a7f390b5a1ccb899ce77004e129cf4bae571ddb3fa5ca53fad5e64bc7a78a131248ebdc4679b745d13e8de5f0371b733d2c0cb56b1aa80b63a0e7ddeccba84d73b85867c1d5b058e460eafc290b90d1dd2cfe8c6c1f35e0c8e83c56a414ac53bd2e3d62d23a4929e36a9ff38f3f91b16b57efbf134bb9e317abe1df1a8ed89dd1f365ff325c98c31991304bda3b2bfa2c5abfd9705e50bfb22798915bab10b33b614d2f26961a068a0e5920b47cd4fa7ad76f45e391aa8644a4dde0e1954a8300bd459b65421fb734da512d377ecdd98101d5e2223178e3c6e872e4c2c4b6bc5b45344dbc1b8fb0799d0042b3f89da3266caa70eefd9196ee46ecabd3f787551af7dc78660600612d508fc753fe3bb989fd6d8ffde3cf26c0fb841fcc14283a4e19a23f3d743432245e7c6801e400fd5c949e792476036a760da9ae984a6d489f990979b4e26c07f32b4906d27b3540c4d4de8e487f3ec27f2ec2ab518f9bc5e09823b32ddec931560191d9f11bf72daf13184dfdbf4566567f80156850b5e36948d341bff251ad56c6d65ca91332aa558caf1d0d2a9e1bf8ec4f02c07c4a2f73694953611ba6e475d730a3edb5f830d9217142d61774cedcbd20b46876a8ca60e653490127193567ff44dd277edd81d025d4ea784a0cd7b625db079d9b56c1425f0f777d32a86e2753485a94109eb69f19a5bed13e8951b234b0052a46d0a097b383a4c681734f768ece04f548228d32bcc3db181b6bd1bd50cfc99afaf461135b3bc32bf61ac0297da48b1cbec46d2e7a8b880e2c14fa7c27e991d2a29138bef0bf9ab93e039109c913cb602144cda5e5d0f3f2cedd255e7bd0950da4bd90c0fedf38ab1408dbaaef32a4d521da491dfe746259f831c4073d4d58807c2e09759bef5ec7b40516a4e364714d84c4f20f76fd3e5c68fdb44e3ea3c2275161a663aef370f3bd83827ce3e9790d514d285b72f6b67396fc6eccb12ed4b79909b55e1783447d204057397bb0aff4f928132250a56694ba0b31e048df5f6cff1baf7535250646100e2669e771b543c896831c013980d5cdf25a96c0e4a406a5c3da17ed49cb54eb44145f0b546582fe404a7706f966367108b8f3536eb09940cc234a7758281d37d39fab0f7d064768d37662e93e5df4a3dae0a89b616750d37b20b262c847a49edc8e977d6a9c8a6f46b7a46860ad984bd5f2d8f674e6c3e7765fc5825d37f9f2300b76ee432494485d478d2d8edd1c7a3bc8d62e0effb8fe5c2962bf3db1d78d2a562284a64f3d807a8b9e141513d5ca1f7b244e92fdbcbacc648b19efb121c870f1e09744753e5d92257a413d3cf0318002b13e8e3b08a8162ec07f2623943cc853705e8a20efaec7b8c977648103c28697d6ba9119ffa9dd915bf5916559e66862f7b7a488729eaa713b24533331e42c0713b8e931328df70aec66549b9c7cb26732c663d259ffd59dfb893020e3c8b921d17fbfbcdc2ac9a130ca4ffa8e4fa66fb83831962e77c29c491e61d073290e89c587171aa19e2a15d57260bb909d120234f1f6f677ef8a1a39582199852def8fc2488394e25a0fdd6b270d262f0c9a4c81a6fa6a2fe674a91b885d755364c3ee5c45b7de1e88aa71a2c8f0b9d4363b64467bb92bbd7c6b8aa4ed474cddeb88a77e0c1578f1ceb8387b5eaece52d85c2944371af31e008872495c0ce280ffedcf6db12d521afced52245a7ae850f80c2af2e4e2645ce3f2332c34e17f1bc600cf90bdb70b9d1eb83d53b8d62b3608d92b7b3a2bde9ec49bed085934edce569bb6a19b79ccdad3450d1f2f9546f0b467a8eafc32f78280b5537de21cc83198eb7e19609b1a6c63b434b47fcead402420f39c822fb4b6043eebf1d531e4b59a8187b797979d954a2637d26f25a8e182507771363d5ae3382146160ff3368882f8a8c21995fc9b3bc9a10783247685ca424e9a17ae059223a487e4658e439737c48e9fef5793aafb0abf2074b17aad26046ffdd94bff46f1fe0c5ae026e55dae17e3ffa7e20aff389c1eed6c35eceaba792024e8a8a0e838855da0db0b471a28cb3420b91ededa955f4ef5a79306d5b10b64bdb0d6c19a77437a80b23796628bc1e35801e39b62b80c54f36ae6b90d451c2353360df48b17a9565168ccabf65684fd790d38e8996a282706f80b55b63e477b4ee510b8296cf9c04f5c6b857871b718e779383aa099ae76d3a305b005faeb5bdda4808bc9331b7eab1801d170c7bbf6ad2d9c2f5e949699e0823b8aca1efd783e5c20093c40bb615c26a2568c0d8a63305b6870e7db420ead6baa8fb23aea2a6f25ebeffb70d8c42b37a3073f3feb13ce5ad48a305cc4d45134601d933da77dc6d086850b6c9853dd824525a4bcafc9f714f4ed9d7007d47fbb9bb6836fb14bd5f69e59f98953d6770e06bb19d9493c69a87c8bfaf816f185ad023b53b4744cdb1a234dc54f3e7bd6521de66b989f67a9748ff44a45e8e642716c0ccd9ef0075f122da118ce43b0423bb6c3a495ed9b2f69aefec2444f24b400371f845280c835940057e822dd728413da8c55a40db42d7b372bb416bf1d1ac944bc7e859ba9fdcadd941e92ccdbabb423217706c97c1994af1da981716f36", 0x1000}}, 0x1006) (async) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f00000001c0)={[{@acl}, {@test_dummy_encryption_v1}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") (async, rerun: 32) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, 0x0) (async, rerun: 32) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f0000000380)='./bus\x00') readlinkat(r3, &(0x7f0000000400)='./bus\x00', &(0x7f0000000680)=""/206, 0xce) (async, rerun: 64) readlinkat(r3, &(0x7f0000000000)='./bus\x00', &(0x7f00000002c0)=""/163, 0xa3) (rerun: 64) 510.333668ms ago: executing program 2 (id=2766): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0900000004000000ff0f0000"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0900000004000000ff0f0000"], 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000003c0)={0x0, {0x2, 0x4e23, @loopback}, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e22, @local}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffff00, 0x1ff, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb130000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100080095"], &(0x7f0000000380)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc8c}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb130000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100080095"], &(0x7f0000000380)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc8c}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000240)={[{@noload}, {@nolazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x8}}, {@mb_optimize_scan}, {@usrjquota}]}, 0x1, 0x456, &(0x7f00000007c0)="$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") renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) (async) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r4, 0x0, 0x0, 0xe7c) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x18) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x4040) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0xe, &(0x7f0000002580)={0x6, 0x0, &(0x7f0000002480)=[{&(0x7f0000000180)=""/103, 0x67}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002280)=""/160, 0xa0}, {&(0x7f0000002340)=""/39, 0x27}, {&(0x7f0000002380)=""/219, 0xdb}], &(0x7f0000002500)=[0x0, 0x2, 0xcd, 0x6, 0x5, 0x9, 0x8, 0x9, 0x8], 0x5}, 0x20) 424.551968ms ago: executing program 6 (id=2767): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff0000fff8b708000000002d007b8af0ff00000000bfa1000000000000070a0000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 336.401832ms ago: executing program 6 (id=2768): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000094000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000f8ff5b0004801400"], 0x130}}, 0x0) 185.731704ms ago: executing program 3 (id=2769): r0 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) (async) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) syz_emit_ethernet(0x46, &(0x7f0000000280)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @loopback}, "03a50857de3cf18b"}}}}}, 0x0) shutdown(r2, 0x1) 163.880299ms ago: executing program 6 (id=2770): r0 = socket$inet_tcp(0x2, 0x1, 0x0) rt_sigprocmask(0x0, &(0x7f0000000080)={[0xffffffff]}, 0x0, 0x8) getpid() r1 = gettid() rt_tgsigqueueinfo(r1, r1, 0xb, &(0x7f00000008c0)={0x3f, 0x0, 0x5}) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0xfffd, @remote}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000001000000000000000000000071180f000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x1}}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc010000190001000000000010000000e00000010000000000000000000300000000000000000000000000000000000000002300ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000044010500ac1414aa000000000000000000000000000000003c00000000000000fe80000000000000000000000000000000000000000000000008000000000000000000007f000001000000000000000000000000000000003200000000000000e00000010000000000000000000000000000800003030000000000000000000000000000ff0100000000000000000000000000010000000033000000000000000a010101000000000000000000000000043500000000010000000000bf0a000000000000fe8000000000000000000000000000aa000004d46c00000000000000e00000010000000000000000000000000300000000000000000000000000000000000000fc000000000000000000000000000001000000003c00000008000000fc01000000000000000000000000000000000000010000000100"/436], 0x1fc}}, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000140)) io_setup(0xfffffffb, &(0x7f0000000240)=0x0) io_pgetevents(r5, 0x66, 0x3, &(0x7f0000000280)=[{}, {}, {}], &(0x7f0000000300)={0x77359400}, &(0x7f0000000380)={&(0x7f0000000340)={[0x111]}, 0x8}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) read$watch_queue(r3, &(0x7f00000003c0)=""/132, 0x84) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8a141, 0x59) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1}, 0x94) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000c80)={r7, r9, 0xa, 0x0, @void}, 0x10) io_submit(r5, 0x5, &(0x7f0000002440)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x7, 0x101, r4, &(0x7f00000006c0)="67f9e99c0414f06b4d78665e16aba5ab791134e471efcd924c68808be79aa84a12274bbd09460af2783670c548433e8a3d3a5489222a6a2fdedd7626878d2951ed6e2b38f084f37142004d92be4c2c38c16215b5c144c50d6bab1034ef0ea59a69a60515a949f266a78a2596f45d9667f62887713b60818c0b95e5da257e77ba0d01272485263d4bd62f44596c54514cfcc6a3a4c24e1735e58900", 0x9b, 0xef4c}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x1000, r3, &(0x7f00000007c0)="6462df79ff429762efa9baf3b9bed139109e5073cc8f94ff492167d807133b18ac4fe3bbe75e80861a33dc282cc3957fbdbd5aaac42d3f3496439546761cfb2138700e9300d962841163870f23abb3fae473bdff2ce281ea2e485660616d4a669915d676c5c95c7a2ac595303158513208c3b0fb2f63800ca4862ed60834b3b6c3f10edad8164584309d309c52544dad7762141d64d4e1ca6ebdcbaefe4eeb", 0x9f, 0x80000001, 0x0, 0x0, r9}, &(0x7f0000002100)={0x0, 0x0, 0x0, 0x7, 0x2, 0xffffffffffffffff, &(0x7f0000001100)="a8879c2e551d3fa415a2f2fc66b1c212e66d01462467ee672a7411c765157f347aa8c6089dd76498187e9e77733ea45a668470b7b38c73068877dab90c22fa3ca79f5f54b60eb6f296fbb613d1de2d76519686f7117b93c54689e41a3aa0f9807ac876d40a214a4582580cbf78eb7285455e221c0581674776956f35166287d071ce9a50c2d67d8066e35c2940cf35228b25db570d0e0c47e2e1057369c1db5d2dcf054d61a3e3f31c57938a5b253e999690fe8d5929b7770bc624b7915441ebb7128598a30cdcaa6aab4b9ea21d2d8ed3f6789469cef682797143f330df8ac5edc76fadb3bdc5f234e8df3cf054a339cfdd3a27709d9cbefdafe2e3f6032f4cc5b5bee3dd9d65a3f5adf4b23571e5b12f89bda1c7f89a8c28390e50a39839470a43b8228de9e71c35f9931846c7413966d48eb87f2897db41dceeffb1ebf2011cf437704d807fd4c3cc03ae8f286c599eede6c88fd0fc6104507866229630ab512cd89e72e62ba49ae3c6dc691335cf239e13ea16922f1e0145381a8410d67b9933d62c04d7a21138054759721d5bc139bd9556d85ca8a353ce7d7d56a124a23c2fd6948e10dd66ddbf40a0a1e5236697b24dd09dfe755f4a2652bc13f10179096a8020b768c888ab71240f371dd1dbc2b9a8b164ca7356b46ae24c6c18b0650100d6b4a8800d99893924ee35800275205cbb521d1aee6329729c4d77191423228bca90fdfcecd35e6a515c42c982098934b2e23ceea734783b24da453cf3129dc4c80d76145ed56993b9fba962d0d6a7c00f0b2e3ace19164365ff75ac81695494eabf7dd86269ebcba37973c4710d275a47410fde1311b7a169ab6aa2ea14e13a1c3ce6cf751203f64ddf18e4a917185272fd06604d5619abaa2cf2e848af78e9a7b0c27b2b479da0bcac58296b3d0009ea89b878dd2a8812be537b6d59036199124b658e4e3e9e0ae14e5c83177638c326e81022d523f0c2d97a419a669d2e0e8657f2e743f8b756e5cba8867646d72c8685a11fb03f1e1aa63b72beed43a95d0a6b87e24ad93a1194221ca13b3b8adc57e3c3b4c8ef7a8fad8eaf11dd304425aa1cf5010d0abbbcfcf773b6b3abb3211924b9b474f79a8222e3b184b5391b0fcd56ee199811e0c3dac7f772cac708165832db6c96d846ad87e9db3428bd9d176dc2c9f42c0202f580565419e651478fbb5b5d19965f19ceae997da31037c3e53e25de748209bfab539f1c4f531a9e9edce335805c9e4b1246f177522cb35bd07500e6ee7c8350adc3f1f43321ae8406a127d859566d248c9f6e974b2a8731377a3809374ca1f68cc04d7be7c7f8f14862a11c61f0538f177104e48d2e69a2116298ce3cc67007b79f428d776a893c41f89cea2106453df07169db7f021079ad588b5c4330e84565731958ce8027003fb3e3c72f859ea7b78eeac34144786a6171e6f4a01ba6afba304e73d27775e292f6471b6b6058300e7910e9742fbd163341d18c823d1f68be915900825f78f3c3c0312062704d7cc21046e0a7d7ccc8dfcb00b2e8051f116b9bbd69dda9481a58698bddb85756759e42f770683c08dd111fb85849edf5ca6a2bf163ffac9a6b76c87b1385a9fa44e48598db1061f1de66ab53f89356c531040df0534828d3746adca43ab40792c6b5ac399e769d76436fc51fff3bc34238c7061332095951e279798a161d49034260372bf066fca8330d8448719173f449dcf789e98ea447bc150e69f81c92df1bb1e3912ad526e272e3f2ba171569a3e6fa9cca9246bc021a643711033a6eb9fb04b8ee86b2d1e2c1138b1872166e24a88906eb6ddbb77d3c904a8109cac40b69893471e9d970a68369eae82e5f6318af15d9219660ba07e99db9e2f03dc25b3a0ef90318eec509d5fd2f48146a3baa5f10e52ce81be262a920c28eb57bd880aebefa4ace460eee6ec4755f8debc313127196b6ae2314f029f636d96dcc408777ed4ddc751839c7a938ccb794ac978abe1fab7d0ba6d76a07379887bf8e6b9d72b9eee8247c05c6ebe22da69867b70a88460c015284c7e405ffca2338969adc10e66183b743401d37219e57fe982609af9600547b43809a4610f1b9c9cd30bf0790cd6fdb1541ff173215f457759fe28ddfa3d7c44c83abe8140aca146e838d3085683315bdceee3a949c404850db6545bc5234d64dabc22a23b4a7796369fe3c198deb789c455a8e9e2919becf3acbc208cbc2e85362ade77c06d40935a4a108207fb4a0997034b542281626202607c1ad2752d19916c64888e1f6789a08e361eefba96d2c944dc41a06b72fd021883bde0d6e1d46bbf180650c90caed43f3218b827f2adee02a236ac7c35babeca84509474e5fd5912c8b6a6aec1905fa134dce658b24e2729f49d2384b6fc5ae7c080e7657c6cec5201e546e0a5ff0bd2ca9cb3e7c698f8ca4f625b8236c268b65473bd8c48363deac94ff9cb1dda8926aed352edb64dc355f01f163e94c1f9262c3158021b704e9b669f4d650a95f0766983919414d61c2c71bae330a05d8b0bb5536999b3c6f0fb167b31eb25d92541ec57de7429ad2f5ded0ae6b2639ec58b3db33a377791ce301709d07223550af567da699f6970f36d591da371eea72d88a9ba4eb12fb5d9c8b99ec532b5094da210b7a9cad05a37bd7d9d3a0530de7beb06c68d9698525a9d0de0e9c0f81f4dc8b117050f7478dec3f5a6a4d3bef2e06f309fbad18dfe5e5cac7dd4db7001d0726b73f0d5f3c24de662abab37f5754af592432fa4ea707451bbf0c61edc748455c3b0359459ed5bc34e594b4fbf52203d09e3f81eda07e7fb59b2cfe26f0adad035294184dddbc2b87e560b6315d7433508a99b23a813c473c9799782378b8bc051bb2fea59ebccad598969b6eb7616990ada53a6bc51546c8c6e5d16ca0a0b4c0a2b6ba50df7d8c46d2060b1d4a849c03b4c6d162861b6d3befc16834f369ab6043a9a27f8dbb1cfb3385925e97d5333c36207e5e421bbb1ee99ca44b8c6d00091004d800cfc94bd620352d9c7c2cf920dd5dae72fab066a6fb8e7b1ab676e6fbcafa535105ca7f386e07275adfbbc09f93dc32384baa3ad4bb603e577094cf0e1388b04eb2501a9b0df0f473d82625c8d3df91dff953eb26ef0bb12b195f3811471fdc687a3b540936c6c390bee9d0813b4971768b5ac63d99f1257fe93815255c20bfabcb80a9a32063ef5ad1dc55f30d99e377236ee9b7f2504dcf365788801fef25d71cf4db900fcfe5e8e82635c5139209c57363dde92a06a1fa5e758d135bec21a4fb51ba3ced7e093e922c06fbfc7a7b3db3bd2a21456fb8e9c6ddef8939e3a1353fbb7b6e2d52aab45485cb6f75c4cb5984777186ef09d63bbe9f3ccc764f61ccbf05e2d6cd1da6aa233d28553fa99f1470de7ab38a3ee88a2fd04abf9dc5a04945f08e365467b4b4070f2ac12e6e71cc6ee8cbefd676295cab8f123d452dd3ca488180cbaef27e29c9491f6bb3ff9aabab4edcb387601c4407b3483143708c9682742ac5fa905ebe13d810a4792188618d240b3317d3d644859b74e1f18b40b804779920a8e62c15adef2c1f2009399f91b14b70806d1aef77d8020d321af9209c01d51372a5d0a524e6b1acb2193eccdf62109b9c71bdad312e8370c86dd7a89a3097c27dde02961c62452c52dcd9c1237a075568eba4f9eb402f589014c858fadf441081fca0165df92e7923eb1d237186f71208a575236c108be721746969164e4c091d8b788d9d272fe971b1bb26e106cda9bc9e89474ad8fdca0bf9fa7e92fd244db9965c330fcbd3fe856e282664b22b7df7bc9ba71eb36f6d6ad1edff878be3ff7568d5c031dfcc485ec48b16e5039f6967533e0a96c9522f6f8bff6a75f625fce9b4fd987100d3268ff1e38747e81a255475aa1535f9d3db9ecc738e2b0d5d7a3a3e2db600453a07be23c48b633e4c5480e63d9ca97dfe40a8d157ebf0ab4c586174e0f3169da1d6ecc4f9f2738728c41e23d0e9055cf7f8cb8e82b907346b46625f027c9602afbfba39e36302616e31b3a35debcf3288a14c1288a542cc1d28b8574676d541333cf2738cebc7e4963761cfcbd76ee6794d6948c33a174d1707e2ee8e5e49a1d69f792b39ddcdf4377610be85d7032b3b8ad69356b6789c42bb28c5dc1c7350d4fa458637ad3bbd1e6abd727f2311fe550de126a468e1e02058d0a271f02dea22e432362a7176f911d3084ba493606eac4398bf914b1bc8d96d860efd6148bf1f91d90fa07048f0aab03bd23f2c68bbbf71ec2f3a2878d51f6f8c082ab1255fba01491098e276f7fd33f0639bd9461282803491ed0c0de30afa46ff1007e6c8e8b13f437c023acc5fd4b97db9e8a75ecee447795b7c679e4d22547de1e4c21501701a54f010dd1367821939a487170ae3a04afaf2e7db9b811617e0b80bdbfb51a9aa86b119578e3d9e95d347be4fd84e6557eb9328ed9cf708dc3174f0bd1f922c67a714a29c28e9b378a09bc08dcd129e0c51d3d40d65b6b5551254a23948578d67b0557a3180f1aaa7ccbec85ca3a9640f0ddf318d80cda0665d88dd1d3f7778f8fe4a16efd9f228fe46c6de01b8d144589b9f41c0c3022e5e81d941bb8f571ef553e67351e972950b1055483a458a2a8bd38d336d6d3d644697054ef83cba45e014559fdaa353172c28b0496594cd25d2370f206d5af6729bc624cdb9135be045c0a8d310ad4d724d840aa6d138f7573d3fadf2f95fc84988b6152be87a855dd62a01a26581c4a198ff9317dd95f19f3d8de21b1d3b8da1c147efa4cc5212a2c40f86562627f002fd557d6188d93bf97a0271a2c5a3e79e1376c75d5bf0af3a2951dd07b01561162cad1a794db4185dbbe9601cd6076e4c137b1d31c23d8cccd8f0b4d6357c966a58b2fe23d4c2eaa4a0ef5698464ea8aa02ed4394098fe09bd89bf9a61524b72e6f3235f6c3978ce1c1bc39616406e0d5168da50f80d7584b6f92786d35f83a13ede458dc6cf61a2eb14c0a5f0f93a59a5be82cc9990e40cfb1c281c9f08bd7fad6c6bb164d4d499c6b847d367ffbfb24ba9e19de338779ff5bfda886197f2effbe3f5a843b6557f3a0d60bc49cea1ad4804be65266f0cad166ddaff6e2a30f031bc8e37ee6a8ec718c1052797884f151aac2b0b87697973aafd56f59131a6e7e055d2136b74ed34734b11c933a312237010d5c6329708a7a3cf705ab6e2578a01bcd5e6ebc29d5f6b484cd45a5fe37b5940e91dd8f4e2532b2abfa3e2f3d8a8885b802353ca6ddd6c7cbd89072b792ae4a10bed91f256b942a5209ad2683ed3e7e49ab926d57f538866cc4e6430d2c945fe422f21655c3f388d55ed58a4dba5976b24d32dc9376649c436686d2ebad8f2641869225c38481de06c63bdf013e4c6719b0896d42734fdd90f40e4abd2c3e585fa3d856c5c6429bb69b6c0f7224fa6b807c1a9705ccd29bfb3e68491cae8d809880151493834c4787495cad0e7f25e4d5932198f01b56a4f4111d632007559b2117dbbaa1edcc85e1af2d1ccb9c1e795a0b164c44bd6a72bff6dcb4098d0944292ada49122f1808dc852c4087a36fbc0cb42e9c21c8c8b9eae9ff0b366f005731f847e94187ab20b52633c7699fcfb428256e7280ed62bf95c71779bcdf4cd0745cce874f48a2e64e21ffb762b98f03c77247b25a1fe5979cf4cf510d2201b445a706831c921f89647375fba42459417a5d6fa72eb37fdde8f234ddf899ced493e30f6f685f4e55511a9c026956064224655a540f672471349f0d8a88ab40", 0x1000, 0x7, 0x0, 0x1, r3}, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x8, 0x400, 0xffffffffffffffff, &(0x7f0000002200)="53a8da0e119f2c2fd8c0cd1825be01a93b1bde1c56386429043d595102182f2818f056bc93383f9dc64419681a46105ce2094c499eae653fa005d0ee13a021165a5b23baa25e1a1e66f22fa668e0cca21a398ac93bafdfefd5b213bc722e9fb8b8ba499265e09c060abb9d382feeda32e73ae4a9f1ab141d5b977d5302e15c30d999bb9c602b9cb73dd45cdc9d4762f4c9ae3ece12b46430581246a457a919733359b967d257edbdcd61662bd726217268811e86d7c820b64d3f271a2de18c539417a01700fd8480bfa491777ae2c59178c62a8ae53c1b110e8665b7b0bc7b185f964b8093816bbd33d62e5d5ca9a2", 0xef, 0x10001}, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x3, 0x8, r3, &(0x7f0000002340)="3b608dc6592d9f0ff4bf9b0c6fa3289d5e0d3309bed57a743dbf2e8e29f047d80fec6f27a14d135bd638adcf446998df14a783902c0a7089e4cab4c3f9c2ed4d57386f4e2f968040f94ec4f70a3abc9724b78544ecaa70d4ace0176a80dda138f56ca04b6a54d634a39d7b2de1c4742d5d2e0ca3e4c0f17f0ed3cbf4264d739f59d92f22e3d34955c7508ec7be80058e46c69c539863ca066fc6599da6b80432", 0xfffffffffffffff6, 0x1, 0x0, 0x1, r6}]) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000430001002dbd7000ffdbdf25e4ffffff04000100"], 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x14004040) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000040}, 0x6084) pwrite64(r6, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r6, 0x6609) 0s ago: executing program 3 (id=2771): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'hsr0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r5, 0x40047452, &(0x7f00000000c0)={0x18, 0x0, {0x1, @empty, 'geneve0\x00'}}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) close(r4) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000000)={[{@noblock_validity}, {@barrier_val={'barrier', 0x3d, 0x3ff}}, {@dax_never}, {@noblock_validity}]}, 0x1, 0x792, &(0x7f0000020c00)="$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") setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r7, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000024c10200000006125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) kernel console output (not intermixed with test programs): red [ 227.449077][T12941] Injecting memory failure for pfn 0x1479e7 at process virtual address 0x2041a000 [ 227.449096][T12941] Memory failure: 0x1479e7: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.449110][T12941] Memory failure: 0x1479e7: recovery action for dirty LRU page: Recovered [ 227.449117][T12941] Injecting memory failure for pfn 0x1479e6 at process virtual address 0x2041b000 [ 227.449136][T12941] Memory failure: 0x1479e6: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.449150][T12941] Memory failure: 0x1479e6: recovery action for dirty LRU page: Recovered [ 227.449157][T12941] Injecting memory failure for pfn 0x136e7c at process virtual address 0x2041c000 [ 227.449177][T12941] Memory failure: 0x136e7c: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.449191][T12941] Memory failure: 0x136e7c: recovery action for dirty LRU page: Recovered [ 227.449198][T12941] Injecting memory failure for pfn 0x13c334 at process virtual address 0x2041d000 [ 227.449217][T12941] Memory failure: 0x13c334: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.449231][T12941] Memory failure: 0x13c334: recovery action for dirty LRU page: Recovered [ 227.449238][T12941] Injecting memory failure for pfn 0x13bb77 at process virtual address 0x2041e000 [ 227.449257][T12941] Memory failure: 0x13bb77: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.449272][T12941] Memory failure: 0x13bb77: recovery action for dirty LRU page: Recovered [ 227.449279][T12941] Injecting memory failure for pfn 0x13b07f at process virtual address 0x2041f000 [ 227.449298][T12941] Memory failure: 0x13b07f: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.449313][T12941] Memory failure: 0x13b07f: recovery action for dirty LRU page: Recovered [ 227.449320][T12941] Injecting memory failure for pfn 0x13b07e at process virtual address 0x20420000 [ 227.449339][T12941] Memory failure: 0x13b07e: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.449354][T12941] Memory failure: 0x13b07e: recovery action for dirty LRU page: Recovered [ 227.449360][T12941] Injecting memory failure for pfn 0x13b07d at process virtual address 0x20421000 [ 227.449379][T12941] Memory failure: 0x13b07d: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.449394][T12941] Memory failure: 0x13b07d: recovery action for dirty LRU page: Recovered [ 227.449401][T12941] Injecting memory failure for pfn 0x13b07c at process virtual address 0x20422000 [ 227.449420][T12941] Memory failure: 0x13b07c: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.449434][T12941] Memory failure: 0x13b07c: recovery action for dirty LRU page: Recovered [ 227.449441][T12941] Injecting memory failure for pfn 0x13b2de at process virtual address 0x20423000 [ 227.449461][T12941] Memory failure: 0x13b2de: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.449475][T12941] Memory failure: 0x13b2de: recovery action for dirty LRU page: Recovered [ 227.449482][T12941] Injecting memory failure for pfn 0x13b3b2 at process virtual address 0x20424000 [ 227.449501][T12941] Memory failure: 0x13b3b2: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.449515][T12941] Memory failure: 0x13b3b2: recovery action for dirty LRU page: Recovered [ 227.449522][T12941] Injecting memory failure for pfn 0x13b2dc at process virtual address 0x20425000 [ 227.449541][T12941] Memory failure: 0x13b2dc: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.449555][T12941] Memory failure: 0x13b2dc: recovery action for dirty LRU page: Recovered [ 227.449562][T12941] Injecting memory failure for pfn 0x13aabc at process virtual address 0x20426000 [ 227.449582][T12941] Memory failure: 0x13aabc: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.449596][T12941] Memory failure: 0x13aabc: recovery action for dirty LRU page: Recovered [ 227.449603][T12941] Injecting memory failure for pfn 0x120c00 at process virtual address 0x20427000 [ 227.449622][T12941] Memory failure: 0x120c00: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.449637][T12941] Memory failure: 0x120c00: recovery action for dirty LRU page: Recovered [ 227.449644][T12941] Injecting memory failure for pfn 0x11d110 at process virtual address 0x20428000 [ 227.449663][T12941] Memory failure: 0x11d110: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.449677][T12941] Memory failure: 0x11d110: recovery action for dirty LRU page: Recovered [ 227.449684][T12941] Injecting memory failure for pfn 0x120c01 at process virtual address 0x20429000 [ 227.449703][T12941] Memory failure: 0x120c01: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.449717][T12941] Memory failure: 0x120c01: recovery action for dirty LRU page: Recovered [ 227.449724][T12941] Injecting memory failure for pfn 0x13b432 at process virtual address 0x2042a000 [ 227.449743][T12941] Memory failure: 0x13b432: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.449760][T12941] Memory failure: 0x13b432: recovery action for dirty LRU page: Recovered [ 227.449767][T12941] Injecting memory failure for pfn 0x13b433 at process virtual address 0x2042b000 [ 227.449787][T12941] Memory failure: 0x13b433: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.449801][T12941] Memory failure: 0x13b433: recovery action for dirty LRU page: Recovered [ 227.449808][T12941] Injecting memory failure for pfn 0x13647c at process virtual address 0x2042c000 [ 227.449827][T12941] Memory failure: 0x13647c: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.449841][T12941] Memory failure: 0x13647c: recovery action for dirty LRU page: Recovered [ 227.449848][T12941] Injecting memory failure for pfn 0x13647d at process virtual address 0x2042d000 [ 227.449868][T12941] Memory failure: 0x13647d: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.449882][T12941] Memory failure: 0x13647d: recovery action for dirty LRU page: Recovered [ 227.449889][T12941] Injecting memory failure for pfn 0x13647e at process virtual address 0x2042e000 [ 227.449909][T12941] Memory failure: 0x13647e: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.449923][T12941] Memory failure: 0x13647e: recovery action for dirty LRU page: Recovered [ 227.449930][T12941] Injecting memory failure for pfn 0x13647f at process virtual address 0x2042f000 [ 227.449949][T12941] Memory failure: 0x13647f: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.449963][T12941] Memory failure: 0x13647f: recovery action for dirty LRU page: Recovered [ 227.449970][T12941] Injecting memory failure for pfn 0x13a700 at process virtual address 0x20430000 [ 227.449989][T12941] Memory failure: 0x13a700: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.450004][T12941] Memory failure: 0x13a700: recovery action for dirty LRU page: Recovered [ 227.450011][T12941] Injecting memory failure for pfn 0x13a701 at process virtual address 0x20431000 [ 227.450030][T12941] Memory failure: 0x13a701: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.450045][T12941] Memory failure: 0x13a701: recovery action for dirty LRU page: Recovered [ 227.450051][T12941] Injecting memory failure for pfn 0x13a702 at process virtual address 0x20432000 [ 227.450071][T12941] Memory failure: 0x13a702: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.450085][T12941] Memory failure: 0x13a702: recovery action for dirty LRU page: Recovered [ 227.450092][T12941] Injecting memory failure for pfn 0x13a703 at process virtual address 0x20433000 [ 227.450112][T12941] Memory failure: 0x13a703: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.450126][T12941] Memory failure: 0x13a703: recovery action for dirty LRU page: Recovered [ 227.450133][T12941] Injecting memory failure for pfn 0x13afcc at process virtual address 0x20434000 [ 227.450152][T12941] Memory failure: 0x13afcc: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.450166][T12941] Memory failure: 0x13afcc: recovery action for dirty LRU page: Recovered [ 227.450173][T12941] Injecting memory failure for pfn 0x13afcd at process virtual address 0x20435000 [ 227.450192][T12941] Memory failure: 0x13afcd: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.450206][T12941] Memory failure: 0x13afcd: recovery action for dirty LRU page: Recovered [ 227.450213][T12941] Injecting memory failure for pfn 0x13afce at process virtual address 0x20436000 [ 227.450233][T12941] Memory failure: 0x13afce: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.450247][T12941] Memory failure: 0x13afce: recovery action for dirty LRU page: Recovered [ 227.450254][T12941] Injecting memory failure for pfn 0x13afcf at process virtual address 0x20437000 [ 227.450273][T12941] Memory failure: 0x13afcf: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.450288][T12941] Memory failure: 0x13afcf: recovery action for dirty LRU page: Recovered [ 227.450295][T12941] Injecting memory failure for pfn 0x1392dc at process virtual address 0x20438000 [ 227.450314][T12941] Memory failure: 0x1392dc: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.450328][T12941] Memory failure: 0x1392dc: recovery action for dirty LRU page: Recovered [ 227.450335][T12941] Injecting memory failure for pfn 0x1392dd at process virtual address 0x20439000 [ 227.450354][T12941] Memory failure: 0x1392dd: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.450368][T12941] Memory failure: 0x1392dd: recovery action for dirty LRU page: Recovered [ 227.450375][T12941] Injecting memory failure for pfn 0x1392de at process virtual address 0x2043a000 [ 227.450394][T12941] Memory failure: 0x1392de: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.450409][T12941] Memory failure: 0x1392de: recovery action for dirty LRU page: Recovered [ 227.450416][T12941] Injecting memory failure for pfn 0x1392df at process virtual address 0x2043b000 [ 227.450435][T12941] Memory failure: 0x1392df: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.450450][T12941] Memory failure: 0x1392df: recovery action for dirty LRU page: Recovered [ 227.450456][T12941] Injecting memory failure for pfn 0x11d50c at process virtual address 0x2043c000 [ 227.450476][T12941] Memory failure: 0x11d50c: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.450492][T12941] Memory failure: 0x11d50c: recovery action for dirty LRU page: Recovered [ 227.450500][T12941] Injecting memory failure for pfn 0x11d50d at process virtual address 0x2043d000 [ 227.450519][T12941] Memory failure: 0x11d50d: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.450534][T12941] Memory failure: 0x11d50d: recovery action for dirty LRU page: Recovered [ 227.450541][T12941] Injecting memory failure for pfn 0x11d50e at process virtual address 0x2043e000 [ 227.450559][T12941] Memory failure: 0x11d50e: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.450574][T12941] Memory failure: 0x11d50e: recovery action for dirty LRU page: Recovered [ 227.450581][T12941] Injecting memory failure for pfn 0x11d50f at process virtual address 0x2043f000 [ 227.450600][T12941] Memory failure: 0x11d50f: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.450614][T12941] Memory failure: 0x11d50f: recovery action for dirty LRU page: Recovered [ 227.450622][T12941] Injecting memory failure for pfn 0x123a28 at process virtual address 0x20440000 [ 227.450641][T12941] Memory failure: 0x123a28: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.450655][T12941] Memory failure: 0x123a28: recovery action for dirty LRU page: Recovered [ 227.450662][T12941] Injecting memory failure for pfn 0x123a29 at process virtual address 0x20441000 [ 227.450681][T12941] Memory failure: 0x123a29: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.450695][T12941] Memory failure: 0x123a29: recovery action for dirty LRU page: Recovered [ 227.450702][T12941] Injecting memory failure for pfn 0x123a2a at process virtual address 0x20442000 [ 227.450721][T12941] Memory failure: 0x123a2a: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.450736][T12941] Memory failure: 0x123a2a: recovery action for dirty LRU page: Recovered [ 227.450743][T12941] Injecting memory failure for pfn 0x123a2b at process virtual address 0x20443000 [ 227.450764][T12941] Memory failure: 0x123a2b: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.450779][T12941] Memory failure: 0x123a2b: recovery action for dirty LRU page: Recovered [ 227.450786][T12941] Injecting memory failure for pfn 0x13cd2a at process virtual address 0x20444000 [ 227.450805][T12941] Memory failure: 0x13cd2a: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.450820][T12941] Memory failure: 0x13cd2a: recovery action for dirty LRU page: Recovered [ 227.450827][T12941] Injecting memory failure for pfn 0x135bd0 at process virtual address 0x20445000 [ 227.450846][T12941] Memory failure: 0x135bd0: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.450861][T12941] Memory failure: 0x135bd0: recovery action for dirty LRU page: Recovered [ 227.450868][T12941] Injecting memory failure for pfn 0x138843 at process virtual address 0x20446000 [ 227.450887][T12941] Memory failure: 0x138843: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.450901][T12941] Memory failure: 0x138843: recovery action for dirty LRU page: Recovered [ 227.450908][T12941] Injecting memory failure for pfn 0x138842 at process virtual address 0x20447000 [ 227.450927][T12941] Memory failure: 0x138842: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.450941][T12941] Memory failure: 0x138842: recovery action for dirty LRU page: Recovered [ 227.450948][T12941] Injecting memory failure for pfn 0x138841 at process virtual address 0x20448000 [ 227.450967][T12941] Memory failure: 0x138841: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.450982][T12941] Memory failure: 0x138841: recovery action for dirty LRU page: Recovered [ 227.450989][T12941] Injecting memory failure for pfn 0x138840 at process virtual address 0x20449000 [ 227.451008][T12941] Memory failure: 0x138840: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.451022][T12941] Memory failure: 0x138840: recovery action for dirty LRU page: Recovered [ 227.451029][T12941] Injecting memory failure for pfn 0x13b431 at process virtual address 0x2044a000 [ 227.451048][T12941] Memory failure: 0x13b431: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.451063][T12941] Memory failure: 0x13b431: recovery action for dirty LRU page: Recovered [ 227.451070][T12941] Injecting memory failure for pfn 0x13b430 at process virtual address 0x2044b000 [ 227.451089][T12941] Memory failure: 0x13b430: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.451103][T12941] Memory failure: 0x13b430: recovery action for dirty LRU page: Recovered [ 227.451110][T12941] Injecting memory failure for pfn 0x1223ff at process virtual address 0x2044c000 [ 227.451138][T12941] Memory failure: 0x1223ff: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.451153][T12941] Memory failure: 0x1223ff: recovery action for dirty LRU page: Recovered [ 227.451160][T12941] Injecting memory failure for pfn 0x1223fe at process virtual address 0x2044d000 [ 227.451180][T12941] Memory failure: 0x1223fe: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.451194][T12941] Memory failure: 0x1223fe: recovery action for dirty LRU page: Recovered [ 227.451201][T12941] Injecting memory failure for pfn 0x1223fd at process virtual address 0x2044e000 [ 227.451221][T12941] Memory failure: 0x1223fd: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.451235][T12941] Memory failure: 0x1223fd: recovery action for dirty LRU page: Recovered [ 227.451242][T12941] Injecting memory failure for pfn 0x1223fc at process virtual address 0x2044f000 [ 227.451261][T12941] Memory failure: 0x1223fc: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.451276][T12941] Memory failure: 0x1223fc: recovery action for dirty LRU page: Recovered [ 227.451283][T12941] Injecting memory failure for pfn 0x1510f3 at process virtual address 0x20450000 [ 227.451302][T12941] Memory failure: 0x1510f3: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.451317][T12941] Memory failure: 0x1510f3: recovery action for dirty LRU page: Recovered [ 227.451324][T12941] Injecting memory failure for pfn 0x1510f2 at process virtual address 0x20451000 [ 227.451343][T12941] Memory failure: 0x1510f2: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.451358][T12941] Memory failure: 0x1510f2: recovery action for dirty LRU page: Recovered [ 227.451365][T12941] Injecting memory failure for pfn 0x1510f1 at process virtual address 0x20452000 [ 227.451384][T12941] Memory failure: 0x1510f1: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.451399][T12941] Memory failure: 0x1510f1: recovery action for dirty LRU page: Recovered [ 227.451406][T12941] Injecting memory failure for pfn 0x1510f0 at process virtual address 0x20453000 [ 227.451426][T12941] Memory failure: 0x1510f0: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.451441][T12941] Memory failure: 0x1510f0: recovery action for dirty LRU page: Recovered [ 227.451448][T12941] Injecting memory failure for pfn 0x151133 at process virtual address 0x20454000 [ 227.451467][T12941] Memory failure: 0x151133: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.451481][T12941] Memory failure: 0x151133: recovery action for dirty LRU page: Recovered [ 227.451488][T12941] Injecting memory failure for pfn 0x151132 at process virtual address 0x20455000 [ 227.451508][T12941] Memory failure: 0x151132: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.451522][T12941] Memory failure: 0x151132: recovery action for dirty LRU page: Recovered [ 227.451529][T12941] Injecting memory failure for pfn 0x151131 at process virtual address 0x20456000 [ 227.451550][T12941] Memory failure: 0x151131: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.451565][T12941] Memory failure: 0x151131: recovery action for dirty LRU page: Recovered [ 227.451572][T12941] Injecting memory failure for pfn 0x151130 at process virtual address 0x20457000 [ 227.451591][T12941] Memory failure: 0x151130: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.451605][T12941] Memory failure: 0x151130: recovery action for dirty LRU page: Recovered [ 227.451612][T12941] Injecting memory failure for pfn 0x13dba7 at process virtual address 0x20458000 [ 227.451631][T12941] Memory failure: 0x13dba7: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.451645][T12941] Memory failure: 0x13dba7: recovery action for dirty LRU page: Recovered [ 227.451652][T12941] Injecting memory failure for pfn 0x13dba6 at process virtual address 0x20459000 [ 227.451671][T12941] Memory failure: 0x13dba6: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.451685][T12941] Memory failure: 0x13dba6: recovery action for dirty LRU page: Recovered [ 227.451692][T12941] Injecting memory failure for pfn 0x13dba5 at process virtual address 0x2045a000 [ 227.451711][T12941] Memory failure: 0x13dba5: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.451726][T12941] Memory failure: 0x13dba5: recovery action for dirty LRU page: Recovered [ 227.451733][T12941] Injecting memory failure for pfn 0x13dba4 at process virtual address 0x2045b000 [ 227.451752][T12941] Memory failure: 0x13dba4: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.451769][T12941] Memory failure: 0x13dba4: recovery action for dirty LRU page: Recovered [ 227.451776][T12941] Injecting memory failure for pfn 0x12226b at process virtual address 0x2045c000 [ 227.451795][T12941] Memory failure: 0x12226b: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.451810][T12941] Memory failure: 0x12226b: recovery action for dirty LRU page: Recovered [ 227.451816][T12941] Injecting memory failure for pfn 0x12226a at process virtual address 0x2045d000 [ 227.451836][T12941] Memory failure: 0x12226a: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.451850][T12941] Memory failure: 0x12226a: recovery action for dirty LRU page: Recovered [ 227.451857][T12941] Injecting memory failure for pfn 0x122269 at process virtual address 0x2045e000 [ 227.451876][T12941] Memory failure: 0x122269: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.451890][T12941] Memory failure: 0x122269: recovery action for dirty LRU page: Recovered [ 227.451897][T12941] Injecting memory failure for pfn 0x122268 at process virtual address 0x2045f000 [ 227.451916][T12941] Memory failure: 0x122268: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.451930][T12941] Memory failure: 0x122268: recovery action for dirty LRU page: Recovered [ 227.451937][T12941] Injecting memory failure for pfn 0x13bf97 at process virtual address 0x20460000 [ 227.451956][T12941] Memory failure: 0x13bf97: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.451971][T12941] Memory failure: 0x13bf97: recovery action for dirty LRU page: Recovered [ 227.451978][T12941] Injecting memory failure for pfn 0x13bf96 at process virtual address 0x20461000 [ 227.451997][T12941] Memory failure: 0x13bf96: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.452011][T12941] Memory failure: 0x13bf96: recovery action for dirty LRU page: Recovered [ 227.452018][T12941] Injecting memory failure for pfn 0x13bf95 at process virtual address 0x20462000 [ 227.452037][T12941] Memory failure: 0x13bf95: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.452054][T12941] Memory failure: 0x13bf95: recovery action for dirty LRU page: Recovered [ 227.452061][T12941] Injecting memory failure for pfn 0x13bf94 at process virtual address 0x20463000 [ 227.452080][T12941] Memory failure: 0x13bf94: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.452095][T12941] Memory failure: 0x13bf94: recovery action for dirty LRU page: Recovered [ 227.452102][T12941] Injecting memory failure for pfn 0x13ad77 at process virtual address 0x20464000 [ 227.452121][T12941] Memory failure: 0x13ad77: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.452135][T12941] Memory failure: 0x13ad77: recovery action for dirty LRU page: Recovered [ 227.452142][T12941] Injecting memory failure for pfn 0x13ad76 at process virtual address 0x20465000 [ 227.452161][T12941] Memory failure: 0x13ad76: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.452175][T12941] Memory failure: 0x13ad76: recovery action for dirty LRU page: Recovered [ 227.452182][T12941] Injecting memory failure for pfn 0x13ad75 at process virtual address 0x20466000 [ 227.452201][T12941] Memory failure: 0x13ad75: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.452216][T12941] Memory failure: 0x13ad75: recovery action for dirty LRU page: Recovered [ 227.452223][T12941] Injecting memory failure for pfn 0x13ad74 at process virtual address 0x20467000 [ 227.452242][T12941] Memory failure: 0x13ad74: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.452256][T12941] Memory failure: 0x13ad74: recovery action for dirty LRU page: Recovered [ 227.452264][T12941] Injecting memory failure for pfn 0x121633 at process virtual address 0x20468000 [ 227.452282][T12941] Memory failure: 0x121633: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.452297][T12941] Memory failure: 0x121633: recovery action for dirty LRU page: Recovered [ 227.452303][T12941] Injecting memory failure for pfn 0x121632 at process virtual address 0x20469000 [ 227.452323][T12941] Memory failure: 0x121632: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.452337][T12941] Memory failure: 0x121632: recovery action for dirty LRU page: Recovered [ 227.452344][T12941] Injecting memory failure for pfn 0x121631 at process virtual address 0x2046a000 [ 227.452363][T12941] Memory failure: 0x121631: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.452377][T12941] Memory failure: 0x121631: recovery action for dirty LRU page: Recovered [ 227.452385][T12941] Injecting memory failure for pfn 0x121630 at process virtual address 0x2046b000 [ 227.452404][T12941] Memory failure: 0x121630: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.452419][T12941] Memory failure: 0x121630: recovery action for dirty LRU page: Recovered [ 227.452426][T12941] Injecting memory failure for pfn 0x1367cf at process virtual address 0x2046c000 [ 227.452445][T12941] Memory failure: 0x1367cf: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.452459][T12941] Memory failure: 0x1367cf: recovery action for dirty LRU page: Recovered [ 227.452466][T12941] Injecting memory failure for pfn 0x1367ce at process virtual address 0x2046d000 [ 227.452485][T12941] Memory failure: 0x1367ce: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.452500][T12941] Memory failure: 0x1367ce: recovery action for dirty LRU page: Recovered [ 227.452507][T12941] Injecting memory failure for pfn 0x1367cd at process virtual address 0x2046e000 [ 227.452526][T12941] Memory failure: 0x1367cd: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.452540][T12941] Memory failure: 0x1367cd: recovery action for dirty LRU page: Recovered [ 227.452547][T12941] Injecting memory failure for pfn 0x1367cc at process virtual address 0x2046f000 [ 227.452566][T12941] Memory failure: 0x1367cc: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.452580][T12941] Memory failure: 0x1367cc: recovery action for dirty LRU page: Recovered [ 227.452587][T12941] Injecting memory failure for pfn 0x13b6b7 at process virtual address 0x20470000 [ 227.452607][T12941] Memory failure: 0x13b6b7: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.452621][T12941] Memory failure: 0x13b6b7: recovery action for dirty LRU page: Recovered [ 227.452628][T12941] Injecting memory failure for pfn 0x13b6b6 at process virtual address 0x20471000 [ 227.452647][T12941] Memory failure: 0x13b6b6: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.452661][T12941] Memory failure: 0x13b6b6: recovery action for dirty LRU page: Recovered [ 227.452668][T12941] Injecting memory failure for pfn 0x13b6b5 at process virtual address 0x20472000 [ 227.452687][T12941] Memory failure: 0x13b6b5: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.452702][T12941] Memory failure: 0x13b6b5: recovery action for dirty LRU page: Recovered [ 227.452709][T12941] Injecting memory failure for pfn 0x13b6b4 at process virtual address 0x20473000 [ 227.452729][T12941] Memory failure: 0x13b6b4: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.452743][T12941] Memory failure: 0x13b6b4: recovery action for dirty LRU page: Recovered [ 227.452750][T12941] Injecting memory failure for pfn 0x12034b at process virtual address 0x20474000 [ 227.452772][T12941] Memory failure: 0x12034b: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.452786][T12941] Memory failure: 0x12034b: recovery action for dirty LRU page: Recovered [ 227.452793][T12941] Injecting memory failure for pfn 0x12034a at process virtual address 0x20475000 [ 227.452813][T12941] Memory failure: 0x12034a: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.452827][T12941] Memory failure: 0x12034a: recovery action for dirty LRU page: Recovered [ 227.452834][T12941] Injecting memory failure for pfn 0x120349 at process virtual address 0x20476000 [ 227.452853][T12941] Memory failure: 0x120349: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.452868][T12941] Memory failure: 0x120349: recovery action for dirty LRU page: Recovered [ 227.452875][T12941] Injecting memory failure for pfn 0x13cd93 at process virtual address 0x20477000 [ 227.452895][T12941] Memory failure: 0x13cd93: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.452909][T12941] Memory failure: 0x13cd93: recovery action for dirty LRU page: Recovered [ 227.452916][T12941] Injecting memory failure for pfn 0x13cd92 at process virtual address 0x20478000 [ 227.452935][T12941] Memory failure: 0x13cd92: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.452949][T12941] Memory failure: 0x13cd92: recovery action for dirty LRU page: Recovered [ 227.452956][T12941] Injecting memory failure for pfn 0x13cd91 at process virtual address 0x20479000 [ 227.452976][T12941] Memory failure: 0x13cd91: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.452990][T12941] Memory failure: 0x13cd91: recovery action for dirty LRU page: Recovered [ 227.452997][T12941] Injecting memory failure for pfn 0x13cd90 at process virtual address 0x2047a000 [ 227.453016][T12941] Memory failure: 0x13cd90: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.453031][T12941] Memory failure: 0x13cd90: recovery action for dirty LRU page: Recovered [ 227.453038][T12941] Injecting memory failure for pfn 0x13a0cf at process virtual address 0x2047b000 [ 227.453057][T12941] Memory failure: 0x13a0cf: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.453071][T12941] Memory failure: 0x13a0cf: recovery action for dirty LRU page: Recovered [ 227.453078][T12941] Injecting memory failure for pfn 0x13a0ce at process virtual address 0x2047c000 [ 227.453097][T12941] Memory failure: 0x13a0ce: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.453111][T12941] Memory failure: 0x13a0ce: recovery action for dirty LRU page: Recovered [ 227.453118][T12941] Injecting memory failure for pfn 0x13a0cd at process virtual address 0x2047d000 [ 227.453137][T12941] Memory failure: 0x13a0cd: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.453151][T12941] Memory failure: 0x13a0cd: recovery action for dirty LRU page: Recovered [ 227.453158][T12941] Injecting memory failure for pfn 0x13a0cc at process virtual address 0x2047e000 [ 227.453177][T12941] Memory failure: 0x13a0cc: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.453191][T12941] Memory failure: 0x13a0cc: recovery action for dirty LRU page: Recovered [ 227.453198][T12941] Injecting memory failure for pfn 0x1378d7 at process virtual address 0x2047f000 [ 227.453217][T12941] Memory failure: 0x1378d7: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.453238][T12941] Memory failure: 0x1378d7: recovery action for dirty LRU page: Recovered [ 227.453245][T12941] Injecting memory failure for pfn 0x1378d6 at process virtual address 0x20480000 [ 227.453264][T12941] Memory failure: 0x1378d6: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.453279][T12941] Memory failure: 0x1378d6: recovery action for dirty LRU page: Recovered [ 227.453286][T12941] Injecting memory failure for pfn 0x1378d5 at process virtual address 0x20481000 [ 227.453305][T12941] Memory failure: 0x1378d5: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.453320][T12941] Memory failure: 0x1378d5: recovery action for dirty LRU page: Recovered [ 227.453327][T12941] Injecting memory failure for pfn 0x1378d4 at process virtual address 0x20482000 [ 227.453346][T12941] Memory failure: 0x1378d4: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.453360][T12941] Memory failure: 0x1378d4: recovery action for dirty LRU page: Recovered [ 227.453367][T12941] Injecting memory failure for pfn 0x150df3 at process virtual address 0x20483000 [ 227.453386][T12941] Memory failure: 0x150df3: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.453401][T12941] Memory failure: 0x150df3: recovery action for dirty LRU page: Recovered [ 227.453407][T12941] Injecting memory failure for pfn 0x150df2 at process virtual address 0x20484000 [ 227.453427][T12941] Memory failure: 0x150df2: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.453441][T12941] Memory failure: 0x150df2: recovery action for dirty LRU page: Recovered [ 227.453448][T12941] Injecting memory failure for pfn 0x150df1 at process virtual address 0x20485000 [ 227.453467][T12941] Memory failure: 0x150df1: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.453481][T12941] Memory failure: 0x150df1: recovery action for dirty LRU page: Recovered [ 227.453488][T12941] Injecting memory failure for pfn 0x150df0 at process virtual address 0x20486000 [ 227.453507][T12941] Memory failure: 0x150df0: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.515125][T12941] Memory failure: 0x150df0: recovery action for dirty LRU page: Recovered [ 227.515149][T12941] Injecting memory failure for pfn 0x13ec4b at process virtual address 0x20487000 [ 227.515850][T12941] Memory failure: 0x13ec4b: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.515883][T12941] Memory failure: 0x13ec4b: recovery action for dirty LRU page: Recovered [ 227.515895][T12941] Injecting memory failure for pfn 0x13ec4a at process virtual address 0x20488000 [ 227.515929][T12941] Memory failure: 0x13ec4a: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.515947][T12941] Memory failure: 0x13ec4a: recovery action for dirty LRU page: Recovered [ 227.515955][T12941] Injecting memory failure for pfn 0x13ec49 at process virtual address 0x20489000 [ 227.515979][T12941] Memory failure: 0x13ec49: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.515999][T12941] Memory failure: 0x13ec49: recovery action for dirty LRU page: Recovered [ 227.516007][T12941] Injecting memory failure for pfn 0x13ec48 at process virtual address 0x2048a000 [ 227.516029][T12941] Memory failure: 0x13ec48: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.516044][T12941] Memory failure: 0x13ec48: recovery action for dirty LRU page: Recovered [ 227.516052][T12941] Injecting memory failure for pfn 0x13cde3 at process virtual address 0x2048b000 [ 227.516073][T12941] Memory failure: 0x13cde3: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.516088][T12941] Memory failure: 0x13cde3: recovery action for dirty LRU page: Recovered [ 227.516096][T12941] Injecting memory failure for pfn 0x13cde2 at process virtual address 0x2048c000 [ 227.516116][T12941] Memory failure: 0x13cde2: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.516131][T12941] Memory failure: 0x13cde2: recovery action for dirty LRU page: Recovered [ 227.516138][T12941] Injecting memory failure for pfn 0x13cde1 at process virtual address 0x2048d000 [ 227.516159][T12941] Memory failure: 0x13cde1: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.519638][T12941] Memory failure: 0x13cde1: recovery action for dirty LRU page: Recovered [ 227.519654][T12941] Injecting memory failure for pfn 0x13cde0 at process virtual address 0x2048e000 [ 227.519766][T12941] Memory failure: 0x13cde0: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.519784][T12941] Memory failure: 0x13cde0: recovery action for dirty LRU page: Recovered [ 227.519792][T12941] Injecting memory failure for pfn 0x1393bf at process virtual address 0x2048f000 [ 227.519820][T12941] Memory failure: 0x1393bf: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.519837][T12941] Memory failure: 0x1393bf: recovery action for dirty LRU page: Recovered [ 227.519844][T12941] Injecting memory failure for pfn 0x1393be at process virtual address 0x20490000 [ 227.519867][T12941] Memory failure: 0x1393be: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.519882][T12941] Memory failure: 0x1393be: recovery action for dirty LRU page: Recovered [ 227.519889][T12941] Injecting memory failure for pfn 0x1393bd at process virtual address 0x20491000 [ 227.519911][T12941] Memory failure: 0x1393bd: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.519926][T12941] Memory failure: 0x1393bd: recovery action for dirty LRU page: Recovered [ 227.519933][T12941] Injecting memory failure for pfn 0x1393bc at process virtual address 0x20492000 [ 227.519953][T12941] Memory failure: 0x1393bc: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.519969][T12941] Memory failure: 0x1393bc: recovery action for dirty LRU page: Recovered [ 227.519976][T12941] Injecting memory failure for pfn 0x13631b at process virtual address 0x20493000 [ 227.519997][T12941] Memory failure: 0x13631b: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.520012][T12941] Memory failure: 0x13631b: recovery action for dirty LRU page: Recovered [ 227.520019][T12941] Injecting memory failure for pfn 0x13631a at process virtual address 0x20494000 [ 227.520039][T12941] Memory failure: 0x13631a: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.520054][T12941] Memory failure: 0x13631a: recovery action for dirty LRU page: Recovered [ 227.520061][T12941] Injecting memory failure for pfn 0x136319 at process virtual address 0x20495000 [ 227.520081][T12941] Memory failure: 0x136319: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.520095][T12941] Memory failure: 0x136319: recovery action for dirty LRU page: Recovered [ 227.520102][T12941] Injecting memory failure for pfn 0x136318 at process virtual address 0x20496000 [ 227.520123][T12941] Memory failure: 0x136318: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.520138][T12941] Memory failure: 0x136318: recovery action for dirty LRU page: Recovered [ 227.520145][T12941] Injecting memory failure for pfn 0x139167 at process virtual address 0x20497000 [ 227.520165][T12941] Memory failure: 0x139167: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.520180][T12941] Memory failure: 0x139167: recovery action for dirty LRU page: Recovered [ 227.520187][T12941] Injecting memory failure for pfn 0x139165 at process virtual address 0x20498000 [ 227.520206][T12941] Memory failure: 0x139165: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.520221][T12941] Memory failure: 0x139165: recovery action for dirty LRU page: Recovered [ 227.520228][T12941] Injecting memory failure for pfn 0x139164 at process virtual address 0x20499000 [ 227.520247][T12941] Memory failure: 0x139164: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.520262][T12941] Memory failure: 0x139164: recovery action for dirty LRU page: Recovered [ 227.520269][T12941] Injecting memory failure for pfn 0x13588f at process virtual address 0x2049a000 [ 227.520289][T12941] Memory failure: 0x13588f: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.520303][T12941] Memory failure: 0x13588f: recovery action for dirty LRU page: Recovered [ 227.520310][T12941] Injecting memory failure for pfn 0x13588e at process virtual address 0x2049b000 [ 227.520330][T12941] Memory failure: 0x13588e: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.520344][T12941] Memory failure: 0x13588e: recovery action for dirty LRU page: Recovered [ 227.520351][T12941] Injecting memory failure for pfn 0x13588d at process virtual address 0x2049c000 [ 227.520371][T12941] Memory failure: 0x13588d: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.520386][T12941] Memory failure: 0x13588d: recovery action for dirty LRU page: Recovered [ 227.520393][T12941] Injecting memory failure for pfn 0x13588c at process virtual address 0x2049d000 [ 227.520413][T12941] Memory failure: 0x13588c: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.520428][T12941] Memory failure: 0x13588c: recovery action for dirty LRU page: Recovered [ 227.520435][T12941] Injecting memory failure for pfn 0x139277 at process virtual address 0x2049e000 [ 227.520454][T12941] Memory failure: 0x139277: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.520469][T12941] Memory failure: 0x139277: recovery action for dirty LRU page: Recovered [ 227.520476][T12941] Injecting memory failure for pfn 0x139276 at process virtual address 0x2049f000 [ 227.520496][T12941] Memory failure: 0x139276: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.520510][T12941] Memory failure: 0x139276: recovery action for dirty LRU page: Recovered [ 227.520518][T12941] Injecting memory failure for pfn 0x139275 at process virtual address 0x204a0000 [ 227.520537][T12941] Memory failure: 0x139275: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.520552][T12941] Memory failure: 0x139275: recovery action for dirty LRU page: Recovered [ 227.520559][T12941] Injecting memory failure for pfn 0x139274 at process virtual address 0x204a1000 [ 227.520578][T12941] Memory failure: 0x139274: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.523957][T12941] Memory failure: 0x139274: recovery action for dirty LRU page: Recovered [ 227.523975][T12941] Injecting memory failure for pfn 0x13b0df at process virtual address 0x204a2000 [ 227.524463][T12941] Memory failure: 0x13b0df: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.524494][T12941] Memory failure: 0x13b0df: recovery action for dirty LRU page: Recovered [ 227.524504][T12941] Injecting memory failure for pfn 0x13b0de at process virtual address 0x204a3000 [ 227.524830][T12941] Memory failure: 0x13b0de: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.524853][T12941] Memory failure: 0x13b0de: recovery action for dirty LRU page: Recovered [ 227.524864][T12941] Injecting memory failure for pfn 0x13b0dd at process virtual address 0x204a4000 [ 227.524895][T12941] Memory failure: 0x13b0dd: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.524912][T12941] Memory failure: 0x13b0dd: recovery action for dirty LRU page: Recovered [ 227.524920][T12941] Injecting memory failure for pfn 0x13b0dc at process virtual address 0x204a5000 [ 227.524945][T12941] Memory failure: 0x13b0dc: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.524961][T12941] Memory failure: 0x13b0dc: recovery action for dirty LRU page: Recovered [ 227.524969][T12941] Injecting memory failure for pfn 0x13d9bb at process virtual address 0x204a6000 [ 227.525237][T12941] Memory failure: 0x13d9bb: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.525258][T12941] Memory failure: 0x13d9bb: recovery action for dirty LRU page: Recovered [ 227.525266][T12941] Injecting memory failure for pfn 0x13d9ba at process virtual address 0x204a7000 [ 227.525425][T12941] Memory failure: 0x13d9ba: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.525441][T12941] Memory failure: 0x13d9ba: recovery action for dirty LRU page: Recovered [ 227.525449][T12941] Injecting memory failure for pfn 0x13d9b9 at process virtual address 0x204a8000 [ 227.525470][T12941] Memory failure: 0x13d9b9: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.525486][T12941] Memory failure: 0x13d9b9: recovery action for dirty LRU page: Recovered [ 227.525493][T12941] Injecting memory failure for pfn 0x13d9b8 at process virtual address 0x204a9000 [ 227.525513][T12941] Memory failure: 0x13d9b8: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.525528][T12941] Memory failure: 0x13d9b8: recovery action for dirty LRU page: Recovered [ 227.525535][T12941] Injecting memory failure for pfn 0x13c12b at process virtual address 0x204aa000 [ 227.525556][T12941] Memory failure: 0x13c12b: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.525571][T12941] Memory failure: 0x13c12b: recovery action for dirty LRU page: Recovered [ 227.525578][T12941] Injecting memory failure for pfn 0x13c12a at process virtual address 0x204ab000 [ 227.525598][T12941] Memory failure: 0x13c12a: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.525612][T12941] Memory failure: 0x13c12a: recovery action for dirty LRU page: Recovered [ 227.525619][T12941] Injecting memory failure for pfn 0x13c129 at process virtual address 0x204ac000 [ 227.525639][T12941] Memory failure: 0x13c129: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.525654][T12941] Memory failure: 0x13c129: recovery action for dirty LRU page: Recovered [ 227.525661][T12941] Injecting memory failure for pfn 0x13c128 at process virtual address 0x204ad000 [ 227.525680][T12941] Memory failure: 0x13c128: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.525695][T12941] Memory failure: 0x13c128: recovery action for dirty LRU page: Recovered [ 227.525702][T12941] Injecting memory failure for pfn 0x13859b at process virtual address 0x204ae000 [ 227.525722][T12941] Memory failure: 0x13859b: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.525736][T12941] Memory failure: 0x13859b: recovery action for dirty LRU page: Recovered [ 227.525743][T12941] Injecting memory failure for pfn 0x13859a at process virtual address 0x204af000 [ 227.525767][T12941] Memory failure: 0x13859a: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.525782][T12941] Memory failure: 0x13859a: recovery action for dirty LRU page: Recovered [ 227.525789][T12941] Injecting memory failure for pfn 0x138599 at process virtual address 0x204b0000 [ 227.525808][T12941] Memory failure: 0x138599: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.525823][T12941] Memory failure: 0x138599: recovery action for dirty LRU page: Recovered [ 227.525830][T12941] Injecting memory failure for pfn 0x138598 at process virtual address 0x204b1000 [ 227.525849][T12941] Memory failure: 0x138598: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.525864][T12941] Memory failure: 0x138598: recovery action for dirty LRU page: Recovered [ 227.525871][T12941] Injecting memory failure for pfn 0x13ab57 at process virtual address 0x204b2000 [ 227.525890][T12941] Memory failure: 0x13ab57: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.525904][T12941] Memory failure: 0x13ab57: recovery action for dirty LRU page: Recovered [ 227.525911][T12941] Injecting memory failure for pfn 0x13ab56 at process virtual address 0x204b3000 [ 227.525932][T12941] Memory failure: 0x13ab56: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.525946][T12941] Memory failure: 0x13ab56: recovery action for dirty LRU page: Recovered [ 227.525953][T12941] Injecting memory failure for pfn 0x13ab55 at process virtual address 0x204b4000 [ 227.525972][T12941] Memory failure: 0x13ab55: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.525987][T12941] Memory failure: 0x13ab55: recovery action for dirty LRU page: Recovered [ 227.525994][T12941] Injecting memory failure for pfn 0x13ab54 at process virtual address 0x204b5000 [ 227.526013][T12941] Memory failure: 0x13ab54: Sending SIGBUS to syz.0.2327:12941 due to hardware memory corruption [ 227.526027][T12941] Memory failure: 0x13ab54: recovery action for dirty LRU page: Recovered [ 227.702294][T12973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2338'. [ 227.837760][T12681] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.922170][T12980] cgroup: Invalid name [ 228.007789][ T50] Bluetooth: hci2: command tx timeout [ 228.754435][T13026] fuse: fd is not a fuse device [ 228.911867][T13037] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2354'. [ 229.957641][T13074] netlink: 'syz.3.2360': attribute type 1 has an invalid length. [ 230.042957][T13074] 8021q: adding VLAN 0 to HW filter on device bond4 [ 230.088830][T13087] could not allocate digest TFM handle digest_null-generic [ 230.144092][T13095] veth0_to_team: entered promiscuous mode [ 230.164416][T13098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2372'. [ 230.191152][ T50] Bluetooth: hci2: command tx timeout [ 230.207794][T13097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2372'. [ 230.219730][T13070] loop5: detected capacity change from 0 to 32768 [ 230.226715][T13101] bond4: up delay (2) is not a multiple of miimon (4), value rounded to 0 ms [ 230.226732][T13101] bond4: option downdelay: invalid value (18446744073709547521) [ 230.226743][T13101] bond4: option downdelay: allowed values 0 - 2147483647 [ 230.230324][T13101] bond4 (unregistering): Released all slaves [ 230.238189][T13107] fuse: fd is not a fuse device [ 230.238655][T13107] fuse: fd is not a fuse device [ 230.293224][T13111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2376'. [ 230.294074][T13070] loop5: p1 < > p2 p3 < p5 > p4 < > [ 230.294091][T13070] loop5: partition table partially beyond EOD, truncated [ 230.337099][T13070] loop5: p4 start 117441586 is beyond EOD, truncated [ 230.455294][T12693] udevd[12693]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 230.456878][T12692] udevd[12692]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 230.462918][T12282] udevd[12282]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 230.468464][T12281] udevd[12281]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 230.502874][T13119] syzkaller0: entered promiscuous mode [ 230.502889][T13119] syzkaller0: entered allmulticast mode [ 230.538369][T13119] loop5: detected capacity change from 0 to 2048 [ 230.550653][T13127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2381'. [ 230.554995][T13127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2381'. [ 230.620637][T13119] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.884066][T12681] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.300522][T13161] netlink: 'syz.3.2390': attribute type 1 has an invalid length. [ 231.334803][T13161] 8021q: adding VLAN 0 to HW filter on device bond5 [ 231.360597][T13161] veth9: entered promiscuous mode [ 231.384880][T13161] bond5: (slave veth9): Enslaving as an active interface with a down link [ 231.389050][T13161] veth10: entered allmulticast mode [ 231.457390][T13171] x_tables: duplicate underflow at hook 1 [ 231.462272][T13161] bond5: (slave veth11): Enslaving as an active interface with a down link [ 231.574030][T13177] overlayfs: failed to clone upperpath [ 231.804001][T13175] fuse: fd is not a fuse device [ 232.396710][T13198] __nla_validate_parse: 1 callbacks suppressed [ 232.396724][T13198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2400'. [ 232.401586][T13198] netlink: 648 bytes leftover after parsing attributes in process `syz.3.2400'. [ 232.401616][T13198] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2400'. [ 232.414797][ T50] Bluetooth: hci2: command tx timeout [ 232.482150][T13206] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2403'. [ 232.501082][T13210] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2404'. [ 232.514607][T13206] loop5: detected capacity change from 0 to 2034 [ 232.571465][T13206] Alternate GPT is invalid, using primary GPT. [ 232.571609][T13206] loop5: p2 p3 p7 [ 232.601154][T13215] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.622960][T13218] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2407'. [ 232.622995][T13218] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2407'. [ 232.667446][T12692] udevd[12692]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 232.669978][T12282] udevd[12282]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 232.672466][T12281] udevd[12281]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 232.770814][T13215] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.773502][T13226] IPv6: NLM_F_REPLACE set, but no existing node found! [ 233.668135][T13215] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.794301][T13215] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.976507][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.978681][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.981440][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.983871][ T5125] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.657340][ T1597] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.658649][ T1597] ieee802154 phy1 wpan1: encryption failed: -22 [ 288.590493][T13307] cgroup: subsys name conflicts with all [ 290.063650][T13339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2421'. [ 290.617255][T13351] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2424'. [ 290.617355][T13352] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2424'. [ 290.663105][ T30] audit: type=1326 audit(524563.571:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13340 comm="syz.5.2422" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c377b68 code=0x0 [ 290.789570][T13360] PKCS7: Unknown OID: [5] (bad) [ 290.789601][T13360] PKCS7: Only support pkcs7_signedData type [ 290.940125][ T30] audit: type=1400 audit(524563.838:1489): lsm=SMACK fn=smack_inode_permission action=denied subject="_" object="lowerdir" requested=w pid=13368 comm="syz.1.2428" name="file1" dev="tmpfs" ino=2741 [ 291.225041][T13390] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 291.574240][T13419] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2444'. [ 291.577758][T13417] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2443'. [ 291.579506][T13417] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2443'. [ 291.629179][T13423] overlayfs: failed to clone upperpath [ 291.634002][T13423] overlayfs: failed to clone lowerpath [ 291.650873][T13425] team_slave_0: entered promiscuous mode [ 291.652045][T13425] team_slave_0: entered allmulticast mode [ 291.740677][T13438] overlayfs: failed to clone lowerpath [ 291.786475][ T30] audit: type=1326 audit(524564.614:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13443 comm="syz.2.2454" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9177b68 code=0x7ffc0000 [ 291.791018][ T30] audit: type=1326 audit(524564.614:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13443 comm="syz.2.2454" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9177b68 code=0x7ffc0000 [ 291.791042][ T30] audit: type=1326 audit(524564.614:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13443 comm="syz.2.2454" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa9177b68 code=0x7ffc0000 [ 291.791060][ T30] audit: type=1326 audit(524564.614:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13443 comm="syz.2.2454" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9177b68 code=0x7ffc0000 [ 291.791075][ T30] audit: type=1326 audit(524564.614:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13443 comm="syz.2.2454" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9177b68 code=0x7ffc0000 [ 291.800372][ T30] audit: type=1326 audit(524564.623:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13443 comm="syz.2.2454" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffa9177b68 code=0x7ffc0000 [ 291.800398][ T30] audit: type=1326 audit(524564.623:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13443 comm="syz.2.2454" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9177b68 code=0x7ffc0000 [ 291.800415][ T30] audit: type=1326 audit(524564.623:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13443 comm="syz.2.2454" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9177b68 code=0x7ffc0000 [ 291.819159][T13444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2454'. [ 291.919946][T13452] loop5: detected capacity change from 0 to 256 [ 291.926649][T13452] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 291.928656][T13452] FAT-fs (loop5): Filesystem has been set read-only [ 292.267019][T13467] loop5: detected capacity change from 0 to 8 [ 292.270299][T13467] squashfs: Unknown parameter '' [ 292.272960][T13465] batadv_slave_0: Caught tx_queue_len zero misconfig [ 292.455101][T13473] loop5: detected capacity change from 0 to 1024 [ 292.465672][T13473] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 292.470299][T13473] EXT4-fs (loop5): orphan cleanup on readonly fs [ 292.476488][T13473] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #3: block 1: comm syz.5.2466: lblock 1 mapped to illegal pblock 1 (length 1) [ 292.476534][T13473] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 292.477546][T13473] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.2466: Failed to acquire dquot type 0 [ 292.477569][T13473] loop5: lost filesystem error report for type 5 error -117 [ 292.477788][T13473] EXT4-fs error (device loop5): ext4_free_blocks:6718: comm syz.5.2466: Freeing blocks not in datazone - block = 0, count = 4096 [ 292.477810][T13473] loop5: lost filesystem error report for type 5 error -117 [ 292.478495][T13473] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.2466: Invalid inode bitmap blk 0 in block_group 0 [ 292.478525][T13473] loop5: lost filesystem error report for type 5 error -117 [ 292.478715][T13473] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 292.478727][T13473] loop5: lost filesystem error report for type 5 error -117 [ 292.478827][T13473] EXT4-fs (loop5): 1 orphan inode deleted [ 292.479889][ T5127] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 292.479913][ T5127] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 292.481599][ T5127] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:11: Failed to release dquot type 0 [ 292.481621][ T5127] loop5: lost filesystem error report for type 5 error -117 [ 292.483266][T13473] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 292.511486][T13480] 9p: Bad value for 'rfdno' [ 292.512997][T13480] overlayfs: failed to clone upperpath [ 292.568655][T13488] overlayfs: failed to resolve './file0': -2 [ 293.432444][T13529] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2486'. [ 293.435252][T13529] netlink: 'syz.3.2486': attribute type 15 has an invalid length. [ 293.471107][T12681] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.781912][T13539] tipc: Started in network mode [ 293.783106][T13539] tipc: Node identity 84e, cluster identity 4711 [ 293.785323][T13539] tipc: Node number set to 2126 [ 293.788447][T13541] bpf setsockopt: ignoring program buffer with optlen=536870928 (max_optlen=4096) [ 294.257541][T13560] loop5: detected capacity change from 0 to 1024 [ 294.272510][T13560] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 294.273481][T13560] JBD2: no valid journal superblock found [ 294.282008][T13560] EXT4-fs (loop5): Could not load journal inode [ 294.372756][T13570] netlink: 'syz.0.2497': attribute type 29 has an invalid length. [ 294.375207][T13570] netlink: 'syz.0.2497': attribute type 29 has an invalid length. [ 294.526125][T13567] batman_adv: batadv0: Adding interface: macvtap1 [ 294.526155][T13567] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.526194][T13567] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 294.804318][T13586] netlink: 'syz.3.2503': attribute type 12 has an invalid length. [ 294.804462][T13585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2504'. [ 295.067241][T13598] loop5: detected capacity change from 0 to 512 [ 295.073653][T13598] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.079685][T13598] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.2508: corrupted xattr block 13: invalid checksum [ 295.085386][T13598] EXT4-fs (loop5): Remounting filesystem read-only [ 295.102916][T12681] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.119598][T13604] loop5: detected capacity change from 0 to 8 [ 295.311917][T13606] SQUASHFS error: Failed to read block 0x657: -5 [ 295.311988][T13606] SQUASHFS error: Unable to read metadata cache entry [655] [ 295.312037][T13606] SQUASHFS error: Unable to read directory block [260685:0] [ 295.313097][T13606] SQUASHFS error: Unable to read metadata cache entry [655] [ 295.313470][T13606] SQUASHFS error: Unable to read directory block [655:3] [ 295.667857][T13626] lo speed is unknown, defaulting to 1000 [ 295.683250][T13622] lo speed is unknown, defaulting to 1000 [ 295.987280][T13663] 9p: Bad value for 'rfdno' [ 296.107714][T13694] loop5: detected capacity change from 0 to 128 [ 296.123703][T13694] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 296.140602][T13692] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2536'. [ 296.182899][T12681] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 296.256593][T13706] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2539'. [ 296.256627][T13706] netlink: 'syz.1.2539': attribute type 1 has an invalid length. [ 296.256637][T13706] netlink: 47 bytes leftover after parsing attributes in process `syz.1.2539'. [ 296.861349][T13745] netlink: 'syz.2.2553': attribute type 1 has an invalid length. [ 297.154541][T13749] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2554'. [ 297.154572][T13749] netlink: 'syz.2.2554': attribute type 1 has an invalid length. [ 297.154582][T13749] netlink: 47 bytes leftover after parsing attributes in process `syz.2.2554'. [ 297.213426][T13754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2556'. [ 297.213579][T13754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2556'. [ 297.213589][T13754] net_ratelimit: 3 callbacks suppressed [ 297.213595][T13754] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 297.224009][T13759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2556'. [ 297.225933][T13759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2556'. [ 297.227707][T13759] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 297.444450][T13782] loop5: detected capacity change from 0 to 256 [ 297.453508][T13782] ip6t_rpfilter: unknown options [ 297.455855][T13782] x_tables: unsorted underflow at hook 2 [ 297.458646][T13773] netlink: 428 bytes leftover after parsing attributes in process `syz.0.2561'. [ 297.559632][T13791] loop5: detected capacity change from 0 to 512 [ 297.560035][T13791] EXT4-fs: Ignoring removed bh option [ 297.578365][T13791] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.583075][T13791] EXT4-fs error (device loop5): ext4_search_dir:1474: inode #2: block 3: comm syz.5.2566: bad entry in directory: directory entry overrun - offset=16444, inode=113, rec_len=2048, size=2048 fake=0 [ 297.583570][T13791] EXT4-fs (loop5): Remounting filesystem read-only [ 297.600407][T13794] bridge9: entered promiscuous mode [ 297.601087][T12681] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.603529][T13794] bridge9: entered allmulticast mode [ 297.696140][T13798] bond4 (unregistering): Released all slaves [ 297.801217][T13820] IPVS: length: 152 != 8 [ 297.841945][T13820] loop5: detected capacity change from 0 to 512 [ 297.844871][T13820] EXT4-fs: inline encryption not supported [ 297.845218][T13820] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 298.643280][T13872] binder: 13871:13872 tried to acquire reference to desc 0, got 1 instead [ 298.643580][T13872] binder: 13871:13872 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 298.643592][T13872] binder: 13872 RLIMIT_NICE not set [ 298.643604][T13872] binder: 13872 RLIMIT_NICE not set [ 298.643722][T13872] binder: 13872 RLIMIT_NICE not set [ 298.643731][T13872] binder_alloc: 13871: binder_alloc_buf, no vma [ 298.643737][T13872] binder: cannot allocate buffer: vma cleared, target dead or dying [ 298.643752][T13872] binder: 13871:13872 transaction reply to 13871:13872 failed 22/29189/-3, code 0 size 104-24 line 3393 [ 298.643785][T13872] binder: send failed reply for transaction 21 to 13871:13872 [ 298.645089][ T10] binder: undelivered TRANSACTION_COMPLETE [ 298.645106][ T10] binder: undelivered TRANSACTION_ERROR: 29189 [ 298.653668][ T10] binder: undelivered TRANSACTION_ERROR: 29190 [ 298.685548][T13880] loop5: detected capacity change from 0 to 1024 [ 298.687492][T13880] EXT4-fs: Ignoring removed oldalloc option [ 298.689923][T13880] ext4: Unknown parameter 'nojournal' [ 299.175978][T13900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.180774][T13900] IPv6: NLM_F_REPLACE set, but no existing node found! [ 299.203245][T13910] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.203285][T13910] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.411231][ T4395] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 299.551477][T13938] loop5: detected capacity change from 0 to 1024 [ 299.560285][T13938] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.637966][T12681] EXT4-fs error (device loop5): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 299.639650][T12681] EXT4-fs (loop5): Remounting filesystem read-only [ 299.651709][T12681] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.669436][T13946] loop5: detected capacity change from 0 to 8 [ 299.996255][T13948] SQUASHFS error: Failed to read block 0x657: -5 [ 299.996295][T13948] SQUASHFS error: Unable to read metadata cache entry [655] [ 299.996319][T13948] SQUASHFS error: Unable to read directory block [260685:0] [ 299.996714][T13948] SQUASHFS error: Unable to read metadata cache entry [655] [ 299.996734][T13948] SQUASHFS error: Unable to read directory block [655:3] [ 300.169332][T13978] fuse: fd is not a fuse device [ 300.212081][T13982] overlayfs: missing 'workdir' [ 300.639171][ T30] kauditd_printk_skb: 104 callbacks suppressed [ 300.640610][ T30] audit: type=1326 audit(524572.756:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14016 comm="syz.0.2619" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96f77b68 code=0x7ffc0000 [ 300.645560][ T30] audit: type=1326 audit(524572.756:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14016 comm="syz.0.2619" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96f77b68 code=0x7ffc0000 [ 300.645669][ T30] audit: type=1326 audit(524572.756:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14016 comm="syz.0.2619" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96f77b68 code=0x7ffc0000 [ 300.645785][ T30] audit: type=1326 audit(524572.756:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14016 comm="syz.0.2619" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=237 compat=0 ip=0xffff96f77b68 code=0x7ffc0000 [ 300.645895][ T30] audit: type=1326 audit(524572.756:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14016 comm="syz.0.2619" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96f77b68 code=0x7ffc0000 [ 300.645990][ T30] audit: type=1326 audit(524572.756:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14016 comm="syz.0.2619" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96f77b68 code=0x7ffc0000 [ 300.646097][ T30] audit: type=1326 audit(524572.756:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14016 comm="syz.0.2619" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96f77b68 code=0x7ffc0000 [ 300.646186][ T30] audit: type=1326 audit(524572.756:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14016 comm="syz.0.2619" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff96f77b68 code=0x7ffc0000 [ 300.646274][ T30] audit: type=1326 audit(524572.756:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14016 comm="syz.0.2619" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96f77b68 code=0x7ffc0000 [ 300.650729][ T30] audit: type=1326 audit(524572.766:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14016 comm="syz.0.2619" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96f77b68 code=0x7ffc0000 [ 300.852885][T14028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.854956][T14028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.855551][ T50] Bluetooth: hci2: unexpected subevent 0x1b length: 12 < 18 [ 300.858941][T14028] loop5: detected capacity change from 0 to 512 [ 300.866017][T14028] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 300.872345][T14028] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 300.875294][T14028] System zones: 1-2, 4-12, 8-8 [ 300.878095][T14028] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.2622: iget: bad i_size value: 38620345925642 [ 300.881278][T14028] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 300.881589][T14028] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.2622: couldn't read orphan inode 15 (err -117) [ 300.886369][T14028] loop5: lost filesystem error report for type 5 error -117 [ 300.887088][T14028] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.232984][T14048] fuse: fd is not a fuse device [ 301.398982][T14069] x_tables: duplicate underflow at hook 1 [ 301.468684][T12681] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.594945][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.662861][ T4722] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 301.664673][ T4722] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 301.666565][ T4722] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 301.668839][ T4722] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 301.669096][ T4722] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 301.723660][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.756222][T14076] lo speed is unknown, defaulting to 1000 [ 301.824933][T14076] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.825705][T14076] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.825806][T14076] bridge_slave_0: entered allmulticast mode [ 301.826248][T14076] bridge_slave_0: entered promiscuous mode [ 301.828233][T14076] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.828260][T14076] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.828318][T14076] bridge_slave_1: entered allmulticast mode [ 301.828735][T14076] bridge_slave_1: entered promiscuous mode [ 301.837285][T14076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.838335][T14076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.848997][T14076] team0: Port device team_slave_0 added [ 301.849940][T14076] team0: Port device team_slave_1 added [ 301.864615][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.869469][T14076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.869493][T14076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.869508][T14076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.870144][T14076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.870152][T14076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.870167][T14076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.885956][T14076] hsr_slave_0: entered promiscuous mode [ 301.886422][T14076] hsr_slave_1: entered promiscuous mode [ 301.888782][T14076] debugfs: 'hsr0' already exists in 'hsr' [ 301.888794][T14076] Cannot create hsr debugfs directory [ 301.954018][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.003105][ T4722] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 302.004468][ T4722] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 302.005352][ T4722] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 302.009473][ T4722] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 302.009733][ T4722] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 302.107125][T14093] lo speed is unknown, defaulting to 1000 [ 302.365948][ T12] batman_adv: batadv0: Removing interface: ip6gretap1 [ 302.727424][ T12] bond0 (unregistering): left promiscuous mode [ 302.728944][ T12] bond_slave_0: left promiscuous mode [ 302.730588][ T12] bond_slave_1: left promiscuous mode [ 302.746532][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.776727][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.819287][ T12] bond0 (unregistering): Released all slaves [ 302.822241][ T12] bond1 (unregistering): (slave veth3): Releasing active interface [ 302.822282][ T12] vlan2: entered promiscuous mode [ 302.853966][ T12] bond1 (unregistering): (slave vlan2): Releasing active interface [ 302.863806][ T12] bond1 (unregistering): Released all slaves [ 302.867903][ T12] bond2 (unregistering): Released all slaves [ 302.872044][ T12] bond3 (unregistering): Released all slaves [ 302.876207][ T12] bond4 (unregistering): Released all slaves [ 302.880732][ T12] bond5 (unregistering): (slave veth9): Releasing active interface [ 302.906683][ T12] bond5 (unregistering): (slave veth11): Releasing active interface [ 302.910073][ T12] bond5 (unregistering): Released all slaves [ 302.928456][T10231] syz_tun (unregistering): left allmulticast mode [ 303.022104][ T12] tipc: Disabling bearer [ 303.022238][ T12] tipc: Left network mode [ 303.096701][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 303.097830][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 303.100079][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 303.100432][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 303.100667][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 303.143930][T14093] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.145343][T14093] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.146702][T14093] bridge_slave_0: entered allmulticast mode [ 303.150000][T14093] bridge_slave_0: entered promiscuous mode [ 303.152394][T14093] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.155232][T14093] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.156503][T14093] bridge_slave_1: entered allmulticast mode [ 303.158124][T14093] bridge_slave_1: entered promiscuous mode [ 303.194438][ T4395] 8021q: adding VLAN 0 to HW filter on device eth4 [ 303.240096][T14093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.242970][T14093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.259309][T14093] team0: Port device team_slave_0 added [ 303.272415][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 303.274573][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 303.275045][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 303.276064][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 303.276310][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 303.292685][T14093] team0: Port device team_slave_1 added [ 303.315624][T14093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.315664][T14093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.315895][T14093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.317269][T14093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.317278][T14093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.317294][T14093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.337276][T14093] hsr_slave_0: entered promiscuous mode [ 303.337585][T14093] hsr_slave_1: entered promiscuous mode [ 303.337787][T14093] debugfs: 'hsr0' already exists in 'hsr' [ 303.337798][T14093] Cannot create hsr debugfs directory [ 303.395123][ T12] batadv0: left promiscuous mode [ 303.397713][ T12] hsr_slave_0: left promiscuous mode [ 303.398055][ T12] hsr_slave_1: left promiscuous mode [ 303.398264][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.398276][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.398603][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.406988][ T12] veth1_macvtap: left promiscuous mode [ 303.407030][ T12] veth0_macvtap: left promiscuous mode [ 303.407081][ T12] veth1_vlan: left promiscuous mode [ 303.407108][ T12] veth0_vlan: left promiscuous mode [ 303.662572][ T4708] lo speed is unknown, defaulting to 1000 [ 303.662613][ T4708] infiniband syz!: ib_query_port failed (-19) [ 303.864988][ T50] Bluetooth: hci2: command tx timeout [ 303.883052][T14093] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.910315][T14131] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.911747][T14131] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.916733][T14131] bridge_slave_0: entered allmulticast mode [ 303.918301][T14131] bridge_slave_0: entered promiscuous mode [ 303.920512][T14131] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.921846][T14131] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.923533][T14131] bridge_slave_1: entered allmulticast mode [ 303.925044][T14131] bridge_slave_1: entered promiscuous mode [ 303.941024][T14131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.945689][T14131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.957979][T14131] team0: Port device team_slave_0 added [ 303.959961][T14131] team0: Port device team_slave_1 added [ 304.017886][T14093] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.031111][T14131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.036713][T14131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.041561][T14131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.044723][T14131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.046059][T14131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.050691][T14131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.056223][ T12] IPVS: stop unused estimator thread 0... [ 304.108528][T14093] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.110636][T14213] netlink: 'syz.0.2655': attribute type 21 has an invalid length. [ 304.115624][T14131] hsr_slave_0: entered promiscuous mode [ 304.116430][T14131] hsr_slave_1: entered promiscuous mode [ 304.123811][T14213] __nla_validate_parse: 14 callbacks suppressed [ 304.123852][T14213] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2655'. [ 304.143237][T14146] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.143327][T14146] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.143395][T14146] bridge_slave_0: entered allmulticast mode [ 304.143869][T14146] bridge_slave_0: entered promiscuous mode [ 304.144963][T14146] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.145042][T14146] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.145100][T14146] bridge_slave_1: entered allmulticast mode [ 304.145549][T14146] bridge_slave_1: entered promiscuous mode [ 304.165929][T14146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.166934][T14146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.177206][ T12] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.195777][ T50] Bluetooth: hci3: command tx timeout [ 304.206857][T14227] netlink: 'syz.0.2656': attribute type 16 has an invalid length. [ 304.207812][T14146] team0: Port device team_slave_0 added [ 304.208612][T14146] team0: Port device team_slave_1 added [ 304.210320][T14227] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2656'. [ 304.224439][T14146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.224473][T14146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.224488][T14146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.242010][T14093] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.246881][T14146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.246920][T14146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.246939][T14146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.255001][ T12] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.288497][T14146] hsr_slave_0: entered promiscuous mode [ 304.288870][T14146] hsr_slave_1: entered promiscuous mode [ 304.289435][T14146] debugfs: 'hsr0' already exists in 'hsr' [ 304.289609][T14146] Cannot create hsr debugfs directory [ 304.408141][ T12] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.454545][T14239] netlink: 5096 bytes leftover after parsing attributes in process `syz.0.2657'. [ 304.571683][ T12] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.610850][T14076] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 304.618911][T14076] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 304.619252][T14076] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 304.622343][T14076] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 304.623908][T14076] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 304.626165][T14076] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 304.627197][T14076] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 304.629913][T14076] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 304.731151][T14076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.776011][T14131] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.776055][T14131] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.806806][T14076] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.814625][T11303] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.814687][T11303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.832144][T14076] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 304.832176][T14076] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 304.845554][T11303] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.845599][T11303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.888740][T14131] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.888789][T14131] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.989403][T14131] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.989453][T14131] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.018222][T14076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.063452][T14076] veth0_vlan: entered promiscuous mode [ 305.067117][T14076] veth1_vlan: entered promiscuous mode [ 305.078851][T14076] veth0_macvtap: entered promiscuous mode [ 305.085804][T14076] veth1_macvtap: entered promiscuous mode [ 305.090257][T14076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.095437][T14076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.097840][T11298] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.098206][T11298] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.098227][T11298] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.098243][T11298] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.331276][ T50] Bluetooth: hci1: command tx timeout [ 305.342303][ T12] bridge_slave_0: left allmulticast mode [ 305.342415][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.356009][ T12] dvmrp5: left allmulticast mode [ 305.493912][ T50] Bluetooth: hci4: command tx timeout [ 305.580776][ T12] bridge_slave_1: left promiscuous mode [ 305.582060][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.585636][ T12] bridge_slave_0: left allmulticast mode [ 305.586715][ T12] bridge_slave_0: left promiscuous mode [ 305.587914][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.594159][ T12] veth3: left allmulticast mode [ 305.595241][ T12] veth3: left promiscuous mode [ 305.596389][ T12] bridge2: port 1(veth3) entered disabled state [ 305.808466][ T12] bridge_slave_1: left allmulticast mode [ 305.808538][ T12] bridge_slave_1: left promiscuous mode [ 305.808642][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.811482][ T12] bridge_slave_0: left allmulticast mode [ 305.811496][ T12] bridge_slave_0: left promiscuous mode [ 305.811551][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.100379][ T50] Bluetooth: hci2: command tx timeout [ 306.180977][ T12] bond1 (unregistering): (slave vti0): Releasing backup interface [ 306.181009][ T12] vti0 (unregistering): left promiscuous mode [ 306.427221][ T12] bond5 (unregistering): (slave bridge5): Releasing active interface [ 306.446786][ T50] Bluetooth: hci3: command tx timeout [ 306.699225][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.718774][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.772780][ T12] bond0 (unregistering): Released all slaves [ 306.775219][ T12] bond1 (unregistering): Released all slaves [ 306.779511][ T12] bond2 (unregistering): (slave veth3): Releasing active interface [ 306.816116][ T12] bond2 (unregistering): Released all slaves [ 306.820236][ T12] bond3 (unregistering): Released all slaves [ 306.824249][ T12] bond4 (unregistering): Released all slaves [ 306.835392][ T12] bond5 (unregistering): Released all slaves [ 306.892031][ T12] bond5 (unregistering): (slave gretap1): Releasing active interface [ 306.927975][ T12] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 306.958401][ T12] team0: Port device bridge0 removed [ 307.109626][ T12] bond5 (unregistering): (slave bridge4): Releasing active interface [ 307.209645][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.228925][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.270983][ T12] bond0 (unregistering): Released all slaves [ 307.273895][ T12] bond1 (unregistering): Released all slaves [ 307.277885][ T12] bond2 (unregistering): Released all slaves [ 307.281991][ T12] bond3 (unregistering): Released all slaves [ 307.285797][ T12] bond4 (unregistering): Released all slaves [ 307.289952][ T12] bond5 (unregistering): Released all slaves [ 307.294442][ T12] bond6 (unregistering): Released all slaves [ 307.298709][ T12] bond7 (unregistering): Released all slaves [ 307.359741][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.401987][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.411971][ T12] bond0 (unregistering): Released all slaves [ 307.416591][ T4395] 8021q: adding VLAN 0 to HW filter on device eth4 [ 307.439876][T14131] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 307.441015][T14131] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 307.441300][T14131] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 307.442154][T14131] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 307.442419][T14131] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 307.443298][T14131] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 307.443577][T14131] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 307.444379][T14131] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 307.463152][T14131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.472481][T14131] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.484663][T11300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.484697][T11300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.503242][T11300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.503270][T11300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.574364][ T50] Bluetooth: hci1: command tx timeout [ 307.589989][T11300] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.590035][T11300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.590584][T11300] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.590609][T11300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.616718][ T12] tipc: Disabling bearer [ 307.616817][ T12] tipc: Left network mode [ 307.719602][ T12] tipc: Left network mode [ 307.731681][T14319] syz_tun: entered allmulticast mode [ 307.735911][ T12] tipc: Left network mode [ 307.737144][T14318] ptrace attach of "ci-upstream-gce-arm64/syz-executor exec"[14326] was attempted by "ci-upstream-gce-arm64/syz-executor exec"[14318] [ 307.745140][ T4395] 8021q: adding VLAN 0 to HW filter on device eth5 [ 307.747409][ T50] Bluetooth: hci4: command tx timeout [ 307.808514][ T12] IPVS: stopping backup sync thread 11202 ... [ 307.814207][T14336] tipc: Enabled bearer , priority 10 [ 307.833711][T14336] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2662'. [ 307.838239][T14336] tipc: Enabling of bearer rejected, failed to enable media [ 307.876144][T14348] faux_driver vgem: [drm] Unknown color mode 134909; guessing buffer size. [ 307.894920][T14131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.945015][T14131] veth0_vlan: entered promiscuous mode [ 307.948230][T14131] veth1_vlan: entered promiscuous mode [ 307.976929][T14131] veth0_macvtap: entered promiscuous mode [ 307.979516][T14131] veth1_macvtap: entered promiscuous mode [ 307.986275][T14131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.997541][T14131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.000779][T11298] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.000872][T11298] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.000930][T11298] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.000978][T11298] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.056766][T14372] loop3: detected capacity change from 0 to 8 [ 308.130798][T14378] netlink: 'syz.0.2669': attribute type 1 has an invalid length. [ 308.145225][T14378] 8021q: adding VLAN 0 to HW filter on device bond4 [ 308.161044][T14378] vlan0: entered allmulticast mode [ 308.162496][T14378] bond0: entered allmulticast mode [ 308.164094][T14378] bond4: (slave vlan0): Opening slave failed [ 308.175676][ T5125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.177580][ T5125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.198824][T11300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.200772][T11300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.230149][T14093] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 308.236339][T14093] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 308.236697][T14093] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 308.241189][T14093] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 308.242544][T14093] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 308.246468][T14093] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 308.353659][ T50] Bluetooth: hci2: command tx timeout [ 308.494220][T14093] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 308.515220][T14385] SQUASHFS error: Failed to read block 0x657: -5 [ 308.515263][T14386] SQUASHFS error: Unable to read metadata cache entry [655] [ 308.515286][T14386] SQUASHFS error: Unable to read directory block [655:3] [ 308.515327][T14385] SQUASHFS error: Unable to read metadata cache entry [655] [ 308.515340][T14385] SQUASHFS error: Unable to read directory block [260685:0] [ 308.531141][T14093] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 308.576566][T14397] 9p: Bad value for 'rfdno' [ 308.671863][T14093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.674227][T14146] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 308.676673][T14146] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 308.683795][T14146] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 308.686892][T14146] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 308.708280][ T50] Bluetooth: hci3: command tx timeout [ 309.123643][T14146] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 309.510886][T14146] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 309.512758][T14146] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 309.521076][T14146] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 309.528672][T14093] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.633838][ T4821] tipc: Node number set to 2886997007 [ 309.752141][T14416] overlayfs: failed to clone upperpath [ 309.753606][ T5125] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.753657][ T5125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.758729][ T5125] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.758767][ T5125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.837317][ T50] Bluetooth: hci1: command tx timeout [ 309.889330][T14093] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 310.000270][ T50] Bluetooth: hci4: command tx timeout [ 310.075791][T14146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.084014][T14146] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.094331][ T5127] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.094381][ T5127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.109007][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.109064][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.424891][T14093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.483311][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.485024][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.487119][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.488698][ T12] batman_adv: batadv0: Interface deactivated: dummy0 [ 310.489867][ T12] batman_adv: batadv0: Removing interface: dummy0 [ 310.495000][ T12] hsr_slave_0: left promiscuous mode [ 310.496424][ T12] hsr_slave_1: left promiscuous mode [ 310.498688][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.498723][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.502174][ T12] batman_adv: batadv0: Removing interface: virt_wifi0 [ 310.504085][ T12] batman_adv: batadv0: Removing interface: macvtap1 [ 310.507614][ T12] hsr_slave_0: left promiscuous mode [ 310.509691][ T12] hsr_slave_1: left promiscuous mode [ 310.510953][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.512307][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.513763][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.515138][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.530874][ T12] hsr0: left allmulticast mode [ 310.531798][ T12] veth1_macvtap: left promiscuous mode [ 310.532756][ T12] veth0_macvtap: left promiscuous mode [ 310.533753][ T12] veth1_vlan: left promiscuous mode [ 310.535393][ T12] veth1_macvtap: left promiscuous mode [ 310.536465][ T12] veth0_macvtap: left promiscuous mode [ 310.537561][ T12] veth1_vlan: left promiscuous mode [ 310.539697][ T12] veth1_macvtap: left promiscuous mode [ 310.540741][ T12] veth0_macvtap: left promiscuous mode [ 310.541910][ T12] veth1_vlan: left promiscuous mode [ 310.542928][ T12] veth0_vlan: left promiscuous mode [ 310.591260][T14490] fuse: fd is not a fuse device [ 310.606979][ T50] Bluetooth: hci2: command tx timeout [ 310.953653][ T50] Bluetooth: hci3: command tx timeout [ 311.007131][ T12] team0 (unregistering): Port device team_slave_1 removed [ 311.010684][T14496] loop1: detected capacity change from 0 to 128 [ 311.018905][T14496] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 311.074003][T14131] VFS: Lookup of 'file0' in vfat loop1 would have caused loop [ 311.076339][T14131] VFS: Lookup of 'file0' in vfat loop1 would have caused loop [ 311.145732][ T12] team0 (unregistering): Port device team_slave_1 removed [ 311.152650][ T12] team0 (unregistering): Port device team_slave_0 removed [ 311.286073][ T12] team0 (unregistering): Port device team_slave_1 removed [ 311.297411][ T12] team0 (unregistering): Port device team_slave_0 removed [ 311.381175][T14146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.437763][T14146] veth0_vlan: entered promiscuous mode [ 311.441560][T14146] veth1_vlan: entered promiscuous mode [ 311.459806][T14093] veth0_vlan: entered promiscuous mode [ 311.461313][T14146] veth0_macvtap: entered promiscuous mode [ 311.479494][T14146] veth1_macvtap: entered promiscuous mode [ 311.480834][T14093] veth1_vlan: entered promiscuous mode [ 311.499834][T14146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.500376][T14093] veth0_macvtap: entered promiscuous mode [ 311.503435][T14146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.506050][ T5127] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.506168][ T5127] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.506195][ T5127] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.506217][ T5127] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.507234][T14093] veth1_macvtap: entered promiscuous mode [ 311.522936][T14093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.523990][T14093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.528490][ T15] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.528649][ T15] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.528716][ T15] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.528793][ T15] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.594668][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.594706][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.641935][ T5127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.641976][ T5127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.663011][T11300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.663044][T11300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.717231][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.717264][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.720908][T14517] netem: incorrect gi model size [ 311.721196][T14517] netem: change failed [ 311.914095][T14535] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 311.994839][T14541] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2701'. [ 311.995364][T14541] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 312.044485][T14551] loop5: detected capacity change from 0 to 512 [ 312.047266][T14551] EXT4-fs (loop5): #blocks per group too big: 8724480 [ 312.086432][T14554] loop5: detected capacity change from 0 to 256 [ 312.090700][T14556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2705'. [ 312.115946][ T12] IPVS: stop unused estimator thread 0... [ 312.146407][ T40] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 312.152130][T14554] FAT-fs (loop5): Directory bread(block 64) failed [ 312.152171][T14554] FAT-fs (loop5): Directory bread(block 65) failed [ 312.152220][T14554] FAT-fs (loop5): Directory bread(block 66) failed [ 312.152242][T14554] FAT-fs (loop5): Directory bread(block 67) failed [ 312.152276][T14554] FAT-fs (loop5): Directory bread(block 68) failed [ 312.152294][T14554] FAT-fs (loop5): Directory bread(block 69) failed [ 312.152325][T14554] FAT-fs (loop5): Directory bread(block 70) failed [ 312.152341][T14554] FAT-fs (loop5): Directory bread(block 71) failed [ 312.152368][T14554] FAT-fs (loop5): Directory bread(block 72) failed [ 312.152383][T14554] FAT-fs (loop5): Directory bread(block 73) failed [ 312.242972][ T15] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.264929][ T50] Bluetooth: hci4: command tx timeout [ 312.282269][ T4722] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 312.290103][ T4722] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 312.291491][ T4722] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 312.297540][ T4722] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 312.299161][ T4722] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 312.485207][T14578] loop3: detected capacity change from 0 to 512 [ 312.513533][T14578] EXT4-fs (loop3): Test dummy encryption mode enabled [ 312.521273][T14578] EXT4-fs (loop3): 1 truncate cleaned up [ 312.527286][T14578] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.539121][T14577] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2711: invalid indirect mapped block 234881024 (level 0) [ 312.621202][T14558] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.621283][T14558] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.621348][T14558] bridge_slave_0: entered allmulticast mode [ 312.621864][T14558] bridge_slave_0: entered promiscuous mode [ 312.622674][T14558] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.622696][T14558] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.622752][T14558] bridge_slave_1: entered allmulticast mode [ 312.623184][T14558] bridge_slave_1: entered promiscuous mode [ 312.642032][T14558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.643171][T14558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.650432][T14558] team0: Port device team_slave_0 added [ 312.651210][T14558] team0: Port device team_slave_1 added [ 312.674974][T14558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.675167][T14558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.675199][T14558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.675759][T14558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.675778][T14558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.675797][T14558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.688338][T14558] hsr_slave_0: entered promiscuous mode [ 312.688663][T14558] hsr_slave_1: entered promiscuous mode [ 312.688891][T14558] debugfs: 'hsr0' already exists in 'hsr' [ 312.688902][T14558] Cannot create hsr debugfs directory [ 312.706608][T14076] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.793727][ T15] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.878094][ T15] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.917233][T14558] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 312.940161][T14619] loop2: detected capacity change from 0 to 256 [ 312.942010][T14619] vfat: Unknown parameter 'nnonumtail' [ 312.959181][T14558] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 312.961245][T14558] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 312.964126][T14558] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 312.978986][T14622] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2721'. [ 312.984068][T14558] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 312.990187][T14558] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 313.044152][ T15] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.085149][T14558] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 313.136467][T14558] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 313.193360][T14558] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.193426][T14558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.193520][T14558] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.193556][T14558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.509973][ T15] bridge_slave_1: left allmulticast mode [ 313.511330][ T15] bridge_slave_1: left promiscuous mode [ 313.512421][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.517584][ T15] bridge_slave_0: left allmulticast mode [ 313.517609][ T15] bridge_slave_0: left promiscuous mode [ 313.519043][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.662405][ T15] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.705502][ T15] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.749088][ T15] bond0 (unregistering): Released all slaves [ 313.788876][T14558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.797976][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.799238][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.895742][T14558] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.951636][ T4395] 8021q: adding VLAN 0 to HW filter on device eth4 [ 313.960001][ T5127] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.960063][ T5127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.963419][T14659] input: syz0 as /devices/virtual/input/input3 [ 313.982530][T14650] Soft offlining pfn 0x21959e at process virtual address 0x20ffe000 [ 313.984149][T14650] Soft offline: 0x21959e: page already poisoned [ 313.985577][T14650] Soft offlining pfn 0x21959e at process virtual address 0x20fff000 [ 313.988122][T14650] Soft offline: 0x21959e: page already poisoned [ 313.990339][T14661] syzkaller1: entered promiscuous mode [ 313.991595][T14661] syzkaller1: entered allmulticast mode [ 313.995064][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.995110][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.195281][T14691] loop5: detected capacity change from 0 to 512 [ 314.197479][T14691] EXT4-fs (loop5): Test dummy encryption mode enabled [ 314.198369][ T4395] 8021q: adding VLAN 0 to HW filter on device eth5 [ 314.248839][T14691] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.2732: inode has both inline data and extents flags [ 314.248891][T14691] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 314.256480][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 314.256514][ C0] EXT4-fs (loop5): initial error at time 524585: ext4_orphan_get:1397: inode 15 [ 314.256537][ C0] EXT4-fs (loop5): last error at time 524585: ext4_orphan_get:1397: inode 15 [ 314.262291][T14691] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.2732: couldn't read orphan inode 15 (err -117) [ 314.264328][T14691] loop5: lost filesystem error report for type 5 error -117 [ 314.267523][T14691] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.272898][T14691] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 314.379356][T14703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2733'. [ 314.516695][ T4722] Bluetooth: hci1: command tx timeout [ 314.884421][ T15] hsr_slave_0: left promiscuous mode [ 314.923026][ T15] hsr_slave_1: left promiscuous mode [ 314.979205][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.981968][ T15] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.022514][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.025141][ T15] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.147287][ T15] veth1_macvtap: left promiscuous mode [ 315.147332][ T15] veth0_macvtap: left promiscuous mode [ 315.147381][ T15] veth1_vlan: left promiscuous mode [ 315.147411][ T15] veth0_vlan: left promiscuous mode [ 315.170933][T14705] loop3: detected capacity change from 0 to 1024 [ 315.178239][T14705] loop3: detected capacity change from 0 to 512 [ 315.178504][T14705] overlayfs: failed lookup in lower (newroot/16, name='file0', err=-40): overlapping layers [ 315.178628][T14705] overlayfs: failed lookup in lower (newroot/16, name='file0', err=-40): overlapping layers [ 315.432625][T14723] loop2: detected capacity change from 0 to 1024 [ 315.432982][T14723] EXT4-fs: Ignoring removed nomblk_io_submit option [ 315.487585][T14723] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.510788][ T15] team0 (unregistering): Port device team_slave_1 removed [ 315.518124][ T15] team0 (unregistering): Port device team_slave_0 removed [ 315.536949][T14146] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.647844][ T4395] 8021q: adding VLAN 0 to HW filter on device eth6 [ 315.751372][ T30] kauditd_printk_skb: 512 callbacks suppressed [ 315.752787][ T30] audit: type=1326 audit(524586.734:2121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14724 comm="syz.3.2736" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8d77b68 code=0x0 [ 315.812252][T14558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.959632][T14558] veth0_vlan: entered promiscuous mode [ 315.964872][T14558] veth1_vlan: entered promiscuous mode [ 315.967491][ T4395] 8021q: adding VLAN 0 to HW filter on device eth7 [ 315.994058][T14558] veth0_macvtap: entered promiscuous mode [ 315.998552][T14558] veth1_macvtap: entered promiscuous mode [ 316.013902][T14558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.019485][T14558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.028887][ T15] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.028944][ T15] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.028972][ T15] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.028996][ T15] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.084144][ T5127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.084186][ T5127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.106040][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.106067][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.116439][T14783] 9p: Bad value for 'rfdno' [ 316.180030][T14785] netlink: 'syz.0.2744': attribute type 6 has an invalid length. [ 316.180065][T14785] netlink: 'syz.0.2744': attribute type 4 has an invalid length. [ 316.272160][T14796] openvswitch: netlink: Key type 254 is out of range max 32 [ 316.316937][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 316.319453][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 316.320399][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 316.320822][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 316.321030][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 316.356379][T14799] loop6: detected capacity change from 0 to 2048 [ 316.376592][T14737] overlayfs: statfs failed on './file0' [ 316.405598][T14799] loop6: p1 < > [ 316.441240][T14809] loop3: detected capacity change from 0 to 512 [ 316.442845][T14809] EXT4-fs: Ignoring removed i_version option [ 316.442870][T14809] EXT4-fs: Ignoring removed nobh option [ 316.449790][T14809] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 316.459347][T14809] EXT4-fs (loop3): 1 truncate cleaned up [ 316.459837][T14809] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.491191][T14076] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.534201][T14814] loop3: detected capacity change from 0 to 512 [ 316.534587][T14814] EXT4-fs: Ignoring removed nomblk_io_submit option [ 316.567676][T14814] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.633570][T14076] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.637884][T14093] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.666669][T14823] netlink: 276 bytes leftover after parsing attributes in process `syz.5.2750'. [ 316.671336][T14823] netlink: 276 bytes leftover after parsing attributes in process `syz.5.2750'. [ 316.692671][T14825] netlink: 'syz.3.2749': attribute type 5 has an invalid length. [ 316.751757][T14797] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.753415][T14797] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.755075][T14797] bridge_slave_0: entered allmulticast mode [ 316.756782][T14797] bridge_slave_0: entered promiscuous mode [ 316.759580][ T50] Bluetooth: hci1: command tx timeout [ 316.763181][T14797] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.764671][T14797] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.766519][T14797] bridge_slave_1: entered allmulticast mode [ 316.768456][T14797] bridge_slave_1: entered promiscuous mode [ 316.975518][ T50] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 316.975552][ T50] CPU: 1 UID: 0 PID: 50 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT [ 316.975568][ T50] Tainted: [L]=SOFTLOCKUP [ 316.975572][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 316.975579][ T50] Workqueue: hci3 hci_rx_work [ 316.975597][ T50] Call trace: [ 316.975601][ T50] show_stack+0x2c/0x3c (C) [ 316.975617][ T50] __dump_stack+0x30/0x40 [ 316.975630][ T50] dump_stack_lvl+0xd8/0x12c [ 316.975642][ T50] dump_stack+0x1c/0x28 [ 316.975653][ T50] sysfs_warn_dup+0x9c/0xb8 [ 316.975665][ T50] sysfs_create_dir_ns+0x190/0x1f4 [ 316.975676][ T50] kobject_add_internal+0x290/0x6f0 [ 316.975689][ T50] kobject_add_varg+0x9c/0xe8 [ 316.975698][ T50] kobject_add+0x110/0x1c8 [ 316.975708][ T50] device_add+0x394/0x9f0 [ 316.975719][ T50] hci_conn_add_sysfs+0xbc/0x1e8 [ 316.975732][ T50] le_conn_complete_evt+0xc68/0x10f8 [ 316.975744][ T50] hci_le_conn_complete_evt+0x114/0x3d8 [ 316.975755][ T50] hci_le_meta_evt+0x2b0/0x46c [ 316.975773][ T50] hci_event_packet+0x4c0/0x9c8 [ 316.975785][ T50] hci_rx_work+0x2f4/0xd78 [ 316.975794][ T50] process_scheduled_works+0x788/0x10b8 [ 316.975805][ T50] worker_thread+0x798/0xbd0 [ 316.975815][ T50] kthread+0x304/0x3d4 [ 316.975824][ T50] ret_from_fork+0x10/0x20 [ 316.975850][ T50] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 316.975873][ T50] Bluetooth: hci3: failed to register connection device [ 316.988654][T14797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.989815][T14797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.996751][T14797] team0: Port device team_slave_0 added [ 317.003693][T14797] team0: Port device team_slave_1 added [ 317.050020][T14797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.050059][T14797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.050072][T14797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.052337][T14797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.052348][T14797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.055812][T14797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.113484][T14797] hsr_slave_0: entered promiscuous mode [ 317.119242][T14797] hsr_slave_1: entered promiscuous mode [ 317.147371][T14850] syzkaller0: entered promiscuous mode [ 317.148560][T14850] syzkaller0: entered allmulticast mode [ 317.158943][T14850] loop3: detected capacity change from 0 to 2048 [ 317.181236][T14850] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.188407][ T4339] loop6: p1 < > [ 317.193313][T14855] loop2: detected capacity change from 0 to 512 [ 317.208007][T14855] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.2758: inode has both inline data and extents flags [ 317.208038][T14855] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 317.210474][T14855] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2758: couldn't read orphan inode 15 (err -117) [ 317.210504][T14855] loop2: lost filesystem error report for type 5 error -117 [ 317.214221][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 317.214239][ C0] EXT4-fs (loop2): initial error at time 524588: ext4_orphan_get:1397: inode 15 [ 317.214258][ C0] EXT4-fs (loop2): last error at time 524588: ext4_orphan_get:1402 [ 317.220543][T14855] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.264024][T14103] udevd[14103]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 317.275122][T14862] loop6: detected capacity change from 0 to 512 [ 317.290437][T14862] EXT4-fs warning (device loop6): ext4_init_metadata_csum:4681: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 317.293014][T14862] EXT4-fs (loop6): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 317.299256][T14103] udevd[14103]: incorrect ext4 checksum on /dev/loop6 [ 317.342661][ T39] vlan4: left allmulticast mode [ 317.342690][ T39] veth1_to_team: left allmulticast mode [ 317.342706][ T39] vlan4: left promiscuous mode [ 317.342714][ T39] veth1_to_team: left promiscuous mode [ 317.342851][ T39] bridge0: port 2(vlan4) entered disabled state [ 317.347827][ T39] veth0_to_bond: left allmulticast mode [ 317.347844][ T39] veth0_to_bond: left promiscuous mode [ 317.347920][ T39] bridge0: port 1(veth0_to_bond) entered disabled state [ 317.401669][T14076] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.528944][ T39] batman_adv: batadv0: Removing interface: gretap1 [ 317.542452][ T39] bond2 (unregistering): (slave geneve2): Releasing active interface [ 317.860415][T14875] SQUASHFS error: Failed to read block 0x657: -5 [ 317.860462][T14875] SQUASHFS error: Unable to read metadata cache entry [655] [ 317.860475][T14876] SQUASHFS error: Unable to read metadata cache entry [655] [ 317.860491][T14875] SQUASHFS error: Unable to read directory block [260685:0] [ 317.860501][T14876] SQUASHFS error: Unable to read directory block [655:3] [ 317.942389][T14884] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.956929][ T39] bond1 (unregistering): Released all slaves [ 317.981497][ T39] bond0 (unregistering): Released all slaves [ 317.996659][ T39] bond2 (unregistering): Released all slaves [ 318.003178][ T39] bond3 (unregistering): Released all slaves [ 318.010984][ T39] bond4 (unregistering): Released all slaves [ 318.019080][ T39] bond5 (unregistering): Released all slaves [ 318.064590][T14146] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.066921][T14870] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2763'. [ 318.252648][T14905] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2768'. [ 318.252685][T14905] netlink: 67 bytes leftover after parsing attributes in process `syz.6.2768'. [ 318.424509][ T39] tipc: Disabling bearer [ 318.424594][ T39] tipc: Left network mode [ 318.477943][ T4395] 8021q: adding VLAN 0 to HW filter on device eth8 [ 318.578501][ T50] Bluetooth: hci5: command tx timeout [ 318.610557][T14922] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 318.678669][T14914] [ 318.679112][T14914] ====================================================== [ 318.680276][T14914] WARNING: possible circular locking dependency detected [ 318.681447][T14914] syzkaller #0 Tainted: G L [ 318.682419][T14914] ------------------------------------------------------ [ 318.683642][T14914] syz.6.2770/14914 is trying to acquire lock: [ 318.684773][T14914] ffff0000f108d4d8 (&ei->xattr_sem){++++}-{4:4}, at: ext4_xattr_set_handle+0x134/0xde4 [ 318.686508][T14914] [ 318.686508][T14914] but task is already holding lock: [ 318.687861][T14914] ffff0000f7390c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x280/0xc54 [ 318.689627][T14914] [ 318.689627][T14914] which lock already depends on the new lock. [ 318.689627][T14914] [ 318.691524][T14914] [ 318.691524][T14914] the existing dependency chain (in reverse order) is: [ 318.692890][T14914] [ 318.692890][T14914] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 318.694370][T14914] percpu_down_read_internal+0x5c/0x294 [ 318.695550][T14914] ext4_writepages+0x170/0x2dc [ 318.696508][T14914] do_writepages+0x284/0x47c [ 318.697440][T14914] __writeback_single_inode+0x140/0x1880 [ 318.698412][T14914] writeback_single_inode+0x3b8/0xaa4 [ 318.699403][T14914] write_inode_now+0x170/0x208 [ 318.700279][T14914] iput+0x6e8/0xbc0 [ 318.700981][T14914] ext4_xattr_block_set+0x1b1c/0x21e8 [ 318.701910][T14914] ext4_expand_extra_isize_ea+0xaf4/0x1384 [ 318.702934][T14914] __ext4_expand_extra_isize+0x2a4/0x378 [ 318.703907][T14914] __ext4_mark_inode_dirty+0x394/0x828 [ 318.704940][T14914] ext4_evict_inode+0x798/0xfb8 [ 318.705831][T14914] evict+0x4c0/0x74c [ 318.706633][T14914] iput+0x884/0xbc0 [ 318.707378][T14914] ext4_process_orphan+0x24c/0x2c0 [ 318.708342][T14914] ext4_orphan_cleanup+0x7d4/0xd20 [ 318.709263][T14914] ext4_fill_super+0x4628/0x4e14 [ 318.710219][T14914] get_tree_bdev_flags+0x388/0x43c [ 318.711224][T14914] get_tree_bdev+0x2c/0x3c [ 318.712089][T14914] ext4_get_tree+0x28/0x38 [ 318.712961][T14914] vfs_get_tree+0x90/0x28c [ 318.713846][T14914] fc_mount+0x24/0xac [ 318.714689][T14914] do_new_mount+0x2a4/0x538 [ 318.715541][T14914] path_mount+0x5f0/0xa88 [ 318.716495][T14914] do_mount+0xe8/0x148 [ 318.717371][T14914] __arm64_sys_mount+0x334/0x380 [ 318.718358][T14914] invoke_syscall+0x98/0x244 [ 318.719255][T14914] el0_svc_common+0xec/0x23c [ 318.720142][T14914] do_el0_svc+0x4c/0x5c [ 318.720905][T14914] el0_svc+0x64/0x260 [ 318.721632][T14914] el0t_64_sync_handler+0x48/0x148 [ 318.722558][T14914] el0t_64_sync+0x198/0x19c [ 318.723426][T14914] [ 318.723426][T14914] -> #0 (&ei->xattr_sem){++++}-{4:4}: [ 318.724767][T14914] __lock_acquire+0x17c0/0x2ebc [ 318.725790][T14914] lock_acquire+0x140/0x364 [ 318.726693][T14914] down_write+0x50/0xc0 [ 318.727528][T14914] ext4_xattr_set_handle+0x134/0xde4 [ 318.728459][T14914] ext4_initxattrs+0xa8/0x11c [ 318.729360][T14914] security_inode_init_security+0x244/0x370 [ 318.730418][T14914] ext4_init_security+0x44/0x58 [ 318.731281][T14914] __ext4_new_inode+0x286c/0x3308 [ 318.732285][T14914] ext4_ext_migrate+0x564/0xc54 [ 318.733308][T14914] ext4_ioctl+0x1cd4/0x4280 [ 318.734256][T14914] __arm64_sys_ioctl+0x14c/0x1c4 [ 318.735331][T14914] invoke_syscall+0x98/0x244 [ 318.736326][T14914] el0_svc_common+0xec/0x23c [ 318.737251][T14914] do_el0_svc+0x4c/0x5c [ 318.738057][T14914] el0_svc+0x64/0x260 [ 318.738899][T14914] el0t_64_sync_handler+0x48/0x148 [ 318.739746][T14920] syzkaller0: entered promiscuous mode [ 318.739793][T14920] syzkaller0: entered allmulticast mode [ 318.741755][T14914] el0t_64_sync+0x198/0x19c [ 318.742612][T14914] [ 318.742612][T14914] other info that might help us debug this: [ 318.742612][T14914] [ 318.744259][T14914] Possible unsafe locking scenario: [ 318.744259][T14914] [ 318.745390][T14914] CPU0 CPU1 [ 318.746222][T14914] ---- ---- [ 318.747116][T14914] lock(&sbi->s_writepages_rwsem); [ 318.747979][T14914] lock(&ei->xattr_sem); [ 318.749255][T14914] lock(&sbi->s_writepages_rwsem); [ 318.750683][T14914] lock(&ei->xattr_sem); [ 318.751476][T14914] [ 318.751476][T14914] *** DEADLOCK *** [ 318.751476][T14914] [ 318.752849][T14914] 3 locks held by syz.6.2770/14914: [ 318.753718][T14914] #0: ffff0000cb1c4410 (sb_writers#3){++++}-{0:0}, at: mnt_want_write_file+0x64/0xdc [ 318.755395][T14914] #1: ffff0000f108e0e8 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: ext4_ioctl+0x1ccc/0x4280 [ 318.757037][T14914] #2: ffff0000f7390c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x280/0xc54 [ 318.758814][T14914] [ 318.758814][T14914] stack backtrace: [ 318.759895][T14914] CPU: 1 UID: 0 PID: 14914 Comm: syz.6.2770 Tainted: G L syzkaller #0 PREEMPT [ 318.761686][T14914] Tainted: [L]=SOFTLOCKUP [ 318.762371][T14914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 318.764046][T14914] Call trace: [ 318.764597][T14914] show_stack+0x2c/0x3c (C) [ 318.765358][T14914] __dump_stack+0x30/0x40 [ 318.766160][T14914] dump_stack_lvl+0xd8/0x12c [ 318.766903][T14914] dump_stack+0x1c/0x28 [ 318.767593][T14914] print_circular_bug+0x328/0x330 [ 318.768423][T14914] check_noncircular+0x158/0x174 [ 318.769327][T14914] __lock_acquire+0x17c0/0x2ebc [ 318.770214][T14914] lock_acquire+0x140/0x364 [ 318.770968][T14914] down_write+0x50/0xc0 [ 318.771662][T14914] ext4_xattr_set_handle+0x134/0xde4 [ 318.772467][T14914] ext4_initxattrs+0xa8/0x11c [ 318.773275][T14914] security_inode_init_security+0x244/0x370 [ 318.774289][T14914] ext4_init_security+0x44/0x58 [ 318.775173][T14914] __ext4_new_inode+0x286c/0x3308 [ 318.776033][T14914] ext4_ext_migrate+0x564/0xc54 [ 318.776919][T14914] ext4_ioctl+0x1cd4/0x4280 [ 318.777695][T14914] __arm64_sys_ioctl+0x14c/0x1c4 [ 318.778584][T14914] invoke_syscall+0x98/0x244 [ 318.779424][T14914] el0_svc_common+0xec/0x23c [ 318.780266][T14914] do_el0_svc+0x4c/0x5c [ 318.781017][T14914] el0_svc+0x64/0x260 [ 318.781707][T14914] el0t_64_sync_handler+0x48/0x148 [ 318.782669][T14914] el0t_64_sync+0x198/0x19c [ 318.824926][T14920] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.874955][T14558] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 318.955000][ T39] hsr_slave_0: left promiscuous mode [ 318.956463][ T39] hsr_slave_1: left promiscuous mode [ 318.966833][ T39] team0 (unregistering): Port device vxcan1 removed [ 318.970644][T14076] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.023321][ T50] Bluetooth: hci1: command tx timeout [ 319.105865][T14797] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 319.108159][T14797] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 319.110112][T14797] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 319.112274][T14797] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 319.114080][T14797] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 319.116208][T14797] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 319.119158][T14797] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 319.122082][T14797] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 319.174779][T14797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.179747][T14797] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.184297][ T5127] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.184338][ T5127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.190225][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.190259][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.200804][T14797] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 319.202723][T14797] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 319.211701][ T39] IPVS: stop unused estimator thread 0... [ 319.302605][T14797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.324184][T14797] veth0_vlan: entered promiscuous mode [ 319.327291][T14797] veth1_vlan: entered promiscuous mode [ 319.332439][T14797] veth0_macvtap: entered promiscuous mode [ 319.333381][T14797] veth1_macvtap: entered promiscuous mode [ 319.336124][T14797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.348926][T14797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.352069][ T40] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.352165][ T40] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.352191][ T40] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.352205][ T40] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.372086][T14797] ieee80211 phy29: Selected rate control algorithm 'minstrel_ht' [ 319.377837][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.377865][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.381286][T14797] ieee80211 phy30: Selected rate control algorithm 'minstrel_ht' [ 319.388115][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.389560][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.489892][T14093] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.831788][ T50] Bluetooth: hci5: command tx timeout [ 321.265396][ T50] Bluetooth: hci1: command tx timeout [ 323.084501][ T50] Bluetooth: hci5: command tx timeout [ 325.337601][ T50] Bluetooth: hci5: command tx timeout [ 328.198266][ T1597] ieee802154 phy0 wpan0: encryption failed: -22 [ 328.198312][ T1597] ieee802154 phy1 wpan1: encryption failed: -22