last executing test programs: 10m55.073517326s ago: executing program 32 (id=661): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) syz_emit_ethernet(0x5d, &(0x7f0000000d00)={@local, @random="e462e98700", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x4f, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x7, 0x0, 0xe7}, {"5451cebf08f7b0988f2a6c7a3b6133f8890453557a12f23e449d2571d8be7b133f0924673026b4"}}}}}}, 0x0) 10m36.420113422s ago: executing program 2 (id=721): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r0 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0), 0x0) 10m35.868091592s ago: executing program 2 (id=723): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x18) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x144, 0x10, 0x713, 0x0, 0x25dfdbbb, {{@in6=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e22, 0x200, 0x4e21, 0xa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in=@multicast2, 0xfe, 0x32}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x0, 0x0, 0x0, 0x8, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x1, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}, @extra_flags={0x8, 0x18, 0xe}]}, 0x144}, 0x1, 0x0, 0x0, 0x880}, 0x2000) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) setresuid(0x0, 0x0, 0xee01) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x26) socket$pppl2tp(0x18, 0x1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x20000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 10m34.592869818s ago: executing program 2 (id=725): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000740)={[{@debug_want_extra_isize}, {@bh}, {@debug}, {@bsdgroups}, {@jqfmt_vfsv0}, {@mblk_io_submit}, {@dioread_lock}]}, 0xff, 0x48f, &(0x7f0000000b80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() keyctl$set_reqkey_keyring(0xe, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x803}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f00000004c0)='.\x00', 0x8200, &(0x7f0000000540)=ANY=[], 0x4, 0x0, &(0x7f00000004c0)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x8084) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0xfffffffc}, 0x1c) 10m33.009614189s ago: executing program 2 (id=726): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=@newsa={0x144, 0x10, 0x200, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote}, {@in6=@remote, 0x4d3, 0x32}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'chacha20-simd\x00'}}}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0xb7}}]}, 0x144}}, 0x4000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x8c1}, 0x4001) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000c00)={[{@jqfmt_vfsold}, {@grpid}, {@debug}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xdf07}}, {@noauto_da_alloc}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x477, &(0x7f0000000780)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r7, 0x0, 0x0) getdents64(r7, 0xfffffffffffffffe, 0x29) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x10, 0x4}, {0xfff2, 0x6}, {0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20040054) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x88, &(0x7f0000001a00)=ANY=[], 0x5, 0x1f3, &(0x7f0000000540)="$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") 10m29.617157615s ago: executing program 2 (id=728): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() ptrace$ARCH_GET_FS(0x1e, r0, 0x0, 0x1003) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313d, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x1}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r4}, 0x10) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x4010744d, &(0x7f0000000180)) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000080)="441f0803000000e8c94ef56491ee54be0e1c2074ed", 0x15) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "8000", 0x38, 0x3a, 0xff, @private2, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "f20700", 0x0, 0x6c, 0x0, @private2, @private1, [@routing={0x16, 0x0, 0x2, 0xe9}]}}}}}}}, 0x0) 10m28.420249699s ago: executing program 2 (id=733): r0 = socket$inet6(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'veth1_vlan\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e2b, 0xb, @private1={0xfc, 0x1, '\x00', 0x6}, 0x6}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000018007f03c0fe15b282a380930a50000248a8430b916d0200390009003500ff6c0200000015000500fc01ffdd070b566881b38432009b3100b125ca997b5fdf13090200fb572fbc100800000400240200e2", 0x55}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000000)={'veth1_to_bond\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 10m13.168956278s ago: executing program 33 (id=733): r0 = socket$inet6(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'veth1_vlan\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e2b, 0xb, @private1={0xfc, 0x1, '\x00', 0x6}, 0x6}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000018007f03c0fe15b282a380930a50000248a8430b916d0200390009003500ff6c0200000015000500fc01ffdd070b566881b38432009b3100b125ca997b5fdf13090200fb572fbc100800000400240200e2", 0x55}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000000)={'veth1_to_bond\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 9m45.904427742s ago: executing program 4 (id=797): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x240000, &(0x7f0000000a80)={[{@minixdf}, {@grpid}, {@journal_path={'journal_path', 0x3d, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/'}}, {@data_journal}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@journal_async_commit}, {@data_writeback}, {@jqfmt_vfsv0}, {@noload}], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@obj_type={'obj_type', 0x3d, 'PQ]\'\xfa7\x87\xc3W\xe7\xf6\xcc0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000600)={'syztnl0\x00', r6, 0x29, 0x4, 0x9, 0x0, 0x1e, @private2, @loopback, 0x20, 0x8000, 0x6, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6gre0\x00', 0x0, 0x2f, 0xf, 0x4, 0x7, 0x4, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x7800, 0x7, 0x7}}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000780)={0x0, @multicast1, @initdev}, &(0x7f00000007c0)=0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={r1, 0x58, &(0x7f0000000800)}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000940)={'ip_vti0\x00', &(0x7f00000008c0)={'gre0\x00', 0x0, 0x1, 0x80, 0x0, 0x2, {{0x9, 0x4, 0x1, 0x2a, 0x24, 0x65, 0x0, 0x28, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0x9c, [@private=0xa010100, @broadcast]}, @noop]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000980)={@dev}, &(0x7f00000009c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c80)={'erspan0\x00', &(0x7f0000000a00)={'ip_vti0\x00', 0x0, 0x20, 0x700, 0x6, 0x0, {{0xb, 0x4, 0x0, 0x5, 0x2c, 0x64, 0x0, 0x80, 0x4, 0x0, @remote, @private=0xa010100, {[@ra={0x94, 0x4}, @generic={0x88, 0x2}, @lsrr={0x83, 0xf, 0xbd, [@dev={0xac, 0x14, 0x14, 0x42}, @loopback, @loopback]}, @end]}}}}}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0}, 0x81) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c16ad803f1f805000600200000000a00060000000000ff0000009061ca2b00001fffff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r5, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xfffffffd, 0x0) socket$inet(0xa, 0x1, 0x0) getsockopt$netlink(r0, 0x10e, 0x8, 0x0, &(0x7f00000001c0)) 9m44.146941916s ago: executing program 4 (id=802): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) r6 = syz_io_uring_setup(0x47a8, &(0x7f00000002c0)={0x0, 0x46b4, 0x1, 0x80004, 0x200}, &(0x7f0000000180), &(0x7f0000000500)) syz_io_uring_setup(0x7674, &(0x7f0000000e40)={0x0, 0x17a1, 0x800, 0x0, 0x26c, 0x0, r6}, 0x0, 0x0) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x7974, 0x10, 0x0, 0x4}, &(0x7f00000005c0), &(0x7f00000000c0)) io_uring_enter(r6, 0x82, 0xbc7b, 0x1, 0x0, 0xfffffffffffffe60) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000006080)={0x28, 0x14, 0x211, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0xfa, "4ac2411e47060aefadfa617ab9"}]}, 0x28}}, 0x0) mkdir(0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r7, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x4, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40fd) fsopen(0x0, 0x0) 9m42.307581842s ago: executing program 4 (id=807): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x18) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x144, 0x10, 0x713, 0x0, 0x25dfdbbb, {{@in6=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e22, 0x200, 0x4e21, 0xa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in=@multicast2, 0xfe, 0x32}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x0, 0x0, 0x0, 0x8, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x1, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}, @extra_flags={0x8, 0x18, 0xe}]}, 0x144}, 0x1, 0x0, 0x0, 0x880}, 0x2000) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) setresuid(0x0, 0x0, 0xee01) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x26) socket$pppl2tp(0x18, 0x1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x20000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 9m40.801519392s ago: executing program 4 (id=810): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x10, &(0x7f0000000200), 0x0, 0x5ae, &(0x7f00000016c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$IP_VS_SO_GET_DAEMON(r7, 0x0, 0x487, 0x0, 0x0) 9m38.730682393s ago: executing program 4 (id=816): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x3, 0x4, 0x2}) 9m36.947864938s ago: executing program 4 (id=821): socket$pppl2tp(0x18, 0x1, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x2001}) syz_open_procfs(0x0, &(0x7f0000000200)='net/anycast6\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0xe, 0x4, 0x3b8, 0xffffffff, 0x200, 0x0, 0x200, 0xffffffff, 0xffffffff, 0x350, 0x350, 0x350, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @local, 0x0, 0xff, 'macvlan1\x00', 'syzkaller0\x00', {}, {0xff}, 0xff, 0x0, 0x64}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x7, 0x7, 0x3, 0x1, 0x7, 0xa], 0x3, 0x6}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, [0xffffff00, 0x0, 0xffffffff], 0x4e22, 0x4e22, 0x4e22, 0x4e21, 0x69e, 0x8, 0x7c, 0x99, 0x6}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x17}, @multicast1, 0xffffff00, 0xffffffff, 'vlan0\x00', 'dvmrp1\x00', {}, {}, 0x89, 0x2, 0x20}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@ah={{0x30}, {[0xc1, 0x8], 0x1}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0xe, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="80b668ffb3e8", 0x100, 0xe, [0x11, 0x1c, 0x24, 0x2, 0x30, 0x29, 0x7, 0x3c, 0x3f, 0x9, 0x5, 0x2, 0x15, 0x36, 0x39, 0x31], 0x2, 0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x2, [@int, @int, @volatile={0xe}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {0x1}]}]}}, 0x0, 0x76}, 0x28) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000200)={0x3, r3, 'id0\x00'}) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x858, 0x248, 0x4a0, 0x5e0, 0x248, 0x4a0, 0x788, 0x788, 0x788, 0x788, 0x788, 0x6, &(0x7f0000000280), {[{{@uncond, 0x0, 0x208, 0x248, 0x0, {}, [@common=@unspec=@pkttype={{0x28}, {0xa, 0x5}}, @common=@rt={{0x138}, {0x9, [0x6, 0x8eef], 0xfffffffa, 0x4, 0x2, [@loopback, @mcast2, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @loopback, @remote, @local, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3a}, @private0={0xfc, 0x0, '\x00', 0x1}], 0x9}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1ff, 0x1, @ipv4=@loopback, 0x4e21}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xff], [0xffffffff, 0x0, 0xffffff00, 0xffffffff], 'macvlan0\x00', 'dvmrp0\x00', {}, {0xc7b189b8c039a2ed}, 0x2f, 0xf, 0x2, 0x20}, 0x0, 0x118, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @common=@dst={{0x48}, {0x2, 0xb, 0x0, [0x9, 0x3, 0xff08, 0xbd4, 0xe, 0x198, 0xeea, 0x9, 0x400, 0x2, 0xe, 0x2, 0x100, 0x2, 0x400, 0xf74a], 0x10}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}, @ipv4=@multicast2, 0xb, 0x2b, 0x8}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xfffffefe, 0xff000000, 0xff, 0xffffff00], [0xff000000, 0xffffffff, 0xff, 0xff000000], 'syz_tun\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0x89, 0x2, 0x0, 0x1}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x3}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@eui64={{0x28}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@empty, 0x12, 0x4, 0x4000}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0x0, 0xff000000], [0xffffffff, 0xffffffff, 0xaac744bd6193d349, 0xffffff00], 'syz_tun\x00', 'dummy0\x00', {0xff}, {0xff}, 0x84, 0x7, 0x3, 0x8}, 0x0, 0x160, 0x1a8, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@empty, [0xff000000, 0xffffffff, 0x0, 0xff], @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xff000000, 0x0, 0xffffff00], @ipv6=@remote, [0xffffffff, 0xffffff00, 0xff, 0xff], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff000000, 0xffffffff, 0x0, 0xffffff00], 0xfffffff7, 0x7fffffff, 0x3c, 0x4e21, 0x4e21, 0x4e20, 0x4e21, 0x46, 0x23a0}, 0x80, 0x38}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@empty, @ipv6=@mcast1, 0x39, 0x12, 0x400}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x8b8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x1ffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss], 0x1) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) syz_emit_ethernet(0x42, &(0x7f00000005c0)=ANY=[], 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 9m21.697511957s ago: executing program 34 (id=821): socket$pppl2tp(0x18, 0x1, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x2001}) syz_open_procfs(0x0, &(0x7f0000000200)='net/anycast6\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0xe, 0x4, 0x3b8, 0xffffffff, 0x200, 0x0, 0x200, 0xffffffff, 0xffffffff, 0x350, 0x350, 0x350, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @local, 0x0, 0xff, 'macvlan1\x00', 'syzkaller0\x00', {}, {0xff}, 0xff, 0x0, 0x64}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x7, 0x7, 0x3, 0x1, 0x7, 0xa], 0x3, 0x6}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, [0xffffff00, 0x0, 0xffffffff], 0x4e22, 0x4e22, 0x4e22, 0x4e21, 0x69e, 0x8, 0x7c, 0x99, 0x6}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x17}, @multicast1, 0xffffff00, 0xffffffff, 'vlan0\x00', 'dvmrp1\x00', {}, {}, 0x89, 0x2, 0x20}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@ah={{0x30}, {[0xc1, 0x8], 0x1}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0xe, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="80b668ffb3e8", 0x100, 0xe, [0x11, 0x1c, 0x24, 0x2, 0x30, 0x29, 0x7, 0x3c, 0x3f, 0x9, 0x5, 0x2, 0x15, 0x36, 0x39, 0x31], 0x2, 0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x2, [@int, @int, @volatile={0xe}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {0x1}]}]}}, 0x0, 0x76}, 0x28) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000200)={0x3, r3, 'id0\x00'}) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x858, 0x248, 0x4a0, 0x5e0, 0x248, 0x4a0, 0x788, 0x788, 0x788, 0x788, 0x788, 0x6, &(0x7f0000000280), {[{{@uncond, 0x0, 0x208, 0x248, 0x0, {}, [@common=@unspec=@pkttype={{0x28}, {0xa, 0x5}}, @common=@rt={{0x138}, {0x9, [0x6, 0x8eef], 0xfffffffa, 0x4, 0x2, [@loopback, @mcast2, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @loopback, @remote, @local, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3a}, @private0={0xfc, 0x0, '\x00', 0x1}], 0x9}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1ff, 0x1, @ipv4=@loopback, 0x4e21}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xff], [0xffffffff, 0x0, 0xffffff00, 0xffffffff], 'macvlan0\x00', 'dvmrp0\x00', {}, {0xc7b189b8c039a2ed}, 0x2f, 0xf, 0x2, 0x20}, 0x0, 0x118, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @common=@dst={{0x48}, {0x2, 0xb, 0x0, [0x9, 0x3, 0xff08, 0xbd4, 0xe, 0x198, 0xeea, 0x9, 0x400, 0x2, 0xe, 0x2, 0x100, 0x2, 0x400, 0xf74a], 0x10}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}, @ipv4=@multicast2, 0xb, 0x2b, 0x8}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xfffffefe, 0xff000000, 0xff, 0xffffff00], [0xff000000, 0xffffffff, 0xff, 0xff000000], 'syz_tun\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0x89, 0x2, 0x0, 0x1}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x3}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@eui64={{0x28}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@empty, 0x12, 0x4, 0x4000}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0x0, 0xff000000], [0xffffffff, 0xffffffff, 0xaac744bd6193d349, 0xffffff00], 'syz_tun\x00', 'dummy0\x00', {0xff}, {0xff}, 0x84, 0x7, 0x3, 0x8}, 0x0, 0x160, 0x1a8, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@empty, [0xff000000, 0xffffffff, 0x0, 0xff], @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xff000000, 0x0, 0xffffff00], @ipv6=@remote, [0xffffffff, 0xffffff00, 0xff, 0xff], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff000000, 0xffffffff, 0x0, 0xffffff00], 0xfffffff7, 0x7fffffff, 0x3c, 0x4e21, 0x4e21, 0x4e20, 0x4e21, 0x46, 0x23a0}, 0x80, 0x38}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@empty, @ipv6=@mcast1, 0x39, 0x12, 0x400}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x8b8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x1ffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss], 0x1) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) syz_emit_ethernet(0x42, &(0x7f00000005c0)=ANY=[], 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 7m47.773236128s ago: executing program 1 (id=1022): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x102b, &(0x7f0000001c00)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008"], 0x0) 7m47.600163462s ago: executing program 1 (id=1024): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) 7m47.416793915s ago: executing program 1 (id=1025): r0 = syz_open_procfs(0x0, &(0x7f0000000680)='attr\x00') getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r1, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="15b26f226e2966667482d50903b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5d07d691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6bea1764fbde5500fa30c5f2459cff4d7f123ab94cfd5762d586ec7a28abc2f8c9e608f8f964b96ecb0883d60d444f317834a3d734cb304051a60d1a084a84da8f9a23a1b9d4951c0a81985c63ae193f40e9deb358b2f08553324fd6086be9e70e5061568abefebcda50e70f4dab2e4dc0cf6d85aced044d7005326922886194895267165f7f592036ebe11dcf1cad98f5cda766eaea90fb4cb5e793525126c7594f8599055192d63a81d3cd26aadd50983f1c3f1d4655c1b5f59e80f733e3abc4792b760729fd26298ef15141cf76cc4", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) 7m47.243799329s ago: executing program 1 (id=1026): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, 0x0, 0x441, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x800040, &(0x7f0000000180)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@nombcache}]}, 0x1, 0x597, &(0x7f0000000b80)="$eJzs3U1sG2UaAOB3xvH2L9t0pV1pd9VDtYtUpKpO0h8onNorolKlHpC4lMhxoyhOHMUONFEO6b1C9IAA9VJucOAI4sABcUHiwpULiDNSRSOQmh7AyH9pm9jBKXWdxs8jjT3ffON5v2/G73hmNCMHMLCO1V7SiP9ExKUkYuShuqFoVh5rzLe+tpK/v7aST6JavfxzEklE3FtbybfmT5rvhyJiNSL+HRFfZSNOpFvjlpeWZyaKxcJCszxamZ0fLS8tn5yenZgqTBXmTr/40tlzZ86Onxrv3Pjszvp644ebb9/49pXbNz/+5Ohq/t2JJM7HcLPu4X48SY11ko3zm6af6UWwPkr63QAeS6aZ57VU+leMRKaZ9e1UR55q04Aeq+6LqO5Esrqj2YHdLNlZ/gN7Rus4oHb+2xoeOUDI9Pb4486FxglILe56c2jUDDWuTcT++rnJwV+SR85MauebR3rbNAbA6vWIGBsa2vr9T5rfv8c39iQaSE99eaGxobZu/3Rj/xNt9j/DrWunf1Fr/7e+Zf/3IH6mw/7vUpcxfnv9xw86xr8e8d+28ZON+Emb+GlEvNFl/FuvfX6uU131w4jj0T5+S7L99eHRq9PFwljjtW2ML44ffXm7/h/sEL9xzXZ//Wem3fqf77L/n3396f9Wt4n//P+33/7t1v+BiHiny/j/uPfRq53q7lxP7taOAna6/WvTbncZ/4Xzx77vUHWgy0UAAAAAAAAAAABtpPV72ZI0tzGeprlc4xnef8bBtFgqV05cLS3OTTbueTsS2bR1p9VIo5zUyuPN+3Fb5VObyqdb9xFnDtTLuXypONnnvgMAAAAAAAAAAAAAAAAAAMBucWjT8/+/ZurP/2/+u2pgr+r8l9/AXif/YXA9mv9JxL6+NQV4yvz+w8Cqyn8YXPIfBpf8h8El/2FwyX8YXPIfBpf8BwAAAAAAAAAAAAAAAAAAAAAAAACAnrh08WJtqN5fW8nXypNDS4szpTdPThbKM7nZxXwuX1qYz02VSlPFQi5fmv2z5RVLpfmxmFu8NloplCuj5aXlK7OlxbnKlenZianClUL2qfQKAAAAAAAAAAAAAAAAAAAAni3D9SFJcxGR1sfTNJeL+HtEHIlscnW6WBiLiMMR8V0mu69WHu93owEAAAAAAAAAAAAAAAAAAGCPKS8tz0wUi4WFARkZ2jLlm84zR8Tqk21GbYk7/lS2ua12yzp81kYObz9PJvrewt040ucdEwAAAAAAAAAAAAAAAAAADKAHD/12+4nfe9sgAAAAAAAAAAAAAAAAAAAAGEjpT0lE1IbjI88Nb679W7Keqb9HxFu3Lr93baJSWRivTb+7Mb3yfnP6qX60H+hWK09beQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8UF5anpkoFgsLPRzpdx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHscfAQAA//+aXtbd") chdir(&(0x7f0000000200)='./file0\x00') symlink(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000280)=0x1200, 0x4) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = open(&(0x7f0000000040)='.\x00', 0x511082, 0x8) ioctl$EXT4_IOC_GROUP_ADD(r6, 0xc0185879, &(0x7f00000004c0)={0x0, 0xffffffffffffffff, 0x400000, 0x2, 0x0, 0x0, 0x2401}) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={0x0, 0xac}}, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303030342c756e695f786c6174653d312c636f6465706167653d3933362c757466383d302c696f636861727365743d757466382c636865636b3d72656c617865642c6e6f6e756d7461696c3d302c757466383d302c757466383d302c696f636861727365743d63703835302c726f6469722c00f7589df4827903b797bd0d41cd1096622f6861b99e643ac4a56749057e9086753fe532edff5327468e2d93feca7e33d47dd56aa048d0856d41769b48b721da9b"], 0x2a, 0x354, &(0x7f00000002c0)="$eJzs3TtsW9UbAPDPuYmdRv/+kwGpgsmwVUJVE8QAU6KqSBUZoMjitRBoyiPXVIqFpTDUyQJiBLEgwcTWAcbOiAEBGwMrRUIFxEK3SK24yL439vUDGkBuePx+g/XpnO/zOffkKL6x4uPnVmPrwlxcvHHjeszPV2J29cxq7FdiKWYiidxuAAD/JvtZFj9nudtnv7NwEFWnPC8AYHp6r/8vHh801AZhJeLkF88/fCTzAgCm5zB//ycRj03suDTNmQEA07IfI6//9w11j7zNP9v/nwAA4J/riaefeXRtPeJ8vT4f0Xyz3Wg3ovSW/9rFeDnS2IzTsRi3IvIbhfxuofv4yLn1s6frXd8vRaNb0W5ENDvtRn6nsJb06muxHIuxVNRn/fqkW7/cq69HxG6nN340K+3GXCwU43+zEJuxEotx11h9xLn1syv14gkazYP6TsRezB9cRHf+p2IxvnohLkUaF6JbO5j/5eV6/Uy2PlTfvlLr5QEAAAAAAAAAAAAAAAAAAAAAwDScqvct9c+/yZqd9hvnRxOWhs7HaeTdxflAe/n5QFnt4HSet5LR84GGz+dpN2Zj5kivHAAAAAAAAAAAAAAAAAAAAP4+WjvV2EjTze3Wzutb5aBTann1848+PRajOa8kg5aYzZ9uKKdoi1JVEv3yrF+eJUM5RZBEDJKvXO3PuJxT61/FWHk3qI11VYo5baTp8Xu/e39S1S+DliTGlmU4qBTjl7qa/8+bfqfqt4OV2+Rcy7JsYld3Iu+NV0UlYnbsB/dXgmoRfHb9pbsfaJ14sNf1SXHow8n7F5+89u6HP25tpFEsTZpWt1u3sj89aFLaP5VinXcn7ITJwd6gZW+7tbORfP3TU/e8/eVIcjJ5/2TllteGukrbOE0/Hh29mgfdFTjMlc5N2PyTg2dv9nfvH1/MEx+sbly9/O0Ph60q/ZJwUAcAAAAAAAAAAAAAAAAAANwRpc+KH0r+se6HHo+I6nRnBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB3zuD7/0vB3ljLYYKbnRjvqm1ut+J/Y8PO9B6PHcEFAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwn/RrAAAA//+7Pncd") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) 7m46.645526401s ago: executing program 1 (id=1028): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) connect$netlink(r0, &(0x7f0000000180)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2}, 0xc) syz_emit_ethernet(0x4a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000020000f0000f901000000000002"], 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000) 7m41.835545405s ago: executing program 1 (id=1035): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r2) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x10800, &(0x7f0000000540)=ANY=[@ANYBLOB="00000000f80000009b5c88fffc01d89491ef185f74b2f4406fdf368fae6a39f4a41095784dac7e0b06d30ead31dd78625933a7bfc100a7260c2364263e"], 0x2, 0x1b0, &(0x7f0000000580)="$eJzsmD9O40AUxr+xvcnuaotUq9VWK20kAhKO7QCioUhBj8Q/0REREwWcBCUuSCQkqLgCDQUn4AIUFByBAwQqmtAhUTFo7HEyQYQgEZJIvF/x/M34xX7zRvlGMgiC+LLc3jw0m/75vQbgF5KIy/k7vZOjKfm/r8r5+PHin4vrg6nT1ZMs+BPnyn0GoGuiDwaAy6wOX4457/51Ul5XoAnNooom5fw6GEypN6FhTWoXDBtS7yi6IvJNc7voueZWxcsLYYlgi+CIkHlZX+uIIa/Ux5T7NSMS9cZuzvPc6uBFv/61shoWlPrU/Yp6Y4X9C7ChwZY6A4ZlqecRF71hjzzAtZX1/zU6z9fV9X/esgcovstqx6WeIQixSUN6FxJhd0e35MOebxf/hZHvxbtFZCbjUs9HRMef+BnDhOJPhuIfab+0l67VG9PFUq7gFtyy42TmrBnLmnXSgTeH8Q3/+xH400/l+d965MZYDPs536/aYWyPnTC+5rixwP80pP6HYybnVILzIMH+iUtKbx9SBEEQBEEQBEEQBEEQBEEQAyP6LsnA++MsBbnPAQAA//94bmyA") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x58) 7m26.266799411s ago: executing program 35 (id=1035): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r2) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x10800, &(0x7f0000000540)=ANY=[@ANYBLOB="00000000f80000009b5c88fffc01d89491ef185f74b2f4406fdf368fae6a39f4a41095784dac7e0b06d30ead31dd78625933a7bfc100a7260c2364263e"], 0x2, 0x1b0, &(0x7f0000000580)="$eJzsmD9O40AUxr+xvcnuaotUq9VWK20kAhKO7QCioUhBj8Q/0REREwWcBCUuSCQkqLgCDQUn4AIUFByBAwQqmtAhUTFo7HEyQYQgEZJIvF/x/M34xX7zRvlGMgiC+LLc3jw0m/75vQbgF5KIy/k7vZOjKfm/r8r5+PHin4vrg6nT1ZMs+BPnyn0GoGuiDwaAy6wOX4457/51Ul5XoAnNooom5fw6GEypN6FhTWoXDBtS7yi6IvJNc7voueZWxcsLYYlgi+CIkHlZX+uIIa/Ux5T7NSMS9cZuzvPc6uBFv/61shoWlPrU/Yp6Y4X9C7ChwZY6A4ZlqecRF71hjzzAtZX1/zU6z9fV9X/esgcovstqx6WeIQixSUN6FxJhd0e35MOebxf/hZHvxbtFZCbjUs9HRMef+BnDhOJPhuIfab+0l67VG9PFUq7gFtyy42TmrBnLmnXSgTeH8Q3/+xH400/l+d965MZYDPs536/aYWyPnTC+5rixwP80pP6HYybnVILzIMH+iUtKbx9SBEEQBEEQBEEQBEEQBEEQAyP6LsnA++MsBbnPAQAA//94bmyA") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x58) 5m55.302041334s ago: executing program 7 (id=1214): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() ptrace$ARCH_GET_FS(0x1e, r0, 0x0, 0x1003) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313d, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x1}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000000100000085"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r4}, 0x10) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x4010744d, &(0x7f0000000180)) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000080)="441f0803000000e8c94ef56491ee54be0e1c2074ed", 0x15) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "8000", 0x38, 0x3a, 0xff, @private2, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "f20700", 0x0, 0x6c, 0x0, @private2, @private1, [@routing={0x16, 0x0, 0x2, 0xe9}]}}}}}}}, 0x0) 5m54.245870675s ago: executing program 7 (id=1216): prctl$PR_MCE_KILL(0x21, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000240), 0x440, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, 0x0, 0x0, 0x2, 0xcf, &(0x7f0000000080)=""/207, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000300)={0x0, r0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, r2, 0x0, 0x8, &(0x7f0000000340)='{^&^-@h\x00'}, 0x30) r3 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000014c0)=0xb, 0x4) 5m52.41611474s ago: executing program 7 (id=1220): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="020000000400000007000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000902, 0xffffffffffffffff, 0x0) 5m52.131929676s ago: executing program 7 (id=1221): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) open(&(0x7f00000001c0)='./file0\x00', 0x400, 0x179) gettid() timer_create(0x0, 0x0, 0x0) r2 = inotify_init() r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, r3}, 0x38) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000040)=0x15, 0x4) sendmsg$netlink(r4, 0x0, 0x0) readv(r2, &(0x7f0000000140)=[{0x0}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5, r5}, 0x38) 5m51.111311306s ago: executing program 7 (id=1222): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x183001, 0x0) r1 = epoll_create1(0x80000) ioctl$TCXONC(r0, 0x540a, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 5m50.835149412s ago: executing program 7 (id=1223): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x43c02, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) 5m35.781456027s ago: executing program 36 (id=1223): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x43c02, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) 5m19.398726218s ago: executing program 5 (id=1277): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, 0x0) 5m18.227358331s ago: executing program 5 (id=1279): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x404c094) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0xb, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffffef}, 0x27) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'gretap0\x00', &(0x7f00000003c0)={'ip_vti0\x00', r3, 0x10, 0x7, 0xc, 0x7, {{0x6, 0x4, 0x3, 0x0, 0x18, 0x64, 0x0, 0x8, 0x4, 0x0, @private=0xa010102, @empty, {[@ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x14) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000840)="7dc6c1e4019550edc59b2d768d0b", 0x0, 0x2f02, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m17.887820938s ago: executing program 5 (id=1280): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x240000, &(0x7f0000000a80)={[{@minixdf}, {@grpid}, {@journal_path={'journal_path', 0x3d, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/'}}, {@data_journal}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@journal_async_commit}, {@data_writeback}, {@jqfmt_vfsv0}, {@noload}], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@obj_type={'obj_type', 0x3d, 'PQ]\'\xfa7\x87\xc3W\xe7\xf6\xcc0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000600)={'syztnl0\x00', 0x0, 0x29, 0x4, 0x9, 0x0, 0x1e, @private2, @loopback, 0x20, 0x8000, 0x6, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6gre0\x00', 0x0, 0x2f, 0xf, 0x4, 0x7, 0x4, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x7800, 0x7, 0x7}}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000780)={0x0, @multicast1, @initdev}, &(0x7f00000007c0)=0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={r1, 0x58, &(0x7f0000000800)}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000940)={'ip_vti0\x00', &(0x7f00000008c0)={'gre0\x00', 0x0, 0x1, 0x80, 0x0, 0x2, {{0x9, 0x4, 0x1, 0x2a, 0x24, 0x65, 0x0, 0x28, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0x9c, [@private=0xa010100, @broadcast]}, @noop]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000980)={@dev}, &(0x7f00000009c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c80)={'erspan0\x00', &(0x7f0000000a00)={'ip_vti0\x00', 0x0, 0x20, 0x700, 0x6, 0x0, {{0xb, 0x4, 0x0, 0x5, 0x2c, 0x64, 0x0, 0x80, 0x4, 0x0, @remote, @private=0xa010100, {[@ra={0x94, 0x4}, @generic={0x88, 0x2}, @lsrr={0x83, 0xf, 0xbd, [@dev={0xac, 0x14, 0x14, 0x42}, @loopback, @loopback]}, @end]}}}}}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0}, 0x81) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c16ad803f1f805000600200000000a00060000000000ff0000009061ca2b00001fffff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r5, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xfffffffd, 0x0) socket$inet(0xa, 0x1, 0x0) getsockopt$netlink(r0, 0x10e, 0x8, 0x0, &(0x7f00000001c0)) 5m16.615971382s ago: executing program 5 (id=1283): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000406d0422c200000000000109022400010000000009040000010300010009210010060122070009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@main=@item_012={0x2, 0x0, 0xb, "4295"}, @global=@item_012={0x1, 0x1, 0x8, 'O'}, @main=@item_012={0x1, 0x0, 0xb, '7'}]}}, 0x0}, 0x0) 5m14.100218202s ago: executing program 5 (id=1284): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@multicast, @empty, @val={@void, {0x8100, 0x4, 0x1, 0x3}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "76b2af", 0x10, 0x2f, 0x0, @private0, @mcast2, {[], {0x0, 0x883e, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 5m13.858926177s ago: executing program 5 (id=1287): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000340)={[{@nodioread_nolock}, {@noblock_validity}, {@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0xd41}}, {@nogrpid}, {@nobh}, {@data_err_ignore}, {@noinit_itable}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}, 0x32}]}, 0x9f, 0x4f2, &(0x7f0000000a40)="$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") r4 = inotify_init1(0x800) inotify_add_watch(r4, &(0x7f0000000240)='.\x00', 0x60000526) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) 4m58.494978698s ago: executing program 37 (id=1287): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000340)={[{@nodioread_nolock}, {@noblock_validity}, {@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0xd41}}, {@nogrpid}, {@nobh}, {@data_err_ignore}, {@noinit_itable}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}, 0x32}]}, 0x9f, 0x4f2, &(0x7f0000000a40)="$eJzs3V1rHNcZAOB3Rlp/ypVMe+Ea6praRXJb70pWbYteuB+U9srQ1r2urUorIbTSCu3KtoRpZfoDCqW0hUKhV7kJ5AcEgn9CCBiS+5CEhJDYyYUvEm/YL3/Iu5KMV1qhfR4YzTlnZvSed5ed3TMzzATQs05HxJmIeFypVM5FxGCjPW1MP6pW1uvrPXxwZ6o6JVGpXPssiUjqbdVVRp75n0frm8ShiPjDbyP+nLwYt7S6Nj9ZKOSXG/VceWEpV1pdOz+3MDmbn80vjo+PXZq4PHFxYrQjeQ5ExJVff/Svv7/2mytv/eTW+9c/GflL0miPeJpHp9VTz9Rei6b+iFjeiWBd0NfIJ9NsaPFeAwCwdzR/5/8gIs7FYPTVfs0BAAAA+0nl5wPxVRJRAQAAAPattHYNbJJmG9cBDESaZrP1a3i/E0fSQrFU/vFMcWVxun6t7FBk0pm5Qn60ca3wUGSSan2sVn5av7ChPh4RxyPin4OHa/XsVLEw3e2DHwAAANAjjm4Y/385WB//AwAAAPvMULc7AAAAAOw4438AAADY/4z/AQAAYF/73dWr1anSfP719M3VlfnizfPT+dJ8dmFlKjtVXF7KzhaLs7V79i1s9f8KxeLST2Nx5XaunC+Vc6XVtesLxZXF8vW55x6BDQAAAOyi49+/914SEes/O1ybqg50u1PAruh/mZU/3Ll+ALuvr9sdALrmpb7/gX0l0+0OAF2XRMT/Nlne9uKdt3emPwAAQOcNf7f1+f9ky2MD6+kudRHYIY7/Qe9y/h96l/P/0Lsy0RcG8tDbki2Wv/r5/0rlpToEAAB03EBtStJsRO04wECkaTYbcaz2WIBMMjNXyI9GxLci4t3BzMFqfay2ZbLlmAEAAAAAAAAAAAAAAAAAAAAAAAAAqKtUkqgAAAAA+1pE+nHSeP7X8ODZgY3HBw4kjwZr84i49d9r/749WS4vj1XbP3/SXv5Po/1CN45gAAAAABs1x+nNcTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNLDB3emmtNuxv30lxEx1Cp+fxyqzQ9FJiKOfJFE/zPbJRHR14H463cj4ld/ahE/qXYrhhq9aBX/cKfin2iV/+bx04g42oH40MvuVfc/v2j1+UvjdG2+8fN38Mm2/R2I337/lz7Z//W12f8c22aMk/ffyLWNfzfiZH/r/U8zftIm/pltxr/xx7W1dssq/48Ybvn9kzwXK1deWMqVVtfOzy1MzuZn84vj42OXJi5PXJwYzc3MFfKNvy1j/ON7bz7eLP8jbeIPbZH/2W3m//X92w++XS9mWsUfOdP6/T/RJn7a+O77YaNcXT7cLK/Xy8869fo7pzbLf7pN/lu9/yPbzP/c7//2wTZXBQB2QWl1bX6yUMgv93ThlV6N6s+iPZGFwlaFSmPw1mz5617p2B4sND8Tj7qzYwIAADruxTHwdtzYuQ4BAAAAAAAAAAAAAAAAAABAD+rMPcOa98Te/O56Tev12Qv3QgYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6KZvAgAA//9F0tDB") r4 = inotify_init1(0x800) inotify_add_watch(r4, &(0x7f0000000240)='.\x00', 0x60000526) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) 4m6.964702869s ago: executing program 6 (id=1378): prctl$PR_MCE_KILL(0x21, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000240), 0x440, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000300)={0x0, r0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, r2, 0x0, 0x8, &(0x7f0000000340)='{^&^-@h\x00'}, 0x30) r3 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000014c0)=0xb, 0x4) 4m5.638549575s ago: executing program 6 (id=1381): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc72, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="a1ab00000000000000003200000008001781"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) close(0xffffffffffffffff) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) 4m2.492124766s ago: executing program 6 (id=1384): syz_open_pts(0xffffffffffffffff, 0x2800) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) uname(&(0x7f0000000080)=""/209) 4m0.147583262s ago: executing program 6 (id=1386): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xa7}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x3}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xe, 0x2}, {0x9, 0x8}}}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 3m58.926463556s ago: executing program 6 (id=1389): prctl$PR_MCE_KILL(0x21, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000240), 0x440, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000300)={0x0, r0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, r2, 0x0, 0x8, &(0x7f0000000340)='{^&^-@h\x00'}, 0x30) r3 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000014c0)=0xb, 0x4) 3m56.68734755s ago: executing program 6 (id=1395): bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000a61a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x21, 0x1, 0x9, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r5, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0xc881) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000069105d000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='cachefiles_ondemand_close\x00', r2}, 0x18) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6002000800fe2c00fe8000000000000000000000000000bbff02000000000000000000000000000132"], 0x0) 3m41.545764057s ago: executing program 38 (id=1395): bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000a61a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x21, 0x1, 0x9, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r5, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0xc881) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000069105d000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='cachefiles_ondemand_close\x00', r2}, 0x18) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6002000800fe2c00fe8000000000000000000000000000bbff02000000000000000000000000000132"], 0x0) 1m20.09215477s ago: executing program 9 (id=1662): syz_open_dev$usbmon(0x0, 0x80006e2, 0x60080) epoll_create1(0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28bd, 0x905, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x815, 0xfe, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0xa, "18"}, @global=@item_4={0x3, 0x1, 0x2}]}}, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 1m16.564185309s ago: executing program 9 (id=1671): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) fcntl$getownex(r0, 0x10, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r5 = inotify_init() r6 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r7 = inotify_add_watch(r5, &(0x7f0000000200)='./file0\x00', 0x400008bf) write$binfmt_elf32(r6, &(0x7f0000000040)=ANY=[@ANYRES64=r7], 0x69) close(r6) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 1m12.665066016s ago: executing program 9 (id=1675): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0xa2, &(0x7f0000000340)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000380), &(0x7f0000000480), 0x8, 0xd1, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x20, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x8000000192, 0x6, 0x400000000ffff, 0xff, 0x2, 0xfffffffffffffff8}, {0xfffffffffffffffc, 0x0, 0x1f, 0x8509}, {0x2, 0xfffffffc, 0x7}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 1m7.488728177s ago: executing program 9 (id=1680): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) listen(0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000000c0), 0x0, 0x236, &(0x7f0000000300)="$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") write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x2d) 1m4.691429502s ago: executing program 9 (id=1684): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = syz_io_uring_setup(0x47a8, &(0x7f00000002c0)={0x0, 0x46b4, 0x1, 0x80004, 0x200}, &(0x7f0000000180), &(0x7f0000000500)) syz_io_uring_setup(0x7674, &(0x7f0000000e40)={0x0, 0x17a1, 0x800, 0x0, 0x26c, 0x0, r5}, 0x0, 0x0) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x7974, 0x10, 0x0, 0x4}, &(0x7f00000005c0), &(0x7f00000000c0)) io_uring_enter(r5, 0x82, 0xbc7b, 0x1, 0x0, 0xfffffffffffffe60) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000006080)={0x28, 0x14, 0x211, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0xfa, "4ac2411e47060aefadfa617ab9"}]}, 0x28}}, 0x0) mkdir(0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x4, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40fd) fsopen(0x0, 0x0) 1m1.744655609s ago: executing program 9 (id=1688): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x802, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0xa2, &(0x7f0000000340)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000380), &(0x7f0000000480), 0x8, 0xd1, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x20, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x8000000192, 0x6, 0x400000000ffff, 0xff, 0x2, 0xfffffffffffffff8}, {0xfffffffffffffffc, 0x0, 0x1f, 0x8509}, {0x2, 0xfffffffc, 0x7}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 46.283767352s ago: executing program 39 (id=1688): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x802, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0xa2, &(0x7f0000000340)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000380), &(0x7f0000000480), 0x8, 0xd1, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x20, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x8000000192, 0x6, 0x400000000ffff, 0xff, 0x2, 0xfffffffffffffff8}, {0xfffffffffffffffc, 0x0, 0x1f, 0x8509}, {0x2, 0xfffffffc, 0x7}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 19.161170785s ago: executing program 0 (id=1752): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x240000, &(0x7f0000000a80)={[{@minixdf}, {@grpid}, {@journal_path={'journal_path', 0x3d, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/'}}, {@data_journal}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@journal_async_commit}, {@data_writeback}, {@jqfmt_vfsv0}, {@noload}], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@obj_type={'obj_type', 0x3d, 'PQ]\'\xfa7\x87\xc3W\xe7\xf6\xcc0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000600)={'syztnl0\x00', r6, 0x29, 0x4, 0x9, 0x0, 0x1e, @private2, @loopback, 0x20, 0x8000, 0x6, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6gre0\x00', 0x0, 0x2f, 0xf, 0x4, 0x7, 0x4, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x7800, 0x7, 0x7}}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000780)={0x0, @multicast1, @initdev}, &(0x7f00000007c0)=0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={r1, 0x58, &(0x7f0000000800)}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000940)={'ip_vti0\x00', &(0x7f00000008c0)={'gre0\x00', 0x0, 0x1, 0x80, 0x0, 0x2, {{0x8, 0x4, 0x1, 0x2a, 0x20, 0x65, 0x0, 0x28, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0x9c, [@broadcast]}, @noop]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000980)={@dev}, &(0x7f00000009c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c80)={'erspan0\x00', &(0x7f0000000a00)={'ip_vti0\x00', 0x0, 0x20, 0x700, 0x6, 0x0, {{0xb, 0x4, 0x0, 0x5, 0x2c, 0x64, 0x0, 0x80, 0x4, 0x0, @remote, @private=0xa010100, {[@ra={0x94, 0x4}, @generic={0x88, 0x2}, @lsrr={0x83, 0xf, 0xbd, [@dev={0xac, 0x14, 0x14, 0x42}, @loopback, @loopback]}, @end]}}}}}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0}, 0x81) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c16ad803f1f805000600200000000a00060000000000ff0000009061ca2b00001fffff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r5, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xfffffffd, 0x0) socket$inet(0xa, 0x1, 0x0) getsockopt$netlink(r0, 0x10e, 0x8, 0x0, &(0x7f00000001c0)) 18.034221427s ago: executing program 0 (id=1754): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0xfffffffffffffffd}}, 0x18) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) setxattr$trusted_overlay_upper(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0, 0x3) 17.808116911s ago: executing program 0 (id=1755): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000001ac0)={0x0, 'veth0_vlan\x00', {0x3}, 0x2}) 17.294160271s ago: executing program 0 (id=1756): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) mount$bind(&(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x2145c89, 0x0) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xfffffffffffffffc) mount$bind(0x0, 0x0, 0x0, 0x31a1802, 0x0) syz_clone(0x41020000, 0x0, 0x0, 0x0, 0x0, 0x0) 12.566581054s ago: executing program 8 (id=1762): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05030500d3fc030000004788800509101128", 0x100f, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 11.818711098s ago: executing program 8 (id=1763): ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000001a80)={0x6, 'rose0\x00', {0x2}, 0x869}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000001ac0)={0x0, 'veth0_vlan\x00', {0x3}, 0x2}) 11.702165471s ago: executing program 8 (id=1765): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYRESHEX=r4]) io_uring_register$IORING_UNREGISTER_FILES(r4, 0x3, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$PIO_CMAP(r1, 0x4b71, 0x0) 9.72807957s ago: executing program 8 (id=1768): socket(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@hopopts={{0x18, 0x29, 0x36, {0x2c}}}], 0x18}, 0x40c0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x10, 0x700, 0x2007, 0x11b70897, {{0x5, 0x4, 0x0, 0x3c, 0x14, 0x67, 0x0, 0x3c, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0xe}}}}}) bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000440)=@base={0x18, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) 7.543010072s ago: executing program 3 (id=1771): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x81c0, 0x8103) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) 7.407400655s ago: executing program 3 (id=1772): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x240000, &(0x7f0000000a80)={[{@minixdf}, {@grpid}, {@journal_path={'journal_path', 0x3d, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/'}}, {@data_journal}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@journal_async_commit}, {@data_writeback}, {@jqfmt_vfsv0}, {@noload}], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@obj_type={'obj_type', 0x3d, 'PQ]\'\xfa7\x87\xc3W\xe7\xf6\xcc0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000600)={'syztnl0\x00', r6, 0x29, 0x4, 0x9, 0x0, 0x1e, @private2, @loopback, 0x20, 0x8000, 0x6, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6gre0\x00', 0x0, 0x2f, 0xf, 0x4, 0x7, 0x4, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x7800, 0x7, 0x7}}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000780)={0x0, @multicast1, @initdev}, &(0x7f00000007c0)=0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={r1, 0x58, &(0x7f0000000800)}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000940)={'ip_vti0\x00', &(0x7f00000008c0)={'gre0\x00', 0x0, 0x1, 0x80, 0x0, 0x2, {{0x8, 0x4, 0x1, 0x2a, 0x20, 0x65, 0x0, 0x28, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xb, 0x9c, [@private=0xa010100, @broadcast]}, @noop]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000980)={@dev}, &(0x7f00000009c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c80)={'erspan0\x00', &(0x7f0000000a00)={'ip_vti0\x00', 0x0, 0x20, 0x700, 0x6, 0x0, {{0xb, 0x4, 0x0, 0x5, 0x2c, 0x64, 0x0, 0x80, 0x4, 0x0, @remote, @private=0xa010100, {[@ra={0x94, 0x4}, @generic={0x88, 0x2}, @lsrr={0x83, 0xf, 0xbd, [@dev={0xac, 0x14, 0x14, 0x42}, @loopback, @loopback]}, @end]}}}}}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0}, 0x81) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c16ad803f1f805000600200000000a00060000000000ff0000009061ca2b00001fffff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r5, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xfffffffd, 0x0) socket$inet(0xa, 0x1, 0x0) getsockopt$netlink(r0, 0x10e, 0x8, 0x0, &(0x7f00000001c0)) 6.175066489s ago: executing program 3 (id=1773): ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000001a80)={0x6, 'rose0\x00', {0x2}, 0x869}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000001ac0)={0x0, 'veth0_vlan\x00', {0x3}, 0x2}) 6.065601851s ago: executing program 3 (id=1774): r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121140, 0x0) dup(r0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x0, 0x8}, 0x50) sendfile(r0, r2, 0x0, 0x4000000000010046) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(0xffffffffffffffff, 0x8b2a, &(0x7f0000000040)) syz_emit_ethernet(0xae, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd601200080078233afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000000aa78ce54006598080a8030037004023493b87aafaffffffffff000000000000000645ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1803000100e9ff06ffffaf64000000a20001fe905226efe3"], 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r3, 0x0, 0x0) 4.485753992s ago: executing program 3 (id=1775): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = userfaultfd(0x801) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r4 = dup(r3) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)=@x86={0x2, 0x3, 0x3, 0x0, 0x5, 0x7, 0xff, 0xf, 0x1, 0x3, 0x6, 0x7, 0x0, 0x3, 0xda, 0x9, 0x61, 0x1, 0x0, '\x00', 0x9, 0x3}) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, 0x0, 0x0) 4.156183668s ago: executing program 0 (id=1776): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) socket$inet6(0xa, 0x3, 0x8000000003c) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143202, 0xf0) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 4.031894061s ago: executing program 8 (id=1777): r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000640)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003680)={0x84, &(0x7f00000031c0)={0x20, 0x31, 0x1, '\t'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80020001000001}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x310) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000015204f089b96478db1d8a5f756509e977fb1a030000000002000100000000000000020d1600003f030006000000000002004e21000000800000000000000000030005003200000002"], 0x70}, 0x1, 0x7}, 0x0) 3.033254711s ago: executing program 0 (id=1778): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$unix(0x1, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = inotify_init() r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r4 = inotify_add_watch(r2, &(0x7f0000000200)='./file0\x00', 0x400008bf) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYRES64=r4], 0x69) close(r3) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 151.294877ms ago: executing program 3 (id=1779): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000180)={0x2020}, 0x143b) 0s ago: executing program 8 (id=1780): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x240000, &(0x7f0000000a80)={[{@minixdf}, {@grpid}, {@journal_path={'journal_path', 0x3d, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/'}}, {@data_journal}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@journal_async_commit}, {@data_writeback}, {@jqfmt_vfsv0}, {@noload}], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@obj_type={'obj_type', 0x3d, 'PQ]\'\xfa7\x87\xc3W\xe7\xf6\xcc0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000600)={'syztnl0\x00', r6, 0x29, 0x4, 0x9, 0x0, 0x1e, @private2, @loopback, 0x20, 0x8000, 0x6, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6gre0\x00', 0x0, 0x2f, 0xf, 0x4, 0x7, 0x4, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x7800, 0x7, 0x7}}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000780)={0x0, @multicast1, @initdev}, &(0x7f00000007c0)=0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={r1, 0x58, &(0x7f0000000800)}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000940)={'ip_vti0\x00', &(0x7f00000008c0)={'gre0\x00', 0x0, 0x1, 0x80, 0x0, 0x2, {{0x8, 0x4, 0x1, 0x2a, 0x20, 0x65, 0x0, 0x28, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xb, 0x9c, [@private=0xa010100, @broadcast]}, @noop]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000980)={@dev}, &(0x7f00000009c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c80)={'erspan0\x00', &(0x7f0000000a00)={'ip_vti0\x00', 0x0, 0x20, 0x700, 0x6, 0x0, {{0xb, 0x4, 0x0, 0x5, 0x2c, 0x64, 0x0, 0x80, 0x4, 0x0, @remote, @private=0xa010100, {[@ra={0x94, 0x4}, @generic={0x88, 0x2}, @lsrr={0x83, 0xf, 0xbd, [@dev={0xac, 0x14, 0x14, 0x42}, @loopback, @loopback]}, @end]}}}}}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0}, 0x81) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c16ad803f1f805000600200000000a00060000000000ff0000009061ca2b00001fffff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r5, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xfffffffd, 0x0) socket$inet(0xa, 0x1, 0x0) getsockopt$netlink(r0, 0x10e, 0x8, 0x0, &(0x7f00000001c0)) kernel console output (not intermixed with test programs): butes in process `syz.0.971'. [ 575.610480][ T8538] ftdi_sio 7-1:0.157: device disconnected [ 575.663929][ T9600] loop5: detected capacity change from 0 to 40427 [ 575.674249][ T8538] ftdi_sio 7-1:0.0: device disconnected [ 575.745781][ T9600] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 575.800008][ T9600] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 575.875888][ T9600] F2FS-fs (loop5): Found nat_bits in checkpoint [ 575.940905][ T9607] Bluetooth: hci2: command 0x0406 tx timeout [ 576.260134][ T9600] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 576.292736][ T9600] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 577.249648][ T9651] loop6: detected capacity change from 0 to 256 [ 577.370734][ T9651] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 577.705712][ T9658] loop5: detected capacity change from 0 to 256 [ 577.742051][ T9658] exfat: Deprecated parameter 'utf8' [ 577.770701][ T9658] exfat: Deprecated parameter 'utf8' [ 577.776328][ T9658] exfat: Deprecated parameter 'namecase' [ 577.836503][ T9658] exFAT-fs (loop5): error, The cluster chain has a loop [ 577.895475][ T9658] exFAT-fs (loop5): Filesystem has been set read-only [ 577.910508][ T9658] exFAT-fs (loop5): failed to count the number of clusters in root [ 577.943291][ T9658] exFAT-fs (loop5): failed to recognize exfat type [ 579.165501][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 579.165520][ T28] audit: type=1326 audit(1758850902.953:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9667 comm="syz.6.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0a58eec9 code=0x7ffc0000 [ 579.237103][ T28] audit: type=1326 audit(1758850902.953:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9667 comm="syz.6.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0a58eec9 code=0x7ffc0000 [ 579.245655][ T9668] loop6: detected capacity change from 0 to 1024 [ 579.340529][ T28] audit: type=1326 audit(1758850902.953:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9667 comm="syz.6.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f1c0a58eec9 code=0x7ffc0000 [ 579.456655][ T9668] Quota error (device loop6): do_check_range: Getting block 64 out of range 1-5 [ 579.505131][ T28] audit: type=1326 audit(1758850902.953:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9667 comm="syz.6.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0a58eec9 code=0x7ffc0000 [ 579.514872][ T9668] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 579.546983][ T9668] EXT4-fs error (device loop6): ext4_acquire_dquot:6940: comm syz.6.979: Failed to acquire dquot type 0 [ 580.256006][ T28] audit: type=1326 audit(1758850902.973:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9667 comm="syz.6.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c0a58eec9 code=0x7ffc0000 [ 580.317307][ T9668] EXT4-fs error (device loop6): mb_free_blocks:1938: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 580.349309][ T28] audit: type=1326 audit(1758850902.973:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9667 comm="syz.6.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0a58eec9 code=0x7ffc0000 [ 580.381966][ T9668] EXT4-fs error (device loop6): ext4_do_update_inode:5230: inode #13: comm syz.6.979: corrupted inode contents [ 580.404240][ T9668] EXT4-fs error (device loop6): ext4_dirty_inode:6106: inode #13: comm syz.6.979: mark_inode_dirty error [ 580.430415][ T28] audit: type=1326 audit(1758850902.973:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9667 comm="syz.6.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0a58eec9 code=0x7ffc0000 [ 580.452787][ T9668] EXT4-fs error (device loop6): ext4_do_update_inode:5230: inode #13: comm syz.6.979: corrupted inode contents [ 580.491978][ T9668] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #13: comm syz.6.979: mark_inode_dirty error [ 580.538679][ T9668] EXT4-fs error (device loop6): ext4_do_update_inode:5230: inode #13: comm syz.6.979: corrupted inode contents [ 580.566853][ T28] audit: type=1326 audit(1758850902.973:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9667 comm="syz.6.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c0a58eec9 code=0x7ffc0000 [ 580.618570][ T9668] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 580.673941][ T9668] EXT4-fs error (device loop6): ext4_do_update_inode:5230: inode #13: comm syz.6.979: corrupted inode contents [ 580.741166][ T9668] EXT4-fs error (device loop6): ext4_truncate:4288: inode #13: comm syz.6.979: mark_inode_dirty error [ 580.804263][ T9668] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 580.844620][ T9668] EXT4-fs (loop6): 1 truncate cleaned up [ 580.868689][ T9668] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 581.373117][ T9690] overlayfs: failed to clone upperpath [ 582.070234][ T8994] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.585276][ T5760] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 582.618139][ T5760] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 582.646790][ T5760] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 582.813866][ T5760] hid-generic 0000:0004:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 584.878312][ T9723] fido_id[9723]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 589.333453][ T9764] veth0: entered promiscuous mode [ 589.390268][ T9763] veth0: left promiscuous mode [ 589.761050][ T9779] overlayfs: failed to clone upperpath [ 596.095538][ T9838] loop5: detected capacity change from 0 to 256 [ 596.280765][ T9838] FAT-fs (loop5): Directory bread(block 64) failed [ 596.291338][ T9838] FAT-fs (loop5): Directory bread(block 65) failed [ 596.310928][ T9838] FAT-fs (loop5): Directory bread(block 66) failed [ 596.317567][ T9838] FAT-fs (loop5): Directory bread(block 67) failed [ 596.340874][ T9838] FAT-fs (loop5): Directory bread(block 68) failed [ 596.348212][ T9838] FAT-fs (loop5): Directory bread(block 69) failed [ 596.379810][ T9838] FAT-fs (loop5): Directory bread(block 70) failed [ 596.399881][ T9838] FAT-fs (loop5): Directory bread(block 71) failed [ 596.410717][ T9838] FAT-fs (loop5): Directory bread(block 72) failed [ 596.417373][ T9838] FAT-fs (loop5): Directory bread(block 73) failed [ 601.787784][ T9869] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1033'. [ 601.799616][ T9869] netem: change failed [ 603.869626][ T9889] syz.6.1038[9889] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 603.869789][ T9889] syz.6.1038[9889] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 604.339186][ T9894] loop6: detected capacity change from 0 to 512 [ 605.125768][ T9894] EXT4-fs: Ignoring removed mblk_io_submit option [ 605.144095][ T9894] EXT4-fs: inline encryption not supported [ 605.201715][ T9894] EXT4-fs: Ignoring removed mblk_io_submit option [ 605.223674][ T9894] EXT4-fs (loop6): Test dummy encryption mode enabled [ 605.252118][ T9894] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 605.536557][ T9905] overlayfs: failed to clone upperpath [ 605.575138][ T9904] usb usb1: check_ctrlrecip: process 9904 (syz.5.1040) requesting ep 01 but needs 81 [ 605.603075][ T9894] EXT4-fs (loop6): 1 truncate cleaned up [ 605.803824][ T9894] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 606.690948][ T9886] fscrypt (loop6): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 606.871487][ T9928] syz.5.1045[9928] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 606.871660][ T9928] syz.5.1045[9928] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 606.933716][ T8994] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.282520][ T9936] loop6: detected capacity change from 0 to 16 [ 607.317821][ T9936] erofs: (device loop6): mounted with root inode @ nid 36. [ 608.483953][ T9945] loop5: detected capacity change from 0 to 1024 [ 608.575418][ T9945] __quota_error: 23 callbacks suppressed [ 608.575442][ T9945] Quota error (device loop5): do_check_range: Getting block 64 out of range 1-5 [ 608.690510][ T9945] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 608.700448][ T9945] EXT4-fs error (device loop5): ext4_acquire_dquot:6940: comm syz.5.1048: Failed to acquire dquot type 0 [ 608.761922][ T9945] EXT4-fs error (device loop5): mb_free_blocks:1938: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 608.832148][ T9945] EXT4-fs error (device loop5): ext4_do_update_inode:5230: inode #13: comm syz.5.1048: corrupted inode contents [ 608.861074][ T9945] EXT4-fs error (device loop5): ext4_dirty_inode:6106: inode #13: comm syz.5.1048: mark_inode_dirty error [ 608.884966][ T9945] EXT4-fs error (device loop5): ext4_do_update_inode:5230: inode #13: comm syz.5.1048: corrupted inode contents [ 608.991303][ T9956] usb usb1: check_ctrlrecip: process 9956 (syz.6.1050) requesting ep 01 but needs 81 [ 609.029680][ T9945] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #13: comm syz.5.1048: mark_inode_dirty error [ 609.221539][ T9945] EXT4-fs error (device loop5): ext4_do_update_inode:5230: inode #13: comm syz.5.1048: corrupted inode contents [ 609.529195][ T9945] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 609.773322][ T9945] EXT4-fs error (device loop5): ext4_do_update_inode:5230: inode #13: comm syz.5.1048: corrupted inode contents [ 610.006768][ T9945] EXT4-fs error (device loop5): ext4_truncate:4288: inode #13: comm syz.5.1048: mark_inode_dirty error [ 610.261451][ T9945] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 610.313953][ T9945] EXT4-fs (loop5): 1 truncate cleaned up [ 610.345723][ T9945] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 611.693380][ T8546] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.852745][ T9968] loop6: detected capacity change from 0 to 128 [ 612.951295][ T9988] loop6: detected capacity change from 0 to 1024 [ 614.437155][ T9999] loop5: detected capacity change from 0 to 1024 [ 614.484362][ T9999] EXT4-fs: Ignoring removed oldalloc option [ 614.749598][ T9999] EXT4-fs: Ignoring removed bh option [ 615.287930][ T9999] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 615.399018][ T9999] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 616.728885][ T8546] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.851393][T10023] usb usb1: check_ctrlrecip: process 10023 (syz.6.1060) requesting ep 01 but needs 81 [ 618.886382][T10042] syz.5.1064[10042] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 618.886549][T10042] syz.5.1064[10042] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 618.923322][ T9607] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 618.948013][ T9607] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 618.960578][ T9607] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 618.974919][ T9607] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 618.984438][ T9607] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 618.996396][ T9607] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 619.028203][ T28] audit: type=1326 audit(1758850942.813:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.5.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12378eec9 code=0x7ffc0000 [ 619.056390][ T28] audit: type=1326 audit(1758850942.843:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.5.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fa12378eec9 code=0x7ffc0000 [ 619.142371][ T28] audit: type=1326 audit(1758850942.843:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.5.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12378eec9 code=0x7ffc0000 [ 619.495342][ T3540] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.675778][T10049] loop5: detected capacity change from 0 to 1024 [ 619.746553][ T9486] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 619.980002][ T3540] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.809415][ T3540] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.078540][ T9607] Bluetooth: hci4: command tx timeout [ 621.191706][T10066] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1065'. [ 621.205040][ T3540] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.657893][T10040] chnl_net:caif_netlink_parms(): no params data found [ 622.766281][ T3540] tipc: Disabling bearer [ 622.783780][T10056] loop6: detected capacity change from 0 to 40427 [ 622.792501][ T3540] tipc: Left network mode [ 622.862238][T10056] F2FS-fs (loop6): invalid crc value [ 622.897790][T10056] F2FS-fs (loop6): Found nat_bits in checkpoint [ 623.149000][ T9607] Bluetooth: hci4: command tx timeout [ 625.061800][T10040] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.101244][T10040] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.108611][T10040] bridge_slave_0: entered allmulticast mode [ 625.121371][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.129746][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.188433][T10040] bridge_slave_0: entered promiscuous mode [ 625.220639][ T9607] Bluetooth: hci4: command tx timeout [ 625.238426][T10040] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.299043][T10040] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.336424][T10040] bridge_slave_1: entered allmulticast mode [ 625.354011][T10040] bridge_slave_1: entered promiscuous mode [ 625.895364][T10040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.958821][T10040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 626.003811][T10127] loop5: detected capacity change from 0 to 1024 [ 626.489046][T10133] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 626.605998][T10040] team0: Port device team_slave_0 added [ 626.950178][T10040] team0: Port device team_slave_1 added [ 627.125697][T10141] loop6: detected capacity change from 0 to 16 [ 627.139534][T10141] erofs: (device loop6): mounted with root inode @ nid 36. [ 627.301077][ T9607] Bluetooth: hci4: command tx timeout [ 628.575348][T10150] loop5: detected capacity change from 0 to 256 [ 628.883038][T10150] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 632.347037][T10040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.353561][ T5794] Bluetooth: hci3: command 0x0406 tx timeout [ 632.367517][T10040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.489272][T10040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.532167][T10151] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1080'. [ 632.541381][T10151] tipc: Started in network mode [ 632.546293][T10151] tipc: Node identity 7, cluster identity 4711 [ 632.552989][T10151] tipc: Node number set to 7 [ 632.582469][T10040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.589498][T10040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.678273][T10040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.819360][T10040] hsr_slave_0: entered promiscuous mode [ 633.917584][T10040] hsr_slave_1: entered promiscuous mode [ 634.279337][T10040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 634.563768][T10040] Cannot create hsr debugfs directory [ 634.785084][T10190] loop6: detected capacity change from 0 to 1024 [ 635.728076][ T3540] hsr_slave_0: left promiscuous mode [ 635.776918][ T3540] hsr_slave_1: left promiscuous mode [ 635.793469][ T3540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 635.811261][ T3540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 635.826314][ T3540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 635.958047][ T3540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 636.029699][ T3540] veth1_macvtap: left promiscuous mode [ 636.044112][ T3540] veth0_macvtap: left promiscuous mode [ 636.050129][ T3540] veth1_vlan: left promiscuous mode [ 636.070851][ T3540] veth0_vlan: left promiscuous mode [ 636.142122][T10207] capability: warning: `syz.5.1090' uses 32-bit capabilities (legacy support in use) [ 639.047375][ T3540] team0 (unregistering): Port device team_slave_1 removed [ 639.136442][ T3540] team0 (unregistering): Port device team_slave_0 removed [ 639.233019][ T3540] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 639.378444][ T3540] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 639.862767][T10223] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 639.885963][T10223] overlayfs: failed to resolve './bus': -2 [ 641.005346][T10230] loop5: detected capacity change from 0 to 256 [ 641.128465][ T9486] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 641.612907][T10237] loop5: detected capacity change from 0 to 1024 [ 641.667465][ T3540] bond0 (unregistering): Released all slaves [ 641.676751][ T9486] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 644.404487][T10245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1099'. [ 644.830071][ T3518] Bluetooth: hci1: Frame reassembly failed (-84) [ 644.855515][ T28] audit: type=1326 audit(1758850968.633:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz.0.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56298eec9 code=0x7ffc0000 [ 645.011360][ T28] audit: type=1326 audit(1758850968.633:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz.0.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56298eec9 code=0x7ffc0000 [ 645.184162][ T28] audit: type=1326 audit(1758850968.683:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz.0.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe56298eec9 code=0x7ffc0000 [ 645.335910][ T28] audit: type=1326 audit(1758850968.683:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz.0.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56298eec9 code=0x7ffc0000 [ 645.358692][ T28] audit: type=1326 audit(1758850968.683:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz.0.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56298eec9 code=0x7ffc0000 [ 645.405121][ T28] audit: type=1326 audit(1758850968.723:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz.0.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe56298eec9 code=0x7ffc0000 [ 645.433671][ T28] audit: type=1326 audit(1758850968.723:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz.0.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56298eec9 code=0x7ffc0000 [ 645.478101][ T28] audit: type=1326 audit(1758850968.723:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz.0.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fe56298eec9 code=0x7ffc0000 [ 645.564034][T10040] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 645.837001][ T28] audit: type=1326 audit(1758850968.723:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz.0.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56298eec9 code=0x7ffc0000 [ 646.331054][ T28] audit: type=1326 audit(1758850968.733:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz.0.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fe56298eec9 code=0x7ffc0000 [ 646.377637][T10040] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 646.487517][T10040] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 646.551243][T10040] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 646.900889][ T9607] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 648.398609][T10040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 648.531530][T10040] 8021q: adding VLAN 0 to HW filter on device team0 [ 648.584959][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.592339][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.683551][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.690835][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.227719][T10300] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1110'. [ 650.464427][T10307] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1109'. [ 651.212929][T10040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 656.274423][T10040] veth0_vlan: entered promiscuous mode [ 656.397320][T10040] veth1_vlan: entered promiscuous mode [ 656.477466][T10347] loop5: detected capacity change from 0 to 1024 [ 656.590079][T10040] veth0_macvtap: entered promiscuous mode [ 656.669806][T10040] veth1_macvtap: entered promiscuous mode [ 656.812934][T10040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.850132][T10040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.910407][T10040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.951507][T10040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.017018][T10040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.085586][T10040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.132747][T10040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.324402][T10040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.350169][T10040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.360578][ T9486] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 658.446261][T10040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.457615][T10040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.472708][T10040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 658.505906][T10040] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.628371][T10040] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.949400][T10040] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.188890][T10040] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.751359][ T3518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.056866][ T3518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.578275][ T3540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.691400][ T3540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.220376][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 662.220395][ T28] audit: type=1326 audit(1758850986.003:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10402 comm="syz.0.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56298eec9 code=0x7ffc0000 [ 662.330417][ T28] audit: type=1326 audit(1758850986.033:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10402 comm="syz.0.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe56298eec9 code=0x7ffc0000 [ 662.403436][T10411] ip6tnl0: entered promiscuous mode [ 662.430927][ T28] audit: type=1326 audit(1758850986.033:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10402 comm="syz.0.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56298eec9 code=0x7ffc0000 [ 662.448499][T10411] ip6tnl0: entered allmulticast mode [ 662.518871][ T28] audit: type=1326 audit(1758850986.043:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10402 comm="syz.0.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56298eec9 code=0x7ffc0000 [ 662.578681][ T28] audit: type=1326 audit(1758850986.043:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10402 comm="syz.0.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fe56298eec9 code=0x7ffc0000 [ 662.701302][ T28] audit: type=1326 audit(1758850986.063:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10402 comm="syz.0.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56298eec9 code=0x7ffc0000 [ 663.566487][ T28] audit: type=1326 audit(1758850986.063:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10402 comm="syz.0.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56298eec9 code=0x7ffc0000 [ 663.604535][ T28] audit: type=1326 audit(1758850986.063:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10402 comm="syz.0.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe56298eec9 code=0x7ffc0000 [ 663.668554][T10423] loop7: detected capacity change from 0 to 256 [ 663.710804][T10423] exfat: Unknown parameter 'fsmagic' [ 663.852431][ T28] audit: type=1326 audit(1758850987.633:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10402 comm="syz.0.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56298eec9 code=0x7ffc0000 [ 663.942988][ T28] audit: type=1326 audit(1758850987.633:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10402 comm="syz.0.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56298eec9 code=0x7ffc0000 [ 665.696679][T10448] loop7: detected capacity change from 0 to 1024 [ 665.790505][ T9486] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 666.996214][T10465] loop6: detected capacity change from 0 to 512 [ 667.023481][T10465] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 667.120738][T10465] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 667.151778][T10465] EXT4-fs (loop6): 1 truncate cleaned up [ 667.159059][T10465] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 667.214712][T10462] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 1969368878 > max in inode 18 [ 668.052135][ T8994] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.630704][ T8538] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 668.852428][ T8538] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 668.876966][ T8538] usb 7-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 668.912705][ T8538] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.961231][ T8538] usb 7-1: config 0 descriptor?? [ 669.396202][ T8538] zeroplus 0003:0C12:0005.0004: item fetching failed at offset 0/3 [ 669.439669][ T8538] zeroplus 0003:0C12:0005.0004: parse failed [ 669.460720][ T8538] zeroplus: probe of 0003:0C12:0005.0004 failed with error -22 [ 669.721112][ T5833] usb 7-1: USB disconnect, device number 5 [ 672.633285][T10548] loop5: detected capacity change from 0 to 16 [ 672.717164][T10548] erofs: (device loop5): mounted with root inode @ nid 36. [ 672.803562][T10548] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 672.940630][T10548] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851] [ 673.001019][T10548] erofs: (device loop5): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 676.392458][T10593] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1152'. [ 677.496417][T10595] loop5: detected capacity change from 0 to 1024 [ 678.130462][ T9486] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 682.306429][T10644] loop7: detected capacity change from 0 to 1024 [ 683.554938][T10651] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1165'. [ 684.810591][ T8538] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 685.062246][ T8538] usb 8-1: config 0 has an invalid interface number: 157 but max is 1 [ 685.101211][ T8538] usb 8-1: config 0 has no interface number 1 [ 685.107451][ T8538] usb 8-1: config 0 interface 157 has no altsetting 0 [ 685.185390][ T8538] usb 8-1: config 0 interface 0 has no altsetting 0 [ 685.227650][ T8538] usb 8-1: New USB device found, idVendor=0403, idProduct=a5ae, bcdDevice=d1.8d [ 685.285043][ T8538] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.348363][ T8538] usb 8-1: config 0 descriptor?? [ 686.015167][ T8538] usb 8-1: string descriptor 0 read error: -71 [ 686.031868][ T8538] ftdi_sio 8-1:0.157: FTDI USB Serial Device converter detected [ 686.041479][ T8538] ftdi_sio ttyUSB0: unknown device type: 0xd18d [ 686.054500][ T8538] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 686.068398][ T8538] ftdi_sio ttyUSB1: unknown device type: 0xd18d [ 686.085402][ T8538] usb 8-1: USB disconnect, device number 2 [ 687.047054][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.053707][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.064666][ T8538] ftdi_sio 8-1:0.157: device disconnected [ 687.079318][ T8538] ftdi_sio 8-1:0.0: device disconnected [ 687.583262][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 687.583283][ T28] audit: type=1326 audit(1758851011.373:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10688 comm="syz.5.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12378eec9 code=0x7ffc0000 [ 687.709965][ T28] audit: type=1326 audit(1758851011.403:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10688 comm="syz.5.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12378eec9 code=0x7ffc0000 [ 687.733732][ T28] audit: type=1326 audit(1758851011.413:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10688 comm="syz.5.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7fa12378eec9 code=0x7ffc0000 [ 687.757323][ T28] audit: type=1326 audit(1758851011.433:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10688 comm="syz.5.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12378eec9 code=0x7ffc0000 [ 688.874418][T10703] loop7: detected capacity change from 0 to 512 [ 689.014480][ T9486] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 689.932649][T10710] overlayfs: failed to clone lowerpath [ 690.452103][T10712] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1179'. [ 695.090097][T10746] loop7: detected capacity change from 0 to 1024 [ 695.330432][ T786] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 696.494718][ T786] usb 7-1: device descriptor read/all, error -71 [ 698.654932][T10767] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1191'. [ 698.670464][T10767] ip6erspan0: entered promiscuous mode [ 701.197882][T10790] loop7: detected capacity change from 0 to 1024 [ 704.448086][T10826] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1203'. [ 704.464711][T10826] ip6erspan0: entered promiscuous mode [ 705.614623][T10852] loop7: detected capacity change from 0 to 1024 [ 707.580691][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 707.650476][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 707.855214][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 711.126090][T10899] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1219'. [ 711.500619][ T5911] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 711.709961][ T5911] usb 7-1: Using ep0 maxpacket: 16 [ 711.750454][ T5911] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.770381][ T5911] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 711.803800][ T5911] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 711.838448][ T5911] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 711.868176][ T5911] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.903474][ T5911] usb 7-1: config 0 descriptor?? [ 712.364880][ T5911] microsoft 0003:045E:07DA.0005: collection stack underflow [ 712.393525][ T5911] microsoft 0003:045E:07DA.0005: item 0 2 0 12 parsing failed [ 712.430553][ T5911] microsoft 0003:045E:07DA.0005: parse failed [ 712.450456][ T5911] microsoft: probe of 0003:045E:07DA.0005 failed with error -22 [ 713.006901][ T5911] usb 7-1: USB disconnect, device number 8 [ 713.340966][T10928] tipc: Started in network mode [ 713.345936][T10928] tipc: Node identity 4a856521a50e, cluster identity 4711 [ 713.444887][T10928] tipc: Enabled bearer , priority 0 [ 713.484932][T10925] tipc: Resetting bearer [ 713.909436][T10941] Cannot find add_set index 2 as target [ 714.663519][ T5911] tipc: Node number set to 4018890017 [ 716.941509][T10961] loop6: detected capacity change from 0 to 1024 [ 716.954072][T10961] EXT4-fs: Ignoring removed orlov option [ 717.151287][T10961] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 717.387704][ T28] audit: type=1800 audit(1758851041.063:420): pid=10961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1230" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 718.231772][ T28] audit: type=1804 audit(1758851041.113:421): pid=10961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1230" name="/newroot/86/file1/file1" dev="loop6" ino=15 res=1 errno=0 [ 718.351920][ T28] audit: type=1800 audit(1758851041.123:422): pid=10961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1230" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 720.117304][ T8994] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.150713][ T5911] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 720.349391][ T5911] usb 6-1: Using ep0 maxpacket: 16 [ 720.373815][ T5911] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 720.401666][ T5911] usb 6-1: config 0 has no interface number 0 [ 720.418251][ T5911] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 720.436627][ T5911] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 721.096909][ T5911] usb 6-1: config 0 interface 41 has no altsetting 0 [ 721.267949][ T5911] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 721.307092][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.335992][ T5911] usb 6-1: Product: syz [ 721.340925][ T5911] usb 6-1: Manufacturer: syz [ 721.353891][ T5911] usb 6-1: SerialNumber: syz [ 721.549603][ T5911] usb 6-1: config 0 descriptor?? [ 721.559075][T10971] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 721.574123][T10971] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 721.797815][T10971] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 721.805772][T10971] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 722.032925][ T5911] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 722.080115][ T5911] CoreChips: probe of 6-1:0.41 failed with error -71 [ 722.097815][ T5911] usb 6-1: USB disconnect, device number 8 [ 723.516354][T10991] binder_alloc: 10989: binder_alloc_buf, no vma [ 723.817955][T10994] serio: Serial port ttyS3 [ 724.077319][T11000] loop5: detected capacity change from 0 to 256 [ 724.088119][T11000] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 724.112071][T11000] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 724.213825][T11000] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0x65b64522, utbl_chksum : 0xe619d30d) [ 725.594758][T11009] loop5: detected capacity change from 0 to 1024 [ 725.658764][ T9486] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 727.598098][T10925] tipc: Disabling bearer [ 727.609541][T10977] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1233'. [ 729.532178][T11052] loop6: detected capacity change from 0 to 1024 [ 729.624512][ T9486] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 729.746558][T11059] loop5: detected capacity change from 0 to 16 [ 729.761523][T11059] erofs: (device loop5): mounted with root inode @ nid 36. [ 729.778969][T11059] erofs: (device loop5): z_erofs_readahead: readahead error at folio 87 @ nid 36 [ 729.788935][T11059] erofs: (device loop5): z_erofs_readahead: readahead error at folio 86 @ nid 36 [ 729.798396][T11059] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 363 @ lcn 82 of nid 36 [ 729.809301][T11059] erofs: (device loop5): z_erofs_readahead: readahead error at folio 83 @ nid 36 [ 729.818532][T11059] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 363 @ lcn 82 of nid 36 [ 729.829201][T11059] erofs: (device loop5): z_erofs_readahead: readahead error at folio 82 @ nid 36 [ 729.838937][T11059] erofs: (device loop5): z_erofs_readahead: readahead error at folio 79 @ nid 36 [ 729.848173][T11059] erofs: (device loop5): z_erofs_readahead: readahead error at folio 78 @ nid 36 [ 729.857454][T11059] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 1485 @ lcn 75 of nid 36 [ 729.870243][T11059] erofs: (device loop5): z_erofs_readahead: readahead error at folio 76 @ nid 36 [ 729.883000][T11059] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 1485 @ lcn 75 of nid 36 [ 729.902758][T11059] erofs: (device loop5): z_erofs_readahead: readahead error at folio 75 @ nid 36 [ 729.912340][T11059] erofs: (device loop5): z_erofs_readahead: readahead error at folio 74 @ nid 36 [ 729.921595][T11059] erofs: (device loop5): z_erofs_readahead: readahead error at folio 72 @ nid 36 [ 729.930815][T11059] erofs: (device loop5): z_erofs_readahead: readahead error at folio 71 @ nid 36 [ 729.940010][T11059] erofs: (device loop5): z_erofs_readahead: readahead error at folio 70 @ nid 36 [ 729.949594][T11059] erofs: (device loop5): z_erofs_readahead: readahead error at folio 63 @ nid 36 [ 731.344207][T11059] erofs: (device loop5): z_erofs_readahead: readahead error at folio 61 @ nid 36 [ 731.353736][T11059] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 1024 @ lcn 58 of nid 36 [ 731.364579][T11059] erofs: (device loop5): z_erofs_readahead: readahead error at folio 59 @ nid 36 [ 731.374274][T11059] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 1024 @ lcn 58 of nid 36 [ 731.385402][T11059] erofs: (device loop5): z_erofs_readahead: readahead error at folio 58 @ nid 36 [ 731.394914][T11059] erofs: (device loop5): z_erofs_readahead: readahead error at folio 56 @ nid 36 [ 731.404499][T11059] erofs: (device loop5): z_erofs_readahead: readahead error at folio 54 @ nid 36 [ 731.414133][T11059] erofs: (device loop5): z_erofs_readahead: readahead error at folio 50 @ nid 36 [ 731.423623][T11059] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 731.434551][T11059] erofs: (device loop5): z_erofs_readahead: readahead error at folio 47 @ nid 36 [ 731.444017][T11059] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 731.460715][T11059] erofs: (device loop5): z_erofs_readahead: readahead error at folio 46 @ nid 36 [ 731.470377][T11059] erofs: (device loop5): z_erofs_readahead: readahead error at folio 45 @ nid 36 [ 731.479650][T11059] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 731.490606][T11059] erofs: (device loop5): z_erofs_readahead: readahead error at folio 43 @ nid 36 [ 731.499889][T11059] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 731.512347][T11059] erofs: (device loop5): z_erofs_readahead: readahead error at folio 42 @ nid 36 [ 731.526114][T11059] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 731.536952][T11059] erofs: (device loop5): z_erofs_readahead: readahead error at folio 41 @ nid 36 [ 731.546422][T11059] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 731.557477][T11059] erofs: (device loop5): z_erofs_readahead: readahead error at folio 40 @ nid 36 [ 731.570057][T11059] erofs: (device loop5): z_erofs_readahead: readahead error at folio 39 @ nid 36 [ 731.579876][T11059] erofs: (device loop5): z_erofs_readahead: readahead error at folio 38 @ nid 36 [ 731.595543][T11059] erofs: (device loop5): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 731.610893][T11059] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 1468 @ lcn 31 of nid 36 [ 731.623212][T11059] erofs: (device loop5): z_erofs_readahead: readahead error at folio 31 @ nid 36 [ 731.643107][T11059] erofs: (device loop5): z_erofs_readahead: readahead error at folio 25 @ nid 36 [ 731.653311][T11059] erofs: (device loop5): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 731.670160][T11059] erofs: (device loop5): z_erofs_readahead: readahead error at folio 19 @ nid 36 [ 731.689133][T11059] syz.5.1253: attempt to access beyond end of device [ 731.689133][T11059] loop5: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 731.710359][T11059] syz.5.1253: attempt to access beyond end of device [ 731.710359][T11059] loop5: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 731.730974][T11059] syz.5.1253: attempt to access beyond end of device [ 731.730974][T11059] loop5: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 731.750117][T11059] syz.5.1253: attempt to access beyond end of device [ 731.750117][T11059] loop5: rw=524288, sector=32, nr_sectors = 64 limit=16 [ 731.767943][T11059] syz.5.1253: attempt to access beyond end of device [ 731.767943][T11059] loop5: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 731.786215][T11059] syz.5.1253: attempt to access beyond end of device [ 731.786215][T11059] loop5: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 732.910644][T11063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1254'. [ 733.791980][ T9607] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 733.811870][ T9607] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 733.822410][ T9607] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 733.833652][ T9607] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 733.845766][ T9607] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 733.853420][ T9607] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 734.632885][T11079] tipc: Enabling of bearer rejected, failed to enable media [ 735.125835][ T2939] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.167771][T11067] chnl_net:caif_netlink_parms(): no params data found [ 735.409821][ T2939] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.688628][ T2939] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.788050][T11109] loop5: detected capacity change from 0 to 1024 [ 735.963203][ T2939] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.974244][ T9607] Bluetooth: hci1: command tx timeout [ 736.691755][T11067] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.725674][T11067] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.759166][T11067] bridge_slave_0: entered allmulticast mode [ 736.786019][T11067] bridge_slave_0: entered promiscuous mode [ 736.825999][T11067] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.871199][T11067] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.919499][T11067] bridge_slave_1: entered allmulticast mode [ 736.961009][T11067] bridge_slave_1: entered promiscuous mode [ 737.096047][T11067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.190735][T11067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 737.276276][T11128] loop5: detected capacity change from 0 to 128 [ 737.578856][T11130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1264'. [ 738.022513][ T9607] Bluetooth: hci1: command tx timeout [ 738.261549][T11067] team0: Port device team_slave_0 added [ 738.308260][T11067] team0: Port device team_slave_1 added [ 738.526220][ T2939] tipc: Left network mode [ 738.533180][T11067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 738.540193][T11067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.598256][T11067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 738.615977][T11067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 738.628636][T11067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.661649][T11067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 739.160769][T11111] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 739.966128][T11067] hsr_slave_0: entered promiscuous mode [ 739.974653][T11067] hsr_slave_1: entered promiscuous mode [ 739.980653][T11111] usb 6-1: Using ep0 maxpacket: 32 [ 739.986778][T11067] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 739.988940][T11111] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 740.006456][T11067] Cannot create hsr debugfs directory [ 740.101088][ T9607] Bluetooth: hci1: command tx timeout [ 740.152169][T11111] usb 6-1: config 0 has no interface number 0 [ 740.158402][T11111] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 740.201147][T11111] usb 6-1: config 0 interface 196 has no altsetting 0 [ 740.219980][T11111] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 740.236829][T11111] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.262811][T11111] usb 6-1: Product: syz [ 740.267071][T11111] usb 6-1: Manufacturer: syz [ 740.491013][T11111] usb 6-1: SerialNumber: syz [ 740.511955][T11111] usb 6-1: config 0 descriptor?? [ 740.517964][T11144] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 740.956789][T11111] ipheth 6-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 740.979092][T11111] ipheth: probe of 6-1:0.196 failed with error -22 [ 741.170674][ T5931] usb 6-1: USB disconnect, device number 9 [ 741.361687][ T2939] hsr_slave_0: left promiscuous mode [ 741.388059][ T2939] hsr_slave_1: left promiscuous mode [ 741.408224][ T2939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 741.428484][ T2939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 741.470216][ T2939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 741.496382][ T2939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 741.506518][ T2939] bridge_slave_1: left allmulticast mode [ 741.517687][ T2939] bridge_slave_1: left promiscuous mode [ 741.524651][ T2939] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.546965][ T2939] bridge_slave_0: left allmulticast mode [ 741.558054][ T2939] bridge_slave_0: left promiscuous mode [ 741.576894][ T2939] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.643670][ T2939] veth1_macvtap: left promiscuous mode [ 741.664296][ T2939] veth0_macvtap: left promiscuous mode [ 741.676332][ T2939] veth1_vlan: left promiscuous mode [ 741.687891][ T2939] veth0_vlan: left promiscuous mode [ 741.989931][T11163] loop5: detected capacity change from 0 to 1024 [ 742.081588][ T9486] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 742.220849][ T9607] Bluetooth: hci1: command tx timeout [ 743.419689][T11171] tmpfs: Unknown parameter 'nolazytimeÿÿ' [ 744.447853][T11181] loop5: detected capacity change from 0 to 512 [ 744.879573][T11181] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.1277: casefold flag without casefold feature [ 745.159475][T11181] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1277: couldn't read orphan inode 15 (err -117) [ 745.192326][T11181] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 745.458141][ T8546] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 745.757549][ T2939] team0 (unregistering): Port device team_slave_1 removed [ 745.870787][ T2939] team0 (unregistering): Port device team_slave_0 removed [ 745.958265][T11191] loop5: detected capacity change from 0 to 1024 [ 745.958673][ T2939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 746.038770][ T9486] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 746.052816][ T2939] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 747.630657][ T5931] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 747.945900][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.953297][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.988471][ T5931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.210335][ T5931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.247903][ T5931] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 748.257606][ T5931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.375940][ T5931] usb 6-1: config 0 descriptor?? [ 748.854187][ T5931] lg-g15 0003:046D:C222.0006: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.5-1/input0 [ 749.027778][ T5931] usb 6-1: USB disconnect, device number 10 [ 749.164159][T11203] fido_id[11203]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 749.272411][ T2939] bond0 (unregistering): Released all slaves [ 749.435880][T11067] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 749.446627][T11067] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 749.477439][T11201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1282'. [ 749.492366][T11067] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 749.666120][T11067] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 749.866362][T11209] loop6: detected capacity change from 0 to 512 [ 750.262571][T11067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 750.349952][T11067] 8021q: adding VLAN 0 to HW filter on device team0 [ 750.415378][ T3440] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.422681][ T3440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 750.491730][ T3440] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.498967][ T3440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 751.082507][T11225] syz.5.1287[11225] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 751.082768][T11225] syz.5.1287[11225] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 751.349838][T11067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 751.418703][T11225] loop5: detected capacity change from 0 to 512 [ 751.504228][T11225] EXT4-fs: Ignoring removed nobh option [ 751.688892][T11225] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 752.041390][T11225] EXT4-fs (loop5): orphan cleanup on readonly fs [ 752.618782][T11225] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 752.767066][T11225] EXT4-fs warning (device loop5): ext4_enable_quotas:7175: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 752.983380][T11225] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 753.094511][T11225] EXT4-fs (loop5): 1 truncate cleaned up [ 753.187048][T11225] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 753.873569][T11067] veth0_vlan: entered promiscuous mode [ 753.918354][T11067] veth1_vlan: entered promiscuous mode [ 754.018438][T11067] veth0_macvtap: entered promiscuous mode [ 754.055942][T11067] veth1_macvtap: entered promiscuous mode [ 754.198959][T11067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 758.128444][T11249] loop6: detected capacity change from 0 to 256 [ 759.196278][T11067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.252391][T11249] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 759.440461][T11067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 759.510520][T11067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.549479][T11067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 759.595442][T11067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.632991][T11067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 759.709209][T11067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 759.796089][T11067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.830605][T11067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 759.859401][T11067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.142646][T11067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 760.247100][T11067] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.327427][T11067] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.411795][T11067] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.431409][T11067] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.927090][T11266] xt_hashlimit: size too large, truncated to 1048576 [ 761.012029][ T2939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 761.019952][ T2939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 761.323838][ T9293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 761.369390][ T9293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.433661][T11286] loop6: detected capacity change from 0 to 512 [ 763.564810][T11286] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 763.642514][T11278] loop8: detected capacity change from 0 to 40427 [ 763.650703][T11286] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 763.770675][T11278] F2FS-fs (loop8): Image doesn't support compression [ 763.840531][T11278] F2FS-fs (loop8): Unrecognized mount option "whint_mode=fs-based" or missing value [ 764.863351][ T8994] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.743029][T11303] binfmt_misc: register: failed to install interpreter file ./file0 [ 765.941552][T11223] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.334429][ T5794] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 766.350841][ T5794] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 766.360580][ T5794] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 766.371049][ T5794] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 766.379362][ T5794] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 766.387135][ T5794] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 767.071770][T11300] loop6: detected capacity change from 0 to 40427 [ 767.129406][T11300] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 767.180425][T11300] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 767.272322][T11300] F2FS-fs (loop6): Found nat_bits in checkpoint [ 767.415323][T11310] chnl_net:caif_netlink_parms(): no params data found [ 767.513427][T11300] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 767.550357][T11300] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 767.725591][ T28] audit: type=1800 audit(1758851091.513:423): pid=11300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1298" name="bus" dev="loop6" ino=10 res=0 errno=0 [ 768.057031][ T76] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.138417][T11325] syz.6.1298: attempt to access beyond end of device [ 768.138417][T11325] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 768.500780][ T9607] Bluetooth: hci4: command tx timeout [ 768.562294][ T76] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.567380][ T76] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.673452][T11310] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.720677][T11310] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.757485][T11310] bridge_slave_0: entered allmulticast mode [ 769.793263][T11310] bridge_slave_0: entered promiscuous mode [ 769.869411][T11310] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.907715][T11310] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.950868][T11310] bridge_slave_1: entered allmulticast mode [ 769.999429][T11310] bridge_slave_1: entered promiscuous mode [ 770.143177][ T76] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.490626][T11310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 770.536603][T11310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 770.593769][ T9607] Bluetooth: hci4: command tx timeout [ 770.836889][T11310] team0: Port device team_slave_0 added [ 771.007313][T11310] team0: Port device team_slave_1 added [ 771.212776][T11310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 771.232912][T11310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 771.302108][T11310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 771.369314][T11310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 771.395301][T11310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 771.463209][T11310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 771.565285][ T76] tipc: Disabling bearer [ 771.579519][ T76] tipc: Left network mode [ 771.842882][T11310] hsr_slave_0: entered promiscuous mode [ 771.900882][T11310] hsr_slave_1: entered promiscuous mode [ 771.924928][T11310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 771.941842][T11310] Cannot create hsr debugfs directory [ 772.730479][ T9607] Bluetooth: hci4: command tx timeout [ 774.821422][ T9607] Bluetooth: hci4: command tx timeout [ 775.068224][T11384] overlayfs: failed to clone upperpath [ 778.594323][T11310] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 778.644810][T11310] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 778.692679][T11310] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 778.746247][T11310] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 778.808708][ T76] hsr_slave_0: left promiscuous mode [ 778.845183][ T76] hsr_slave_1: left promiscuous mode [ 778.878484][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 778.899232][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 778.911005][ T76] bridge_slave_1: left allmulticast mode [ 778.919176][ T76] bridge_slave_1: left promiscuous mode [ 778.927370][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.937558][ T76] bridge_slave_0: left allmulticast mode [ 778.944652][ T76] bridge_slave_0: left promiscuous mode [ 778.959079][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.022340][T11425] loop6: detected capacity change from 0 to 512 [ 779.098849][T11425] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 779.109124][T11425] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 779.270468][T11425] EXT4-fs (loop6): 1 truncate cleaned up [ 779.286062][T11425] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 780.599075][ T76] veth1_macvtap: left promiscuous mode [ 780.723964][ T76] veth0_macvtap: left promiscuous mode [ 780.729905][ T76] veth1_vlan: left promiscuous mode [ 780.777850][ T76] veth0_vlan: left promiscuous mode [ 781.735890][T11432] loop8: detected capacity change from 0 to 512 [ 781.964800][T11432] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 782.076159][T11432] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 782.239274][T11432] syz.8.1316[11432] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 782.239446][T11432] syz.8.1316[11432] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 782.526609][T11067] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 782.825917][T11427] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 783.028459][T11441] loop8: detected capacity change from 0 to 8192 [ 784.326941][ T76] team0 (unregistering): Port device team_slave_1 removed [ 784.455402][ T76] team0 (unregistering): Port device team_slave_0 removed [ 784.874601][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 785.367624][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 789.771715][ T76] bond0 (unregistering): Released all slaves [ 790.241102][ T8994] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 791.323297][T11310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 791.450760][T11310] 8021q: adding VLAN 0 to HW filter on device team0 [ 791.488952][T11428] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.496260][T11428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 792.574937][T11428] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.582249][T11428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 794.471938][T11264] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 794.708567][T11264] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 794.754044][T11264] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 794.803244][T11264] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 794.888524][T11264] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 794.944062][T11264] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.007563][T11264] usb 7-1: config 0 descriptor?? [ 795.089161][T11310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 795.483692][T11264] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 795.573189][T11264] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 795.764358][T11264] usb 7-1: USB disconnect, device number 9 [ 795.822040][T11528] fido_id[11528]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 796.279384][T11310] veth0_vlan: entered promiscuous mode [ 796.405603][T11310] veth1_vlan: entered promiscuous mode [ 796.572997][T11310] veth0_macvtap: entered promiscuous mode [ 796.626965][T11310] veth1_macvtap: entered promiscuous mode [ 796.704446][T11310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.715201][T11310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.726598][T11310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.737657][T11310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.749265][T11310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.760201][T11310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.774867][T11310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 796.807753][T11310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.828382][T11310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.857919][T11310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.883793][T11310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.894436][T11310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.915910][T11310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.929879][T11310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 796.959074][T11310] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.978446][T11310] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.999324][T11310] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.020422][T11310] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.273887][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.282170][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.548526][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.736699][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 800.665386][ T28] audit: type=1326 audit(1758851124.453:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.8.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dfa38eec9 code=0x7ffc0000 [ 800.745042][ T28] audit: type=1326 audit(1758851124.453:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.8.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dfa38eec9 code=0x7ffc0000 [ 801.202983][ T28] audit: type=1326 audit(1758851124.503:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.8.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f5dfa38eec9 code=0x7ffc0000 [ 801.742002][ T28] audit: type=1326 audit(1758851124.933:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.8.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dfa38eec9 code=0x7ffc0000 [ 801.964116][ T28] audit: type=1326 audit(1758851125.013:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11595 comm="syz.8.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5dfa3c1785 code=0x7ffc0000 [ 801.986857][ T28] audit: type=1326 audit(1758851125.203:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11595 comm="syz.8.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f5dfa38eec9 code=0x7ffc0000 [ 802.009261][ T28] audit: type=1326 audit(1758851125.523:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.8.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dfa38eec9 code=0x7ffc0000 [ 802.036496][ T28] audit: type=1326 audit(1758851125.823:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.8.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f5dfa38eec9 code=0x7ffc0000 [ 802.447043][T11606] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1339'. [ 802.778835][ T28] audit: type=1326 audit(1758851125.853:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.8.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dfa38eec9 code=0x7ffc0000 [ 802.825471][ T28] audit: type=1326 audit(1758851125.853:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.8.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dfa38eec9 code=0x7ffc0000 [ 803.211332][T11610] loop8: detected capacity change from 0 to 1024 [ 803.221979][T11610] EXT4-fs: Ignoring removed i_version option [ 803.228344][T11610] EXT4-fs: inline encryption not supported [ 803.279716][T11610] EXT4-fs (loop8): Test dummy encryption mode enabled [ 803.289055][T11616] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1345'. [ 803.322768][T11616] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1345'. [ 803.335797][T11617] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1344'. [ 803.357854][T11610] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 803.905402][T11630] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1342'. [ 804.888684][T11067] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 805.231337][T11260] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 805.420470][T11260] usb 10-1: Using ep0 maxpacket: 16 [ 805.433415][T11260] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 805.451060][T11260] usb 10-1: config 0 has no interface number 0 [ 805.479393][T11260] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.542550][T11260] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 805.563913][T11260] usb 10-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 805.680069][T11260] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.472659][T11260] usb 10-1: config 0 descriptor?? [ 807.389941][T11260] uclogic 0003:28BD:0071.0008: pen parameters not found [ 807.478406][T11260] uclogic 0003:28BD:0071.0008: interface is invalid, ignoring [ 807.620956][T11260] usb 10-1: USB disconnect, device number 2 [ 809.387071][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.397302][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.269424][T11693] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1356'. [ 810.729031][T11702] loop8: detected capacity change from 0 to 16 [ 810.745206][T11702] erofs: (device loop8): mounted with root inode @ nid 36. [ 810.756805][T11702] syz.8.1357: attempt to access beyond end of device [ 810.756805][T11702] loop8: rw=0, sector=8, nr_sectors = 16 limit=16 [ 812.530367][T11727] loop6: detected capacity change from 0 to 4096 [ 812.544474][T11727] EXT4-fs: Ignoring removed mblk_io_submit option [ 812.896955][T11727] EXT4-fs (loop6): Test dummy encryption mode enabled [ 813.004585][T11727] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 813.771562][T11727] fscrypt (loop6): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 813.784727][T11732] fscrypt (loop6): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 814.543976][T11747] loop8: detected capacity change from 0 to 512 [ 814.639687][T11747] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 814.858432][ T8994] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.957150][T11756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1369'. [ 815.638566][T11775] loop8: detected capacity change from 0 to 512 [ 815.707649][T11775] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 815.877915][T11775] EXT4-fs (loop8): orphan cleanup on readonly fs [ 816.078948][T11775] EXT4-fs error (device loop8): ext4_validate_block_bitmap:439: comm syz.8.1370: bg 0: block 248: padding at end of block bitmap is not set [ 816.185050][T11775] __quota_error: 56 callbacks suppressed [ 816.185076][T11775] Quota error (device loop8): write_blk: dquota write failed [ 816.320157][T11775] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 816.336307][T11775] EXT4-fs error (device loop8): ext4_acquire_dquot:6940: comm syz.8.1370: Failed to acquire dquot type 1 [ 816.363808][T11775] EXT4-fs (loop8): 1 truncate cleaned up [ 816.448486][T11775] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 816.578060][T11795] overlayfs: failed to resolve './bus': -2 [ 818.374881][T11817] loop9: detected capacity change from 0 to 1024 [ 818.566393][T11817] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 818.767909][T11817] EXT4-fs error (device loop9): ext4_validate_block_bitmap:439: comm syz.9.1380: bg 0: block 10: padding at end of block bitmap is not set [ 818.804502][T11817] Quota error (device loop9): write_blk: dquota write failed [ 818.812113][T11817] Quota error (device loop9): find_free_dqentry: Can't write quota data block 2 [ 818.822858][T11817] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 818.833651][T11817] EXT4-fs error (device loop9): ext4_acquire_dquot:6940: comm syz.9.1380: Failed to acquire dquot type 0 [ 818.861531][T11817] Quota error (device loop9): write_blk: dquota write failed [ 818.869623][T11817] Quota error (device loop9): find_free_dqentry: Can't write quota data block 2 [ 818.880917][T11817] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 818.891616][T11817] EXT4-fs error (device loop9): ext4_acquire_dquot:6940: comm syz.9.1380: Failed to acquire dquot type 0 [ 818.915648][T11817] EXT4-fs error (device loop9): ext4_free_blocks:6676: comm syz.9.1380: Freeing blocks not in datazone - block = 0, count = 4096 [ 819.010712][T11817] Quota error (device loop9): write_blk: dquota write failed [ 819.018631][T11817] Quota error (device loop9): find_free_dqentry: Can't write quota data block 2 [ 819.030165][T11817] EXT4-fs error (device loop9): ext4_acquire_dquot:6940: comm syz.9.1380: Failed to acquire dquot type 0 [ 819.053015][T11817] EXT4-fs (loop9): 1 orphan inode deleted [ 819.075614][T11817] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 819.764224][T11817] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 820.780813][T11821] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1381'. [ 825.107145][T11859] loop9: detected capacity change from 0 to 256 [ 825.155855][T11859] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x44702e96, utbl_chksum : 0xe619d30d) [ 825.228749][T11859] syz.9.1390: attempt to access beyond end of device [ 825.228749][T11859] loop9: rw=524288, sector=34359738488, nr_sectors = 16 limit=256 [ 825.298889][T11859] syz.9.1390: attempt to access beyond end of device [ 825.298889][T11859] loop9: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 825.413615][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 825.413634][ T28] audit: type=1800 audit(2000000016.260:490): pid=11859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1390" name="file1" dev="loop9" ino=1048627 res=0 errno=0 [ 825.473901][T11859] exFAT-fs (loop9): error, tried to truncate zeroed cluster. [ 825.547409][T11859] exFAT-fs (loop9): Filesystem has been set read-only [ 826.845938][T11873] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1392'. [ 827.199718][T11880] xt_hashlimit: size too large, truncated to 1048576 [ 830.089374][T11067] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 831.393404][T11939] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1404'. [ 834.643458][T11984] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1414'. [ 838.599102][T12016] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 838.608567][T12016] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 840.744708][T12036] loop9: detected capacity change from 0 to 512 [ 840.780945][T12036] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 840.805986][T12036] EXT4-fs (loop9): orphan cleanup on readonly fs [ 840.834171][T12036] EXT4-fs error (device loop9): ext4_validate_block_bitmap:439: comm syz.9.1426: bg 0: block 248: padding at end of block bitmap is not set [ 840.854119][T12036] Quota error (device loop9): write_blk: dquota write failed [ 840.861917][T12036] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 840.872612][T12036] EXT4-fs error (device loop9): ext4_acquire_dquot:6940: comm syz.9.1426: Failed to acquire dquot type 1 [ 840.916605][T12036] EXT4-fs (loop9): 1 truncate cleaned up [ 841.015175][T12036] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 841.165382][T11310] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 844.988369][ T5794] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 845.000207][ T5794] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 845.031093][ T5794] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 845.045120][T11731] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.056765][ T5794] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 845.068089][ T5794] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 845.079043][ T5794] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 845.326202][T11731] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.564600][T12103] loop8: detected capacity change from 0 to 4096 [ 845.572495][T12103] EXT4-fs: Ignoring removed mblk_io_submit option [ 845.593248][T12103] EXT4-fs (loop8): Test dummy encryption mode enabled [ 845.620631][T12103] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 845.740010][T11731] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.956852][T11731] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.057559][T12103] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 846.851838][T11731] tipc: Left network mode [ 846.856610][T12088] chnl_net:caif_netlink_parms(): no params data found [ 847.172466][ T5794] Bluetooth: hci2: command tx timeout [ 847.183265][T12116] loop9: detected capacity change from 0 to 40427 [ 847.203580][T12116] F2FS-fs (loop9): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 847.249280][T12116] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 847.303140][T12116] F2FS-fs (loop9): build fault injection attr: rate: 0, type: 0x35f7 [ 847.359528][T12116] F2FS-fs (loop9): build fault injection attr: rate: 690, type: 0x7ffff [ 847.368062][T12116] F2FS-fs (loop9): Image doesn't support compression [ 847.469882][T12116] F2FS-fs (loop9): invalid crc value [ 847.507648][T12088] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.516495][T12116] F2FS-fs (loop9): Found nat_bits in checkpoint [ 847.519496][T12088] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.562143][T12088] bridge_slave_0: entered allmulticast mode [ 847.580808][T12088] bridge_slave_0: entered promiscuous mode [ 847.611436][T12088] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.658142][T12088] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.689386][T12088] bridge_slave_1: entered allmulticast mode [ 847.697302][T12088] bridge_slave_1: entered promiscuous mode [ 847.746550][T12116] F2FS-fs (loop9): Start checkpoint disabled! [ 847.828037][T12116] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 847.835934][T12116] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 847.926601][T12116] syz.9.1440: attempt to access beyond end of device [ 847.926601][T12116] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 848.015917][T12088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 848.043614][T12088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 848.292687][T12116] usb usb8: usbfs: process 12116 (syz.9.1440) did not claim interface 0 before use [ 848.304548][T12116] F2FS-fs (loop9): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x187/0x910 [ 848.731507][T12088] team0: Port device team_slave_0 added [ 848.772318][T12088] team0: Port device team_slave_1 added [ 848.821298][ T76] kworker/u4:4: attempt to access beyond end of device [ 848.821298][ T76] loop9: rw=1, sector=45104, nr_sectors = 8 limit=40427 [ 848.878496][ T76] kworker/u4:4: attempt to access beyond end of device [ 848.878496][ T76] loop9: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 848.912030][ T76] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 848.929419][ T76] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 848.982219][T12088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 849.019045][T12088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 849.109253][T12088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 849.219547][ T5794] Bluetooth: hci2: command tx timeout [ 849.260120][T12088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 849.267277][T12088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 849.304953][T12088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 849.714690][T12088] hsr_slave_0: entered promiscuous mode [ 849.746572][T12088] hsr_slave_1: entered promiscuous mode [ 849.766811][T12088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 849.798755][T12088] Cannot create hsr debugfs directory [ 850.521178][T11731] hsr_slave_0: left promiscuous mode [ 850.555372][T11731] hsr_slave_1: left promiscuous mode [ 850.575773][T11731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 850.599063][T11731] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 850.625362][T11731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 850.643852][T11731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 850.675372][T11731] bridge_slave_1: left allmulticast mode [ 850.694592][T11731] bridge_slave_1: left promiscuous mode [ 850.715202][T11731] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.775661][T11731] bridge_slave_0: left allmulticast mode [ 850.792784][T11731] bridge_slave_0: left promiscuous mode [ 850.798651][T11731] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.912659][T11731] veth1_macvtap: left promiscuous mode [ 850.918294][T11731] veth0_macvtap: left promiscuous mode [ 850.939475][T11731] veth1_vlan: left promiscuous mode [ 850.949396][T11731] veth0_vlan: left promiscuous mode [ 851.346451][ T5794] Bluetooth: hci2: command tx timeout [ 853.379441][ T5794] Bluetooth: hci2: command tx timeout [ 853.910722][T11067] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 857.080892][T11731] team0 (unregistering): Port device team_slave_1 removed [ 857.334675][T11731] team0 (unregistering): Port device team_slave_0 removed [ 858.022321][ T5794] Bluetooth: hci1: command 0x0406 tx timeout [ 858.172072][T11731] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 859.033558][T11731] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 860.246806][T12220] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1459'. [ 864.082794][T11731] bond0 (unregistering): Released all slaves [ 866.638451][T12268] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1469'. [ 869.993114][T12291] loop9: detected capacity change from 0 to 512 [ 870.008359][T12291] EXT4-fs: Ignoring removed mblk_io_submit option [ 870.048201][T12291] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 870.065300][T12291] EXT4-fs (loop9): can't mount with data_err=abort, fs mounted w/o journal [ 870.227589][T12088] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 871.465495][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.472721][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.596251][T12088] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 871.659993][T12088] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 871.976479][T12046] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 872.017118][T12088] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 872.842763][T12088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 872.904271][T12088] 8021q: adding VLAN 0 to HW filter on device team0 [ 872.989488][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.996721][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 873.053647][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.060939][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 873.517893][T11111] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 873.645402][T12330] loop8: detected capacity change from 0 to 128 [ 873.669488][T12330] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 873.725084][T12330] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 873.745944][T11111] usb 10-1: config 0 has an invalid interface number: 157 but max is 1 [ 873.764331][T11111] usb 10-1: config 0 has no interface number 1 [ 873.785271][T12088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 873.797814][T11111] usb 10-1: config 0 interface 157 has no altsetting 0 [ 873.825635][T11111] usb 10-1: config 0 interface 0 has no altsetting 0 [ 873.858484][T11111] usb 10-1: New USB device found, idVendor=0403, idProduct=a5ae, bcdDevice=d1.8d [ 873.898467][T11111] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.957543][T11111] usb 10-1: config 0 descriptor?? [ 874.114537][T12088] veth0_vlan: entered promiscuous mode [ 874.136296][T12088] veth1_vlan: entered promiscuous mode [ 875.134129][T11111] usb 10-1: string descriptor 0 read error: -71 [ 875.144149][ T5926] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 875.159549][T11111] ftdi_sio 10-1:0.157: FTDI USB Serial Device converter detected [ 875.193865][T11111] ftdi_sio ttyUSB0: unknown device type: 0xd18d [ 875.215096][T11111] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 875.226101][T11111] ftdi_sio ttyUSB1: unknown device type: 0xd18d [ 875.237693][T11111] usb 10-1: USB disconnect, device number 3 [ 875.245685][T11111] ftdi_sio 10-1:0.157: device disconnected [ 875.280450][T12088] veth0_macvtap: entered promiscuous mode [ 875.323038][T11111] ftdi_sio 10-1:0.0: device disconnected [ 875.350236][T12088] veth1_macvtap: entered promiscuous mode [ 875.423809][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 875.494469][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.711700][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 875.913419][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.085263][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 876.193155][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.206405][T12088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 876.269770][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 876.281109][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.297954][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 876.358107][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.385191][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 876.420510][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.450604][T12088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 876.692076][T12353] loop9: detected capacity change from 0 to 128 [ 877.835686][T12353] EXT4-fs (loop9): Test dummy encryption mode enabled [ 878.625111][T12353] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 878.640838][T12353] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 879.452895][T12088] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.552674][T12088] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.612634][T12088] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.678668][T12088] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.431755][T11310] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 881.801442][ T3540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 881.868169][ T3540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 882.010935][ T3540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 882.051619][ T3540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 882.353484][T12378] loop8: detected capacity change from 0 to 128 [ 883.901789][ T5833] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 884.331680][ T5833] usb 4-1: config 0 has an invalid interface number: 157 but max is 1 [ 884.358160][ T5833] usb 4-1: config 0 has no interface number 1 [ 884.589782][ T5833] usb 4-1: config 0 interface 157 has no altsetting 0 [ 884.598619][ T5833] usb 4-1: config 0 interface 0 has no altsetting 0 [ 884.605585][ T5833] usb 4-1: New USB device found, idVendor=0403, idProduct=a5ae, bcdDevice=d1.8d [ 884.621150][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.646574][ T5833] usb 4-1: config 0 descriptor?? [ 885.290191][ T5833] usb 4-1: string descriptor 0 read error: -71 [ 885.304037][ T5833] ftdi_sio 4-1:0.157: FTDI USB Serial Device converter detected [ 885.320300][ T5833] ftdi_sio ttyUSB0: unknown device type: 0xd18d [ 885.331042][ T5833] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 885.341512][ T5833] ftdi_sio ttyUSB1: unknown device type: 0xd18d [ 885.353097][ T5833] usb 4-1: USB disconnect, device number 2 [ 885.365361][ T5833] ftdi_sio 4-1:0.157: device disconnected [ 885.419654][ T5833] ftdi_sio 4-1:0.0: device disconnected [ 885.446856][T12408] loop9: detected capacity change from 0 to 1024 [ 885.499764][T12411] loop8: detected capacity change from 0 to 256 [ 885.529750][T12411] exfat: Deprecated parameter 'utf8' [ 885.532138][T12254] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 885.535290][T12411] exfat: Deprecated parameter 'utf8' [ 885.561971][T12411] exfat: Deprecated parameter 'namecase' [ 885.581704][T12411] exFAT-fs (loop8): error, The cluster chain has a loop [ 885.658401][T12411] exFAT-fs (loop8): Filesystem has been set read-only [ 885.665321][T12411] exFAT-fs (loop8): failed to count the number of clusters in root [ 885.721918][T12411] exFAT-fs (loop8): failed to recognize exfat type [ 887.352335][T12411] overlay: Unknown parameter 'default_permissions:/' [ 887.500106][T12424] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1496'. [ 887.714988][T12434] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1497'. [ 891.275808][T12445] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 891.284932][T12445] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 893.269126][T12474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1508'. [ 893.328604][T11111] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 893.457616][T12458] Bluetooth: hci4: command 0x0406 tx timeout [ 893.537827][T11111] usb 10-1: Using ep0 maxpacket: 16 [ 893.581246][T11111] usb 10-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 893.601999][T11111] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.308467][T11111] usb 10-1: Product: syz [ 894.312933][T11111] usb 10-1: Manufacturer: syz [ 894.317869][T11111] usb 10-1: SerialNumber: syz [ 894.326049][T11111] usb 10-1: config 0 descriptor?? [ 894.335485][T11111] ums-onetouch 10-1:0.0: USB Mass Storage device detected [ 894.921311][T12482] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1509'. [ 896.542057][T11111] usb 10-1: USB disconnect, device number 4 [ 899.066847][T12507] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 899.076183][T12507] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 899.531672][T12512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1517'. [ 899.780512][T12516] loop9: detected capacity change from 0 to 1024 [ 899.847618][T11111] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 900.110330][T11111] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 900.175611][T11111] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 900.902987][T12521] loop3: detected capacity change from 0 to 512 [ 900.914027][ T28] audit: type=1326 audit(2000000000.460:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12520 comm="syz.3.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92738eec9 code=0x7ffc0000 [ 900.962260][ T28] audit: type=1326 audit(2000000000.460:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12520 comm="syz.3.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92738eec9 code=0x7ffc0000 [ 901.047147][T12521] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 901.113645][T12521] EXT4-fs (loop3): 1 truncate cleaned up [ 901.127071][T12521] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 901.186141][ T28] audit: type=1326 audit(2000000000.460:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12520 comm="syz.3.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92738eec9 code=0x7ffc0000 [ 901.347567][ T28] audit: type=1326 audit(2000000000.460:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12520 comm="syz.3.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92738eec9 code=0x7ffc0000 [ 901.726699][ T28] audit: type=1326 audit(2000000000.460:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12520 comm="syz.3.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa92738eec9 code=0x7ffc0000 [ 901.906906][ T28] audit: type=1326 audit(2000000000.470:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12520 comm="syz.3.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92738eec9 code=0x7ffc0000 [ 902.006432][T11111] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 902.196723][ T28] audit: type=1326 audit(2000000000.470:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12520 comm="syz.3.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92738eec9 code=0x7ffc0000 [ 902.371880][ T28] audit: type=1326 audit(2000000000.470:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12520 comm="syz.3.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92738eec9 code=0x7ffc0000 [ 902.505602][T11111] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.513988][T11111] usb 9-1: Product: syz [ 902.518939][T11111] usb 9-1: Manufacturer: syz [ 902.524136][T11111] usb 9-1: SerialNumber: syz [ 902.549882][ T28] audit: type=1326 audit(2000000000.470:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12520 comm="syz.3.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92738eec9 code=0x7ffc0000 [ 902.640105][ T28] audit: type=1326 audit(2000000000.470:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12520 comm="syz.3.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa92738eec9 code=0x7ffc0000 [ 903.466062][T11111] usb 9-1: can't set config #1, error -71 [ 903.488184][T11111] usb 9-1: USB disconnect, device number 2 [ 903.570523][T12538] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1523'. [ 904.686270][T12088] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 905.729994][T12556] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 905.794632][T12556] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 905.889293][T12559] loop8: detected capacity change from 0 to 1024 [ 905.963830][T12046] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 909.106177][T12579] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1533'. [ 909.263957][T12574] xt_socket: unknown flags 0x50 [ 909.428716][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 909.428734][ T28] audit: type=1326 audit(2000000000.340:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12584 comm="syz.3.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92738eec9 code=0x7ffc0000 [ 909.874420][ T28] audit: type=1326 audit(2000000000.370:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12584 comm="syz.3.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92738eec9 code=0x7ffc0000 [ 910.369656][ T28] audit: type=1326 audit(2000000000.370:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12584 comm="syz.3.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa92738eec9 code=0x7ffc0000 [ 910.393924][ T28] audit: type=1326 audit(2000000000.370:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12584 comm="syz.3.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92738eec9 code=0x7ffc0000 [ 910.476663][ T28] audit: type=1326 audit(2000000000.370:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12584 comm="syz.3.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92738eec9 code=0x7ffc0000 [ 910.556566][ T28] audit: type=1326 audit(2000000000.630:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12584 comm="syz.3.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa92738eec9 code=0x7ffc0000 [ 910.625285][ T28] audit: type=1326 audit(2000000000.740:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12584 comm="syz.3.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92738eec9 code=0x7ffc0000 [ 910.833896][T12600] loop8: detected capacity change from 0 to 512 [ 910.847819][T12600] EXT4-fs: Ignoring removed mblk_io_submit option [ 910.888563][T12600] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 910.908372][T12600] EXT4-fs (loop8): can't mount with data_err=abort, fs mounted w/o journal [ 911.107103][ T28] audit: type=1326 audit(2000000000.760:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12584 comm="syz.3.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92738eec9 code=0x7ffc0000 [ 913.719118][T12608] loop9: detected capacity change from 0 to 1024 [ 914.407290][T12458] Bluetooth: hci3: command 0x1003 tx timeout [ 914.415238][ T9607] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 915.547922][T12619] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1543'. [ 920.190989][T12658] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 920.299559][T12658] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 920.398296][T12660] loop8: detected capacity change from 0 to 1024 [ 920.463210][T12660] EXT4-fs: Ignoring removed bh option [ 920.509133][T12660] EXT4-fs: inline encryption not supported [ 920.591458][T12660] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 920.650002][T12660] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 920.739741][T12660] EXT4-fs error (device loop8): ext4_map_blocks:608: inode #3: block 2: comm syz.8.1550: lblock 2 mapped to illegal pblock 2 (length 1) [ 920.885156][T12660] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 920.937891][T12660] EXT4-fs error (device loop8): ext4_map_blocks:608: inode #3: block 48: comm syz.8.1550: lblock 0 mapped to illegal pblock 48 (length 1) [ 920.961262][T12666] loop3: detected capacity change from 0 to 1024 [ 921.047001][T12660] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 921.086529][T12660] EXT4-fs error (device loop8): ext4_acquire_dquot:6940: comm syz.8.1550: Failed to acquire dquot type 0 [ 921.157370][T12660] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 921.202647][T12660] EXT4-fs error (device loop8): ext4_evict_inode:252: inode #11: comm syz.8.1550: mark_inode_dirty error [ 921.217262][T12660] EXT4-fs warning (device loop8): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 921.238796][T12660] EXT4-fs (loop8): 1 orphan inode deleted [ 921.246087][T12660] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 921.259396][ T3540] EXT4-fs error (device loop8): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 921.264310][ T3540] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 921.609024][ T3540] EXT4-fs error (device loop8): ext4_release_dquot:6976: comm kworker/u4:12: Failed to release dquot type 0 [ 922.197511][T12660] EXT4-fs error (device loop8): ext4_map_blocks:608: inode #3: block 48: comm syz.8.1550: lblock 0 mapped to illegal pblock 48 (length 1) [ 922.232615][T12660] Quota error (device loop8): v2_read_header: Failed header read: expected=8 got=-117 [ 923.635619][T12660] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 924.637984][T12706] loop3: detected capacity change from 0 to 1024 [ 924.709654][T12046] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 925.747981][T12713] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1559'. [ 929.488114][T12747] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 929.567111][T12747] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 930.620186][T12765] loop3: detected capacity change from 0 to 1024 [ 932.461400][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.470554][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.713202][T12776] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1571'. [ 940.769718][T12852] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1587'. [ 942.237685][T12859] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 942.247395][T12859] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 947.084762][T12920] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1599'. [ 948.407662][T12925] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 948.416496][T12925] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 952.124581][T12948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1607'. [ 957.001077][T12981] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 957.973502][T12981] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 958.607756][T12985] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1612'. [ 961.650367][T13005] loop3: detected capacity change from 0 to 1024 [ 964.233365][ T28] audit: type=1326 audit(2000000000.880:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13009 comm="syz.8.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dfa38eec9 code=0x7ffc0000 [ 964.258730][ T28] audit: type=1326 audit(2000000000.880:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13009 comm="syz.8.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dfa38eec9 code=0x7ffc0000 [ 964.282441][ T28] audit: type=1326 audit(2000000000.880:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13009 comm="syz.8.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5dfa38eec9 code=0x7ffc0000 [ 964.305103][ T28] audit: type=1326 audit(2000000000.890:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13009 comm="syz.8.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5dfa38ef03 code=0x7ffc0000 [ 964.340378][ T28] audit: type=1326 audit(2000000000.890:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13009 comm="syz.8.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5dfa38d97f code=0x7ffc0000 [ 964.632932][ T28] audit: type=1326 audit(2000000000.890:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13009 comm="syz.8.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f5dfa38ef57 code=0x7ffc0000 [ 964.656211][ T28] audit: type=1326 audit(2000000000.890:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13009 comm="syz.8.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5dfa38d710 code=0x7ffc0000 [ 964.679324][ T28] audit: type=1326 audit(2000000000.890:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13009 comm="syz.8.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5dfa38db2a code=0x7ffc0000 [ 964.726933][ T28] audit: type=1326 audit(2000000000.890:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13009 comm="syz.8.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dfa38eec9 code=0x7ffc0000 [ 964.780928][ T28] audit: type=1326 audit(2000000000.890:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13009 comm="syz.8.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dfa38eec9 code=0x7ffc0000 [ 965.211606][T13041] usb usb1: check_ctrlrecip: process 13041 (syz.3.1623) requesting ep 01 but needs 81 [ 965.221469][T13041] usb usb1: usbfs: process 13041 (syz.3.1623) did not claim interface 0 before use [ 966.744912][T13055] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 966.754103][T13055] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 968.550908][T13061] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1626'. [ 970.577246][ T9607] Bluetooth: hci2: command 0x0406 tx timeout [ 971.255873][T13075] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1633'. [ 972.821578][T13086] usb usb1: check_ctrlrecip: process 13086 (syz.9.1635) requesting ep 01 but needs 81 [ 972.831863][T13086] usb usb1: usbfs: process 13086 (syz.9.1635) did not claim interface 0 before use [ 973.479826][T13090] loop3: detected capacity change from 0 to 256 [ 973.487176][T13090] exfat: Unknown parameter 'fsmagic' [ 973.552648][T13006] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 977.395597][T13130] loop9: detected capacity change from 0 to 1024 [ 977.435673][T13133] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1647'. [ 977.489587][T13006] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 981.542446][T13177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1657'. [ 984.575882][ T27] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 984.756040][ T27] usb 10-1: Using ep0 maxpacket: 8 [ 984.800748][ T27] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 984.839672][ T27] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 984.885020][ T27] usb 10-1: config 0 interface 0 has no altsetting 0 [ 985.257459][ T27] usb 10-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 985.268968][ T27] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.502051][ T27] usb 10-1: config 0 descriptor?? [ 987.019983][ T27] input: HID 28bd:0905 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:28BD:0905.0009/input/input6 [ 988.081475][ T27] uclogic 0003:28BD:0905.0009: input,hidraw0: USB HID v8.15 Mouse [HID 28bd:0905] on usb-dummy_hcd.9-1/input0 [ 988.365033][T13258] loop3: detected capacity change from 0 to 512 [ 988.489509][T13258] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 988.692786][T13258] EXT4-fs (loop3): 1 truncate cleaned up [ 988.725949][T13258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 989.004503][ T27] usb 10-1: USB disconnect, device number 5 [ 989.490561][T12139] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 990.187426][T12139] usb 4-1: Using ep0 maxpacket: 32 [ 990.905131][T12139] usb 4-1: unable to read config index 0 descriptor/all [ 990.953456][T12139] usb 4-1: can't read configurations, error -71 [ 991.101440][T13269] fido_id[13269]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 991.133216][T12088] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 993.705719][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.712227][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.428459][T13303] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1675'. [ 996.907981][T13313] loop9: detected capacity change from 0 to 128 [ 997.159887][T13315] loop3: detected capacity change from 0 to 1024 [ 997.211039][T13313] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 997.365318][T13003] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 998.495964][T13313] ext4 filesystem being mounted at /95/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 999.081091][T11310] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1004.101341][T13369] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1688'. [ 1004.243543][T13374] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1693'. [ 1004.787260][T13383] overlayfs: failed to resolve './bus': -2 [ 1008.480828][T13413] loop3: detected capacity change from 0 to 128 [ 1008.539075][T13413] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1008.562442][T13413] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1008.642123][T13413] fscrypt (loop3, inode 12): Unsupported encryption flags (0x10) [ 1008.746261][T12088] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1010.518283][T13430] overlayfs: failed to resolve './bus': -2 [ 1011.370031][T13443] loop3: detected capacity change from 0 to 512 [ 1015.022025][T13461] loop3: detected capacity change from 0 to 256 [ 1015.202496][T13461] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1016.743337][T13471] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1016.752727][T13471] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1023.692034][ T9607] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1023.705780][ T9607] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1023.748718][ T9607] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1023.766638][ T9607] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1023.788756][ T9607] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1023.798980][ T9607] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1024.560285][T13519] chnl_net:caif_netlink_parms(): no params data found [ 1025.873740][ T9607] Bluetooth: hci3: command tx timeout [ 1026.677093][T13519] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.684337][T13519] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.808098][T13519] bridge_slave_0: entered allmulticast mode [ 1026.846833][T13519] bridge_slave_0: entered promiscuous mode [ 1027.260683][T13519] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.423874][T13519] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.656872][T13519] bridge_slave_1: entered allmulticast mode [ 1027.666597][T13519] bridge_slave_1: entered promiscuous mode [ 1027.914171][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 1027.914188][ T28] audit: type=1326 audit(2000000023.030:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13567 comm="syz.8.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dfa38eec9 code=0x7ffc0000 [ 1027.944207][ T9607] Bluetooth: hci3: command tx timeout [ 1027.954067][ T28] audit: type=1326 audit(2000000023.040:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13567 comm="syz.8.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5dfa38eec9 code=0x7ffc0000 [ 1028.004651][ T28] audit: type=1326 audit(2000000023.040:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13567 comm="syz.8.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dfa38eec9 code=0x7ffc0000 [ 1028.027754][ T28] audit: type=1326 audit(2000000023.040:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13567 comm="syz.8.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dfa38eec9 code=0x7ffc0000 [ 1028.051280][ T28] audit: type=1326 audit(2000000023.040:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13567 comm="syz.8.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5dfa38eec9 code=0x7ffc0000 [ 1028.117951][ T28] audit: type=1326 audit(2000000023.050:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13567 comm="syz.8.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dfa38eec9 code=0x7ffc0000 [ 1028.627038][T13519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1028.725015][ T28] audit: type=1326 audit(2000000023.050:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13567 comm="syz.8.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dfa38eec9 code=0x7ffc0000 [ 1028.728023][T13519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1028.774649][ T28] audit: type=1326 audit(2000000023.050:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13567 comm="syz.8.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5dfa38eec9 code=0x7ffc0000 [ 1028.864210][ T28] audit: type=1326 audit(2000000023.050:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13567 comm="syz.8.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dfa38eec9 code=0x7ffc0000 [ 1028.902094][T13575] loop3: detected capacity change from 0 to 1024 [ 1028.957158][ T28] audit: type=1326 audit(2000000023.050:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13567 comm="syz.8.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f5dfa38eec9 code=0x7ffc0000 [ 1029.944935][T13519] team0: Port device team_slave_0 added [ 1030.007491][T13519] team0: Port device team_slave_1 added [ 1030.020468][ T9607] Bluetooth: hci3: command tx timeout [ 1030.392719][T13519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1030.556101][T13519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1030.670413][T13519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1031.687547][T13519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1031.785760][T13519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1032.099020][ T9607] Bluetooth: hci3: command tx timeout [ 1032.238245][T13519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1032.621752][ T5926] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.980653][ T5926] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.054142][T13519] hsr_slave_0: entered promiscuous mode [ 1033.132950][T13519] hsr_slave_1: entered promiscuous mode [ 1033.148343][T13519] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1033.173807][T13519] Cannot create hsr debugfs directory [ 1033.281625][ T5926] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.585977][ T5926] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.000613][T13643] overlayfs: failed to clone lowerpath [ 1037.315489][T13644] overlayfs: failed to clone upperpath [ 1043.409201][T13664] netlink: 'syz.0.1747': attribute type 4 has an invalid length. [ 1046.296333][T13689] fuse: Bad value for 'fd' [ 1047.516354][T13693] loop3: detected capacity change from 0 to 40427 [ 1047.554664][T13693] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1047.583723][T13693] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1047.643266][T13693] F2FS-fs (loop3): invalid crc_offset: 33558524 [ 1047.712107][T13693] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1048.165772][T13519] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1048.594707][T13519] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1049.371150][T13519] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1049.779812][T13519] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1050.384215][T13738] loop3: detected capacity change from 0 to 256 [ 1050.398045][T13738] exfat: Deprecated parameter 'namecase' [ 1050.481867][T13738] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x367e6920, utbl_chksum : 0xe619d30d) [ 1050.702776][ T5926] hsr_slave_0: left promiscuous mode [ 1050.719001][ T5926] hsr_slave_1: left promiscuous mode [ 1050.742963][ T5926] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1050.760395][ T5926] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1050.769310][ T5926] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1050.783419][ T5926] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1050.800355][ T5926] bridge_slave_1: left allmulticast mode [ 1050.802422][T13742] loop3: detected capacity change from 0 to 1024 [ 1050.806196][ T5926] bridge_slave_1: left promiscuous mode [ 1050.806468][ T5926] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.840310][ T5926] bridge_slave_0: left allmulticast mode [ 1050.847268][ T5926] bridge_slave_0: left promiscuous mode [ 1050.853216][ T5926] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.867911][T13707] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1050.902684][ T5926] veth1_macvtap: left promiscuous mode [ 1050.908649][ T5926] veth0_macvtap: left promiscuous mode [ 1050.914385][ T5926] veth1_vlan: left promiscuous mode [ 1050.920048][ T5926] veth0_vlan: left promiscuous mode [ 1054.084721][T13763] overlayfs: missing 'lowerdir' [ 1055.141440][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.148449][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.275078][ T5926] team0 (unregistering): Port device team_slave_1 removed [ 1056.379319][ T5926] team0 (unregistering): Port device team_slave_0 removed [ 1056.405293][T13778] loop3: detected capacity change from 0 to 1024 [ 1056.478297][ T5926] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1056.487177][T13707] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1056.702254][ T5926] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1058.121288][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1058.569442][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1058.569591][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1059.081536][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1059.093096][ T5926] bond0 (unregistering): Released all slaves [ 1059.452742][T13519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1059.617288][T13519] 8021q: adding VLAN 0 to HW filter on device team0 [ 1059.694120][ T3540] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.701545][ T3540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1059.842399][T13807] overlayfs: missing 'lowerdir' [ 1060.181695][ T3540] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.189077][ T3540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1060.975362][T13519] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1061.000382][T13519] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1063.875085][ T5926] ================================================================== [ 1063.883231][ T5926] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x454/0x800 [ 1063.891366][ T5926] Write of size 8 at addr ffff888026b19428 by task kworker/u4:14/5926 [ 1063.899661][ T5926] [ 1063.902042][ T5926] CPU: 1 PID: 5926 Comm: kworker/u4:14 Not tainted syzkaller #0 [ 1063.909809][ T5926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1063.910503][T13834] binder: 13832:13834 ioctl c0306201 0 returned -14 [ 1063.919886][ T5926] Workqueue: netns cleanup_net [ 1063.919942][ T5926] Call Trace: [ 1063.919953][ T5926] [ 1063.919966][ T5926] dump_stack_lvl+0x16c/0x230 [ 1063.942420][ T5926] ? read_lock_is_recursive+0x20/0x20 [ 1063.947844][ T5926] ? show_regs_print_info+0x20/0x20 [ 1063.953089][ T5926] ? load_image+0x3b0/0x3b0 [ 1063.957632][ T5926] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 1063.963050][ T5926] ? __virt_addr_valid+0x18c/0x540 [ 1063.968199][ T5926] ? __virt_addr_valid+0x469/0x540 [ 1063.973343][ T5926] print_report+0xac/0x220 [ 1063.977799][ T5926] ? __xfrm_state_delete+0x454/0x800 [ 1063.983128][ T5926] kasan_report+0x117/0x150 [ 1063.987675][ T5926] ? __xfrm_state_delete+0x454/0x800 [ 1063.993013][ T5926] __xfrm_state_delete+0x454/0x800 [ 1063.998299][ T5926] xfrm_state_delete_tunnel+0x9e/0x1e0 [ 1064.003886][ T5926] ipcomp_destroy+0x4a/0x80 [ 1064.008428][ T5926] ___xfrm_state_destroy+0x1fd/0x4d0 [ 1064.013770][ T5926] xfrm_state_flush+0x50e/0x830 [ 1064.018674][ T5926] xfrm6_tunnel_net_exit+0x46/0x100 [ 1064.023925][ T5926] cleanup_net+0x6f4/0xb90 [ 1064.028527][ T5926] ? ops_free_list+0x3b0/0x3b0 [ 1064.033786][ T5926] ? preempt_schedule_thunk+0x1a/0x30 [ 1064.039314][ T5926] ? process_scheduled_works+0x957/0x15b0 [ 1064.045094][ T5926] ? process_scheduled_works+0x957/0x15b0 [ 1064.050868][ T5926] process_scheduled_works+0xa45/0x15b0 [ 1064.056748][ T5926] ? assign_work+0x400/0x400 [ 1064.061388][ T5926] ? assign_work+0x39e/0x400 [ 1064.066019][ T5926] worker_thread+0xa55/0xfc0 [ 1064.070662][ T5926] kthread+0x2fa/0x390 [ 1064.074782][ T5926] ? pr_cont_work+0x560/0x560 [ 1064.079496][ T5926] ? kthread_blkcg+0xd0/0xd0 [ 1064.084115][ T5926] ret_from_fork+0x48/0x80 [ 1064.088571][ T5926] ? kthread_blkcg+0xd0/0xd0 [ 1064.093199][ T5926] ret_from_fork_asm+0x11/0x20 [ 1064.098026][ T5926] [ 1064.101086][ T5926] [ 1064.103444][ T5926] Allocated by task 12694: [ 1064.107921][ T5926] kasan_set_track+0x4e/0x70 [ 1064.112560][ T5926] __kasan_slab_alloc+0x6c/0x80 [ 1064.117455][ T5926] slab_post_alloc_hook+0x6e/0x4d0 [ 1064.122607][ T5926] kmem_cache_alloc+0x11e/0x2e0 [ 1064.127598][ T5926] xfrm_state_alloc+0x22/0x2a0 [ 1064.132401][ T5926] __find_acq_core+0x7d8/0x19d0 [ 1064.137302][ T5926] xfrm_find_acq+0x6a/0x90 [ 1064.141769][ T5926] xfrm_alloc_userspi+0x57a/0xa90 [ 1064.146838][ T5926] xfrm_user_rcv_msg+0x596/0x870 [ 1064.151898][ T5926] netlink_rcv_skb+0x216/0x480 [ 1064.156840][ T5926] xfrm_netlink_rcv+0x79/0x90 [ 1064.161563][ T5926] netlink_unicast+0x751/0x8d0 [ 1064.166465][ T5926] netlink_sendmsg+0x8c1/0xbe0 [ 1064.171295][ T5926] ____sys_sendmsg+0x5bf/0x950 [ 1064.176099][ T5926] ___sys_sendmsg+0x220/0x290 [ 1064.180891][ T5926] __se_sys_sendmsg+0x1a5/0x270 [ 1064.185790][ T5926] do_syscall_64+0x55/0xb0 [ 1064.190236][ T5926] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1064.196359][ T5926] [ 1064.198702][ T5926] The buggy address belongs to the object at ffff888026b19400 [ 1064.198702][ T5926] which belongs to the cache xfrm_state of size 848 [ 1064.213048][ T5926] The buggy address is located 40 bytes inside of [ 1064.213048][ T5926] freed 848-byte region [ffff888026b19400, ffff888026b19750) [ 1064.226795][ T5926] [ 1064.229129][ T5926] The buggy address belongs to the physical page: [ 1064.235563][ T5926] page:ffffea00009ac600 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888026b19400 pfn:0x26b18 [ 1064.247044][ T5926] head:ffffea00009ac600 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1064.256001][ T5926] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1064.264438][ T5926] page_type: 0xffffffff() [ 1064.268803][ T5926] raw: 00fff00000000840 ffff88801d6c6280 0000000000000000 0000000000000001 [ 1064.277593][ T5926] raw: ffff888026b19400 000000008010000d 00000001ffffffff 0000000000000000 [ 1064.286189][ T5926] page dumped because: kasan: bad access detected [ 1064.292794][ T5926] page_owner tracks the page as allocated [ 1064.298697][ T5926] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 10460, tgid 10445 (syz.7.1129), ts 666163006145, free_ts 666152903082 [ 1064.319833][ T5926] post_alloc_hook+0x1cd/0x210 [ 1064.324753][ T5926] get_page_from_freelist+0x195c/0x19f0 [ 1064.330457][ T5926] __alloc_pages+0x1e3/0x460 [ 1064.335256][ T5926] alloc_slab_page+0x5d/0x170 [ 1064.339982][ T5926] new_slab+0x87/0x2e0 [ 1064.344068][ T5926] ___slab_alloc+0xc6d/0x1300 [ 1064.348759][ T5926] kmem_cache_alloc+0x1b7/0x2e0 [ 1064.353639][ T5926] xfrm_state_alloc+0x22/0x2a0 [ 1064.358416][ T5926] ipcomp6_init_state+0x2bd/0x7f0 [ 1064.363634][ T5926] __xfrm_init_state+0xd8b/0x11c0 [ 1064.368673][ T5926] xfrm_init_state+0x1f/0x80 [ 1064.373335][ T5926] pfkey_add+0x1cee/0x2da0 [ 1064.377763][ T5926] pfkey_sendmsg+0xbed/0x1050 [ 1064.382452][ T5926] ____sys_sendmsg+0x5bf/0x950 [ 1064.387326][ T5926] ___sys_sendmsg+0x220/0x290 [ 1064.392041][ T5926] __se_sys_sendmsg+0x1a5/0x270 [ 1064.396912][ T5926] page last free stack trace: [ 1064.401593][ T5926] free_unref_page_prepare+0x7ce/0x8e0 [ 1064.407080][ T5926] free_unref_page+0x32/0x2e0 [ 1064.411793][ T5926] free_large_kmalloc+0x101/0x1a0 [ 1064.416929][ T5926] bpf_check+0x62c6/0xe970 [ 1064.421375][ T5926] bpf_prog_load+0x11cb/0x16d0 [ 1064.426149][ T5926] __sys_bpf+0x55a/0x800 [ 1064.430395][ T5926] __x64_sys_bpf+0x7c/0x90 [ 1064.434822][ T5926] do_syscall_64+0x55/0xb0 [ 1064.439266][ T5926] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1064.445188][ T5926] [ 1064.447520][ T5926] Memory state around the buggy address: [ 1064.453178][ T5926] ffff888026b19300: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 1064.461255][ T5926] ffff888026b19380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1064.469352][ T5926] >ffff888026b19400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1064.477420][ T5926] ^ [ 1064.482794][ T5926] ffff888026b19480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1064.490864][ T5926] ffff888026b19500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1064.499024][ T5926] ================================================================== [ 1064.507190][ T5926] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1064.514504][ T5926] CPU: 1 PID: 5926 Comm: kworker/u4:14 Not tainted syzkaller #0 [ 1064.522351][ T5926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1064.533148][ T5926] Workqueue: netns cleanup_net [ 1064.537969][ T5926] Call Trace: [ 1064.541363][ T5926] [ 1064.544324][ T5926] dump_stack_lvl+0x16c/0x230 [ 1064.549046][ T5926] ? show_regs_print_info+0x20/0x20 [ 1064.554290][ T5926] ? load_image+0x3b0/0x3b0 [ 1064.558848][ T5926] panic+0x2c0/0x710 [ 1064.563029][ T5926] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1064.569225][ T5926] ? bpf_jit_dump+0xd0/0xd0 [ 1064.573798][ T5926] ? _raw_spin_unlock_irqrestore+0xa9/0x110 [ 1064.579733][ T5926] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1064.585666][ T5926] ? _raw_spin_unlock+0x40/0x40 [ 1064.590561][ T5926] ? __xfrm_state_delete+0x454/0x800 [ 1064.595899][ T5926] check_panic_on_warn+0x84/0xa0 [ 1064.600887][ T5926] ? __xfrm_state_delete+0x454/0x800 [ 1064.606303][ T5926] end_report+0x6f/0x140 [ 1064.610587][ T5926] kasan_report+0x128/0x150 [ 1064.615130][ T5926] ? __xfrm_state_delete+0x454/0x800 [ 1064.620550][ T5926] __xfrm_state_delete+0x454/0x800 [ 1064.625708][ T5926] xfrm_state_delete_tunnel+0x9e/0x1e0 [ 1064.631214][ T5926] ipcomp_destroy+0x4a/0x80 [ 1064.635842][ T5926] ___xfrm_state_destroy+0x1fd/0x4d0 [ 1064.641171][ T5926] xfrm_state_flush+0x50e/0x830 [ 1064.646073][ T5926] xfrm6_tunnel_net_exit+0x46/0x100 [ 1064.651325][ T5926] cleanup_net+0x6f4/0xb90 [ 1064.655886][ T5926] ? ops_free_list+0x3b0/0x3b0 [ 1064.660719][ T5926] ? preempt_schedule_thunk+0x1a/0x30 [ 1064.666231][ T5926] ? process_scheduled_works+0x957/0x15b0 [ 1064.672000][ T5926] ? process_scheduled_works+0x957/0x15b0 [ 1064.677885][ T5926] process_scheduled_works+0xa45/0x15b0 [ 1064.683491][ T5926] ? assign_work+0x400/0x400 [ 1064.688137][ T5926] ? assign_work+0x39e/0x400 [ 1064.692769][ T5926] worker_thread+0xa55/0xfc0 [ 1064.697632][ T5926] kthread+0x2fa/0x390 [ 1064.701737][ T5926] ? pr_cont_work+0x560/0x560 [ 1064.706476][ T5926] ? kthread_blkcg+0xd0/0xd0 [ 1064.711381][ T5926] ret_from_fork+0x48/0x80 [ 1064.715851][ T5926] ? kthread_blkcg+0xd0/0xd0 [ 1064.720479][ T5926] ret_from_fork_asm+0x11/0x20 [ 1064.725298][ T5926] [ 1064.728727][ T5926] Kernel Offset: disabled [ 1064.733067][ T5926] Rebooting in 86400 seconds..