last executing test programs: 1m18.774675142s ago: executing program 3 (id=27): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ff020000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x9, &(0x7f0000000080)=""/9, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x5}, 0x94) 1m18.306686113s ago: executing program 3 (id=28): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) futex(0x0, 0x100, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x4000000, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b71119246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r2, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) sendfile(r4, r3, 0x0, 0x0) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000040)={0x1, 0x2, 0x34, 0x7, 0x80, 0x5}) 1m17.931672677s ago: executing program 3 (id=31): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4044010}, 0x0) (async) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4044010}, 0x0) recvmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)=""/112, 0x70}], 0x1}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)=""/112, 0x70}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a4", 0x1b}], 0x1}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000480)=ANY=[], 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x149040, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ddffffff", @ANYRES16=r7, @ANYBLOB="010000000000000000000a00000004000180080004000000000004000680"], 0x24}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) (async) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) 1m17.256776221s ago: executing program 3 (id=38): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendto$x25(r0, 0x0, 0x0, 0x24004850, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$nfs4(&(0x7f0000000180)='/', &(0x7f00000001c0)='./file1\x00', 0x0, 0x2085008, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x8000, &(0x7f0000000240)={0x0, 0x0, 0x40000}, 0x20) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000090) socket$nl_xfrm(0x10, 0x3, 0x6) 1m17.167091928s ago: executing program 3 (id=41): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8240, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000100)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40000000100039042abd7000fbdbdf2500000000", @ANYRES32=r3, @ANYBLOB="858804044d7a02002000128008000100736974001400028008000300ac1414bb06000f0001"], 0x40}}, 0x4004050) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000040)={r3, 0x1, 0x6, @remote}, 0x10) sendto$packet(r1, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @local}, 0x14) 1m15.435768113s ago: executing program 3 (id=62): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0x9953, 0x80, 0x2, 0x1e2}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000980)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) ioctl$sock_bt_hci(r0, 0x400448e6, 0xfffffffffffffffe) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f00000001c0)={@id={0x2, 0x0, @c}}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x48, 0x8001}, &(0x7f0000000080)=0x8) r8 = syz_mount_image$ext4(&(0x7f0000000680)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0x1880, &(0x7f0000000300)={[{@grpjquota}, {@journal_checksum}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@bh}, {@errors_continue}, {@nobh}, {@noblock_validity}, {@data_ordered}]}, 0x43, 0x465, &(0x7f0000000f00)="$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") chdir(&(0x7f0000000400)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r8, {0x5}}, './file0\x00'}) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r9, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000700)={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f00000008c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x4000}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}], 0x30}}], 0x2, 0x40001) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r10, 0x2000009) 1m14.876550065s ago: executing program 32 (id=62): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0x9953, 0x80, 0x2, 0x1e2}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000980)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) ioctl$sock_bt_hci(r0, 0x400448e6, 0xfffffffffffffffe) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f00000001c0)={@id={0x2, 0x0, @c}}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x48, 0x8001}, &(0x7f0000000080)=0x8) r8 = syz_mount_image$ext4(&(0x7f0000000680)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0x1880, &(0x7f0000000300)={[{@grpjquota}, {@journal_checksum}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@bh}, {@errors_continue}, {@nobh}, {@noblock_validity}, {@data_ordered}]}, 0x43, 0x465, &(0x7f0000000f00)="$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") chdir(&(0x7f0000000400)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r8, {0x5}}, './file0\x00'}) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r9, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000700)={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f00000008c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x4000}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}], 0x30}}], 0x2, 0x40001) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r10, 0x2000009) 53.155742579s ago: executing program 4 (id=256): r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000000)=0x10, 0x800) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f00000000c0)={0x1, 'ip6gretap0\x00', {}, 0x6}) (async) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000080)=0x7, 0x4) (async) syz_emit_ethernet(0x46, &(0x7f0000000280)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x8, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, @broadcast, @loopback}, "03a50857de3cf18b"}}}}}, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) unshare(0x22020400) (async) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000001480)) r2 = socket$inet(0x2, 0x3, 0x4) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000200)={r2, &(0x7f0000000040)='GPL\x00', 0x400801, &(0x7f0000000140)={@align=0x7fff, {0x9, 0x7f, 0x7, 0x2}}, 0x6, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x10001}) ioctl$I2C_TIMEOUT(r3, 0x702, 0x9) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907", 0x2) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0xd, &(0x7f0000000bc0)=@framed={{}, [@exit, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x38}, @map_fd, @map_idx, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x2}, 0x90) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000240)={r0, r4}) epoll_create1(0x80000) 53.129645744s ago: executing program 4 (id=258): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r1 = open$dir(&(0x7f00000005c0)='./file0\x00', 0x64002, 0x41) unlinkat(r1, &(0x7f0000000600)='./file0\x00', 0x0) (async) getsockname(r0, 0x0, &(0x7f00000001c0)) (async) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000580)=[{{&(0x7f0000000200)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000440)=""/148, 0x94}], 0x2, &(0x7f0000000540)=""/11, 0xb}, 0x9}], 0x1, 0x10002, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x3) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32], 0x48) (async) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="05"], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) (async) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000280)='oom_adj\x00') read$watch_queue(r12, &(0x7f0000000080)=""/35, 0x23) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r9}}) write$P9_RVERSION(r11, &(0x7f0000000100)=ANY=[@ANYBLOB="003950323030302e4c4cca368f97a5ebb3a0557eefe4000000000000000000000000cb4c0303001264aadfb83117af3d2b180a5a7757c7e0c4da494e7646985eac8b46cb42789c026643e870c1354b96bc6d62b5d5ff75af1c4b130b2810ba7e2461d086efa3d17839fb5c0f28f567d19809e6fbe73326f91f91e2b21b"], 0x15) 52.879182251s ago: executing program 4 (id=260): ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, &(0x7f0000000040)={0xd, 0x1}) (async) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r0, 0xa, 0x2) r1 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x0, 0x0) pread64(r1, &(0x7f0000000080)=""/62, 0x3e, 0x2e) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000780)=ANY=[@ANYBLOB="880200001000010029bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="008000000011000014000300766574683100000000000000000000000c002b80080003002400000074003a80"], 0x288}, 0x1, 0x0, 0x0, 0x2000c046}, 0x20000000) (async, rerun: 32) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbdf, &(0x7f0000000c00)="$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") (async, rerun: 32) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x15b042, 0x20) writev(r3, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000140)="a9", 0x1}], 0x2) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000000)={0x1}) 41.580768832s ago: executing program 4 (id=271): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x9e, &(0x7f00000000c0)={[{@orlov}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwritev(r0, &(0x7f0000001600)=[{&(0x7f00000012c0)="7a2eb2aa0eb305e5a5abc4", 0xb}], 0x1, 0x2, 0x3) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2800000, &(0x7f0000000580)={[{@debug}, {@usrjquota}, {@nouser_xattr}, {@test_dummy_encryption}, {@errors_continue}, {@data_err_ignore}, {@delalloc}, {@noquota}], [{@obj_role={'obj_role', 0x3d, '.\xfe\xfd7\xacH\x01\x82)\xeeM\x97\xbb\x90\x9a^\xc5\x93\x96\x87\xf3\x9a\x16\xa5\xc2\x1f(\x8en%\x17\xd8u[\xecx\x03u\xfe3e\xdc\xabH_\x18GF>\xce\xdeJ\xf1\x02\x89~\x8d\xcb\xa7 \xe6@8\x95\xea\x10\xadm\x0fk\xa9a\xa5\xe5\x11\xe1 \xd0\x9e0z\x02:\\\xd4\xad\xeb\xc56\xb2\x80*c.,\x04C'}}]}, 0x0, 0xbc8, &(0x7f0000002380)="$eJzs3M9rHNcdAPDvjH7alrtyKaXuxSql2FC6ll1kalOoXVx66aHQXgsW8soIrX8gqTiSdVgl/0BIcg7kEkhiEnyIz74kkGsuiXONySFggmIlEEKiMPtDWku7+mGtNIr8+cDTvDdvZt73q5F23oPdDeC5NZT9SCOOR8SVJKJQ359GRG+11h9RqR23tDg/9u3i/FgSy8v/+SqJJCKeLM6PNa6V1LdH6o3+iPj470n88qX1407Pzk2OlsulqXr79Mz1W6enZ+f+NHF99FrpWunGmXN/GTk7cm74/EjHcv3u84v3v/ndP7+ofP/2D3e/fvXNJC7GQL2vOY961js2FEMrv5Nm3REx2oHr7wdd9Xya80y6Nzkp3eWgAABoK22aw/06CtEVq5O3QnzwSa7BAQAAAB2x3BWxDAAAABxwifU/AAAAHHCN9wE8WZwfa5R835Gwtx5fiojBWv5L9VLr6Y5KddsfPRFx+EkSzR9rTWqn7dhQRDz67Px7WYkWn0PebZWFiPhNq/ufVPMfrH8Sem3+aUQMd2D8oTXtn1P+Fzswft75A/B8enCp9iBb//xLV+Y/0eL5193i2fUs8n7+NeZ/S+vmf6v5d7WZ//17i2Pceev12+36svz/ev8f7zZKNn623VFS2/B4IeK33a3yT1byT9rkf2WLYxR+vF1q15d3/stvRJyM1vk3JBt/P9Hp8Ylyabj2s+UYCx+NvNNu/Lzzz+7/4Tb5b3D/+7N9t566Uvsv9fnf5cv32vVtnn/6ZW/y32qtt77nhdGZmakzEb3Jv9bvP7txvo1jGtfI8j/1+43//1v9/WevCZX630aW+UJ9m7VfXDPm3+7eeX+j/LO1X573/+r2739138tbHOMPH75yql1f8/o3K9n4j5LaWhgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIgkLUZEUq2nabEYcSQifhWH0/LN6Zk/jt/8/42rWV/EYPSk4xPl0nBEFGrtJGufqdZX22fXtP8cEcci4rXCoWq7OHazfDXv5AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhxJCIGIkmLEZFGxFIhTYvFvKMCAAAAOm4w7wAAAACAXWf9DwAAAAef9T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC77NiJBw+TiKhcOFQtmd56X0+ukQG7Lc07ACA3XXkHAOSmO+8AgNxsc41vugAHULJJf3/bnr6OxwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/nXy+IOHSURULhyqlkxvva+n5Rkn9jA6YDeleQcA5KZro87uvYsD2HvP/C9+tLNxAHuv9RofeJ4km/T3rx5Tebqnb9diAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGD/GaiWJC1GRFqtp2mxGHE0IgajJxmfKJeGI+IXEfFpoacva/flHTQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNz07NzlaLpemnqWS7Ox0FRWVpkqyP8KoVfJ+ZQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA/Ts3OTo+VyaWo670gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvE3Pzk2OlsulqS1U7m3n4KZK3jkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJCfnwIAAP//198NMw==") r1 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = eventfd2(0x3, 0x0) fcntl$notify(r4, 0x402, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(r2, 0x0, 0xffffff89) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88102) mq_notify(0xffffffffffffffff, 0x0) semctl$SETALL(0x0, 0x0, 0x9, 0x0) r6 = syz_clone(0x2000000, 0x0, 0x60, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregset(0x4205, r6, 0x202, &(0x7f00000001c0)={0x0}) 41.332761464s ago: executing program 4 (id=279): r0 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x5524, 0x4) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c000000150001000000000000000000fe880000000000000000000000000001fe8000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00030000000000007f000000000000000000000063cbfba2e2e36b3e22c5b4d3c20c9c3e149e723666349fdec2d4c52873f0041f80dfc556fd7903041b8eb0bb9652fd01b02756e59f0d5c431e85733719d2cb4edbcc9958d313fcaab7028265e90650432dd46a7a7d400b6224d74d358f6b"], 0x5c}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) (async) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001040), 0x400, 0x0) read$FUSE(r4, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r3, @ANYBLOB="0500060001000000050007d60500000005000300df00000008000200", @ANYRES64=r2], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) sendto$inet(r0, &(0x7f00000002c0)="b401fcc8cd1bb8b66f7ee68e052af9c34b7d7494", 0x14, 0x0, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10) (async) r5 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x3, 0x1000, 0x8000fc, 0x1a8}}) (async) r6 = accept$inet6(r4, &(0x7f0000000380)={0xa, 0x0, 0x0, @private0}, &(0x7f00000003c0)=0x1c) sendmsg$inet6(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="626d92150eba669f39736c440f9fc69623a86167295d0c7d37c1657c5f850888f26446687bc99a8ba7183452e2d4e7d8275fcb1c5acfeb45e7076db52b46700473dd148ce92668f3c2ffad2b7bbe98219d9d588840c584a1299552e77153da2169fd3600870a0af7850fe5ea1278dd27e0ef0f0cfb103f1ced36f3713500c51a7af3da4377300c99b500244ca10bf552571d87a2ed", 0x95}, {&(0x7f0000000540)="2d9288869536c079ab4f634b0c6bc6ccf2510deb15f55336f1551d30711b2be6ecb579853322c8ac3e42c969f2d44d8e3abbaa84a4e37a2458a249d7dfbac24b548779b99ad2b068b2dd00a17e3dfb9e561d203c2f6acd8630cedc9546ac8b009c71a25fc7", 0x65}, {&(0x7f00000005c0)="98b46dfe694d75b4562a3c2d33f0774a60e2440c34546d2fcf9d3f68e7f28232d4456d163aec69a9bc4c5fd8b2c5baa867b5380c91eeb99faa28f7f9a8e04eeadd43ee7bd8f021e846982fc39bca54", 0x4f}, {&(0x7f0000000640)="6388c303f933429dcb47844ed295cb559fdaee2accd5e45669bd62ef93e6838dd483351775a622902905d0d6fc5f8a0e7aabdb026fce0cf45264ba38ec8fa533dff093a38360d874a592f51cf80d303ab5287a1690c6c5db2c1a2139e07554aad5df47502d613d50eb3d0b8e679e255c590a88b5eeb080bc5ead99e64cd437201a08dd144f780568bb7b1f1cc243cb2916", 0x91}, {&(0x7f0000000700)="e7e73e803f7d96b7974882006c470490ae0f25b23a01f3a2feb1e561d3ef96d1ecdbb003e31cdd0d0549722879c840f54ed57044ccdab58b92ec5bd8445e255bb830e46be5954f04abedb582f3c5c177542125af95999ef8eb94c65d8bed1132c01198f45afe40560670d56ff7ef7d480fe4aafeecec78eb60b63adaa771422aa232a7aee2dbe64be4f53e2dbcc938", 0x8f}], 0x5, &(0x7f0000000980)=[@dstopts={{0x40, 0x29, 0x37, {0x5c, 0x4, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0x1, 0x4, [0x6]}}, @calipso={0x7, 0x10, {0x1, 0x2, 0x1, 0xe62d, [0x2]}}]}}}, @rthdr={{0x88, 0x29, 0x39, {0x32, 0xe, 0x0, 0x2, 0x0, [@mcast2, @dev, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2]}}}, @hopopts={{0x38, 0x29, 0x36, {0x2f, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @hao={0xc9, 0x10, @local}, @ra={0x5, 0x2, 0x3}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}, @rthdr={{0x48, 0x29, 0x39, {0x87, 0x6, 0x0, 0x7f, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}, @remote, @empty]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}], 0x178}, 0x8000) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000300)=0x1) (async) recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r7 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x881, 0x182) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000280)={0xffffffff, 0x0, &(0x7f00000001c0)=[r8, r1, r1, r1, r0]}, 0x5) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000000)="385f7c9faa24f0c4c51e517dc84bf8727df4cfe55061ee65a349e63107400af4be9f6ff8865fca19a9159423ea") 40.962545726s ago: executing program 1 (id=283): pread64(0xffffffffffffffff, 0x0, 0x0, 0x1000000000) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r1, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, 0x0, 0x800) sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080088484803", 0x10000, 0x0, &(0x7f0000000140), 0x14) 40.746572351s ago: executing program 4 (id=285): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r2, 0x15}, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r4, 0x400448e7, 0x0) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x1010, r3, 0x2f722000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x52142, 0x0) lsetxattr$security_ima(&(0x7f00000000c0)='./file1\x00', &(0x7f000001f580), &(0x7f000001f5c0)=@md5={0x1, "8f95f60e3302b96f3495e55dabc4164f"}, 0x11, 0x1) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x1) 40.694944366s ago: executing program 33 (id=285): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r2, 0x15}, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r4, 0x400448e7, 0x0) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x1010, r3, 0x2f722000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x52142, 0x0) lsetxattr$security_ima(&(0x7f00000000c0)='./file1\x00', &(0x7f000001f580), &(0x7f000001f5c0)=@md5={0x1, "8f95f60e3302b96f3495e55dabc4164f"}, 0x11, 0x1) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x1) 39.741616949s ago: executing program 1 (id=298): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@ipv4={""/10, ""/2, @loopback}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f00000006c0)=0xe8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000700)={{0x1, 0x1, 0x18, r2, {0xa}}, './file0\x00'}) fstat(r4, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000001000)=0x0, &(0x7f0000001040)=0x0, &(0x7f0000001080)=0x0) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f00000010c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001100)={{0x1, 0x1, 0x18, r1, {r3, 0x0}}, './file0\x00'}) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r12}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r12, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r12, &(0x7f00000002c0)={0x50, 0x0, r13, {0x7, 0x29, 0x0, 0x5090880b, 0x0, 0x10, 0xd, 0x40, 0x0, 0x0, 0x2f, 0x1}}, 0x50) sendmmsg$unix(r2, &(0x7f0000007800)=[{{&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e22}, 0x0, &(0x7f0000000580)=[{&(0x7f00000003c0)="276facfc4207c09a512e5017adaa921ef350761873409db2f6dae612475395e67142ae2f40b105e4be801ac5070ba56244ec077f1d7c1a7305bfee29a6276a43c6096dbbc2c4a5d5b9fe31365b39afbddca1729c9c"}, {&(0x7f0000000440)="67655363e47075d2b8d399054ee9c09f9352b84232cfc554805f5b038d7a3fb55d341ade7d9ae0e13b731376e684bbf7c86b204514c96c877497d50a91595c23cb819fb24f761aaf0449f0a2b907b0ed878b1fc9eb469e28d60777ac344c56603661bcb881db73843c64a941599031ba6bb641acfa6f7079e7c81129accf5730253744612cbd65b3"}, {&(0x7f0000000500)="da6c47ecc4bf17a9c89ce06c775d118957340db9b530c7d31168521ce2867e192973386e231fba00b9fe618ee0b7929938a4ff3bcb1010c4"}, {&(0x7f0000000540)="a4ee5ce6fe9ccef744a90926178bc5bdd30096614132264bae51d3a18f"}], 0x0, &(0x7f0000000740)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, r2, r1, r2, r1, r2, r1, r1]}}, @cred={{0x0, 0x1, 0x2, {r0, r3, 0xee00}}}, @rights={{0x0, 0x1, 0x1, [r2, r1, r1, r1, r2, r4, r2, r1]}}], 0x0, 0x440c0}}, {{&(0x7f00000007c0)=@file={0x1, './file0\x00'}, 0x0, &(0x7f0000000980)=[{&(0x7f0000000840)="55ba4df012d1d2686d5387ccf4516bee227bf159f820b54cda7429cc108aec57a7ba534588417196f1ff1a5bf85e3ac6221de6000f3e36abb201596469ddaaa9a10b5016c296c8253a1039761306ebd175fb8eb87eae03e0e46eab11a3fb09b69bec81c7153cc566aa3a6db3678e0ab3e9043f8e90e10830bf840862b7bb5e11a4a26abb23a4"}, {&(0x7f0000000900)="c8df976440d725ba86b67fbee54e6e3713df919677c991e60c3ae7b9015d40f827d9c0f60b119723504b282ee981ae175656df45d75eb7b7914c536714b5bd0916c4ce7009e494bc2e3efe9c88da99603c7b9ba458a0259976"}], 0x0, 0x0, 0x0, 0x44044}}, {{&(0x7f00000009c0)=@file={0x1, './file0\x00'}, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000a40)="517e333a84aa33aabe69ed14aeb64977f87455a000585d87363fcd6a1d287365cfaf3eb05857160992f6043f95c75000e813e47642ac27d89efa89cb724602d74ccab6583f636eef132d16ca1df896e17b7897038656e0cf02ac1ae28b64fc5acc2f9b7134decbb3f6d7fe2d858288cfc45fba36385c80666439ce4247469d4d22a93fc95bf118f483ad2507a5"}, {&(0x7f0000000b00)="407162ffcdad46bae48d9c6a65d63867"}, {&(0x7f0000000b40)="2d10"}, {&(0x7f0000000b80)="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"}, {&(0x7f0000000c80)="f45aa1a356364b34f5a52ab031f09d5fa9cf55a56517e38106dea1f02fb677702d6033a1aeed331dd437b073e75f1773113131afa918a98b19ed3ce39cd2e03334e44a5f0b79d0c1c00aa625dcf8de3c5278c308eadb"}], 0x0, 0x0, 0x0, 0x44010}}, {{&(0x7f0000000d80)=@abs={0x1, 0x0, 0x4e24}, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000e00)="13bb1f37514474d8d62aaafe698d0d788a70e57781098f21efb99b8e54f5121ae5b1344f08fc1e83994fe97e47f84c3ebcba"}, {&(0x7f0000000e40)="55c21dbdc8479d9fb8df6de465b0403df42ff15322db7e131a45c5840b8bc13277f9732439be94c1df55288ad680143d8a4b36e1027d506add115607802aa7cfa7ed790b8aa3727fe4b584e97bf8e16ef6b84864b134fb483034c9f859ba50a8c1eb030e3c2c075291176491165e8ffca49336a7fddb27ede6a8e1c014da4daf1ddba9fba27be74c3b55c713010c6500539a213738d6c7ee29e9fc7ced0991e28dc4c1d14faf3644e0bd6dc237b7ddcdf69ceefbd425507f6035c730551f766993ccabe65d0e938b08ec"}], 0x0, &(0x7f0000001200)=[@cred={{0x0, 0x1, 0x2, {r0, r3, r5}}}, @cred={{0x0, 0x1, 0x2, {r0, r3, r7}}}, @cred={{0x0, 0x1, 0x2, {r0, r3, 0xee01}}}, @cred={{0x0, 0x1, 0x2, {r0, r9, r11}}}, @cred={{0x0, 0x1, 0x2, {r0, r3, r14}}}, @cred={{0x0, 0x1, 0x2, {r0, r3}}}, @cred={{0x0, 0x1, 0x2, {r0, r3}}}], 0x0, 0x4814}}, {{&(0x7f0000001300)=@abs={0x1, 0x0, 0x4e22}, 0x0, &(0x7f0000005600)=[{&(0x7f0000001380)="9f9a3d780702ab14c27aa223a43802419439fdc124b59d561844a6cfd3634559ca535f51183f9d99bf85a1019a12c499486131938e6d66b1c649ba7d2d01bfb923f6b4661745f3b7e8bdeef03becb71a6c6f52cdb6965f317977d98526084bc8e8fb07b6eea1afe2cf9467bb1e88e7856774467bcdbd7294134485f2352d43cd8f7ae18fc37d94a19e"}, {&(0x7f0000001440)="e740be98ef80d155e227b4f3ac9cca53912f83526a44ff0175f8dc67efd321a7731e119deb49d039e714533ce1b6ad40ea16f227f5af00547545c1246f2b60e4ca78c6a55b5496c73988d710f126796f8459b54014a0b11e3567ea636712c16b4cee26fd1ad08772aa959e1a8a403ae309ab8d4b148702e1f2af938f"}, {&(0x7f00000014c0)="3974b1bbae"}, {&(0x7f0000004200)="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"}, {&(0x7f0000005200)="ea53681789fa39e07b097b47bbc54dd74c3db698b900c33cceb0be5300659fe54d4a0024118b96edb646208a3cc4ef8f4bf9291f75f90627c0d15bf87e92a9cf5082e60c25c8ba25f7a5d7f3d92a6573ed6578ad5fe9914e43d9f0dc0903f3787eca6e05a9818fdeb207ca23d2a7d1869b09ec6956e0b466ac3c0e7e0d0c2badd10d4d904f865866985f28d6c7902ecb98ef492e7168cf03bf9b29d8b330b2ff2cdfbb690c44a651e3307fdedfcbae4a79ad5c8c7fb4"}, {&(0x7f00000052c0)="391760ec5ae011a747acdf1056143b606c0594321c5e66cb53161a9d16743412b099066391a6a204b983e497e5bb4c88ee61ac6069b6e5529c43215ec967390480317ed2a31ded209c32b4429a08dcd83ff8be3baa6c2bc2af478543ff9528b6bbc562dc92a55f63b9fd2b0ccb8d8ac117bf93b584b58999664b204ee4a76d7ecbcfbf5656ff1c91e6ae4db844800286d44df96d4342374bf0e1d4a566aeec804ff0d4cc60ea6c1309d6c04dd23574bbad0b34"}, {&(0x7f0000005380)="c1f61cb3e24601142ae39294c3657cf3a18f27dd58f142b6bf784194d2e48d86166ded8b53c39a38b75fe5a9adf5ba4f3b77b9cfaf2bf32590f2c68c74291d7f3f763dd8a5dd8b14f8d5bfd51e3be38af38450fbd72be44e8f1739375f7970a9fcd3fb6e82ed3b08f07ebe61d72b47bc19427aee8ee41633228b44415f46ee8ffaae03e09eedddfc6314f14fd060761174"}, {&(0x7f0000005440)="673e1b94d9062c90c2c5209bcd04cf1e4225421ec1495ec68ed2d5b83f689bced0a87ed055d10c069308156a14413cfcc3a356a3633d70f3247901"}, {&(0x7f0000005480)="2228067476d1373c1a73a0db3bc03bd0fb9469ba2bac0d632eec17e01afa2d8bb4076bcfde4629f5fb96ac9a193737aacaa190c0110f042579000b9922f5df0bf741c5"}, {&(0x7f0000005500)="ca70041cd088550b3f9ab8475351f86a7690d43a13648e5cd69854f9b11b7dbf305d37d982d85a2e3ca0ef662e99bc416869e2a396771d95fd0ae54282266c6ac700a0e3a8c60c6925fd70b951b8df4bfbcc26b8456ca41d7b09208bbe0845a2a150a6952867591255088ba85ff7b419f3bdb41df48ff9edbbd9696cece3932ee09493d02f9b0ec18a22c8bfba1cf49e48131e8c7d1ca5324215b0af2e983a7e7f2e4ef3f8aa303b83927eb66be61cb2e3056a136925afb86ecec42094a95fa32b519f1d548d2fe7e8b5864486d0dcafd6b76e984544f928e1d803afd704c207844d5cec28c14d45bdddd33a4b6a64"}], 0x0, &(0x7f0000007700)=[@cred={{0x0, 0x1, 0x2, {r0, r3, r6}}}, @cred={{0x0, 0x1, 0x2, {0x0, 0x0, r8}}}, @rights={{0x0, 0x1, 0x1, [r4]}}, @cred={{0x0, 0x1, 0x2, {r0, r3, r5}}}, @rights={{0x0, 0x1, 0x1, [r10, 0xffffffffffffffff, r2, r2, r1, r4, r10, r2]}}, @cred={{0x0, 0x1, 0x2, {r0, r3, r7}}}], 0x0, 0x4000080}}], 0x3b, 0x4006) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x5a}, 0x28) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) r16 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f00000001c0)=0x0) io_submit(r17, 0x20000004, &(0x7f0000000000)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r16, &(0x7f00000000c0)=' ', 0x1}]) sendmsg$NFT_BATCH(r15, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 38.04077813s ago: executing program 1 (id=303): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001e00)={0x0, 0x0}, &(0x7f0000001e40)=0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x7ff}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delnexthop={0x18, 0x69, 0x200, 0x70bd2a, 0x25dfdbfc}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x40080c0) statfs(0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000300)={0x0, 0x1, 0x6, @multicast}, 0x10) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000880)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="0f00000004000000", @ANYRES32, @ANYBLOB="7aca5833d0adb033d94b88834f45835595ceed7c80658c25b75fbd815b74c42ecdc191e056d061185b03e0dc40123d0a69e71fb462c2a2003c771e6be55efc345e2842742b8d46376b7c7709a084cc4d9a70783d9d17f6a5ecf7301e5d05291e6b21c777b1c4e34d8098a30c6f8d0fca74c5f7ee21bc66f9efc9c494de8941532768bfec7421529d821c61c5121274ab3fac936d147b7b55d8403bf50a4bbc57b0d8a8e258a4685f0aff21f8e672a9fa930a000000e815c956a156aa8d5900"/200, @ANYRES32=r4, @ANYBLOB, @ANYRES64=0x0], 0x20) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x3, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffff0000008500000026000000ce92bc8423e7af4d00"/72], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setreuid(r1, r1) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x1, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000081) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) 37.20466201s ago: executing program 1 (id=306): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x4000}], 0x1, &(0x7f0000000080), 0x0, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) tee(r0, r0, 0x10001, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, r4, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) bind$packet(r3, &(0x7f0000000040)={0x11, 0x4, r4, 0x1, 0x3, 0x6, @remote}, 0x14) syz_emit_ethernet(0x1e, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb88a8048a0000f6d0090011a8ab57f897145db7c2bd439ce056cc7ca965a864c8985c0e2276a0c7ea65774999ef5ecd77e1aceb3d953ab6ceae7cd72269e6af61e077edb9a04571cfd0751c90a5b7bcd459d0cfd7fe1c0597bda5aa5b98679753b35b360563d31987e2f03173540a6353604c7957e4740ab7bcfe5d6c738c83229f680f752f0000000000000000000000d7d47ec29a3dcebfd2acfb0792cc1edc4a5833e31ef519b32df4ef0dcf65af0d84b6924319f063f2ff2e27efdfb22833146e995f5465de6e28ad77941100"/230], 0x0) getpeername(r1, &(0x7f00000000c0)=@pptp, &(0x7f0000000140)=0x80) mount_setattr(r1, &(0x7f00000001c0)='./file0/../file0\x00', 0x8000, &(0x7f00000002c0)={0x1, 0xa, 0x80000, {r1}}, 0x20) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r6, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r5, r6, 0x0, 0x8000fb00) 37.007160832s ago: executing program 1 (id=309): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)=@userptr={0x409d, 0x1, 0x4, 0x8, 0x8001, {}, {0x0, 0x2, 0x9, 0xc7, 0x4, 0xff, "5caeaa42"}, 0x7, 0x2, {&(0x7f0000000040)}, 0x2}) r1 = socket$nl_crypto(0x10, 0x3, 0x15) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r2, 0x11, 0x68, 0x0, &(0x7f0000000400)) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000240)=@fragment={0x33, 0x0, 0x3, 0x0, 0x0, 0x2, 0x68}, 0x8) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0xe2, 0x81, 0xfffffffb}) sendmsg$nl_crypto(r1, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 36.186646043s ago: executing program 1 (id=321): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x1, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r0, 0x8004551a, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x1, 0x0, 0xffffffff}, 0xac720e362d5fee08) sendmmsg$unix(r2, &(0x7f0000000380), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000200000008001240000000000500050002000000050004000000000014000300686173683a69702c706f72742c6970"], 0x60}}, 0x0) r4 = openat$smackfs_revoke_subject(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$smackfs_label(r4, 0x0, 0x2) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x8000, 0x1c0) syz_usbip_server_init(0x3) r6 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x2, 0x93) write$cgroup_devices(r6, &(0x7f00000001c0)=ANY=[@ANYRES8, @ANYBLOB="44dea4e45c680e3cce201245c0ff817cfe611f16f6d31889a402d84753c7777c1a37cc6806f34bfd21b7a35f7b1549da7fefb9bbc0e5ca684ea4ec2fbf1171ea7bb6b3e1a1d62b08cef3f8c64ca09bdb0928b416bb505663ee05bb4b2ace2b51b8195fcbe6fa9cb3901895c000f46ca828208c31ad5c2e39862e", @ANYRES32, @ANYRES8=r6], 0x9) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x490042, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pwrite64(r7, 0x0, 0x0, 0x8080c61) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'vlan0\x00', &(0x7f0000000400)=@ethtool_drvinfo={0x3, "ad2d53b155f55222074ac545b0b526834451f5c63771cddd30b1de1aee81de2a", "7d774b76005c8846835ae47ff6ba275800", "07ef054268356500", "70df1710d3518191326dbd9668e9e509a02f2600231b868b7cc841f866110bdb", "c6eda83fa7ff6dedb263ae5efc60938baa18c9acce190528f7c8b31464be1e81", "183f19e71e9dc3962aa67400"}}) r8 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x2, 0x600402) ioctl$FE_SET_PROPERTY(r8, 0x40106f52, &(0x7f00000003c0)={0x1f, &(0x7f0000000280)=[{0x11, '\x00', @data=0x3, 0xfffff801}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES8=r6, @ANYRES8], 0x1, 0x122e, &(0x7f0000002580)="$eJzs3MFrHFUcB/BftqlZU5tErdX2oA+9eBqaHDwJEiQFyYJSG6EVhCmZ6JJxN2SWwIoYe/Lq0b9BPHpTxH8gV/8Cb7mIpxzEEXZSk60NmlqyRT+fy/zIb76Z99hl4S3v7f7rX368uVFlG/kgWlNT0dqKSAcpUrTinhdXm+ut26vLnc7KjZSuL99cfC2lNPfSD+9/+s3LPw4uvPft3Hczsbfwwf4vSz/vXd67sv/7zY+6VepWqdcfpDzd6fcH+Z2ySOvdajNL6Z2yyKsidXtVsT3W3yj7W1vDlPfWL85ubRdVlfLeMG0WwzTop8H2MOUf5t1eyrIsXZwNTnT+729Z+/qgrr+PqOvz8UTUdV0/GbMxFU/FxZiLzyPi6Xgmno1L8Vxcjufjhbgyuusshg8AAAAAAAAAAAAAAAAAAAD/Hwej0/zj5/8vHJ7/n48F5/8BAAAAAAAAAAAAAAAAAADgDLx76/bqcqezciOldkT5xc7azlpzbfrLG9GNMoq4FvPxW4xO/zea+vpbnZVraeRcROwe5nd31s6N5xdHPydwmJ8e9e7lF5t8irvlsfxMzDb5dkQUsRTzcenY89tH+aUH5tvx6ivHnp/FfL0b0Y8y1kfPPsp/tpjSm2937stfHd0HAAAA/wVZ+tPC+Pq3Wb9n2Un9Jn+K7wfuW19Px9Xpyc6diGr4yWZelsX2eNH+y18mVsw8HsM4TdH6N/GZOLHVGmt99VPEpGf6WBTtw/fyo/iHU5OfzkMUdx/J3MeLCX8wcSaOXvRJjwQAAAAAAAAAAIDT+Cf7AX+Nh95FOB0P2Fn2xmSmCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MEOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAoQIAAP//uXHE5A==") socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000010) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2, 0x0) 36.119831327s ago: executing program 34 (id=321): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x1, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r0, 0x8004551a, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x1, 0x0, 0xffffffff}, 0xac720e362d5fee08) sendmmsg$unix(r2, &(0x7f0000000380), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000200000008001240000000000500050002000000050004000000000014000300686173683a69702c706f72742c6970"], 0x60}}, 0x0) r4 = openat$smackfs_revoke_subject(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$smackfs_label(r4, 0x0, 0x2) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x8000, 0x1c0) syz_usbip_server_init(0x3) r6 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x2, 0x93) write$cgroup_devices(r6, &(0x7f00000001c0)=ANY=[@ANYRES8, @ANYBLOB="44dea4e45c680e3cce201245c0ff817cfe611f16f6d31889a402d84753c7777c1a37cc6806f34bfd21b7a35f7b1549da7fefb9bbc0e5ca684ea4ec2fbf1171ea7bb6b3e1a1d62b08cef3f8c64ca09bdb0928b416bb505663ee05bb4b2ace2b51b8195fcbe6fa9cb3901895c000f46ca828208c31ad5c2e39862e", @ANYRES32, @ANYRES8=r6], 0x9) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x490042, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pwrite64(r7, 0x0, 0x0, 0x8080c61) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'vlan0\x00', &(0x7f0000000400)=@ethtool_drvinfo={0x3, "ad2d53b155f55222074ac545b0b526834451f5c63771cddd30b1de1aee81de2a", "7d774b76005c8846835ae47ff6ba275800", "07ef054268356500", "70df1710d3518191326dbd9668e9e509a02f2600231b868b7cc841f866110bdb", "c6eda83fa7ff6dedb263ae5efc60938baa18c9acce190528f7c8b31464be1e81", "183f19e71e9dc3962aa67400"}}) r8 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x2, 0x600402) ioctl$FE_SET_PROPERTY(r8, 0x40106f52, &(0x7f00000003c0)={0x1f, &(0x7f0000000280)=[{0x11, '\x00', @data=0x3, 0xfffff801}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES8=r6, @ANYRES8], 0x1, 0x122e, &(0x7f0000002580)="$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") socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000010) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2, 0x0) 9.112576667s ago: executing program 5 (id=540): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x40, &(0x7f0000001200)={[{@rodir}, {@shortname_mixed}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@fat=@codepage={'codepage', 0x3d, '852'}}, {@utf8}, {@fat=@check_normal}, {@uni_xlateno}, {@shortname_winnt}, {@utf8}, {@uni_xlate}, {@fat=@allow_utime}, {@uni_xlate}]}, 0x25, 0x362, &(0x7f0000000e80)="$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") socket(0x10, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000007c0)=[{{&(0x7f0000000280)={0x2, 0x4e2a, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000002c0)="0d792cc927023afe6919d8c41dd2b051c8539b12976b3b9709e3bfc90f2edde0f934a509da67b96d0baedf0c87b55cd6facc30a51917129c9f2f385f3f1dd12f4ee82919701851f8eb7426c9c161d5573eb094e4885ceb84a3495813d4285f5622eed9635bfaa2279a9b0747a39867926ec867637d35ab5d62404aba5800c5cc772dbb81980dcf187f85c7c5a6235a6933432a9cb3f984b7a8714c1a2abd4c710181323fbbc1bb6c2157733238c99f4e136d847736f9a03c77eca94283161dd86796295f4a80b04675dcf9840d54e09d2017b78126a6ec5b05a7a7ddd2d8572242de5eb642ef59b5af", 0xe9}, {&(0x7f0000000540)="0e055f23a9561d709de8a9fea72ccdb41bbc37229a9d6e7e25f1df71582b63f360cac08837dde0eb5c5964012fd0f7509da1f10ccae0d511de293581094d0023b529ec0fb30ad74a7279dd675df2b43d80d9f41a4bcaa3e024ca6dde5170513bb07c69f4d97f4bd3e6d656fc5beb7072802c4dcefac7c711f16a440c062a35c86746a4440ecc70d3ce19fb2e9a8c132aee567402fe85a561050692fb53b7014ae5f857f1e53208e75c33c3ae09ec9b1742f29491048b5db1032eeb02263eb7fd1d6613be29f83e080ef7bd22b5", 0xcd}], 0x2, &(0x7f0000000680)=[@ip_ttl={{0x14, 0x0, 0x2, 0x100}}, @ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @rand_addr=0x64010100}}}, @ip_retopts={{0x84, 0x0, 0x7, {[@end, @end, @generic={0x86, 0x6, "50750e46"}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x3c, 0x29, 0x1, 0xd, [{@rand_addr=0x64010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x7}, {@multicast2, 0x80}, {@multicast1, 0xffffffff}, {@multicast2}, {@loopback, 0x1}, {@broadcast, 0xff}]}, @ssrr={0x89, 0xb, 0x7e, [@private=0xa010101, @local]}, @generic={0x7, 0x11, "4748801392e9437495b1e0919ca20c"}, @ssrr={0x89, 0xf, 0xf7, [@multicast1, @rand_addr=0x64010100, @local]}, @noop]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x108}}], 0x3, 0x8000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "02"}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21}, 0x94) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000000)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x10}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 8.94378113s ago: executing program 5 (id=542): prctl$PR_SET_SECUREBITS(0x1c, 0x4) r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x7}], 0x1, 0x0) semop(r0, &(0x7f0000000100)=[{0x0, 0x8000, 0x1000}], 0x1) semop(r0, &(0x7f0000000280)=[{}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) setuid(0xee01) syz_open_dev$usbfs(&(0x7f0000000480), 0x71, 0x141301) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e061e"], 0x9) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x4810, &(0x7f0000000240)={[{@journal_dev={'journal_dev', 0x3d, 0x8}}, {@bsdgroups}, {@nomblk_io_submit}, {@data_err_ignore}, {@errors_remount}, {@noblock_validity}, {@noauto_da_alloc}]}, 0x0, 0x4ec, &(0x7f0000000c40)="$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") 8.719879547s ago: executing program 5 (id=545): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008000f000310"], 0x3c}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'geneve1\x00', {0x2, 0x4e21, @rand_addr=0x64010100}}) 7.979920113s ago: executing program 5 (id=551): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$eJzs3E9rXOUaAPDnnCZtb5t7Jxfu4uJKqFih9iRN1a6EiOtCoR+ghslJCDnJhMykNjFg68KFIKgI/ulGv4EbRXBT+h0UwZ2CC0FrGheCi8iZzEx1OpOObdKR+vvBmfO875kzz/vMHF7mwLwTwD/W4+VDEjEWERciotLqTyPicDM6GnF193m3tzar21ub1SR2di7eSsrTmn3t10pa++PRPCX+HxE3RyNOvXZ33vr6xuJMUeSrrfZEY2llor6+cXphaWY+n8+XpyYnz559burZZyb3rdY3X/nkpzc+f/HLD88t/fb8radnk5hu1h1ddeyn3fdkNKa7+pcPItkQJcMeAAAAAym/5x+KiJHmt9RKHGpGAAAAwKNk58gOAAAA8MhLYtgjAAAAAA5W+3cAt7c2q+3tYf7+4McXImL8ztri7U7+keYa4oijMRoRx7aTP61MSHZPgwdy9VpE3Jjucf0nrevv/nWvXLdG+u/nRjn/TPea/9LO/BM95p+R9n8nPKD2/Ld91/x3J/+hPvPfhQFzHFk9+VXf/NciHhvplT/p5E/65H9pwPyfjn3zbb9jOx9HnIze+f+Ya4//h5iYWyjy1mPPHCc+e/XUXvUf65c/2bv+lQHr/+761Hy/uaTM/9SJvT//XvnLa+Kt1jjSiHi7tS/b73TlePLm5Ad71T/bp/57ff4fDVj/F69vfD/gUwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKApjYixSNKsE6dplkUcj4j/xbG0qNUbp+Zqa8uz5bGI8RhN5xaKfDIiKrvtpGyfacZ32lNd7bMR8d+IeLfyr2Y7q9aK2WEXDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMfxiBiLJM0iIo2IXyppmmXDHhUAAACw78aHPQAAAADgwLn/BwAAgEef+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgIbhw/ny57WxvbVbL9uzl9bXF2uXTs3l9MVtaq2bV2upKNl+rzRd5Vq0t3ev1ilpt5Vwsr12ZaOT1xkR9fePSUm1tuXFpYWlmPr+Ujz6UqgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPirxppbkmYRkTbjNM2yiH9HxHiMJnMLRT4ZEf+JiK8ro0fK9plhDxoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB9V1/fWJwpinxVIBAIOsGwZyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIahvr6xOFMU+Wp92CMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABguNIfkogot5OVJ8a6jx5Ofq009xHx8vWL712ZaTRWz5T9P3f6G++3+qeGMX4AAACgW/s+vX0fDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMKj6+sbiTFHkqwcYDLtGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/vweAAD//4rSy1s=") ptrace(0x10, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0xe, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) r3 = syz_pidfd_open(0x0, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) setns(r4, 0x66020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x4008084) r5 = syz_open_dev$loop(&(0x7f0000000000), 0xf01c, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r6, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x1e, 0x0, "fee8a2ab78fc5e3ed1e00d96072000001ea8a1d91bec8d4b5a6d80b8785d9600010000000000000094d75396dccd0ff600000000a81b00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x1]}}) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) 7.749518215s ago: executing program 5 (id=555): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001d00)=@gettaction={0x5c, 0x32, 0xe72c5f922f23cad9, 0x70bd27, 0x25dfdbf7, {}, [@action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc844}, 0x4000000) (async) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r2, 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000180)='$\x00', &(0x7f0000000280)='./file0\x00', r2) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b00)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="59bb28bd7000010000000100000008002b01ffffffff08000300", @ANYRES32=0x0, @ANYBLOB="0c0099000600000013000000d0228b4fee445a0b762f86e8040aaa4c19d6c607ce50e55db8f947eca5df6eece4dd8177e4487bebd77aa7952650ce4a8c0522c10807aabb5533035f50412d53be8c47ed6997d45be0dd9697f7d466721a68a4217ad97e9b1cefacc2eacd7dff4b6384d10eeffffe5c0c1a80a82f50448d2dad0719ca4d54882297063990b88a3bb381392bbef96d98343fde1497017533a8c8f0129b3086047b5a44ed28b409a27547404a887151673e848f60c1e16f42dcf659375aea177c171242b1b12bf6e7fe7fb5adf60673113944095207"], 0x30}, 0x1, 0x0, 0x0, 0x400c080}, 0x24048840) (async) readv(r5, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r0, @ANYRESHEX=r4], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0x1, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001c80)=ANY=[@ANYRES8=r2, @ANYRES8=r0, @ANYRES16=r2, @ANYRES32=r0, @ANYRES32=r6, @ANYRES32=r7, @ANYRESOCT=r5, @ANYRESDEC=r5, @ANYRESDEC=r2, @ANYRES32=r1], 0x50) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1b0000ecffffff1f001000000080ae91a87b917c8b326f4ce78d05cc27873b8facee86a6cbfc0bc228c9ada8c3ae32ad8fc1618955e6f6ddcdb98b6d490843c6362b22b3127e69e90815c98e0e0070e070247723c614424760311551d4543584a2aea92a498312d147d48d2f7d64614e924580af1ada55f32ed7702efe82de88848acccb9eded76be642ef2ef586901a24c3cb8934f8b5a4eadef20076890cd3d48d8f62de43e919a5f527bb397524512c7d6012bc2ada679056060b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f0000000000)={[{@resgid}, {@noload}, {@noblock_validity}]}, 0x84, 0x497, &(0x7f0000001540)="$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") (async) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x141000, 0x108) getdents64(r8, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0xe, &(0x7f00000014c0)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1006, &(0x7f0000002080)=""/4102}, 0x94) (async) close(0xffffffffffffffff) (async) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r9, 0x40046205, &(0x7f0000000200)=0x80000004) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000008c0)={0x50, 0x0, &(0x7f00000007c0)=[@enter_looper, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x2, 0x0, &(0x7f0000000880)='u+'}) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020736500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000095"], &(0x7f0000000380)='syzkaller\x00'}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001e80)=[{{&(0x7f0000000340)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000740)="f2", 0x1}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001c40)=[{&(0x7f0000000440)="02", 0x1}], 0x1}}], 0x2, 0x240000d4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r11, &(0x7f0000000180), 0x4000190, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffff}, 0x50) 7.122917882s ago: executing program 5 (id=564): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x9) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000000)=0x1) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 7.081653896s ago: executing program 35 (id=564): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x9) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000000)=0x1) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 3.975826345s ago: executing program 7 (id=592): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fffffff}}, './file0\x00'}) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f00000001c0)) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006007c06e8fe55a10a0015400100142603600e120800060000000201a80016000900014003e01100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 3.011785306s ago: executing program 7 (id=597): r0 = socket$packet(0x11, 0x2, 0x300) unshare(0x100000) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x8, 0x0, 0x2f0f4000}]}, 0x10) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r1, 0xffff0000, 0x10, 0x0, &(0x7f00000002c0)="aa42b0aa6c8d1e836100000000000100", 0x0, 0x1, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r2 = socket(0x2, 0x3, 0x6) bind$inet(r2, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) (async) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r2, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f0000000140)={0x0, 0x2}) (async) sendto$inet(r2, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) 3.007921703s ago: executing program 0 (id=598): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r4, 0x80046402, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r5, 0x80046402, 0x0) close(r4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x2, 0x1e2}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r10, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @local, @val={@val={0x88a8, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x1, 0x1, @dev={0xfe, 0x80, '\x00', 0x18}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}}, 0x0) 2.965732654s ago: executing program 7 (id=599): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c0007"], 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x78}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getegid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000006540)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000065c0), &(0x7f0000006600)=0xc) socket(0x10, 0x3, 0x0) setregid(0x0, 0x0) setgroups(0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rogtmode=00000000000000000040000,uszr_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)={0x2c0, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x3, 0x8, {0x6, 0x9, 0x4, 0x80000000000000fc, 0x3, 0x1, 0x7fffffff, 0x58, 0x4, 0x9000, 0x9, r5, r6, 0x1}}, {0x20000000000000, 0x9, 0x2b, 0xf3, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x01\x00'}}, {{0x20000003, 0x2, 0x401, 0xa, 0xbc88, 0x0, {0x4, 0x5, 0x5, 0x6, 0x3, 0x12e, 0x7, 0x8, 0xf7fffffa, 0xc000, 0x4, r5, r6, 0x4, 0x8}}, {0xffffdfffffffffff, 0x401, 0xb, 0x4, '&+%*!\xeb(^-@\x00'}}, {{0x3, 0x3, 0x10001, 0x200, 0xfefffc5b, 0x8, {0x0, 0x5, 0xedd, 0xff, 0x0, 0x4, 0xfff, 0x0, 0xb, 0xa000, 0xf8e8, 0x0, r6, 0x8}}, {0x0, 0x1, 0x1, 0x20, '\x00'}}, {{0x4, 0x0, 0x800, 0x3, 0x0, 0x96, {0x6, 0x1, 0x5, 0x8, 0x8000, 0x3, 0x7, 0x9, 0x9, 0x4000, 0x2, 0x0, r6, 0x8, 0x1}}, {0x4, 0x0, 0x2, 0x9, 'fd'}}]}, 0x0, 0x0, 0x0}) 2.053286275s ago: executing program 6 (id=607): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x2a10044, &(0x7f0000000440)={[{@nodelalloc}, {@resgid}, {}, {@nolazytime}, {@resuid}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x9031, 0xffffffffffffffff, 0x8000000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x20}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) madvise(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x15) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000240)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1, 0x1000000000ff01}) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x1000021, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x42, 0x5) syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) statx(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x6400, 0x8, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) getresuid(&(0x7f0000000500), &(0x7f0000000540)=0x0, &(0x7f0000000580)) mount$9p_rdma(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x1200048, &(0x7f00000005c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@common=@directio}, {@timeout}, {@common=@cache_mmap}, {@rq={'rq', 0x3d, 0x7fff}}, {@sq={'sq', 0x3d, 0xe7e}}, {@sq={'sq', 0x3d, 0x6}}, {@timeout={'timeout', 0x3d, 0x4}}], [{@smackfsroot}, {@uid_lt={'uid<', r3}}, {@smackfsdef={'smackfsdef', 0x3d, ':}/#^):!*$&#'}}, {@fowner_lt={'fowner<', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}]}}) 1.947797261s ago: executing program 0 (id=608): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e21, @private=0xa010101}]}, &(0x7f0000000400)=0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000800000000000003000000850000002c00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000710400007b8af8ff00000000bfa200000000000007020000f8ff7fffb703000008000000b704000001000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000700000000040014001a8010000480"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) (async) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x52, @private1, 0xfffffff9}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1000000000000068, 0x0, 0x0, 0x804c040}, 0x0) (async) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x9, 0x60, 0x0, 0x1, 0x3, 0x0, 0xff, 0x8, 0x0, 0x85, 0x2, 0x3, 0x10, 0x7}, 0xe) (async) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000080), &(0x7f0000000100)=0x4) 1.947496051s ago: executing program 0 (id=609): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = socket(0x15, 0x5, 0x0) unshare(0x2040400) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x0, 0x36, 0x0, 0x8}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) utimensat(r3, 0x0, &(0x7f0000000080), 0x0) getsockopt(r2, 0x200000000114, 0x5, &(0x7f0000000580)=""/102389, &(0x7f0000000040)=0x18ff5) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0xe, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x240440d2) socket(0x10, 0x803, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x14, 0xe, 0x0, 0xe}, {0x6c, 0x6, 0x0, 0xffffffff}, {0x0, 0x0, 0x40, 0x7fff7ffb}]}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$igmp(0x2, 0x3, 0x2) fsetxattr$smack_xattr_label(r8, &(0x7f0000000040)='security.SMACK64IPOUT\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="73792999"], 0xb, 0x1) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@getchain={0x74, 0x66, 0x100, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0x3}, {0x9, 0xe}, {0xe, 0xc}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x81}, {0x8, 0xb, 0x7fffffff}, {0x8, 0xb, 0xf1}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x76}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x9}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x2}, {}, {0x8, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x7}}, @TCA_RATE={0x6, 0x5, {0xfd, 0x8}}]}, 0x34}, 0x1, 0x0, 0x0, 0x26044028}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000180)='smb3\x00', 0x6ec3e57da8b985f, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84022, &(0x7f0000000080)=ANY=[@ANYBLOB='or_inodes=1,inode32,\x00']) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000200)={0x1, 0x8}, 0x8) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000480)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0xff, 0x7fff0010}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r9, 0x40082102, &(0x7f0000000080)) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r10, &(0x7f0000000140)=ANY=[@ANYBLOB="0000020008", @ANYRES16=r4, @ANYRESHEX=r9], 0xe) 1.903465093s ago: executing program 7 (id=610): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) r2 = socket$qrtr(0x2a, 0x2, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8) sendmsg$sock(r2, &(0x7f0000001540)={&(0x7f0000000140)=@pppoe={0x2a, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, 'lo\x00'}}, 0x80, 0x0}, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x3, 0x84000000, 0x8001, 0x1}}, 0x44) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000840) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) (async) write$binfmt_aout(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8) (async) sendmsg$sock(r2, &(0x7f0000001540)={&(0x7f0000000140)=@pppoe={0x2a, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, 'lo\x00'}}, 0x80, 0x0}, 0x0) (async) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x3, 0x84000000, 0x8001, 0x1}}, 0x44) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000840) (async) 1.883688808s ago: executing program 6 (id=611): r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000200)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x13}}, {0x0, @multicast}, 0x3e, {0x2, 0x2, @empty}, 'syz_tun\x00'}) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006080a0000000d0085a168d0bf46d32345653600648d270015000a00000849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160016000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x0) 1.818220939s ago: executing program 7 (id=612): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x53564d41, 0x0, r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000000c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@prjquota}, {@bsdgroups}, {@oldalloc}, {@errors_continue}, {@nobarrier}, {@dax_inode}]}, 0x2, 0x45d, &(0x7f0000000ac0)="$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") ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1000, &(0x7f00000003c0)={[{@delalloc}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@acl}, {@bh}]}, 0x1, 0x783, &(0x7f0000001000)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r3, 0x8907, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0), 0x10) syz_mount_image$fuse(0x0, 0x0, 0x108688d, 0x0, 0x1, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000002140)={0x50, 0x0, r5, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r4, &(0x7f000000b040)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f000000d080)="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", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x45, {0x6, 0x0, 0x0, 0xfa0, 0xffffffff, 0x0, {0xfffffffffffffffe, 0x2, 0x0, 0x0, 0x5, 0xf7fe, 0x3, 0x0, 0xfffffff7, 0x4000, 0x1, r6, 0x0, 0x0, 0xfffff8af}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) close_range(r3, 0xffffffffffffffff, 0x0) 1.808500304s ago: executing program 0 (id=614): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x90}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0xe, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x800) 1.674929405s ago: executing program 2 (id=616): socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63e4ed8e46080000003389f7f986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x26) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf6a, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2a}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sched_setscheduler(r3, 0x3, &(0x7f0000000040)=0x3) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/protocols\x00') preadv(r6, &(0x7f0000001400)=[{&(0x7f00000015c0)=""/207, 0xcf}], 0x1, 0x10000, 0x0) 1.41742359s ago: executing program 6 (id=617): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20000000}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x4, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.295946303s ago: executing program 7 (id=618): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xb, 0x101301) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r1, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000080)='setgroups\x00', &(0x7f00000000c0)="7f993c073533df54c29482d43ca29fd97424261c61c760bcbf859e4b9669fb85da576f7ecabf78049e75551ff8f50ed3e829afecaa1a55872d5a01d8", 0x3c) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000000)=0x7) (async) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000000)=0x7) 1.295496172s ago: executing program 6 (id=619): listns(&(0x7f0000000000)={0x20, 0x0, 0x4, 0x10000080}, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) listns(&(0x7f0000000000)={0x20, 0x0, 0x4ffffffff, 0x3ffffff5, 0x0, 0x3}, 0x0, 0xe, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001800)={'#! ', './file1/../file0', [{0x20, '`\n\t\xe5[\x19\xde!o\xf4\xd7\xd2\x03\n\xa2\xb3-|Nt\xf83\xad\x13\xaf\x9cF\x92\x85\v\xc1`R\xe0\xfd;}v\x87\xb1\a\x00\xacJ:\xc6\xd60R\xa0\x92\x1c\x93\xe2:\x9f>\xdd\xf5w\ay\xe17\xa3x\xf1q\x85\x95Wq\xdfgG\x01.\x91\x9cs\x19\x06\xf1/\xe2\x992\xc9\x12\xcbJ\xc6\xfd\xbb\x80Q\x11f\xf9b{\xe6J\xbd\xaa\xdf\x8eN\xdd<\xc0N\xd1N\x1f%\xf1\xcaw\xfc\xd0\x1c\"\x80Cg\xed\t K1:[oW\x1e\x89\xf7\x86\r\x85\x9c{#ou\xfb\xd4\xba\x9b\xde\xa1oS\xc1\xae0\xf6T\x11@P\xe1\x9f\x17\xcbL\xe1z}e<'}, {0x20, '\x00\x88'}], 0xa, "521299a432289bea0aa53f5db534de379d0418026c1f265a707f7b5008ab99f2c9a997ad079ea398ccfcdc48da03fd070a29"}, 0xf6) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000240)={'syztnl1\x00', 0x0}) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"dc5d3b0169633d3eba3eabbc09167be55101d4af4b22a373236464d2dbfaa84399b77bd438a54364a7ebc5bdaab4f9decb7c044318cd59a0af8279bcab35dd7daf7a0ceb381df2c32eff45b13e2c8f40e1895355bf6f165200cb1ca41a155730ee2e9f83183f9fafe029d0401b0770618254a8b2dc87b630072b1e2de160d1afed51b74c14b71ec1b226a324482d14ad586b1a4ce80e458fe45244c01eddeddf3564af838d6d5324f8a77023d6eb7aa14397a0e1413ea1c3dfdf063a35b709e627f36fe403ee3117365be5017682f53595f28543062c740a94a794312f5cebc315044b8ea000a5d0f27812ab0ce149d11e6f6f7620c5f3e250bf67d13a1ca39dbb7b8b5a31e3d7ba7ebe5849a7a09b61fc9f2cfc54b89e9cd0105bca49483ce55e0187ce2ad692a18219d881057c838587b915337169ee054655f26a04df913a658fccbf4def6aad750ca4796b74d322c67e9d4ee6a530a22dcc35db850b424d6ec9f62495b9f9fd2b000feadd57d26dbd505798c208d91eb0aab0fd97537631b8bf81ce0e2241c4272be4ff69b390e4485d574146b76d1fdbf7fc5334906805534cdae1e47240af7761a18fc8bd0a694be47529da98bc0f98eb7db3fc4a74cbb6e486f4de90fbf2452e72c2e1dca44543ad9ad094b8bc861eef1e814662d0b350339e3a510d459c6f83aabd5fd3dcb38224056d761e7df9b482b9905f1e2135c1929be328ecdb69c007a3efd548502c83106f6df1ab1178fac499eda92ad4373155227ec2df150c919d322ecb3ea37e659285f18a3e2f79b59900ca438df3a1381380a12d3ad7678e0a8d3bdfb40651389b4ac8c66138d442d70eafdc2df8b080028006b124e4ebe0d9883ef100f1934e42794146382c1d628fd2ebe5859b6c243824903d056d800975675bb1913142adbc039a9c68c2f146a0e8903447313f5e5549905f397a9b1f21a93b80c4d04a8ea7a29a50fbc5407a9305bba420edf898ea678d6879489c39692c99bb6dacf61f5f97637b94c1031d635b5423b38b9196fafaaf87b2796eadc21466af5a10281e6a808748969d29efb444c99a4cb2111732a792dbca4376a125a68f7cdac065cc6173dc21caafba48c742d9a7df2f771ff2f5725b22c247d4e0c6106f9f5f6929b69929ab37e9a9b326ce618bb702b883b12026f1300f21f2c7440cac8c5f1210a78aa067211d2827f5dcc7578252c2ccc3f67bab9d1bb6939b21b550788ef550acfed4bf50c0b4fb3ca4d2872ee64f95d611a317d9daaf373a10d868680b2226396c95fa2b0ab4d6fce06c3b42cb97d17a7b5089061537fdeb1a53040869f7befca330358fdba86754fc2e46c2113e1484cb37534af8f0408a7ee313778dab49f08229964298f847ea66c4ec319f64b6a12da585bc59e82e0263c507b397d3efee3b4066f4d25566aa1549f6185f6375f84b65fa8945148b90430c86a5b6fdf58d5c812b98d9dc621fd9a3d9f1a577495356516d1cbcf5e8bb8923b54b247225b9c3892b18a9e137f3620c734052af9dc8f1ea36f0d4592d5ee32e35676a84dc891f97456f2ac3a4ab58a42bcdc221a4ac8bb28d428add2fcbe5b110a8afd5d23b31e827bd16167b2d88cae024afc04a722ac0b4d45c52512e6b6f102aac4be21bc89ce246539048370553665b0a4336a6db99d0d19399be6437bf21419304331b4342b2c1db580f0c9bf681fdb8e9fa3e025454197bbc82ef93ee2f385660818ec5127080675a8013766469afe3b1e36e81bf2f04c3a26eaf4517551e734d21ba3bc90e48aea0891792970c39f3f528397e9b7ae190f1760fe5960dc763ee0a17939c60bfcac0a8914be82c749e4fe85d1ac5fa733413468fb8941085e8c4d6e0b6d1e62e20da58440facd640ddbb6c1f694b3ca48757a34c5a11668368711a1d4f3a81d31ac30d71277d7ae77882b6841cfa6289e6cce84a3ad57eeb328f831888ac7d3cfcd3a472a48d903f20cec8c8ae8d0bea04ebf7413ef7693f8ed876e49bd5f89d7e1078208ff62712e330fc0341b9ccf26845578d44b1e0c66d1bebc14742baedfabb8e9a2c8f42730360c72997efe0ce786ff330c2eb6e0ff20896f813c2a515ce76f826c11a1c1588eb369231ddeb4a2f9f9591ecdecc74d20aeb50047beb3ab89a9e4e1b805a20b645c79d0bc5d0247fab8ba46a97a07630b1f1cb69b42b568af746733d2c581f057873d64fe6e659b00b4a26745f5fba1fe7406a86b007936c7cfdac53a4c5b0ea9f6604863c8e3f174eddbb09175f6e13cda9a860cf400ef9ed02b895502ac6e6de6a658249c3c6e8a653517eae2231e56e0f120547923c6549ebc1ed14c623637ce3d96af5c93a32e58e2d9659d8b5b145888b52d9a5b5cb3cdf594eb137bcef2ba068cfd2c6ccf7ab6e5b4ec55e9197bfb91c9b8729f7b50cf0b0326f7ea3e712c77674d48545ca2a86744c3c38f149d69cf811beacf7e5f49c7bfba20f1dcf3d7bc0b9c796016820a46495d244c9606a06fe2e14233eda78d69ae4523ad7b708b0c7ead44d7fd376fed60e3cc2ee25e9600adfbe87ac7c8fb8269aec9459602af0f420becda6120ce7d9626c65ae7f860639e8bf664eb4301ec18add0e436c0356c12ab6b4ca35da2b43c4a8c239fd0b59a2ce94843cdfa1667053165053633b062844dbb0d00070fde74fa3178eb5f1f5fd02e2088d8690379f39ab22c080cdcb29d700bac74fabd8a356fe99afe83a5d99aa5024e9158a299eda6c99b6701e64f1d68e7e2c0c6e88396bb535a02d0948f0a250a6e090041c96d9c9acd6134d44d516fd1010c39e572b86b05bb1326a2a4f23f11181186f9c2a01dc7b58c0129f4b851ca9b1e3dc35db7364e29ef646211796b1651511e041345abce427fa5d6e48b8fb078c8432061a4cc518a8f2a2caf709a5c1473a62112a6650afc64eec12f8f9c08cff1b6fbf7a1209fc8661f62303b7c5d49c1d0b32a9f37e81ed9ab6193816d40995ed49c10b9f5752e04d57535a3d16f06c65d32846c31ec9787ec4a965679eb804e86b45d007f38d8104550770dc6f313bc846e43a14a8c21d0628c744e3e83cb998d1b7acfe996541a8c03852dadf9326444c582b481cae844e4f3fe3d638903b38f24633b63adbad841ac6c4c1169d781a0e271e8a967b1c7e986fcb3a66168e86e3559a44fcfa92452260491da9397659af60453f4cd4be2d15439445ec2b4366a79d3283da912d9d499df1242bd174edc235848caa21d2c997aff0e95c7e5cc0803c90fab84e7be7b37909d0e2f3bc9974e3388acb6800baba183ecc8eea8c71c0d65d669e41f99ceae523b7a6b772f3b8ebba1d2127ccc3ddb7ddcb4ec73cbdc26fc87c3848e258a0b5484d3a13e40ec4e4a65dd92f09e9fe1e3e2f8b96c4e363aa3683860dee62dfcf8823ee4a3593a092e0bd9c4cedacf44a272faa164447b01f46a7795642a40c61b0034a37f0e9b792428a0ddcd144fe8263088eaac8016f8f1cd30b55ac90a8f10d785b7570dd9e639a4a068d3fe98a420b9f72e79de817f676c2a224300d749571ad43f49d1fbe838f4566bc7b5f104c384ad87189213152b644d9fcbdf98bafeee569d640ce9045779f1d90024c023a7480a358dee276fba139c14b4fdb12885240903d0e61dc161659a68f62c92b899007e0f2b65bf0a069e9e57c9b6ae50a3b30dd1003fb0eead73ae2f6010b3b356b4060579a4f29935e1f00c01d12e5f44e8e3163d81dfef7ca8560604240c7e96e4454c6971614df306c768121abb3f628e3f1d2d026f58d1087334c5bdb74d7c949b0ee66a4531ba4e9b922aee3d0f802ed034734507a5913c52966f1f8bd4577840de0253aabc23299dced2a299859c07af9fb0f9c29b6533b9d84d471390d59ab315f5ddb226f6b8dd7889295f0fb1f7bd1adafe4cc520a1e84bf2a59d5b9795aeafc8d6fd66a8228aba8653b98622617ddfeb5d6795c9bd2f35d4a0c386e862675a50e3314c3fbb17aca151c13c7fc8b1d1b72ed0a958537b5ddc9e74bddc2b9571ec3f2b7775b125338d4852a75a63941564c65bb36dfb6bea4aab1ae7a4f285c2177aa98406eb2cc10934aa92d5a9612d4455c84ad200841d289b5c2d5deab0d8e2459598ef183d3dc47f6bad0b9513710600cfa4d69fcd5763cdcc4f2c2b7cd7d4491fd52f4aec82ce846c0988f6f0123e21e900d39c61085e68c9badc350b44004f6c042d64b0d0cbf91ad0592b198f1eeea1e52200bc8e6d62848d6884b10bdde72466039da488be6b340c23148f666f2fe6e032c07dac43586df182aca9116f4600313fa8375c76337ba86bdc391dae6450218f58f047ced64befc6bb5c2a60024669630a6279fedf2fe45e7e19ce582ad96ae0d023eb9b39f5f1e666e73bb038ae38157275be5eb3e7cbc8b05adf53e817646bdc2cfce98e5d162bf7faaca787db8717ab8b27b9e35609c5fb9fe9def07f010df8b43cf5c96851eadfdeff0b7bc5826e7e15490ae9c3d14166ee81bef007070e7981235a673804ad89943ee6b51ac63364f7870e121e6ff23a0c7d179527cd58dd7a4ca37247c2bd9efc79b720bb1ee2d39862e98cb81e93cf5b48d5d02ee8ac737ab504c867a1c49e678300803c94fbe978dea918a1e71b9791ee1e4d30056e86c26a4675a8b090be2365c0b451a13ece52a89a7057fe2052e11c6666eb916d823ea66bf217c320acba3b714910734b2d27c2fa586bd7f7664b0d1422adabad2ce2afc10270057f11940fac1a51d023ce48bd04ea39b7f99381b239fd0ddeea0dce7863ec1f8f61775013b6414ecf86e686a340a3148f87a9d7d60a1f2da53436d16fc88d6a4e7c3d55e0dd004cbecc15a5558eb705d82aacb1862ddc251dd5d9cbf1d78f97900ce6e8dab0ea678cb823bd1e7bbd1e927841af08f5427878c19f4f322228f9b36287fc13e7c1293ea875ae73815e052d6c2ebc40df8f7b9d1f76e0b10e35aa160944983d8e6b790df0d9b13f3460657336d81f7d83c0350324b930ec9c7557ce12887f76372e126f504b0980fea27f31a780c05187b9b5353dafc6b101543b24332b96e15bc26b19062e52fa9f86d260ee3a3bc92a133e328407bb85357ee5c45cb87228f44888b14941b5911b050e9319fe88033f830a8490917a9c0572ebbc5492b4e1083a2e3d77215a34abef947b5b9a950e780662de18873e55899c92db3ad3d437e8407890afa6b0c04ef861b8bc85fbbe1bb67b3d9ef001409f84b8ec4f01d861cecc143a805b981ab5cf5b605057b63cb2c84ec358e510a69cd8c33a8a62fe4680d0c980145cc709157832bfaef261cb0466c237376ca2944ce9affffd4b1dc7cc9511da0b34bffb9ac216fb8cf7c6572d95627787720d1ba67c6512fcdb16f6329e9668681c404efebad559f81f05971b5efb6b4cca97ad0346753cc0a40a877242d8a808c602b03dc962cee38e646cb18abb079c70d357c30738a70f55cd3c5956a83a1bfcd6649dd765f16bfe968066345df7380bbc0c16b3b5af513d6458c791343952f33a051c5d711c1f35af1b47f3db9bbfb5c7c636b3a2b52805d606479879be0b404a28ade5649a3185e0f85a85fc15cd824671c2befdd0da509597c87d869f0bd7ad163ad93ca28fc0c4025eccaafe385ec3fc06c54ebcd7b07b6c7e0197c5b9ef886159a1585ae45248f865be760db6f5bc8f868fc6aefd04e34ecb51159e4cdcc2214b42b1ca9caec13ba3e1b2e7a3c736977b226213d265c2873195122a9b448088c8b50edd549be41c38ab176807b75e7267f86e4", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7ac1492b5762fce6c5d960001000000000000000000000000000080ffffff00e9ff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x80000000) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) read$FUSE(r2, 0x0, 0xeffd) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='ext4\x00', 0x2208004, 0x0) 1.217680298s ago: executing program 6 (id=620): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x51424752}}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x19, 0xf, 0x0, &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x11, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0c14ec0000000000b70500000100000064000000a5000000950000ad00000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000004}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098e00000000", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000100)='./file0\x00'}, 0x18) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)=0x0) fcntl$setown(r7, 0x8, r8) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r11, 0x84, 0xf, &(0x7f00000043c0)={0x0, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x9, 0x8, 0x4, 0xfffff43e, 0x97}, &(0x7f0000004480)=0x98) bind$can_j1939(r9, &(0x7f0000000340)={0x1d, r10, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg$sock(r9, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000004fc0)="14733f9daa4e98c0c2", 0x9}], 0x1}}], 0x1, 0x0) 803.195848ms ago: executing program 0 (id=621): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf8, 0xf8, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var={0x10, 0x0, 0x0, 0xe, 0x5}, @struct={0x0, 0x8, 0x0, 0x4, 0x1, 0x7, [{0x6, 0x3, 0xb333}, {0xe, 0x0, 0x6}, {0x10, 0x2, 0x2}, {0xe, 0x4, 0xb}, {0xe, 0x3}, {0xd, 0x4, 0xfffffffd}, {0x5, 0x3, 0xfff}, {0x0, 0x3, 0x4164}]}, @enum={0x5, 0x5, 0x0, 0x6, 0x4, [{0x7, 0x27}, {0xf}, {0x7, 0xffffffca}, {0xd, 0x1}, {0xe, 0xfffffffb}]}, @restrict={0x9}, @typedef={0x10, 0x0, 0x0, 0x8, 0x1}, @float={0x7, 0x0, 0x0, 0x10, 0x10}, @fwd={0xb}]}, {0x0, [0x2e, 0x30, 0x2e, 0x30, 0x5f, 0x5f, 0x61]}}, &(0x7f0000000380)=""/198, 0x119, 0xc6, 0x1, 0x0, 0x10000}, 0x28) r1 = bpf$MAP_CREATE(0x0, 0x0, 0xffffffdf) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340), 0x0, 0xda, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x5b, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000006c0), 0x10082, 0x0) (async) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000006c0), 0x10082, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xc, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="184000000400e6ff0000000000010000000000008000000000000000f15e0000"], &(0x7f00000000c0)='GPL\x00', 0x4fa53c31, 0x25, &(0x7f0000000100)=""/37, 0xd6f5c2bb20c3e840, 0x54, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0xe, 0x401, 0xffffffff}, 0x10, r2, r3, 0x6, &(0x7f0000000700)=[0xffffffffffffffff, r1], &(0x7f0000000740)=[{0x0, 0x1, 0x10, 0x7}, {0x1, 0x1, 0xf, 0x1}, {0x5, 0x4, 0xc, 0x8}, {0x4, 0x4, 0x3, 0xb}, {0x4, 0x2, 0x6, 0x3}, {0x5, 0x7, 0x8, 0x3}], 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000190000006600000000edffff15000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x8, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000190000006600000000edffff15000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x8, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94) 719.723731ms ago: executing program 0 (id=622): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x259a, &(0x7f0000000000)={0x0, 0xa550, 0x200, 0x10001, 0x153}, &(0x7f0000000240), &(0x7f00000000c0), &(0x7f0000000100)) io_uring_enter(r1, 0x4042be, 0xafb2, 0x8, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) r6 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}}, 0x14) r7 = socket$kcm(0x2b, 0x1, 0x0) close(r7) r8 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000540)='u', 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) setsockopt$sock_attach_bpf(r7, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r7) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10800, 0x2a2e3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MTU={0x8, 0x4, 0xe7}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$VT_OPENQRY(r3, 0x4b4c, &(0x7f0000000280)) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="07000000040000001800000042a0000000000000", @ANYRES32, @ANYBLOB="01e200000000000000000000000000000000000075184eb097dfd488f9cac5226bca6521422399cb5e0804eb749006a13837cfd6e393c507e4bccb3a03b25019777e1f8a590fbf66720cefde0f1aac3b5f01f8ae520f97016ce0ca63bb146897a6b903526fc823cfd4dcf677d16a6d66f41005c75c939a632edd78e464412e10999e9c03c5bfa84d0ef9b57156529ebd5951fa9c7cab0082", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000f40)={r9, 0x0, 0x0}, 0x20) r10 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x4e21, 0x4, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x126, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0) r11 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000180)) ioctl$BTRFS_IOC_QUOTA_RESCAN(r11, 0xb703, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="24000000af0c7b889e6f985034eb2542f149a6a9fca34b0b1f19af231f880ac68e50d871f7f6d1fba52bfd2e91274baf46326b0628b6002135b8c1ea17bfbc9a4fd700773bf566836609ac2ac3b843678c790214c8175b1c7a5b3de98967b45c27897e77e624890881d36dd0d19891dddc0b38841ed28c88c642d7398fb3f8658a32914ebf3cb7220de4079a862d7923b82a909973e46afc19", @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r12, @ANYBLOB="0800050009000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)=ANY=[@ANYRES64=r1, @ANYRES16=r2, @ANYBLOB="050026bd3000000000000f00000008000300577a8323bd2b781fa4d3dcddaf98c9d5ff035af3e695717cbbc1bfa64ed2e70be0b96f686c6abaa3c82f5204cccaa6e44d2938d8fcc43ee3bb26abef12b7bcd610e09d6236d9fc5d97e733cd93f305bbfb5b82082e2b96b56ffb578c58102d5d9a05e590750806d58a7a608c", @ANYRES32=r12, @ANYBLOB="5d000e0080000000ffffffffffffffffffffffff08021100000000000000000000000000640003000009ed1ea099712b32dee83c0401040a062d1a01001d00000000000000a60200fe00040000000000090000000372060303030303030000000400800004007f0008000c000a00000008000d0000080000"], 0x94}}, 0x20000014) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x64, 0x10, 0x581, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x4d015}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x7}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x8}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @empty}, @IFLA_GENEVE_DF={0x5, 0xd, 0x7f}, @IFLA_GENEVE_ID={0x8, 0x1, 0x4}, @IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004002}, 0x4040000) 677.73383ms ago: executing program 2 (id=623): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000007feffff720af0fff8ffffff71a4f0ff0000000061100000000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x10, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 658.281041ms ago: executing program 2 (id=624): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x1f, 0x3, 0x1, 0x0, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) (async) sendto$inet(r1, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="7217", 0x2}, {0x0, 0x30}], 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="20000000000000008400000002000000040041"], 0x20, 0x20040054}, 0x94) 583.794765ms ago: executing program 2 (id=625): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x808719, &(0x7f0000019400)={[{@mb_optimize_scan}, {@noblock_validity}, {@discard}, {@errors_remount}, {@mblk_io_submit, 0x0}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@journal_checksum}, {@mblk_io_submit}, {@i_version}, {@commit={'commit', 0x3d, 0x5}}, {@nolazytime}, {@dax_inode}, {@prjquota}, {@nobarrier}, {@data_writeback}, {@resgid}], [{@fsname={'fsname', 0x3d, '\\$'}}, {@context={'context', 0x3d, 'user_u'}}, {@pcr={'pcr', 0x3d, 0x2c}}], 0x2c}, 0x42, 0x4fc, &(0x7f0000000e40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2000000, 0x79, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x2, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 488.469258ms ago: executing program 2 (id=626): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="016541e9", @ANYRES16=r3, @ANYRESOCT=r1], 0x1c}}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) unshare(0x2c020400) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) msgget$private(0x0, 0x240) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) msgrcv(0x0, &(0x7f0000000000), 0xfffffcef, 0x0, 0x4800) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c01800a0000010000000000000000000a00000008000800", @ANYRES32=0xee01, @ANYBLOB], 0x1c}}, 0x0) 77.521577ms ago: executing program 6 (id=627): r0 = socket$can_j1939(0x1d, 0x2, 0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) landlock_restrict_self(0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@private1, @in6=@ipv4={""/10, ""/2, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@remote}}, &(0x7f00000004c0)=0xe8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x100000, &(0x7f0000000500)={[{@redirect_dir_off}, {@verity_on}, {@default_permissions}, {@uuid_off}], [{@dont_measure}, {@fowner_eq={'fowner', 0x3d, r1}}]}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='task\x00') fchdir(r3) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000002580)=ANY=[@ANYBLOB="1600"], 0x0) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r2, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18) r4 = syz_open_dev$ndb(&(0x7f0000001f40), 0x0, 0x41) ioctl$BLKSECDISCARD(r4, 0x127d, 0x0) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) r5 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0xd) 0s ago: executing program 2 (id=628): socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x1, 0xfffefffc, 0x3d, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x1}, @IFLA_GENEVE_TTL={0x0, 0x3, 0x5}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x5}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x1, 0xfffefffc, 0x3d, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x1}, @IFLA_GENEVE_TTL={0x0, 0x3, 0x5}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x5}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x90, 0xfffffffffffffffe, 0x4000000a74e, {0x1, 0x0, 0x0, 0xffff, 0xfffffff8, 0x84, {0x4, 0x5, 0x7, 0x80000000, 0xfff, 0xffff, 0x7d59, 0x7fff, 0x4, 0x2000, 0x7f, 0x0, 0x0, 0x78002, 0xff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x5411, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000040), &(0x7f00000001c0)=0x4) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000040), &(0x7f00000001c0)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r2 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') (async) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1, 0xa3, 0x0) (async) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1, 0xa3, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) (async) fsmount(r4, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) (async) close(r8) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'vlan1\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0x3}, {0xffff, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x4850) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 43.204132][ T5133] bridge_slave_0: entered allmulticast mode [ 43.204592][ T5133] bridge_slave_0: entered promiscuous mode [ 43.206071][ T5133] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.206097][ T5133] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.206167][ T5133] bridge_slave_1: entered allmulticast mode [ 43.206618][ T5133] bridge_slave_1: entered promiscuous mode [ 43.215908][ T5133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.217104][ T5133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.225896][ T5173] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 43.228187][ T5173] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 43.250980][ T5173] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 43.320920][ T5173] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 43.322545][ T5173] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 43.391007][ T5173] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 43.464667][ T5133] team0: Port device team_slave_0 added [ 43.465481][ T5133] team0: Port device team_slave_1 added [ 43.472423][ T5133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.472446][ T5133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 43.472462][ T5133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.472965][ T5133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.472972][ T5133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 43.472985][ T5133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.482768][ T5133] hsr_slave_0: entered promiscuous mode [ 43.483066][ T5133] hsr_slave_1: entered promiscuous mode [ 43.483256][ T5133] debugfs: 'hsr0' already exists in 'hsr' [ 43.483266][ T5133] Cannot create hsr debugfs directory [ 43.712633][ T4398] 8021q: adding VLAN 0 to HW filter on device eth1 [ 43.734436][ T5133] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 43.746230][ T5133] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 43.746540][ T5133] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 43.782754][ T5133] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 43.804570][ T5133] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 43.833980][ T5133] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 43.834294][ T5133] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 43.841622][ T5133] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 43.920180][ T15] hsr_slave_0: left promiscuous mode [ 43.960160][ T15] hsr_slave_1: left promiscuous mode [ 43.960608][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.960627][ T15] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.002521][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.002560][ T15] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.023112][ T5256] loop0: detected capacity change from 0 to 4096 [ 44.029008][ T5256] EXT4-fs (loop0): Test dummy encryption mode enabled [ 44.034908][ T5256] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.050987][ T15] veth1_macvtap: left promiscuous mode [ 44.051030][ T15] veth0_macvtap: left promiscuous mode [ 44.051099][ T15] veth1_vlan: left promiscuous mode [ 44.051140][ T15] veth0_vlan: left promiscuous mode [ 44.400578][ T15] team0 (unregistering): Port device team_slave_1 removed [ 44.420407][ T15] team0 (unregistering): Port device team_slave_0 removed [ 44.494771][ T4398] 8021q: adding VLAN 0 to HW filter on device eth3 [ 44.522185][ T5133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.526041][ T5133] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.527919][ T1270] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.527959][ T1270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.533426][ T1270] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.533473][ T1270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.671169][ T4398] 8021q: adding VLAN 0 to HW filter on device eth2 [ 44.686518][ T5133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.742223][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.764025][ T5133] veth0_vlan: entered promiscuous mode [ 44.765693][ T5133] veth1_vlan: entered promiscuous mode [ 44.771661][ T5133] veth0_macvtap: entered promiscuous mode [ 44.772771][ T5133] veth1_macvtap: entered promiscuous mode [ 44.784008][ T5133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.785002][ T5133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.786790][ T3132] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.823625][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.836454][ T5302] binder: 5301:5302 ioctl c038586a 20000480 returned -22 [ 44.837683][ T5302] binder: 5301:5302 tried to acquire reference to desc 0, got 1 instead [ 44.838135][ T1487] binder: release 5301:5302 transaction 14 out, still active [ 44.838148][ T1487] binder: undelivered TRANSACTION_COMPLETE [ 44.844046][ T1487] binder: send failed reply for transaction 14, target dead [ 44.864991][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.865365][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.970225][ T4722] Bluetooth: hci0: command 0x0c1a tx timeout [ 45.050629][ T4722] Bluetooth: hci2: command tx timeout [ 45.301613][ T4722] Bluetooth: hci1: command 0x0c1a tx timeout [ 45.380263][ T4722] Bluetooth: hci3: command 0x0c1a tx timeout [ 45.460182][ T4722] Bluetooth: hci4: command 0x2016 tx timeout [ 45.471177][ T5173] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 45.471225][ T5173] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 45.531853][ T5173] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 45.590966][ T5173] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 45.591010][ T5173] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 45.660951][ T5173] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 45.749591][ T3132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.749624][ T3132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.833531][ T5320] loop0: detected capacity change from 0 to 512 [ 45.844684][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.844709][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.872566][ T5319] syzkaller0: entered promiscuous mode [ 45.873704][ T5319] syzkaller0: entered allmulticast mode [ 45.875628][ T5320] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.885230][ T5319] loop4: detected capacity change from 0 to 512 [ 46.121754][ T5319] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.90: corrupted in-inode xattr: invalid ea_ino [ 46.121793][ T5319] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 46.122018][ T5319] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.90: couldn't read orphan inode 15 (err -117) [ 46.122031][ T5319] loop4: lost filesystem error report for type 5 error -117 [ 46.122678][ T5319] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.269165][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.382885][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.460786][ T5355] loop5: detected capacity change from 0 to 4096 [ 46.463622][ T5355] EXT4-fs (loop5): Test dummy encryption mode enabled [ 46.469360][ T5355] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.959639][ T5374] loop4: detected capacity change from 0 to 256 [ 46.961532][ T5374] vfat: Unknown parameter 'iocharÀ8ñ÷>˜†iÜset' [ 46.964612][ T5374] xt_policy: too many policy elements [ 47.007754][ T5374] loop4: detected capacity change from 0 to 256 [ 47.061603][ T4724] Bluetooth: hci0: command 0x0c1a tx timeout [ 47.122371][ T5386] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 47.243653][ T5391] Driver unsupported XDP return value 0 on prog (id 34) dev N/A, expect packet loss! [ 47.333631][ T5133] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.408948][ T4724] Bluetooth: hci1: command 0x0c1a tx timeout [ 47.450263][ T4724] Bluetooth: hci3: command 0x0c1a tx timeout [ 47.530187][ T4724] Bluetooth: hci4: command 0x2016 tx timeout [ 47.610270][ T4724] Bluetooth: hci2: command 0x0419 tx timeout [ 47.710723][ T5414] loop1: detected capacity change from 0 to 512 [ 47.726675][ T5414] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 47.765885][ T5416] loop5: detected capacity change from 0 to 1024 [ 47.772781][ T5414] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.116: bg 0: block 384: padding at end of block bitmap is not set [ 47.772812][ T5414] loop1: lost filesystem error report for type 5 error -117 [ 47.788055][ T5414] EXT4-fs (loop1): Remounting filesystem read-only [ 47.788291][ T5414] EXT4-fs (loop1): 1 truncate cleaned up [ 47.788750][ T5414] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.881350][ T5416] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 47.899691][ T5414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.116'. [ 47.899714][ T5414] netlink: 16 bytes leftover after parsing attributes in process `syz.1.116'. [ 48.038204][ T5430] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm syz.5.117: lblock 0 mapped to illegal pblock 0 (length 1) [ 48.039916][ T5430] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 48.039947][ T5430] EXT4-fs (loop5): This should not happen!! Data will be lost [ 48.039947][ T5430] [ 48.041372][ T5416] netlink: 56 bytes leftover after parsing attributes in process `syz.5.117'. [ 48.221137][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.269481][ T5443] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_vlan, syncid = 4, id = 0 [ 48.272087][ T1270] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm kworker/u8:5: lblock 0 mapped to illegal pblock 0 (length 1) [ 48.273005][ T1270] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 48.273024][ T1270] EXT4-fs (loop5): This should not happen!! Data will be lost [ 48.273024][ T1270] [ 48.283609][ T5133] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 48.285154][ T5133] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 48.288317][ T5442] IPVS: stopping backup sync thread 5443 ... [ 48.323715][ T5449] netlink: 'syz.2.126': attribute type 1 has an invalid length. [ 48.328562][ T5439] loop1: detected capacity change from 0 to 512 [ 48.328898][ T5439] vfat: Unknown parameter '­V¶Å‚®mÍ2’êTǾï‘]VLÂ' [ 48.339501][ T5449] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.480611][ T5449] veth3: entered promiscuous mode [ 48.483817][ T5449] bond1: (slave veth3): Enslaving as an active interface with a down link [ 48.504591][ T5459] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 48.521441][ T5478] faux_driver vgem: [drm] Unknown color mode 3; guessing buffer size. [ 48.602906][ T5486] Invalid ELF header magic: != ELF [ 49.057744][ T5494] loop1: detected capacity change from 0 to 128 [ 49.111778][ T5494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.136'. [ 49.130356][ T4724] Bluetooth: hci0: command 0x0c1a tx timeout [ 49.441086][ T5520] loop2: detected capacity change from 0 to 512 [ 49.450290][ T4722] Bluetooth: hci1: command 0x0c1a tx timeout [ 49.462869][ T5520] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.482048][ T5520] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 49.484249][ T5520] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 49.484265][ T5520] EXT4-fs (loop2): This should not happen!! Data will be lost [ 49.484265][ T5520] [ 49.484273][ T5520] EXT4-fs (loop2): Total free blocks count 0 [ 49.484280][ T5520] EXT4-fs (loop2): Free/Dirty block details [ 49.484289][ T5520] EXT4-fs (loop2): free_blocks=65281 [ 49.484300][ T5520] EXT4-fs (loop2): dirty_blocks=1 [ 49.484306][ T5520] EXT4-fs (loop2): Block reservation details [ 49.484312][ T5520] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 49.486199][ T5520] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 49.522944][ T4720] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 49.530511][ T4722] Bluetooth: hci3: command 0x0c1a tx timeout [ 49.610968][ T4722] Bluetooth: hci4: command 0x2016 tx timeout [ 49.810267][ T4722] Bluetooth: hci2: command 0x0419 tx timeout [ 50.035600][ T5538] loop2: detected capacity change from 0 to 2048 [ 50.037394][ T5538] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 50.624728][ T4722] Bluetooth: hci4: unexpected event for opcode 0x040e [ 51.370296][ T4724] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 51.803800][ T5576] loop1: detected capacity change from 0 to 128 [ 51.818643][ T5576] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c028, mo2=0002] [ 51.818699][ T5576] System zones: 1-3, 19-19, 35-36 [ 51.827331][ T5576] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 51.835333][ T5576] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #2: comm syz.1.160: No space for directory leaf checksum. Please run e2fsck -D. [ 51.838821][ T5576] EXT4-fs error (device loop1): __ext4_find_entry:1626: inode #2: comm syz.1.160: checksumming directory block 0 [ 51.850407][ T4722] Bluetooth: hci2: command 0x0419 tx timeout [ 51.853506][ T5576] EXT4-fs (loop1): Remounting filesystem read-only [ 51.898293][ T4710] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.075079][ T5591] loop1: detected capacity change from 0 to 512 [ 52.089889][ T5591] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.162: inode has both inline data and extents flags [ 52.089928][ T5591] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 52.091634][ T5591] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.162: couldn't read orphan inode 15 (err -117) [ 52.091658][ T5591] loop1: lost filesystem error report for type 5 error -117 [ 52.094917][ T5591] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.106828][ T5548] Set syz1 is full, maxelem 65536 reached [ 52.223366][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.345974][ T5614] netlink: 36 bytes leftover after parsing attributes in process `syz.5.169'. [ 52.849812][ T5616] tmpfs: Bad value for 'mpol' [ 53.386644][ T5629] loop4: detected capacity change from 0 to 8 [ 53.505717][ T5616] netlink: 64 bytes leftover after parsing attributes in process `syz.5.169'. [ 53.505750][ T5616] tc_dump_action: action bad kind [ 53.512267][ T5629] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 53.512295][ T5629] unable to read xattr id index table [ 53.516095][ T5629] SQUASHFS error: zlib decompression failed, data probably corrupt [ 53.516127][ T5629] SQUASHFS error: Failed to read block 0x9b: -5 [ 53.516136][ T5629] SQUASHFS error: Unable to read metadata cache entry [99] [ 53.516143][ T5629] SQUASHFS error: Unable to read inode 0x127 [ 53.592434][ T5615] infiniband syz2: set down [ 53.592466][ T5615] infiniband syz2: added ipvlan0 [ 53.593790][ T5615] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 53.594797][ T5615] infiniband syz2: Couldn't open port 1 [ 53.602337][ T5615] RDS/IB: syz2: added [ 53.602451][ T5615] smc: adding ib device syz2 with port count 1 [ 53.602481][ T5615] smc: ib device syz2 port 1 has no pnetid [ 53.930356][ T4722] Bluetooth: hci2: command 0x0419 tx timeout [ 54.200685][ T5648] loop1: detected capacity change from 0 to 2048 [ 54.235465][ T5648] loop1: p2 p3 p7 [ 54.396974][ T5653] loop4: detected capacity change from 0 to 4096 [ 54.434541][ T5653] EXT4-fs (loop4): Test dummy encryption mode enabled [ 54.466171][ T5653] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.113651][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.154124][ T5667] loop5: detected capacity change from 0 to 512 [ 55.174313][ T5667] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 55.383955][ T5683] warning: `syz.5.186' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 55.757980][ T5703] loop1: detected capacity change from 0 to 512 [ 55.773802][ T5701] netlink: 300 bytes leftover after parsing attributes in process `syz.4.190'. [ 55.774725][ T5700] netlink: 2636 bytes leftover after parsing attributes in process `syz.4.190'. [ 55.774736][ T5700] netlink: 'syz.4.190': attribute type 1 has an invalid length. [ 55.779212][ T5703] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.832019][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.872138][ T5640] Set syz1 is full, maxelem 65536 reached [ 55.904753][ T5716] loop1: detected capacity change from 0 to 512 [ 55.922691][ T5716] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.928111][ T5716] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #2: comm syz.1.192: corrupted inode contents [ 55.929163][ T5716] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #2: comm syz.1.192: mark_inode_dirty error [ 55.929373][ T5716] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #2: comm syz.1.192: corrupted inode contents [ 55.929918][ T5716] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.192: mark_inode_dirty error [ 55.933501][ T5716] EXT4-fs warning (device loop1): ext4_es_cache_extent:1082: inode #2: comm syz.1.192: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 55.933501][ T5716] [ 55.935309][ T5716] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #2: comm syz.1.192: corrupted inode contents [ 55.935909][ T5716] EXT4-fs error (device loop1): ext4_append:88: inode #2: comm syz.1.192: mark_inode_dirty error [ 55.936064][ T5716] EXT4-fs error (device loop1) in ext4_append:100: Corrupt filesystem [ 55.937283][ T5716] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #2: comm syz.1.192: corrupted inode contents [ 55.939772][ T5716] EXT4-fs error (device loop1): add_dirent_to_buf:2151: inode #2: comm syz.1.192: mark_inode_dirty error [ 55.947052][ T5715] fuse: No fuse device found [ 55.986882][ T5722] loop4: detected capacity change from 0 to 1024 [ 55.998470][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.042834][ T5722] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.062354][ T5722] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm syz.4.195: lblock 0 mapped to illegal pblock 0 (length 1) [ 56.077767][ T5722] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: comm syz.4.195: lblock 0 mapped to illegal pblock 0 (length 1) [ 56.081393][ T5722] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: comm syz.4.195: lblock 0 mapped to illegal pblock 0 (length 1) [ 56.081636][ T5722] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: comm syz.4.195: lblock 0 mapped to illegal pblock 0 (length 1) [ 56.081896][ T5722] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: comm syz.4.195: lblock 0 mapped to illegal pblock 0 (length 1) [ 56.082056][ T5722] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: comm syz.4.195: lblock 0 mapped to illegal pblock 0 (length 1) [ 56.082215][ T5722] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: comm syz.4.195: lblock 0 mapped to illegal pblock 0 (length 1) [ 56.082361][ T5722] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: comm syz.4.195: lblock 0 mapped to illegal pblock 0 (length 1) [ 56.082513][ T5722] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: comm syz.4.195: lblock 0 mapped to illegal pblock 0 (length 1) [ 56.082671][ T5722] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: comm syz.4.195: lblock 0 mapped to illegal pblock 0 (length 1) [ 56.623178][ T5742] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 57.102099][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 57.201976][ T5775] netlink: 8 bytes leftover after parsing attributes in process `syz.5.203'. [ 57.204408][ T5775] netlink: 8 bytes leftover after parsing attributes in process `syz.5.203'. [ 57.262200][ T5784] netlink: 36 bytes leftover after parsing attributes in process `syz.4.204'. [ 57.438929][ T5796] loop5: detected capacity change from 0 to 4096 [ 57.443482][ T5796] EXT4-fs (loop5): Test dummy encryption mode enabled [ 57.445868][ T5796] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 57.445932][ T5796] System zones: 0-5 [ 57.446434][ T5796] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 57.453422][ T5802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.208'. [ 57.453453][ T5802] netlink: 32 bytes leftover after parsing attributes in process `syz.4.208'. [ 57.453478][ T5802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.208'. [ 57.453493][ T5802] netlink: 2 bytes leftover after parsing attributes in process `syz.4.208'. [ 57.539147][ T5133] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.668654][ T5827] loop2: detected capacity change from 0 to 1024 [ 57.669111][ T5827] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.669142][ T5827] EXT4-fs: Ignoring removed bh option [ 57.669153][ T5827] ext4: Unknown parameter 'appraise_type' [ 58.088687][ T5845] fuseblk: Unknown parameter 'roovmode' [ 58.243237][ T5851] netlink: 'syz.1.218': attribute type 4 has an invalid length. [ 58.333978][ T5851] netlink: 'syz.1.218': attribute type 3 has an invalid length. [ 58.334541][ T5851] netlink: 'syz.1.218': attribute type 4 has an invalid length. [ 58.563649][ T5869] loop1: detected capacity change from 0 to 512 [ 58.602852][ T5872] loop5: detected capacity change from 0 to 2048 [ 58.605652][ T5872] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 58.803557][ T5878] netlink: 'syz.1.226': attribute type 1 has an invalid length. [ 59.141773][ T5878] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.173321][ T5888] loop4: detected capacity change from 0 to 2048 [ 59.176679][ T5888] EXT4-fs: quotafile must be on filesystem root [ 59.189450][ T5888] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 59.189472][ T5888] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 59.196124][ T5888] vhci_hcd vhci_hcd.0: Device attached [ 59.203557][ T5889] vhci_hcd: connection closed [ 59.205430][ T1270] vhci_hcd vhci_hcd.4: stop threads [ 59.205898][ T1270] vhci_hcd vhci_hcd.4: release socket [ 59.205920][ T1270] vhci_hcd vhci_hcd.4: disconnect device [ 59.239480][ T5893] loop0: detected capacity change from 0 to 1024 [ 59.242755][ T5893] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 59.255284][ T5893] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 59.255579][ T5893] EXT4-fs (loop0): orphan cleanup on readonly fs [ 59.256562][ T5893] EXT4-fs error (device loop0): ext4_free_blocks:6718: comm syz.0.230: Freeing blocks not in datazone - block = 0, count = 4096 [ 59.256583][ T5893] loop0: lost filesystem error report for type 5 error -117 [ 59.258633][ T5893] EXT4-fs (loop0): Remounting filesystem read-only [ 59.258710][ T5893] EXT4-fs (loop0): 1 orphan inode deleted [ 59.259166][ T5893] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 59.280558][ T5893] netlink: 'syz.0.230': attribute type 4 has an invalid length. [ 59.373309][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.543985][ T5906] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 59.614663][ T5911] loop2: detected capacity change from 0 to 256 [ 59.636373][ T5911] FAT-fs (loop2): Directory bread(block 64) failed [ 59.638096][ T5911] FAT-fs (loop2): Directory bread(block 65) failed [ 59.642296][ T5911] FAT-fs (loop2): Directory bread(block 66) failed [ 59.642332][ T5911] FAT-fs (loop2): Directory bread(block 67) failed [ 59.642365][ T5911] FAT-fs (loop2): Directory bread(block 68) failed [ 59.642383][ T5911] FAT-fs (loop2): Directory bread(block 69) failed [ 59.642411][ T5911] FAT-fs (loop2): Directory bread(block 70) failed [ 59.642427][ T5911] FAT-fs (loop2): Directory bread(block 71) failed [ 59.642453][ T5911] FAT-fs (loop2): Directory bread(block 72) failed [ 59.642468][ T5911] FAT-fs (loop2): Directory bread(block 73) failed [ 59.677681][ T5911] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.677994][ T5911] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.763349][ T5921] bridge0: port 3(vlan2) entered blocking state [ 59.764661][ T5921] bridge0: port 3(vlan2) entered disabled state [ 59.766211][ T5921] vlan2: entered allmulticast mode [ 59.767292][ T5921] dummy0: entered allmulticast mode [ 59.769444][ T5921] vlan2: entered promiscuous mode [ 59.770968][ T5921] dummy0: entered promiscuous mode [ 59.860682][ T5936] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 59.860715][ T5936] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 59.860771][ T5936] overlayfs: conflicting lowerdir path [ 59.896483][ T5944] netlink: 'syz.0.247': attribute type 3 has an invalid length. [ 59.898337][ T5944] __nla_validate_parse: 4 callbacks suppressed [ 59.901227][ T5944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.247'. [ 60.092736][ T5946] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 60.092758][ T5946] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 60.092884][ T5946] vhci_hcd vhci_hcd.0: Device attached [ 60.167510][ T5946] loop1: detected capacity change from 0 to 8192 [ 60.180437][ T5946] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 60.396839][ T10] usb 4-1: new low-speed USB device number 2 using vhci_hcd [ 60.741810][ T5947] vhci_hcd: connection reset by peer [ 60.744082][ T39] vhci_hcd vhci_hcd.1: stop threads [ 60.745126][ T39] vhci_hcd vhci_hcd.1: release socket [ 60.753672][ T39] vhci_hcd vhci_hcd.1: disconnect device [ 60.870412][ T5936] loop2: detected capacity change from 0 to 1024 [ 60.870714][ T5936] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.880178][ T5936] EXT4-fs (loop2): Test dummy encryption mode enabled [ 60.885322][ T5936] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6040c01c, mo2=0002] [ 60.885368][ T5936] System zones: 0-1, 3-36 [ 60.959823][ T5936] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.991637][ T5936] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 61.450011][ T5964] loop0: detected capacity change from 0 to 4096 [ 61.628570][ T5966] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 61.628570][ T5966] The task syz.5.249 (5966) triggered the difference, watch for misbehavior. [ 61.832303][ T5964] EXT4-fs (loop0): Test dummy encryption mode enabled [ 61.836210][ T5966] FAT-fs (loop5): Directory bread(block 64) failed [ 61.836245][ T5966] FAT-fs (loop5): Directory bread(block 65) failed [ 61.836271][ T5966] FAT-fs (loop5): Directory bread(block 66) failed [ 61.836282][ T5966] FAT-fs (loop5): Directory bread(block 67) failed [ 61.836304][ T5966] FAT-fs (loop5): Directory bread(block 68) failed [ 61.836314][ T5966] FAT-fs (loop5): Directory bread(block 69) failed [ 61.836337][ T5966] FAT-fs (loop5): Directory bread(block 70) failed [ 61.836347][ T5966] FAT-fs (loop5): Directory bread(block 71) failed [ 61.836368][ T5966] FAT-fs (loop5): Directory bread(block 72) failed [ 61.836379][ T5966] FAT-fs (loop5): Directory bread(block 73) failed [ 61.869314][ T5964] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.929894][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.096879][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.139172][ T5978] syzkaller0: entered promiscuous mode [ 62.139212][ T5978] syzkaller0: entered allmulticast mode [ 62.180719][ T5984] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 62.200277][ T4796] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 62.219528][ T5971] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 62.230495][ T5971] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.252: Invalid block bitmap block 0 in block_group 0 [ 62.230534][ T5971] loop1: lost filesystem error report for type 5 error -117 [ 62.237268][ T5971] Quota error (device loop1): write_blk: dquota write failed [ 62.237321][ T5971] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 62.237362][ T5971] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.252: Failed to acquire dquot type 0 [ 62.237380][ T5971] loop1: lost filesystem error report for type 5 error -117 [ 62.240435][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 62.240448][ C0] EXT4-fs (loop1): initial error at time 62: ext4_read_block_bitmap_nowait:483 [ 62.240464][ C0] EXT4-fs (loop1): last error at time 62: ext4_acquire_dquot:7034 [ 62.251183][ T5971] EXT4-fs error (device loop1): ext4_free_blocks:6718: comm syz.1.252: Freeing blocks not in datazone - block = 0, count = 4096 [ 62.251216][ T5971] loop1: lost filesystem error report for type 5 error -117 [ 62.254736][ T5971] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.252: Invalid inode bitmap blk 0 in block_group 0 [ 62.254765][ T5971] loop1: lost filesystem error report for type 5 error -117 [ 62.267381][ T5971] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 62.267423][ T5971] loop1: lost filesystem error report for type 5 error -117 [ 62.271901][ T5971] EXT4-fs (loop1): 1 orphan inode deleted [ 62.272382][ T5971] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.311381][ T40] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-7 [ 62.311442][ T40] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:3: Failed to release dquot type 0 [ 62.460732][ T6003] set_capacity_and_notify: 2 callbacks suppressed [ 62.460770][ T6003] loop2: detected capacity change from 0 to 2048 [ 62.461156][ T6003] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 62.522217][ T6006] xt_hashlimit: size too large, truncated to 1048576 [ 62.772227][ T6015] netlink: 'syz.4.260': attribute type 58 has an invalid length. [ 62.773946][ T6015] netlink: 468 bytes leftover after parsing attributes in process `syz.4.260'. [ 64.492255][ T1594] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.492325][ T1594] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.524513][ T26] cfg80211: failed to load regulatory.db [ 65.168058][ T6047] fuse: Bad value for 'fd' [ 65.520939][ T10] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 73.732434][ T6015] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 73.742355][ T6023] tipc: Started in network mode [ 73.742386][ T6023] tipc: Node identity ac14142f, cluster identity 4711 [ 73.744052][ T6023] tipc: New replicast peer: 0.0.0.0 [ 73.744370][ T6023] tipc: Enabled bearer , priority 10 [ 73.762879][ T6024] tipc: Enabling of bearer rejected, already enabled [ 73.780816][ T6062] loop4: detected capacity change from 0 to 512 [ 73.782426][ T6062] EXT4-fs: Ignoring removed orlov option [ 73.789360][ T6062] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.795936][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.805985][ T6062] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 73.816622][ T6062] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.271: attempt to clear invalid blocks 2 len 1 [ 73.816656][ T6062] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 73.820136][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 73.820161][ C1] EXT4-fs (loop4): initial error at time 73: ext4_clear_blocks:876: inode 13 [ 73.820204][ C1] EXT4-fs (loop4): last error at time 73: ext4_clear_blocks:876: inode 13 [ 73.821056][ T6064] netlink: 28 bytes leftover after parsing attributes in process `syz.0.272'. [ 73.829505][ T6062] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 73.834164][ T6062] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.271: invalid indirect mapped block 1819239214 (level 0) [ 73.834189][ T6062] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 73.834508][ T6062] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.271: invalid indirect mapped block 1819239214 (level 1) [ 73.834522][ T6062] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 73.835544][ T6062] EXT4-fs (loop4): 1 truncate cleaned up [ 73.835993][ T6062] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.853646][ T6071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.270'. [ 73.878341][ T6062] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 13: comm syz.4.271: bad entry in directory: directory entry overrun - offset=108, inode=4294901777, rec_len=1024, size=1024 fake=0 [ 73.934918][ T6076] loop1: detected capacity change from 0 to 128 [ 73.972598][ T6084] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 13: comm syz.4.271: bad entry in directory: directory entry overrun - offset=108, inode=4294901777, rec_len=1024, size=1024 fake=0 [ 73.987612][ T6076] FAT-fs (loop1): bogus number of reserved sectors [ 73.988935][ T6076] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 73.990917][ T6076] FAT-fs (loop1): Can't find a valid FAT filesystem [ 74.034245][ T4709] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: directory entry overrun - offset=108, inode=4294901777, rec_len=1024, size=1024 fake=0 [ 74.312779][ T4709] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz-executor: corrupted in-inode xattr: e_value out of bounds [ 74.313822][ T4709] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz-executor: corrupted in-inode xattr: e_value out of bounds [ 74.358868][ T6095] loop0: detected capacity change from 0 to 512 [ 74.363053][ T6095] EXT4-fs: Ignoring removed orlov option [ 74.365002][ T6095] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 74.367553][ T6095] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #16: comm syz.0.281: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 74.367603][ T6095] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 74.368602][ T6095] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.281: couldn't read orphan inode 16 (err -117) [ 74.368617][ T6095] loop0: lost filesystem error report for type 5 error -117 [ 74.368941][ T6095] EXT4-fs (loop0): 1 orphan inode deleted [ 74.373379][ T6095] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.387162][ T4724] Bluetooth: unknown link type 213 [ 74.387196][ T4724] Bluetooth: hci3: connection err: -111 [ 74.416977][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.614372][ T6085] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.709108][ T4722] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.711358][ T4722] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.711755][ T4722] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.712104][ T4722] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.712411][ T4722] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.781843][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.870754][ T26] tipc: Node number set to 2886997039 [ 74.936000][ T6131] loop5: detected capacity change from 0 to 1024 [ 74.936468][ T6131] EXT4-fs: Ignoring removed i_version option [ 74.936499][ T6131] EXT4-fs: Ignoring removed oldalloc option [ 74.936750][ T6131] EXT4-fs (loop5): Test dummy encryption mode enabled [ 74.943987][ T6131] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.991246][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.072520][ T5133] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.145572][ T6144] netlink: 12 bytes leftover after parsing attributes in process `syz.5.293'. [ 75.236911][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.285153][ T6109] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.522329][ T6147] loop5: detected capacity change from 0 to 256 [ 75.583761][ T6109] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.585894][ T6109] bridge_slave_0: entered allmulticast mode [ 75.588006][ T6109] bridge_slave_0: entered promiscuous mode [ 75.599593][ T6109] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.599636][ T6109] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.599702][ T6109] bridge_slave_1: entered allmulticast mode [ 75.602498][ T6109] bridge_slave_1: entered promiscuous mode [ 75.622177][ T6109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.628757][ T6109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.741123][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.754745][ T6109] team0: Port device team_slave_0 added [ 75.755724][ T6109] team0: Port device team_slave_1 added [ 75.763419][ T6109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.763518][ T6109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.763531][ T6109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.764704][ T6109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.764712][ T6109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.764725][ T6109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.777045][ T6109] hsr_slave_0: entered promiscuous mode [ 75.777353][ T6109] hsr_slave_1: entered promiscuous mode [ 75.835988][ T6165] input: syz0 as /devices/virtual/input/input2 [ 75.929051][ T6109] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 75.961738][ T6109] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.972557][ T6109] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 76.009374][ T6109] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.009846][ T6109] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 76.042686][ T6109] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.046395][ T6109] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 76.095602][ T6109] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.123513][ T6167] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input3 [ 77.303983][ T4722] Bluetooth: hci0: command tx timeout [ 77.310282][ T6198] netlink: 'syz.5.302': attribute type 4 has an invalid length. [ 77.381061][ T6203] xt_CT: You must specify a L4 protocol and not use inversions on it [ 77.408904][ T6206] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 77.412601][ T6206] loop0: detected capacity change from 0 to 1024 [ 77.412948][ T6206] EXT4-fs: Ignoring removed bh option [ 77.414154][ T6206] EXT4-fs: test_dummy_encryption requires encrypt feature [ 77.417760][ T6206] Set syz1 is full, maxelem 0 reached [ 77.431510][ T12] vlan2: left allmulticast mode [ 77.432518][ T12] dummy0: left allmulticast mode [ 77.434479][ T12] vlan2: left promiscuous mode [ 77.435561][ T12] dummy0: left promiscuous mode [ 77.436898][ T12] bridge0: port 3(vlan2) entered disabled state [ 77.480736][ T12] bridge_slave_1: left allmulticast mode [ 77.481855][ T12] bridge_slave_1: left promiscuous mode [ 77.481983][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.550523][ T12] bridge_slave_0: left allmulticast mode [ 77.550551][ T12] bridge_slave_0: left promiscuous mode [ 77.550630][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.070363][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.120339][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.141100][ T12] bond0 (unregistering): Released all slaves [ 78.181216][ T4398] 8021q: adding VLAN 0 to HW filter on device eth4 [ 78.204285][ T6109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.208473][ T6109] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.218297][ T6109] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 78.220430][ T6109] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.225523][ T3365] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.225567][ T3365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.229327][ T3365] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.229369][ T3365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.376475][ T6225] netlink: 28 bytes leftover after parsing attributes in process `syz.2.310'. [ 78.428342][ T6227] loop5: detected capacity change from 0 to 1024 [ 78.435673][ T6227] EXT4-fs (loop5): Can't support bigalloc feature without extents feature [ 78.435673][ T6227] [ 78.435718][ T6227] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 78.546109][ T6257] loop2: detected capacity change from 0 to 512 [ 78.546524][ T6257] EXT4-fs: Ignoring removed bh option [ 78.549925][ T6259] loop0: detected capacity change from 0 to 512 [ 78.565620][ T6259] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.576502][ T6257] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.317: corrupted in-inode xattr: e_value size too large [ 78.576541][ T6257] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 78.576713][ T6257] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.317: couldn't read orphan inode 15 (err -117) [ 78.576729][ T6257] loop2: lost filesystem error report for type 5 error -117 [ 78.577251][ T6257] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.882793][ T6271] vivid-000: disconnect [ 79.107292][ T6278] loop5: detected capacity change from 0 to 256 [ 79.121452][ T6278] FAT-fs (loop5): Directory bread(block 64) failed [ 79.121486][ T6278] FAT-fs (loop5): Directory bread(block 65) failed [ 79.121515][ T6278] FAT-fs (loop5): Directory bread(block 66) failed [ 79.121527][ T6278] FAT-fs (loop5): Directory bread(block 67) failed [ 79.121557][ T6278] FAT-fs (loop5): Directory bread(block 68) failed [ 79.121571][ T6278] FAT-fs (loop5): Directory bread(block 69) failed [ 79.121595][ T6278] FAT-fs (loop5): Directory bread(block 70) failed [ 79.121606][ T6278] FAT-fs (loop5): Directory bread(block 71) failed [ 79.121628][ T6278] FAT-fs (loop5): Directory bread(block 72) failed [ 79.121639][ T6278] FAT-fs (loop5): Directory bread(block 73) failed [ 79.129920][ T4398] 8021q: adding VLAN 0 to HW filter on device eth5 [ 79.322011][ T4724] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.324761][ T4724] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.327553][ T4724] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.327958][ T4724] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.328167][ T4724] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.332916][ T6303] loop5: detected capacity change from 0 to 1024 [ 79.338045][ T6303] EXT4-fs (loop5): Can't support bigalloc feature without extents feature [ 79.338045][ T6303] [ 79.342896][ T6303] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 79.348220][ T4398] 8021q: adding VLAN 0 to HW filter on device eth6 [ 79.351973][ T6109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.370623][ T4722] Bluetooth: hci0: command tx timeout [ 79.416930][ T6256] vivid-000: reconnect [ 79.428106][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.433616][ T4722] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 79.534568][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.852991][ T6109] veth0_vlan: entered promiscuous mode [ 79.862557][ T6109] veth1_vlan: entered promiscuous mode [ 79.901769][ T6332] loop0: detected capacity change from 0 to 512 [ 79.902146][ T6332] EXT4-fs: Ignoring removed mblk_io_submit option [ 79.906203][ T6332] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 79.912280][ T6332] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e0ac, mo2=0002] [ 79.912407][ T6332] EXT4-fs (loop0): orphan cleanup on readonly fs [ 79.913430][ T6332] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.329: bg 0: block 361: padding at end of block bitmap is not set [ 79.913450][ T6332] loop0: lost filesystem error report for type 5 error -117 [ 79.913652][ T6332] EXT4-fs (loop0): Remounting filesystem read-only [ 79.913939][ T6332] EXT4-fs (loop0): 1 truncate cleaned up [ 79.916833][ T6332] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 80.904690][ T12] hsr_slave_0: left promiscuous mode [ 80.934851][ T12] hsr_slave_1: left promiscuous mode [ 80.937150][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.941253][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.965928][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 80.999298][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.001017][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.176846][ T12] veth1_macvtap: left promiscuous mode [ 81.178093][ T12] veth0_macvtap: left promiscuous mode [ 81.180002][ T12] veth1_vlan: left promiscuous mode [ 81.181052][ T12] veth0_vlan: left promiscuous mode [ 81.442483][ T4722] Bluetooth: hci1: command tx timeout [ 81.442851][ T4722] Bluetooth: hci0: command tx timeout [ 81.737892][ T12] team0 (unregistering): Port device team_slave_1 removed [ 81.777332][ T12] team0 (unregistering): Port device team_slave_0 removed [ 81.854485][ T4398] 8021q: adding VLAN 0 to HW filter on device eth7 [ 81.961399][ T6360] loop0: detected capacity change from 0 to 128 [ 81.965333][ T6360] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 81.968904][ T6360] fscrypt (loop0, inode 12): Unsupported encryption flags (0x10) [ 81.986191][ T6360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.332'. [ 82.005269][ T6109] veth0_macvtap: entered promiscuous mode [ 82.010341][ T6109] veth1_macvtap: entered promiscuous mode [ 82.028751][ T6109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.033901][ T6109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.038417][ T3277] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.038457][ T3277] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.038486][ T3277] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.038500][ T3277] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.090177][ T4717] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.094114][ T6367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.333'. [ 82.188653][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.188679][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.207352][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.207379][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.388290][ T6300] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.388365][ T6300] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.388437][ T6300] bridge_slave_0: entered allmulticast mode [ 82.388880][ T6300] bridge_slave_0: entered promiscuous mode [ 82.389528][ T6300] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.389545][ T6300] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.389608][ T6300] bridge_slave_1: entered allmulticast mode [ 82.390442][ T6300] bridge_slave_1: entered promiscuous mode [ 82.401444][ T6300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.402410][ T6300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.411986][ T6300] team0: Port device team_slave_0 added [ 82.413498][ T6300] team0: Port device team_slave_1 added [ 82.421028][ T6300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.421048][ T6300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.421064][ T6300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.667052][ T6300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.667082][ T6300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.667110][ T6300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.688183][ T6300] hsr_slave_0: entered promiscuous mode [ 82.690346][ T6300] hsr_slave_1: entered promiscuous mode [ 82.692309][ T6300] debugfs: 'hsr0' already exists in 'hsr' [ 82.693576][ T6300] Cannot create hsr debugfs directory [ 82.840368][ T6410] loop5: detected capacity change from 0 to 512 [ 82.874491][ T6410] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.959307][ T5133] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.995451][ T6418] process 'syz.2.342' launched './file2' with NULL argv: empty string added [ 83.232479][ T6300] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 83.243217][ T6300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.315617][ T6439] loop5: detected capacity change from 0 to 512 [ 83.318267][ T6439] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 83.323255][ T6439] EXT4-fs (loop5): 1 orphan inode deleted [ 83.324419][ T6439] EXT4-fs (loop5): 1 truncate cleaned up [ 83.327119][ T6443] loop6: detected capacity change from 0 to 256 [ 83.330133][ T6439] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.353416][ T6443] FAT-fs (loop6): Directory bread(block 64) failed [ 83.353450][ T6443] FAT-fs (loop6): Directory bread(block 65) failed [ 83.353483][ T6443] FAT-fs (loop6): Directory bread(block 66) failed [ 83.353499][ T6443] FAT-fs (loop6): Directory bread(block 67) failed [ 83.353524][ T6443] FAT-fs (loop6): Directory bread(block 68) failed [ 83.353541][ T6443] FAT-fs (loop6): Directory bread(block 69) failed [ 83.353569][ T6443] FAT-fs (loop6): Directory bread(block 70) failed [ 83.353583][ T6443] FAT-fs (loop6): Directory bread(block 71) failed [ 83.353609][ T6443] FAT-fs (loop6): Directory bread(block 72) failed [ 83.353623][ T6443] FAT-fs (loop6): Directory bread(block 73) failed [ 83.395134][ T6300] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 83.411991][ T6300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.412313][ T6300] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 83.428609][ T6300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.429131][ T6300] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 83.500242][ T6300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.521599][ T4724] Bluetooth: hci0: command tx timeout [ 83.521635][ T4724] Bluetooth: hci1: command tx timeout [ 83.529530][ T6300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.535413][ T6300] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.538783][ T4206] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.538822][ T4206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.543541][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.543599][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.351333][ T6300] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.367393][ T6462] loop2: detected capacity change from 0 to 512 [ 84.368656][ T6300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.473525][ T6462] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 84.473565][ T6462] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 84.473587][ T6462] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.352: Corrupt directory, running e2fsck is recommended [ 84.504076][ T6462] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 84.517666][ T6462] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.352: corrupted in-inode xattr: invalid ea_ino [ 84.520372][ T6462] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 84.520670][ T6462] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.352: couldn't read orphan inode 15 (err -117) [ 84.522823][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 84.522834][ C0] EXT4-fs (loop2): initial error at time 84: ext4_iget_extra_inode:5128: inode 15 [ 84.522850][ C0] EXT4-fs (loop2): last error at time 84: ext4_iget_extra_inode:5128: inode 15 [ 84.536952][ T6462] loop2: lost filesystem error report for type 5 error -117 [ 84.599288][ T6462] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.720264][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.099610][ T6490] loop6: detected capacity change from 0 to 2048 [ 85.104101][ T6490] EXT4-fs (loop6): bad geometry: block count 121766400 exceeds size of device (512 blocks) [ 85.138937][ T6300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.243759][ T5133] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.330729][ T6300] veth0_vlan: entered promiscuous mode [ 85.336607][ T6300] veth1_vlan: entered promiscuous mode [ 85.348037][ T6300] veth0_macvtap: entered promiscuous mode [ 85.350880][ T6300] veth1_macvtap: entered promiscuous mode [ 85.359050][ T6300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.362985][ T6300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.364323][ T6508] usb usb7: usbfs: interface 0 claimed by hub while 'syz.6.360' sets config #0 [ 85.372228][ T40] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.372279][ T40] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.372300][ T40] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.372316][ T40] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.426315][ T6514] loop6: detected capacity change from 0 to 512 [ 85.428085][ T6514] EXT4-fs: Ignoring removed mblk_io_submit option [ 85.431900][ T6514] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 85.434694][ T6514] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 85.436419][ T6514] EXT4-fs (loop6): orphan cleanup on readonly fs [ 85.438069][ T6514] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.363: bg 0: block 361: padding at end of block bitmap is not set [ 85.441366][ T6514] loop6: lost filesystem error report for type 5 error -117 [ 85.442017][ T6514] EXT4-fs (loop6): Remounting filesystem read-only [ 85.445775][ T6514] EXT4-fs (loop6): 1 truncate cleaned up [ 85.447435][ T6514] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 85.599821][ T6109] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 85.619353][ T6524] loop5: detected capacity change from 0 to 512 [ 85.682880][ T4722] Bluetooth: hci1: command tx timeout [ 85.691578][ T3365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.691607][ T3365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.697170][ T1270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.697198][ T1270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.165015][ T6548] loop2: detected capacity change from 0 to 128 [ 86.166865][ T6548] ext4: Unknown parameter 'seclabel' [ 86.500206][ T6553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.375'. [ 86.526633][ T6558] loop2: detected capacity change from 0 to 512 [ 86.528498][ T6558] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.530541][ T6558] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 86.536039][ T6558] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 86.536146][ T6558] EXT4-fs (loop2): orphan cleanup on readonly fs [ 86.536296][ T6558] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.377: bg 0: block 361: padding at end of block bitmap is not set [ 86.536314][ T6558] loop2: lost filesystem error report for type 5 error -117 [ 86.541963][ T6558] EXT4-fs (loop2): Remounting filesystem read-only [ 86.545150][ T6558] EXT4-fs (loop2): 1 truncate cleaned up [ 86.546312][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 86.546326][ C0] EXT4-fs (loop2): initial error at time 86: ext4_validate_block_bitmap:441 [ 86.546347][ C0] EXT4-fs (loop2): last error at time 86: ext4_validate_block_bitmap:441 [ 86.548254][ T6558] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 86.648946][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 86.696074][ T6564] loop2: detected capacity change from 0 to 128 [ 86.703250][ T6564] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 87.887123][ T4722] Bluetooth: hci1: command tx timeout [ 87.921201][ T6580] loop7: detected capacity change from 0 to 128 [ 88.463396][ T6581] loop5: detected capacity change from 0 to 4096 [ 88.497978][ T6581] EXT4-fs (loop5): Test dummy encryption mode enabled [ 88.499995][ T6580] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 88.507435][ T6581] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.706953][ T5133] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.712177][ T6300] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 88.716717][ T6596] loop0: detected capacity change from 0 to 512 [ 88.733218][ T6596] EXT4-fs: Ignoring removed mblk_io_submit option [ 88.739717][ T6596] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 88.740379][ T6596] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 88.740458][ T6596] EXT4-fs (loop0): orphan cleanup on readonly fs [ 88.740780][ T6596] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.388: bg 0: block 361: padding at end of block bitmap is not set [ 88.740793][ T6596] loop0: lost filesystem error report for type 5 error -117 [ 88.740947][ T6596] EXT4-fs (loop0): Remounting filesystem read-only [ 88.741176][ T6596] EXT4-fs (loop0): 1 truncate cleaned up [ 88.741608][ T6596] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 88.932385][ T6605] EXT4-fs: Ignoring removed bh option [ 88.939456][ T6605] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 88.940321][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 88.967578][ T6605] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.984785][ T6616] netlink: 32 bytes leftover after parsing attributes in process `syz.0.390'. [ 89.385535][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.442638][ T6638] EXT4-fs: Ignoring removed bh option [ 89.442673][ T6638] EXT4-fs: inline encryption not supported [ 89.444566][ T6638] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 89.450321][ T6638] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 2: comm syz.2.396: lblock 2 mapped to illegal pblock 2 (length 1) [ 89.451728][ T6638] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 89.452219][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 89.452243][ C0] EXT4-fs (loop2): initial error at time 89: ext4_map_blocks:791: inode 3: block 2 [ 89.452263][ C0] EXT4-fs (loop2): last error at time 89: ext4_map_blocks:791: inode 3: block 2 [ 89.456412][ T6638] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 89.458235][ T6638] EXT4-fs error (device loop2): __ext4_get_inode_loc:4885: comm syz.2.396: Invalid inode table block 1 in block_group 0 [ 89.458257][ T6638] loop2: lost filesystem error report for type 5 error -117 [ 89.458375][ T6638] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 89.458384][ T6638] loop2: lost filesystem error report for type 5 error -117 [ 89.458807][ T6638] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #3: comm syz.2.396: mark_inode_dirty error [ 89.458825][ T6638] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 89.458902][ T6638] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 89.458910][ T6638] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.396: Failed to acquire dquot type 0 [ 89.458919][ T6638] loop2: lost filesystem error report for type 5 error -117 [ 89.459102][ T6638] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 89.459115][ T6638] loop2: lost filesystem error report for type 5 error -117 [ 89.459281][ T6638] EXT4-fs error (device loop2): ext4_evict_inode:267: inode #11: comm syz.2.396: mark_inode_dirty error [ 89.459294][ T6638] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 89.459358][ T6638] EXT4-fs warning (device loop2): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 89.459391][ T6638] EXT4-fs (loop2): 1 orphan inode deleted [ 89.459814][ T6638] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.506333][ T40] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 89.508380][ T40] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 89.508400][ T40] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:3: Failed to release dquot type 0 [ 89.509679][ T6638] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.510147][ T6638] EXT4-fs error (device loop2): __ext4_get_inode_loc:4885: comm syz.2.396: Invalid inode table block 1 in block_group 0 [ 89.510159][ T6638] loop2: lost filesystem error report for type 5 error -117 [ 89.512042][ T6638] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 89.512070][ T6638] loop2: lost filesystem error report for type 5 error -117 [ 89.512633][ T6638] EXT4-fs error (device loop2): ext4_quota_off:7318: inode #3: comm syz.2.396: mark_inode_dirty error [ 89.512648][ T6638] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 89.517364][ T6640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.850754][ T6645] set_capacity_and_notify: 2 callbacks suppressed [ 89.850807][ T6645] loop2: detected capacity change from 0 to 4096 [ 89.945469][ T6645] EXT4-fs (loop2): Test dummy encryption mode enabled [ 89.960640][ T6645] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.005152][ T6652] loop6: detected capacity change from 0 to 512 [ 90.005624][ T6652] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.006028][ T6652] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 90.014632][ T6652] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 90.014762][ T6652] EXT4-fs (loop6): orphan cleanup on readonly fs [ 90.015127][ T6652] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.400: bg 0: block 361: padding at end of block bitmap is not set [ 90.015153][ T6652] loop6: lost filesystem error report for type 5 error -117 [ 90.015397][ T6652] EXT4-fs (loop6): Remounting filesystem read-only [ 90.015680][ T6652] EXT4-fs (loop6): 1 truncate cleaned up [ 90.016157][ T6652] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 90.400015][ T6109] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 90.538509][ T6669] fuse: Bad value for 'rootmode' [ 90.558831][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.866670][ T6673] netlink: 44 bytes leftover after parsing attributes in process `syz.6.406'. [ 90.868187][ T6673] netlink: 4 bytes leftover after parsing attributes in process `syz.6.406'. [ 90.868248][ T6673] bridge_slave_1: left allmulticast mode [ 90.868270][ T6673] bridge_slave_1: left promiscuous mode [ 90.868373][ T6673] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.899240][ T6669] loop0: detected capacity change from 0 to 512 [ 90.911466][ T6669] EXT4-fs: Ignoring removed oldalloc option [ 90.973920][ T6669] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 91.140325][ T6673] bridge_slave_0: left allmulticast mode [ 91.140375][ T6673] bridge_slave_0: left promiscuous mode [ 91.140551][ T6673] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.155080][ T6669] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #11: comm syz.0.407: corrupted in-inode xattr: invalid ea_ino [ 91.155112][ T6669] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 91.158213][ T6669] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.407: couldn't read orphan inode 11 (err -117) [ 91.158242][ T6669] loop0: lost filesystem error report for type 5 error -117 [ 91.160164][ C0] EXT4-fs (loop0): error count since last fsck: 2 [ 91.160173][ C0] EXT4-fs (loop0): initial error at time 90: ext4_iget_extra_inode:5128: inode 11 [ 91.160188][ C0] EXT4-fs (loop0): last error at time 90: ext4_orphan_get:1402 [ 91.163611][ T6669] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.201218][ T6683] loop2: detected capacity change from 0 to 256 [ 92.219389][ T6669] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.409841][ T6689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.410'. [ 92.678226][ C0] vcan0: j1939_tp_rxtimer: 0x000000003755b48b: rx timeout, send abort [ 93.217956][ C0] vcan0: j1939_tp_rxtimer: 0x00000000a50a8a8d: rx timeout, send abort [ 93.219843][ C0] vcan0: j1939_tp_rxtimer: 0x000000003755b48b: abort rx timeout. Force session deactivation [ 93.646858][ T6695] loop6: detected capacity change from 0 to 512 [ 93.726527][ T6695] EXT4-fs: Ignoring removed mblk_io_submit option [ 93.728186][ T6695] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 93.734305][ T6695] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 93.734412][ T6695] EXT4-fs (loop6): orphan cleanup on readonly fs [ 93.740232][ T6695] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.412: bg 0: block 361: padding at end of block bitmap is not set [ 93.740267][ T6695] loop6: lost filesystem error report for type 5 error -117 [ 93.743398][ T6695] EXT4-fs (loop6): Remounting filesystem read-only [ 93.746191][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 93.746205][ C0] EXT4-fs (loop6): initial error at time 93: ext4_validate_block_bitmap:441 [ 93.746226][ C0] EXT4-fs (loop6): last error at time 93: ext4_validate_block_bitmap:441 [ 93.751258][ T6695] EXT4-fs (loop6): 1 truncate cleaned up [ 93.751729][ T6695] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 94.046493][ T6703] loop5: detected capacity change from 0 to 512 [ 94.054952][ T6109] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 94.071306][ T6703] loop5: detected capacity change from 0 to 1024 [ 94.074178][ T6703] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 94.082085][ T6703] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 2: comm syz.5.414: lblock 2 mapped to illegal pblock 2 (length 1) [ 94.082122][ T6703] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 94.085210][ T6703] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 94.085255][ T6703] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 48: comm syz.5.414: lblock 0 mapped to illegal pblock 48 (length 1) [ 94.085272][ T6703] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 94.093059][ T6703] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 94.093093][ T6703] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.414: Failed to acquire dquot type 0 [ 94.093122][ T6703] loop5: lost filesystem error report for type 5 error -117 [ 94.100633][ T6703] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 94.101048][ T6703] loop5: lost filesystem error report for type 5 error -117 [ 94.101627][ C1] EXT4-fs (loop5): error count since last fsck: 4 [ 94.101644][ C1] EXT4-fs (loop5): initial error at time 93: ext4_map_blocks:791: inode 3: block 2 [ 94.101664][ C1] EXT4-fs (loop5): last error at time 93: ext4_reserve_inode_write:6383 [ 94.113242][ T6703] EXT4-fs error (device loop5): ext4_evict_inode:267: inode #11: comm syz.5.414: mark_inode_dirty error [ 94.113285][ T6703] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 94.117498][ T6703] EXT4-fs warning (device loop5): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 94.117579][ T6703] EXT4-fs (loop5): 1 orphan inode deleted [ 94.128100][ T6703] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.172363][ T6715] netlink: 64 bytes leftover after parsing attributes in process `syz.6.415'. [ 94.198966][ T3365] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 94.202858][ T3365] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 94.202892][ T3365] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:9: Failed to release dquot type 0 [ 94.210771][ T5133] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.213970][ T5133] EXT4-fs error (device loop5): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 94.214004][ T5133] loop5: lost filesystem error report for type 5 error -117 [ 94.216694][ T5133] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 94.216732][ T5133] loop5: lost filesystem error report for type 5 error -117 [ 94.220203][ T5133] EXT4-fs error (device loop5): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 94.220247][ T5133] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 94.302326][ T6734] loop5: detected capacity change from 0 to 2048 [ 94.304316][ T6734] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 94.463523][ T6751] loop7: detected capacity change from 0 to 512 [ 94.466683][ T6751] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 94.483504][ T6751] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.422: invalid indirect mapped block 4294967295 (level 0) [ 94.483544][ T6751] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 94.484191][ T6751] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.422: invalid indirect mapped block 4294967295 (level 1) [ 94.484211][ T6751] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 94.485345][ T6751] EXT4-fs (loop7): 1 orphan inode deleted [ 94.485358][ T6751] EXT4-fs (loop7): 1 truncate cleaned up [ 94.486064][ T6751] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.524427][ T6300] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.553602][ T6760] loop7: detected capacity change from 0 to 256 [ 94.665906][ T6766] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.668627][ T6766] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 95.132507][ T6766] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 95.147506][ T6766] EXT4-fs (loop2): orphan cleanup on readonly fs [ 95.147665][ T6766] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.425: bg 0: block 361: padding at end of block bitmap is not set [ 95.147679][ T6766] loop2: lost filesystem error report for type 5 error -117 [ 95.149108][ T6766] EXT4-fs (loop2): Remounting filesystem read-only [ 95.151238][ T6766] EXT4-fs (loop2): 1 truncate cleaned up [ 95.156565][ T6766] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 95.381691][ T6736] fuse: No fuse device found [ 95.667317][ T6775] set_capacity_and_notify: 1 callbacks suppressed [ 95.667355][ T6775] loop0: detected capacity change from 0 to 4096 [ 95.707357][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 95.744213][ T6775] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.757916][ T6775] EXT4-fs (loop0): shut down requested (1) [ 96.674264][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.692722][ T6789] loop6: detected capacity change from 0 to 1024 [ 96.701626][ T6789] EXT4-fs: Ignoring removed nobh option [ 96.716744][ T6789] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 96.716790][ T6789] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 96.716851][ T6789] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 96.716868][ T6789] EXT4-fs (loop6): filesystem has both journal inode and journal device! [ 96.729959][ T6796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.427'. [ 96.748557][ T6789] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 96.750952][ T6789] CPU: 1 UID: 0 PID: 6789 Comm: syz.6.430 Tainted: G L syzkaller #0 PREEMPT [ 96.750973][ T6789] Tainted: [L]=SOFTLOCKUP [ 96.750978][ T6789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 96.750985][ T6789] Call trace: [ 96.750989][ T6789] show_stack+0x2c/0x3c (C) [ 96.751009][ T6789] __dump_stack+0x30/0x40 [ 96.751020][ T6789] dump_stack_lvl+0xd8/0x12c [ 96.751029][ T6789] dump_stack+0x1c/0x28 [ 96.751039][ T6789] sysfs_warn_dup+0x9c/0xb8 [ 96.751049][ T6789] sysfs_create_dir_ns+0x190/0x1f4 [ 96.751058][ T6789] kobject_add_internal+0x28c/0x6e8 [ 96.751067][ T6789] kobject_add_varg+0x98/0xe4 [ 96.751075][ T6789] kobject_add+0x110/0x1cc [ 96.751083][ T6789] device_add+0x390/0x9e4 [ 96.751092][ T6789] device_register+0x28/0x38 [ 96.751099][ T6789] tty_register_device_attr+0x338/0x5f0 [ 96.751110][ T6789] tty_register_device+0x3c/0x50 [ 96.751119][ T6789] gsm_activate_mux+0xd8/0x278 [ 96.751126][ T6789] gsmld_ioctl+0xeb8/0x13ec [ 96.751135][ T6789] tty_ioctl+0x900/0xd4c [ 96.751144][ T6789] __arm64_sys_ioctl+0x14c/0x1c4 [ 96.751154][ T6789] invoke_syscall+0x98/0x244 [ 96.751164][ T6789] el0_svc_common+0xe8/0x23c [ 96.751174][ T6789] do_el0_svc+0x48/0x58 [ 96.751183][ T6789] el0_svc+0x64/0x260 [ 96.751190][ T6789] el0t_64_sync_handler+0x48/0x148 [ 96.751197][ T6789] el0t_64_sync+0x198/0x19c [ 96.864428][ T6789] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 97.241630][ T6816] netlink: 12 bytes leftover after parsing attributes in process `syz.5.435'. [ 97.250378][ T6822] loop2: detected capacity change from 0 to 512 [ 97.254193][ T6822] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.436: corrupted in-inode xattr: invalid ea_ino [ 97.257465][ T6822] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 97.257816][ T6822] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.436: couldn't read orphan inode 15 (err -117) [ 97.262450][ T6822] loop2: lost filesystem error report for type 5 error -117 [ 97.263477][ T6822] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.329714][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.376915][ T6837] loop5: detected capacity change from 0 to 512 [ 97.378732][ T6837] EXT4-fs: Ignoring removed mblk_io_submit option [ 97.381050][ T6837] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 97.396907][ T6837] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 97.397026][ T6837] EXT4-fs (loop5): orphan cleanup on readonly fs [ 97.402762][ T6837] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.438: bg 0: block 361: padding at end of block bitmap is not set [ 97.402802][ T6837] loop5: lost filesystem error report for type 5 error -117 [ 97.403451][ T6837] EXT4-fs (loop5): Remounting filesystem read-only [ 97.403772][ T6837] EXT4-fs (loop5): 1 truncate cleaned up [ 97.404308][ T6837] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 97.457625][ T6844] loop0: detected capacity change from 0 to 4096 [ 97.478926][ T6844] EXT4-fs (loop0): Test dummy encryption mode enabled [ 97.490556][ T6840] loop2: detected capacity change from 0 to 4096 [ 97.575712][ T6844] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.589452][ T6840] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.603069][ T6849] loop6: detected capacity change from 0 to 128 [ 97.617018][ T5133] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 97.683182][ T6853] loop5: detected capacity change from 0 to 512 [ 97.695478][ T6853] EXT4-fs: Ignoring removed mblk_io_submit option [ 97.708416][ T6853] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 97.714693][ T6853] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 97.716626][ T6853] EXT4-fs (loop5): orphan cleanup on readonly fs [ 97.719106][ T6853] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.440: bg 0: block 361: padding at end of block bitmap is not set [ 97.719151][ T6853] loop5: lost filesystem error report for type 5 error -117 [ 97.722183][ T6853] EXT4-fs (loop5): Remounting filesystem read-only [ 97.723715][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 97.723724][ C0] EXT4-fs (loop5): initial error at time 96: ext4_validate_block_bitmap:441 [ 97.723735][ C0] EXT4-fs (loop5): last error at time 96: ext4_validate_block_bitmap:441 [ 97.733320][ T6853] EXT4-fs (loop5): 1 truncate cleaned up [ 97.736540][ T6853] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 97.871682][ T5133] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 99.046237][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.358041][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.442583][ T6880] netlink: 76 bytes leftover after parsing attributes in process `syz.2.447'. [ 99.490242][ T6878] netlink: 48 bytes leftover after parsing attributes in process `syz.0.446'. [ 99.927861][ T6874] Set syz1 is full, maxelem 65536 reached [ 99.999880][ T6890] netlink: 20 bytes leftover after parsing attributes in process `syz.6.451'. [ 100.414282][ T30] audit: type=1326 audit(99.294:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6901 comm="syz.2.453" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0b77aa8 code=0x0 [ 100.555719][ T6913] loop6: detected capacity change from 0 to 512 [ 100.557424][ T6913] EXT4-fs: Ignoring removed mblk_io_submit option [ 100.559402][ T6913] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 100.565992][ T6913] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 100.567951][ T6913] EXT4-fs (loop6): orphan cleanup on readonly fs [ 100.581547][ T6913] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.457: bg 0: block 361: padding at end of block bitmap is not set [ 100.581571][ T6913] loop6: lost filesystem error report for type 5 error -117 [ 100.584848][ T6913] EXT4-fs (loop6): Remounting filesystem read-only [ 100.588578][ T6913] EXT4-fs (loop6): 1 truncate cleaned up [ 100.589063][ T6913] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 100.634610][ T6916] bond1: option arp_missed_max: mode dependency failed, not supported in mode balance-tlb(5) [ 100.697338][ T6916] bond1 (unregistering): Released all slaves [ 100.732287][ T6109] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 100.790985][ T6923] loop6: detected capacity change from 0 to 4096 [ 100.793909][ T6923] EXT4-fs: inline encryption not supported [ 100.800057][ T6923] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 100.800093][ T6923] EXT4-fs (loop6): Test dummy encryption mode enabled [ 100.806053][ T6923] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003] [ 100.806121][ T6923] System zones: 0-5 [ 100.810653][ T6923] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.943754][ T6935] netlink: 'syz.7.462': attribute type 11 has an invalid length. [ 101.029059][ T6945] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 101.202532][ T6967] overlayfs: failed to resolve './file1/file0': -20 [ 101.683785][ T6975] set_capacity_and_notify: 2 callbacks suppressed [ 101.683816][ T6975] loop7: detected capacity change from 0 to 512 [ 101.685840][ T6975] EXT4-fs (loop7): #blocks per group too big: 466944 [ 102.126280][ T6985] loop5: detected capacity change from 0 to 256 [ 102.133894][ T6985] FAT-fs (loop5): Directory bread(block 64) failed [ 102.133928][ T6985] FAT-fs (loop5): Directory bread(block 65) failed [ 102.134238][ T6985] FAT-fs (loop5): Directory bread(block 66) failed [ 102.134393][ T6985] FAT-fs (loop5): Directory bread(block 67) failed [ 102.134573][ T6985] FAT-fs (loop5): Directory bread(block 68) failed [ 102.134595][ T6985] FAT-fs (loop5): Directory bread(block 69) failed [ 102.134631][ T6985] FAT-fs (loop5): Directory bread(block 70) failed [ 102.134650][ T6985] FAT-fs (loop5): Directory bread(block 71) failed [ 102.134683][ T6985] FAT-fs (loop5): Directory bread(block 72) failed [ 102.134700][ T6985] FAT-fs (loop5): Directory bread(block 73) failed [ 102.142186][ T6985] mmap: syz.5.476 (6985) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 102.269593][ T6987] loop6: detected capacity change from 0 to 4096 [ 102.274428][ T6987] EXT4-fs (loop6): Test dummy encryption mode enabled [ 102.829825][ T7000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.836601][ T7000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.850884][ T7003] tmpfs: Bad value for 'mpol' [ 103.629408][ T7030] Soft offlining pfn 0x13729f at process virtual address 0x20ffb000 [ 103.845317][ T7031] syz.7.490 (7031): drop_caches: 2 [ 103.893151][ T7030] Soft offlining pfn 0x11f468 at process virtual address 0x20ffc000 [ 103.895439][ T7030] Soft offlining pfn 0x134ee1 at process virtual address 0x20ffd000 [ 103.969738][ T7040] loop6: detected capacity change from 0 to 512 [ 103.970089][ T7040] EXT4-fs: Ignoring removed nobh option [ 103.977282][ T7038] loop5: detected capacity change from 0 to 2048 [ 103.984679][ T7040] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #3: comm syz.6.494: corrupted inode contents [ 103.984713][ T7040] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 103.985540][ T7040] EXT4-fs error (device loop6): ext4_dirty_inode:6587: inode #3: comm syz.6.494: mark_inode_dirty error [ 103.985565][ T7040] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 103.988820][ T7040] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #3: comm syz.6.494: corrupted inode contents [ 103.988836][ T7040] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 103.989046][ T7040] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #3: comm syz.6.494: mark_inode_dirty error [ 103.989064][ T7040] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 103.989509][ T7040] Quota error (device loop6): write_blk: dquota write failed [ 103.989557][ T7040] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 103.989576][ T7040] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.494: Failed to acquire dquot type 0 [ 103.989587][ T7040] loop6: lost filesystem error report for type 5 error -117 [ 103.990569][ C1] EXT4-fs (loop6): error count since last fsck: 5 [ 103.990580][ C1] EXT4-fs (loop6): initial error at time 102: ext4_do_update_inode:5690: inode 3 [ 103.990595][ C1] EXT4-fs (loop6): last error at time 102: ext4_acquire_dquot:7034 [ 103.993347][ T7040] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.494: corrupted inode contents [ 103.993366][ T7040] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 103.993528][ T7040] EXT4-fs error (device loop6): ext4_dirty_inode:6587: inode #16: comm syz.6.494: mark_inode_dirty error [ 103.993540][ T7040] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 103.993685][ T7040] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.494: corrupted inode contents [ 103.993699][ T7040] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 103.993813][ T7040] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #16: comm syz.6.494: mark_inode_dirty error [ 103.993823][ T7040] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 103.994026][ T7040] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.494: corrupted inode contents [ 103.995284][ T7040] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 103.995459][ T7040] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 103.995470][ T7040] loop6: lost filesystem error report for type 5 error -117 [ 103.995601][ T7040] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.494: corrupted inode contents [ 103.995612][ T7040] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 103.995725][ T7040] EXT4-fs error (device loop6): ext4_truncate:4690: inode #16: comm syz.6.494: mark_inode_dirty error [ 103.995839][ T7040] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 103.995847][ T7040] loop6: lost filesystem error report for type 5 error -117 [ 103.996210][ T7040] EXT4-fs (loop6): 1 truncate cleaned up [ 104.065837][ T7038] EXT4-fs (loop5): shut down requested (2) [ 104.171385][ T7060] loop0: detected capacity change from 0 to 1024 [ 104.718369][ T7105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.718572][ T7105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.733983][ T7107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.508'. [ 104.746526][ T7107] netlink: 28 bytes leftover after parsing attributes in process `syz.2.508'. [ 104.753252][ T7107] bridge1: port 1(veth0_to_bond) entered blocking state [ 104.753301][ T7107] bridge1: port 1(veth0_to_bond) entered disabled state [ 104.753385][ T7107] veth0_to_bond: entered allmulticast mode [ 104.757330][ T7107] veth0_to_bond: entered promiscuous mode [ 104.776489][ T7107] vlan0: entered allmulticast mode [ 104.776513][ T7107] veth1_to_team: entered allmulticast mode [ 104.776620][ T7107] bridge1: port 2(vlan0) entered blocking state [ 104.776847][ T7107] bridge1: port 2(vlan0) entered disabled state [ 104.777415][ T7107] vlan0: entered promiscuous mode [ 104.777431][ T7107] veth1_to_team: entered promiscuous mode [ 104.842015][ T7110] netlink: 48 bytes leftover after parsing attributes in process `syz.5.507'. [ 105.256451][ T7129] binder: tried to use weak ref as strong ref [ 105.256645][ T7130] binder: 7128:7130 Release 1 refcount change on invalid ref 1 ret -22 [ 105.256659][ T7130] binder: 7128:7130 unknown command 0 [ 105.256666][ T7130] binder: 7128:7130 ioctl c0306201 200001c0 returned -22 [ 105.256687][ T7129] binder: 7128:7129 Acquire 1 refcount change on invalid ref 0 ret -22 [ 105.260844][ T7130] loop6: detected capacity change from 0 to 1024 [ 105.264468][ T7130] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 105.267129][ T7130] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 105.269896][ T7130] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 105.272671][ T7130] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #3: comm syz.6.515: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 105.277191][ T7130] EXT4-fs (loop6): no journal found [ 105.277217][ T7130] EXT4-fs (loop6): can't get journal size [ 105.279838][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 105.279848][ C1] EXT4-fs (loop6): initial error at time 103: ext4_ext_check_inode:521: inode 3 [ 105.279867][ C1] EXT4-fs (loop6): last error at time 103: ext4_ext_check_inode:521: inode 3 [ 105.286252][ T7130] EXT4-fs mount: 10 callbacks suppressed [ 105.288939][ T7130] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 105.309499][ T7127] fuse: No fuse device found [ 105.313580][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 105.327199][ T6109] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.408363][ T7139] loop2: detected capacity change from 0 to 1024 [ 105.416524][ T7139] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 105.418667][ T7139] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 105.424620][ T7139] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 105.424795][ T7139] EXT4-fs (loop2): orphan cleanup on readonly fs [ 105.429697][ T7139] EXT4-fs error (device loop2): ext4_read_inode_bitmap:167: comm syz.2.518: Inode bitmap for bg 0 marked uninitialized [ 105.433310][ T7139] loop2: lost filesystem error report for type 5 error -117 [ 105.434937][ T7139] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 105.435244][ T7135] fuse: No fuse device found [ 105.532353][ T7147] netlink: 'syz.6.521': attribute type 1 has an invalid length. [ 105.532633][ T7149] netlink: 'syz.0.522': attribute type 10 has an invalid length. [ 105.537215][ T7149] team0: Failed to send options change via netlink (err -105) [ 105.537255][ T7149] team0: Port device dummy0 added [ 105.538692][ T7149] netlink: 'syz.0.522': attribute type 10 has an invalid length. [ 105.539107][ T7149] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 105.552622][ T7149] team0: Failed to send options change via netlink (err -105) [ 105.552717][ T7149] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 105.552899][ T7149] team0: Port device dummy0 removed [ 105.558740][ T7149] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 105.626383][ T7153] netlink: 28 bytes leftover after parsing attributes in process `syz.6.521'. [ 105.671777][ T7153] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.802439][ T7163] loop5: detected capacity change from 0 to 256 [ 105.810220][ T7155] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (32298!=35945) [ 105.813136][ T7147] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.823390][ T7163] FAT-fs (loop5): Directory bread(block 64) failed [ 105.825876][ T7147] bond1: (slave geneve2): making interface the new active one [ 105.827431][ T7163] FAT-fs (loop5): Directory bread(block 65) failed [ 105.827531][ T7163] FAT-fs (loop5): Directory bread(block 66) failed [ 105.827554][ T7163] FAT-fs (loop5): Directory bread(block 67) failed [ 105.827589][ T7163] FAT-fs (loop5): Directory bread(block 68) failed [ 105.827607][ T7163] FAT-fs (loop5): Directory bread(block 69) failed [ 105.827635][ T7163] FAT-fs (loop5): Directory bread(block 70) failed [ 105.827650][ T7163] FAT-fs (loop5): Directory bread(block 71) failed [ 105.827677][ T7163] FAT-fs (loop5): Directory bread(block 72) failed [ 105.827692][ T7163] FAT-fs (loop5): Directory bread(block 73) failed [ 105.834454][ T7147] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 105.843414][ T4206] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 105.845382][ T4206] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 105.845423][ T4206] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 105.845446][ T4206] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 105.861821][ T4722] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 105.996273][ T7174] fuse: No fuse device found [ 106.003642][ T7187] FAULT_INJECTION: forcing a failure. [ 106.003642][ T7187] name failslab, interval 1, probability 0, space 0, times 0 [ 106.003681][ T7187] CPU: 1 UID: 0 PID: 7187 Comm: syz.5.532 Tainted: G L syzkaller #0 PREEMPT [ 106.003692][ T7187] Tainted: [L]=SOFTLOCKUP [ 106.003695][ T7187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 106.003699][ T7187] Call trace: [ 106.003702][ T7187] show_stack+0x2c/0x3c (C) [ 106.003719][ T7187] __dump_stack+0x30/0x40 [ 106.003729][ T7187] dump_stack_lvl+0xd8/0x12c [ 106.003738][ T7187] dump_stack+0x1c/0x28 [ 106.003748][ T7187] should_fail_ex+0x414/0x588 [ 106.003757][ T7187] should_failslab+0xc4/0x124 [ 106.003766][ T7187] __kmalloc_noprof+0x100/0x6f0 [ 106.003774][ T7187] io_cache_alloc_new+0x58/0x114 [ 106.003783][ T7187] io_uring_cmd_prep+0x348/0x518 [ 106.003793][ T7187] io_submit_sqes+0x8a8/0x1e48 [ 106.003801][ T7187] __arm64_sys_io_uring_enter+0x290/0x1674 [ 106.003808][ T7187] invoke_syscall+0x98/0x244 [ 106.003817][ T7187] el0_svc_common+0xe8/0x23c [ 106.003827][ T7187] do_el0_svc+0x48/0x58 [ 106.003836][ T7187] el0_svc+0x64/0x260 [ 106.003844][ T7187] el0t_64_sync_handler+0x48/0x148 [ 106.003851][ T7187] el0t_64_sync+0x198/0x19c [ 106.100376][ T7193] loop7: detected capacity change from 0 to 2048 [ 106.104667][ T7193] ext4: Unknown parameter 'nouser_xattr' [ 106.217036][ T7202] netlink: 'syz.0.537': attribute type 3 has an invalid length. [ 106.217148][ T7202] netlink: 'syz.0.537': attribute type 3 has an invalid length. [ 106.338183][ T7212] FAT-fs (loop5): Directory bread(block 64) failed [ 106.351046][ T7212] FAT-fs (loop5): Directory bread(block 65) failed [ 106.354732][ T7212] FAT-fs (loop5): Directory bread(block 66) failed [ 106.355834][ T7212] FAT-fs (loop5): Directory bread(block 67) failed [ 106.355871][ T7212] FAT-fs (loop5): Directory bread(block 68) failed [ 106.355887][ T7212] FAT-fs (loop5): Directory bread(block 69) failed [ 106.355914][ T7212] FAT-fs (loop5): Directory bread(block 70) failed [ 106.355928][ T7212] FAT-fs (loop5): Directory bread(block 71) failed [ 106.355954][ T7212] FAT-fs (loop5): Directory bread(block 72) failed [ 106.355968][ T7212] FAT-fs (loop5): Directory bread(block 73) failed [ 106.373217][ T4722] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 106.439458][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.497278][ T7219] bridge_slave_0: left allmulticast mode [ 106.497309][ T7219] bridge_slave_0: left promiscuous mode [ 106.497397][ T7219] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.537137][ T7219] bridge_slave_1: left allmulticast mode [ 106.538484][ T7219] bridge_slave_1: left promiscuous mode [ 106.538649][ T7219] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.582727][ T7215] EXT4-fs: Ignoring removed nomblk_io_submit option [ 106.586718][ T7215] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8843e02c, mo2=0002] [ 106.586970][ T7215] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.542: invalid indirect mapped block 2683928664 (level 1) [ 106.589001][ T7215] EXT4-fs (loop5): Remounting filesystem read-only [ 106.589192][ T7215] EXT4-fs (loop5): 1 truncate cleaned up [ 106.589641][ T7215] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.599932][ T7219] veth0_to_bond: left allmulticast mode [ 106.599961][ T7219] veth0_to_bond: left promiscuous mode [ 106.600029][ T7219] bridge1: port 1(veth0_to_bond) entered disabled state [ 106.623510][ T5133] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.677473][ T7219] bond0: (slave bond_slave_0): Releasing backup interface [ 106.776734][ T7219] bond0: (slave bond_slave_1): Releasing backup interface [ 106.862560][ T7219] team0: Port device team_slave_0 removed [ 106.896157][ T7219] team0: Port device team_slave_1 removed [ 106.896476][ T7219] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.896487][ T7219] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.937315][ T7219] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.937342][ T7219] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.982525][ T7219] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 106.997136][ T7227] bond1: option resend_igmp: invalid value (4099) [ 106.997166][ T7227] bond1: option resend_igmp: allowed values 0 - 255 [ 107.078427][ T7227] bond1 (unregistering): Released all slaves [ 107.404478][ T7241] netlink: 24 bytes leftover after parsing attributes in process `syz.0.550'. [ 107.413421][ T7243] set_capacity_and_notify: 3 callbacks suppressed [ 107.413447][ T7243] loop5: detected capacity change from 0 to 2048 [ 107.431418][ T7243] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.501837][ T7243] loop8: detected capacity change from 0 to 7 [ 107.506371][ T7247] fuse: No fuse device found [ 107.537835][ T7251] loop0: detected capacity change from 0 to 256 [ 107.544525][ T7251] FAT-fs (loop0): Directory bread(block 64) failed [ 107.544562][ T7251] FAT-fs (loop0): Directory bread(block 65) failed [ 107.544589][ T7251] FAT-fs (loop0): Directory bread(block 66) failed [ 107.544601][ T7251] FAT-fs (loop0): Directory bread(block 67) failed [ 107.544623][ T7251] FAT-fs (loop0): Directory bread(block 68) failed [ 107.544634][ T7251] FAT-fs (loop0): Directory bread(block 69) failed [ 107.544655][ T7251] FAT-fs (loop0): Directory bread(block 70) failed [ 107.544666][ T7251] FAT-fs (loop0): Directory bread(block 71) failed [ 107.544687][ T7251] FAT-fs (loop0): Directory bread(block 72) failed [ 107.544697][ T7251] FAT-fs (loop0): Directory bread(block 73) failed [ 107.554989][ T4722] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 107.688034][ T7269] loop0: detected capacity change from 0 to 512 [ 107.688103][ T7267] binder: 7266:7267 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 107.688118][ T7267] binder: 7267 RLIMIT_NICE not set [ 107.690359][ T7269] EXT4-fs: Ignoring removed mblk_io_submit option [ 107.691635][ T7269] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 107.703315][ T7269] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e02c, mo2=0002] [ 107.703365][ T7269] System zones: 1-12 [ 107.703462][ T7269] EXT4-fs (loop0): orphan cleanup on readonly fs [ 107.703623][ T7269] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.558: bg 0: block 361: padding at end of block bitmap is not set [ 107.703635][ T7269] loop0: lost filesystem error report for type 5 error -117 [ 107.705390][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 107.705403][ C1] EXT4-fs (loop0): initial error at time 106: ext4_validate_block_bitmap:441 [ 107.705419][ C1] EXT4-fs (loop0): last error at time 106: ext4_validate_block_bitmap:441 [ 107.707609][ T7269] EXT4-fs (loop0): Remounting filesystem read-only [ 107.708079][ T7269] EXT4-fs (loop0): 1 truncate cleaned up [ 107.708544][ T7269] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 107.750205][ T7271] binder: 7266:7271 ioctl 3ba0 200004c0 returned -22 [ 107.896697][ T7276] ieee802154 phy0 wpan0: encryption failed: -90 [ 108.325534][ T4724] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 108.326988][ T4724] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 108.328162][ T4724] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 108.330823][ T4724] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 108.332672][ T4724] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 108.390964][ T40] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.449634][ T7295] overlayfs: failed to get inode (-116) [ 108.449883][ T7295] overlayfs: failed to get inode (-116) [ 108.454876][ T7310] loop6: detected capacity change from 0 to 1024 [ 108.457514][ T7310] EXT4-fs: Ignoring removed bh option [ 108.457562][ T7310] EXT4-fs: Ignoring removed nomblk_io_submit option [ 108.468779][ T7310] EXT4-fs (loop6): Test dummy encryption mode enabled [ 108.471719][ T7310] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.486462][ T7310] VFS: Lookup of 'file0' in ext4 loop6 would have caused loop [ 108.560405][ T7318] netlink: 12 bytes leftover after parsing attributes in process `syz.6.569'. [ 108.616635][ T40] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.627207][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 108.683799][ T7325] loop0: detected capacity change from 0 to 512 [ 108.684122][ T7325] EXT4-fs: Ignoring removed nomblk_io_submit option [ 108.687046][ T7325] EXT4-fs: journaled quota format not specified [ 108.714806][ T7317] vlan0 (unregistering): left promiscuous mode [ 108.714835][ T7317] veth1_to_team: left promiscuous mode [ 108.715831][ T7317] bridge1: port 2(vlan0) entered disabled state [ 108.827672][ T7318] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.878617][ T7338] loop2: detected capacity change from 0 to 256 [ 108.909495][ T7310] bond2: entered promiscuous mode [ 108.909544][ T7310] bond2: entered allmulticast mode [ 108.910710][ T7310] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.911560][ T7310] team0: Port device bond2 added [ 108.919957][ T7323] bond2: (slave vcan1): refused to change device type [ 108.983483][ T7339] tap0: tun_chr_ioctl cmd 1074025677 [ 108.984831][ T7339] tap0: linktype set to 802 [ 110.002864][ T6109] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.240749][ T40] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.248095][ T7369] loop7: detected capacity change from 0 to 512 [ 110.254306][ T7369] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.271127][ T7369] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043e01c, mo2=0002] [ 110.272814][ T7369] System zones: 1-12 [ 110.276050][ T7369] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 33261: comm syz.7.583: invalid block [ 110.278308][ T7369] fserror_report: 3 callbacks suppressed [ 110.279820][ T7369] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 110.280385][ T7369] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.583: invalid indirect mapped block 8 (level 2) [ 110.284778][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 110.284791][ C0] EXT4-fs (loop7): initial error at time 108: ext4_get_branch:178: inode 11: block 33261 [ 110.284816][ C0] EXT4-fs (loop7): last error at time 108: ext4_get_branch:178: inode 11: block 33261 [ 110.290039][ T7369] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 110.290919][ T7369] EXT4-fs (loop7): 1 truncate cleaned up [ 110.297980][ T7369] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.300648][ T7351] vlan1: entered allmulticast mode [ 110.302068][ T7351] veth0_vlan: entered allmulticast mode [ 110.339379][ T7354] bridge0: entered allmulticast mode [ 110.340744][ T7354] team0: Port device bridge0 added [ 110.410035][ T7374] loop6: detected capacity change from 0 to 1024 [ 110.410663][ T7374] EXT4-fs (loop6): unsupported inode size: 4096 [ 110.410672][ T7374] EXT4-fs (loop6): blocksize: 1024 [ 110.484305][ T7375] input: syz0 as /devices/virtual/input/input5 [ 110.535853][ T7376] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #2: block 5: comm syz.7.583: lblock 0 mapped to illegal pblock 5 (length 1) [ 110.538368][ T7376] EXT4-fs warning (device loop7): ext4_empty_dir:3085: inode #2: lblock 0: comm syz.7.583: error -117 reading directory block [ 110.543657][ T4722] Bluetooth: hci2: command tx timeout [ 110.684367][ T7378] loop6: detected capacity change from 0 to 512 [ 110.690611][ T7378] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.585: iget: bad i_size value: 38620345925642 [ 110.693306][ T7378] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 110.693616][ T7378] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.585: couldn't read orphan inode 15 (err -117) [ 110.695467][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 110.695479][ C1] EXT4-fs (loop6): initial error at time 108: ext4_orphan_get:1397: inode 15 [ 110.695496][ C1] EXT4-fs (loop6): last error at time 108: ext4_orphan_get:1397: inode 15 [ 110.699284][ T7378] loop6: lost filesystem error report for type 5 error -117 [ 110.705141][ T7378] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.056486][ T7385] EXT4-fs (loop2): Test dummy encryption mode enabled [ 111.066589][ T40] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.073014][ T7385] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.119438][ T7388] EXT4-fs: Ignoring removed nobh option [ 111.121066][ T7388] ext4: Unknown parameter 'fsmagic' [ 111.227885][ T6300] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.268628][ T7293] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.268669][ T7293] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.268775][ T7293] bridge_slave_0: entered allmulticast mode [ 111.274922][ T7293] bridge_slave_0: entered promiscuous mode [ 111.277168][ T7293] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.278596][ T7293] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.278684][ T7293] bridge_slave_1: entered allmulticast mode [ 111.279113][ T7293] bridge_slave_1: entered promiscuous mode [ 111.295661][ T7405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.590'. [ 111.325434][ T7404] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.328254][ T7404] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 111.330553][ T7404] EXT4-fs error (device loop7) in ext4_setattr:6120: error 28 [ 111.336431][ T7404] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 1 with error 28 [ 111.336459][ T7404] EXT4-fs (loop7): This should not happen!! Data will be lost [ 111.336459][ T7404] [ 111.336479][ T7404] EXT4-fs (loop7): Total free blocks count 0 [ 111.336492][ T7404] EXT4-fs (loop7): Free/Dirty block details [ 111.336506][ T7404] EXT4-fs (loop7): free_blocks=2415919504 [ 111.336520][ T7404] EXT4-fs (loop7): dirty_blocks=32 [ 111.336531][ T7404] EXT4-fs (loop7): Block reservation details [ 111.336546][ T7404] EXT4-fs (loop7): i_reserved_data_blocks=2 [ 111.339020][ T7404] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 111.353288][ T7405] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.353525][ T7405] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.358025][ T6300] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 111.380843][ T7410] netlink: 'syz.7.592': attribute type 21 has an invalid length. [ 111.518880][ T7413] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 111.518922][ T7413] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 111.523348][ T7413] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 111.523798][ T7413] System zones: 0-2, 18-18, 34-34 [ 111.525410][ T7413] EXT4-fs (loop0): 1 truncate cleaned up [ 111.530280][ T7413] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.533565][ T7413] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #12: block 13: comm syz.0.593: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=4096 fake=0 [ 111.648096][ T40] bridge_slave_1: left allmulticast mode [ 111.649249][ T40] bridge_slave_1: left promiscuous mode [ 111.650665][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.681951][ T6109] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.699217][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.724155][ T40] bridge_slave_0: left allmulticast mode [ 111.724181][ T40] bridge_slave_0: left promiscuous mode [ 111.726668][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.178926][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.256172][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.277076][ T40] bond0 (unregistering): Released all slaves [ 112.300448][ T7293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.301601][ T7293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.306360][ T7410] netlink: 152 bytes leftover after parsing attributes in process `syz.7.592'. [ 112.341378][ T7421] bridge_slave_0: entered promiscuous mode [ 112.346477][ T7293] team0: Port device team_slave_0 added [ 112.348473][ T7293] team0: Port device team_slave_1 added [ 112.361438][ T7293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.365925][ T7293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.368790][ T7293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.369437][ T7293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.369445][ T7293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.369460][ T7293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.387477][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.406082][ T7293] hsr_slave_0: entered promiscuous mode [ 112.407454][ T7293] hsr_slave_1: entered promiscuous mode [ 112.409298][ T7293] debugfs: 'hsr0' already exists in 'hsr' [ 112.409310][ T7293] Cannot create hsr debugfs directory [ 112.774679][ T4722] Bluetooth: hci2: command tx timeout [ 112.841199][ T7449] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 112.856517][ T7449] EXT4-fs (loop6): orphan file too big: 8388608 [ 112.856782][ T7449] EXT4-fs (loop6): mount failed [ 113.112801][ T7462] set_capacity_and_notify: 6 callbacks suppressed [ 113.112841][ T7462] loop2: detected capacity change from 0 to 512 [ 113.113195][ T7462] EXT4-fs: Ignoring removed mblk_io_submit option [ 113.114271][ T7462] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 113.130638][ T7462] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 113.130762][ T7462] EXT4-fs (loop2): orphan cleanup on readonly fs [ 113.131065][ T7462] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.603: bg 0: block 361: padding at end of block bitmap is not set [ 113.131078][ T7462] loop2: lost filesystem error report for type 5 error -117 [ 113.131228][ T7462] EXT4-fs (loop2): Remounting filesystem read-only [ 113.131524][ T7462] EXT4-fs (loop2): 1 truncate cleaned up [ 113.132097][ T7462] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 113.231014][ T4398] 8021q: adding VLAN 0 to HW filter on device eth8 [ 113.252843][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 113.331568][ T7475] loop6: detected capacity change from 0 to 1024 [ 113.331946][ T7475] EXT4-fs: Ignoring removed bh option [ 113.332376][ T7475] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 113.387044][ T7475] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.440208][ T7475] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 113.472442][ T4797] IPVS: starting estimator thread 0... [ 113.474300][ T7491] IPVS: ip_vs_edit_dest(): server weight less than zero [ 113.503456][ T6109] EXT4-fs error (device loop6): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /59/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 113.514746][ T6109] EXT4-fs (loop6): Remounting filesystem read-only [ 113.545292][ T6109] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.577233][ T7500] loop7: detected capacity change from 0 to 512 [ 113.587200][ T7492] IPVS: using max 63 ests per chain, 151200 per kthread [ 113.589556][ T7509] loop2: detected capacity change from 0 to 512 [ 113.589880][ T7509] EXT4-fs: Ignoring removed mblk_io_submit option [ 113.593318][ T7509] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 113.593926][ T7509] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 113.594006][ T7509] EXT4-fs (loop2): orphan cleanup on readonly fs [ 113.594276][ T7509] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.615: bg 0: block 361: padding at end of block bitmap is not set [ 113.594289][ T7509] loop2: lost filesystem error report for type 5 error -117 [ 113.594422][ T7509] EXT4-fs (loop2): Remounting filesystem read-only [ 113.594643][ T7509] EXT4-fs (loop2): 1 truncate cleaned up [ 113.595082][ T7509] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 113.664117][ T7500] EXT4-fs: Ignoring removed oldalloc option [ 113.676730][ T7500] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: comm syz.7.612: Parent and EA inode have the same ino 15 [ 113.676764][ T7500] loop7: lost filesystem error report for type 5 error -117 [ 113.695091][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 113.695122][ C0] EXT4-fs (loop7): initial error at time 111: ext4_xattr_inode_iget:437 [ 113.695149][ C0] EXT4-fs (loop7): last error at time 111: ext4_xattr_inode_iget:437 [ 113.707698][ T7500] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: comm syz.7.612: Parent and EA inode have the same ino 15 [ 113.709814][ T7500] loop7: lost filesystem error report for type 5 error -117 [ 113.712671][ T7500] EXT4-fs (loop7): 1 orphan inode deleted [ 113.715400][ T7500] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.758427][ T7500] EXT4-fs error (device loop7): ext4_lookup:1789: inode #2: comm syz.7.612: deleted inode referenced: 15 [ 113.762630][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 113.849041][ T7293] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 113.924757][ T7293] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 113.928651][ T7293] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 114.022533][ T6300] EXT4-fs error (device loop7): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 114.037516][ T6300] EXT4-fs error (device loop7): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 15 [ 114.042742][ T7293] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 114.046696][ T6300] EXT4-fs error (device loop7): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 15 [ 114.049444][ T7293] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 114.096914][ T7293] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 114.101996][ T7293] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 114.151404][ T7293] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 114.640937][ T40] hsr_slave_0: left promiscuous mode [ 114.681053][ T40] hsr_slave_1: left promiscuous mode [ 114.681427][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.681451][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.702941][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.702966][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.711562][ C0] vcan0: j1939_tp_rxtimer: 0x000000005d6c51f0: rx timeout, send abort [ 114.718979][ T7556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.624'. [ 114.750963][ T7559] loop2: detected capacity change from 0 to 512 [ 114.753233][ T7559] EXT4-fs: Ignoring removed mblk_io_submit option [ 114.755062][ T7559] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 114.757515][ T40] veth1_macvtap: left promiscuous mode [ 114.757568][ T40] veth0_macvtap: left promiscuous mode [ 114.757615][ T40] veth1_vlan: left promiscuous mode [ 114.757645][ T40] veth0_vlan: left promiscuous mode [ 114.762500][ T7559] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 114.762607][ T7559] EXT4-fs (loop2): orphan cleanup on readonly fs [ 114.762769][ T7559] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.625: bg 0: block 361: padding at end of block bitmap is not set [ 114.762787][ T7559] loop2: lost filesystem error report for type 5 error -117 [ 114.768485][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 114.768500][ C0] EXT4-fs (loop2): initial error at time 112: ext4_validate_block_bitmap:441 [ 114.768513][ C0] EXT4-fs (loop2): last error at time 112: ext4_validate_block_bitmap:441 [ 114.777058][ T7559] EXT4-fs (loop2): Remounting filesystem read-only [ 114.779084][ T7559] EXT4-fs (loop2): 1 truncate cleaned up [ 114.782336][ T7559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 114.909170][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 115.015796][ T4206] smc: removing ib device syz2 [ 115.027578][ T4722] Bluetooth: hci2: command tx timeout [ 115.168484][ T40] team0 (unregistering): Port device team_slave_1 removed [ 115.184737][ T40] team0 (unregistering): Port device team_slave_0 removed [ 115.253198][ C0] vcan0: j1939_tp_rxtimer: 0x000000005d6c51f0: abort rx timeout. Force session deactivation [ 115.254210][ C0] vcan0: j1939_tp_rxtimer: 0x0000000001e16826: rx timeout, send abort [ 115.256585][ T4398] 8021q: adding VLAN 0 to HW filter on device eth9 [ 115.453810][ T4797] ================================================================== [ 115.453824][ T4797] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x60/0x174 [ 115.453849][ T4797] Read of size 8 at addr ffff0000dcdb42f0 by task kworker/0:3/4797 [ 115.453856][ T4797] [ 115.453863][ T4797] CPU: 0 UID: 0 PID: 4797 Comm: kworker/0:3 Tainted: G L syzkaller #0 PREEMPT [ 115.453873][ T4797] Tainted: [L]=SOFTLOCKUP [ 115.453876][ T4797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 115.453881][ T4797] Workqueue: events smc_ib_port_event_work [ 115.453896][ T4797] Call trace: [ 115.453899][ T4797] show_stack+0x2c/0x3c (C) [ 115.453912][ T4797] __dump_stack+0x30/0x40 [ 115.453923][ T4797] dump_stack_lvl+0xd8/0x12c [ 115.453932][ T4797] print_address_description+0xb0/0x238 [ 115.453941][ T4797] print_report+0x68/0x84 [ 115.453947][ T4797] kasan_report+0x8c/0xc4 [ 115.453958][ T4797] __asan_report_load8_noabort+0x20/0x2c [ 115.453968][ T4797] __ethtool_get_link_ksettings+0x60/0x174 [ 115.453977][ T4797] ipvlan_ethtool_get_link_ksettings+0x48/0x58 [ 115.453988][ T4797] __ethtool_get_link_ksettings+0x118/0x174 [ 115.453996][ T4797] ib_get_eth_speed+0x154/0x6b0 [ 115.454004][ T4797] rxe_query_port+0x98/0x36c [ 115.454015][ T4797] ib_query_port+0x168/0x770 [ 115.454024][ T4797] smc_ib_port_event_work+0x104/0x8ac [ 115.454033][ T4797] process_scheduled_works+0x79c/0x1098 [ 115.454043][ T4797] worker_thread+0x754/0xba0 [ 115.454051][ T4797] kthread+0x2f8/0x3c8 [ 115.454058][ T4797] ret_from_fork+0x10/0x20 [ 115.454066][ T4797] [ 115.454067][ T4797] Allocated by task 5133: [ 115.454071][ T4797] kasan_save_track+0x40/0x78 [ 115.454079][ T4797] kasan_save_alloc_info+0x44/0x54 [ 115.454087][ T4797] __kasan_kmalloc+0x9c/0xb4 [ 115.454094][ T4797] __kvmalloc_node_noprof+0x3d8/0x880 [ 115.454102][ T4797] alloc_netdev_mqs+0xac/0xe60 [ 115.454110][ T4797] rtnl_create_link+0x2c8/0xb94 [ 115.454117][ T4797] rtnl_newlink_create+0x210/0x768 [ 115.454125][ T4797] rtnl_newlink+0xdc4/0x113c [ 115.454132][ T4797] rtnetlink_rcv_msg+0x66c/0x9c8 [ 115.454139][ T4797] netlink_rcv_skb+0x22c/0x410 [ 115.454148][ T4797] rtnetlink_rcv+0x28/0x38 [ 115.454155][ T4797] netlink_unicast+0x610/0x800 [ 115.454163][ T4797] netlink_sendmsg+0x63c/0x920 [ 115.454171][ T4797] __sock_sendmsg+0xc8/0x138 [ 115.454179][ T4797] __sys_sendto+0x254/0x338 [ 115.454187][ T4797] __arm64_sys_sendto+0xd8/0xf8 [ 115.454196][ T4797] invoke_syscall+0x98/0x244 [ 115.454205][ T4797] el0_svc_common+0xe8/0x23c [ 115.454213][ T4797] do_el0_svc+0x48/0x58 [ 115.454221][ T4797] el0_svc+0x64/0x260 [ 115.454227][ T4797] el0t_64_sync_handler+0x48/0x148 [ 115.454232][ T4797] el0t_64_sync+0x198/0x19c [ 115.454238][ T4797] [ 115.454240][ T4797] Freed by task 40: [ 115.454243][ T4797] kasan_save_track+0x40/0x78 [ 115.454250][ T4797] kasan_save_free_info+0x58/0x70 [ 115.454258][ T4797] __kasan_slab_free+0x74/0xa4 [ 115.454265][ T4797] kfree+0x188/0x690 [ 115.454271][ T4797] kvfree+0x30/0x40 [ 115.454278][ T4797] netdev_release+0x88/0xb0 [ 115.454284][ T4797] device_release+0xa8/0x1c8 [ 115.454292][ T4797] kobject_put+0x1dc/0x4bc [ 115.454299][ T4797] netdev_run_todo+0xab4/0xc48 [ 115.454305][ T4797] rtnl_unlock+0x14/0x20 [ 115.454311][ T4797] default_device_exit_batch+0x584/0x600 [ 115.454319][ T4797] ops_undo_list+0x428/0x818 [ 115.454324][ T4797] cleanup_net+0x470/0x6b8 [ 115.454329][ T4797] process_scheduled_works+0x79c/0x1098 [ 115.454336][ T4797] worker_thread+0x754/0xba0 [ 115.454342][ T4797] kthread+0x2f8/0x3c8 [ 115.454348][ T4797] ret_from_fork+0x10/0x20 [ 115.454353][ T4797] [ 115.454355][ T4797] The buggy address belongs to the object at ffff0000dcdb4000 [ 115.454355][ T4797] which belongs to the cache kmalloc-cg-4k of size 4096 [ 115.454361][ T4797] The buggy address is located 752 bytes inside of [ 115.454361][ T4797] freed 4096-byte region [ffff0000dcdb4000, ffff0000dcdb5000) [ 115.454368][ T4797] [ 115.454369][ T4797] The buggy address belongs to the physical page: [ 115.454374][ T4797] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11cdb0 [ 115.454380][ T4797] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 115.454385][ T4797] memcg:ffff0000dcdb1011 [ 115.454388][ T4797] flags: 0x5ffc00000000040(head|node=0|zone=2|lastcpupid=0x7ff) [ 115.454396][ T4797] page_type: f5(slab) [ 115.454403][ T4797] raw: 05ffc00000000040 ffff0000c001d500 dead000000000100 dead000000000122 [ 115.454409][ T4797] raw: 0000000000000000 0000200000040004 00000000f5000000 ffff0000dcdb1011 [ 115.454414][ T4797] head: 05ffc00000000040 ffff0000c001d500 dead000000000100 dead000000000122 [ 115.454420][ T4797] head: 0000000000000000 0000200000040004 00000000f5000000 ffff0000dcdb1011 [ 115.454425][ T4797] head: 05ffc00000000003 fffffdffc3736c01 00000000ffffffff 00000000ffffffff [ 115.454431][ T4797] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 115.454434][ T4797] page dumped because: kasan: bad access detected [ 115.454437][ T4797] [ 115.454438][ T4797] Memory state around the buggy address: [ 115.454442][ T4797] ffff0000dcdb4180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 115.454446][ T4797] ffff0000dcdb4200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 115.454451][ T4797] >ffff0000dcdb4280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 115.454454][ T4797] ^ [ 115.454458][ T4797] ffff0000dcdb4300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 115.454462][ T4797] ffff0000dcdb4380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 115.454465][ T4797] ================================================================== [ 115.454484][ T4797] Disabling lock debugging due to kernel taint [ 115.481897][ T7293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.486987][ T7293] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.494609][ T7293] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 115.494622][ T7293] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 115.499676][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.499698][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.500579][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.500600][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.566389][ T6300] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.795843][ C0] vcan0: j1939_tp_rxtimer: 0x0000000001e16826: abort rx timeout. Force session deactivation [ 115.840533][ T7293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.008837][ T7293] veth0_vlan: entered promiscuous mode [ 116.019632][ T7293] veth1_vlan: entered promiscuous mode [ 116.036138][ T7293] veth0_macvtap: entered promiscuous mode [ 116.037545][ T7293] veth1_macvtap: entered promiscuous mode [ 116.040248][ T7293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.053921][ T4398] 8021q: adding VLAN 0 to HW filter on device eth11 [ 116.060057][ T7293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.068880][ T4206] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.068917][ T4206] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.068934][ T4206] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.068949][ T4206] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.146218][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.146243][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.165050][ T4206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.165074][ T4206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.168452][ T4398] 8021q: adding VLAN 0 to HW filter on device eth10 [ 116.198937][ T7293] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.654357][ C0] vcan0: j1939_tp_rxtimer: 0x00000000ccf5703e: rx timeout, send abort [ 116.654459][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000ccf5703e: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 117.280547][ T4722] Bluetooth: hci2: command tx timeout