last executing test programs: 18.159636616s ago: executing program 1 (id=439): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x354, &(0x7f0000000780)="$eJzs3c9rI2UYwPEnaTa/lm1yEEVB+qAXvQxt9KwG2QUx4NLdiLuCMLudaMiYlJlQiYitJ6/izX9AcNljbwX1H+jFW7148dZLQdAi4shMZtr8mCRNmpLWfj9Q8kze95mZNzOE5w3M28MPvvm0UXONmtmWZFYlISJyLFKUpEQS4WsyiNPSa0devfnHwYv3Hjx8t1yp3F5XvVO+/1pJVZdXfvzsi1zYbS8j+8WPDo9Kv+8/u//84b/3P6m7Wne12WqrqY9av7XNR7alG3W3YajetS3TtbTedC2n297qttfs1uZmR83mxq38pmO5rprNjjasjrZb2nY6an5s1ptqGIbeysv1kp0hp/pkfd0sz3jAxzPmYd7+9jxvTLPjlM0lESM31FJ9cqHnBQAALqWB+v+7qEYoSvKkoEz0zQWG6/8oDup/f7JwWv8/fenn9s33d5fD+n8vHVf/v/5rN7+v/vePPvf6/4eB7eGK6Mrbnqbzuep/XA4r6aG3En1bfv2fD+fvga8+fLoaBNT/AAAAAAAAAAAAAAAAAAAAAABcBceeV/A8rxC9Rn+njxCE29HWuAeNceWMuv6ZcEWBk/sB/0v3HjyUbPDgXmpZxP56q7pV7b6G7VHHVSnIP8H9EOouOLETNKqvKD/Z22H+9lZ1KWgpi6jYYsmaFKTYlx/Ed96p3F7Trv78RCrv59ekHuSXpCDPxOeXYvPT8srLPfmGFOSXx9ISWzbC77Eo/8s11bffqwzk54J+cd68+MsCAAAAAMBcGarZcPocO383DNW4dn8uL73z8+HfB07m16ux8/NU4YXUYscOAAAAAMB14aY/b5i2bTluZ2SQk0l9MuHexu8nPkhN09kPDoLgxrg+Sz0jPOue0+F/0Jji5GW6kZq2/WdGYj/MaAnXvqbsOT5V047Gf4bO2WkvgeMmpx+75bgr/vnoTMPpCaKfjUb1kbuz7nlUEK2cO6nzc99+/9dsh0iEq/b2Nr2xm50w0iBIDLyzM+GmPfK8iedz4yK/cwAAAAAsRlT059zonbcWe0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFxDc10mbUSw6DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAl8V/AQAA//+Iuvhi") r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x0, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x17, &(0x7f0000000000)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}}]}}]}, 0x58}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) read$FUSE(r7, &(0x7f0000001f40)={0x2020}, 0x2020) setgroups(0x0, &(0x7f0000000000)) ftruncate(r7, 0x0) 17.95182193s ago: executing program 1 (id=442): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x18b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs$namespace(r0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x6) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x9, &(0x7f0000000080)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x207601a}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, 0x0, 0x0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="1100"/16], 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c) sendto$inet6(r3, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc397", 0x9d, 0xc001, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000700)="b6aa8c0570e83262ade788182e7e2207bb3c4e8e2836ccdaea2073996dc534bdfcd8a85f6bb4bcb66931b782f8e5745e89dc50c661f1a1fade03d3c9575a646abfe61ca680", 0x45, 0x4000000, 0x0, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14) 14.935870415s ago: executing program 1 (id=447): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nomblk_io_submit}, {@minixdf}]}, 0x2, 0x4fa, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000400)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000001b00)='./file0\x00', &(0x7f0000001b40), 0x0, &(0x7f0000001c40)={[{@subsystem='net_prio'}, {@subsystem='pids'}]}) io_setup(0x6, &(0x7f0000002140)=0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) io_submit(r5, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x1}) 13.430763787s ago: executing program 3 (id=450): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x5e, &(0x7f00000000c0), 0x1, 0x45d, &(0x7f0000000580)="$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") bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=@tcp6}, 0x20) socket(0x10, 0x3, 0x0) get_robust_list(0x0, 0xffffffffffffffff, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) fcntl$lock(r3, 0x24, &(0x7f0000000740)) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000001700)='team_slave_1\x00', 0x10) connect$caif(r4, &(0x7f0000000080)=@rfm={0x25, 0x0, "423e650059ef6c664b6dff801d261cd8"}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000000)={'wg2\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x1ff}}) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) 13.425472728s ago: executing program 2 (id=451): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, 0x0, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x300}}) getsockopt$IPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x43, &(0x7f00000000c0)={'NETMAP\x00'}, &(0x7f0000000100)=0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r5, @ANYRES64=r0], 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) 12.714026586s ago: executing program 0 (id=452): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000140), 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x300}}) getsockopt$IPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x43, &(0x7f00000000c0)={'NETMAP\x00'}, &(0x7f0000000100)=0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r5, @ANYRES64=r0], 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) 10.477196698s ago: executing program 2 (id=453): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x0, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0xf, &(0x7f00000000c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) recvmsg$unix(r3, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xa000}], 0x3}, 0x0) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000010000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x90) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) 10.475995538s ago: executing program 4 (id=454): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x0, &(0x7f00000002c0)}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f000000ac40)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) close(r5) flock(r7, 0x5) ioctl$USBDEVFS_REAPURB(r7, 0x4008550c, 0x0) 10.474569678s ago: executing program 0 (id=455): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x354, &(0x7f0000000780)="$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") socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x0, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x17, &(0x7f0000000000)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x58, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7fffffffffffffff}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) read$FUSE(r6, &(0x7f0000001f40)={0x2020}, 0x2020) setgroups(0x0, &(0x7f0000000000)) 9.7038236s ago: executing program 1 (id=456): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nomblk_io_submit}, {@minixdf}]}, 0x2, 0x4fa, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000001b00)='./file0\x00', &(0x7f0000001b40), 0x0, &(0x7f0000001c40)={[{@subsystem='net_prio'}, {@subsystem='pids'}]}) io_setup(0x6, &(0x7f0000002140)=0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_unlink_exit\x00'}, 0x10) io_submit(r5, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x1}) 9.702996161s ago: executing program 3 (id=457): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x20000, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x1, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, @void, @value, @void, @value}, 0xffffffffffffff8f) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x4, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x30, &(0x7f00000001c0)=""/48, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xe}, 0x10, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000340)=[{}, {}, {}], 0x10, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r6, r5, 0x0, 0x7ffff000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x1, {0x2, 0x80, 0x14}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x25}}, @FRA_DST={0x8, 0x1, @multicast2}]}, 0x2c}}, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x3, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r7, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, 0x8, 0x0, 0x0}}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r1) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x24000810) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x1a, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000009600000095000000000000007ced841af5d4729f0d79df88384892f4116b24dfcc6bba48cc0cba936a66ce0faec149577199663627f5a6d2b0b8f598eb1b575f4b0f6fa499ce6bdf5d6d52b320194b0db231461601ac16264972d031a94e299a2acfffc941d8f215577de2aada85c55f3d170e03bbda44cec3f16e50c2870af1abb7a2ae42193f03a76e2f0460854e43a55fea12a8a7655fbb28307022e86e61f9001431ea1b68e29ce2"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 9.699274501s ago: executing program 4 (id=458): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = gettid() tkill(r0, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x335}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r3, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r3, &(0x7f0000000000)="904ae56e0dd4e6cafa", 0x9, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x4058534c, &(0x7f00000000c0)={0x80}) tkill(r1, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f00000003c0)) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xbb) ioctl$TIOCMBIS(r4, 0x5416, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000540)=ANY=[], 0xb9) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4c5, &(0x7f0000000f00)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x17) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x4, &(0x7f0000000640)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa9}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 9.668057543s ago: executing program 2 (id=459): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nomblk_io_submit}, {@minixdf}]}, 0x2, 0x4fa, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000400)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000001b00)='./file0\x00', 0x0, 0x0, &(0x7f0000001c40)={[{@subsystem='net_prio'}, {@subsystem='pids'}]}) io_setup(0x6, &(0x7f0000002140)=0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_unlink_exit\x00'}, 0x10) io_submit(r5, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x1}) 7.743258934s ago: executing program 0 (id=460): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev}, 0x10) sendto(r3, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r4) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000", @ANYRES64], 0x0, 0x28f5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x90) syz_io_uring_setup(0x0, 0x0, &(0x7f0000000240), 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0xfffffffe, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300), 0x0) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) sendmsg$nl_route_sched(r6, &(0x7f0000013a40)={0x0, 0x0, 0x0}, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0xf9, &(0x7f0000000600)=""/249, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 7.740420654s ago: executing program 3 (id=461): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001c80)=[{{&(0x7f00000002c0)=@xdp={0x2c, 0x1}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)="af23640fcd8c4525b090694d455585d8c93b4a888cab97c5322da775cd0571cd9fc035bb3e2c18e7caf2dff7c40d12ce5dd928dee6879e9751dc281b0d4ae5741a034233c144f434e9c6df7772e8b2fc9a36eb058f08543361d287187df22df78146d55a49f6f0c85e549debfe525339d2dc54557ee7860d9839c0e8b62421ab458a0b4c52647cb293bb193b74c85b5e19914970a0f627fc0088a157b855e7bfd3ba30515707e2d187", 0xa9}, {&(0x7f0000000400)}, {&(0x7f00000004c0)="a9192db9603f15dff933f885f7ce93b0780fee91faa09ccddf0e8f4c4c002136d79ded97265b7dccae3679190c9e74549682acca38d511557e7f8ee85cea9acc518f0dd48cfdc3aacb5522109d0820b53bc229c9fe7ca50345ffbe99583cd290986ab1c8f753e4016556a7067ee384db329d308054ddf868c2d225e5b4224088c19192c01ac92abd81dbcb209a73b483c230bfac0c9dbd1b156feaffa4bb49440dfc1c59e2e85aa7ddf38a239e65d9b1425b11a733f09030a5ca508fad1b", 0xbe}, {&(0x7f0000000580)="089776a12aed6fa3b0d0bdd62bb805c7bfab4abb55682cc5a03539a605a7a811e6", 0x21}, {&(0x7f0000000b80)="bee18e3020afdbc49db6b4a295efed14ee70eddae01baa99bbb9d72d6532a788372480200980c8b70bbd1327fd4b8ff5ca34784fdaf0bb0e5f22ab8867f910883a964a49fefe488a5a771d176ada44511c57532f488a92e3b1b4f1583875cbaf9a7874cfe312f479b8", 0x69}], 0x5, &(0x7f0000000d00)=[@mark={{0x14, 0x1, 0x24, 0xffffffff}}, @timestamping={{0x14, 0x1, 0x25, 0xf95}}], 0x30}}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000d40)}, {&(0x7f0000000d80)="7f0478af9c0907db67cb426a6d5873e778546a8171def8d8abbdb3d48989fcd39c3be2f27f856f8617ddd9656b2a9f4cda785d66187893473bb441d9929e2c1a85457fa9f21b11505ce6bbd2c7fd877253cc23f0aef28bc1f2ed53cefa77a78283c48e4e77f95a1d0d380052f2b99db22842ef9bc532f22fc9e488636bac735d8662d1dbab51ec7faa9719bd01268648479aea229a75b8f00e6b1f28aae82d9e889e57f0197fd2953ecdb2e8d5610b24b82963aa9df3cc3364f9779c986f677174fb5479a922b967a39230739e8bdd68cc3c6087715d83f3920d", 0xda}, {&(0x7f0000000e80)}, {&(0x7f0000000f80)="781d7c3bd85378667a68fb9a9415998a821dc1", 0x13}], 0x4, &(0x7f0000001040)=[@timestamping={{0x14, 0x1, 0x25, 0xfffffff8}}], 0x18}}, {{&(0x7f0000001080)=@qipcrtr={0x2a, 0x3, 0x3fff}, 0x80, &(0x7f0000001640)=[{0x0}, {0x0}, {&(0x7f0000001300)}, {&(0x7f0000001340)="76b0b0fb3e5c912b523db10e62a5636e29f56d87e7e2bdc3235f9a41cfb7c40d278cb5cc61fdff8d000cba99e1df298c5c2f03f9c43f4376eea4e2a4a43e45ef8ca92af5fbf4b0f3472667da9372552c8cfd90b26201bee92bbd6217d518eff9b08b8748567a6280242fdc6f62da9ce102295301e81801c132edacfcf866a885fae2d59f0c4e77fb0fdef97c50c08146611b3de0a3e5e82e6a00b500b4ac7d0d7136913ce20d7dad52d204d6a2b7e9fb76d0", 0xb2}, {&(0x7f0000001440)="eed83a6bf0892809add075b7243e8492a7b75a4c56eb02a430837a00f8d17be6c00fce736b7f1686cd9d8ffc4cc10df2f32cfca8f11f489f013990464ccf50c202c173fb2a05b18437e6de14f2012669b19a1bdbfbb9a50d8e9734e8045c3ba6d67bcb1b5e2177bcf41e587f0ac3985f8300858e567875acfbfa4f9063dbde804395b2fd991933dc24cc", 0x8a}, {&(0x7f0000001580)="0026ef626c0a17e1f5cc7a3ffca8e36427dd18d5b8a41e9b9346ea3bf58f3e3bf8ffccc342893e9c3dddbb5570888a6e2247f61541b820064aabddba49b6a2227207e0fbcc4c4739eb1591d61a447eaea7360d6b8360b19e6c2922baaddf1e02fbd745951dccc1ba4bc75f", 0x6b}], 0x6}}, {{&(0x7f00000016c0)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001740)="6a21001699e7f0d7eca489274975869412ba4a2b01b13e5c6779c5e4a74ffbb7e78e085546a7867ebd4001fd63f4b652167720514c775c840b0e6327e9ff764af13ba912fdfd1fe5b9c1576e782da49a806dceed76603a190a559bec9cffc09148e9cc288ead9caa5a710a081230bc78d5c6fbb0e40526c0ee48caff7eee", 0x7e}, {&(0x7f0000001800)}, {&(0x7f0000001900)}, {&(0x7f0000001dc0)="ca89139ec4b0ac148efc3dc27ea1a1ce7360e02a1ebeec96d7e14bcb36c5b69575ec285e960c1be717cb4f9407ad37afda2bfaa1197c18141a55e70b212e5704b66e6a1d9a16fc02ac758c9f16bd75b6d876b7e2045f3a2c3045e1d194813e9e4c0d4c2db50dae8cdfe01458ef6bcd3af877b9f101e480f91534508d8026a6a6874171f721c65709b032c8302cccaf80fc9cddeb47f3b83d2b3d590f0578c5b2e00de1ba1569f6f4eec8aad016e27385a0d623503454a3a3116d46ef9d1b793bfa1d8a9234bd4a95efee74f596ba803257004c6a2c2e997134", 0xd9}, {&(0x7f0000001300)}], 0x5, &(0x7f0000001a40)}}, {{&(0x7f0000001b00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}, 0x1, 0x1, 0x2, 0x4}}, 0x80, &(0x7f0000001c40)=[{0x0}], 0x1}}], 0x5, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000140)) setresuid(0xee01, 0x0, 0x0) keyctl$restrict_keyring(0xb, 0xfffffffffffffffc, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000001580)='asymmetric\x00', 0x0, &(0x7f0000000300)="303e30000000000002d190c937dc6914243b0402d6dcb7154fe6727ae888746b024ee670a5882a0ad79716", 0x2b, r1) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000001300)={r1, 0xff8, 0x84}, &(0x7f0000001f40)={'enc=', 'pkcs1', ' hash=', {'ghash-ce\x00'}}, &(0x7f0000001fc0)="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", &(0x7f0000002fc0)=""/132) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 4.574933659s ago: executing program 3 (id=462): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000580)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000009b70499150661b9b87c7ed48ed584d55115e4e936a4d6304ceb4d132206fc0553e26f34397089791afe54d594ee4e6d13e42264298496785b3e50520c8"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$hfsplus(&(0x7f00000003c0), &(0x7f0000000180)='./file0\x00', 0x201049e, &(0x7f00000001c0)=ANY=[], 0x1, 0x640, &(0x7f0000000400)="$eJzs3c1vHGcdB/DvbDZONpTUTZM2oEq1GgkQFolf5IK5EBBCPlSoKgfOVuI0VjZpsV3kVoia92sP/QPKwTdOSNwjlQsXuPXqYyUkLr1gTotmdna98VvtNvGu288nmn2eZ5+ZZ37Pb3Z2dteKJsCX1sJkmg9TZGHylfWyvbU5297anL3fqyc5l2QjaSZpJCn+2+l0PkxuJkV/mGJXucf7y/OvffTJ1sfdVrNeqvUbh213NBv1kokkZ+rycY1363OPV/RneDPJtbqEoTubpPOIX/zjqX7PgNZ+W58/kRiBJ6voXjf3GE8u1Cd6+Tmge1XsXrNPtY1hBwAAAAAn4OntbGe9uDjsOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOC02Ni5/39dre7vXxQbyUSK3v3/x+q+1PXR8uLxVn/4pOIAAAAAAAAAgBP04na2s56LvXanqP7m/1LVuFw9fiVvZTVLWcn1rGcxa1nLSqaTjA8MNLa+uLa2Mn2ELWf23XLmUwI9V5etxzNvAAAAAAAAAPiC+W0Wdv7+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAo6BIznSLarncq4+n0UxyPslYud5G8q9e/TR7OOwAAAAA4AQ8vZ3trOdir90pqu/8z1Xf+8/nrTzIWpazlnaWcrv6LaD7rb+xtTnb3tqcvV8ue8f94X+OFUY1Yrq/Pey/56vVGq3cyXL1zPXcyhtp53Ya1Zalq3U8vVF3xfWbMqbiB7UjRna7LsuZv1eXe7x7rMke5Jg/poxXGTnbz8hUHVuZjWd6R2b/I3TMo7N7T9Np9IO9vGtPuybxmXJ+oS7L+fzxoJwPxe5MzAy8+p47POfJN//2l5/fbT+4d/fO6uToTOloztRlp3ps7c3E7EAmnv8iZ2KPqSoTV/rthfwkP8tkJvJqVrKcX2Yxa1nKRH5c1Rbr13MxcMofkKmbj7Re/bRIxupXaPdgHS+ml6ptL2Y5P80buZ2lvFz9m8l0vpu5zGV+4AhfOfwIV2d944CzvvPVfYO/9q260kryp7ocDWVenxnI6+B77njVN/jMTpYuHSFLx3xvbH69rpT7+F1djobdmZgeyMSzh2fiz9Xbymr7wb2Vu4tvHm13l96rK+V59IeRukqUr5dL5cGqWo++Osq+Z/ftm676Lvf7Gnv6rvT7umfqxoFn6lj9GW7vSDNV3/P79s1WfVcH+vb7vAXAyLvw7QtjrX+3/tn6oPX71t3WK+d/dO57514Yy9m/n/1+c+rMNxovFH/NB/n1zvd/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgs1t9+517i+320squSqfTefeArtNc6d3O7AR3+rWnkpGY+1Ar/+t0OvUzxSjEc3ilUxuVeIZRGfIbE/DE3Vi7/+aN1bff+c7y/cXXl15fejA/Nzc/NT/38uyNO8vtpanu47CjBJ6EnYt+1TzmragBAAAAAAAAAACAYTiJ/04w7DkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9vCZJoPU2R66vpU2d7anG2XS6++s2YzSSNJ8auk+DC5me6S8YHhioP28/7y/GsffbL18c5Yzd76jcO2O5qNeslEkjN1+bjGu/W5xyv6MywTdq2XOBi2/wcAAP//fTAP4A==") r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r4, &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) renameat2(r4, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r5, &(0x7f0000000980)='./bus\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000c00000000040000000100000f01000200000000000400000000000000d7000000000000000f0300"], &(0x7f0000000040)=""/136, 0x52, 0x88, 0x1, 0x0, 0x0, @void, @value}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r8, &(0x7f0000001040)=[{&(0x7f0000000a40)="b8c04c5fb1a1451aea55cca3e5e3dc186a7d3105a1400d7b2d87166376a465ace3c42ae356cdaf4137b4475dd486ea6b8220a8cacef2247034c7c8670ed2e45dc3c831b742b9a2923bfb5b76d2b1adb8e86a3eb854882b74a5017be4960f71e45d43d17612db0261a3107b53b389eb3f03d5bf4ead97eaf2b264d5e9da2440b8ed3a72f7e190b51de9d99983caa1a81f66dc52c951cffc52dc687b4bd4eeca8760b1871108f15c6cbc6bd377c572f61f906ae9ce29890337ef9060e939", 0xbd}, {&(0x7f0000000cc0)="6aa8b517e8af5644fc7f9aad2163ad6f0f9f0d9a2b5e0ac955b095b88eda589b67b98fa995a51704e71b031dbd87797e56755108d38ec08f28f55fe4203fdb413e7e7958f27690c389ca007cfbdb8834a5a59b7ffc029cb21422d093916c5ee8bb9add3f6a46cd681efe459787b1d4c0a2a324d810f8b4980ed442600c4c64c5", 0x80}, {&(0x7f0000000d40)="b2c1318dd022208fe0e382829bb940a9080fb0f197f8cc469b4bd5fb41ded47b89f1c59e8a5d4e71f5ca1f08c27aa2cd44a38d496ae85e74731eab43041cfa344ec8263b8f16b94617857b7f5a75098bb53cea484d5143d6ef8522560750e9c5707d00a3f6282d808650bb6a388eca05fe6cf54635de54", 0x77}, {&(0x7f00000001c0)}, {&(0x7f0000000e40)="5be5f796ad800b4f99a4cee24d5b85c3f3657d947cdba85e06c80601e31fe2f7b679db020002b31ed88e4aec1947510f7c57d5a73f6e49dff63f540dd2", 0x3d}, {&(0x7f0000000e80)="8290efa29ee99da3da4ead369d2eac1ef03845be2002f08ed7ef600f5bd91539167e7b878d389e64e3948ce14b6acd66a27d709ae8683f5a16770b4b995b58f05c2507dab59547f1afafbeb1799ff582", 0x50}], 0x6) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) 4.56729596s ago: executing program 0 (id=463): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = socket$inet(0x2, 0x3, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="70020000", @ANYRES16=r3, @ANYBLOB="010000000000000000000a0000004400098008000200000000000800010000000000080002000000000008000100000000000800010000000000080002000000000008000200000000000800010000000000580006804b00040067636d286165732900000000000000000000000000000000000000000000000023000000b6e2dc52292c17995c7ef5f620f55f1eeee0de279ab5cd4284ddc477b63344ab709f040008000600f9ffffffb80004800900010073797a30000000001300010062726f6164636173742d6c696e6b"], 0x270}}, 0x0) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x61, 0xffffffffffffffff, &(0x7f0000003a80)=0x44) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x2004000, &(0x7f0000000740)={[{@gid={'gid', 0x3d, 0xee01}}, {@type={'type', 0x3d, "23faf989"}}, {@creator={'creator', 0x3d, "21ee2dd3"}}, {@codepage={'codepage', 0x3d, 'cp874'}}, {@dir_umask={'dir_umask', 0x3d, 0x7ff}}]}, 0x3, 0x286, &(0x7f0000000200)="$eJzs3c9qE1EUx/HfnaRtakud/pGCy2rBldi6ETeK9CFciKhNhGKooBXUlbgWcSe4d+dafAE3rsQX0JUrHyC7kXtnkkzi/Gs0uU38fiAhOvfcOaczydwTSCIA/60be9/fX/5pb0aqqSbpqhRIakh1SWe02XhyeHRw1G41iyaquQh7M4ojzR9j9g9bWaE2zkUkQvuvupbT/4fxiKIo+uE7CXjnnv0ZAmkheXa67Y2JZzYeL3wn4JnpqKOnWvGdBwDAr+T6HyTX+eVk/R4E0nZy2Z+p63/HdwKepa7/rsuKjD2+p92mfr/nWji7Peh2iQUz5m6ZV3xmDSwwTVlX6XIJFu8ftFsX9x+2m4Fe6loiNWzD3TfjU7erJNutgmQzlNeeZ8nVMGdr2M3Jf32UPb49fio95ov5am6bUO/U7K3/6pGxh8kdqdAdqbAXEOd/KX9GV2UYj8qpctXt5GyyB336UKHKRnZHou4ZtarBNwjCbp5v5gui1oai4up28qtzUeuZUbslURvDUf2zOT9ydDllDzGvzU2zpV/6qL3U+j+wf+1tVXlm2jFuZHJmFNZTdyPDCokFldJHVXOFW1/pnq5o5fGz5w/uttutR1PxoHYy0pj4g7omsa/uCXMiSp7tB/rreWpa0FhTLXrxWPyXr1PwqH/QtXnLdzLwwa67TNz/pfqV626b7ZNCt06fU9Y6PSqbPDXjTk5vsObuTx2rg1vK7+Cq9lznLkjnC/b4eXDaMMlzRpg9fdMd3v8HAAAAAAAAAAAAAAAAAACYNtU+D7CQjB7t4wSeSwQAAAAAAAAAAAAAAAAAAAAAYOqN//d/U9/qXf77v+5buvn9X2AyfgcAAP//C8h7PA==") syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$packet(0x11, 0x0, 0x300) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4e4, &(0x7f00000001c0)={@dev, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x4ae, 0x3a, 0x0, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9, "7db4265c9f6aa3b46521199ea778d105c24ab977edb940e63f49a7129f45462e5eecc39f468544e3c13aa9017ccd638e784912ef2c2589d0d45cf0ed4bbe909218459bcbeaf63697ae"}, {0x0, 0x9, "1598a4a8a719ffe0621615f6d04dcae3360546cf06f2665bae2296931fd1d71c1f7e8f222b9ddc4e0bfb5e5c9a484353b785e79b4d8181cf146261723484c54803466e8bedb8ecd2"}, {0x0, 0x2, "d429145c793e823829b4376332b2c98aee"}, {0x0, 0x7e, "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"}]}}}}}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10142, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001400), 0x111000, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r8, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x58, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) sendfile(r8, r8, 0x0, 0x7ffff000) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000001300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="14000000a6c4464c7cae406855000000000000000d39b7efd0f1ad76d394e4f03377930b5d9f326544b6f020356fd3e1aec15d57d663db23d6740839c50e967dfe749b0afb19f2e1438fdb7731bf485c5b902048e8c5b3478464a59f57659f4c941620e05d48f6b5840fc763ba74f5a5d7c8300ac155145872736e6486bfe696e2ff8db48bfb5fd28f99d4cdffcf8a2962674d08e82d864f84cd2072cb825009b20b5588566e35a15a034443a96f13c72c82ec487996b2159202043439e00ad05dce7dca31829b9dae7a6831976372030092b09dc90ccea5e70f70d4759486", @ANYRES16=r4, @ANYBLOB="100029bd7000fedbdf2512000000"], 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x10) syz_mount_image$reiserfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x10, &(0x7f0000000080), 0xfb, 0x111c, &(0x7f0000000180)="$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") 4.453618857s ago: executing program 4 (id=464): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x98, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x2c}}}}, [@NL80211_ATTR_IE={0x26, 0x2a, [@mic={0x8c, 0x10, {0x4bd, "2cb9d78b6661", @short="6bbfe24f24b160e1"}}, @cf={0x4, 0x6, {0x3, 0x53, 0x6, 0x4}}, @channel_switch={0x25, 0x3, {0x1, 0x95, 0xe}}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x9}, @NL80211_ATTR_FILS_ERP_USERNAME={0x6, 0xf9, 'D\\'}, @NL80211_ATTR_FILS_ERP_REALM={0x32, 0xfa, "e2cbcac1ed7b51fc6eab82aaf35f91fa6dfa8a1c948671202a7e4762e7f4ebcf500aa752cbbc6ff0baf12c72a1c4"}, @NL80211_ATTR_FILS_ERP_RRK={0x4}]]}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x8008001) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r2, 0x5a4, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001) getresuid(&(0x7f0000000440)=0x0, &(0x7f0000000480), &(0x7f00000004c0)) setuid(r3) r4 = signalfd4(r0, &(0x7f0000000500)={[0x6]}, 0x8, 0x80800) setxattr$trusted_overlay_redirect(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x8, 0x3) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x50, 0x0, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) socket$nl_xfrm(0x10, 0x3, 0x6) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), r4) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x30, r5, 0x70e, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000) prctl$PR_SET_NAME(0xf, &(0x7f0000000940)='trusted.overlay.redirect\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000980)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0xb, 0x80000000, 0x3a, 0x80, 0x1, 0x581f, '\x00', r6, r4, 0x0, 0x1, 0x0, 0x2, @void, @value, @void, @value}, 0x48) syz_open_dev$tty1(0xc, 0x4, 0x3) r7 = syz_open_dev$usbfs(&(0x7f0000000a40), 0x3, 0x20000) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000a80)={@private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @mcast1, 0xe, 0x9, 0xfff4, 0x100, 0x101, 0x1000100, r6}) syz_genetlink_get_family_id$gtp(&(0x7f0000000b40), r4) r8 = syz_open_dev$rtc(&(0x7f0000000d00), 0x3, 0x500) statx(r4, &(0x7f0000000d40)='./file0\x00', 0x1000, 0x4, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0), 0x1100000, &(0x7f0000000e80)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@uname={'uname', 0x3d, '/+:!:'}}, {@fscache}, {@afid={'afid', 0x3d, 0x8}}, {@afid={'afid', 0x3d, 0x3}}], [{@euid_eq={'euid', 0x3d, r3}}, {@audit}, {@fowner_eq={'fowner', 0x3d, r9}}, {@smackfsdef={'smackfsdef', 0x3d, 'trusted.overlay.redirect\x00'}}]}}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r7, 0x8982, &(0x7f0000000f80)={0x1, 'veth1_to_hsr\x00', {}, 0x444}) r10 = gettid() capget(&(0x7f0000000fc0)={0x19980330, r10}, &(0x7f0000001000)={0x5, 0x9b10, 0x5, 0x6, 0x6, 0x3}) 4.280489999s ago: executing program 2 (id=465): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000140), 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x300}}) getsockopt$IPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x43, &(0x7f00000000c0)={'NETMAP\x00'}, &(0x7f0000000100)=0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r5, @ANYRES64=r0], 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@name, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) 3.666163641s ago: executing program 3 (id=466): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff0e}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000780)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bridge\x00', 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'veth1_virt_wifi\x00', &(0x7f00000000c0)=@ethtool_drvinfo={0x3, "980db8b526d9548b30c82c3b5a42577dc7a9ca2e3f94776c033fc42fe6c3b7a9", "29a3012abf34338853e0d22ff28f3075f77ef0af3c4e0c958f8ba059ee353e2d", "1a9a2c4e49137477f1678e64154f2afca8b2e4170baf5581dee5bd4fd5a4b6a1", "b55595429568ad557306775116d832618a484062cfcb36621e7ae4be83c8344f", "f6dc1d17e213d7226fe9d68e6159e6dae795817fa10c130bb294ad6652023c12", "9fd0b2417f0e00367af9ab93"}}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) openat$cgroup_procs(r2, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000140)={@random="5b1a033f2511", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @adiantum, 0x0, @desc1}) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12014000f273a440cd061501c3d90102030109021b0001000000000904000c019d0178000905", @ANYBLOB="872ff7"], 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x60, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PBURST={0x8}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x968}}}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x211, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xe, 0xd}, {0x4, 0x4}, {0xffff, 0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7fff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 3.66438899s ago: executing program 1 (id=467): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nomblk_io_submit}, {@minixdf}]}, 0x2, 0x4fa, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000400)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000001b00)='./file0\x00', &(0x7f0000001b40), 0x0, &(0x7f0000001c40)={[{@subsystem='net_prio'}, {@subsystem='pids'}]}) io_setup(0x6, &(0x7f0000002140)=0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) io_submit(r5, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x1}) 2.445764543s ago: executing program 2 (id=468): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, 0x0, &(0x7f0000000840)=0x1e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="180000002200f30c0000000000feff007600000002009500000000008000000000"], &(0x7f0000000280)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r7}, 0x39) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x8, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00'}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = io_uring_setup(0x7ac3, &(0x7f0000000080)={0x0, 0x0, 0x10d2}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r9, 0xb, &(0x7f0000000000), 0x0) 2.239964947s ago: executing program 4 (id=469): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x0, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0xf, &(0x7f00000000c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r5, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmsg$unix(r3, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xa000}], 0x3}, 0x0) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000010000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x90) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) 2.148949364s ago: executing program 0 (id=470): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x354, &(0x7f0000000780)="$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") socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x0, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x17, &(0x7f0000000000)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x58, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7fffffffffffffff}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) read$FUSE(r6, &(0x7f0000001f40)={0x2020}, 0x2020) setgroups(0x0, &(0x7f0000000000)) 1.097638075s ago: executing program 1 (id=471): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0xb}, @void, @void, @val={0x5, 0x65, {0x7, 0x71, 0xc1, "deb073f9c3428786f59e36dcb1dc5670cf102b5f86bacbc49a509ae32463b3e59d9e103080fd9f6b38c331735eb86ffe2a9a13a5ba1583f5b3713a384eb1b94ccbb84ce8462b9f4985fe1efef79b9d7f6c0944fdff1fc0ae8c6bd7d86a82a123d28b"}}, @void, @void, @void, @void, @void, @val={0x71, 0x7}, @val={0x76, 0x6, {0x21, 0x3, 0x2f, 0xff89}}}, 0xa7) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in6=@dev}}, 0xe8) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="100000001d0001"], 0x10}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r6, 0x5, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 1.054711508s ago: executing program 4 (id=472): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001c80)=[{{&(0x7f00000002c0)=@xdp={0x2c, 0x1}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)="af23640fcd8c4525b090694d455585d8c93b4a888cab97c5322da775cd0571cd9fc035bb3e2c18e7caf2dff7c40d12ce5dd928dee6879e9751dc281b0d4ae5741a034233c144f434e9c6df7772e8b2fc9a36eb058f08543361d287187df22df78146d55a49f6f0c85e549debfe525339d2dc54557ee7860d9839c0e8b62421ab458a0b4c52647cb293bb193b74c85b5e19914970a0f627fc0088a157b855e7bfd3ba30515707e2d187", 0xa9}, {&(0x7f0000000400)}, {&(0x7f00000004c0)="a9192db9603f15dff933f885f7ce93b0780fee91faa09ccddf0e8f4c4c002136d79ded97265b7dccae3679190c9e74549682acca38d511557e7f8ee85cea9acc518f0dd48cfdc3aacb5522109d0820b53bc229c9fe7ca50345ffbe99583cd290986ab1c8f753e4016556a7067ee384db329d308054ddf868c2d225e5b4224088c19192c01ac92abd81dbcb209a73b483c230bfac0c9dbd1b156feaffa4bb49440dfc1c59e2e85aa7ddf38a239e65d9b1425b11a733f09030a5ca508fad1b", 0xbe}, {&(0x7f0000000580)="089776a12aed6fa3b0d0bdd62bb805c7bfab4abb55682cc5a03539a605a7a811e6", 0x21}, {&(0x7f0000000b80)="bee18e3020afdbc49db6b4a295efed14ee70eddae01baa99bbb9d72d6532a788372480200980c8b70bbd1327fd4b8ff5ca34784fdaf0bb0e5f22ab8867f910883a964a49fefe488a5a771d176ada44511c57532f488a92e3b1b4f1583875cbaf9a7874cfe312f479b8", 0x69}], 0x5, &(0x7f0000000d00)=[@mark={{0x14, 0x1, 0x24, 0xffffffff}}, @timestamping={{0x14, 0x1, 0x25, 0xf95}}], 0x30}}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000d40)}, {&(0x7f0000000d80)="7f0478af9c0907db67cb426a6d5873e778546a8171def8d8abbdb3d48989fcd39c3be2f27f856f8617ddd9656b2a9f4cda785d66187893473bb441d9929e2c1a85457fa9f21b11505ce6bbd2c7fd877253cc23f0aef28bc1f2ed53cefa77a78283c48e4e77f95a1d0d380052f2b99db22842ef9bc532f22fc9e488636bac735d8662d1dbab51ec7faa9719bd01268648479aea229a75b8f00e6b1f28aae82d9e889e57f0197fd2953ecdb2e8d5610b24b82963aa9df3cc3364f9779c986f677174fb5479a922b967a39230739e8bdd68cc3c6087715d83f3920d", 0xda}, {&(0x7f0000000e80)}, {&(0x7f0000000f80)="781d7c3bd85378667a68fb9a9415998a821dc1", 0x13}], 0x4, &(0x7f0000001040)=[@timestamping={{0x14, 0x1, 0x25, 0xfffffff8}}], 0x18}}, {{&(0x7f0000001080)=@qipcrtr={0x2a, 0x3, 0x3fff}, 0x80, &(0x7f0000001640)=[{0x0}, {0x0}, {&(0x7f0000001300)}, {&(0x7f0000001340)="76b0b0fb3e5c912b523db10e62a5636e29f56d87e7e2bdc3235f9a41cfb7c40d278cb5cc61fdff8d000cba99e1df298c5c2f03f9c43f4376eea4e2a4a43e45ef8ca92af5fbf4b0f3472667da9372552c8cfd90b26201bee92bbd6217d518eff9b08b8748567a6280242fdc6f62da9ce102295301e81801c132edacfcf866a885fae2d59f0c4e77fb0fdef97c50c08146611b3de0a3e5e82e6a00b500b4ac7d0d7136913ce20d7dad52d204d6a2b7e9fb76d0", 0xb2}, {&(0x7f0000001440)="eed83a6bf0892809add075b7243e8492a7b75a4c56eb02a430837a00f8d17be6c00fce736b7f1686cd9d8ffc4cc10df2f32cfca8f11f489f013990464ccf50c202c173fb2a05b18437e6de14f2012669b19a1bdbfbb9a50d8e9734e8045c3ba6d67bcb1b5e2177bcf41e587f0ac3985f8300858e567875acfbfa4f9063dbde804395b2fd991933dc24cc", 0x8a}, {&(0x7f0000001580)="0026ef626c0a17e1f5cc7a3ffca8e36427dd18d5b8a41e9b9346ea3bf58f3e3bf8ffccc342893e9c3dddbb5570888a6e2247f61541b820064aabddba49b6a2227207e0fbcc4c4739eb1591d61a447eaea7360d6b8360b19e6c2922baaddf1e02fbd745951dccc1ba4bc75f", 0x6b}], 0x6}}, {{&(0x7f00000016c0)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001740)="6a21001699e7f0d7eca489274975869412ba4a2b01b13e5c6779c5e4a74ffbb7e78e085546a7867ebd4001fd63f4b652167720514c775c840b0e6327e9ff764af13ba912fdfd1fe5b9c1576e782da49a806dceed76603a190a559bec9cffc09148e9cc288ead9caa5a710a081230bc78d5c6fbb0e40526c0ee48caff7eee", 0x7e}, {&(0x7f0000001800)}, {&(0x7f0000001900)}, {&(0x7f0000001dc0)="ca89139ec4b0ac148efc3dc27ea1a1ce7360e02a1ebeec96d7e14bcb36c5b69575ec285e960c1be717cb4f9407ad37afda2bfaa1197c18141a55e70b212e5704b66e6a1d9a16fc02ac758c9f16bd75b6d876b7e2045f3a2c3045e1d194813e9e4c0d4c2db50dae8cdfe01458ef6bcd3af877b9f101e480f91534508d8026a6a6874171f721c65709b032c8302cccaf80fc9cddeb47f3b83d2b3d590f0578c5b2e00de1ba1569f6f4eec8aad016e27385a0d623503454a3a3116d46ef9d1b793bfa1d8a9234bd4a95efee74f596ba803257004c6a2c2e997134", 0xd9}, {&(0x7f0000001300)}], 0x5, &(0x7f0000001a40)}}, {{&(0x7f0000001b00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}, 0x1, 0x1, 0x2, 0x4}}, 0x80, &(0x7f0000001c40)=[{0x0}], 0x1}}], 0x5, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000140)) setresuid(0xee01, 0x0, 0x0) keyctl$restrict_keyring(0xb, 0xfffffffffffffffc, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000001580)='asymmetric\x00', 0x0, &(0x7f0000000300)="303e30000000000002d190c937dc6914243b0402d6dcb7154fe6727ae888746b024ee670a5882a0ad79716", 0x2b, r1) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000001300)={r1, 0xff8, 0x84}, &(0x7f0000001f40)={'enc=', 'pkcs1', ' hash=', {'ghash-ce\x00'}}, &(0x7f0000001fc0)="0defbdfe7626af23140110312a18b135b1194c37ef30baefb80b4a0b6a63aa2cffea2893c77bf8d4f85c5129ae61f81de66341e52fc5a442f6f692d0246f6957a35f2451a780c22d47eaf4e1431df730f329176b8572d25e1458bff723c8d6bb1b34c6f15816f5ba5e7876748b4c36126365ece5647adcc4cde9d1830c942e171ea72f8577ca02ddd5243bfe9de1583a272c1ac3bff27fc35fc02472e8b013496c7b0fc3aa624862d871ea7562466bdcda1dec543859cce2633a46abcd3444afaf054fc9cb131dbb1de4290d52f1296b47b1ee7b6e247b2ac3e2a9c1f26157ca9c2387edee970afd2e98a51c938c98dca9c073f8fae74235fb239a4ecf6fed831a43603bbf266f4825dc0e7e1008a7b45346becbcbfa4c2b400ebc10ab99d17a216744d5a272ba27741a396368753b3b784417bab17a117e18119ca8f0c03d5f92f02c8bfc3c945b1bdb5e6cf66b82b32b008b5b31a57a06f0f3d68e5f5759759fd2fb876b812932c9bc1635cb38bc7a65a5c7baaa7ca8a9545a5481940549738046940e0e841fedf98fe3b521edcefb600dc5bece77dc237bd95bd1277b5cd7dd70518a4cf5b1b0c70090d2b6ddf57a66660139862e2ee50d2675a13ea10252c802646df1f1a66a1870f322e26d05ff9de63985a57caec5e106dbd6a9d580ad2552670548883128b541ebf9ea61f566cdeedd503f03027e5e383265c61925bf86f1fe8fbb7357d26c905b459cad37d078b3c704ff74fde495fb82e5db89d9674392f3ce1dce54ddf17702d97183785ab9e310c497414dd880e2d0a9764e5b5255b026edee3e397c7df45ca83df0705300fc37f120d92eeea4627d7251a2d690a2e9fe0181e1c88f07002400a6108c0b8eec09ebb72571e13d14c880997664bc658e388f36a250a106a68302e28d222fd6c12bc3d4b2c715e48c5f07248a45725b855f6d3f90a5240e70ba9fee1eab4f00f4dcd7fd1f54c50987f7b49a8c9810ae2d585a507be98d5d839a01ee75b365b7b4e8c8e8ceb57453eaf300b7108524a6cd6bb04fa75a83e91d0578b70110a7da401527f8c74b90e9d9b3d3aafeab61e2dcb187b28865daef49ad94ab31f5ffdd724637e98856ba0db33c2879e15de7d5c87d92181c2f1ac9be09d4d604f42019320e61f398f818c09a39f53ac84d147d41d0ff5ba13f7c7025ff63360f2b0513c8a921d53173349f18432b182a748b976038f7188f2153cab2e08d7bf8562ad761b4cafcce0c099ec311cf9a788bae72d3c1ac5e724de5fc777730f6d4b1dd017d48e90a482069b2a24f73c31fecb520024d28ff680ee2f142f85573a73d7172e6e09012b9979517e5fe19f748944a21fc7c485826511d821fbcc3ec5707feb676e702d6f8253ee7b1042f0637e833ab4cc3f64d08bbaf04379f14ed850ce6326c8c39282ccbd65c45ee2cf413d9ed182bcb621daa78139179ac69b19f7811c8e31537b6e16d720065ebec36ad84bd0141e0372890f36e2b00d61e967ee1facd0f4d220fc6e11121a495b2aa56b21972803857ea24c1ad59ab942456302f1a025b9110035e209db4a38ac57c5bcfb2f7115864942c03e0c5fa5de0d950fbed3f5e65376b1573b74e4d97bb1754609abdca2fd29851acfd81a19c835312d34591829758eeac4bcdc8cc21ee7f5227068d276b372843c49e5e0f4b8c643473edb158f46d012d57b2456eb54af84938e05a70e86272db499e963be5a52a835323362be8346ec9088e324aa0553950136c8cee051da427992be56bb4e7bc2867bef5d71097a9141e9f3b633ec49e33f8676c91d9cbcacd50da4616e5dc4a9f63dae2f502c8817170819b882d47f649b0263f203d66b2a06ecbf69b66d961ea123c72e90ac905de0447581e008d2f1ca388c838c09dca6a49ca2e261d4cb4bafe8c5a87a8301f36b5aa870c7f3e22029211f6b4e24499683810e7623836f6725aac243d4942edeae610930123d6c23637d0b5bcf17e549b2f3c7557216dc00b7579cccc2c226b91696c98ba96d74ba02751866282f3fa2d28bcf3c73057fdaa583acf364840689c7863b6a13b64b6d9bf0b4ee9500dfc2381226425fc30424e740f420e3ae5317ee5e862a70b801db631c5f7f8d847a6bbaf0406a97b962aea2e14e9d4d81065c5904cce34df7807a8dd88c143001000b7f60fe134b9b16cdca46a4d4d22ec85626368bf4430dc25dfea85d75e3e5befd28ff2a1574b1a9efd48669d2622145ed7de557cfbca6c11491ebe8835e057d1c18d097ef733ee133b03d5f55472e8ca9540a6101c5212608da717b825eac5da97494624347530de9a135af50ceb992506db3976d24e6fe37b305cee057571d2e05912116a20ba55a33104e003de014435ac51e10a0acbc47325e8fa052316472c3fc2182ddeed077bbb2aac187285511bcbdd5f7e8cadb2cc5c4f4c289bdd6c6c7c3d5e138114b5b1c6fe6ab321bb2270dad06ffce11385a3e832da71e1d336dd7c668aff2a5f92f0fbc2488f51c7f3f18977d12797fae952f1bb3c540b01532a63ee5b19c143ac7a958fe0b6b0013e576a3b7d977eb1fba4bdfedb36b094c8cf01f9a4a4e95b5f780221b1bf92ac25f861c13d41ad856ab26ad455a344c73bf803c4c131e286957808139698cd8a6bef61c96cbdbcd2220ba36f67cf1f3db51a6f86bcf5f99db1c4678a0dbaee6b374b19e5cf527b6c7a8ec1527b33729e3994d1d2d4ddacaf59f6b7a246f8ce7b4fd727b13012f750d6f92cf93da0a0a96b8e00da77ff57be85c3ff7f6fa235424cfcd6c7ce986b00ef9a8db2de8f5d0bee8a2cb23f98b4831f0d79818d956a88c8537d103f82ea434bec827bba5b31755652ac5027906aa21efa1db5fe06944c649f4a152020d676ffba418224cb824cf41bae7d3f027e95a5418dc1f28594749dcb8e1990977e781c6b85e37930c3ad24bf7acf617ac7c10070b4ff0d161be113adb763a1af240712913efa1989073968d4fc676bb8d8d87099c753a92eb3aa8ccb45d1f9a0a9e92f7301ca5696a9ce4262fe43fe266e28afc775f1bd89bca4a019822fcbedd11e7d9b493fe84b16de3ec63dba3c1b6c1a6ac3f55e799d47d17518ea4ecd9f49bdf877b53fd827509f3cdde0a5a963010a8cdace214eb0896a3eab3410f7ca11b84b2ddbb7a55a6810da9643fbfb44c9499b03f482beca288312c9c3a2858d0798ff4f6a678702073c6921658e7a5f3c40e77df1637f995c76aa02a38e5b315c2f1544e217ba221ddb78a4616342ff0ddef2bae4ee9b9750d468c0f80efcccaf31610190dae98d6200e01909ec2d11ac332ae36aef979aece61dff8fe9cb438d4d65e8a38e71eee951be90144162cc0eb7f70d5487896b50fa2bf14cce8f02b2c22a615503a8b52f06d4efbaa1ebbae35564c503e1800798e726ac9e7cda7cd86acc6cc551276d1e8473a11226d3b44931977fbdfafe7af83bd69f887bfceaa0d7ccd4974b01be6482ca78dcab7fb026df36018b4cd8a6b1bc8f9da74d62653523152f4935f06dee3e85ae32f106f067c37cb3b7e97294c5a05bf37b124d76b044d85d566fb531686217e49c987f313d608fb6f2b060557d571490d396a171af133913772f031f43c804abdd1b8eb2f0e2f215c452baf0646ad84f6b2ffbaefffd787f6cc37df8a33e5e947338a6b150cf3edb831d6f54162a535e2a486f1755f720ac5f254bc90f4339ca4fb77a36e5ac47829ea195053b4ef108a6356239430e71399079520bb74516d96f8bd00d985703b82247883d29cdd262084a38693200c1eaa87c1244b5bda6a07b00f7a23ed8db806cd367434e31322b04b4d6f8bc5bc3d579d68305b36010d207f333d5c2107094284179b468f04e0f4ad54b2899555337cbe2e28174f31e8ee0a574d18de4ea8b2006bfad128e5808ddfedfd80fe45fc6f2a0358972036799aeb82db9901a07cdbbcf0dfd02de7a01326938c9ef36d845f5cbd7b0f5ba34f4367df9a27c3bed0835c5df8c8a827439bcd4e59f6b3b10cecd69ac23013e011b4b6674c5f89b006d022b8da67bb5082237f9c6ae494f1fa8420a2076917f4cb9eca4a8ab583c75110fdebfa83fba46dc59aae9d765fbf1299a58c3b3e1b4f3526ce834701835c956272c10a2e01f060fe76b57803ff95994920cd5eb3d0ae6db4f365be49d5ce42bda4016fe2ad2bc3689474384efa3c17e0fdec251950dc2476c6780e5afb369175c0341d400de525ca196f6e697ed72c597d0f6a9bb3de008b035902f7efe1a56194be97b689a9fbd0aba224c3c5a51b0dc4874dd31862f6a2fb1b32809a6641cc0f11a2dc548a3ef14aba3ce905dee9f19bd8e7280cd5756acb21a5ea926376391ce71886c8457dc4299e22fc5926b363d2633cecb1030a62ac2c54d62e8efc8b740fd72c35d327d2e98dd2409d0f856ddb85cf508939aa4bab72a030ed9051259a2609dcea5101f4f8e1658be9150ec4013fe0270446523f7e75dd9b95710b57c5448281dba045e826896346d91b53619a524b4e13eb479488d1ca84f7ed5ddb20260eb1691681123be4db1dcbd09435125092541639d0bed047d283136255f20a4e4fda08616687ccfa1c4f421edfa91af0ff91a17b7c1e871a48f3e9aa5950c200d20768da0e853e99fc22f3fe8c3d22b909e380f3a1bbd015d602417dbbe83448cc20f64b1341f06a96f84cd7bdef244f7ce8ed51babe3488066df01f116e09272f762cedca12cf8dbb4b4fc5e0245744fe57c8b123882b66b7014af1d8c3dfcd3465c23180ea40a9ad432c2aee268ecc970752af6e0365b526d3f119eb426ebb55fd38295cd0ef2811a3ae71ffbdd30535557029a479c49309394ab9985b220a08884e47d22f8dd87c915ca26dd1e287749661fd54fc4f62d8fcf6dfeb762a64ba06ae961eb720e3b66f76f2617e8d279f16b624b55b5cb69a5ed52cf192110ce49e08740f6b6d6dbe2232260bfb8e458c5b293d98251b03fb9f9be771526a151ef1820269f2c40f2e388982f38a1e10c4b2b5d68ef1eaecd3d1f136bc203e829ba71f445c46200864c03e696ea9c469621cfd1ac1e9c9fec5923ede4d8e23419f8ace032bc42da2f175351c689e7d73c2e3442d78dd7bc2759b2cf53774e2fefb8801b481df3a402a8cb665ffad5b1da05cc8c8e48c05732a47b97de6fd3831a8eb8191a0b8bd92ae2cb2eb0b772b45d352c2bd9417f28512a41714ab1c94fb9c0daafdfdce17f78f525ffe2d7abe5ef6c98b58ba8e4bd2aeab10492de1d1c9b3aa7999c03e7a11b365fc8c4dc6fbf9c5333048e1ba29d124a3ffc8180ba487047977c829ae3cc2328373d3e102c1f133f8d46ab38de14b0953a34d7dd13000c7580b6f15ceae7e5ac4aaff490ba4a56332ecc9a6e2c48e842615e75e13a02cd22dd946e8cae6c60aafa2957bde80d0e6b1e0e0033c9e029b8822845b68f804336a8e53928ee3d64e07b10e77588f12d330f64a11b2ee6696db2f9e6d3a9f4f8b2bbd52b2a76767f57999a9225a2decd28c8bb37051f500527bfa625e33e6174e96a7ec1ad4f6ac7b671f676d1b3cb51a864d3c4fd540c3f09e3bc44904ae4abbf0409cc063a5bdd05279f748f251934354bece761924cf08da5428c20d47f2b4c90b1c430b27f925cac5fe7fbcae78c10659d7ad35f390f5a47fe7ceac7241f70d6c8d19d0e23b84c315ff85fb10e9ec84931c31fe3145fb8d4d1c3f031cda898230b68a31565ddc55f6112f6068b4a73955505b6531777b51a4966573705ebc01d8fb80c7d68", &(0x7f0000002fc0)=""/132) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 967.887644ms ago: executing program 2 (id=473): prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000940), 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e0400282060"], 0x7) r0 = syz_clone(0x108000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/193, 0xc1, 0x1, &(0x7f0000000040)=""/2, 0x2}, &(0x7f0000000080)=0x40) syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0xc0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaeeb507030c9688a80000810000000800450f"], 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'geneve0\x00'}) sendto$packet(r4, &(0x7f0000000100)="4f8cad880499afeee309c31888a8", 0xe, 0x0, &(0x7f0000000080)={0x11, 0xc, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() sched_setscheduler(r0, 0x0, &(0x7f00000002c0)) ioprio_set$uid(0x3, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) 8.30093ms ago: executing program 4 (id=474): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev}, 0x10) sendto(r3, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r4) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000", @ANYRES64], 0x0, 0x28f5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x90) syz_io_uring_setup(0x0, 0x0, &(0x7f0000000240), 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0xfffffffe, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300), 0x0) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) sendmsg$nl_route_sched(r6, &(0x7f0000013a40)={0x0, 0x0, 0x0}, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0xf9, &(0x7f0000000600)=""/249, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 5.461169ms ago: executing program 0 (id=484): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001c80)=[{{&(0x7f00000002c0)=@xdp={0x2c, 0x1}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)="af23640fcd8c4525b090694d455585d8c93b4a888cab97c5322da775cd0571cd9fc035bb3e2c18e7caf2dff7c40d12ce5dd928dee6879e9751dc281b0d4ae5741a034233c144f434e9c6df7772e8b2fc9a36eb058f08543361d287187df22df78146d55a49f6f0c85e549debfe525339d2dc54557ee7860d9839c0e8b62421ab458a0b4c52647cb293bb193b74c85b5e19914970a0f627fc0088a157b855e7bfd3ba30515707e2d187", 0xa9}, {&(0x7f0000000400)}, {&(0x7f00000004c0)="a9192db9603f15dff933f885f7ce93b0780fee91faa09ccddf0e8f4c4c002136d79ded97265b7dccae3679190c9e74549682acca38d511557e7f8ee85cea9acc518f0dd48cfdc3aacb5522109d0820b53bc229c9fe7ca50345ffbe99583cd290986ab1c8f753e4016556a7067ee384db329d308054ddf868c2d225e5b4224088c19192c01ac92abd81dbcb209a73b483c230bfac0c9dbd1b156feaffa4bb49440dfc1c59e2e85aa7ddf38a239e65d9b1425b11a733f09030a5ca508fad1b", 0xbe}, {&(0x7f0000000580)="089776a12aed6fa3b0d0bdd62bb805c7bfab4abb55682cc5a03539a605a7a811e6", 0x21}, {&(0x7f0000000b80)="bee18e3020afdbc49db6b4a295efed14ee70eddae01baa99bbb9d72d6532a788372480200980c8b70bbd1327fd4b8ff5ca34784fdaf0bb0e5f22ab8867f910883a964a49fefe488a5a771d176ada44511c57532f488a92e3b1b4f1583875cbaf9a7874cfe312f479b8", 0x69}], 0x5, &(0x7f0000000d00)=[@mark={{0x14, 0x1, 0x24, 0xffffffff}}, @timestamping={{0x14, 0x1, 0x25, 0xf95}}], 0x30}}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000d40)}, {&(0x7f0000000d80)="7f0478af9c0907db67cb426a6d5873e778546a8171def8d8abbdb3d48989fcd39c3be2f27f856f8617ddd9656b2a9f4cda785d66187893473bb441d9929e2c1a85457fa9f21b11505ce6bbd2c7fd877253cc23f0aef28bc1f2ed53cefa77a78283c48e4e77f95a1d0d380052f2b99db22842ef9bc532f22fc9e488636bac735d8662d1dbab51ec7faa9719bd01268648479aea229a75b8f00e6b1f28aae82d9e889e57f0197fd2953ecdb2e8d5610b24b82963aa9df3cc3364f9779c986f677174fb5479a922b967a39230739e8bdd68cc3c6087715d83f3920d", 0xda}, {&(0x7f0000000e80)}, {&(0x7f0000000f80)="781d7c3bd85378667a68fb9a9415998a821dc1", 0x13}], 0x4, &(0x7f0000001040)=[@timestamping={{0x14, 0x1, 0x25, 0xfffffff8}}], 0x18}}, {{&(0x7f0000001080)=@qipcrtr={0x2a, 0x3, 0x3fff}, 0x80, &(0x7f0000001640)=[{0x0}, {0x0}, {&(0x7f0000001300)}, {&(0x7f0000001340)="76b0b0fb3e5c912b523db10e62a5636e29f56d87e7e2bdc3235f9a41cfb7c40d278cb5cc61fdff8d000cba99e1df298c5c2f03f9c43f4376eea4e2a4a43e45ef8ca92af5fbf4b0f3472667da9372552c8cfd90b26201bee92bbd6217d518eff9b08b8748567a6280242fdc6f62da9ce102295301e81801c132edacfcf866a885fae2d59f0c4e77fb0fdef97c50c08146611b3de0a3e5e82e6a00b500b4ac7d0d7136913ce20d7dad52d204d6a2b7e9fb76d0", 0xb2}, {&(0x7f0000001440)="eed83a6bf0892809add075b7243e8492a7b75a4c56eb02a430837a00f8d17be6c00fce736b7f1686cd9d8ffc4cc10df2f32cfca8f11f489f013990464ccf50c202c173fb2a05b18437e6de14f2012669b19a1bdbfbb9a50d8e9734e8045c3ba6d67bcb1b5e2177bcf41e587f0ac3985f8300858e567875acfbfa4f9063dbde804395b2fd991933dc24cc", 0x8a}, {&(0x7f0000001580)="0026ef626c0a17e1f5cc7a3ffca8e36427dd18d5b8a41e9b9346ea3bf58f3e3bf8ffccc342893e9c3dddbb5570888a6e2247f61541b820064aabddba49b6a2227207e0fbcc4c4739eb1591d61a447eaea7360d6b8360b19e6c2922baaddf1e02fbd745951dccc1ba4bc75f", 0x6b}], 0x6}}, {{&(0x7f00000016c0)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001740)="6a21001699e7f0d7eca489274975869412ba4a2b01b13e5c6779c5e4a74ffbb7e78e085546a7867ebd4001fd63f4b652167720514c775c840b0e6327e9ff764af13ba912fdfd1fe5b9c1576e782da49a806dceed76603a190a559bec9cffc09148e9cc288ead9caa5a710a081230bc78d5c6fbb0e40526c0ee48caff7eee", 0x7e}, {&(0x7f0000001800)}, {&(0x7f0000001900)}, {&(0x7f0000001dc0)="ca89139ec4b0ac148efc3dc27ea1a1ce7360e02a1ebeec96d7e14bcb36c5b69575ec285e960c1be717cb4f9407ad37afda2bfaa1197c18141a55e70b212e5704b66e6a1d9a16fc02ac758c9f16bd75b6d876b7e2045f3a2c3045e1d194813e9e4c0d4c2db50dae8cdfe01458ef6bcd3af877b9f101e480f91534508d8026a6a6874171f721c65709b032c8302cccaf80fc9cddeb47f3b83d2b3d590f0578c5b2e00de1ba1569f6f4eec8aad016e27385a0d623503454a3a3116d46ef9d1b793bfa1d8a9234bd4a95efee74f596ba803257004c6a2c2e997134", 0xd9}, {&(0x7f0000001300)}], 0x5, &(0x7f0000001a40)}}, {{&(0x7f0000001b00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}, 0x1, 0x1, 0x2, 0x4}}, 0x80, &(0x7f0000001c40)=[{0x0}], 0x1}}], 0x5, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000140)) setresuid(0xee01, 0x0, 0x0) keyctl$restrict_keyring(0xb, 0xfffffffffffffffc, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000001580)='asymmetric\x00', 0x0, &(0x7f0000000300)="303e30000000000002d190c937dc6914243b0402d6dcb7154fe6727ae888746b024ee670a5882a0ad79716", 0x2b, r1) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000001300)={r1, 0xff8, 0x84}, &(0x7f0000001f40)={'enc=', 'pkcs1', ' hash=', {'ghash-ce\x00'}}, &(0x7f0000001fc0)="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", &(0x7f0000002fc0)=""/132) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 0s ago: executing program 3 (id=475): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nomblk_io_submit}, {@minixdf}]}, 0x2, 0x4fa, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000400)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000001b00)='./file0\x00', 0x0, 0x0, &(0x7f0000001c40)={[{@subsystem='net_prio'}, {@subsystem='pids'}]}) io_setup(0x6, &(0x7f0000002140)=0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_unlink_exit\x00'}, 0x10) io_submit(r5, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x1}) kernel console output (not intermixed with test programs): ice gretap0 entered promiscuous mode [ 51.904951][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 51.919906][ T4517] device gretap0 left promiscuous mode [ 51.943352][ T4294] EXT4-fs (loop1): unmounting filesystem. [ 52.092638][ T4522] loop4: detected capacity change from 0 to 512 [ 52.924627][ T4522] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 52.937571][ T4526] loop1: detected capacity change from 0 to 2048 [ 53.003336][ T4533] loop2: detected capacity change from 0 to 1024 [ 53.011031][ T4530] netlink: 'syz.0.35': attribute type 1 has an invalid length. [ 53.016322][ T4533] hfsplus: unable to parse mount options [ 53.042042][ T4530] netlink: 92 bytes leftover after parsing attributes in process `syz.0.35'. [ 53.052593][ T4526] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 54.071162][ T4294] EXT4-fs (loop1): unmounting filesystem. [ 54.111502][ T4295] EXT4-fs (loop4): unmounting filesystem. [ 57.321759][ T4565] loop3: detected capacity change from 0 to 256 [ 57.342481][ T4562] netlink: 'syz.4.39': attribute type 12 has an invalid length. [ 57.390555][ T4567] loop2: detected capacity change from 0 to 1024 [ 57.401634][ T4565] FAT-fs (loop3): Directory bread(block 64) failed [ 57.403614][ T4565] FAT-fs (loop3): Directory bread(block 65) failed [ 57.405378][ T4565] FAT-fs (loop3): Directory bread(block 66) failed [ 57.405705][ T4567] hfsplus: unable to parse mount options [ 57.421991][ T4565] FAT-fs (loop3): Directory bread(block 67) failed [ 57.423861][ T4565] FAT-fs (loop3): Directory bread(block 68) failed [ 57.425760][ T4565] FAT-fs (loop3): Directory bread(block 69) failed [ 57.428912][ T4565] FAT-fs (loop3): Directory bread(block 70) failed [ 57.430755][ T4565] FAT-fs (loop3): Directory bread(block 71) failed [ 57.432950][ T4565] FAT-fs (loop3): Directory bread(block 72) failed [ 57.435072][ T4565] FAT-fs (loop3): Directory bread(block 73) failed [ 57.562576][ T4569] netlink: 'syz.0.41': attribute type 10 has an invalid length. [ 58.475114][ T4573] syz.3.42: attempt to access beyond end of device [ 58.475114][ T4573] loop3: rw=2051, sector=1224, nr_sectors = 608 limit=256 [ 58.843302][ T4569] team0: Port device netdevsim0 added [ 58.884718][ T4575] netlink: 104 bytes leftover after parsing attributes in process `syz.2.44'. [ 59.008904][ T4302] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 59.010896][ T4302] FAT-fs (loop3): Filesystem has been set read-only [ 59.012631][ T4302] syz-executor: attempt to access beyond end of device [ 59.012631][ T4302] loop3: rw=2051, sector=1128, nr_sectors = 32 limit=256 [ 59.033256][ T27] audit: type=1326 audit(59.010:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4574 comm="syz.2.44" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8694a6e8 code=0x0 [ 60.418335][ T4583] loop0: detected capacity change from 0 to 1024 [ 61.106762][ T115] hfsplus: b-tree write err: -5, ino 4 [ 62.038604][ T4599] loop2: detected capacity change from 0 to 512 [ 63.004160][ T4598] delete_channel: no stack [ 63.029316][ T4599] EXT4-fs error (device loop2): ext4_orphan_get:1422: comm syz.2.51: bad orphan inode 15 [ 63.032505][ T4599] EXT4-fs (loop2): Remounting filesystem read-only [ 63.034078][ T4599] ext4_test_bit(bit=14, block=5) = 0 [ 63.035387][ T4599] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 63.047877][ T4604] netlink: 16 bytes leftover after parsing attributes in process `syz.1.52'. [ 63.183326][ T4610] loop1: detected capacity change from 0 to 512 [ 63.185294][ T4610] ext4: Unknown parameter 'noacl' [ 63.381279][ T4612] loop0: detected capacity change from 0 to 512 [ 65.876032][ T4612] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 66.122723][ T4612] block device autoloading is deprecated and will be removed. [ 66.145374][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 66.147345][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.154600][ T4309] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.157614][ T4612] I/O error, dev loop75, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 66.160230][ T4612] EXT4-fs (loop0): couldn't read superblock of external journal [ 66.165321][ T4309] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.174442][ T4309] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.208083][ T4309] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.210246][ T4309] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.212498][ T4309] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.295854][ T4300] EXT4-fs (loop2): unmounting filesystem. [ 66.323186][ T4626] loop1: detected capacity change from 0 to 1024 [ 66.342843][ T4629] loop4: detected capacity change from 0 to 256 [ 66.419541][ T4633] loop2: detected capacity change from 0 to 256 [ 66.519824][ T4431] hfsplus: b-tree write err: -5, ino 4 [ 66.582811][ T4626] random: crng reseeded on system resumption [ 66.609571][ T4623] chnl_net:caif_netlink_parms(): no params data found [ 68.622877][ T4309] Bluetooth: hci3: command tx timeout [ 68.695590][ T4626] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 68.726617][ T4309] Bluetooth: hci0: command 0x0c1a tx timeout [ 68.738242][ T4645] Bluetooth: hci0: Opcode 0x080f failed: -110 [ 68.908637][ T4623] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.911169][ T4623] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.916293][ T4623] device bridge_slave_0 entered promiscuous mode [ 68.925024][ T4623] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.937669][ T4623] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.940360][ T4623] device bridge_slave_1 entered promiscuous mode [ 69.105845][ T4623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.713255][ T7] cfg80211: failed to load regulatory.db [ 70.106974][ T4650] loop4: detected capacity change from 0 to 32768 [ 70.256444][ T4673] loop1: detected capacity change from 0 to 128 [ 70.588163][ T4673] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 70.814744][ T4309] Bluetooth: hci3: command tx timeout [ 70.816310][ T4309] Bluetooth: hci0: command 0x0c1a tx timeout [ 70.851461][ T4650] XFS (loop4): Mounting V5 Filesystem [ 70.973553][ T4683] loop2: detected capacity change from 0 to 512 [ 70.983946][ T4683] ext4: Unknown parameter 'noacl' [ 70.989310][ T4294] EXT4-fs (loop1): unmounting filesystem. [ 71.025386][ T4650] XFS (loop4): Ending clean mount [ 71.038387][ T4531] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 71.216073][ T4623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.031921][ T4474] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.081921][ T4623] team0: Port device team_slave_0 added [ 72.084955][ T4623] team0: Port device team_slave_1 added [ 72.110831][ T4295] XFS (loop4): Unmounting Filesystem [ 72.150806][ T4695] loop0: detected capacity change from 0 to 512 [ 72.153025][ T4695] ext4: Unknown parameter 'noacl' [ 72.222676][ T4623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.224613][ T4623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.276487][ T4531] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 72.284758][ T4623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.887450][ T4311] Bluetooth: hci3: command tx timeout [ 73.018061][ T4692] delete_channel: no stack [ 73.193883][ T4474] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.207786][ T4699] netlink: 16 bytes leftover after parsing attributes in process `syz.2.70'. [ 73.210696][ T4623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.212539][ T4623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.239552][ T4623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.819972][ T4713] loop1: detected capacity change from 0 to 1024 [ 75.296029][ T4708] loop0: detected capacity change from 0 to 1024 [ 75.302115][ T4708] hfsplus: unable to parse mount options [ 75.380959][ T4716] loop4: detected capacity change from 0 to 512 [ 75.404904][ T4716] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 75.444477][ T4716] EXT4-fs (loop4): 1 truncate cleaned up [ 75.445949][ T4716] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 75.460165][ T4311] Bluetooth: hci3: command tx timeout [ 75.507093][ T4474] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.520275][ T4418] hfsplus: b-tree write err: -5, ino 4 [ 75.520825][ T4432] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 75.684603][ T4724] loop1: detected capacity change from 0 to 512 [ 75.687969][ T4724] EXT4-fs: quotafile must be on filesystem root [ 77.422412][ T4724] loop1: detected capacity change from 0 to 128 [ 77.490601][ T4623] device hsr_slave_0 entered promiscuous mode [ 77.609067][ T4623] device hsr_slave_1 entered promiscuous mode [ 77.758858][ T4623] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.761927][ T4623] Cannot create hsr debugfs directory [ 78.221050][ T4474] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.235830][ T4741] loop2: detected capacity change from 0 to 64 [ 79.372335][ T4753] loop0: detected capacity change from 0 to 512 [ 79.374383][ T4753] EXT4-fs: Ignoring removed nobh option [ 80.115334][ T4753] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 80.137602][ T4753] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.82: attempt to clear invalid blocks 2 len 1 [ 80.163221][ T4753] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 80.178591][ T4753] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.82: invalid indirect mapped block 1819239214 (level 0) [ 80.184492][ T4753] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.82: invalid indirect mapped block 1819239214 (level 1) [ 80.205654][ T4753] EXT4-fs (loop0): 1 truncate cleaned up [ 80.266533][ T4753] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 81.450963][ T4764] EXT4-fs error (device loop0): ext4_find_dest_de:2113: inode #2: block 13: comm syz.0.82: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 81.517816][ T4311] Bluetooth: hci4: unexpected cc 0x2039 length: 4 > 1 [ 81.528345][ T4311] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 81.531161][ T4311] Bluetooth: hci2: Injecting HCI hardware error event [ 81.542945][ T4311] Bluetooth: hci2: hardware error 0x00 [ 82.113451][ T4307] EXT4-fs (loop0): unmounting filesystem. [ 82.586747][ T4781] loop2: detected capacity change from 0 to 1024 [ 82.675771][ T4783] netlink: 16 bytes leftover after parsing attributes in process `syz.0.84'. [ 83.090739][ T4775] delete_channel: no stack [ 83.534519][ T4776] loop1: detected capacity change from 0 to 512 [ 83.543374][ T4776] EXT4-fs: Ignoring removed nobh option [ 83.588350][ T4776] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 83.591539][ T4776] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.94: attempt to clear invalid blocks 2 len 1 [ 83.684305][ T9] hfsplus: b-tree write err: -5, ino 4 [ 83.703302][ T4776] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 83.733573][ T4776] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.94: invalid indirect mapped block 1819239214 (level 0) [ 83.766925][ T4776] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.94: invalid indirect mapped block 1819239214 (level 1) [ 83.787233][ T4776] EXT4-fs (loop1): 1 truncate cleaned up [ 83.788640][ T4776] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 83.880069][ T4296] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 83.912951][ T4296] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 83.917930][ T4296] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 83.921063][ T4296] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 83.924314][ T4296] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 83.927029][ T4296] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 84.534739][ T4798] EXT4-fs error (device loop1): ext4_find_dest_de:2113: inode #2: block 13: comm syz.1.94: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 84.541969][ T4296] Bluetooth: hci0: unexpected cc 0x2039 length: 4 > 1 [ 84.544141][ T4296] Bluetooth: hci0: unexpected event for opcode 0x2039 [ 84.615513][ T4797] loop2: detected capacity change from 0 to 16 [ 84.630734][ T4797] erofs: (device loop2): mounted with root inode @ nid 36. [ 84.852191][ T4809] loop0: detected capacity change from 0 to 256 [ 84.880126][ T4294] EXT4-fs (loop1): unmounting filesystem. [ 84.899682][ T4809] FAT-fs (loop0): Directory bread(block 64) failed [ 84.901391][ T4809] FAT-fs (loop0): Directory bread(block 65) failed [ 84.902949][ T4809] FAT-fs (loop0): Directory bread(block 66) failed [ 84.904342][ T4809] FAT-fs (loop0): Directory bread(block 67) failed [ 84.906058][ T4809] FAT-fs (loop0): Directory bread(block 68) failed [ 84.938652][ T4809] FAT-fs (loop0): Directory bread(block 69) failed [ 84.940374][ T4809] FAT-fs (loop0): Directory bread(block 70) failed [ 84.942166][ T4809] FAT-fs (loop0): Directory bread(block 71) failed [ 84.943942][ T4809] FAT-fs (loop0): Directory bread(block 72) failed [ 84.945621][ T4809] FAT-fs (loop0): Directory bread(block 73) failed [ 85.219666][ T4722] EXT4-fs (loop4): unmounting filesystem. [ 85.564209][ T4819] syz.0.89: attempt to access beyond end of device [ 85.564209][ T4819] loop0: rw=2051, sector=1224, nr_sectors = 608 limit=256 [ 85.826491][ T4311] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 86.072126][ T4307] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 86.074126][ T4307] FAT-fs (loop0): Filesystem has been set read-only [ 86.075800][ T4307] syz-executor: attempt to access beyond end of device [ 86.075800][ T4307] loop0: rw=2051, sector=1128, nr_sectors = 32 limit=256 [ 86.352888][ T4824] netlink: 24 bytes leftover after parsing attributes in process `syz.1.92'. [ 86.421343][ T4623] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.494874][ T4623] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.576558][ T4311] Bluetooth: hci5: command tx timeout [ 86.631746][ T4623] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.668978][ T4623] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.833532][ T4296] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.845652][ T4296] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.852667][ T4296] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.855847][ T4296] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.858592][ T4296] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.860588][ T4296] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.070384][ T4848] netlink: 'syz.1.96': attribute type 10 has an invalid length. [ 87.119686][ T4848] device geneve0 entered promiscuous mode [ 87.159408][ T4848] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 87.214361][ T4854] loop2: detected capacity change from 0 to 8 [ 89.006966][ T4842] chnl_net:caif_netlink_parms(): no params data found [ 89.180431][ T4311] Bluetooth: hci5: command tx timeout [ 89.181113][ T4296] Bluetooth: hci1: command tx timeout [ 89.542834][ T4788] chnl_net:caif_netlink_parms(): no params data found [ 89.616139][ T4869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.100'. [ 89.688923][ T4474] device hsr_slave_0 left promiscuous mode [ 89.716980][ T4474] device hsr_slave_1 left promiscuous mode [ 89.816599][ T4474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.818678][ T4474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.823759][ T4474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.825758][ T4474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.828210][ T4474] device bridge_slave_1 left promiscuous mode [ 89.831029][ T4474] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.868050][ T4474] device bridge_slave_0 left promiscuous mode [ 89.869840][ T4474] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.016879][ T4474] device veth1_macvtap left promiscuous mode [ 90.018752][ T4474] device veth0_macvtap left promiscuous mode [ 90.020408][ T4474] device veth1_vlan left promiscuous mode [ 90.022098][ T4474] device veth0_vlan left promiscuous mode [ 90.578866][ T4884] loop1: detected capacity change from 0 to 256 [ 91.640459][ T4311] Bluetooth: hci1: command tx timeout [ 91.641498][ T4309] Bluetooth: hci5: command tx timeout [ 93.283768][ T4902] netlink: 104 bytes leftover after parsing attributes in process `syz.2.108'. [ 93.699082][ T4296] Bluetooth: hci1: command tx timeout [ 93.700691][ T4296] Bluetooth: hci5: command tx timeout [ 94.620825][ T4474] team0 (unregistering): Port device team_slave_1 removed [ 94.819066][ T4474] team0 (unregistering): Port device team_slave_0 removed [ 94.997291][ T4474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.198208][ T4474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.766623][ T4309] Bluetooth: hci1: command tx timeout [ 97.732226][ T4474] bond0 (unregistering): Released all slaves [ 98.068507][ T4842] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.070527][ T4842] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.073115][ T4842] device bridge_slave_0 entered promiscuous mode [ 98.078603][ T4788] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.080436][ T4788] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.083095][ T4788] device bridge_slave_0 entered promiscuous mode [ 98.096068][ T4788] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.098540][ T4788] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.101520][ T4788] device bridge_slave_1 entered promiscuous mode [ 98.104158][ T4842] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.106143][ T4842] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.118466][ T4842] device bridge_slave_1 entered promiscuous mode [ 98.153170][ T4842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.171256][ T4842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.172492][ T4915] loop2: detected capacity change from 0 to 512 [ 98.194815][ T4788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.207807][ T4788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.219939][ T4842] team0: Port device team_slave_0 added [ 98.226842][ T4915] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 98.271206][ T4788] team0: Port device team_slave_0 added [ 98.304603][ T4623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.325070][ T4623] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.384205][ T4842] team0: Port device team_slave_1 added [ 98.387513][ T4788] team0: Port device team_slave_1 added [ 98.399535][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.401987][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.404416][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.419629][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.422099][ T209] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.424193][ T209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.433605][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.436716][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.622050][ T209] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.624081][ T209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.745927][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.901646][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.112616][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.115929][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.149709][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.157383][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.169357][ T4300] EXT4-fs (loop2): unmounting filesystem. [ 99.186792][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.188203][ T4922] loop1: detected capacity change from 0 to 512 [ 99.189643][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.192253][ T4922] EXT4-fs (loop1): DAX unsupported by block device. [ 99.200308][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.202957][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.207507][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 99.286155][ T4842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.315688][ T4842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.350788][ T4842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.376609][ T4842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.382914][ T4842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.415182][ T4842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.425217][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.427909][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.430963][ T4788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.432716][ T4788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.445453][ T4788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.149655][ T4788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.151751][ T4788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.166684][ T4788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.249898][ T4842] device hsr_slave_0 entered promiscuous mode [ 100.288280][ T4842] device hsr_slave_1 entered promiscuous mode [ 100.318361][ T4937] netlink: 'syz.1.113': attribute type 62 has an invalid length. [ 100.346686][ T4842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.349295][ T4842] Cannot create hsr debugfs directory [ 100.418602][ T4788] device hsr_slave_0 entered promiscuous mode [ 100.496952][ T4788] device hsr_slave_1 entered promiscuous mode [ 100.546659][ T4788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.548841][ T4788] Cannot create hsr debugfs directory [ 100.811608][ T4788] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.175038][ T4949] tipc: Can't bind to reserved service type 0 [ 101.465280][ T4788] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.818438][ T4955] loop2: detected capacity change from 0 to 256 [ 101.978503][ T4788] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.052117][ T4623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.054502][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.057661][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.099744][ T4788] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.591046][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 103.593725][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 103.652281][ T4474] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.669484][ T4623] device veth0_vlan entered promiscuous mode [ 103.671889][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 103.674666][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 103.681784][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 103.684764][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 103.690927][ T4623] device veth1_vlan entered promiscuous mode [ 103.705932][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 103.709797][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 103.712425][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 103.715062][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 103.768537][ T4474] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.773546][ T4623] device veth0_macvtap entered promiscuous mode [ 103.780184][ T4623] device veth1_macvtap entered promiscuous mode [ 103.791171][ T4623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.793920][ T4623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.797016][ T4623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.799873][ T4623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.802537][ T4623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.805300][ T4623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.809404][ T4623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.812068][ T4623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.816043][ T4623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.819772][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 103.822496][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 103.828074][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 103.834766][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 103.854640][ T4965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.871329][ T4965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.876246][ T4967] netlink: 104 bytes leftover after parsing attributes in process `syz.1.119'. [ 103.880795][ T4474] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.888494][ T4623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.892062][ T4623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.894806][ T4623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.897864][ T4623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.900754][ T4623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.903569][ T4623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.906177][ T4623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.909622][ T4623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.913121][ T4623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.920459][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 103.923193][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 103.933604][ T4965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.175310][ T4474] team0: Port device netdevsim0 removed [ 104.233466][ T4474] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.573414][ T4623] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.596217][ T4623] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.630888][ T4623] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.670800][ T4623] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.750686][ T209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.752967][ T209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.764573][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 104.771509][ T4440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.774109][ T4440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.780535][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 104.842617][ T4975] loop1: detected capacity change from 0 to 256 [ 104.892543][ T4975] FAT-fs (loop1): Directory bread(block 64) failed [ 104.894365][ T4975] FAT-fs (loop1): Directory bread(block 65) failed [ 104.896099][ T4975] FAT-fs (loop1): Directory bread(block 66) failed [ 104.897986][ T4975] FAT-fs (loop1): Directory bread(block 67) failed [ 104.899708][ T4975] FAT-fs (loop1): Directory bread(block 68) failed [ 104.901476][ T4975] FAT-fs (loop1): Directory bread(block 69) failed [ 104.903191][ T4975] FAT-fs (loop1): Directory bread(block 70) failed [ 104.904848][ T4975] FAT-fs (loop1): Directory bread(block 71) failed [ 104.917584][ T4975] FAT-fs (loop1): Directory bread(block 72) failed [ 104.919261][ T4975] FAT-fs (loop1): Directory bread(block 73) failed [ 105.357821][ T4991] syz.1.121: attempt to access beyond end of device [ 105.357821][ T4991] loop1: rw=2051, sector=1224, nr_sectors = 608 limit=256 [ 106.983267][ T5002] loop2: detected capacity change from 0 to 1024 [ 107.748156][ T4294] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 107.750193][ T4294] FAT-fs (loop1): Filesystem has been set read-only [ 107.751939][ T4294] syz-executor: attempt to access beyond end of device [ 107.751939][ T4294] loop1: rw=2051, sector=1128, nr_sectors = 32 limit=256 [ 109.533132][ T5020] loop3: detected capacity change from 0 to 136 [ 109.594714][ T5020] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 109.763642][ T5022] iso9660: Corrupted directory entry in block 1 of inode 1536 [ 109.772962][ T5022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.973796][ T5022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.563899][ T4842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 111.693054][ T4842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 111.751782][ T4842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 111.902027][ T4842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 112.048839][ T4788] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 112.088517][ T4788] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 112.442015][ T4788] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 112.488417][ T4788] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 112.949742][ T4842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.964722][ T4842] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.997973][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.000245][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.014033][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.017308][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.019718][ T115] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.021537][ T115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.023813][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.033887][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.037523][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.040080][ T115] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.042804][ T115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.045148][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 113.052256][ T4788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.377199][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 113.380222][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 113.383417][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 113.404131][ T4788] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.407386][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 113.411070][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 113.414639][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.419225][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 113.421974][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 113.424548][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.428581][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.431062][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 113.433750][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 113.438223][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 113.489100][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.491900][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.494422][ T115] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.496473][ T115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.499027][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.501817][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.504376][ T115] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.506329][ T115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.511565][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.514320][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 113.525838][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 113.869239][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 113.872297][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 113.874862][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 113.879183][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.881852][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 113.893290][ T4788] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 113.896238][ T4788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.902566][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 113.905313][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 113.909743][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 113.912352][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 113.914983][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.920541][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.922561][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 113.971794][ T4842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.985063][ T4474] device hsr_slave_0 left promiscuous mode [ 114.016668][ T4474] device hsr_slave_1 left promiscuous mode [ 114.136613][ T4474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.138642][ T4474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.141194][ T4474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.143131][ T4474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.145528][ T4474] device bridge_slave_1 left promiscuous mode [ 114.147470][ T4474] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.198613][ T4474] device bridge_slave_0 left promiscuous mode [ 114.200491][ T4474] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.250475][ T4474] device hsr_slave_0 left promiscuous mode [ 114.298038][ T4474] device hsr_slave_1 left promiscuous mode [ 114.386598][ T4474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.388645][ T4474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.391144][ T4474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.393028][ T4474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.395362][ T4474] device bridge_slave_1 left promiscuous mode [ 114.397450][ T4474] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.449180][ T4474] device bridge_slave_0 left promiscuous mode [ 114.451033][ T4474] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.606685][ T4474] device veth1_macvtap left promiscuous mode [ 114.608441][ T4474] device veth0_macvtap left promiscuous mode [ 114.610133][ T4474] device veth1_vlan left promiscuous mode [ 114.611709][ T4474] device veth0_vlan left promiscuous mode [ 114.716735][ T4474] device veth1_macvtap left promiscuous mode [ 114.718565][ T4474] device veth0_macvtap left promiscuous mode [ 114.720362][ T4474] device veth1_vlan left promiscuous mode [ 114.721981][ T4474] device veth0_vlan left promiscuous mode [ 116.720251][ T4474] team0 (unregistering): Port device team_slave_1 removed [ 116.928510][ T4474] team0 (unregistering): Port device team_slave_0 removed [ 117.137976][ T4474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.368212][ T4474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.900133][ T4474] bond0 (unregistering): Released all slaves [ 122.071719][ T4474] team0 (unregistering): Port device team_slave_1 removed [ 122.277884][ T4474] team0 (unregistering): Port device team_slave_0 removed [ 122.477364][ T4474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.728311][ T4474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.212689][ T4474] bond0 (unregistering): Released all slaves [ 125.497131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 125.500002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 125.531044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 125.533700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 125.537007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 125.539819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 125.543931][ T4842] device veth0_vlan entered promiscuous mode [ 125.552139][ T4842] device veth1_vlan entered promiscuous mode [ 125.575106][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 125.579005][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 125.581730][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 125.583962][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 125.589713][ T4788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.607461][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 125.610620][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.614134][ T4842] device veth0_macvtap entered promiscuous mode [ 125.619281][ T4842] device veth1_macvtap entered promiscuous mode [ 125.643416][ T4842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.646174][ T4842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.653757][ T4842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.660180][ T4842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.663592][ T4842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.666293][ T4842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.671428][ T4842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.673442][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 125.675857][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 125.679413][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 125.682559][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.687219][ T4842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.690001][ T4842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.692544][ T4842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.695221][ T4842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.698503][ T4842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.701134][ T4842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.704587][ T4842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.707572][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.710134][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.714903][ T4842] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.717435][ T4842] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.719292][ T4842] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.721417][ T4842] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.783430][ T4440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.785595][ T4440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.790672][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 125.795591][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 125.800263][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 125.824617][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.824822][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 125.830100][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.831910][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 125.840586][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 125.843151][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 125.845568][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 125.850785][ T4788] device veth0_vlan entered promiscuous mode [ 125.857417][ T4788] device veth1_vlan entered promiscuous mode [ 125.874223][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 125.883941][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 125.886901][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 125.889652][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.895533][ T4788] device veth0_macvtap entered promiscuous mode [ 125.900837][ T4788] device veth1_macvtap entered promiscuous mode [ 125.939080][ T4788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.941949][ T4788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.944589][ T4788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.952033][ T4788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.954604][ T4788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.960308][ T4788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.962872][ T4788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.965499][ T4788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.970678][ T4788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.972671][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 125.980752][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 125.983282][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 125.986002][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.997504][ T4296] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 126.002093][ T4296] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 126.004742][ T4296] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 126.009507][ T4296] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 126.012822][ T4296] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 126.015014][ T4296] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 126.065600][ T5075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.091655][ T4788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.094437][ T4788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.105050][ T4788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.108538][ T4788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.111630][ T4788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.114327][ T4788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.119826][ T4788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.122563][ T4788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.126836][ T4788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.131358][ T4788] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.133764][ T4788] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.136175][ T4788] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.139258][ T4788] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.147069][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 126.149730][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 126.256687][ T5075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.424735][ T4440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.427485][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.429807][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.449214][ T4440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.452671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 126.470066][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 126.564532][ T5072] chnl_net:caif_netlink_parms(): no params data found [ 126.714091][ T5083] loop4: detected capacity change from 0 to 512 [ 126.723605][ T5083] ext4: Unknown parameter 'noacl' [ 126.725429][ T5081] netlink: 264 bytes leftover after parsing attributes in process `syz.3.140'. [ 126.728738][ T5081] netlink: 148 bytes leftover after parsing attributes in process `syz.3.140'. [ 126.835912][ T5081] loop3: detected capacity change from 0 to 64 [ 127.152469][ T5061] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 128.136838][ T4309] Bluetooth: hci0: command tx timeout [ 128.501930][ T5072] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.507490][ T5072] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.523099][ T5072] device bridge_slave_0 entered promiscuous mode [ 128.576807][ T5072] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.578699][ T5072] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.581188][ T5072] device bridge_slave_1 entered promiscuous mode [ 128.664149][ T5072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.669974][ T5072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.723348][ T5097] netlink: 104 bytes leftover after parsing attributes in process `syz.4.130'. [ 129.846557][ T5103] binder: 5098:5103 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 130.375942][ T4309] Bluetooth: hci0: command tx timeout [ 130.789567][ T5072] team0: Port device team_slave_0 added [ 130.792807][ T5072] team0: Port device team_slave_1 added [ 130.985219][ T5095] loop2: detected capacity change from 0 to 40427 [ 131.048606][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.050398][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.376003][ T5112] loop0: detected capacity change from 0 to 512 [ 131.381885][ T5112] EXT4-fs: Ignoring removed mblk_io_submit option [ 131.433429][ T5095] F2FS-fs (loop2): invalid crc value [ 131.684166][ T5095] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-12) [ 131.770563][ T5072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.772259][ T5072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.800333][ T5072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.830353][ T5112] EXT4-fs (loop0): orphan cleanup on readonly fs [ 131.832132][ T5112] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 131.835501][ T5112] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 131.857983][ T5112] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.132: attempt to clear invalid blocks 2 len 1 [ 131.862031][ T5112] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.132: invalid indirect mapped block 1819239214 (level 0) [ 131.866104][ T5112] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.132: invalid indirect mapped block 1819239214 (level 1) [ 131.869727][ T5072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.873677][ T5112] EXT4-fs (loop0): 1 truncate cleaned up [ 131.874391][ T5072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.875462][ T5112] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 132.833079][ T5125] input: syz1 as /devices/virtual/input/input6 [ 132.841551][ T4309] Bluetooth: hci0: command tx timeout [ 132.978265][ T5109] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 133.048142][ T5072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.135915][ T5109] EXT4-fs: error -4 creating inode table initialization thread [ 133.138649][ T5109] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 133.382390][ T4842] EXT4-fs (loop0): unmounting filesystem. [ 133.408814][ T5072] device hsr_slave_0 entered promiscuous mode [ 133.552289][ T5135] binder: 5130:5135 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 133.554672][ T5135] binder: 5130:5135 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 133.556700][ T5135] binder: 5135 RLIMIT_NICE not set [ 134.063076][ T5072] device hsr_slave_1 entered promiscuous mode [ 134.857500][ T5072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.859482][ T5072] Cannot create hsr debugfs directory [ 135.055733][ T4309] Bluetooth: hci0: command tx timeout [ 136.118138][ T27] audit: type=1326 audit(135.320:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5138 comm="syz.0.136" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8af4a6e8 code=0x0 [ 137.775744][ T5072] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.793764][ T5170] loop0: detected capacity change from 0 to 2048 [ 138.877847][ T5175] loop3: detected capacity change from 0 to 512 [ 138.887395][ T5175] ext4: Unknown parameter 'noacl' [ 138.892973][ T5170] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.909217][ T5072] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.976473][ T5170] mmap: syz.0.148 (5170) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 140.042686][ T5072] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.844528][ T5192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.423405][ T5200] hub 6-0:1.0: USB hub found [ 141.427174][ T5200] hub 6-0:1.0: 8 ports detected [ 141.809787][ T5185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.853777][ T5199] netlink: 104 bytes leftover after parsing attributes in process `syz.0.153'. [ 142.068646][ T5072] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.691625][ T27] audit: type=1326 audit(142.660:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5206 comm="syz.2.157" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8694a6e8 code=0x7fc00000 [ 142.942892][ T27] audit: type=1326 audit(142.670:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5206 comm="syz.2.157" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8694a6e8 code=0x7fc00000 [ 142.985640][ T27] audit: type=1326 audit(142.880:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5206 comm="syz.2.157" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8694a6e8 code=0x7fc00000 [ 143.378216][ T5218] loop2: detected capacity change from 0 to 512 [ 143.457862][ T5218] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 143.589148][ T5072] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 145.108000][ T5072] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 145.250958][ T5231] loop4: detected capacity change from 0 to 2048 [ 145.388895][ T5231] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 145.552033][ T5072] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 145.577100][ T5072] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 146.359910][ T4788] EXT4-fs (loop4): unmounting filesystem. [ 146.400397][ T5072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.411296][ T5072] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.434068][ T5072] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 146.437083][ T5072] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 146.498890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 146.501355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 146.503830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 146.507155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 146.518411][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.520279][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.522478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 146.525542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 146.529231][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.531085][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.533279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 146.535998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 146.538950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 146.542837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 146.545447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 146.548907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.557148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 146.562479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 146.581558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 146.614084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 146.795805][ T5249] loop0: detected capacity change from 0 to 1024 [ 147.317858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 147.358316][ T5247] loop2: detected capacity change from 0 to 2048 [ 147.371911][ T5251] loop4: detected capacity change from 0 to 512 [ 147.374198][ T5251] EXT4-fs: Ignoring removed nomblk_io_submit option [ 147.383155][ T5253] loop0: detected capacity change from 0 to 512 [ 147.385300][ T5253] EXT4-fs: Ignoring removed nomblk_io_submit option [ 147.399393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 147.403842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 147.435888][ T5247] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 147.436306][ T5251] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 147.446116][ T5253] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 147.767102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 147.769740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 148.774763][ T5270] EXT4-fs warning (device loop4): verify_group_input:169: Last group not full [ 148.838123][ T5072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.008229][ T4300] EXT4-fs (loop2): unmounting filesystem. [ 149.232278][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 149.306590][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.450079][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 149.453152][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 149.459155][ T4788] EXT4-fs (loop4): unmounting filesystem. [ 149.464097][ T5072] device veth0_vlan entered promiscuous mode [ 149.490706][ T5072] device veth1_vlan entered promiscuous mode [ 149.495375][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 149.498527][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 149.503292][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 149.557785][ T5282] loop4: detected capacity change from 0 to 8 [ 149.602188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 149.607445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 150.705160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 150.718602][ T5072] device veth0_macvtap entered promiscuous mode [ 150.723987][ T5072] device veth1_macvtap entered promiscuous mode [ 150.796722][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.799487][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.801967][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.829400][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.832132][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.834791][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.861348][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.875216][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.884666][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.899945][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.913564][ T5072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.927305][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.929848][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.968083][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.970983][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.987819][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.990599][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.006192][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.009350][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.012581][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.015504][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.029970][ T5072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.047258][ T5072] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.049516][ T5072] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.051792][ T5072] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.054028][ T5072] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.096691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 151.099405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 151.102052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 151.104587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 151.183364][ T4662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.185850][ T4662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.207160][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 151.218699][ T4431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.224057][ T4431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.245868][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 151.335104][ T5302] loop1: detected capacity change from 0 to 512 [ 151.408172][ T5302] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 152.906733][ T5312] overlayfs: missing 'lowerdir' [ 153.173218][ T4842] EXT4-fs (loop0): unmounting filesystem. [ 153.175574][ T5072] EXT4-fs (loop1): unmounting filesystem. [ 153.183378][ T5318] loop3: detected capacity change from 0 to 512 [ 153.185558][ T5318] ext4: Unknown parameter 'noacl' [ 153.236206][ T5120] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 153.375837][ T5329] netlink: 'syz.0.187': attribute type 2 has an invalid length. [ 155.894409][ T5352] loop4: detected capacity change from 0 to 512 [ 155.906827][ T5352] EXT4-fs: Ignoring removed nomblk_io_submit option [ 155.911652][ T5348] loop0: detected capacity change from 0 to 2048 [ 156.015073][ T5348] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 156.058759][ T5352] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 157.327709][ T5362] EXT4-fs warning (device loop4): verify_group_input:169: Last group not full [ 157.483867][ T4842] EXT4-fs (loop0): unmounting filesystem. [ 157.497296][ T5371] loop1: detected capacity change from 0 to 8 [ 158.941754][ T4788] EXT4-fs (loop4): unmounting filesystem. [ 159.114180][ T5386] loop1: detected capacity change from 0 to 128 [ 160.367066][ T5394] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 160.460011][ T5395] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 160.462458][ T5395] FAT-fs (loop1): Filesystem has been set read-only [ 160.464415][ T5395] syz.1.191: attempt to access beyond end of device [ 160.464415][ T5395] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 160.468876][ T5395] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 160.471046][ T5395] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 160.478535][ T5395] syz.1.191: attempt to access beyond end of device [ 160.478535][ T5395] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 160.482795][ T5395] syz.1.191: attempt to access beyond end of device [ 160.482795][ T5395] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 160.498162][ T5395] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 160.688182][ T5396] loop0: detected capacity change from 0 to 256 [ 160.741618][ T5396] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 161.085823][ T5403] exFAT-fs (loop0): error, tried to truncate zeroed cluster. [ 161.088184][ T5403] exFAT-fs (loop0): Filesystem has been set read-only [ 161.940450][ T5410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.080407][ T5410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.152579][ T5415] loop4: detected capacity change from 0 to 512 [ 162.162597][ T5415] EXT4-fs: Ignoring removed nomblk_io_submit option [ 162.207681][ T5422] loop2: detected capacity change from 0 to 512 [ 162.209969][ T5422] EXT4-fs: Ignoring removed nomblk_io_submit option [ 162.237497][ T5415] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 162.252187][ T5422] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 163.750923][ T5434] EXT4-fs warning (device loop2): verify_group_input:169: Last group not full [ 163.848692][ T4788] EXT4-fs (loop4): unmounting filesystem. [ 164.085497][ T5442] loop3: detected capacity change from 0 to 512 [ 164.113770][ T5442] ext4: Unknown parameter 'noacl' [ 164.182453][ T4300] EXT4-fs (loop2): unmounting filesystem. [ 164.284910][ T5127] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 164.321724][ T5450] loop2: detected capacity change from 0 to 128 [ 164.636995][ T5455] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 164.686523][ T5455] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 164.688863][ T5455] FAT-fs (loop2): Filesystem has been set read-only [ 164.690795][ T5455] syz.2.207: attempt to access beyond end of device [ 164.690795][ T5455] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 164.695825][ T5455] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 164.698287][ T5455] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 165.893945][ T5457] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 166.038297][ T5462] loop4: detected capacity change from 0 to 2048 [ 166.114853][ T5462] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 166.387974][ T5472] loop3: detected capacity change from 0 to 512 [ 166.390214][ T5472] EXT4-fs: Ignoring removed nomblk_io_submit option [ 168.175093][ T4788] EXT4-fs (loop4): unmounting filesystem. [ 168.192810][ T5487] loop2: detected capacity change from 0 to 512 [ 168.195007][ T5487] EXT4-fs: Ignoring removed nomblk_io_submit option [ 168.265682][ T5487] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 168.319287][ T5493] loop0: detected capacity change from 0 to 512 [ 168.324893][ T5495] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.340085][ T5493] EXT4-fs: Ignoring removed nomblk_io_submit option [ 168.392856][ T5472] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 168.423126][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 168.433395][ T4418] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.435510][ T4418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.439787][ T5493] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 168.465717][ T5501] loop1: detected capacity change from 0 to 128 [ 168.615401][ T5502] EXT4-fs warning (device loop2): verify_group_input:169: Last group not full [ 170.747054][ T5507] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 171.128195][ T5511] EXT4-fs warning (device loop0): verify_group_input:169: Last group not full [ 171.382196][ T5515] loop4: detected capacity change from 0 to 1764 [ 171.470662][ T5515] loop4: detected capacity change from 0 to 512 [ 171.532290][ T5515] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 171.623436][ T4300] EXT4-fs (loop2): unmounting filesystem. [ 171.643596][ T4623] EXT4-fs (loop3): unmounting filesystem. [ 171.646697][ T4842] EXT4-fs (loop0): unmounting filesystem. [ 172.600033][ T5531] loop0: detected capacity change from 0 to 512 [ 172.602573][ T5531] EXT4-fs: Ignoring removed nomblk_io_submit option [ 172.616062][ T5532] loop3: detected capacity change from 0 to 512 [ 172.623551][ T5532] EXT4-fs: Ignoring removed nomblk_io_submit option [ 172.645012][ T4788] EXT4-fs (loop4): unmounting filesystem. [ 173.064274][ T5536] loop1: detected capacity change from 0 to 1024 [ 173.788772][ T5532] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 173.793189][ T5531] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 173.849566][ T5545] loop2: detected capacity change from 0 to 128 [ 173.862634][ T5547] loop1: detected capacity change from 0 to 256 [ 174.467966][ T5550] loop4: detected capacity change from 0 to 40427 [ 175.351362][ T5550] F2FS-fs (loop4): Found nat_bits in checkpoint [ 175.378685][ T5550] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 175.380965][ T5550] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 175.385691][ T5550] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 176.430830][ T5558] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 176.492199][ T5559] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 176.494345][ T5559] FAT-fs (loop2): Filesystem has been set read-only [ 176.495966][ T5559] syz.2.227: attempt to access beyond end of device [ 176.495966][ T5559] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 176.499688][ T5559] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 176.501779][ T5559] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 176.626961][ T5559] syz.2.227: attempt to access beyond end of device [ 176.626961][ T5559] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 176.630870][ T5559] syz.2.227: attempt to access beyond end of device [ 176.630870][ T5559] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 176.718274][ T4623] EXT4-fs (loop3): unmounting filesystem. [ 176.738214][ T4842] EXT4-fs (loop0): unmounting filesystem. [ 176.840512][ T5562] loop1: detected capacity change from 0 to 512 [ 176.855316][ T5562] EXT4-fs: Ignoring removed nomblk_io_submit option [ 176.912574][ T5562] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 177.265464][ T5572] EXT4-fs warning (device loop1): verify_group_input:169: Last group not full [ 177.912258][ T5072] EXT4-fs (loop1): unmounting filesystem. [ 177.912771][ T5584] loop3: detected capacity change from 0 to 512 [ 177.928655][ T5584] EXT4-fs: Ignoring removed nomblk_io_submit option [ 178.732013][ T5594] loop0: detected capacity change from 0 to 128 [ 178.759449][ T5584] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 180.326658][ T5601] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 180.546750][ T5602] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 180.549131][ T5602] FAT-fs (loop0): Filesystem has been set read-only [ 180.551009][ T5602] syz.0.238: attempt to access beyond end of device [ 180.551009][ T5602] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 180.554875][ T5602] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 180.557101][ T5602] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 180.936543][ T5600] EXT4-fs warning (device loop3): verify_group_input:169: Last group not full [ 181.201048][ T5604] loop2: detected capacity change from 0 to 512 [ 181.204597][ T5604] EXT4-fs: Ignoring removed nomblk_io_submit option [ 181.279126][ T5606] loop4: detected capacity change from 0 to 128 [ 181.411460][ T5608] loop1: detected capacity change from 0 to 512 [ 181.413779][ T5608] EXT4-fs: Ignoring removed nomblk_io_submit option [ 181.426595][ T4623] EXT4-fs (loop3): unmounting filesystem. [ 181.460745][ T5611] loop0: detected capacity change from 0 to 128 [ 181.475633][ T5604] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 181.610836][ T5617] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 182.359471][ T5621] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 182.361729][ T5621] FAT-fs (loop4): Filesystem has been set read-only [ 182.363510][ T5621] syz.4.240: attempt to access beyond end of device [ 182.363510][ T5621] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 182.372290][ T5621] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 182.374568][ T5621] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 183.476169][ T5619] EXT4-fs warning (device loop2): verify_group_input:169: Last group not full [ 183.537998][ T5616] loop3: detected capacity change from 0 to 128 [ 183.679621][ T5608] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 183.852192][ T5626] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 185.004585][ T5627] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 185.006830][ T5627] FAT-fs (loop3): Filesystem has been set read-only [ 185.206910][ T5624] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 185.220128][ T4300] EXT4-fs (loop2): unmounting filesystem. [ 185.350223][ T5636] loop0: detected capacity change from 0 to 512 [ 185.352704][ T5636] EXT4-fs: Ignoring removed nomblk_io_submit option [ 185.430930][ T5636] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 185.783786][ T5643] EXT4-fs warning (device loop0): verify_group_input:169: Last group not full [ 185.805080][ T5072] EXT4-fs (loop1): unmounting filesystem. [ 187.111705][ T4842] EXT4-fs (loop0): unmounting filesystem. [ 187.168177][ T5659] loop0: detected capacity change from 0 to 128 [ 187.264102][ T5661] loop3: detected capacity change from 0 to 512 [ 187.266677][ T5661] EXT4-fs: Ignoring removed nomblk_io_submit option [ 187.337175][ T5666] loop4: detected capacity change from 0 to 128 [ 187.641929][ T5670] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 188.063821][ T5673] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 188.065990][ T5673] FAT-fs (loop0): Filesystem has been set read-only [ 188.068224][ T5673] syz.0.252: attempt to access beyond end of device [ 188.068224][ T5673] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 188.075309][ T5673] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 188.077836][ T5673] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 189.156596][ T5675] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 189.158758][ T5675] FAT-fs (loop4): Filesystem has been set read-only [ 189.160375][ T5675] syz.4.254: attempt to access beyond end of device [ 189.160375][ T5675] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 189.164044][ T5675] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 189.166084][ T5675] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 189.315672][ T5675] syz.4.254: attempt to access beyond end of device [ 189.315672][ T5675] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 189.319403][ T5675] syz.4.254: attempt to access beyond end of device [ 189.319403][ T5675] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 189.324423][ T5661] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 189.372514][ T5678] loop1: detected capacity change from 0 to 512 [ 189.378530][ T5678] EXT4-fs: Ignoring removed nomblk_io_submit option [ 189.437246][ T5672] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 189.446523][ T4296] Bluetooth: hci3: command 0x0406 tx timeout [ 189.485065][ T5681] loop0: detected capacity change from 0 to 128 [ 189.616585][ T5682] EXT4-fs warning (device loop3): verify_group_input:169: Last group not full [ 190.019498][ T5686] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 190.107773][ T5687] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 190.109976][ T5687] FAT-fs (loop0): Filesystem has been set read-only [ 190.111906][ T5687] syz.0.256: attempt to access beyond end of device [ 190.111906][ T5687] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 190.116035][ T5687] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 190.118267][ T5687] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 190.121660][ T5687] syz.0.256: attempt to access beyond end of device [ 190.121660][ T5687] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 190.125488][ T5687] syz.0.256: attempt to access beyond end of device [ 190.125488][ T5687] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 190.420948][ T5690] loop4: detected capacity change from 0 to 512 [ 190.429926][ T5690] EXT4-fs: Ignoring removed nomblk_io_submit option [ 190.449396][ T5690] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 190.581626][ T5678] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 190.950951][ T5701] EXT4-fs warning (device loop1): verify_group_input:169: Last group not full [ 191.359367][ T4623] EXT4-fs (loop3): unmounting filesystem. [ 192.278159][ T4788] EXT4-fs (loop4): unmounting filesystem. [ 192.281939][ T5072] EXT4-fs (loop1): unmounting filesystem. [ 192.364845][ T5711] loop3: detected capacity change from 0 to 128 [ 192.395873][ T5716] loop4: detected capacity change from 0 to 512 [ 192.404087][ T5716] EXT4-fs: Ignoring removed nomblk_io_submit option [ 192.544218][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.545865][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.666472][ T5716] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 192.696416][ T5725] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 192.771548][ T5727] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 192.773740][ T5727] FAT-fs (loop3): Filesystem has been set read-only [ 193.481958][ T5730] EXT4-fs warning (device loop4): verify_group_input:169: Last group not full [ 193.663982][ T5733] loop0: detected capacity change from 0 to 128 [ 193.965380][ T5738] loop1: detected capacity change from 0 to 128 [ 194.064968][ T5740] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 194.687122][ T4788] EXT4-fs (loop4): unmounting filesystem. [ 194.815872][ T5747] loop2: detected capacity change from 0 to 128 [ 194.867361][ T5748] loop0: detected capacity change from 0 to 512 [ 194.869689][ T5748] EXT4-fs: Ignoring removed nomblk_io_submit option [ 195.090743][ T5757] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 195.436693][ T5760] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 195.438996][ T5760] FAT-fs (loop1): Filesystem has been set read-only [ 195.440875][ T5760] syz.1.270: attempt to access beyond end of device [ 195.440875][ T5760] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 195.444824][ T5760] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 195.447052][ T5760] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 196.189413][ T5765] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 196.191609][ T5765] FAT-fs (loop2): Filesystem has been set read-only [ 196.193445][ T5765] syz.2.271: attempt to access beyond end of device [ 196.193445][ T5765] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 196.197533][ T5765] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 196.199851][ T5765] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 196.205254][ T5748] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 196.277717][ T5765] syz.2.271: attempt to access beyond end of device [ 196.277717][ T5765] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 196.281585][ T5765] syz.2.271: attempt to access beyond end of device [ 196.281585][ T5765] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 196.430858][ T5751] loop4: detected capacity change from 0 to 512 [ 196.433122][ T5751] EXT4-fs: Ignoring removed nomblk_io_submit option [ 196.655767][ T5764] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 196.662340][ T5751] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 196.861961][ T5772] EXT4-fs warning (device loop4): verify_group_input:169: Last group not full [ 196.947775][ T4842] EXT4-fs (loop0): unmounting filesystem. [ 198.098032][ T4788] EXT4-fs (loop4): unmounting filesystem. [ 198.251921][ T5790] loop0: detected capacity change from 0 to 128 [ 198.291687][ T5792] loop1: detected capacity change from 0 to 512 [ 198.298589][ T5792] EXT4-fs: Ignoring removed nomblk_io_submit option [ 198.477681][ T5792] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 198.560627][ T5799] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 198.639104][ T5800] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 198.641359][ T5800] FAT-fs (loop0): Filesystem has been set read-only [ 199.341630][ T5805] loop0: detected capacity change from 0 to 128 [ 199.471445][ T5808] EXT4-fs warning (device loop1): verify_group_input:169: Last group not full [ 199.656583][ T5810] loop4: detected capacity change from 0 to 128 [ 199.970647][ T5813] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 200.050409][ T5814] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 200.052492][ T5814] FAT-fs (loop4): Filesystem has been set read-only [ 200.054230][ T5814] syz.4.287: attempt to access beyond end of device [ 200.054230][ T5814] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 200.058784][ T5814] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 200.060841][ T5814] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 200.067587][ T5814] syz.4.287: attempt to access beyond end of device [ 200.067587][ T5814] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 200.071489][ T5814] syz.4.287: attempt to access beyond end of device [ 200.071489][ T5814] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 200.085806][ T5814] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 200.734086][ T5072] EXT4-fs (loop1): unmounting filesystem. [ 200.884989][ T5822] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 201.227655][ T5821] loop2: detected capacity change from 0 to 512 [ 201.268962][ T5821] EXT4-fs: Ignoring removed nomblk_io_submit option [ 201.328483][ T5821] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 201.345497][ T5831] loop1: detected capacity change from 0 to 512 [ 201.440275][ T5831] EXT4-fs: Ignoring removed nomblk_io_submit option [ 201.489608][ T5831] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 202.126008][ T5835] EXT4-fs warning (device loop2): verify_group_input:169: Last group not full [ 202.223401][ T5843] loop3: detected capacity change from 0 to 512 [ 202.269384][ T5843] EXT4-fs: Ignoring removed nomblk_io_submit option [ 202.474213][ T5848] loop0: detected capacity change from 0 to 128 [ 202.644013][ T5843] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 202.855278][ T5853] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 203.346708][ T5854] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 203.348556][ T5854] FAT-fs (loop0): Filesystem has been set read-only [ 203.350428][ T5854] syz.0.295: attempt to access beyond end of device [ 203.350428][ T5854] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 203.354157][ T5854] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 203.356235][ T5854] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 204.540839][ T5852] EXT4-fs warning (device loop3): verify_group_input:169: Last group not full [ 204.546626][ T5856] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 204.569267][ T5072] EXT4-fs (loop1): unmounting filesystem. [ 204.573144][ T4300] EXT4-fs (loop2): unmounting filesystem. [ 204.718543][ T5860] loop4: detected capacity change from 0 to 128 [ 204.743644][ T4623] EXT4-fs (loop3): unmounting filesystem. [ 204.927198][ T5869] loop3: detected capacity change from 0 to 128 [ 207.187700][ T5873] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 208.280493][ T5872] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 208.282542][ T5872] FAT-fs (loop3): Filesystem has been set read-only [ 208.284314][ T5872] syz.3.300: attempt to access beyond end of device [ 208.284314][ T5872] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 208.288076][ T5872] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 208.290175][ T5872] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 208.326905][ T5872] syz.3.300: attempt to access beyond end of device [ 208.326905][ T5872] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 208.330616][ T5872] syz.3.300: attempt to access beyond end of device [ 208.330616][ T5872] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 208.335695][ T5872] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 208.507843][ T5874] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 208.518157][ T5887] loop1: detected capacity change from 0 to 128 [ 208.841262][ T5893] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 208.924454][ T5894] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 208.926611][ T5894] FAT-fs (loop1): Filesystem has been set read-only [ 208.928432][ T5894] syz.1.302: attempt to access beyond end of device [ 208.928432][ T5894] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 208.932731][ T5894] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 208.935331][ T5894] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 208.942322][ T5894] syz.1.302: attempt to access beyond end of device [ 208.942322][ T5894] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 208.946122][ T5894] syz.1.302: attempt to access beyond end of device [ 208.946122][ T5894] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 209.393396][ T5896] loop0: detected capacity change from 0 to 512 [ 209.395657][ T5896] EXT4-fs: Ignoring removed nomblk_io_submit option [ 209.541772][ T5902] loop1: detected capacity change from 0 to 512 [ 209.543961][ T5902] EXT4-fs: Ignoring removed nomblk_io_submit option [ 209.571953][ T5896] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 209.663359][ T5902] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 209.767765][ T5911] EXT4-fs warning (device loop0): verify_group_input:169: Last group not full [ 210.096193][ T4842] EXT4-fs (loop0): unmounting filesystem. [ 210.326880][ T4309] Bluetooth: hci5: command 0x0406 tx timeout [ 210.331499][ T5916] loop3: detected capacity change from 0 to 128 [ 210.353636][ T5920] loop4: detected capacity change from 0 to 512 [ 210.356060][ T5920] EXT4-fs: Ignoring removed nomblk_io_submit option [ 210.519214][ T4311] Bluetooth: hci1: command 0x0406 tx timeout [ 210.542056][ T5920] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 210.682880][ T5925] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 210.944886][ T5928] EXT4-fs warning (device loop4): verify_group_input:169: Last group not full [ 211.655970][ T5072] EXT4-fs (loop1): unmounting filesystem. [ 211.790494][ T5934] loop3: detected capacity change from 0 to 128 [ 211.833477][ T4788] EXT4-fs (loop4): unmounting filesystem. [ 212.155692][ T5941] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 212.241982][ T5941] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 212.244236][ T5941] FAT-fs (loop3): Filesystem has been set read-only [ 212.246080][ T5941] syz.3.313: attempt to access beyond end of device [ 212.246080][ T5941] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 212.250630][ T5941] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 212.252767][ T5941] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 212.263829][ T5941] syz.3.313: attempt to access beyond end of device [ 212.263829][ T5941] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 212.267939][ T5941] syz.3.313: attempt to access beyond end of device [ 212.267939][ T5941] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 212.279606][ T5941] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 212.812989][ T5950] loop4: detected capacity change from 0 to 128 [ 212.821300][ T5947] loop3: detected capacity change from 0 to 128 [ 212.832050][ T5949] loop0: detected capacity change from 0 to 512 [ 212.834381][ T5949] EXT4-fs: Ignoring removed nomblk_io_submit option [ 212.842396][ T5951] loop1: detected capacity change from 0 to 512 [ 212.845305][ T5951] EXT4-fs: Ignoring removed nomblk_io_submit option [ 213.024624][ T5951] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 213.035837][ T5949] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 214.196633][ T5957] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 214.456723][ T5962] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 214.458915][ T5962] FAT-fs (loop4): Filesystem has been set read-only [ 214.460722][ T5962] syz.4.315: attempt to access beyond end of device [ 214.460722][ T5962] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 214.464610][ T5962] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 214.466808][ T5962] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 215.776920][ T5959] EXT4-fs warning (device loop1): verify_group_input:169: Last group not full [ 216.042120][ T5963] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 216.106860][ T5960] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 216.174098][ T4842] EXT4-fs (loop0): unmounting filesystem. [ 216.287159][ T5072] EXT4-fs (loop1): unmounting filesystem. [ 216.365083][ T5973] loop3: detected capacity change from 0 to 512 [ 216.374671][ T5973] EXT4-fs: Ignoring removed nomblk_io_submit option [ 216.484182][ T5973] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 216.818223][ T5984] loop2: detected capacity change from 0 to 128 [ 217.224706][ T5987] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 217.322747][ T5988] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 217.325061][ T5988] FAT-fs (loop2): Filesystem has been set read-only [ 217.327002][ T5988] syz.2.323: attempt to access beyond end of device [ 217.327002][ T5988] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 217.331827][ T5988] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 217.333965][ T5988] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 217.340654][ T5988] syz.2.323: attempt to access beyond end of device [ 217.340654][ T5988] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 217.344653][ T5988] syz.2.323: attempt to access beyond end of device [ 217.344653][ T5988] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 217.780961][ T5990] loop0: detected capacity change from 0 to 512 [ 217.783816][ T5990] EXT4-fs: Ignoring removed nomblk_io_submit option [ 217.818496][ T5990] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 217.977143][ T4623] EXT4-fs (loop3): unmounting filesystem. [ 218.014158][ T6000] loop2: detected capacity change from 0 to 128 [ 218.129142][ T6001] EXT4-fs warning (device loop0): verify_group_input:169: Last group not full [ 218.795130][ T6009] loop4: detected capacity change from 0 to 512 [ 218.797598][ T6009] EXT4-fs: Ignoring removed nomblk_io_submit option [ 218.934991][ T6012] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 219.176067][ T6009] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 219.334132][ T4842] EXT4-fs (loop0): unmounting filesystem. [ 219.471903][ T6015] EXT4-fs warning (device loop4): verify_group_input:169: Last group not full [ 219.795161][ T6020] loop3: detected capacity change from 0 to 128 [ 219.801518][ T6018] loop1: detected capacity change from 0 to 512 [ 219.818573][ T6018] EXT4-fs: Ignoring removed nomblk_io_submit option [ 219.903154][ T6021] loop0: detected capacity change from 0 to 128 [ 220.143577][ T6026] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 221.688097][ T6030] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 221.690206][ T6030] FAT-fs (loop0): Filesystem has been set read-only [ 221.691904][ T6030] syz.0.330: attempt to access beyond end of device [ 221.691904][ T6030] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 221.695984][ T6030] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 221.698096][ T6030] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 221.911753][ T6031] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 221.921954][ T6018] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 221.934279][ T4788] EXT4-fs (loop4): unmounting filesystem. [ 221.937531][ T6029] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 222.260427][ T6038] EXT4-fs warning (device loop1): verify_group_input:169: Last group not full [ 223.394198][ T5072] EXT4-fs (loop1): unmounting filesystem. [ 223.451125][ T6048] loop0: detected capacity change from 0 to 128 [ 223.479691][ T6052] loop1: detected capacity change from 0 to 128 [ 223.507418][ T6056] loop2: detected capacity change from 0 to 512 [ 223.509890][ T6056] EXT4-fs: Ignoring removed nomblk_io_submit option [ 223.535484][ T6054] loop3: detected capacity change from 0 to 512 [ 223.687540][ T6054] EXT4-fs: Ignoring removed nomblk_io_submit option [ 223.704909][ T6056] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 224.725370][ T6065] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 224.811890][ T6066] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 224.814078][ T6066] FAT-fs (loop0): Filesystem has been set read-only [ 224.815934][ T6066] syz.0.338: attempt to access beyond end of device [ 224.815934][ T6066] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 224.821847][ T6066] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 224.824150][ T6066] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 225.196866][ T6061] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 225.225148][ T6054] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 225.342464][ T6071] EXT4-fs warning (device loop2): verify_group_input:169: Last group not full [ 225.815809][ T6076] loop1: detected capacity change from 0 to 512 [ 225.818280][ T6076] EXT4-fs: Ignoring removed nomblk_io_submit option [ 225.833983][ T6076] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 226.124098][ T6083] EXT4-fs warning (device loop1): verify_group_input:169: Last group not full [ 226.429732][ T4300] EXT4-fs (loop2): unmounting filesystem. [ 226.767651][ T6085] loop2: detected capacity change from 0 to 128 [ 226.798407][ T4623] EXT4-fs (loop3): unmounting filesystem. [ 226.811708][ T6088] loop4: detected capacity change from 0 to 128 [ 226.924744][ T5072] EXT4-fs (loop1): unmounting filesystem. [ 226.983217][ T6092] loop0: detected capacity change from 0 to 512 [ 226.985351][ T6092] EXT4-fs: Ignoring removed nomblk_io_submit option [ 227.072815][ T6094] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 227.696941][ T6092] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 227.722869][ T6090] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 228.177208][ T6092] EXT4-fs warning (device loop0): verify_group_input:169: Last group not full [ 229.041522][ T6115] loop2: detected capacity change from 0 to 128 [ 229.390628][ T6121] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 229.475527][ T6122] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 229.478054][ T6122] FAT-fs (loop2): Filesystem has been set read-only [ 229.916271][ T6120] loop1: detected capacity change from 0 to 512 [ 229.918744][ T6120] EXT4-fs: Ignoring removed nomblk_io_submit option [ 229.935093][ T4842] EXT4-fs (loop0): unmounting filesystem. [ 229.970012][ T6125] loop4: detected capacity change from 0 to 128 [ 230.425672][ T6135] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 230.675316][ T6136] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 230.677510][ T6136] FAT-fs (loop4): Filesystem has been set read-only [ 230.679174][ T6136] syz.4.354: attempt to access beyond end of device [ 230.679174][ T6136] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 230.682687][ T6136] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 230.684607][ T6136] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 230.987162][ T6137] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 230.991247][ T6120] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 231.319565][ T6142] EXT4-fs warning (device loop1): verify_group_input:169: Last group not full [ 231.559101][ T6144] loop4: detected capacity change from 0 to 512 [ 231.561243][ T6144] EXT4-fs: Ignoring removed nomblk_io_submit option [ 231.649998][ T6146] loop0: detected capacity change from 0 to 512 [ 231.652283][ T6146] EXT4-fs: Ignoring removed nomblk_io_submit option [ 231.668502][ T6144] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 231.675890][ T6150] loop2: detected capacity change from 0 to 128 [ 231.682893][ T6152] loop3: detected capacity change from 0 to 128 [ 231.792062][ T6146] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 234.086578][ T6160] EXT4-fs warning (device loop0): verify_group_input:169: Last group not full [ 234.247862][ T6158] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 234.250086][ T6158] FAT-fs (loop2): Filesystem has been set read-only [ 234.251894][ T6158] syz.2.360: attempt to access beyond end of device [ 234.251894][ T6158] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 234.255688][ T6158] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 234.257946][ T6158] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 234.491347][ T6161] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 235.094115][ T6162] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 235.157185][ T5072] EXT4-fs (loop1): unmounting filesystem. [ 235.657867][ T4788] EXT4-fs (loop4): unmounting filesystem. [ 235.661513][ T4842] EXT4-fs (loop0): unmounting filesystem. [ 235.721880][ T6180] loop4: detected capacity change from 0 to 512 [ 235.724276][ T6180] EXT4-fs: Ignoring removed nomblk_io_submit option [ 235.752006][ T6180] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 235.898299][ T6186] loop0: detected capacity change from 0 to 128 [ 236.091886][ T6187] EXT4-fs warning (device loop4): verify_group_input:169: Last group not full [ 237.216569][ T6189] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 237.775405][ T6192] loop2: detected capacity change from 0 to 128 [ 237.808832][ T6194] loop3: detected capacity change from 0 to 128 [ 237.906328][ T4788] EXT4-fs (loop4): unmounting filesystem. [ 237.917077][ T6196] loop0: detected capacity change from 0 to 512 [ 237.919520][ T6196] ext4: Unknown parameter 'noacl' [ 238.179532][ T6201] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 238.244009][ T6203] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 238.246276][ T6203] FAT-fs (loop3): Filesystem has been set read-only [ 238.248045][ T6203] syz.3.369: attempt to access beyond end of device [ 238.248045][ T6203] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 238.251827][ T6203] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 238.253937][ T6203] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 238.776927][ T6205] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 238.779016][ T6205] FAT-fs (loop2): Filesystem has been set read-only [ 239.152493][ T6204] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 239.264883][ T6198] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 239.408139][ T6202] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 240.278802][ T6218] loop0: detected capacity change from 0 to 512 [ 240.281005][ T6218] EXT4-fs: Ignoring removed nomblk_io_submit option [ 240.289854][ T6217] loop3: detected capacity change from 0 to 512 [ 240.292014][ T6217] EXT4-fs: Ignoring removed nomblk_io_submit option [ 240.377061][ T6217] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 240.412429][ T6225] loop1: detected capacity change from 0 to 512 [ 240.430344][ T6225] EXT4-fs: Ignoring removed nomblk_io_submit option [ 240.470057][ T6218] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 240.486968][ T6225] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 241.278016][ T6236] EXT4-fs warning (device loop0): verify_group_input:169: Last group not full [ 242.841732][ T6246] EXT4-fs warning (device loop3): verify_group_input:169: Last group not full [ 243.032135][ T4842] EXT4-fs (loop0): unmounting filesystem. [ 243.034392][ T5072] EXT4-fs (loop1): unmounting filesystem. [ 243.971964][ T6255] loop1: detected capacity change from 0 to 128 [ 243.984094][ T4623] EXT4-fs (loop3): unmounting filesystem. [ 245.467960][ T6261] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 245.470578][ T6261] FAT-fs (loop1): Filesystem has been set read-only [ 245.472715][ T6261] syz.1.381: attempt to access beyond end of device [ 245.472715][ T6261] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 245.477154][ T6261] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 245.479506][ T6261] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 245.497894][ T6261] syz.1.381: attempt to access beyond end of device [ 245.497894][ T6261] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 245.502124][ T6261] syz.1.381: attempt to access beyond end of device [ 245.502124][ T6261] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 245.519809][ T6261] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 245.719327][ T6264] loop2: detected capacity change from 0 to 128 [ 245.739982][ T6265] loop4: detected capacity change from 0 to 128 [ 245.785363][ T6268] loop3: detected capacity change from 0 to 512 [ 245.845939][ T6268] EXT4-fs: Ignoring removed nomblk_io_submit option [ 246.075236][ T6273] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 246.077491][ T6273] FAT-fs (loop4): Filesystem has been set read-only [ 246.079354][ T6273] syz.4.384: attempt to access beyond end of device [ 246.079354][ T6273] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 246.083736][ T6273] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 246.086085][ T6273] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 247.296570][ T6275] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 247.496617][ T6276] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 247.498719][ T6276] FAT-fs (loop2): Filesystem has been set read-only [ 247.500388][ T6276] syz.2.385: attempt to access beyond end of device [ 247.500388][ T6276] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 247.504044][ T6276] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 247.506118][ T6276] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 247.676133][ T6277] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 247.753537][ T6268] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 248.006175][ T6290] EXT4-fs warning (device loop3): verify_group_input:169: Last group not full [ 248.108479][ T6293] loop0: detected capacity change from 0 to 512 [ 248.110530][ T6293] EXT4-fs: Ignoring removed nomblk_io_submit option [ 248.787985][ T4623] EXT4-fs (loop3): unmounting filesystem. [ 248.798478][ T6293] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 248.866334][ T6299] loop2: detected capacity change from 0 to 128 [ 248.878813][ T6301] loop4: detected capacity change from 0 to 512 [ 248.881049][ T6301] EXT4-fs: Ignoring removed nomblk_io_submit option [ 250.316572][ T6309] EXT4-fs warning (device loop0): verify_group_input:169: Last group not full [ 250.326662][ T6308] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 250.716568][ T6310] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 250.718875][ T6310] FAT-fs (loop2): Filesystem has been set read-only [ 250.996640][ T47] Bluetooth: hci0: command 0x0406 tx timeout [ 251.038583][ T6301] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 251.463761][ T4842] EXT4-fs (loop0): unmounting filesystem. [ 251.471477][ T6313] loop3: detected capacity change from 0 to 512 [ 251.473736][ T6313] EXT4-fs: Ignoring removed nomblk_io_submit option [ 251.663743][ T6323] loop1: detected capacity change from 0 to 128 [ 251.838135][ T6327] EXT4-fs warning (device loop4): verify_group_input:169: Last group not full [ 252.583091][ T6313] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 252.775265][ T6332] loop0: detected capacity change from 0 to 128 [ 253.941823][ T6337] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 253.943959][ T6337] FAT-fs (loop0): Filesystem has been set read-only [ 253.945849][ T6337] syz.0.398: attempt to access beyond end of device [ 253.945849][ T6337] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 253.950976][ T6337] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 253.953301][ T6337] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 254.112054][ T6334] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 254.114320][ T6334] FAT-fs (loop1): Filesystem has been set read-only [ 254.116079][ T6334] syz.1.397: attempt to access beyond end of device [ 254.116079][ T6334] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 254.119882][ T6334] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 254.121901][ T6334] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 254.124540][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.126438][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.233477][ T6338] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 254.294518][ T6336] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 254.410271][ T4788] EXT4-fs (loop4): unmounting filesystem. [ 254.564315][ T6343] loop4: detected capacity change from 0 to 128 [ 254.578163][ T4623] EXT4-fs (loop3): unmounting filesystem. [ 254.632195][ T6346] loop2: detected capacity change from 0 to 128 [ 256.534403][ T6355] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 256.536603][ T6355] FAT-fs (loop4): Filesystem has been set read-only [ 256.538618][ T6355] syz.4.399: attempt to access beyond end of device [ 256.538618][ T6355] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 256.547898][ T6355] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 256.550218][ T6355] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 257.564452][ T6359] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 257.652145][ T6362] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 257.654269][ T6362] FAT-fs (loop2): Filesystem has been set read-only [ 257.880175][ T6365] loop4: detected capacity change from 0 to 512 [ 257.882285][ T6365] EXT4-fs: Ignoring removed nomblk_io_submit option [ 257.993939][ T6365] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 259.030796][ T6384] loop3: detected capacity change from 0 to 512 [ 259.033191][ T6384] EXT4-fs: Ignoring removed nomblk_io_submit option [ 259.037551][ T6383] loop2: detected capacity change from 0 to 128 [ 259.054317][ T6386] loop0: detected capacity change from 0 to 128 [ 260.221833][ T6391] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 260.353396][ T6392] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 260.355566][ T6392] FAT-fs (loop0): Filesystem has been set read-only [ 260.357640][ T6392] syz.0.411: attempt to access beyond end of device [ 260.357640][ T6392] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 260.363031][ T6392] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 260.365072][ T6392] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 260.656950][ T6393] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 260.787162][ T6384] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 260.916102][ T6388] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 260.935665][ T6397] loop1: detected capacity change from 0 to 512 [ 260.938104][ T6397] EXT4-fs: Ignoring removed nomblk_io_submit option [ 261.806873][ T6398] EXT4-fs warning (device loop3): verify_group_input:169: Last group not full [ 262.002171][ T6397] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 262.148570][ T4788] EXT4-fs (loop4): unmounting filesystem. [ 262.214685][ T4623] EXT4-fs (loop3): unmounting filesystem. [ 262.305670][ T6411] loop4: detected capacity change from 0 to 128 [ 262.325232][ T6415] loop2: detected capacity change from 0 to 128 [ 263.890549][ T6419] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 263.892770][ T6419] FAT-fs (loop4): Filesystem has been set read-only [ 263.894629][ T6419] syz.4.415: attempt to access beyond end of device [ 263.894629][ T6419] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 263.902719][ T6418] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 263.904826][ T6418] FAT-fs (loop2): Filesystem has been set read-only [ 263.906703][ T6418] syz.2.417: attempt to access beyond end of device [ 263.906703][ T6418] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 263.912109][ T6418] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 263.914425][ T6418] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 263.918154][ T6419] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 263.920369][ T6419] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 264.002619][ T6418] syz.2.417: attempt to access beyond end of device [ 264.002619][ T6418] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 264.007984][ T6418] syz.2.417: attempt to access beyond end of device [ 264.007984][ T6418] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 264.012799][ T6421] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 264.314288][ T5072] EXT4-fs (loop1): unmounting filesystem. [ 264.484284][ T6428] loop2: detected capacity change from 0 to 512 [ 264.516907][ T6428] EXT4-fs: Ignoring removed nomblk_io_submit option [ 264.559193][ T6428] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 265.632325][ T6436] loop3: detected capacity change from 0 to 128 [ 265.965636][ T6445] EXT4-fs warning (device loop2): verify_group_input:169: Last group not full [ 266.788000][ T6451] loop1: detected capacity change from 0 to 512 [ 266.790426][ T6451] EXT4-fs: Ignoring removed nomblk_io_submit option [ 266.798835][ T6448] loop0: detected capacity change from 0 to 128 [ 267.063137][ T6455] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 267.167300][ T6456] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 267.169406][ T6456] FAT-fs (loop3): Filesystem has been set read-only [ 267.326497][ T6451] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 267.642298][ T6460] loop4: detected capacity change from 0 to 512 [ 268.116441][ T6462] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 268.118661][ T6462] FAT-fs (loop0): Filesystem has been set read-only [ 268.120749][ T6462] syz.0.424: attempt to access beyond end of device [ 268.120749][ T6462] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 268.130498][ T6462] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 268.132856][ T6462] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 269.211814][ T6466] EXT4-fs warning (device loop1): verify_group_input:169: Last group not full [ 269.398346][ T6459] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 269.416466][ T6464] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 269.506866][ T6460] EXT4-fs: Ignoring removed nomblk_io_submit option [ 269.528393][ T4300] EXT4-fs (loop2): unmounting filesystem. [ 269.578537][ T6460] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 269.600289][ T6473] loop0: detected capacity change from 0 to 128 [ 269.684961][ T5072] EXT4-fs (loop1): unmounting filesystem. [ 269.838088][ T6476] loop2: detected capacity change from 0 to 512 [ 271.028663][ T6480] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 271.039525][ T6477] EXT4-fs warning (device loop4): verify_group_input:169: Last group not full [ 271.374356][ T6476] EXT4-fs: Ignoring removed nomblk_io_submit option [ 271.443847][ T6486] loop1: detected capacity change from 0 to 128 [ 271.510418][ T6476] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 271.606771][ T6489] loop3: detected capacity change from 0 to 128 [ 271.951331][ T6492] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 271.953670][ T6492] FAT-fs (loop1): Filesystem has been set read-only [ 271.955423][ T6492] syz.1.430: attempt to access beyond end of device [ 271.955423][ T6492] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 271.959138][ T6492] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 271.961278][ T6492] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 271.969491][ T6495] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 272.436775][ T6497] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 272.439031][ T6497] FAT-fs (loop3): Filesystem has been set read-only [ 272.440864][ T6497] syz.3.431: attempt to access beyond end of device [ 272.440864][ T6497] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 272.444750][ T6497] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 272.446909][ T6497] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 272.938284][ T6498] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 272.947016][ T4788] EXT4-fs (loop4): unmounting filesystem. [ 274.461346][ T4300] EXT4-fs (loop2): unmounting filesystem. [ 274.898246][ T6516] loop1: detected capacity change from 0 to 128 [ 275.096086][ T6520] loop4: detected capacity change from 0 to 512 [ 275.106045][ T6520] EXT4-fs: Ignoring removed nomblk_io_submit option [ 275.220421][ T6523] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 275.305957][ T6524] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 275.308283][ T6524] FAT-fs (loop1): Filesystem has been set read-only [ 275.309955][ T6524] syz.1.439: attempt to access beyond end of device [ 275.309955][ T6524] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 275.314440][ T6524] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 275.316457][ T6524] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 275.320090][ T6524] syz.1.439: attempt to access beyond end of device [ 275.320090][ T6524] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 275.324010][ T6524] syz.1.439: attempt to access beyond end of device [ 275.324010][ T6524] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 275.338789][ T6524] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 275.570045][ T6525] loop3: detected capacity change from 0 to 512 [ 275.585108][ T6525] EXT4-fs: Ignoring removed nomblk_io_submit option [ 275.627790][ T6533] loop2: detected capacity change from 0 to 128 [ 275.797631][ T6520] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 275.812407][ T6525] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 275.926324][ T6536] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 276.011683][ T6537] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 276.013828][ T6537] FAT-fs (loop2): Filesystem has been set read-only [ 276.703132][ T6545] loop0: detected capacity change from 0 to 128 [ 276.750944][ T6548] loop2: detected capacity change from 0 to 128 [ 276.770834][ T6550] EXT4-fs warning (device loop4): verify_group_input:169: Last group not full [ 277.119598][ T6553] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 278.396157][ T6556] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 278.398389][ T6556] FAT-fs (loop2): Filesystem has been set read-only [ 278.400313][ T6556] syz.2.444: attempt to access beyond end of device [ 278.400313][ T6556] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 278.408483][ T6556] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 278.410776][ T6556] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 278.817041][ T4623] EXT4-fs (loop3): unmounting filesystem. [ 278.892643][ T4788] EXT4-fs (loop4): unmounting filesystem. [ 278.939079][ T6565] loop3: detected capacity change from 0 to 128 [ 279.059825][ T6563] loop1: detected capacity change from 0 to 512 [ 279.061959][ T6563] EXT4-fs: Ignoring removed nomblk_io_submit option [ 279.102059][ T6563] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 279.216624][ T6571] loop0: detected capacity change from 0 to 8 [ 279.758911][ T6572] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 279.842526][ T6573] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 279.844661][ T6573] FAT-fs (loop3): Filesystem has been set read-only [ 279.846519][ T6573] syz.3.446: attempt to access beyond end of device [ 279.846519][ T6573] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 279.850785][ T6573] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 279.852962][ T6573] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 279.996983][ T6574] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 280.296540][ T6571] SQUASHFS error: lzo decompression failed, data probably corrupt [ 280.299151][ T6571] SQUASHFS error: Failed to read block 0x91: -5 [ 280.300789][ T6571] SQUASHFS error: Unable to read metadata cache entry [8f] [ 280.302615][ T6571] SQUASHFS error: Unable to read inode 0x11f [ 281.068966][ T6585] loop3: detected capacity change from 0 to 512 [ 281.091426][ T6585] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.450: bg 0: block 131: padding at end of block bitmap is not set [ 281.107274][ T6585] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 281.110797][ T6585] EXT4-fs (loop3): 1 truncate cleaned up [ 281.112567][ T6585] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 281.477938][ T6593] netlink: 224 bytes leftover after parsing attributes in process `syz.3.450'. [ 284.063353][ T4623] EXT4-fs (loop3): unmounting filesystem. [ 284.063882][ T6602] loop0: detected capacity change from 0 to 128 [ 284.067939][ T5072] EXT4-fs (loop1): unmounting filesystem. [ 284.106855][ T6607] capability: warning: `syz.4.458' uses deprecated v2 capabilities in a way that may be insecure [ 284.121523][ T6609] loop2: detected capacity change from 0 to 512 [ 284.123806][ T6609] EXT4-fs: Ignoring removed nomblk_io_submit option [ 284.309929][ T6613] loop1: detected capacity change from 0 to 512 [ 284.312422][ T6613] EXT4-fs: Ignoring removed nomblk_io_submit option [ 284.326204][ T6609] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 285.308144][ T6618] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 285.310277][ T6618] FAT-fs (loop0): Filesystem has been set read-only [ 285.312246][ T6618] syz.0.455: attempt to access beyond end of device [ 285.312246][ T6618] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 285.317567][ T6618] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 285.319896][ T6618] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 286.070770][ T6613] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 288.946536][ T6638] EXT4-fs warning (device loop2): verify_group_input:169: Last group not full [ 289.132191][ T6635] EXT4-fs warning (device loop1): verify_group_input:169: Last group not full [ 289.399988][ T6646] loop3: detected capacity change from 0 to 1024 [ 289.911445][ T4300] EXT4-fs (loop2): unmounting filesystem. [ 290.057900][ T6647] netlink: 264 bytes leftover after parsing attributes in process `syz.0.463'. [ 290.109579][ T5072] EXT4-fs (loop1): unmounting filesystem. [ 290.141694][ T6647] netlink: 148 bytes leftover after parsing attributes in process `syz.0.463'. [ 290.160355][ T6647] loop0: detected capacity change from 0 to 64 [ 290.184257][ T6654] capability: warning: `syz.4.464' uses 32-bit capabilities (legacy support in use) [ 290.224651][ T6655] loop1: detected capacity change from 0 to 512 [ 290.228589][ T6655] EXT4-fs: Ignoring removed nomblk_io_submit option [ 290.233127][ T6653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.290749][ T6655] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 290.306681][ T6653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.315641][ T6653] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 292.670282][ T5072] EXT4-fs (loop1): unmounting filesystem. [ 292.695884][ T6675] loop0: detected capacity change from 0 to 128 [ 292.886063][ T6679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.989152][ T6684] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 292.991415][ T6684] FAT-fs (loop0): Filesystem has been set read-only [ 292.993164][ T6684] syz.0.470: attempt to access beyond end of device [ 292.993164][ T6684] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 292.997524][ T6684] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 292.999594][ T6684] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 293.109073][ T6684] syz.0.470: attempt to access beyond end of device [ 293.109073][ T6684] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 293.113050][ T6684] syz.0.470: attempt to access beyond end of device [ 293.113050][ T6684] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 293.699625][ T6682] mkiss: ax0: crc mode is auto. [ 293.721612][ T6679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.782424][ T4345] wlan1: authenticate with 08:02:11:00:00:00 [ 293.787235][ T4345] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 293.787791][ T6679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.794023][ T4418] wlan1: authenticated [ 293.795677][ T4418] ------------[ cut here ]------------ [ 293.797124][ T4418] WARNING: CPU: 0 PID: 4418 at net/wireless/core.h:246 cfg80211_rx_mlme_mgmt+0x2f8/0x614 [ 293.799879][ T4418] Modules linked in: [ 293.800968][ T4418] CPU: 0 PID: 4418 Comm: kworker/u4:7 Not tainted 6.1.110-syzkaller #0 [ 293.803201][ T4418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 293.805327][ T6693] loop3: detected capacity change from 0 to 512 [ 293.806015][ T4418] Workqueue: phy20 ieee80211_iface_work [ 293.809094][ T4418] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 293.811012][ T4418] pc : cfg80211_rx_mlme_mgmt+0x2f8/0x614 [ 293.812601][ T4418] lr : cfg80211_rx_mlme_mgmt+0x2f8/0x614 [ 293.814002][ T4418] sp : ffff8000216375d0 [ 293.815178][ T4418] x29: ffff8000216375d0 x28: 0000000000000000 x27: ffff800021637a40 [ 293.815689][ T6693] EXT4-fs: Ignoring removed nomblk_io_submit option [ 293.817331][ T4418] x26: ffff8000159d0000 x25: 1ffff00002b3a0af x24: dfff800000000000 [ 293.817358][ T4418] x23: 0000000000000000 x22: ffff0000d8000000 x21: ffff0000d8000c90 [ 293.817377][ T4418] x20: ffff0000d9654c00 x19: 000000000000001e x18: 1fffe0003679f176 [ 293.817396][ T4418] x17: 0000000000000000 x16: ffff8000084fb1ec x15: 0000000000000002 [ 293.817413][ T4418] x14: 0000000000000003 x13: ffff0000d36c0000 x12: 0000000000100000 [ 293.817431][ T4418] x11: 0000000000000809 x10: ffff80002f33a000 x9 : ffff800011a386d8 [ 293.817449][ T4418] x8 : 000000000000080a x7 : 0001000000000000 x6 : 0030004000060003 [ 293.817467][ T4418] x5 : ffff800021637528 x4 : 0000000000000002 x3 : ffff800012365670 [ 293.836062][ T4418] x2 : 000000000000001e x1 : 0000000000000000 x0 : 0000000000000000 [ 293.838389][ T4418] Call trace: [ 293.839252][ T4418] cfg80211_rx_mlme_mgmt+0x2f8/0x614 [ 293.840701][ T4418] ieee80211_sta_rx_queued_mgmt+0x1b30/0x36c4 [ 293.842460][ T4418] ieee80211_iface_work+0x574/0xa90 [ 293.843870][ T4418] process_one_work+0x7ac/0x1404 [ 293.845200][ T4418] worker_thread+0x8e4/0xfec [ 293.846514][ T4418] kthread+0x250/0x2d8 [ 293.847662][ T4418] ret_from_fork+0x10/0x20 [ 293.848824][ T4418] irq event stamp: 1088762 [ 293.850046][ T4418] hardirqs last enabled at (1088761): [] __up_console_sem+0xb4/0x100 [ 293.852743][ T4418] hardirqs last disabled at (1088762): [] el1_dbg+0x24/0x80 [ 293.855402][ T4418] softirqs last enabled at (1088708): [] ieee80211_ibss_work+0x2d8/0x1230 [ 293.858230][ T4418] softirqs last disabled at (1088706): [] ieee80211_ibss_work+0xd8/0x1230 [ 293.861116][ T4418] ---[ end trace 0000000000000000 ]--- [ 293.872731][ T4418] ------------[ cut here ]------------ [ 293.874175][ T4418] WARNING: CPU: 0 PID: 4418 at net/wireless/core.h:246 cfg80211_sme_rx_auth+0x458/0x5a4 [ 293.876801][ T4418] Modules linked in: [ 293.877816][ T4418] CPU: 0 PID: 4418 Comm: kworker/u4:7 Tainted: G W 6.1.110-syzkaller #0 [ 293.880428][ T4418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 293.883165][ T4418] Workqueue: phy20 ieee80211_iface_work [ 293.884712][ T4418] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 293.886846][ T4418] pc : cfg80211_sme_rx_auth+0x458/0x5a4 [ 293.888375][ T4418] lr : cfg80211_sme_rx_auth+0x458/0x5a4 [ 293.889894][ T4418] sp : ffff8000216372e0 [ 293.891054][ T4418] x29: ffff800021637570 x28: ffff0000d9654c00 x27: ffff800021637a40 [ 293.893216][ T4418] x26: dfff800000000000 x25: ffff7000042c6e60 x24: ffff0000d0610760 [ 293.895300][ T4418] x23: ffff8000159d0000 x22: 0000000000000000 x21: 0000000000000000 [ 293.897416][ T4418] x20: 1ffff00002b3a0af x19: ffff0000d8000c90 x18: ffff800021636f20 [ 293.899421][ T4418] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: ffff800018589f80 [ 293.901669][ T4418] x14: ffff0000d36c0a78 x13: dfff800000000000 x12: 0000000000100000 [ 293.903831][ T4418] x11: 00000000000d6b36 x10: ffff80002f33a000 x9 : ffff800011a4dc6c [ 293.905944][ T4418] x8 : 00000000000d6b37 x7 : 0000000000000000 x6 : 0000000000000000 [ 293.908078][ T4418] x5 : ffff800021637260 x4 : 0000000000000000 x3 : 0000000000000000 [ 293.910088][ T4418] x2 : 000000000000001e x1 : 0000000000000000 x0 : 0000000000000000 [ 293.912205][ T4418] Call trace: [ 293.913096][ T4418] cfg80211_sme_rx_auth+0x458/0x5a4 [ 293.914476][ T4418] cfg80211_rx_mlme_mgmt+0x29c/0x614 [ 293.915785][ T4418] ieee80211_sta_rx_queued_mgmt+0x1b30/0x36c4 [ 293.917400][ T4418] ieee80211_iface_work+0x574/0xa90 [ 293.918758][ T4418] process_one_work+0x7ac/0x1404 [ 293.920093][ T4418] worker_thread+0x8e4/0xfec [ 293.921364][ T4418] kthread+0x250/0x2d8 [ 293.922441][ T4418] ret_from_fork+0x10/0x20 [ 293.923613][ T4418] irq event stamp: 1088946 [ 293.924798][ T4418] hardirqs last enabled at (1088945): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 293.927743][ T4418] hardirqs last disabled at (1088946): [] el1_dbg+0x24/0x80 [ 293.930150][ T4418] softirqs last enabled at (1088914): [] handle_softirqs+0xb84/0xd58 [ 293.932860][ T4418] softirqs last disabled at (1088765): [] __do_softirq+0x14/0x20 [ 293.935448][ T4418] ---[ end trace 0000000000000000 ]--- [ 293.940966][ T6679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.962267][ T4342] mac80211_hwsim hwsim19 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP [ 293.968207][ T4418] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 293.975565][ T4418] wlan1: associated [ 293.983534][ T4418] ------------[ cut here ]------------ [ 293.985061][ T4418] WARNING: CPU: 0 PID: 4418 at net/wireless/core.h:246 __cfg80211_connect_result+0x175c/0x1bb8 [ 293.987976][ T4418] Modules linked in: [ 293.989063][ T4418] CPU: 0 PID: 4418 Comm: kworker/u4:7 Tainted: G W 6.1.110-syzkaller #0 [ 293.991718][ T4418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 293.994540][ T4418] Workqueue: phy20 ieee80211_iface_work [ 293.996098][ T4418] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 293.998341][ T4418] pc : __cfg80211_connect_result+0x175c/0x1bb8 [ 294.000055][ T4418] lr : __cfg80211_connect_result+0x175c/0x1bb8 [ 294.001952][ T4418] sp : ffff800021637180 [ 294.003087][ T4418] x29: ffff800021637260 x28: dfff800000000000 x27: ffff800021637220 [ 294.005277][ T4418] x26: ffff8000216378c0 x25: 0000000000000001 x24: ffff0000d8000000 [ 294.007448][ T4418] x23: ffff0000d8000c90 x22: ffff8000159d0000 x21: 0000000000000000 [ 294.009698][ T4418] x20: 1ffff00002b3a0af x19: ffff800021637380 x18: 1fffe0003679f176 [ 294.011827][ T4418] x17: ffff800011a38010 x16: ffff8000084fb1ec x15: ffff800011a38010 [ 294.013868][ T4418] x14: 1ffff00002b3a0b0 x13: dfff800000000000 x12: 0000000000100000 [ 294.015969][ T4418] x11: 00000000000061b5 x10: ffff80002f33a000 x9 : ffff800011a4cc74 [ 294.017399][ T6693] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 294.018248][ T4418] x8 : 00000000000061b6 x7 : 0000000000000000 x6 : 0000000000000000 [ 294.018274][ T4418] x5 : ffff800021636f40 x4 : 0000000000000000 x3 : 0000000000000010 [ 294.024723][ T4418] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 294.027014][ T4418] Call trace: [ 294.027836][ T4418] __cfg80211_connect_result+0x175c/0x1bb8 [ 294.029500][ T4418] cfg80211_rx_assoc_resp+0x908/0xcac [ 294.030866][ T4418] ieee80211_sta_rx_queued_mgmt+0x278c/0x36c4 [ 294.032457][ T4418] ieee80211_iface_work+0x574/0xa90 [ 294.033813][ T4418] process_one_work+0x7ac/0x1404 [ 294.035194][ T4418] worker_thread+0x8e4/0xfec [ 294.036536][ T4418] kthread+0x250/0x2d8 [ 294.037699][ T4418] ret_from_fork+0x10/0x20 [ 294.038959][ T4418] irq event stamp: 1089386 [ 294.040138][ T4418] hardirqs last enabled at (1089385): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 294.042839][ T4418] hardirqs last disabled at (1089386): [] el1_dbg+0x24/0x80 [ 294.045321][ T4418] softirqs last enabled at (1089352): [] handle_softirqs+0xb84/0xd58 [ 294.047900][ T4418] softirqs last disabled at (1089339): [] __do_softirq+0x14/0x20 [ 294.050445][ T4418] ---[ end trace 0000000000000000 ]--- [ 295.831955][ T6702] EXT4-fs warning (device loop3): verify_group_input:169: Last group not full [ 296.069268][ T4623] EXT4-fs (loop3): unmounting filesystem.