last executing test programs: 6m8.538441672s ago: executing program 2 (id=423): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r0, 0xffffffffffffffff, 0x8, 0x0, @void}, 0x10) 6m8.411844744s ago: executing program 2 (id=424): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x36, 0x0}, 0x10) 6m7.679881915s ago: executing program 2 (id=428): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000780)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) 6m6.579151242s ago: executing program 2 (id=431): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904, @void, @value}, 0x94) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="00000000000000c7aa00859d37040e1a8bd30000", @ANYRES32=0x0, @ANYRES32], 0x48) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x4, 0x5, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x40, 0x700, 0x3}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="d85c9280babbd52b19db5f3d0b024e4312ae7d1151d49df98a47dc23069f9cf21ec05d7bd977a24349dde06a01b2534714eb7109eea29f0cdaec27644d9ac672b2983973694076c81360b3d77973973917198f49c84450612c57181d5e8e9aa2b4a828002c4b495f2b609122758f0ca719ad0950822d86e6dc87", @ANYRES16=r2, @ANYBLOB="08002dbd7000ffdbdf2503000000", @ANYRES32=r4, @ANYBLOB="08000300020000001400020070696d72656731000000000000000000050003007f0000007c00018008000300020000001400020076657468315f746f5f7465616d00000008000300000000000800030001000000140002006e657470636930000000000000000000140002006772657461703000000000000000000014000200766c616e30000000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="08000300010000000500020081000000050003000b0000000500020004000000"], 0xd8}, 0x1, 0x0, 0x0, 0x44000}, 0x40) r6 = msgget$private(0x0, 0x790) msgsnd(r6, &(0x7f0000000800)=ANY=[@ANYRES8=0xffffffffffffffff], 0x401, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r9}, 0x10) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r10) msgsnd(r6, &(0x7f0000000000)=ANY=[@ANYRES16=r7], 0x401, 0x0) msgctl$IPC_SET(r6, 0x1, &(0x7f0000000780)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x102, 0x2}, 0x0, 0x0, 0x200, 0x7, 0xfffffffffffff734, 0x40, 0x5, 0x4, 0x0, 0x344c}) msgsnd(r6, &(0x7f0000000180)={0x3}, 0x8, 0x0) msgctl$IPC_RMID(r6, 0x0) 6m6.027687391s ago: executing program 2 (id=434): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x8000}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x2200890, 0x0) 6m5.967330652s ago: executing program 2 (id=435): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$igmp(0x2, 0x3, 0x2) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000019080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0100000001000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_submit(0x0, 0x0, &(0x7f00000002c0)) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) syz_open_dev$tty1(0xc, 0x4, 0x1) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @remote}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x4100000000000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='sys_enter\x00'}, 0x10) 5m49.191653883s ago: executing program 32 (id=435): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$igmp(0x2, 0x3, 0x2) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000019080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0100000001000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_submit(0x0, 0x0, &(0x7f00000002c0)) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) syz_open_dev$tty1(0xc, 0x4, 0x1) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @remote}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x4100000000000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='sys_enter\x00'}, 0x10) 4m32.025738377s ago: executing program 1 (id=670): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000000c0)={[{@jqfmt_vfsv1}, {@resgid}, {@nodioread_nolock}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@grpid}, {@orlov}]}, 0xfc, 0x572, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hvSuj6TKadKx14PbgXnyRIYg4EP8A330c/gP+FQMdDBlFH0So3PSmy9qkv5aZbPl84Lbn5N7bc78593t7Tm5CAhhYx7IfhYiXI+KbJOJQy7pi5CuPrW63/PD6VLYksbLy6Z9JJPljze2T/PeBvPJSRPz6VcTJwsZ2a4tLs+VKJZ3P62P1uStjtcWlU5fmyjPpTHp5YnLyzFuTE+++83bXYn39/N/ff3L3wzNfH1/+7uf7h28ncTYO5uta43gCN1orx8r/5qXhOLtuw/EuNNZPkl4fALsylOf5cGTXgEMxlGc98Pz7MiJWgAGVyH8YUM1xQHNu36V58DPjwQerE6BG7COt8RdXXxuJvY250f7l5LGZUTbfHe1C+1kbv/xx53a2xOavQ+zbog6wIzduRsTpYnHj9T/Jr3+7d7rx4vHm1rcxaP9/oJfuZuOfN9qN/wpr459oM/450CZ3d2Pr/C/c70IzHWXjv/fajn/XLl2jQ3nthcaYbzi5eKmSno6IFyPiRAzvyeqb3c85s3xvpdO61vFftmTtN8eC+XHcL+55fJ/pcr0cESNPEnfTg5sRrxTbxZ+s9X/Spv+z5+P8Nts4mt55tdO6reN/ulZ+initbf8/uqOVbH5/cqxxPow1z4qN/rp19LdO7fc6/qz/928e/2jSer+2tvM2ftz7T9pp3W7P/5Hks0a5mQTXyvX6/HjESPLxxscnHu3brDe3z+I/cXzz61+78z+bfH2+zfhvHbnVcdN+6P/pHfX/zgv3Pvrih07tb6//32yUTuSP5Ne/9vJzZbsH+KTPHwAAAAAAAPSTQkQcjKRQWisXCqXS6vs7jsT+QqVaq5+8WF24PB2Nz8qOxnCheaf7UMv7Icbz98M26xPr6pMRcTgivh3a16iXpqqV6V4HDwAAAAAAAAAAAAAAAAAAAH3iQIfP/2d+H+r10QFPXeOLDfb0+iiAXtjyK/+78U1PQF/aMv+B55b8h8El/2FwyX8YXPIfBpf8h8El/2FwyX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqvPnzmXLyvLD61NZffrq4sJs9eqp6bQ2W5pbmCpNVeevlGaq1ZlKWpqqzm319yrV6pXxiVi4NlZPa/Wx2uLShbnqwuX6hUtz5Zn0Qjr8v0QFAAAAAAAAAAAAAAAAAAAAz5ba4tJsuVJJ5xU6Ft6PvjiMpxngql3tXuyXKBQ6FG7m3buzvXp4UQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdf4LAAD//++4Mnc=") bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1fe) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(0xffffffffffffffff) fallocate(r2, 0x10, 0x2, 0x7fff) socket$netlink(0x10, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="84020000100001042cbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7b130000018000003c0012800b00010062726964676500002c00028008001b00e709000008001b00ff03001005002c0005000000050016"], 0x284}}, 0x20000844) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m30.211245816s ago: executing program 1 (id=675): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000780)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) 4m27.710508394s ago: executing program 1 (id=680): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000780)={[{@errors_remount}, {@bh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@resgid}, {@auto_da_alloc}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, 0x0, 0x4008800) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000120001000000000000000000ac141400000000000000000000000000000000000000000014000d00200100000000000000000000001cc3000c0015"], 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4m24.414526896s ago: executing program 1 (id=690): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000d40)='./file0\x00', 0x3200010, &(0x7f0000000080)=ANY=[], 0x1, 0x7e6, &(0x7f0000000d80)="$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") r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) readv(r2, &(0x7f0000000540)=[{&(0x7f0000000200)=""/183, 0xb7}, {&(0x7f00000002c0)=""/81, 0x51}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r3, 0x0, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000002c0)={0x0, 0xff, "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"}, &(0x7f0000000180)=0x107) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000200)={@val={0xa}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @multicast1}, {0x0, 0x4305, 0x18, 0x0, @wg=@data}}}}}}, 0x3e) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x7, 0x3}, &(0x7f0000000400)=0x90) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r9) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r8, &(0x7f0000000140)='fdinfo/4\x00') sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r0], 0x90}}, 0x0) 4m20.804660402s ago: executing program 1 (id=703): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mbind(&(0x7f00002ad000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x5008, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 4m20.067698184s ago: executing program 1 (id=707): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vim2m(0x0, 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, 0x0) close(0xffffffffffffffff) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) fallocate(0xffffffffffffffff, 0x1, 0x8416, 0x4) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r6, 0x4b3a, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 4m19.784366858s ago: executing program 33 (id=707): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vim2m(0x0, 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, 0x0) close(0xffffffffffffffff) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) fallocate(0xffffffffffffffff, 0x1, 0x8416, 0x4) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r6, 0x4b3a, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 2m14.952215825s ago: executing program 0 (id=941): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82187201, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r1, @ANYRES32=r1], 0x20) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) syz_80211_join_ibss(0x0, &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f0000000380), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080211000001080211000000080211000000000000e3ffffffffffff63822f07c13b1974f100010000060202020202020108"], 0x36) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000181000010000000000000000000000000a40000000060a010400000000000000000200050000000000000400000000000000796e7365740000180002800900010073797a30000000000800044000000000140000001100010000000000000000000000000a"], 0x68}}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x8, 0x8}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000280)={0x1, 0x8202, 0x7d000, 0x7, r6}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r4], 0x44}}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8931, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000), 0x4) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) 2m13.538019527s ago: executing program 0 (id=946): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = geteuid() setreuid(0x0, r4) bpf$PROG_LOAD(0x5, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x700) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00), &(0x7f0000001c40)=r5}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) syz_clone(0xb00200, 0x0, 0x0, 0x0, 0x0, 0x0) 2m11.671284627s ago: executing program 0 (id=947): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) semget$private(0x0, 0x207, 0x480) r3 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x160) r4 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{}], 0x1}, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x60100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 2m10.723993971s ago: executing program 0 (id=949): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x200001, &(0x7f0000000080)=ANY=[]) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000003040), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) times(0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) mount$pvfs2(&(0x7f0000000040), &(0x7f00000003c0)='./file0\x00', &(0x7f0000000180), 0x10d12, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$6lowpan_control(r1, &(0x7f0000003080)='connect aa:aa:aa:aa:aa:11 0', 0x1b) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340), 0x800) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="21012cbd7000000000001400000008000300", @ANYRES32=r6, @ANYBLOB="0500"], 0x2c}}, 0x0) 2m8.597241095s ago: executing program 0 (id=951): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x5, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0x40049366, 0x0) 2m6.97528657s ago: executing program 0 (id=954): ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000002c0)={{}, 0x0, 0x0, @inherit={0x78, 0x0}, @subvolid=0x2}) syz_io_uring_setup(0x70d6, &(0x7f0000000040)={0x0, 0xe92b, 0x8000, 0x0, 0x293}, &(0x7f00000000c0), &(0x7f0000000100)) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c80)={0xffffffffffffffff, 0xe0, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000019c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001a00)=[0x0, 0x0], 0x0, 0x0, 0x24, &(0x7f0000001a80)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001ac0), &(0x7f0000001b00), 0x8, 0xfc, 0x8, 0x8, &(0x7f0000001b40)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001cc0)={'batadv_slave_0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001f80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001f40)={&(0x7f0000001d00)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x24}}, 0x40) 1m51.59715485s ago: executing program 34 (id=954): ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000002c0)={{}, 0x0, 0x0, @inherit={0x78, 0x0}, @subvolid=0x2}) syz_io_uring_setup(0x70d6, &(0x7f0000000040)={0x0, 0xe92b, 0x8000, 0x0, 0x293}, &(0x7f00000000c0), &(0x7f0000000100)) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c80)={0xffffffffffffffff, 0xe0, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000019c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001a00)=[0x0, 0x0], 0x0, 0x0, 0x24, &(0x7f0000001a80)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001ac0), &(0x7f0000001b00), 0x8, 0xfc, 0x8, 0x8, &(0x7f0000001b40)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001cc0)={'batadv_slave_0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001f80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001f40)={&(0x7f0000001d00)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x24}}, 0x40) 1m33.162195237s ago: executing program 6 (id=1014): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) r0 = socket$kcm(0x10, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x20, [0x8000, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x81, 0x7, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x0, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0x7, 0x7, 0x3, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x131, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xc7, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xff7ffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x6, 0x5f31, 0x4, 0x0, 0x0, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x2, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0xfffffffc, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffffffffffc, 0x6082) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x7, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0xc0010) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 1m32.32828107s ago: executing program 6 (id=1019): ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000002c0)={{}, 0x0, 0x0, @inherit={0x78, 0x0}, @subvolid=0x2}) syz_io_uring_setup(0x70d6, &(0x7f0000000040)={0x0, 0xe92b, 0x8000, 0x0, 0x293}, &(0x7f00000000c0), &(0x7f0000000100)) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c80)={0xffffffffffffffff, 0xe0, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000019c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001a00)=[0x0, 0x0], 0x0, 0x0, 0x24, &(0x7f0000001a80)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001ac0), &(0x7f0000001b00), 0x8, 0xfc, 0x8, 0x8, &(0x7f0000001b40)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001cc0)={'batadv_slave_0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001f80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001f40)={&(0x7f0000001d00)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x24}}, 0x40) 1m26.59915251s ago: executing program 6 (id=1022): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f00000001c0)='sou\x01ce', 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r5, &(0x7f00000003c0)="0b036800e0ff64000200475400f6a13bb100000008", 0x15, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r7, 0x8955, 0x0) listen(0xffffffffffffffff, 0x73) gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 1m23.36370391s ago: executing program 6 (id=1030): openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) socket(0x11, 0x800000003, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, 0x0, &(0x7f0000000340)) socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) 1m21.291843182s ago: executing program 6 (id=1033): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x200001, &(0x7f0000000080)=ANY=[]) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000003040), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) times(0x0) socket$kcm(0x2, 0x200000000000001, 0x106) write$6lowpan_control(r0, &(0x7f0000003080)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 1m17.195406106s ago: executing program 6 (id=1039): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000100)) 1m1.348695744s ago: executing program 35 (id=1039): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000100)) 17.257172141s ago: executing program 8 (id=1136): socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d66ddccccb3b7d59d649973f756dcc67b8269b77d1b2f1b9300c4ac5a275a6c4a695205187987cdcd7e0d9b41cc3fb0730f78fcaee057e27d620c20ddb170b9f373bbae2c37811b5580807a9f9fcd8c3fa89701006e07d7e6bb0ac4bece3d7fed58fa392146813bb30fae31f9a1fcd70af66142c32740a78b39d2061a5c878a6f0eec9d6794317253ff7fcd9dff23c5986fb6dd53cd0e97434cd5a887052f3055c2f823127dd21b4c36dec4e267f3c7ad9a4585f64dc27e7791c3b4a6a7fe000000000000", @ANYRESHEX, @ANYRESHEX, @ANYBLOB=',\x00']) socket$kcm(0x2, 0xa, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0xd, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004880) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000080)={0x2f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xb}, 0xa) 16.107541269s ago: executing program 5 (id=1137): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/162, 0xa2, 0xae) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) mlock2(&(0x7f0000cfb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) prctl$PR_MCE_KILL(0x35, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) futex(&(0x7f0000000140)=0xfffffffc, 0x5, 0x0, 0x0, &(0x7f00000001c0), 0xfffdffff) pipe2$watch_queue(0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000900), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r3, 0x27) 15.847427083s ago: executing program 8 (id=1138): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="800037bb", 0x4, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000001000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r4, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096}, {&(0x7f0000000440)=""/128}], 0x0, &(0x7f00000004c0)=""/193}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35}, {&(0x7f0000000680)=""/127}], 0x0, &(0x7f0000000740)=""/23}, 0x3}], 0x400000000000054, 0x40012100, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_open_procfs$namespace(0x0, 0x0) syz_emit_vhci(&(0x7f0000004080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "1eed5a", 0x1}}}, 0xd) 14.966686567s ago: executing program 5 (id=1139): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x200001, &(0x7f0000000080)=ANY=[]) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000003040), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) times(0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) mount$pvfs2(&(0x7f0000000040), &(0x7f00000003c0)='./file0\x00', &(0x7f0000000180), 0x10d12, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$6lowpan_control(r1, &(0x7f0000003080)='connect aa:aa:aa:aa:aa:11 0', 0x1b) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x0, r5}}, './file1\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="21012cbd7000000000001400000008000300", @ANYRES32=r6, @ANYBLOB="0500"], 0x2c}}, 0x0) 14.09263849s ago: executing program 8 (id=1140): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x109001, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2403, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x52d35ce30131f272}) socket$kcm(0x10, 0x2, 0x0) 13.448716141s ago: executing program 3 (id=1143): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x160) r4 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{}], 0x1}, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x60100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 13.374315412s ago: executing program 8 (id=1144): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000380)={[{@errors_remount}, {@prjquota}], [{@euid_eq}, {@uid_gt}]}, 0x1, 0x51b, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$packet(0x11, 0x3, 0x300) setfsuid(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000000c0), 0x12) 12.355283878s ago: executing program 5 (id=1145): openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x48000) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0xa0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = io_uring_setup(0x28fe, &(0x7f0000000080)={0x0, 0x0, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x11, &(0x7f00000002c0), 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}, {0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x27}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000040)={@val={0x800e}, @void, @eth={@broadcast, @local, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@generic={0x88fb}}}}, 0x16) 11.427755642s ago: executing program 5 (id=1148): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x2a0001, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x7fff, @local, 0x200}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x2008c8, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@minixdf}, {@orlov}, {@abort}, {@lazytime}, {@data_journal}]}, 0x64, 0x525, &(0x7f0000001cc0)="$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") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r1, 0x0, 0x0, 0x24040800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)}, &(0x7f0000003ac0)=0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, 0x1c) 11.208675355s ago: executing program 3 (id=1149): ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000002c0)={{}, 0x0, 0x0, @inherit={0x78, 0x0}, @subvolid=0x2}) syz_io_uring_setup(0x70d6, &(0x7f0000000040)={0x0, 0xe92b, 0x8000, 0x0, 0x293}, &(0x7f00000000c0), &(0x7f0000000100)) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c80)={0xffffffffffffffff, 0xe0, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000019c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001a00)=[0x0, 0x0], 0x0, 0x0, 0x24, &(0x7f0000001a80)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001ac0), &(0x7f0000001b00), 0x8, 0xfc, 0x8, 0x8, &(0x7f0000001b40)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001cc0)={'batadv_slave_0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x24}}, 0x40) 10.22953003s ago: executing program 7 (id=1150): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000380)={[{@errors_remount}, {@prjquota}], [{@euid_eq}, {@uid_gt}]}, 0x1, 0x51b, &(0x7f0000000a40)="$eJzs3d9rY1kdAPDvvW1m25muyarIuuC6uCudRSdpt65bRHR90acFdX2vtU1LadKUJl2nZdEu/gciKPjkky+Cf4Cw7IN/gAwM6Iv4ICqK6Iw+COpcSXLjdNKkrU7bdJrPB05zzr0393vODTm5P07vDWBsvRARr0fERES8HBHFfHqap6V24aC73P17b6+0UxJZ9uZfkkjyab11tcuTEXGj+5aYioivfiniG8nRuM29/c3lWq26k5crrfp2pbm3f2ujvrxeXa9uLSzMf3rxtcVXF+ey3GO1s9TL/PiLn3v3k9/87dKfbn6rXa3PfigK0deOs9RteqGzLXra22jnPIKNwETensKoKwIAwKm09/HfHxEf6+z/F2OiszfXZ2IUNQMAAADOSvb5mfhXEpEBAAAAV1YaETORpOV8LMBMpOm1/NzAB+N6Wms0W59Ya+xurbbnRZSikK5t1Kpz+VjhUhSSdnk+H2PbK7/SV16IiGci4nvF6U65vNKorY743AcAAACMixt9x/9/L6ad/MkG/J8AAAAAcHmVhhYAAACAq8IhPwAAAFx9/cf/7w5f1HOeAAAA4Mnz5TfeaKes9/zr1bf2djcbb91arTY3y/XdlfJKY2e7vN5orHfu2Vc/aX21RmP7U7G1e7vSqjZblebe/lK9sbvVWtp45BHYAAAAwAV65qPv/SqJiIPPTHdS5PcBBMbezCOl34+sHsA5mBh1BYCRcRdvGF/G8wPJCfMN3gEAgCff7IePXv/vPf+/e25geoS1A86TsT4AMH5c/4fxVTg8AtBgABg7aUS8r5t9atgyQ6///+K0UbIs4k7x8BTdDQAAXKyZTkrScn4cMBNpWi5HPB2RlqKQrG3UqnP58cEvi4Wn2uX5zjuTE8cMAwAAAAAAAAAAAAAAAAAAAAAAAABdWZZEBgAAAFxpEekfk87d/CNmiy/N9J8fuJb8oxh/yAs/fPP7t5dbrZ359vS/dp7ldS0iWj/Ip78y9PFhAAAAwFlLDobO6h6n56/zF1orAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMbA/Xtvr/TSRcb98xciojQo/mRMdV6nohAR1/+WxOSh9yURMXEG8Q/eiYhnB8VP4kGWZaW8FoPiT59z/FJn0wyOn0bEjTOID+PsvXb/8/qg718aL3ReB3//JvP0uIb3f2ke+dlOPzeo/3n6yNrqA2M8d/enlaHx34l4bnJw/9Prf5Mh8V88srZ/Zll2NMbXv7a/Pyx+9qOI2YG/P8kjsSqt+nalubd/a6O+vF5dr24tLMxHvLb46uJcZW2jVs3/Dozx3Y/87MFx7b8+IP5vft3tf49r/0vDVtrn33dv3/tAN1sYFP/miwN/f6diSPw0/+37eJ5vz5/t5Q+6+cOe/8md549r/+qQ7X/S53/zlO1/+Svf+d0pFwUALkBzb39zuVar7hyTmTrFMk9i5udTl6Ia/2Mm+3b3k7ss9fl/M+291YdTeq26BBU7lMkuLNZEXJIm/zcz0m4JAAA4Bw93+kddEwAAAAAAAAAAAAAAAAAAABhfF3E7sf6YB6NpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAsf4TAAD//1hp35w=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$packet(0x11, 0x3, 0x300) setfsuid(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000000c0), 0x12) 9.226047416s ago: executing program 8 (id=1151): socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d66ddccccb3b7d59d649973f756dcc67b8269b77d1b2f1b9300c4ac5a275a6c4a695205187987cdcd7e0d9b41cc3fb0730f78fcaee057e27d620c20ddb170b9f373bbae2c37811b5580807a9f9fcd8c3fa89701006e07d7e6bb0ac4bece3d7fed58fa392146813bb30fae31f9a1fcd70af66142c32740a78b39d2061a5c878a6f0eec9d6794317253ff7fcd9dff23c5986fb6dd53cd0e97434cd5a887052f3055c2f823127dd21b4c36dec4e267f3c7ad9a4585f64dc27e7791c3b4a6a7fe000000000000", @ANYRESHEX, @ANYRESHEX, @ANYBLOB=',\x00']) socket$kcm(0x2, 0xa, 0x2) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0xd, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004880) 7.331574446s ago: executing program 5 (id=1153): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001340)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x62200018ba392227, 0x6}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80000000}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) r8 = fanotify_init(0x0, 0x0) r9 = dup(r8) ioctl$PPPIOCATTACH(r9, 0x4004743d, &(0x7f0000000100)=0x4) fanotify_mark(r8, 0x1, 0x1020, r9, 0x0) readv(r9, &(0x7f0000000640)=[{&(0x7f0000000680)=""/21, 0x15}], 0x1) r10 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r9, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r7, {r10}}, './file0\x00'}) connect$l2tp6(r7, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r7, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x17fd147c801ae9ab, 0x0) 7.252684417s ago: executing program 8 (id=1154): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000030601020000000000000000000000000500010007"], 0x1c}}, 0x0) 7.07983889s ago: executing program 3 (id=1155): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x200001, &(0x7f0000000080)=ANY=[]) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000003040), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) write$6lowpan_control(r0, &(0x7f0000003080)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 6.40940754s ago: executing program 4 (id=1156): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x10001, 0x401, 0x80000000, 0x2401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0x0, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xff, 0x5cb5, 0xfffffffe, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0x2, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000002, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x40, 0xa, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x8001, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x45e3, 0x5, 0x7, 0x1, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0xc, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0xfffffffa, 0x2, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x2, 0x80000004, 0x29, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x1, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xc, 0x6, 0x7, 0xfffffeff, 0x4, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x6, 0x80000000, 0x5, 0x1, 0xa9c, 0x9, 0x9, 0x1, 0x2, 0x5, 0x1000, 0x5, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x1, 0xffffa5ba, 0xffffa9b4, 0x1, 0x4, 0x5, 0x3, 0x4b5f, 0x6, 0xa, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x1, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0ae, 0x9, 0x6, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffc487, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x0, 0x2, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x9, 0x3, 0xffffffff, 0x9, 0x7f, 0x6, 0x8, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x8001, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x4000, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000000, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x2, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0xfb4, 0xbf8, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x4, 0x3, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x5, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x7fffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6330, 0x0, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x2ec, 0x9, 0x6, 0x3ff, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x7fff, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 5.214002889s ago: executing program 3 (id=1157): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000380)={[{@errors_remount}, {@prjquota}], [{@euid_eq}, {@uid_gt}]}, 0x1, 0x51b, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$packet(0x11, 0x3, 0x300) setfsuid(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000000c0), 0x12) 5.1703959s ago: executing program 7 (id=1158): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000001a40)={0xff, @dev={0xac, 0x14, 0x14, 0x29}, 0x4e23, 0x2, 'sh\x00', 0x18, 0x80006, 0x71}, 0x2c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESHEX=r2, @ANYRESHEX=r2, @ANYRES16=r1, @ANYRES64=r1], 0x78}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5, @bcast, @bpq0, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=0x1, @ANYRES32=0x0, @ANYBLOB="0000000037862ffe134b0476850000000000"], 0x50) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x2, @bcast, @bpq0, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) 5.14257717s ago: executing program 4 (id=1159): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x160) r4 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{}], 0x1}, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x60100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 4.046305857s ago: executing program 7 (id=1160): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/162, 0xa2, 0xae) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) mlock2(&(0x7f0000cfb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) prctl$PR_MCE_KILL(0x35, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000040)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000900), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x27) 3.908536879s ago: executing program 4 (id=1161): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000008100)="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", 0x2000, &(0x7f0000000400)={&(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0xb5948a, 0x7fff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002080)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x0, {0xb, 0x1f, 0x0, {0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0xe, 0x0, 0x80000, 0x4, 0xc000, 0x4, 0x0, 0x0, 0x0, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='osx.:'], 0x0, 0x0, 0x0) 2.056335848s ago: executing program 7 (id=1162): openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x48000) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0xa0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = io_uring_setup(0x28fe, &(0x7f0000000080)={0x0, 0x0, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x11, &(0x7f00000002c0), 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}, {0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x27}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000040)={@val={0x800e}, @void, @eth={@broadcast, @local, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@generic={0x88fb}}}}, 0x16) 2.042357028s ago: executing program 4 (id=1163): openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x48000) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0xa0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = io_uring_setup(0x28fe, &(0x7f0000000080)={0x0, 0x0, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x11, &(0x7f00000002c0), 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}, {0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000040)={@val={0x800e}, @void, @eth={@broadcast, @local, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@generic={0x88fb}}}}, 0x16) 1.904540601s ago: executing program 5 (id=1164): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x2a0001, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x7fff, @local, 0x200}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x2008c8, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@minixdf}, {@orlov}, {@abort}, {@lazytime}, {@data_journal}]}, 0x64, 0x525, &(0x7f0000001cc0)="$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") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r1, 0x0, 0x0, 0x24040800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)}, &(0x7f0000003ac0)=0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, 0x1c) 1.902816611s ago: executing program 3 (id=1165): ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000002c0)={{}, 0x0, 0x0, @inherit={0x78, 0x0}, @subvolid=0x2}) syz_io_uring_setup(0x70d6, &(0x7f0000000040)={0x0, 0xe92b, 0x8000, 0x0, 0x293}, &(0x7f00000000c0), &(0x7f0000000100)) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c80)={0xffffffffffffffff, 0xe0, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000019c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001a00)=[0x0, 0x0], 0x0, 0x0, 0x24, &(0x7f0000001a80)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001ac0), &(0x7f0000001b00), 0x8, 0xfc, 0x8, 0x8, &(0x7f0000001b40)}}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001f80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001f40)={&(0x7f0000001d00)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x24}}, 0x40) 832.725347ms ago: executing program 4 (id=1166): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000001a40)={0xff, @dev={0xac, 0x14, 0x14, 0x29}, 0x4e23, 0x2, 'sh\x00', 0x18, 0x80006, 0x71}, 0x2c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESHEX=r2, @ANYRESHEX=r2, @ANYRES16=r1, @ANYRES64=r1], 0x78}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5, @bcast, @bpq0, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=0x1, @ANYRES32=0x0, @ANYBLOB="0000000037862ffe134b0476850000000000"], 0x50) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x2, @bcast, @bpq0, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) 697.65306ms ago: executing program 7 (id=1167): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x40}, {0x6}]}, 0x10) syz_emit_ethernet(0x5e, &(0x7f00000001c0)={@local, @local, @val={@val={0x88a8, 0x3, 0x1, 0x4}, {0x8100, 0x1, 0x1, 0x1}}, {@canfd={0xd, {{0x2, 0x0, 0x0, 0x1}, 0x5, 0x0, 0x0, 0x0, "ab93bf969c362f8ad60063749ab2b33b173a0f525071870dbfca5fdd9c3d29e89bfd43a9db35b840ac803d431670f2934b58b8bb070212df1627aacc5fbffd83"}}}}, 0x0) 39.15897ms ago: executing program 7 (id=1168): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x200001, &(0x7f0000000080)=ANY=[]) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000003040), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) write$6lowpan_control(r0, &(0x7f0000003080)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 12.020421ms ago: executing program 4 (id=1169): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x8000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x4, r2, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fchown(r0, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x8, 0x10, 0x5, 0x2, {{0xf, 0x4, 0x3, 0x6, 0x3c, 0x68, 0x0, 0x9, 0x29, 0x0, @rand_addr=0x64010102, @local, {[@ssrr={0x89, 0x27, 0xce, [@multicast2, @private=0xa010102, @rand_addr=0x64010102, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @loopback, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) r5 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/protocols\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000003900)=""/4104, 0x1008}], 0x1, 0x73, 0x0) 0s ago: executing program 3 (id=1170): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x54110, r0, 0xe19a5000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffff"], 0x0) kernel console output (not intermixed with test programs): .281390][ T5088] FAT-fs (loop1): Directory bread(block 68) failed [ 149.283153][ T5088] FAT-fs (loop1): Directory bread(block 69) failed [ 149.284953][ T5088] FAT-fs (loop1): Directory bread(block 70) failed [ 149.288643][ T5088] FAT-fs (loop1): Directory bread(block 71) failed [ 149.290478][ T5088] FAT-fs (loop1): Directory bread(block 72) failed [ 149.292282][ T5088] FAT-fs (loop1): Directory bread(block 73) failed [ 151.977296][ T5103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.242'. [ 152.018474][ T5103] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 152.642269][ T5125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.007877][ T5134] loop0: detected capacity change from 0 to 256 [ 153.093115][ T5134] FAT-fs (loop0): Directory bread(block 64) failed [ 153.098569][ T5134] FAT-fs (loop0): Directory bread(block 65) failed [ 153.101554][ T5134] FAT-fs (loop0): Directory bread(block 66) failed [ 153.105612][ T5134] FAT-fs (loop0): Directory bread(block 67) failed [ 153.123175][ T5134] FAT-fs (loop0): Directory bread(block 68) failed [ 153.135325][ T5134] FAT-fs (loop0): Directory bread(block 69) failed [ 153.152350][ T5134] FAT-fs (loop0): Directory bread(block 70) failed [ 153.154231][ T5134] FAT-fs (loop0): Directory bread(block 71) failed [ 153.157327][ T5134] FAT-fs (loop0): Directory bread(block 72) failed [ 153.159234][ T5134] FAT-fs (loop0): Directory bread(block 73) failed [ 153.818945][ T5131] loop4: detected capacity change from 0 to 40427 [ 153.985571][ T5131] F2FS-fs (loop4): invalid crc value [ 154.027113][ T5131] F2FS-fs (loop4): Found nat_bits in checkpoint [ 154.179432][ T5131] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 154.272019][ T4038] attempt to access beyond end of device [ 154.272019][ T4038] loop4: rw=2049, want=45104, limit=40427 [ 155.514472][ T5156] loop2: detected capacity change from 0 to 1024 [ 155.581167][ T5156] EXT4-fs (loop2): Test dummy encryption mode enabled [ 156.585524][ T5156] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,barrier=0x00000000000003ff,stripe=0x0000000000000007,discard,data=ordered,debug_want_extra_isize=0x0000000000000084,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 158.637265][ T5191] loop2: detected capacity change from 0 to 256 [ 158.742995][ T5191] FAT-fs (loop2): Directory bread(block 64) failed [ 158.754805][ T5191] FAT-fs (loop2): Directory bread(block 65) failed [ 158.757379][ T5191] FAT-fs (loop2): Directory bread(block 66) failed [ 158.782895][ T5191] FAT-fs (loop2): Directory bread(block 67) failed [ 158.784893][ T5191] FAT-fs (loop2): Directory bread(block 68) failed [ 158.808301][ T5191] FAT-fs (loop2): Directory bread(block 69) failed [ 158.810216][ T5191] FAT-fs (loop2): Directory bread(block 70) failed [ 158.835516][ T5191] FAT-fs (loop2): Directory bread(block 71) failed [ 158.914044][ T5191] FAT-fs (loop2): Directory bread(block 72) failed [ 158.915883][ T5191] FAT-fs (loop2): Directory bread(block 73) failed [ 159.682276][ T5210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.274'. [ 159.743675][ T5212] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 159.947702][ T5214] loop2: detected capacity change from 0 to 1024 [ 159.996201][ T5214] EXT4-fs (loop2): Test dummy encryption mode enabled [ 160.027470][ T5214] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,barrier=0x00000000000003ff,stripe=0x0000000000000007,discard,data=ordered,debug_want_extra_isize=0x0000000000000084,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 160.357144][ T5208] loop4: detected capacity change from 0 to 40427 [ 161.133262][ T5208] F2FS-fs (loop4): Found nat_bits in checkpoint [ 161.233046][ T5208] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 161.437200][ T4038] attempt to access beyond end of device [ 161.437200][ T4038] loop4: rw=2049, want=45104, limit=40427 [ 161.605873][ T5229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.389052][ T5246] loop1: detected capacity change from 0 to 256 [ 162.450372][ T5246] FAT-fs (loop1): Directory bread(block 64) failed [ 162.452310][ T5246] FAT-fs (loop1): Directory bread(block 65) failed [ 162.458218][ T5248] loop2: detected capacity change from 0 to 16 [ 162.461767][ T5246] FAT-fs (loop1): Directory bread(block 66) failed [ 162.463537][ T5246] FAT-fs (loop1): Directory bread(block 67) failed [ 162.465357][ T5246] FAT-fs (loop1): Directory bread(block 68) failed [ 162.472913][ T5246] FAT-fs (loop1): Directory bread(block 69) failed [ 162.474722][ T5246] FAT-fs (loop1): Directory bread(block 70) failed [ 162.479140][ T5246] FAT-fs (loop1): Directory bread(block 71) failed [ 162.481053][ T5246] FAT-fs (loop1): Directory bread(block 72) failed [ 162.482767][ T5246] FAT-fs (loop1): Directory bread(block 73) failed [ 162.650516][ T5248] erofs: (device loop2): mounted with root inode @ nid 36. [ 162.892822][ T5250] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 162.901920][ T4032] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 162.915468][ T5250] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[4096] [ 163.036426][ T5252] loop3: detected capacity change from 0 to 512 [ 163.188417][ T5252] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.286: inode #1: comm syz.3.286: iget: illegal inode # [ 163.201003][ T5252] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.286: error while reading EA inode 1 err=-117 [ 163.279583][ T5252] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 163.285495][ T5252] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.286: inode #1: comm syz.3.286: iget: illegal inode # [ 163.300120][ T5252] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.286: error while reading EA inode 1 err=-117 [ 163.303999][ T5252] EXT4-fs (loop3): 1 orphan inode deleted [ 163.305597][ T5252] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,nombcache,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 163.447048][ T5258] loop1: detected capacity change from 0 to 1024 [ 163.452709][ T5258] EXT4-fs (loop1): Test dummy encryption mode enabled [ 163.527787][ T5258] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,barrier=0x00000000000003ff,stripe=0x0000000000000007,discard,data=ordered,debug_want_extra_isize=0x0000000000000084,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 163.886296][ T4020] Bluetooth: hci3: command 0x0406 tx timeout [ 163.888075][ T4020] Bluetooth: hci2: command 0x0406 tx timeout [ 163.890343][ T4020] Bluetooth: hci1: command 0x0406 tx timeout [ 165.049111][ T5272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.447630][ T5287] loop0: detected capacity change from 0 to 256 [ 166.775645][ T5287] FAT-fs (loop0): Directory bread(block 64) failed [ 166.777845][ T5287] FAT-fs (loop0): Directory bread(block 65) failed [ 166.779918][ T5287] FAT-fs (loop0): Directory bread(block 66) failed [ 166.781629][ T5287] FAT-fs (loop0): Directory bread(block 67) failed [ 166.783339][ T5287] FAT-fs (loop0): Directory bread(block 68) failed [ 166.785036][ T5287] FAT-fs (loop0): Directory bread(block 69) failed [ 166.796677][ T5287] FAT-fs (loop0): Directory bread(block 70) failed [ 166.811791][ T5287] FAT-fs (loop0): Directory bread(block 71) failed [ 166.813812][ T5287] FAT-fs (loop0): Directory bread(block 72) failed [ 166.820152][ T5287] FAT-fs (loop0): Directory bread(block 73) failed [ 167.197195][ T5295] loop3: detected capacity change from 0 to 16 [ 167.212260][ T5295] erofs: (device loop3): mounted with root inode @ nid 36. [ 167.573879][ T5298] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 167.580796][ T4045] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 167.593065][ T5298] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[4096] [ 167.671793][ T13] Bluetooth: hci4: command 0x0405 tx timeout [ 168.750135][ T5307] loop3: detected capacity change from 0 to 1024 [ 168.852723][ T5307] EXT4-fs (loop3): Test dummy encryption mode enabled [ 168.881261][ T5307] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,barrier=0x00000000000003ff,stripe=0x0000000000000007,discard,data=ordered,debug_want_extra_isize=0x0000000000000084,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 168.926637][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 170.868343][ T5328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.498136][ T5336] loop0: detected capacity change from 0 to 256 [ 172.544997][ T5343] loop4: detected capacity change from 0 to 16 [ 172.609189][ T5343] erofs: (device loop4): mounted with root inode @ nid 36. [ 172.636173][ T5336] FAT-fs (loop0): Directory bread(block 64) failed [ 172.637989][ T5336] FAT-fs (loop0): Directory bread(block 65) failed [ 172.639926][ T5336] FAT-fs (loop0): Directory bread(block 66) failed [ 172.641768][ T5336] FAT-fs (loop0): Directory bread(block 67) failed [ 172.643566][ T5336] FAT-fs (loop0): Directory bread(block 68) failed [ 172.645284][ T5336] FAT-fs (loop0): Directory bread(block 69) failed [ 172.653165][ T5336] FAT-fs (loop0): Directory bread(block 70) failed [ 172.662901][ T5336] FAT-fs (loop0): Directory bread(block 71) failed [ 172.664986][ T5336] FAT-fs (loop0): Directory bread(block 72) failed [ 172.669351][ T5336] FAT-fs (loop0): Directory bread(block 73) failed [ 172.858032][ T5344] netlink: 12 bytes leftover after parsing attributes in process `syz.3.312'. [ 172.882947][ T5347] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 172.935352][ T5350] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 172.947350][ T4045] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 172.961863][ T5350] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[4096] [ 173.214439][ T5354] loop1: detected capacity change from 0 to 1024 [ 173.260927][ T5354] EXT4-fs (loop1): Test dummy encryption mode enabled [ 173.327414][ T5354] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,barrier=0x00000000000003ff,stripe=0x0000000000000007,discard,data=ordered,debug_want_extra_isize=0x0000000000000084,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 174.318153][ T5360] Zero length message leads to an empty skb [ 176.578582][ T5385] udc-core: couldn't find an available UDC or it's busy [ 176.784330][ T5385] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 177.200717][ T5390] loop2: detected capacity change from 0 to 256 [ 177.251617][ T5390] FAT-fs (loop2): Directory bread(block 64) failed [ 177.253786][ T5390] FAT-fs (loop2): Directory bread(block 65) failed [ 177.282049][ T5390] FAT-fs (loop2): Directory bread(block 66) failed [ 177.283978][ T5390] FAT-fs (loop2): Directory bread(block 67) failed [ 177.285805][ T5390] FAT-fs (loop2): Directory bread(block 68) failed [ 177.288099][ T5390] FAT-fs (loop2): Directory bread(block 69) failed [ 177.289714][ T5390] FAT-fs (loop2): Directory bread(block 70) failed [ 177.291634][ T5390] FAT-fs (loop2): Directory bread(block 71) failed [ 177.293517][ T5390] FAT-fs (loop2): Directory bread(block 72) failed [ 177.295329][ T5390] FAT-fs (loop2): Directory bread(block 73) failed [ 177.733980][ T5397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.328'. [ 177.778060][ T5397] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 177.806123][ T4081] Bluetooth: hci2: command 0x0409 tx timeout [ 177.865729][ T5399] loop0: detected capacity change from 0 to 16 [ 177.933740][ T5399] erofs: (device loop0): mounted with root inode @ nid 36. [ 177.964091][ T5392] loop1: detected capacity change from 0 to 32768 [ 178.143813][ T5392] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.327 (5392) [ 178.407960][ T5403] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 178.454377][ T4032] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 178.686309][ T5403] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[4096] [ 179.446261][ T5392] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 179.449024][ T5392] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 179.456049][ T5392] BTRFS info (device loop1): use zstd compression, level 3 [ 179.457969][ T5392] BTRFS info (device loop1): using free space tree [ 179.481987][ T5392] BTRFS info (device loop1): has skinny extents [ 179.934750][ T5427] loop0: detected capacity change from 0 to 16 [ 180.779153][ T5427] erofs: (device loop0): mounted with root inode @ nid 36. [ 181.237517][ T5392] BTRFS error (device loop1): open_ctree failed: -12 [ 181.268781][ T5442] loop0: detected capacity change from 0 to 512 [ 181.345818][ T5442] EXT4-fs (loop0): Ignoring removed nobh option [ 181.396057][ T5442] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 181.399413][ T5442] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 181.401699][ T5442] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #13: comm syz.0.337: casefold flag without casefold feature [ 181.416203][ T5442] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.337: couldn't read orphan inode 13 (err -117) [ 181.446067][ T5442] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 181.495635][ T5452] loop3: detected capacity change from 0 to 256 [ 181.904552][ T5452] FAT-fs (loop3): Directory bread(block 64) failed [ 181.906718][ T5452] FAT-fs (loop3): Directory bread(block 65) failed [ 181.928660][ T5452] FAT-fs (loop3): Directory bread(block 66) failed [ 181.940600][ T5452] FAT-fs (loop3): Directory bread(block 67) failed [ 181.954615][ T5452] FAT-fs (loop3): Directory bread(block 68) failed [ 181.956787][ T5452] FAT-fs (loop3): Directory bread(block 69) failed [ 181.976961][ T5452] FAT-fs (loop3): Directory bread(block 70) failed [ 181.989672][ T5452] FAT-fs (loop3): Directory bread(block 71) failed [ 181.991534][ T5452] FAT-fs (loop3): Directory bread(block 72) failed [ 182.015832][ T5452] FAT-fs (loop3): Directory bread(block 73) failed [ 182.373286][ T5462] loop0: detected capacity change from 0 to 16 [ 182.400695][ T5462] erofs: (device loop0): mounted with root inode @ nid 36. [ 182.689479][ T5464] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 182.702083][ T4032] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 182.714202][ T5464] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[4096] [ 183.113368][ T5458] loop1: detected capacity change from 0 to 32768 [ 183.128082][ T5469] loop3: detected capacity change from 0 to 1024 [ 183.169868][ T5469] EXT4-fs (loop3): Test dummy encryption mode enabled [ 183.189839][ T5469] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,barrier=0x00000000000003ff,stripe=0x0000000000000007,discard,data=ordered,debug_want_extra_isize=0x0000000000000084,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 183.287012][ T5458] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 183.357694][ T5458] OCFS2: ERROR (device loop1): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 183.375090][ T5458] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 183.393401][ T5458] OCFS2: File system is now read-only. [ 183.395146][ T5458] (syz.1.339,5458,0):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 183.494356][ T4030] ocfs2: Unmounting device (7,1) on (node local) [ 185.844081][ T5507] loop3: detected capacity change from 0 to 512 [ 185.920164][ T5507] EXT4-fs (loop3): Ignoring removed nobh option [ 185.968635][ T5507] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 185.970959][ T5507] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 185.973711][ T5507] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #13: comm syz.3.353: casefold flag without casefold feature [ 185.986557][ T5507] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.353: couldn't read orphan inode 13 (err -117) [ 186.021101][ T5507] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 186.634997][ T5521] loop0: detected capacity change from 0 to 16 [ 186.680489][ T5521] erofs: (device loop0): mounted with root inode @ nid 36. [ 186.872077][ T5521] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 186.910939][ T4032] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 186.924797][ T5521] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[4096] [ 187.105543][ T5528] loop3: detected capacity change from 0 to 1024 [ 187.159168][ T5528] EXT4-fs (loop3): Test dummy encryption mode enabled [ 187.196890][ T5528] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,barrier=0x00000000000003ff,stripe=0x0000000000000007,discard,data=ordered,debug_want_extra_isize=0x0000000000000084,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 189.801567][ T5560] loop1: detected capacity change from 0 to 512 [ 189.849816][ T5560] EXT4-fs (loop1): Ignoring removed nobh option [ 190.053171][ T5569] loop4: detected capacity change from 0 to 16 [ 190.209373][ T5560] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 190.211572][ T5560] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 190.213887][ T5560] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #13: comm syz.1.368: casefold flag without casefold feature [ 190.248714][ T5569] erofs: (device loop4): mounted with root inode @ nid 36. [ 190.251815][ T5560] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.368: couldn't read orphan inode 13 (err -117) [ 190.266474][ T5560] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 190.434922][ T5569] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 190.459632][ T4032] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 190.473590][ T5569] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[4096] [ 190.963683][ T5575] loop3: detected capacity change from 0 to 4096 [ 191.118008][ T5575] NILFS (loop3): invalid segment: Checksum error in segment payload [ 191.120508][ T5575] NILFS (loop3): trying rollback from an earlier position [ 191.173010][ T5583] loop1: detected capacity change from 0 to 1024 [ 191.189682][ T5583] EXT4-fs (loop1): Test dummy encryption mode enabled [ 191.203408][ T5575] NILFS (loop3): recovery complete [ 191.220046][ T5583] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,barrier=0x00000000000003ff,stripe=0x0000000000000007,discard,data=ordered,debug_want_extra_isize=0x0000000000000084,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 191.232521][ T5588] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 192.685385][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.687283][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.706112][ T5605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.255865][ T5613] loop0: detected capacity change from 0 to 16 [ 193.273413][ T5615] loop2: detected capacity change from 0 to 64 [ 193.409095][ T5613] erofs: (device loop0): mounted with root inode @ nid 36. [ 193.574001][ T5613] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 193.595143][ T4032] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 193.608290][ T5613] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[4096] [ 193.992743][ T5630] loop2: detected capacity change from 0 to 64 [ 194.324981][ T5636] loop2: detected capacity change from 0 to 1024 [ 194.431059][ T5636] EXT4-fs (loop2): Test dummy encryption mode enabled [ 194.965087][ T5636] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,barrier=0x00000000000003ff,stripe=0x0000000000000007,discard,data=ordered,debug_want_extra_isize=0x0000000000000084,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 195.003160][ T5658] loop4: detected capacity change from 0 to 16 [ 195.043814][ T5658] erofs: (device loop4): mounted with root inode @ nid 36. [ 195.085054][ T5658] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 195.092232][ T4032] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 195.106212][ T5658] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[4096] [ 196.195193][ T5666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.509745][ T5707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.412'. [ 199.611692][ T5705] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 200.594837][ T5686] loop4: detected capacity change from 0 to 32768 [ 200.611517][ T5716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.729040][ T5686] JBD2: Ignoring recovery information on journal [ 200.837026][ T5686] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 201.044194][ T5713] loop0: detected capacity change from 0 to 32768 [ 201.117106][ T5713] XFS: ikeep mount option is deprecated. [ 201.148252][ T4038] ocfs2: Unmounting device (7,4) on (node local) [ 201.276313][ T5713] XFS (loop0): Mounting V5 Filesystem [ 201.431728][ T5743] udc-core: couldn't find an available UDC or it's busy [ 201.433581][ T5743] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 201.617817][ T5713] XFS (loop0): Ending clean mount [ 201.641708][ T5713] XFS (loop0): Quotacheck needed: Please wait. [ 201.700941][ T5713] XFS (loop0): Quotacheck: Done. [ 201.762422][ T4031] XFS (loop0): Unmounting Filesystem [ 202.194824][ T5754] loop3: detected capacity change from 0 to 32768 [ 203.267943][ T5769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.426'. [ 203.308254][ T5769] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 203.441472][ T5754] XFS (loop3): Mounting V5 Filesystem [ 203.483840][ T5780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.505060][ T5754] XFS (loop3): Starting recovery (logdev: internal) [ 203.518813][ T4079] XFS (loop3): Metadata corruption detected at xfs_inode_buf_verify+0x3c0/0x500, xfs_inode block 0x3000 xfs_inode_buf_verify [ 203.522545][ T4079] XFS (loop3): Unmount and run xfs_repair [ 203.524157][ T4079] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 203.532206][ T4079] 00000000: 49 4e 00 00 03 00 00 00 00 00 00 00 00 00 00 00 IN.............. [ 203.534561][ T4079] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 203.545656][ T4079] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 203.552012][ T4079] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 203.554359][ T4079] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 203.565995][ T4079] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 203.568430][ T4079] 00000060: ff 00 00 ff 26 90 b1 2d 00 00 00 00 00 00 00 00 ....&..-........ [ 203.578235][ T4079] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 203.582838][ T5754] XFS (loop3): metadata I/O error in "xlog_recover_items_pass2+0x17c/0x3d4" at daddr 0x3000 len 64 error 117 [ 203.588621][ T5754] XFS (loop3): log mount/recovery failed: error -117 [ 203.656336][ T5754] XFS (loop3): log mount failed [ 203.838570][ T5790] ipt_CLUSTERIP: Please specify destination IP [ 206.676640][ T5814] netlink: 12 bytes leftover after parsing attributes in process `syz.0.443'. [ 206.814735][ T5814] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 207.863202][ T5829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.590690][ T5854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.457'. [ 210.637757][ T5854] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 213.129446][ T5879] loop0: detected capacity change from 0 to 16 [ 213.228237][ T5879] erofs: (device loop0): mounted with root inode @ nid 36. [ 213.544106][ T5885] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 214.958782][ T5881] loop4: detected capacity change from 0 to 32768 [ 215.006390][ T5881] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.463 (5881) [ 215.063063][ T5881] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 215.065361][ T5881] BTRFS info (device loop4): setting nodatacow, compression disabled [ 215.081570][ T5881] BTRFS info (device loop4): enabling ssd optimizations [ 215.083432][ T5881] BTRFS info (device loop4): setting datacow [ 215.085082][ T5881] BTRFS info (device loop4): doing ref verification [ 215.116615][ T5881] BTRFS info (device loop4): force clearing of disk cache [ 215.118662][ T5881] BTRFS info (device loop4): turning off barriers [ 215.120384][ T5881] BTRFS info (device loop4): using spread ssd allocation scheme [ 215.122448][ T5881] BTRFS info (device loop4): using free space tree [ 215.124160][ T5881] BTRFS info (device loop4): has skinny extents [ 215.412309][ T5916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.468'. [ 215.439029][ T5916] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 215.504320][ T5881] BTRFS info (device loop4): clearing free space tree [ 215.515324][ T5881] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 215.520039][ T5881] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 215.554686][ T5881] BTRFS info (device loop4): creating free space tree [ 215.558655][ T5881] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 215.561366][ T5881] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 217.614975][ T5950] loop3: detected capacity change from 0 to 256 [ 222.664885][ T5978] loop0: detected capacity change from 0 to 40427 [ 222.698280][ T5978] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 222.700468][ T5978] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 222.713837][ T5978] F2FS-fs (loop0): invalid crc value [ 222.736649][ T5978] F2FS-fs (loop0): Found nat_bits in checkpoint [ 223.061461][ T5978] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 223.063587][ T5978] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 224.948439][ T5436] Bluetooth: hci5: command 0x0409 tx timeout [ 225.255326][ T6011] loop0: detected capacity change from 0 to 16 [ 225.394203][ T6011] erofs: (device loop0): mounted with root inode @ nid 36. [ 226.447716][ T6020] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 226.472617][ T5984] chnl_net:caif_netlink_parms(): no params data found [ 226.480344][ T4045] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 226.543603][ T6020] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[4096] [ 226.635049][ T5984] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.637444][ T5984] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.640249][ T5984] device bridge_slave_0 entered promiscuous mode [ 226.644433][ T5984] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.646612][ T5984] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.649249][ T5984] device bridge_slave_1 entered promiscuous mode [ 226.693594][ T5984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.699011][ T5984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.752350][ T5984] team0: Port device team_slave_0 added [ 226.762854][ T5984] team0: Port device team_slave_1 added [ 226.907059][ T5984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.909018][ T5984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.955394][ T5984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.689692][ T5436] Bluetooth: hci5: command 0x041b tx timeout [ 227.764620][ T5984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.766788][ T5984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.773610][ T5984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.869577][ T5984] device hsr_slave_0 entered promiscuous mode [ 227.906417][ T5984] device hsr_slave_1 entered promiscuous mode [ 227.946016][ T5984] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.948194][ T5984] Cannot create hsr debugfs directory [ 228.243535][ T5984] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 228.458415][ T5984] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 228.529709][ T5984] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 228.591806][ T5984] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 229.476596][ T5436] Bluetooth: hci4: command 0x0409 tx timeout [ 229.669671][ T6033] loop1: detected capacity change from 0 to 40427 [ 229.771970][ T5436] Bluetooth: hci5: command 0x040f tx timeout [ 229.794966][ T6033] F2FS-fs (loop1): invalid crc value [ 229.976436][ T5984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.598509][ T6033] F2FS-fs (loop1): Found nat_bits in checkpoint [ 230.671191][ T6033] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 230.675429][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 230.679051][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.682032][ T6033] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 230.708393][ T5984] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.740809][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 230.743763][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.767224][ T4741] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.769320][ T4741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.786317][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 230.798333][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.801116][ T4741] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.803482][ T4741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.826254][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 230.835094][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 230.841114][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 230.854299][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 230.878361][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.906205][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 230.926434][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.929564][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.932434][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 230.943808][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.959283][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 230.962798][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 230.984617][ T5984] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 231.269647][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 231.271867][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 231.308127][ T5984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.626110][ T6069] loop1: detected capacity change from 0 to 256 [ 233.178025][ T4077] Bluetooth: hci5: command 0x0419 tx timeout [ 233.197087][ T6069] exfat: Bad value for 'gid' [ 233.467574][ T6067] loop1: detected capacity change from 0 to 32768 [ 233.630200][ T6067] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.502 (6067) [ 235.703208][ T6067] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 235.705578][ T6067] BTRFS info (device loop1): turning on async discard [ 235.707572][ T6067] BTRFS error (device loop1): unrecognized mount option 'max_inline=' [ 235.712217][ T6067] BTRFS error (device loop1): open_ctree failed: -22 [ 235.740572][ T6096] loop4: detected capacity change from 0 to 16 [ 235.787321][ T4021] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by udevd (4021) [ 235.835208][ T6096] erofs: (device loop4): mounted with root inode @ nid 36. [ 236.943874][ T6116] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 237.180948][ T4177] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.348440][ T575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 237.351563][ T575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 237.504248][ T4177] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.611465][ T5984] device veth0_vlan entered promiscuous mode [ 237.629802][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 237.633420][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 237.673915][ T4177] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.710461][ T5984] device veth1_vlan entered promiscuous mode [ 237.723219][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 237.726186][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 237.728739][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 237.792427][ T4177] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.847381][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 237.850187][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 237.853418][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 237.865710][ T5984] device veth0_macvtap entered promiscuous mode [ 237.889583][ T5984] device veth1_macvtap entered promiscuous mode [ 237.944739][ T5984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.961827][ T5984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.964497][ T5984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.973590][ T5984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.988251][ T5984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.991110][ T5984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.004215][ T5984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.014387][ T5984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.024566][ T5984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.034762][ T5984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.047261][ T5984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.061757][ T575] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 238.064711][ T575] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 238.069527][ T575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 238.082637][ T5984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.085557][ T5984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.097389][ T5984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.101896][ T5984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.104554][ T5984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.105038][ T6121] loop1: detected capacity change from 0 to 40427 [ 238.108576][ T5984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.112193][ T5984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.114962][ T5984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.124438][ T6121] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 238.132207][ T5984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.135095][ T5984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.135725][ T6121] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 238.153183][ T5984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.175887][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 238.181777][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 238.182476][ T6121] F2FS-fs (loop1): Found nat_bits in checkpoint [ 238.193232][ T5984] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.195631][ T5984] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.204232][ T5984] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.220039][ T5984] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.235344][ T6121] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 238.237564][ T6121] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 238.409995][ T6131] loop3: detected capacity change from 0 to 32768 [ 238.442425][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.444816][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.515400][ T6131] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 238.521387][ T575] (kworker/u4:5,575,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 238.730107][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 238.740199][ T4365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.744039][ T4365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.762397][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 238.787221][ T4042] ocfs2: Unmounting device (7,3) on (node local) [ 238.833271][ T6152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.524'. [ 238.900968][ T6152] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 239.548928][ T6170] loop1: detected capacity change from 0 to 1024 [ 239.631182][ T6170] EXT4-fs (loop1): Test dummy encryption mode enabled [ 239.650813][ T6170] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,barrier=0x00000000000003ff,stripe=0x0000000000000007,discard,data=ordered,debug_want_extra_isize=0x0000000000000084,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 239.701541][ T6177] loop4: detected capacity change from 0 to 512 [ 239.735546][ T6177] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 239.827407][ T6177] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,noinit_itable,errors=remount-ro,grpjquota=.,stripe=0x0000000000000000,init_itable,. Quota mode: writeback. [ 239.936970][ T6177] EXT4-fs error (device loop4): ext4_get_verity_descriptor_location:338: inode #15: comm syz.4.529: verity file corrupted; can't find descriptor [ 239.994024][ T6177] EXT4-fs (loop4): Remounting filesystem read-only [ 240.011636][ T6177] fs-verity (loop4, inode 15): Error -117 getting verity descriptor size [ 240.051409][ T6189] loop5: detected capacity change from 0 to 512 [ 240.871442][ T6189] EXT4-fs (loop5): Ignoring removed nobh option [ 240.894329][ T6189] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 240.896871][ T6189] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61 [ 240.908872][ T6189] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #13: comm syz.5.530: casefold flag without casefold feature [ 240.919561][ T6189] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.530: couldn't read orphan inode 13 (err -117) [ 240.986054][ T6189] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 245.510276][ T6248] netlink: 12 bytes leftover after parsing attributes in process `syz.5.540'. [ 245.550145][ T6248] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 245.730314][ T4177] device hsr_slave_0 left promiscuous mode [ 245.934124][ T4177] device hsr_slave_1 left promiscuous mode [ 246.189105][ T4080] Bluetooth: hci4: command 0x0406 tx timeout [ 246.336375][ T4177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.341921][ T4177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.405103][ T6261] loop3: detected capacity change from 0 to 1024 [ 246.429498][ T6261] EXT4-fs (loop3): Test dummy encryption mode enabled [ 246.455812][ T4177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.468004][ T4177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.475890][ T6261] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,barrier=0x00000000000003ff,stripe=0x0000000000000007,discard,data=ordered,debug_want_extra_isize=0x0000000000000084,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 246.497958][ T4177] device bridge_slave_1 left promiscuous mode [ 246.503095][ T4177] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.552928][ T4177] device bridge_slave_0 left promiscuous mode [ 246.562246][ T4177] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.596578][ T4177] device veth1_macvtap left promiscuous mode [ 247.604091][ T4177] device veth0_macvtap left promiscuous mode [ 247.605853][ T4177] device veth1_vlan left promiscuous mode [ 247.627163][ T4177] device veth0_vlan left promiscuous mode [ 249.985694][ T6286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.025204][ T6294] netlink: 12 bytes leftover after parsing attributes in process `syz.3.553'. [ 254.475986][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.482970][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.686444][ T4177] team0 (unregistering): Port device team_slave_1 removed [ 254.739976][ T4177] team0 (unregistering): Port device team_slave_0 removed [ 254.777502][ T4177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.127230][ T4177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.621647][ T4177] bond0 (unregistering): Released all slaves [ 256.869986][ T6334] loop5: detected capacity change from 0 to 40427 [ 256.983399][ T6299] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 257.041603][ T6334] F2FS-fs (loop5): invalid crc value [ 257.079988][ T6334] F2FS-fs (loop5): Found nat_bits in checkpoint [ 257.189307][ T6353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.312961][ T6334] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 257.775719][ T6366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.572'. [ 258.354242][ T6366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.524501][ T6366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.817387][ T5930] Bluetooth: hci3: command 0x0409 tx timeout [ 265.455470][ T6415] loop5: detected capacity change from 0 to 40427 [ 265.592459][ T6415] F2FS-fs (loop5): invalid crc value [ 266.337795][ T6415] F2FS-fs (loop5): Found nat_bits in checkpoint [ 267.483178][ T6465] loop1: detected capacity change from 0 to 128 [ 267.716625][ T6465] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 274.181995][ T6540] siw: device registration error -23 [ 276.385853][ T6562] udc-core: couldn't find an available UDC or it's busy [ 276.405101][ T6562] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 277.861865][ T6582] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 278.178085][ T6582] netlink: 12 bytes leftover after parsing attributes in process `syz.5.619'. [ 279.170257][ T6603] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 281.732975][ T6606] loop1: detected capacity change from 0 to 40427 [ 282.923471][ T6606] F2FS-fs (loop1): invalid crc value [ 282.946021][ T6606] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-12) [ 283.182321][ T21] Bluetooth: hci5: command 0x0405 tx timeout [ 283.420389][ T6651] loop1: detected capacity change from 0 to 1024 [ 283.455888][ T6640] loop5: detected capacity change from 0 to 40427 [ 283.482600][ T6651] EXT4-fs (loop1): Test dummy encryption mode enabled [ 283.492655][ T6640] F2FS-fs (loop5): Unrecognized mount option "errors=continue" or missing value [ 283.520024][ T6651] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,barrier=0x00000000000003ff,stripe=0x0000000000000007,discard,data=ordered,debug_want_extra_isize=0x0000000000000084,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 287.911425][ T6698] loop0: detected capacity change from 0 to 131072 [ 287.941755][ T6698] F2FS-fs (loop0): invalid crc value [ 287.989118][ T6698] F2FS-fs (loop0): Found nat_bits in checkpoint [ 288.021869][ T6698] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 288.662346][ T6700] loop1: detected capacity change from 0 to 40427 [ 288.714741][ T6700] F2FS-fs (loop1): invalid crc value [ 288.735233][ T6700] F2FS-fs (loop1): Found nat_bits in checkpoint [ 288.789527][ T6700] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 289.334728][ T6727] attempt to access beyond end of device [ 289.334728][ T6727] loop1: rw=2049, want=45104, limit=40427 [ 289.937347][ T4030] attempt to access beyond end of device [ 289.937347][ T4030] loop1: rw=2049, want=45112, limit=40427 [ 291.173677][ T6738] loop3: detected capacity change from 0 to 512 [ 291.182009][ T6741] loop0: detected capacity change from 0 to 512 [ 291.221482][ T6741] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 291.256172][ T6738] EXT4-fs (loop3): Ignoring removed nobh option [ 291.282240][ T6738] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 291.291842][ T6741] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,jqfmt=vfsold,quota,. Quota mode: writeback. [ 291.298945][ T6738] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 291.307934][ T6738] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #13: comm syz.3.653: casefold flag without casefold feature [ 291.343817][ T6738] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.653: couldn't read orphan inode 13 (err -117) [ 291.372091][ T6738] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 291.644979][ T6754] loop0: detected capacity change from 0 to 16 [ 293.507288][ T6754] erofs: (device loop0): mounted with root inode @ nid 36. [ 293.899509][ T6779] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 294.492528][ T4045] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 294.768407][ T6782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.657'. [ 294.821545][ T6775] dccp_close: ABORT with 2 bytes unread [ 296.415382][ T6802] loop1: detected capacity change from 0 to 2048 [ 296.616101][ T6806] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 297.506576][ T6802] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=203 [ 297.549685][ T6802] Remounting filesystem read-only [ 297.551797][ T6802] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=203 [ 298.653353][ T6828] loop1: detected capacity change from 0 to 1024 [ 298.716018][ T6828] EXT4-fs (loop1): Ignoring removed orlov option [ 298.950348][ T6828] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,resgid=0x0000000000000000,nodioread_nolock,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,max_dir_size_kb=0x0000000000000008,grpid,orlov,,errors=continue. Quota mode: none. [ 299.024902][ T6839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.424772][ T6821] loop0: detected capacity change from 0 to 32768 [ 299.550312][ T6821] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 299.556130][ T6821] BTRFS info (device loop0): setting nodatacow, compression disabled [ 299.564712][ T6821] BTRFS info (device loop0): force zlib compression, level 3 [ 299.574334][ T6821] BTRFS info (device loop0): turning off barriers [ 299.576520][ T6821] BTRFS info (device loop0): max_inline at 6 [ 299.605758][ T6821] BTRFS info (device loop0): doing ref verification [ 299.615682][ T6821] BTRFS info (device loop0): setting nodatacow [ 299.618002][ T6821] BTRFS info (device loop0): using free space tree [ 299.630579][ T6821] BTRFS info (device loop0): has skinny extents [ 302.217657][ T6894] loop1: detected capacity change from 0 to 512 [ 302.403477][ T6894] EXT4-fs (loop1): Ignoring removed bh option [ 302.405178][ T6894] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 302.420057][ T6894] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 302.444793][ T6821] BTRFS error (device loop0): open_ctree failed: -12 [ 303.550858][ T6894] EXT4-fs (loop1): 1 truncate cleaned up [ 303.552585][ T6894] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,bh,debug_want_extra_isize=0x0000000000000068,resgid=0x0000000000000000,auto_da_alloc,quota,. Quota mode: writeback. [ 303.577824][ T6914] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 303.646222][ T6923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.609582][ T6948] loop1: detected capacity change from 0 to 764 [ 307.627596][ T6961] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 307.780695][ T6966] syz.1.690 uses obsolete (PF_INET,SOCK_PACKET) [ 307.848106][ T6976] udc-core: couldn't find an available UDC or it's busy [ 307.850086][ T6976] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 308.931179][ T6984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.600830][ T7008] loop0: detected capacity change from 0 to 512 [ 309.650155][ T7008] EXT4-fs (loop0): Ignoring removed nobh option [ 309.671650][ T7008] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 309.673964][ T7008] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 309.677195][ T7008] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #13: comm syz.0.706: casefold flag without casefold feature [ 309.695734][ T7008] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.706: couldn't read orphan inode 13 (err -117) [ 309.707214][ T7008] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 309.793315][ T153] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.980230][ T153] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.086394][ T7021] loop5: detected capacity change from 0 to 8 [ 310.177203][ T153] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.320516][ T153] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.534458][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 312.593153][ T7029] chnl_net:caif_netlink_parms(): no params data found [ 312.807888][ T7029] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.812815][ T7029] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.818959][ T7029] device bridge_slave_0 entered promiscuous mode [ 312.888322][ T7029] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.892572][ T7029] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.899550][ T7029] device bridge_slave_1 entered promiscuous mode [ 312.970178][ T7029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.984520][ T7029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.044687][ T7033] SQUASHFS error: Failed to read block 0x63a: -5 [ 313.054016][ T7029] team0: Port device team_slave_0 added [ 313.058660][ T7033] SQUASHFS error: Unable to read metadata cache entry [638] [ 313.060734][ T7033] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 313.089617][ T7029] team0: Port device team_slave_1 added [ 313.095221][ T7033] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 313.146723][ T7029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.152979][ T7029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.179067][ T7029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.223841][ T7029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.226073][ T7029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.244264][ T7029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.388788][ T7029] device hsr_slave_0 entered promiscuous mode [ 313.498979][ T7029] device hsr_slave_1 entered promiscuous mode [ 313.534704][ T7079] loop3: detected capacity change from 0 to 764 [ 313.579862][ T7029] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.581927][ T7029] Cannot create hsr debugfs directory [ 313.878770][ T7029] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 313.966057][ T7029] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 314.087753][ T7099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.126612][ T7029] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 314.159236][ T7029] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 314.550589][ T153] device hsr_slave_0 left promiscuous mode [ 315.357455][ T153] device hsr_slave_1 left promiscuous mode [ 315.417149][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.419017][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 315.477952][ T153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.480063][ T153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.486914][ T153] device bridge_slave_1 left promiscuous mode [ 315.488687][ T153] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.527914][ T153] device bridge_slave_0 left promiscuous mode [ 315.529664][ T153] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.618961][ T7127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.766461][ T153] device veth1_macvtap left promiscuous mode [ 315.768249][ T153] device veth0_macvtap left promiscuous mode [ 315.771007][ T153] device veth1_vlan left promiscuous mode [ 315.772554][ T153] device veth0_vlan left promiscuous mode [ 316.984736][ T7141] loop0: detected capacity change from 0 to 512 [ 317.062113][ T7141] EXT4-fs (loop0): Ignoring removed nobh option [ 317.072886][ T153] team0 (unregistering): Port device team_slave_1 removed [ 317.080425][ T7141] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 317.085010][ T153] team0 (unregistering): Port device team_slave_0 removed [ 317.087670][ T7141] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 317.089995][ T7141] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #13: comm syz.0.724: casefold flag without casefold feature [ 317.103881][ T7141] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.724: couldn't read orphan inode 13 (err -117) [ 317.104066][ T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.110214][ T7141] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 317.165837][ T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.385366][ T7147] loop4: detected capacity change from 0 to 512 [ 317.407947][ T153] bond0 (unregistering): Released all slaves [ 317.481247][ T7147] EXT4-fs (loop4): inline encryption not supported [ 317.598549][ T7147] EXT4-fs (loop4): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 317.818511][ T7029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.815338][ T7029] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.821287][ T7155] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #2: comm syz.4.725: corrupted inode contents [ 319.829173][ T7155] EXT4-fs error (device loop4): ext4_dirty_inode:6010: inode #2: comm syz.4.725: mark_inode_dirty error [ 319.833380][ T7155] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #2: comm syz.4.725: corrupted inode contents [ 319.837168][ T7155] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz.4.725: mark_inode_dirty error [ 319.848217][ T7154] loop5: detected capacity change from 0 to 764 [ 319.852149][ T7159] netlink: 'syz.3.726': attribute type 10 has an invalid length. [ 319.854286][ T7159] netlink: 40 bytes leftover after parsing attributes in process `syz.3.726'. [ 319.856999][ T7159] device batadv0 entered promiscuous mode [ 319.859058][ T7159] bridge0: port 3(batadv0) entered blocking state [ 319.860874][ T7159] bridge0: port 3(batadv0) entered disabled state [ 319.864305][ T7159] bridge0: port 3(batadv0) entered blocking state [ 319.866253][ T7159] bridge0: port 3(batadv0) entered forwarding state [ 319.894877][ T1812] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 319.897937][ T1812] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 319.936335][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 319.939153][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 320.023567][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 320.033769][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 320.042675][ T4365] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.044840][ T4365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.059276][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 320.072668][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 320.084844][ T4365] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.086764][ T4365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.143056][ T7168] loop3: detected capacity change from 0 to 8 [ 320.176890][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 320.185461][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 320.215080][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 320.220999][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 320.245329][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 320.281443][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 320.284414][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 320.303651][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 320.379827][ T7029] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 320.382719][ T7029] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 320.390163][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 320.392920][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 320.395761][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 320.423595][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 320.427128][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 320.908832][ T7187] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 321.153618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 321.170017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 321.181730][ T7029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.956918][ T7164] SQUASHFS error: Failed to read block 0x63a: -5 [ 322.958731][ T7164] SQUASHFS error: Unable to read metadata cache entry [638] [ 322.960574][ T7164] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 322.988847][ T7164] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 323.850638][ T7228] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 323.852985][ T7228] IPv6: NLM_F_CREATE should be set when creating new route [ 323.896418][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 323.899437][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 324.041045][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 324.044099][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 324.048695][ T7029] device veth0_vlan entered promiscuous mode [ 324.057248][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 324.061185][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 324.094432][ T7029] device veth1_vlan entered promiscuous mode [ 324.310183][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 324.312938][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 324.315484][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 325.208578][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 325.219637][ T7029] device veth0_macvtap entered promiscuous mode [ 325.224677][ T7029] device veth1_macvtap entered promiscuous mode [ 325.332769][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 325.335660][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 325.360292][ T7245] loop0: detected capacity change from 0 to 764 [ 325.370717][ T7029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.374379][ T7029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.931791][ T7029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.935004][ T7029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.940763][ T7029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.954713][ T7029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.968214][ T7029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.982201][ T7029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.000018][ T7029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.012542][ T7248] netlink: 'syz.3.738': attribute type 10 has an invalid length. [ 326.014837][ T7248] netlink: 40 bytes leftover after parsing attributes in process `syz.3.738'. [ 326.026313][ T7243] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 326.083510][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 326.096695][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 326.101396][ T7029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.104261][ T7029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.136333][ T7029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.145537][ T7029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.148317][ T7029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.150958][ T7029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.153609][ T7029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.196015][ T7029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.209332][ T7029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.221734][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 326.225188][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 326.246894][ T7029] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.261991][ T7029] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.274118][ T7029] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.285683][ T7029] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.628889][ T7262] loop4: detected capacity change from 0 to 512 [ 326.813182][ T7262] EXT4-fs (loop4): Ignoring removed nobh option [ 326.842543][ T7262] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 326.844864][ T7262] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 326.855155][ T7262] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #13: comm syz.4.743: casefold flag without casefold feature [ 326.875718][ T7262] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.743: couldn't read orphan inode 13 (err -117) [ 326.905069][ T7262] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 327.693620][ T7279] netlink: 'syz.3.745': attribute type 10 has an invalid length. [ 327.695659][ T7279] netlink: 40 bytes leftover after parsing attributes in process `syz.3.745'. [ 327.701187][ T7279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.703385][ T7279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.244921][ T7279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.247211][ T7279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.347048][ T7279] bridge0: port 3(batadv0) entered disabled state [ 328.404731][ T7279] bridge0: port 3(batadv0) entered disabled state [ 328.502560][ T334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.505102][ T334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.514256][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 328.665594][ T1812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.668413][ T1812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.673866][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 328.917495][ T7301] loop3: detected capacity change from 0 to 512 [ 328.996383][ T7301] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 329.206079][ T7301] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 329.214055][ T7301] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.747: attempt to clear invalid blocks 2 len 1 [ 329.221964][ T7301] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 329.228413][ T7301] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.747: invalid indirect mapped block 1819239214 (level 0) [ 329.236421][ T7301] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.747: invalid indirect mapped block 1819239214 (level 1) [ 329.244224][ T7301] EXT4-fs (loop3): 1 truncate cleaned up [ 329.246354][ T7301] EXT4-fs (loop3): mounted filesystem without journal. Opts: dax=never,dioread_nolock,barrier,delalloc,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 330.413626][ T7319] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 332.731050][ T7340] loop5: detected capacity change from 0 to 1024 [ 332.790551][ T7340] EXT4-fs (loop5): Test dummy encryption mode enabled [ 332.850987][ T7340] EXT4-fs (loop5): mounted filesystem without journal. Opts: nombcache,barrier=0x00000000000003ff,stripe=0x0000000000000007,discard,data=ordered,debug_want_extra_isize=0x0000000000000084,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 336.552196][ T7379] loop5: detected capacity change from 0 to 512 [ 336.624074][ T7374] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 338.096962][ T7379] EXT4-fs (loop5): Mount option "nouser_xattr" will be removed by 3.5 [ 338.096962][ T7379] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 338.096962][ T7379] [ 338.126065][ T7379] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 338.139769][ T7379] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 338.157375][ T7402] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 338.159391][ T7402] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 338.172634][ T7402] vhci_hcd vhci_hcd.0: Device attached [ 338.173136][ T7409] capability: warning: `syz.3.769' uses deprecated v2 capabilities in a way that may be insecure [ 338.364991][ T7405] vhci_hcd: unknown pdu 2 [ 338.384612][ T334] vhci_hcd: stop threads [ 338.386626][ T334] vhci_hcd: release socket [ 338.388850][ T334] vhci_hcd: disconnect device [ 338.406998][ T7379] EXT4-fs (loop5): 1 truncate cleaned up [ 338.408585][ T7379] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_dev=0x0000000000000009,grpid,dioread_nolock,debug_want_extra_isize=0x0000000000000080,nouser_xattr,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 338.446549][ T4143] usb 8-1: new high-speed USB device number 2 using vhci_hcd [ 338.450264][ T4143] usb 8-1: enqueue for inactive port 0 [ 338.462943][ T7402] loop3: detected capacity change from 0 to 512 [ 338.475779][ T7414] loop6: detected capacity change from 0 to 1024 [ 338.502949][ T7416] loop4: detected capacity change from 0 to 4096 [ 338.523522][ T7402] EXT4-fs (loop3): Ignoring removed nobh option [ 338.525430][ T7402] EXT4-fs (loop3): Ignoring removed nobh option [ 338.527832][ T4143] vhci_hcd: vhci_device speed not set [ 338.541523][ T7402] EXT4-fs (loop3): Unrecognized mount option "¥ &¸" or missing value [ 338.567260][ T7416] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 338.639090][ T7414] hfsplus: unable to parse mount options [ 338.855739][ T7404] loop0: detected capacity change from 0 to 32768 [ 339.680317][ T7402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.769'. [ 339.952393][ T7404] XFS (loop0): Mounting V5 Filesystem [ 340.064206][ T7437] loop4: detected capacity change from 0 to 4096 [ 340.081587][ T7437] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 340.191729][ T7404] XFS (loop0): Ending clean mount [ 340.225247][ T7404] XFS (loop0): Quotacheck needed: Please wait. [ 340.288287][ T7404] XFS (loop0): Quotacheck: Done. [ 341.828870][ T7454] sp0: Synchronizing with TNC [ 341.999301][ T7468] netlink: 'syz.3.774': attribute type 10 has an invalid length. [ 342.001423][ T7468] netlink: 40 bytes leftover after parsing attributes in process `syz.3.774'. [ 343.689786][ T7474] loop6: detected capacity change from 0 to 4096 [ 343.720123][ T7474] ntfs3: loop6: Different NTFS' sector size (2048) and media sector size (512) [ 345.876972][ T4031] XFS (loop0): Unmounting Filesystem [ 347.822735][ T7501] loop3: detected capacity change from 0 to 512 [ 347.863669][ T7504] netlink: 12 bytes leftover after parsing attributes in process `syz.4.785'. [ 347.917475][ T7501] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 348.115785][ T7501] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 348.119792][ T7501] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.784: attempt to clear invalid blocks 2 len 1 [ 348.138880][ T7501] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 348.142657][ T7501] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.784: invalid indirect mapped block 1819239214 (level 0) [ 348.157599][ T7501] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.784: invalid indirect mapped block 1819239214 (level 1) [ 348.163036][ T7501] EXT4-fs (loop3): 1 truncate cleaned up [ 348.164533][ T7501] EXT4-fs (loop3): mounted filesystem without journal. Opts: dax=never,dioread_nolock,barrier,delalloc,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 348.272211][ T7517] netlink: 'syz.5.787': attribute type 10 has an invalid length. [ 348.274407][ T7517] netlink: 40 bytes leftover after parsing attributes in process `syz.5.787'. [ 348.276877][ T7517] device batadv0 entered promiscuous mode [ 348.279451][ T7517] bridge0: port 3(batadv0) entered blocking state [ 348.281398][ T7517] bridge0: port 3(batadv0) entered disabled state [ 348.285222][ T7517] bridge0: port 3(batadv0) entered blocking state [ 348.287302][ T7517] bridge0: port 3(batadv0) entered forwarding state [ 348.303030][ T7517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.305290][ T7517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.056016][ T7517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.057971][ T7517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.065165][ T4020] Bluetooth: hci5: command 0x0406 tx timeout [ 349.081932][ T7517] bridge0: port 3(batadv0) entered disabled state [ 349.814258][ T4832] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 349.817013][ T4832] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 349.858898][ T7517] bridge0: port 3(batadv0) entered disabled state [ 349.885548][ T7513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.070647][ T7520] netlink: 8 bytes leftover after parsing attributes in process `syz.6.788'. [ 350.078701][ T7527] loop0: detected capacity change from 0 to 512 [ 351.379760][ T7527] EXT4-fs (loop0): Ignoring removed nobh option [ 351.518035][ T7533] loop6: detected capacity change from 0 to 4096 [ 351.545061][ T7539] loop5: detected capacity change from 0 to 1024 [ 351.554846][ T7527] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 351.557660][ T7527] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 351.560523][ T7527] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #13: comm syz.0.781: casefold flag without casefold feature [ 351.564858][ T7527] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.781: couldn't read orphan inode 13 (err -117) [ 351.574929][ T7533] ntfs: (device loop6): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 351.583904][ T7527] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 351.645266][ T7545] loop3: detected capacity change from 0 to 512 [ 351.685229][ T7539] EXT4-fs (loop5): Test dummy encryption mode enabled [ 351.742664][ T7533] ntfs: (device loop6): parse_options(): NLS character set macgreÿ not found. Using previous one utf8. [ 351.750744][ T7545] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 351.759965][ T7533] ntfs: (device loop6): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 351.782074][ T7545] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 351.784534][ T7533] ntfs: (device loop6): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 352.057524][ T7551] netlink: 'syz.4.791': attribute type 10 has an invalid length. [ 352.059801][ T7551] netlink: 40 bytes leftover after parsing attributes in process `syz.4.791'. [ 352.062228][ T7551] device batadv0 entered promiscuous mode [ 352.071231][ T7551] bridge0: port 3(batadv0) entered blocking state [ 352.073366][ T7551] bridge0: port 3(batadv0) entered disabled state [ 352.092504][ T7551] bridge0: port 3(batadv0) entered blocking state [ 352.094379][ T7551] bridge0: port 3(batadv0) entered forwarding state [ 352.531297][ T7545] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.792: attempt to clear invalid blocks 2 len 1 [ 352.541151][ T7533] ntfs: volume version 3.1. [ 352.546548][ T7545] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 352.563938][ T153] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 352.565541][ T7545] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.792: invalid indirect mapped block 1819239214 (level 0) [ 352.566562][ T153] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 352.572392][ T7545] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.792: invalid indirect mapped block 1819239214 (level 1) [ 352.587568][ T7539] EXT4-fs (loop5): mounted filesystem without journal. Opts: nombcache,barrier=0x00000000000003ff,stripe=0x0000000000000007,discard,data=ordered,debug_want_extra_isize=0x0000000000000084,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 352.660344][ T7545] EXT4-fs (loop3): 1 truncate cleaned up [ 352.661861][ T7545] EXT4-fs (loop3): mounted filesystem without journal. Opts: dax=never,dioread_nolock,barrier,delalloc,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 352.877553][ T7554] Cannot find add_set index 0 as target [ 357.263282][ T7599] process 'syz.0.800' launched './file2' with NULL argv: empty string added [ 359.289852][ T7623] loop5: detected capacity change from 0 to 512 [ 360.074198][ T7623] EXT4-fs (loop5): Ignoring removed nobh option [ 360.374138][ T7623] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 360.377103][ T7623] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61 [ 360.379366][ T7623] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #13: comm syz.5.811: casefold flag without casefold feature [ 362.515372][ T7623] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.811: couldn't read orphan inode 13 (err -117) [ 362.537394][ T7623] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 366.349081][ T7682] loop3: detected capacity change from 0 to 1024 [ 368.559999][ T7682] EXT4-fs (loop3): Test dummy encryption mode enabled [ 369.410246][ T7682] EXT4-fs: error -4 creating inode table initialization thread [ 369.412918][ T7682] EXT4-fs (loop3): mount failed [ 369.579408][ T7707] loop5: detected capacity change from 0 to 512 [ 371.456222][ T7707] EXT4-fs (loop5): Ignoring removed nobh option [ 371.477484][ T7707] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 371.479838][ T7707] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61 [ 371.482483][ T7707] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #13: comm syz.5.830: casefold flag without casefold feature [ 371.498766][ T7707] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.830: couldn't read orphan inode 13 (err -117) [ 371.608318][ T7707] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 371.724348][ T7724] loop3: detected capacity change from 0 to 512 [ 371.770068][ T7724] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 371.770068][ T7724] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 371.770068][ T7724] [ 371.779771][ T7724] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 371.783023][ T7724] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 371.820457][ T7724] EXT4-fs (loop3): 1 truncate cleaned up [ 371.822368][ T7724] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x0000000000000009,grpid,dioread_nolock,debug_want_extra_isize=0x0000000000000080,nouser_xattr,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 373.556472][ T7743] autofs4:pid:7743:autofs_fill_super: called with bogus options [ 374.493971][ T7756] loop4: detected capacity change from 0 to 1024 [ 374.756643][ T7758] autofs4:pid:7758:autofs_fill_super: called with bogus options [ 375.563755][ T7756] EXT4-fs (loop4): Test dummy encryption mode enabled [ 377.318486][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.069988][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.116691][ T7756] EXT4-fs: failed to create workqueue [ 378.118637][ T7756] EXT4-fs (loop4): mount failed [ 378.530084][ T7795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.448859][ T7803] loop3: detected capacity change from 0 to 512 [ 379.506518][ T7803] EXT4-fs (loop3): Ignoring removed nobh option [ 379.599124][ T7803] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 379.602370][ T7803] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 379.634239][ T7803] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #13: comm syz.3.850: casefold flag without casefold feature [ 379.796085][ T7803] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.850: couldn't read orphan inode 13 (err -117) [ 379.800049][ T7803] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 381.795835][ T7833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.799524][ T7833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.131496][ T7833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.133553][ T7833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.062041][ T7853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.859'. [ 385.299347][ T7860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.275520][ T7873] autofs4:pid:7873:autofs_fill_super: called with bogus options [ 388.917854][ T7886] loop0: detected capacity change from 0 to 512 [ 389.853895][ T7886] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5 [ 389.853895][ T7886] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 389.853895][ T7886] [ 389.869108][ T7886] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 389.884972][ T7886] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 390.106280][ T7886] EXT4-fs (loop0): 1 truncate cleaned up [ 390.107825][ T7886] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000009,grpid,dioread_nolock,debug_want_extra_isize=0x0000000000000080,nouser_xattr,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 393.263960][ T7913] loop6: detected capacity change from 0 to 512 [ 393.452393][ T7921] netlink: 'syz.5.873': attribute type 10 has an invalid length. [ 393.454611][ T7921] netlink: 40 bytes leftover after parsing attributes in process `syz.5.873'. [ 395.367738][ T7913] EXT4-fs (loop6): Ignoring removed nobh option [ 395.415211][ T7913] fscrypt (loop6, inode 2): Error -61 getting encryption context [ 395.417668][ T7913] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -61 [ 395.425686][ T7913] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #13: comm syz.6.874: casefold flag without casefold feature [ 395.477203][ T7913] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.874: couldn't read orphan inode 13 (err -117) [ 395.483326][ T7925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 395.487757][ T7913] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 401.710263][ T7967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.712408][ T7967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.897403][ T7967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.899665][ T7967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.414733][ T7985] loop6: detected capacity change from 0 to 8 [ 407.473882][ T8022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.554735][ T8024] netlink: 24 bytes leftover after parsing attributes in process `syz.0.896'. [ 407.597887][ T8024] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 407.676160][ T8029] loop5: detected capacity change from 0 to 512 [ 407.844496][ T8029] EXT4-fs (loop5): Ignoring removed nobh option [ 407.869453][ T8029] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 407.871715][ T8029] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61 [ 407.874106][ T8029] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #13: comm syz.5.898: casefold flag without casefold feature [ 408.224394][ T8029] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.898: couldn't read orphan inode 13 (err -117) [ 408.686991][ T8029] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 409.169991][ T8049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.173036][ T8049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.410642][ T8049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.412767][ T8049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.424304][ T8049] bridge0: port 3(batadv0) entered disabled state [ 409.547776][ T8049] bridge0: port 3(batadv0) entered disabled state [ 412.716372][ T8075] netlink: 8 bytes leftover after parsing attributes in process `syz.6.904'. [ 415.720471][ T8111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.618650][ T8154] loop5: detected capacity change from 0 to 8 [ 422.946039][ T8160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.920'. [ 423.924658][ T8167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 425.163158][ T8176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.928'. [ 426.007536][ T8169] loop4: detected capacity change from 0 to 40427 [ 426.810620][ T8169] F2FS-fs (loop4): invalid crc value [ 426.843898][ T8169] F2FS-fs (loop4): Found nat_bits in checkpoint [ 428.150448][ T8200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.931'. [ 431.562852][ T8218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.938'. [ 434.819049][ T8227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 438.288371][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.290256][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.186096][ T8281] netlink: 8 bytes leftover after parsing attributes in process `syz.5.952'. [ 444.500903][ T8289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.330301][ T8299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.954'. [ 450.253122][ T8315] loop4: detected capacity change from 0 to 512 [ 450.489335][ T8315] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 451.723392][ T8315] EXT4-fs: failed to create workqueue [ 451.724850][ T8315] EXT4-fs (loop4): mount failed [ 458.403473][ T8376] futex_wake_op: syz.5.977 tries to shift op by -33; fix this program [ 458.956098][ T8370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.978'. [ 459.642791][ T8378] loop5: detected capacity change from 0 to 512 [ 459.740234][ T8378] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 459.790217][ T8378] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 459.792849][ T8378] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.981: attempt to clear invalid blocks 2 len 1 [ 459.797720][ T8378] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 459.801680][ T8378] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.981: invalid indirect mapped block 1819239214 (level 0) [ 459.816136][ T8378] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.981: invalid indirect mapped block 1819239214 (level 1) [ 459.821480][ T8378] EXT4-fs (loop5): 1 truncate cleaned up [ 459.822993][ T8378] EXT4-fs (loop5): mounted filesystem without journal. Opts: dax=never,dioread_nolock,barrier,delalloc,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 461.269850][ T8384] chnl_net:caif_netlink_parms(): no params data found [ 462.249864][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 462.339137][ T8381] loop6: detected capacity change from 0 to 40427 [ 462.457909][ T8381] F2FS-fs (loop6): invalid crc value [ 463.225454][ T8381] F2FS-fs (loop6): Found nat_bits in checkpoint [ 463.240774][ T8384] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.242869][ T8384] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.245736][ T8384] device bridge_slave_0 entered promiscuous mode [ 463.254344][ T8415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.987'. [ 463.257366][ T8384] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.259601][ T8384] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.262485][ T8384] device bridge_slave_1 entered promiscuous mode [ 463.309567][ T8384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.315568][ T8384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.443662][ T8384] team0: Port device team_slave_0 added [ 464.286403][ T4130] Bluetooth: hci1: command 0x041b tx timeout [ 464.597912][ T8384] team0: Port device team_slave_1 added [ 464.848127][ T4129] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.862588][ T8432] loop4: detected capacity change from 0 to 512 [ 464.892757][ T8384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.905252][ T8432] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 464.918811][ T8384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.935736][ T8432] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 464.943884][ T8432] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.993: attempt to clear invalid blocks 2 len 1 [ 464.962530][ T8432] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 464.970346][ T8384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.995012][ T4129] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.037601][ T8432] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.993: invalid indirect mapped block 1819239214 (level 0) [ 465.044083][ T8384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.048994][ T8384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.055695][ T8384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.060421][ T8432] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.993: invalid indirect mapped block 1819239214 (level 1) [ 465.070942][ T8432] EXT4-fs (loop4): 1 truncate cleaned up [ 465.072430][ T8432] EXT4-fs (loop4): mounted filesystem without journal. Opts: dax=never,dioread_nolock,barrier,delalloc,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 465.133161][ T4129] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.409078][ T8384] device hsr_slave_0 entered promiscuous mode [ 465.486501][ T8384] device hsr_slave_1 entered promiscuous mode [ 465.526092][ T8384] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 465.529435][ T8384] Cannot create hsr debugfs directory [ 466.329407][ T4129] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.523473][ T5929] Bluetooth: hci1: command 0x040f tx timeout [ 468.595534][ T8384] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 468.622817][ T4078] Bluetooth: hci1: command 0x0419 tx timeout [ 468.729142][ T8384] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 468.760411][ T8384] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 468.807406][ T8384] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 469.119672][ T8384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.167843][ T4177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 469.170704][ T4177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 469.177199][ T8384] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.189829][ T4177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 469.192696][ T4177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 469.195416][ T4177] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.197396][ T4177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.266637][ T4177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 469.269412][ T4177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 469.272022][ T4177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 469.278018][ T4177] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.279912][ T4177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.282439][ T4177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 469.306697][ T4177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 469.309781][ T4177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 469.329553][ T4177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 469.376115][ T4177] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 469.378793][ T4177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 469.381666][ T4177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 469.384534][ T4177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 469.397075][ T4177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 469.417993][ T4177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 469.420741][ T4177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 469.429767][ T8384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 469.454853][ T8458] loop3: detected capacity change from 0 to 40427 [ 469.571158][ T8458] F2FS-fs (loop3): invalid crc value [ 469.590489][ T8458] F2FS-fs (loop3): Found nat_bits in checkpoint [ 469.649807][ T8458] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 469.880795][ T5503] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 469.882993][ T5503] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 469.901785][ T8488] attempt to access beyond end of device [ 469.901785][ T8488] loop3: rw=2049, want=45104, limit=40427 [ 470.084068][ T4042] attempt to access beyond end of device [ 470.084068][ T4042] loop3: rw=2049, want=45112, limit=40427 [ 470.687307][ T4081] Bluetooth: hci1: command 0x0405 tx timeout [ 470.803370][ T8384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.918635][ T4129] device hsr_slave_0 left promiscuous mode [ 471.092855][ T4129] device hsr_slave_1 left promiscuous mode [ 471.257776][ T8503] futex_wake_op: syz.5.1005 tries to shift op by -33; fix this program [ 472.179402][ T4129] device bridge_slave_1 left promiscuous mode [ 472.181251][ T4129] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.749061][ T4129] device bridge_slave_0 left promiscuous mode [ 472.751000][ T4129] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.969927][ T8520] futex_wake_op: syz.6.1009 tries to shift op by -33; fix this program [ 474.537650][ T4129] device veth1_macvtap left promiscuous mode [ 474.539543][ T4129] device veth0_macvtap left promiscuous mode [ 474.541464][ T4129] device veth1_vlan left promiscuous mode [ 474.543250][ T4129] device veth0_vlan left promiscuous mode [ 476.568377][ T4129] team0 (unregistering): Port device team_slave_1 removed [ 476.638917][ T4129] team0 (unregistering): Port device team_slave_0 removed [ 476.662041][ T4129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.706791][ T8531] loop3: detected capacity change from 0 to 40427 [ 476.776454][ T4129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.810481][ T8531] F2FS-fs (loop3): invalid crc value [ 476.814782][ T8531] F2FS-fs (loop3): Found nat_bits in checkpoint [ 476.843472][ T8531] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 476.991876][ T4129] bond0 (unregistering): Released all slaves [ 477.068318][ T8540] attempt to access beyond end of device [ 477.068318][ T8540] loop3: rw=2049, want=45104, limit=40427 [ 477.295535][ T4042] attempt to access beyond end of device [ 477.295535][ T4042] loop3: rw=2049, want=45112, limit=40427 [ 477.469237][ T5503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 477.472226][ T5503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 477.499755][ T5503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 477.502652][ T5503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 477.505821][ T5503] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 477.510344][ T5503] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 477.517587][ T8384] device veth0_vlan entered promiscuous mode [ 477.526959][ T8384] device veth1_vlan entered promiscuous mode [ 477.547344][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 477.550112][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 477.560381][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 477.566751][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 478.894178][ T8384] device veth0_macvtap entered promiscuous mode [ 478.932399][ T8384] device veth1_macvtap entered promiscuous mode [ 480.856183][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 480.862574][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 480.900750][ T8573] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1019'. [ 480.914586][ T8384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.942132][ T8384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.958806][ T8384] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.961056][ T8384] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.963232][ T8384] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.982786][ T8384] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.483311][ T8583] futex_wake_op: syz.3.1017 tries to shift op by -33; fix this program [ 482.726712][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 482.729725][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 482.733193][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 482.842070][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 483.379580][ T8602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1025'. [ 484.076511][ T4177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.078840][ T4177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.083244][ T4177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.085455][ T4177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.109374][ T6504] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 484.140978][ T6504] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 484.233043][ T6898] libceph: connect (1)[c::]:6789 error -101 [ 484.235162][ T6898] libceph: mon0 (1)[c::]:6789 connect error [ 484.342074][ T8609] 9pnet: Could not find request transport: fÝÌ̳·Õd™s÷VÜÆ{‚i·}/“ [ 485.109068][ T6898] libceph: connect (1)[c::]:6789 error -101 [ 485.110744][ T6898] libceph: mon0 (1)[c::]:6789 connect error [ 485.447845][ T8624] udc-core: couldn't find an available UDC or it's busy [ 485.449820][ T8624] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 485.493898][ T8593] ceph: No mds server is up or the cluster is laggy [ 486.080182][ T4143] libceph: connect (1)[c::]:6789 error -101 [ 486.081956][ T4143] libceph: mon0 (1)[c::]:6789 connect error [ 489.440401][ T8650] loop7: detected capacity change from 0 to 2048 [ 490.158387][ T5301] Bluetooth: hci1: command 0x0411 tx timeout [ 492.441506][ T8668] loop7: detected capacity change from 0 to 512 [ 492.500297][ T8668] EXT4-fs (loop7): Ignoring removed nobh option [ 493.506744][ T8668] fscrypt (loop7, inode 2): Error -61 getting encryption context [ 493.510035][ T8668] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -61 [ 493.513060][ T8668] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #13: comm syz.7.1037: casefold flag without casefold feature [ 493.586127][ T8668] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.1037: couldn't read orphan inode 13 (err -117) [ 493.616687][ T8668] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 499.730913][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 499.732709][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.530733][ T8753] loop3: detected capacity change from 0 to 512 [ 501.612808][ T8753] EXT4-fs (loop3): Ignoring removed nobh option [ 501.681762][ T8753] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 501.683843][ T8753] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 501.687432][ T8753] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #13: comm syz.3.1053: casefold flag without casefold feature [ 501.705476][ T8753] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1053: couldn't read orphan inode 13 (err -117) [ 501.742453][ T8753] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 501.887454][ T8747] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1051'. [ 503.167660][ T8772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1055'. [ 507.160543][ T8800] futex_wake_op: syz.7.1061 tries to shift op by -33; fix this program [ 510.587412][ T8812] netlink: 'syz.7.1065': attribute type 10 has an invalid length. [ 510.589470][ T8812] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1065'. [ 510.591941][ T8812] device batadv0 entered promiscuous mode [ 510.593980][ T8812] bridge0: port 3(batadv0) entered blocking state [ 510.595701][ T8812] bridge0: port 3(batadv0) entered disabled state [ 510.598529][ T8812] bridge0: port 3(batadv0) entered blocking state [ 510.600168][ T8812] bridge0: port 3(batadv0) entered forwarding state [ 510.604450][ T8812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 510.606515][ T8812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 511.858702][ T4129] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 511.859219][ T8812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 511.861330][ T4129] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 511.863368][ T8812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 511.979651][ T8812] bridge0: port 3(batadv0) entered disabled state [ 512.011555][ T8812] bridge0: port 3(batadv0) entered disabled state [ 512.147218][ T8829] loop4: detected capacity change from 0 to 512 [ 512.958536][ T8829] EXT4-fs (loop4): Ignoring removed nobh option [ 513.056466][ T8829] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 513.058598][ T8829] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 513.060780][ T8829] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #13: comm syz.4.1067: casefold flag without casefold feature [ 513.064574][ T8829] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1067: couldn't read orphan inode 13 (err -117) [ 513.078702][ T8829] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 514.971996][ T8858] loop4: detected capacity change from 0 to 512 [ 515.000067][ T8858] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 515.000067][ T8858] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 515.000067][ T8858] [ 515.005382][ T8858] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 515.021509][ T8858] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 515.040247][ T8858] EXT4-fs (loop4): 1 truncate cleaned up [ 515.041815][ T8858] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_dev=0x0000000000000009,grpid,dioread_nolock,debug_want_extra_isize=0x0000000000000080,nouser_xattr,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 515.086716][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 517.030784][ T8887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1076'. [ 517.739771][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 517.809701][ T4832] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.367846][ T8898] netlink: 'syz.4.1080': attribute type 10 has an invalid length. [ 519.370059][ T8898] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1080'. [ 520.222086][ T6898] Bluetooth: hci0: command 0x040f tx timeout [ 520.244343][ T8903] loop5: detected capacity change from 0 to 512 [ 520.252537][ T4832] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.312021][ T8903] EXT4-fs (loop5): Ignoring removed nobh option [ 520.415603][ T8903] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 520.418267][ T8903] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61 [ 520.420519][ T8903] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #13: comm syz.5.1083: casefold flag without casefold feature [ 520.460826][ T8903] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.1083: couldn't read orphan inode 13 (err -117) [ 520.464540][ T8903] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 520.697573][ T4832] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.294785][ T4832] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.391078][ T8831] chnl_net:caif_netlink_parms(): no params data found [ 521.731024][ T8831] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.733025][ T8831] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.737497][ T8831] device bridge_slave_0 entered promiscuous mode [ 521.741625][ T8831] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.746440][ T8831] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.750864][ T8831] device bridge_slave_1 entered promiscuous mode [ 521.929908][ T8831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.970733][ T8831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.049201][ T8831] team0: Port device team_slave_0 added [ 522.062418][ T8831] team0: Port device team_slave_1 added [ 522.097681][ T8919] loop4: detected capacity change from 0 to 40427 [ 522.143530][ T8831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.145512][ T8831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.159527][ T8919] F2FS-fs (loop4): invalid crc value [ 522.162725][ T8831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.175520][ T8831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.180783][ T8831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.195487][ T8919] F2FS-fs (loop4): Found nat_bits in checkpoint [ 522.202820][ T8831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.260511][ T8919] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 522.286527][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 522.318726][ T8831] device hsr_slave_0 entered promiscuous mode [ 522.425303][ T8831] device hsr_slave_1 entered promiscuous mode [ 522.469657][ T8951] loop5: detected capacity change from 0 to 512 [ 522.476414][ T8831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 522.478699][ T8831] Cannot create hsr debugfs directory [ 522.670427][ T8956] attempt to access beyond end of device [ 522.670427][ T8956] loop4: rw=2049, want=45104, limit=40427 [ 523.285230][ T8951] EXT4-fs (loop5): Mount option "nouser_xattr" will be removed by 3.5 [ 523.285230][ T8951] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 523.285230][ T8951] [ 523.295284][ T8951] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 523.306002][ T8951] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 523.325020][ T8951] EXT4-fs (loop5): 1 truncate cleaned up [ 523.331455][ T4038] attempt to access beyond end of device [ 523.331455][ T4038] loop4: rw=2049, want=45112, limit=40427 [ 523.376654][ T8951] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_dev=0x0000000000000009,grpid,dioread_nolock,debug_want_extra_isize=0x0000000000000080,nouser_xattr,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 524.257129][ T8831] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 526.525725][ T8976] futex_wake_op: syz.4.1088 tries to shift op by -33; fix this program [ 526.600896][ T8831] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 526.752960][ T8985] loop4: detected capacity change from 0 to 1024 [ 527.586112][ T8987] netlink: 'syz.3.1094': attribute type 10 has an invalid length. [ 527.588427][ T8987] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1094'. [ 528.116103][ T8831] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 529.510487][ T8985] EXT4-fs (loop4): Test dummy encryption mode enabled [ 529.513003][ T8831] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 529.668653][ T8985] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,barrier=0x00000000000003ff,stripe=0x0000000000000007,discard,data=ordered,debug_want_extra_isize=0x0000000000000084,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 531.080151][ T8831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.475669][ T8831] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.489505][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 531.492366][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 531.539466][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 531.542661][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 531.550971][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.553083][ T4280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.347258][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 532.350020][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 532.353236][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 532.355783][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.357840][ T4280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.361861][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 532.587876][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 533.116743][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 533.131681][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 533.150900][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 534.234048][ T4129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 534.240152][ T4129] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 534.273557][ T4129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 534.280480][ T4129] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 534.298829][ T4129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 534.312367][ T4129] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 534.384788][ T5929] libceph: connect (1)[c::]:6789 error -101 [ 534.386762][ T5929] libceph: mon0 (1)[c::]:6789 connect error [ 534.399784][ T8831] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 534.508667][ T9056] ceph: No mds server is up or the cluster is laggy [ 534.591175][ T5929] libceph: connect (1)[c::]:6789 error -101 [ 534.593003][ T5929] libceph: mon0 (1)[c::]:6789 connect error [ 534.742458][ T9068] 9pnet: Could not find request transport: fÝÌ̳·Õd™s÷VÜÆ{‚i·}/“ [ 535.401352][ T5929] libceph: connect (1)[c::]:6789 error -101 [ 535.403125][ T5929] libceph: mon0 (1)[c::]:6789 connect error [ 537.629107][ T4832] device hsr_slave_0 left promiscuous mode [ 537.801023][ T9090] 9pnet: Could not find request transport: fÝÌ̳·Õd™s÷VÜÆ{‚i·}/“ [ 538.929479][ T4832] device hsr_slave_1 left promiscuous mode [ 539.085061][ T9100] 9pnet: Could not find request transport: fÝÌ̳·Õd™s÷VÜÆ{‚i·}/“ [ 539.866359][ T4832] device bridge_slave_1 left promiscuous mode [ 539.868095][ T4832] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.262311][ T4832] device bridge_slave_0 left promiscuous mode [ 541.264109][ T4832] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.388538][ T4832] device veth1_macvtap left promiscuous mode [ 542.390337][ T4832] device veth0_macvtap left promiscuous mode [ 542.392374][ T4832] device veth1_vlan left promiscuous mode [ 542.394090][ T4832] device veth0_vlan left promiscuous mode [ 542.432415][ T9127] loop7: detected capacity change from 0 to 512 [ 543.352692][ T9127] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 543.500584][ T9127] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 543.522285][ T9127] EXT4-fs error (device loop7): ext4_clear_blocks:883: inode #13: comm syz.7.1117: attempt to clear invalid blocks 2 len 1 [ 543.534854][ T9127] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 543.556789][ T9127] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.1117: invalid indirect mapped block 1819239214 (level 0) [ 543.561234][ T9127] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.1117: invalid indirect mapped block 1819239214 (level 1) [ 543.584498][ T9127] EXT4-fs (loop7): 1 truncate cleaned up [ 543.594677][ T9127] EXT4-fs (loop7): mounted filesystem without journal. Opts: dax=never,dioread_nolock,barrier,delalloc,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 543.681936][ T4832] team0 (unregistering): Port device team_slave_1 removed [ 543.707003][ T4832] team0 (unregistering): Port device team_slave_0 removed [ 543.740262][ T4832] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 543.786427][ T4832] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 543.984983][ T4832] bond0 (unregistering): Released all slaves [ 544.046021][ T5927] Bluetooth: hci4: command 0x0409 tx timeout [ 544.107784][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 544.110028][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 544.121953][ T8831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.436514][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 545.439382][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 545.468691][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 545.471470][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 545.474555][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 545.483583][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 546.807970][ T8831] device veth0_vlan entered promiscuous mode [ 546.860039][ T8831] device veth1_vlan entered promiscuous mode [ 547.124735][ T8831] device veth0_macvtap entered promiscuous mode [ 547.126494][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 547.127189][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 547.127773][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 547.143777][ T8831] device veth1_macvtap entered promiscuous mode [ 547.213964][ T8831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.229454][ T8831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.244939][ T8831] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.245013][ T8831] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.245039][ T8831] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.245065][ T8831] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.260504][ T5503] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 547.283874][ T5503] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 547.293589][ T5503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 547.298825][ T5503] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 548.158098][ T5503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 548.167838][ T9183] 9pnet: Could not find request transport: fÝÌ̳·Õd™s÷VÜÆ{‚i·}/“ [ 549.207897][ T4520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.210373][ T4520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.256262][ T5503] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 549.270939][ T1812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.273132][ T1812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.288921][ T5503] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 551.214800][ T5301] Bluetooth: hci3: command 0x0409 tx timeout [ 551.759997][ T9217] futex_wake_op: syz.8.1063 tries to shift op by -33; fix this program [ 552.860178][ T9226] 9pnet: Could not find request transport: fÝÌ̳·Õd™s÷VÜÆ{‚i·}/“ [ 554.106904][ T9235] futex_wake_op: syz.5.1137 tries to shift op by -33; fix this program [ 557.226857][ T5929] Bluetooth: hci0: command 0x0409 tx timeout [ 557.394080][ T9262] loop8: detected capacity change from 0 to 512 [ 557.434008][ T9262] EXT4-fs (loop8): Unrecognized mount option "euid=00000000000000000000" or missing value [ 558.087687][ T9266] loop4: detected capacity change from 0 to 512 [ 558.197095][ T9266] EXT4-fs (loop4): Unrecognized mount option "euid=00000000000000000000" or missing value [ 558.380863][ T9276] loop5: detected capacity change from 0 to 512 [ 559.366290][ T9276] EXT4-fs (loop5): Ignoring removed orlov option [ 559.379382][ T9276] EXT4-fs warning (device loop5): read_mmp_block:115: Error -117 while reading MMP block 8 [ 559.462240][ T5929] Bluetooth: hci0: command 0x0405 tx timeout [ 560.258607][ T9291] loop7: detected capacity change from 0 to 512 [ 560.282499][ T9291] EXT4-fs (loop7): Unrecognized mount option "euid=00000000000000000000" or missing value [ 561.166296][ T9306] 9pnet: Could not find request transport: fÝÌ̳·Õd™s÷VÜÆ{‚i·}/“ [ 562.140635][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.142394][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.603060][ T9340] loop3: detected capacity change from 0 to 512 [ 564.660689][ T9340] EXT4-fs (loop3): Unrecognized mount option "euid=00000000000000000000" or missing value [ 567.771263][ T9367] loop5: detected capacity change from 0 to 512 [ 567.906563][ T9367] EXT4-fs (loop5): Ignoring removed orlov option [ 567.909518][ T9367] EXT4-fs warning (device loop5): read_mmp_block:115: Error -117 while reading MMP block 8 [ 569.079508][ T9383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1165'. [ 569.505085][ T9381] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 570.296237][ T9394] ================================================================== [ 570.298823][ T9394] BUG: KASAN: use-after-free in rose_get_neigh+0x1a4/0x5ac [ 570.300828][ T9394] Read of size 1 at addr ffff0000ccccbc30 by task syz.5.1164/9394 [ 570.302936][ T9394] [ 570.303563][ T9394] CPU: 1 PID: 9394 Comm: syz.5.1164 Not tainted 5.15.179-syzkaller #0 [ 570.305703][ T9394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 570.308391][ T9394] Call trace: [ 570.309251][ T9394] dump_backtrace+0x0/0x530 [ 570.310479][ T9394] show_stack+0x2c/0x3c [ 570.311641][ T9394] dump_stack_lvl+0x108/0x170 [ 570.313007][ T9394] print_address_description+0x7c/0x3f0 [ 570.314600][ T9394] kasan_report+0x174/0x1e4 [ 570.315791][ T9394] __asan_report_load1_noabort+0x44/0x50 [ 570.317287][ T9394] rose_get_neigh+0x1a4/0x5ac [ 570.318558][ T9394] rose_connect+0x3b4/0xe38 [ 570.319750][ T9394] __sys_connect+0x268/0x290 [ 570.320936][ T9394] __arm64_sys_connect+0x7c/0x94 [ 570.322283][ T9394] invoke_syscall+0x98/0x2b8 [ 570.323503][ T9394] el0_svc_common+0x138/0x258 [ 570.324756][ T9394] do_el0_svc+0x58/0x14c [ 570.325885][ T9394] el0_svc+0x7c/0x1f0 [ 570.326963][ T9394] el0t_64_sync_handler+0x84/0xe4 [ 570.328361][ T9394] el0t_64_sync+0x1a0/0x1a4 [ 570.329585][ T9394] [ 570.330182][ T9394] Allocated by task 8512: [ 570.331388][ T9394] ____kasan_kmalloc+0xbc/0xfc [ 570.332637][ T9394] __kasan_kmalloc+0x10/0x1c [ 570.333879][ T9394] kmem_cache_alloc_trace+0x27c/0x47c [ 570.335448][ T9394] rose_add_node+0x200/0xbc0 [ 570.336686][ T9394] rose_rt_ioctl+0xac0/0xf14 [ 570.337934][ T9394] rose_ioctl+0x400/0xd80 [ 570.339151][ T9394] sock_do_ioctl+0x134/0x2dc [ 570.340413][ T9394] sock_ioctl+0x4f4/0x8b0 [ 570.341534][ T9394] __arm64_sys_ioctl+0x14c/0x1c8 [ 570.342836][ T9394] invoke_syscall+0x98/0x2b8 [ 570.344097][ T9394] el0_svc_common+0x138/0x258 [ 570.345384][ T9394] do_el0_svc+0x58/0x14c [ 570.346516][ T9394] el0_svc+0x7c/0x1f0 [ 570.347590][ T9394] el0t_64_sync_handler+0x84/0xe4 [ 570.348908][ T9394] el0t_64_sync+0x1a0/0x1a4 [ 570.350088][ T9394] [ 570.350705][ T9394] Freed by task 9346: [ 570.351788][ T9394] kasan_set_track+0x4c/0x84 [ 570.352986][ T9394] kasan_set_free_info+0x28/0x4c [ 570.354355][ T9394] ____kasan_slab_free+0x118/0x164 [ 570.355779][ T9394] __kasan_slab_free+0x18/0x28 [ 570.357003][ T9394] slab_free_freelist_hook+0x128/0x1ec [ 570.358468][ T9394] kfree+0x178/0x410 [ 570.359480][ T9394] rose_remove_neigh+0x24c/0x2e0 [ 570.360844][ T9394] rose_rt_device_down+0x5cc/0x628 [ 570.362259][ T9394] rose_device_event+0x5fc/0x6b0 [ 570.363585][ T9394] raw_notifier_call_chain+0xd4/0x164 [ 570.365006][ T9394] __dev_notify_flags+0x2b4/0x540 [ 570.366356][ T9394] dev_change_flags+0xc8/0x154 [ 570.367678][ T9394] dev_ifsioc+0x140/0xfe4 [ 570.368828][ T9394] dev_ioctl+0x4e0/0xd3c [ 570.369938][ T9394] sock_do_ioctl+0x1dc/0x2dc [ 570.371189][ T9394] sock_ioctl+0x4f4/0x8b0 [ 570.372362][ T9394] __arm64_sys_ioctl+0x14c/0x1c8 [ 570.373632][ T9394] invoke_syscall+0x98/0x2b8 [ 570.374842][ T9394] el0_svc_common+0x138/0x258 [ 570.376118][ T9394] do_el0_svc+0x58/0x14c [ 570.377285][ T9394] el0_svc+0x7c/0x1f0 [ 570.378432][ T9394] el0t_64_sync_handler+0x84/0xe4 [ 570.379780][ T9394] el0t_64_sync+0x1a0/0x1a4 [ 570.380994][ T9394] [ 570.381576][ T9394] The buggy address belongs to the object at ffff0000ccccbc00 [ 570.381576][ T9394] which belongs to the cache kmalloc-512 of size 512 [ 570.385279][ T9394] The buggy address is located 48 bytes inside of [ 570.385279][ T9394] 512-byte region [ffff0000ccccbc00, ffff0000ccccbe00) [ 570.388755][ T9394] The buggy address belongs to the page: [ 570.390212][ T9394] page:0000000095543c5a refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff0000ccccb400 pfn:0x10ccc8 [ 570.393367][ T9394] head:0000000095543c5a order:2 compound_mapcount:0 compound_pincount:0 [ 570.395555][ T9394] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 570.397687][ T9394] raw: 05ffc00000010200 fffffc00039c0d08 fffffc00039ecf08 ffff0000c0002600 [ 570.399957][ T9394] raw: ffff0000ccccb400 0000000000100002 00000001ffffffff 0000000000000000 [ 570.402176][ T9394] page dumped because: kasan: bad access detected [ 570.403884][ T9394] [ 570.404509][ T9394] Memory state around the buggy address: [ 570.405947][ T9394] ffff0000ccccbb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 570.408154][ T9394] ffff0000ccccbb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 570.410309][ T9394] >ffff0000ccccbc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 570.412486][ T9394] ^ [ 570.413979][ T9394] ffff0000ccccbc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 570.416174][ T9394] ffff0000ccccbd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 570.418366][ T9394] ================================================================== [ 570.420472][ T9394] Disabling lock debugging due to kernel taint