last executing test programs: 56.293749507s ago: executing program 3 (id=4): openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x32403, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x14}, 0x94) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x33, &(0x7f0000000100)=0x9, 0x4) mmap(&(0x7f0000001000/0xb000)=nil, 0xb000, 0x2, 0x12, r6, 0x852ac000) sendto$inet6(r6, 0x0, 0x0, 0x4801, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x1d, &(0x7f00000001c0)=0xffff, 0x4) setsockopt$inet6_int(r6, 0x29, 0xb, &(0x7f0000000080)=0x9, 0x4) recvmmsg(r6, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x100e}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2}}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x12, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee4}, 0x94) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x2, 0x4, 0x704d, 0x1, 0x5, 0x1, 0x2, 0x7db, 0x6, 0xfffffc01, 0xfffffffb, 0x8, 0x1, 0x100, 0xfe, 0x48, 0x7, 0x5, 0x1002ca, 0x5, 0x76, 0x8, 0x0, 0x81, 0x40, 0x19b1, 0x8000, 0x7, 0x7fff, 0x4000000, 0x7, 0x60, 0xe, 0x7, 0x1, 0x2001, 0x7, 0xf, 0x7, 0x10001, 0x9, 0x5, 0x8, 0x6, 0xb, 0x5, 0x6, 0x40, 0x7f, 0x9, 0x1, 0x6, 0x3, 0x2284919, 0x5, 0x5643fa73, 0xfffeffff, 0x6, 0x800, 0x2, 0x8a, 0x6, 0xfffffffd, 0x6], [0xffffffd2, 0x80000001, 0xfffc, 0x8, 0xe62, 0x80003, 0x0, 0x9, 0xc33, 0x3, 0x7, 0x804, 0x6c368000, 0x4, 0x7, 0x0, 0xe, 0x5, 0x8, 0x8001, 0x3, 0x7fff, 0x7, 0x0, 0x484d, 0x4, 0x7, 0x8, 0x40, 0xc0f, 0x80000001, 0x3, 0x5, 0x1, 0x7, 0x8, 0x6, 0x7, 0x4, 0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x11e, 0x100, 0x4, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x0, 0x1, 0x6, 0x6, 0x0, 0x6, 0x8, 0x6, 0x6, 0x68], [0x3, 0x1, 0x4, 0xfffffffc, 0x2, 0x7fff, 0x401, 0xfffffff7, 0x2, 0x1000, 0x7, 0x4, 0xd, 0x7, 0x6, 0xeee5, 0x5, 0x4, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0x2, 0xfffffffd, 0x8000, 0x5, 0x1ff, 0x7ff, 0xd, 0x400, 0xf, 0x41, 0x2c000, 0xc99, 0x25a, 0x2, 0x0, 0x2, 0x5d9fffa, 0x3ff, 0xff, 0x40, 0x8, 0x10000, 0xe7, 0x200, 0x7af5, 0x2, 0xf, 0x0, 0xfffd, 0x7, 0x6, 0x2, 0x81, 0x800, 0x2, 0x7, 0x100, 0x8, 0x0, 0x6, 0x1], [0xffffff80, 0xd5800000, 0x0, 0x4, 0x2, 0x62e, 0x4, 0x8, 0x2, 0x5, 0x8, 0x8, 0x8000, 0x8, 0xffffff81, 0x80000900, 0x5, 0x3, 0x200, 0xfff, 0x3, 0x1, 0x3c62, 0x7, 0x6, 0xe6, 0xffffffff, 0x1, 0x2, 0x7, 0x1, 0x7, 0x7, 0x8, 0x400001, 0x0, 0x9, 0x17ce, 0x0, 0x3, 0x2, 0xe, 0x7, 0x13a, 0x7, 0x0, 0xb756, 0x2, 0xb9, 0x4, 0x50, 0x8c1, 0x5, 0x1, 0x4, 0xf, 0x100, 0x400, 0x9, 0x6, 0xff, 0x1, 0xc, 0x2]}, 0x45c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$XFS_IOC_BULKSTAT(r4, 0x8040587f, &(0x7f0000000d40)={{0x7, 0x2, 0x0, 0x9, 0xd95}, &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}, {}, {}]}) socket$inet6_tcp(0xa, 0x1, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000540)=""/154, 0x9a}], 0x1, 0x2, 0x1) 55.416810932s ago: executing program 3 (id=25): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') writev(r0, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000001080)={0x1, 0x7, 0x0, 0x0, 0x10000}) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000c044) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x181441, 0x148) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x2002, 0x49) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', &(0x7f0000000200)=@ocfs2_parent={0x18, 0x2, {{0x5, 0xffffffff, 0x7}, {0x0, 0x5, 0x3486}}}, &(0x7f0000000180), 0x400) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x0, &(0x7f0000002680)) 55.223524911s ago: executing program 3 (id=31): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x50, r2, 0x1, 0x70bd2f, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, r2, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_hsr\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffff}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}]}, 0x74}}, 0x24040010) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x14445, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@sysvgroups}, {@data_journal}, {@usrjquota}, {@init_itable_val={'init_itable', 0x3d, 0x22}}]}, 0x3, 0x43b, &(0x7f0000000200)="$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") (async) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x14445, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@sysvgroups}, {@data_journal}, {@usrjquota}, {@init_itable_val={'init_itable', 0x3d, 0x22}}]}, 0x3, 0x43b, &(0x7f0000000200)="$eJzs3MtvG0UYAPBv7SSlL2Kq8ugDCBRExSNp0lJ64FIEEgeQkOBQjiFJq1C3QU2QaBVBQKgcUSXuiCMSfwEnuCDghMQV7qhShXJp6clo7V3Hcew83CQO+PeTNpnZndXM592xZ2fiBNCzhtIfScS+iPgjIgZr2eUFhmq/7izOT/yzOD+RRKXy9t9JtdztxfmJvGh+3t48U4oofJ7EkRb1zl69dnG8XJ66kuVH5i59MDJ79doL05fGL0xdmLo8dubMqZOjL50ee3FT4kzjun3445mjh15/98abE+duvPfLd0kef1McG1Joe2RotdOerlQ6qm6n2t+QTvqWkmucVmn/8rEdihGRXq7+av8fjGIsXbzBeO2zrjYO2FIDqx9eqAD/Y+loHuhF+Qd9+vybb9sw7Ngxbp2N+jzGnWyrHemrP9r3Nz3fbqahiDi3cPfrdIt7mYcAAFinH85GxPOtxn+FeKih3P3ZGkopIh6IiAMRcToiDkbEgxHVsg9HxCMbrL95kWTl+Kdws6PA1ikd/72crW0tH//VVyZKxSy3vxp/f3J+ujx1IntNjkf/rjQ/ukodP776+5ftjjWO/9ItrT8fC2btuNm3a/k5k+Nz4/cSc6Nbn0Yc7msVf1JfCUjHx4ci4nCHdUw/++3RdsfWjn9rVb6JeKZ2/ReiKf5csvr65Mh9UZ46MZLfFSv9+tv1t9rV3+340+u/p+X9X4+/lDSu185uvI7rf37R9pmm0/t/IHln2b6PxufmroxGDCRv1BrduH+sqdzYUvk0/uPHWvf/A7H0ShyJiPQmfjQiHouIx7O2PxERT0bEsVXi//mVp97vPP6tlcY/GRF3s/mAta//UmIgmve0ThQv/vT9skpLG4k/vf6nqqnj2Z71vP+tp12d3c0AAADw31OIiH2RFIbr6UJheLj2N/wHY0+hPDM799z5mQ8vT9a+I1CK/kI+0zXYMB86mj3W5/mxpvzJbN74q+Luan54YqY82e3gocftbdP/U38Vu906YMv1dbsBQNfo/9C79H/oXfo/9K4W/X93N9oBbL9q/2/6V02fdKktwPZq+vy37Ac9xPM/9C79H3qX/g89aXZ3rP0leQmJFYko7IhmSGxRotvvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJvj3wAAAP//OGbmNw==") 52.295473588s ago: executing program 3 (id=39): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000002c0)={[{@block_validity}, {@nojournal_checksum}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") chdir(&(0x7f00000000c0)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4ffff06000d000100000007000000250000000d0016000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r4 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x70, 0x4000, @fd, 0x85, 0x0, 0x0, 0x11, 0x1}) io_uring_enter(r4, 0x1, 0x1, 0x1, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000280)={@link_local, @random="1704b45adbde", @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa011100, 0x1000000}, {@private}, {@broadcast}, {@dev}, {@private}, {@empty}, {@private}]}]}}}}}}}, 0x0) r8 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRAWPHYS(r8, 0x4004480d, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x2368810, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), &(0x7f0000000b40), 0xfe1c, 0x0) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x28, 0x0, 0x0, 0xfffff028}, {0x6, 0x0, 0x4}]}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r9, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x1b}}, './file0\x00'}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 52.171232222s ago: executing program 3 (id=44): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x70, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x800) syz_open_procfs(r2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4004041}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0x20) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000000)=r5, 0x4) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x6e22, 0x0, @empty, 0xc70}, 0x1c) getsockopt$sock_buf(r6, 0x1, 0x1c, &(0x7f0000000380)=""/185, &(0x7f0000000440)=0xb9) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r7, r8, 0x6, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}, 0x40) write$cgroup_int(r5, &(0x7f0000000040)=0x1c9, 0x12) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x5, 0x4) 50.912718705s ago: executing program 3 (id=49): r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_buf(r0, 0x1, 0x2c, &(0x7f0000000a80)=""/4096, &(0x7f0000001a80)=0x1000) socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0b0532950b0000005e14398f0602dd431a2c3000000e000a0010000000028000", 0x30}], 0x1}, 0x48004) 50.821948355s ago: executing program 32 (id=49): r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_buf(r0, 0x1, 0x2c, &(0x7f0000000a80)=""/4096, &(0x7f0000001a80)=0x1000) socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0b0532950b0000005e14398f0602dd431a2c3000000e000a0010000000028000", 0x30}], 0x1}, 0x48004) 47.040384807s ago: executing program 0 (id=111): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xb, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@generic={0x73, 0x1, 0x1, 0x35}]}, &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 46.155942188s ago: executing program 0 (id=122): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)=[{0x68, 0x119, 0x800, "baea3803c7a40590a4c32c0c7069e1853949e125cfdbe9f30ed63573b11fbdd12439d20a57325e5e955176c4ba661b1b8316efb07b98d2f04eed7071d53f38571654f1aee8823437662c70d2f872928e385b4d321d17"}], 0x68}}, {{&(0x7f0000000f40)=@ethernet={0x306, @random="9487c44c7308"}, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000000fc0)}, {0x0}, {&(0x7f0000002880)}, {&(0x7f0000002900)}, {0x0}], 0x5, &(0x7f0000002b40)=[{0x10, 0x88, 0x3}, {0xe8, 0x118, 0x8, "cf24c8aef3417fcb9f016afc80aecceaa008281147c34f1a8f39056663f3a4d39438f170634a3d2cd4c62f84f7e689409d3fcf9a9a4ebfca01e9c847a080df618f5a2badfb9272a867d53d762dc34de2b7a05e50d0faab189455e09b37d0fccbce66425b759a8ee29095c6b128f7c039fd3851deb7605918157cddc9f6381bfb0de73f999323122e322e611f52f9eb50fceb3c84b4ff925fffb0a58d5390b263f40c1725c5be726e27a4cdae4ff303ce6f2efa0fb5e486d2211a6a6ee420dcaf7fd12139360badec6b8c41cbdef3f262c9623b9edbae"}, {0x30, 0x110, 0x81, "ac73ba38377c7bf5c0f38e64a9b77b4e43841668e90fd58d1dcd591222896cd2"}, {0x28, 0x109, 0x80000001, "bfa9592c772c22abf621bc3b025242bcdb"}], 0x150}}], 0x2, 0x20004024) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[], 0x28}}, 0x802) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x8000000010, 0x2, 0x0) write(r4, &(0x7f00000002c0)="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", 0xfc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400003900120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r6, 0x2000) 45.223221672s ago: executing program 0 (id=131): r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x1, 0x2004cfe9, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) shutdown(r0, 0x1) splice(r0, 0x0, r1, 0x0, 0x1, 0x3) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x40000001, 0x2000007, 0xffff}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cc, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000b80), 0x2, 0x40) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, 0xfffffffffffffffe) r4 = syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x58001, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x2}}, {@max_read={'max_read', 0x3d, 0x1ac}}, {@allow_other}, {@default_permissions}], [{@uid_lt={'uid<', 0xee00}}, {@smackfsdef={'smackfsdef', 0x3d, '#/:'}}, {@dont_measure}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x34, 0xd, 0x6, 0x39, 0x62, 0x9ec35f620edeb4d3, 0x39], 0x2d, [0x36, 0x36, 0x34, 0x64], 0x2d, [0x30, 0x32, 0x36, 0x65], 0x2d, [0x61, 0x31, 0x65, 0x62], 0x2d, [0x36, 0x65, 0x34, 0x79, 0x31, 0x65, 0x63, 0x37]}}}, {@dont_measure}, {@audit}, {@audit}]}}, 0x1, 0x0, &(0x7f0000000440)="deb1c40aa440837de685d411dcd1fe2bd7e8946d81a752b23806758d") r5 = openat(r4, &(0x7f0000000480)='./file0\x00', 0x600400, 0xf4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x8, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200000}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="04000226", @ANYRES16=0x0, @ANYBLOB="00000000000000000004e800000008000317"], 0x1c}}, 0x0) write$binfmt_misc(r5, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x39, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70006000006e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec081228000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 44.197731495s ago: executing program 0 (id=133): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0xe, &(0x7f0000000140)={[{@sysvgroups}, {@dax_inode}, {@noauto_da_alloc}, {@minixdf}, {@data_journal}, {@quota}]}, 0x3, 0x455, &(0x7f0000000f00)="$eJzs3MtvG0UYAPBv10n6pDGlPPoAAgUR8UiatEAPXEAgcQAJCQ7lGJK0KnUb1ASJVhUYhMoRVeKOOCLxF3CCCwJOSFzhjipVqJcWTkZr7yaOY6dxmsSl/v2kTWZ2Zz3zeXfs2Z1sAuhbI9mPJGJ3RPwREcON7PICI41fN69fmv7n+qXtEVF7+++kXu7G9UvTRdFiv115ZjSNSD9P4mCbeucvXDwzVanMns/z4wtnPxifv3DxudNnp07Nnpo9N3n8+LGjEy++MPn8in0vD3cfZ7bLjQMfzx3a//q7V96cPnHlvV++S4r4W+Jor9xtlSOrbXyyVuv29e5o9zSlk4EeNoSulCIiO1yD9f4/HKVYOnjD8dpnPW0csKlquQ6bqzXgLpZEr1sA9EbxRZ9d/xbL1o0+eu/ay40LoCzum/nS2DIQaV5msOX6diONRMSJ6r9fZ0us6T4EAMDt+SEb/zzbbvyXxgNN5fbkcyjliLg3IvZGxH0RsS8i7o+ol30wIh7qsv7WSZKV45/06roCW6Ns/PdSPre1fPyXRrWRKJfqucYYsByDycnTldkj+XsyGoPbsvzEKnX8+OrvX3ba1jz+y5as/mIsmLfj6sC25fvMTC1M3V7US659GnFgoF38yeJMQBIR+yPiwDrrOP30t4c6bRuJ6i3i72RjJplq30Q81Tj+1WiJv5CsPj85vj0qs0fGi7NipV9/u/xWp/pvffw3V3b8d7Y9/xfjLyfN87Xz3ddx+c8vOl7TrPf8H0reqaeH8nUfTS0snJ+IGEreaDS6ef3k0r5FviifxT96uH3/3xtL78TBiMhO4ocj4pGIeDRv+2MR8XhEHF4l/p9feeL99ce/ubL4Z7o6/kuJoWhd0z5ROvPT98sqLXcTf3b8j9VTo/matXz+raVd6zubAQAA4P8njYjdkaRji+k0HRtr/A3/vtiZVubmF545OffhuZnGMwLlGEyLO13DTfdDJxYv6xv5yTxfbD+a3zf+qrSjnh+bnqvM9Dp46HO7OvT/zF+ltrts29oWApvK81rQv/R/6F/6P/Qv/R/6V5v+v6MX7QC2Xrvv/0960A5g67X0//bTfsBdyfU/9C/9H/qX/g99aX5HrPqQfFT31Mut7Ul/iTsqEbERr1P8I4iWTZH2PkCJzUv09GMJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgw/wXAAD//7Jx47M=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xa75) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, &(0x7f0000000140)='usrjquota=') mq_open(&(0x7f00000000c0)='max_batch_time', 0x1, 0x12, &(0x7f0000000100)={0xfffffffffffffffa, 0x10001, 0x1, 0x7}) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000300)={0xff, {{0xa, 0x4e22, 0x4, @remote, 0x1}}, 0x1, 0x1, [{{0xa, 0x4e21, 0x1, @mcast1, 0x7f}}]}, 0x110) (async) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000300)={0xff, {{0xa, 0x4e22, 0x4, @remote, 0x1}}, 0x1, 0x1, [{{0xa, 0x4e21, 0x1, @mcast1, 0x7f}}]}, 0x110) 43.360625354s ago: executing program 0 (id=138): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040041}, 0x0) (async) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000240)={@private0={0xfc, 0x0, '\x00', 0x1}, r2}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r4, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000040}, 0x40) (async) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x14, 0x3e, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 42.672484717s ago: executing program 0 (id=151): ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000010c0)={0x0, ""/256, 0x0, 0x0}) r1 = syz_open_dev$video4linux(&(0x7f0000000100), 0xa00000000407, 0x8000) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f00000001c0)={0x0, 0x5, 0x3c, '\x00', &(0x7f00000000c0)=0x2}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000040)={r0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff2424852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff0e0b5a293e3877adc1660edbc9a0307a25720a70e419dc44febf7ddc73fd4a5a0b6c28667f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001040)={'ipvlan1\x00'}) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000001300)={0xd, 0x103, 0x2, {0x1, 0x4, 0x1ff, 0x7}}) sendmsg$NFT_BATCH(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=ANY=[@ANYBLOB="a5ad3f052514200952b2e33f8802038fac79298c4729cec7f7de2cd38c2625df3750f0d442016e69a64834f276cd118ae2a5172415541818fbb49c29f35d7534192b25556d61b70de0f4ab3ab3c92f8a414f7717b13c2ca8627c4618c6b963a96045f05f24076fe544402c99d8416c2dd7763177614d9ff0dc2180b5d6e3a6ccd77538eea497353fd70ea3b640deb8fd68488832adbaf01b4c5c27f0bfb8a7e8a0b5f87525d64ef6ba643e963916735d0ff7a49e49c6d1928db4bdb2209c82bb806fdcbbd9d7949e735efb536ee2f660b5138098f0e604f62dda26c4fbf8abf24b6e430cf08e8c87266526a1b52bc0d2b4cf0267a049e7e7bb"], 0x80}, 0x1, 0x0, 0x0, 0x8}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000001080)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60002800001829ff"], 0x0) 42.637640232s ago: executing program 33 (id=151): ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000010c0)={0x0, ""/256, 0x0, 0x0}) r1 = syz_open_dev$video4linux(&(0x7f0000000100), 0xa00000000407, 0x8000) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f00000001c0)={0x0, 0x5, 0x3c, '\x00', &(0x7f00000000c0)=0x2}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000040)={r0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff2424852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff0e0b5a293e3877adc1660edbc9a0307a25720a70e419dc44febf7ddc73fd4a5a0b6c28667f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001040)={'ipvlan1\x00'}) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000001300)={0xd, 0x103, 0x2, {0x1, 0x4, 0x1ff, 0x7}}) sendmsg$NFT_BATCH(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=ANY=[@ANYBLOB="a5ad3f052514200952b2e33f8802038fac79298c4729cec7f7de2cd38c2625df3750f0d442016e69a64834f276cd118ae2a5172415541818fbb49c29f35d7534192b25556d61b70de0f4ab3ab3c92f8a414f7717b13c2ca8627c4618c6b963a96045f05f24076fe544402c99d8416c2dd7763177614d9ff0dc2180b5d6e3a6ccd77538eea497353fd70ea3b640deb8fd68488832adbaf01b4c5c27f0bfb8a7e8a0b5f87525d64ef6ba643e963916735d0ff7a49e49c6d1928db4bdb2209c82bb806fdcbbd9d7949e735efb536ee2f660b5138098f0e604f62dda26c4fbf8abf24b6e430cf08e8c87266526a1b52bc0d2b4cf0267a049e7e7bb"], 0x80}, 0x1, 0x0, 0x0, 0x8}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000001080)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60002800001829ff"], 0x0) 40.764164487s ago: executing program 4 (id=170): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x6c}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x88101, 0x0) (async) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x88101, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000140)={0x9, [0x8, 0x2c, 0x6, 0x1, 0x7fff, 0x5, 0x8d4, 0xb, 0x1]}, 0x16) (async) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000140)={0x9, [0x8, 0x2c, 0x6, 0x1, 0x7fff, 0x5, 0x8d4, 0xb, 0x1]}, 0x16) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000480)=0xe8) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000801, r5, &(0x7f00000004c0)={0x4, 0x1c9a, 0x43, 0x6, 0xb85, 0x1000, 0x8, 0xa00000000000, 0x729e9d44}) (async) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000801, r5, &(0x7f00000004c0)={0x4, 0x1c9a, 0x43, 0x6, 0xb85, 0x1000, 0x8, 0xa00000000000, 0x729e9d44}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000900"/20, @ANYRES32=0x0, @ANYBLOB="43120000000000002000128008000100767469001400028008000500e000000208000100", @ANYRES32=r3, @ANYBLOB="c119505b1931bd697a6396b4e7c9e9c105fade62546f9231cc62b8866ab665a14892d0f13582a79c9d84b01d01dd3e2d48"], 0x40}, 0x1, 0x0, 0x0, 0x20049808}, 0x0) ioctl$XFS_IOC_SET_RESBLKS(r0, 0xc0105872, &(0x7f0000000180)={0x7fff, 0x6}) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f00000000c0)) 40.672222563s ago: executing program 4 (id=173): syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000480)='./file0\x00', 0x1007c44, &(0x7f0000000040)={[{@orlov}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@nogrpid}]}, 0xfb, 0x472, &(0x7f0000000940)="$eJzs3MtvG8UfAPDvOk6a9PFLf6U8WloIFETFI2nSBz1wAYHEAQQSHIo4BSetSt0GNUGiVQSBQxDigCpxRxyR+As4wQUBJySucEeVEMqlhZPRenfTxLVDHk6c4s9H2nZmd92Z786OPTtjN4CuNZT+kUTsjohfI2Iwyy4/YSj76+bCbOWvhdlKErXaa38m9fNuLMxW8n9i8XW7sh21Wp7f0aTc+TcjxqvVyct5fmTm4jsj01euPnX+4vi5yXOTl8ZOnz5x/HDfqbGTbYkzjevGwfenDh148Y1rL1fOXHvrx6/T+u7OjxdxtNNQdnWberTdhXXYniXppNzBirAmabulzdVb7/+D0RMDi8cG44WPOlo5YFPVarVas8/n3FwN+A9LotM1ADqj+KBPn3+LbYuGHtvCH89mD0Bp3DfzLTtSjlJ+Tm/D82079UfEmbm/v0i32KR5CACApb5Nxz9PNhv/leKeJef9L19D2RsR/4+IfRFxV0Tsj4i7I+rn3hsR962x/MYVktvHP6Xr6wpsldLx3zP52tby8V8x+ou9PXluTz3+3uTs+erksfyaHI3eHWl+dNlLlvvu+V8+a9z3aT7NPrRk/JduafnFWDCvx/VywwTdxPjMeFuCT+P/MOJguVn8SRTLOElEHIiIg+ss4/zjXx1qdezf419BG9aZal9GPJa1/1w0xF9IWq5Pjj59auzkSH9UJ4+NFHfF7X76ef7VVuVvKP42SNt/Z9P7P4s/fUZM+iOmr1y9UF+vnV57GfO/fVxJWhzbv877vy95vZ7uy/e9Nz4zc3k0oi95Kc0OLNs/duu1Rb44P43/6JHm/X9f9nhWvxL3R0R6Ex+OiAci4sG87R6KiIcj4sgK8f/w3CNvtzrWuv1XmJVvozT+iRXaP33LS1O32n/tiZ4L33/Tqvzaqtr/RD11NN+zmve/1VZwI9cOAAAA7hSl+nfgk9LwYrpUGh7OvsO/P3aWqlPTM0+cnXr30kT2Xfm90VsqZroGl8yHjuZzw0V+rCF/PJ83/rxnoJ4frkxVJzodPHS5XS36f+r3nk7XDth0fq8F3Uv/h+6l/0P30v+he+n/0KX6mu/+YKvrAXTE2j//+zelHsDWM/6H7qX/Q/fS/6ErtfxtfGlDP/m/UxPl7VGNpomB7VGNIhGlbVGN9iVe+STrEtulPkWivOr/zGKdiR1ND3X6nQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA9/gkAAP//Uo/mdg==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x100, 0x140) open_by_handle_at(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000b0000f0ffffffff1affff000000007ffca1"], 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000480)='./file0\x00', 0x1007c44, &(0x7f0000000040)={[{@orlov}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@nogrpid}]}, 0xfb, 0x472, &(0x7f0000000940)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x100, 0x140) (async) open_by_handle_at(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000b0000f0ffffffff1affff000000007ffca1"], 0x0) (async) 40.614900394s ago: executing program 4 (id=174): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r3 = syz_pidfd_open(r2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x28011, r4, 0x0) unshare(0x400) pidfd_send_signal(r3, 0x4, &(0x7f0000000280)={0x4, 0x8, 0xffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100060000000000002b00000008000300", @ANYRES32=r5, @ANYBLOB="040046000a0034000101010101010000080026006c09000008002700010007"], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 40.560022204s ago: executing program 4 (id=175): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x800, 0x0) write(r0, &(0x7f00000001c0)="9d8cb241665d912961fad6ee8522ab424721343207d5193ae552f7", 0x1b) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@jqfmt_vfsold}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x3010009, 0x0, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x46}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6}, 0x70) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file1\x00', 0x0) 40.400466757s ago: executing program 4 (id=177): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff, 0x0, 0x5, 0x7fd}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe000000000000000800040001000000", 0x24) r3 = fanotify_init(0x1, 0x2) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r3, 0x41, 0x8000038, r4, 0x0) r5 = fanotify_init(0x1, 0x800) fanotify_mark(r5, 0x1, 0x28, r4, 0x0) r6 = inotify_init1(0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="60000000020601080000000000000000000000001400078008001140000000ba05001500f90000000505000a00000005000400000000000900020073797a310000000013000300686173683a6e65742c696661636500"/96], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0) inotify_add_watch(r6, &(0x7f0000000040)='./file0\x00', 0xc6000800) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0) getsockname$packet(r8, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) 39.563204436s ago: executing program 4 (id=181): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b45, 0x0) mq_open(&(0x7f0000000140)='udp:syz1\x00', 0x40, 0x0, &(0x7f0000000180)={0x0, 0x31}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 39.369566445s ago: executing program 34 (id=181): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b45, 0x0) mq_open(&(0x7f0000000140)='udp:syz1\x00', 0x40, 0x0, &(0x7f0000000180)={0x0, 0x31}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 22.034678362s ago: executing program 2 (id=348): r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x1, 0x2004cfe9, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) pipe2(&(0x7f0000000100), 0x0) shutdown(r0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x39, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70006000006e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec081228000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 21.746292923s ago: executing program 2 (id=350): r0 = msgget(0x3, 0x0) msgsnd(r0, &(0x7f00000002c0)={0x0, "d77e597384c7704ce3e7fdaaa065451f83adc8cb343f9355a0fa1db7199800ccf1f86c3dba6aa5e3c5319ecdf5dc79422a"}, 0x39, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x6b, 0x60000000}, 0x2c) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080202000", @ANYRES32=0x0, @ANYBLOB="1f00"], 0x38}}, 0x0) msgctl$IPC_STAT(r0, 0x2, 0x0) msgsnd(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="dd0000000000000058a8681bed205396bb646c79328a5b2346527d11bd5c0c3d318803749c07a2162e31925b595a1b2cb5e6eff254ebd594a0f7b944b7a7f5a6085b703fad89a8192f5a0617a082a9885e7a440e0a40d18f8febda3b4c5e4a17cecbbafdb3a4fb77c985c231"], 0x3e, 0x800) msgrcv(r0, 0x0, 0x0, 0x1, 0x2000) 21.68466766s ago: executing program 2 (id=351): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x108, r1, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2c9}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xc1, 0xac, "7f2248c5e34ddb0d57c5cb78ff2d309dd94f8fc129e9bb1d1c8d52f9cc67a471153917610296f076d539642d4836aa8708860413193bae8f9c624703912441b3107ed5d30fad14603a96b2e1dd3975e7dcfad6d80ae472b05e7a7d0b1ef76a1dc7af52a6ae4fb968431bca3faacb568e3454aba7b7ed0ce0c1a1f693a14eabb9f96c51cfb93c9bfef0c2a114c8ffd7d739fe828ce85d7fa6149ddffe012ad07a4257d4508a2359fa9c79e7ecb739e95b539293397da2c2d3d9d72e983f"}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}]}, 0x108}}, 0x0) 21.684131945s ago: executing program 2 (id=352): r0 = socket(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) recvmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x8000000}], 0x2, 0x40, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}}, 0x0, 0x0, 0x3b, 0x0, "9fc3c90c8ef023316b499a8d6671d16725bb1a7830ea7caddaf040349e4808ba619e576ff09c009c6ad81d7811896fe55e9119bcb5a955a3c20a32906d1a09a907087ebae6401f2614c0ce89977cede4"}, 0xd8) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x8}}, 0x30) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r3, &(0x7f000000ca40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000006c0)="cfe6dde0c37efdbb43dc9b530735ea4ad3bf3cff834a5e80ea0801a83a3b9dbe6b7bf3c289f5c083a73c6d1fdf2caec8388cccbcfc4812ae7551c08ea285e17540f689e769433ab0eefa", 0x4a}, {&(0x7f0000001300)="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", 0x7aa}, {&(0x7f0000002300)='\r', 0x1}], 0x3}}], 0x1, 0x40) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x84, 0x1, &(0x7f0000000180), 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r6, 0xfffffd11, &(0x7f0000000980)}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x80, 0x3, 0x8, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x17}, 0x8000, 0x20, 0xa8, 0x11}}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000140)={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x463, 0x3, 0x3, 0x100, 0x7, 0x20002, r7}) sendmsg$kcm(r0, &(0x7f0000001280)={&(0x7f0000000280)=@pptp={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000300)="c4564623fb7b09c3d544610d3df8bf87fc2cfe89a492a9863bdc", 0x1a}], 0x1, &(0x7f0000000f80)=[{0x40, 0x11, 0x200, "d295c08795b7f3f2df6abf734055e2d8ead48d0336ca872076bd336d9b365560a33d3b72f563943941"}, {0xb8, 0x111, 0x6, "640749c669335d167c0326015fbbdc4f939649f838acce27d6ca5c1304f6100812192557a8b8bed575c5db2e9fe7f257aee247e4d84ae54f5add363abe8bef8e523cb41e7797851951cdf001aa35e1b2942723edad93773eef6872452a1595b19e04d8ce0c4ae921cffc50bb7d471a19110537617087f34523d3f1ea4401d6f3db7aaa6ba61b84a821b61d55ce5cce515850406079a91175dab98c82cf647cbfa9e23973"}, {0x98, 0x10a, 0x7, "0b9deb37c21663c91e71cc38d1d2182fdd9a25ef1e1302a7036a6d829414efc39c1495b0d9ec95581bd4ebbbe98386b0ceb3467a300d11194d55981f0c07660ecc8e2096325ad1a747a0094e0b1cab00b0a3c49bb21e0b0f40d044e1f0ad3013366a8dd079aa02fdb6c3ea0a439e1fdd16b158d25f90720d45ab9470b78366f23cbd4c67dd48"}, {0xa0, 0x110, 0xda6, "c80a329a36361a61fdc4fdd330fa5541b019f95e49d2d3b8ac63b0d85f674fa3b046b6d74734833e35863ae054914ec812d3a35b8557d15ba0f20f95442a68d670ae32da72088b63f11c62e2813671c3154471598c8b5113aa76c1b74cda179ec5c0c46c85c36149e47e80bfd43dd0493772037aa50e9e33fe217caef27debecd0fbc2a747439edf7de0"}, {0xd0, 0x10c, 0x5, "8b7d92ea649242891e984bc03bf12e0c0237d0e3628e2c9dfd0cc71c2f8f9ed8832edd2d207182731cfb095d10b1f7b017ca431b1211e1600d0ded9b8323af4b0998e562ee682b89cb89dba7b3381310f140c30b13d16d70b59e9d470fc65170ddccb8ecea52906d3b7f40f416effdbedf0c8b26f31c3d35157f3771ed5c447490e501c700813a059dd45e5d8b76832cbc604ed7deadc26cb5aefae5eda87e63a66f0a4d9a498a30f15ca367ed697b5b1a5bcd9737cf92f7889bd9"}], 0x300}, 0x800) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) 21.62975117s ago: executing program 2 (id=353): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x3a) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) connect$pppl2tp(r5, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @broadcast}, 0x1, 0x0, 0x2}}, 0x26) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0xfe, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x7}, 0x10) r7 = accept$alg(r0, 0x0, 0x0) close(r7) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r8, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r9 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmat(r9, &(0x7f0000ffc000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r3}, &(0x7f00000014c0), 0x0}, 0x20) 21.465375521s ago: executing program 2 (id=354): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)=[{0x68, 0x119, 0x800, "baea3803c7a40590a4c32c0c7069e1853949e125cfdbe9f30ed63573b11fbdd12439d20a57325e5e955176c4ba661b1b8316efb07b98d2f04eed7071d53f38571654f1aee8823437662c70d2f872928e385b4d321d17"}], 0x68}}, {{&(0x7f0000000f40)=@ethernet={0x306, @random="9487c44c7308"}, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000000fc0)}, {0x0}, {&(0x7f0000002880)}, {&(0x7f0000002900)}, {0x0}], 0x5, &(0x7f0000002b40)=[{0x10, 0x88, 0x3}, {0xe8, 0x118, 0x8, "cf24c8aef3417fcb9f016afc80aecceaa008281147c34f1a8f39056663f3a4d39438f170634a3d2cd4c62f84f7e689409d3fcf9a9a4ebfca01e9c847a080df618f5a2badfb9272a867d53d762dc34de2b7a05e50d0faab189455e09b37d0fccbce66425b759a8ee29095c6b128f7c039fd3851deb7605918157cddc9f6381bfb0de73f999323122e322e611f52f9eb50fceb3c84b4ff925fffb0a58d5390b263f40c1725c5be726e27a4cdae4ff303ce6f2efa0fb5e486d2211a6a6ee420dcaf7fd12139360badec6b8c41cbdef3f262c9623b9edbae"}, {0x30, 0x110, 0x81, "ac73ba38377c7bf5c0f38e64a9b77b4e43841668e90fd58d1dcd591222896cd2"}, {0x28, 0x109, 0x80000001, "bfa9592c772c22abf621bc3b025242bcdb"}], 0x150}}], 0x2, 0x20004024) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[], 0x28}}, 0x802) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x8000000010, 0x2, 0x0) write(r4, &(0x7f00000002c0)="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", 0xfc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400003900120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r6, 0x2000) 21.412337396s ago: executing program 35 (id=354): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)=[{0x68, 0x119, 0x800, "baea3803c7a40590a4c32c0c7069e1853949e125cfdbe9f30ed63573b11fbdd12439d20a57325e5e955176c4ba661b1b8316efb07b98d2f04eed7071d53f38571654f1aee8823437662c70d2f872928e385b4d321d17"}], 0x68}}, {{&(0x7f0000000f40)=@ethernet={0x306, @random="9487c44c7308"}, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000000fc0)}, {0x0}, {&(0x7f0000002880)}, {&(0x7f0000002900)}, {0x0}], 0x5, &(0x7f0000002b40)=[{0x10, 0x88, 0x3}, {0xe8, 0x118, 0x8, "cf24c8aef3417fcb9f016afc80aecceaa008281147c34f1a8f39056663f3a4d39438f170634a3d2cd4c62f84f7e689409d3fcf9a9a4ebfca01e9c847a080df618f5a2badfb9272a867d53d762dc34de2b7a05e50d0faab189455e09b37d0fccbce66425b759a8ee29095c6b128f7c039fd3851deb7605918157cddc9f6381bfb0de73f999323122e322e611f52f9eb50fceb3c84b4ff925fffb0a58d5390b263f40c1725c5be726e27a4cdae4ff303ce6f2efa0fb5e486d2211a6a6ee420dcaf7fd12139360badec6b8c41cbdef3f262c9623b9edbae"}, {0x30, 0x110, 0x81, "ac73ba38377c7bf5c0f38e64a9b77b4e43841668e90fd58d1dcd591222896cd2"}, {0x28, 0x109, 0x80000001, "bfa9592c772c22abf621bc3b025242bcdb"}], 0x150}}], 0x2, 0x20004024) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[], 0x28}}, 0x802) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x8000000010, 0x2, 0x0) write(r4, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400003900120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r6, 0x2000) 9.648436095s ago: executing program 6 (id=462): sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000e0000901080000000000000000020000050800034008000036080005400000001a100002000c00028005"], 0x34}, 0x1, 0x0, 0x0, 0x4004840}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r4, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r6, r5, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) r7 = socket(0x1, 0x2, 0x0) getsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000700000000040014001a8010000480"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)={@local, @rand_addr=0x64010101, 0x1, 0x1, [@private=0xa010102]}, 0x14) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r11, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r12, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x148, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x3, 0x3, 0x6f, 0x8, 0x8, 0x9, 0x8}}]}}]}, 0x148}}, 0x0) 8.680454641s ago: executing program 6 (id=474): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000036020100f8ffffffbfa400000000000007000000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x7, 0x87, &(0x7f0000000580)=""/135}, 0x94) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x6, @mcast2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x0, @private0, 0xe}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x6c}}, 0x0) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f00000001c0)={0x3a, @dev={0xac, 0x14, 0x14, 0x29}, 0x4e21, 0x1, 'lblcr\x00', 0x33, 0x7fffffff, 0x5e}, 0x2c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, 0x0, 0x56) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x10}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000120000000000100000000001c00090008"], 0x4c}}, 0x40000) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r7 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000140)) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000180)=0xfff7) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/comedi3\x00', 0x20000, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) bind$netlink(r10, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r10, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r11, 0x40046}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x6d}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$COMEDI_POLL(r8, 0x640f) 8.626692216s ago: executing program 6 (id=475): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x70, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000180)='reno', 0x4) mount$tmpfs(0x0, &(0x7f00000001c0)='./file2\x00', &(0x7f0000000280), 0x1805400, &(0x7f0000000540)={[{@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x6b, 0x34]}}, {@inode32}, {@huge_always}], [{@smackfsdef={'smackfsdef', 0x3d, '{'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x80'}}]}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup\x00', 0x81c0, 0x800) syz_open_procfs(r2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4004041}, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0x20) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000000)=r6, 0x4) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x6e22, 0x0, @empty, 0xc70}, 0x1c) getsockopt$sock_buf(r7, 0x1, 0x1c, &(0x7f0000000380)=""/185, &(0x7f0000000440)=0xb9) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r8, r9, 0x6, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}, 0x40) write$cgroup_int(r6, &(0x7f0000000040)=0x1c9, 0x12) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x5, 0x4) 8.505132459s ago: executing program 5 (id=479): setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e23, @loopback}}}, 0x84) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file1\x00', 0x0, &(0x7f0000000000)={[{@nobarrier}, {@noinit_itable}, {@i_version}, {@init_itable}]}, 0x1, 0x74f, &(0x7f0000001040)="$eJzs3M9rHOUbAPBnpknTb5t+N4IH8SRUrFC7SVO1JyHiuVDoH1DDZhJCJtmQ3dQmBtp68CAIKoI/etH/wIsieCn9HxTBm4IHQWsaD4KHyGw2id3upqlNOho/H5jM876zM8/7ZIeXHdh3A/jPeqr4k0QMRsSFiKi0+9OIONyKjkRc23jdndWV2trqSi2J9fWLt5PitFbf5rWS9v5YtE6JJyLiVn/EqTfuzdtYWp4Zz/Nsod0ebs7ODzeWlk9Pz45PZVPZ3OjIyNmzL46+8PzIntX69uuf/fLWl698/fG52T9euv3cRBJjrbqjo469tPE/6Y+xjv65/UhWoqTsAQAAsCvF5/xDEdHX+pRaiUOtCAAAADhI1gfWAQAAgAMvibJHAAAAAOyvze8B3FldqW1uj/L7Bz+/HBFD22uL17by97XWEEccif6IOLqW3LUyIdk4DR7KtesRcXOsy/2ftO+/BzSwHXauXLdG+p/nZjH/jHWb/9Kt+Se6zD99m7+d8JA257+1e+a/7fyHesx/F3aZY2Dh5Dc981+PeLKvW/5kK3/SI/+ru8z/+eB33/c6tv5pxMnonv+vuXb4fYjhyek8a//tmuPEF1dP7VT/0V75k53rn99l/T/cGJ3qNZcU+Z89sfP73y1/cU+80x5HGhHvtvdF+72OHM/cGvlop/onetR/v/f/k14XvXp386s3l3/s9VIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoJo2IwUjS6lacptVqxLGIeDyOpnm90Tw1WV+cmyiORQxFfzo5nWcjEVHZaCdF+0wr3m6PdrTPRsRjEfF+5X+tdrVWzyfKLh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAtxyJiMJK0GhFpRPxWSdNqtexRAQAAAHtuqOwBAAAAAPvO8z8AAAAcfA/y/H99H8cBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHGgXzp8vtvW11ZVa0Z64vLQ4U798eiJrzFRnF2vVWn1hvjpVr0/lWbVWn73f9fJ6ff5czC1eGW5mjeZwY2n50mx9ca55aXp2fCq7lPU/kqoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4UIOtLUmrEZG24jStViOOR8RQ9CeT03k2EhH/j4hvK/0DRftM2YMGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgzzWWlmfG8zxbuDs43j7c5ZBAIDj4QckTEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApWgsLc+M53m20Ch7JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJQr/SmJiGI7WXl6sPPo4eT3SmsfEa/duPjBlfFmc+FM0f/rVn/zw3b/aBnjBwAAADptPqe3n+PTsscDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8ezSWlmfG8zxb2Meg7BoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/588AAAD//6PjyPE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1020, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.423011505s ago: executing program 5 (id=481): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f0000000040)={'wlan1\x00', @random="2e2ee363a4b1"}) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000180), 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000440)={0x3fffffffbfb, 0x5, 0x5, 0x7f}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000040)={[{@dax_inode}, {@delalloc}, {@grpquota}, {@bsdgroups}]}, 0xff, 0x57d, &(0x7f0000000180)="$eJzs3c9vHFcdAPDvrL22kzi1CxygUktFi5IKso5r2locSkAITpUQ5R6MvbEsr72RvW5jqwLnL0BCCJA4wYULEuKMhCK49IiQIsEZEAiEaAoSHEqnmt1Z213P2utkvZs4n480mffmx36/b52ZnbfzNBvAY+vZiLgWEe+nafpCREzly0v5FLutKdvu3XtvLWZTEmn6+r+SSPJl2WZpmqbt17yQ7zYREV//asS3kgMBJ/L59s7qQq1W3cirM421mzOb2ztXVtYWlqvL1fW5udmX51+Zf2n+al/aeTEiXv3y337w3Z995dVff/bNP1//x+VvZ2lN5uvb7bgPo0etbDW9PD7RscPGfQZ7GGXtKb+XV871ts/t00wIAICusmv8j0TEpyLihZiKkaMvZwEAAIBHUPqFyXgvad2/KzDWZTkAAADwCCk1x8AmpUo+FmAySqVKpTWG92NxvlSrbzY+c6O+tb7UGis7HeXSjZVa9Wo+Vng6yklWn22W9+svdtTnIuLJiPj+1LlmvbJYry0N+8sPAAAAeExc6Oj//2eq1f8/WjKY5AAAAID+mR52AgAAAMCp0/8HAACAM6087AQAAACAU/e1117LprT9+9dLb2xvrdbfuLJU3VytrG0tVhbrGzcry/X6cvOZfWvHvV6tXr/5uVjfujXTqG42Zi5u71xfq2+tN66vxMRAGgQAAAAc8uQn7/wxiYjdz59rTpmxYScFDMToXqn9TM+Co/9PT7Tmfx1QUsBAjPSy0XjxYtcJ8Ggb7VxQdKy/fW0wyQADZfw/cNwvenQdvPO71qx0wnhfOuH2AADAg7v0ieL7/8dfz++Wzg8gP+D0nLTfDpwdHff/06lhJQIMXPP+f68DeVwswJlS7m0EIHCGPej9/+Ol6YkSAgAA+m6yOSWlSv713mSUSpVKxMXmzwKWkxsrterViHgiIv4wVR7P6rPNPZNj+wwAAAAAAAAAAAAAAAAAAAAAAAAAQEuaJpECAAAAZ1pE6e/Jb5vP8v/NL6een+z8fmAs+V/zJ4HHIuLNH7/+w1sLjcbGbLb8nb3ljR/ly18cxjcYAAAAQKd2P705/++wswEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgrHn33luL7enDa0pFm5/rV9x/fjEipovij8ZEcz4R5Yg4/+8kRg/sl0TESB/i796OiI8XxU+ytPZCFsXvx5uwezvZTZsK48d0/i604k/s7Zf9VS70IT48zu5k559rRcd/KZ5tzg8ef/tGIz5Uv1/dz3+xd/4b6XL+udhjjKfu/mKma/zbEU+NFp//2vGTLvGf6yn6SHzzGzs73damP4m41P78aZ7xDkbYL8001m7ObG7vXFlZW1iuLlfX5+ZmX55/Zf6l+aszN1Zq1fzfwhjfe/pX7x/V/vOFn39Jnk339j9f2NrD+f//7q17H21Xdg/Hv/xcQfy3f5pvcTh+KY/z6bycrb/ULu+2ygc98/PfP3NU+5f2218+yd//cqs43u219xw6UJ7u7b8OAHAqNrd3VhdqterGmS1kvfQuq8ZjNd5p9b4filQ7C2Mx9DTal24PwbvRvZDmV9216sZfIqL33b+TFe72LY00TfM0OlfdiYheXic5QfI9FUrF+ewXup4BhnhSAgAATsX+Rf+wMwEAAAAAAAAAAAAAAAAAAIDH1yAe0tYZc/8RyEk/HqENAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAXHwQAAP//4+LZhw==") quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) 8.30700438s ago: executing program 5 (id=483): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x7) close(0x3) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="ad518d980b", 0x5, 0x40040c0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c491}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000090605fb0000002000000000010000050900020073797a30000000000500010007000000080009400000000124000880100007800a0011"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r0, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440606769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b0f0dfa121a9efe05269f9f4a0e9bcbf43c7a90a711f453668c730c3badedca687b71a9c27bab9e724cc4a4918713031596ea6fd01124f973f257ccd9665aee7df4a9d64f079d176abc00000000d7af3e2dd4396f72373fb0a787a6129ca41181f5087fb843212550b58e3707d5a0399de36c2503836cbe2133de4f574e9e05c96788b0de1bd13e390445433d96737b964fa8af2ac4b2f0f9390ca93d8d3d810044d024359e067c4553230ab748947d33f8fc115ce9a49e6571c45a05d786cbd49342c236537dbbeec666b07baab917252113a5b9a77283189b518f356debe42d80cf2d0687b9c64d0253a6a09286fded6e4f8557b8fb4f25ca4fb138af8945c74bbc98748eaaa030be5317646f195e6e085ac6ddb29542e3581961259987241f7e7061526a7afec8962e74215fea43703a4e543ee9d1a3c3f5f2a41977ece8fdadcf89ce331ce59bebae5f53513d0e10485d7ddbda60513bf339602510b3a23ea29a0d5d03a61e34d12942ea4a847c884b27b5344a456d02a55f8929cc567e7c792c01fab7a7b32780a14c361000609b817dd91507b04d875279527946fdb8fb92a512485e234d092c28f1d0a0498731ccc0eb10515d510e8945839307b46512ceca6f495fdd2c6ae5eb2ef3b2a40ebdc7edf0048e3fb5e3d97a9ea5113a6b70d20ad5c43f0df95d88c0f121a1884da21a21f0ba47420f8391a97921cc51871dbb272e43710fe71d5e342c3afd10608a8b02f00e8fbd8d570b6faace86c494ecea8913233391e7b7cec3d571bb3032181ed58e1b513e511f79ee562c8cde9b3b74c2e95dcde7fadb5a666bdc0c1684794620ce8cf0c0aee8e90b3ef6e7160d3f055cb4d1ced32e4edc15e7d102952d3237e6c02c591a95a182bf190c0124abc7f1225332ff1c5e1b94e4e9bf02c1a18bd7bfce20707f7298da322560bc1a4cf298d46f5bf8ff41da21e25aa17f65f9ee43ca890b5ef6a3ccf3efedf3ca60a9acef1352ad0c43e6cf375108cf0974ce89a99adba7e6a3f8949dc573440fafe0e3abdd0066057a2d868e8386080f18a421568d8e7a89536a4173861bd55245c8fcf7dcba18edce36d2e85b9630fbc218db9ebd16abb11ac06fdbf2bc3e6394d4c6e7ae71813d30772d487743a2856348fee09989ce03331e7848770fc91e62191c20fe5f4a73c5dae467dd612bdb63b1e50921d38271305d7412103d5a6214d6d534d1d530b9169f882b6926bbd338f0282a8bd9a44603934e5249e83f1d0947b39f82a7843d2b6f796d8abf7ff3e66cfd4519324d71cebbf6580dffc10d555e479e9acaa12c3c59e3732c181aa4223d0fcdac514e9d7c7963c2634964520286b028f60a4ae612b8e6049315139e884cbffd6836253094ad023329183496cf663366ad4d7f7f5f1bd2db9b0d33f106c041fba4494c7da404d45d8955e5459ca4a62862721ec1fa534fd95e262c5814426816e60000000000000000001aa4fb6f40ec24f42f6949cc28d2a0d4eb61cb1664627582d962523586539445b81e9759321652280ecb", 0xffe3, 0x6000000000000000, 0x0, 0x0) 7.604625759s ago: executing program 6 (id=487): r0 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x50a, &(0x7f0000001f40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0x322020, &(0x7f0000000280)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x260042, 0xfa) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, 0xfffffffffffffffe) 7.521207853s ago: executing program 6 (id=489): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c1341, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900010073797a30000000000900020073797a3200000000300004802c0001800b00010065787468647200001c0002800800074000ebd7873942a8cb6f00010000000000000105000200940000001400000011000100000000000000"], 0x84}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="5b5e26bd7000ffdbdf2501000000050004000100000008000600ac1414aa08000b00e6"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) 7.144262126s ago: executing program 5 (id=495): mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xf000, 0x3, &(0x7f0000009000/0xf000)=nil) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000480)=ANY=[], 0x1, 0x2a4, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x52142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$inet6(0xa, 0x400000000001, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000100)={0x190, 0x2000, 0x640, 0x80, 0x6, 0x400000, 0x18, 0x0, {0x8000, 0x0, 0x4000000}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x5}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x8, 0x0, 0x3, 0x4}) sendmmsg$unix(r0, &(0x7f0000000000), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$poke(0x420e, r4, 0x0, 0x100000000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x398, 0x2a0, 0xffffffff, 0xe0, 0x188, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) r6 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r6, &(0x7f0000000040)=[{{&(0x7f00000000c0)={0xa, 0x0, 0xfffffffc, @mcast1, 0x97}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000180)="8000102e7577c4", 0x7}], 0x1, &(0x7f0000000100)=ANY=[], 0x28}}], 0x1, 0x4) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001740), 0x800, 0x0) vmsplice(r7, &(0x7f0000000300)=[{0x0}], 0x1, 0xc) mkdirat(r7, &(0x7f0000000000)='./file0\x00', 0x0) 6.316855091s ago: executing program 5 (id=506): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x16, 0x0) io_setup(0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x92c0, 0x10, 0x6, 0x7fff7ffc}]}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 5.409524332s ago: executing program 5 (id=509): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002780)=@raw={'raw\x00', 0x3c1, 0x3, 0x12e8, 0x1120, 0x178, 0xc, 0x1120, 0x178, 0x1218, 0x258, 0x258, 0x1218, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0x1100, 0x1120, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}, @common=@unspec=@addrtype1={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@private1, @mcast1, [], [], 'wg2\x00', 'hsr0\x00', {}, {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1348) syz_open_dev$usbmon(&(0x7f0000000040), 0x5, 0x200) r1 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r1, &(0x7f0000001600)=""/102362, 0xfffffffffffffcf8, 0x20008002, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) 5.216419269s ago: executing program 36 (id=509): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002780)=@raw={'raw\x00', 0x3c1, 0x3, 0x12e8, 0x1120, 0x178, 0xc, 0x1120, 0x178, 0x1218, 0x258, 0x258, 0x1218, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0x1100, 0x1120, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}, @common=@unspec=@addrtype1={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@private1, @mcast1, [], [], 'wg2\x00', 'hsr0\x00', {}, {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1348) syz_open_dev$usbmon(&(0x7f0000000040), 0x5, 0x200) r1 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r1, &(0x7f0000001600)=""/102362, 0xfffffffffffffcf8, 0x20008002, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) 5.14451186s ago: executing program 6 (id=514): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffc0000, {0x0, 0x0, 0x0, r1, {0x0, 0xc}, {0xffff, 0xffff}, {0x9, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x38, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x29, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x0, 0x2, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xf723}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xb3}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x918d}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40001}, 0x10) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x28541, 0x140) setxattr$trusted_overlay_opaque(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0, 0x1) sendmsg$AUDIT_ADD_RULE(r3, &(0x7f0000000d00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000840)={0x444, 0x3f3, 0x4, 0x70bd27, 0x25dfdbfd, {0x5, 0x0, 0x39, [0xf, 0x0, 0x1, 0x8, 0x1, 0xc, 0x4, 0x4, 0x0, 0x0, 0x2, 0x10cac41, 0x93a1, 0x6, 0x200, 0x8001, 0x6, 0x9, 0x46, 0x4, 0x0, 0xba, 0x8, 0x4, 0x10001, 0x8001, 0x10, 0x7, 0x68a3, 0xe0000, 0x2, 0x1f, 0x7ff, 0x201, 0x6, 0x3, 0x1, 0x2, 0xffffffff, 0x3, 0x3ff, 0x3, 0x3e, 0x3, 0xa57, 0x4, 0xa, 0x8, 0x0, 0x5, 0x71c, 0x9, 0x5, 0xa, 0x29f3, 0x7, 0x80000001, 0xffffffff, 0x4b0, 0x7, 0x40, 0x6, 0x2], [0x6, 0x9c, 0x10, 0xfffffff8, 0x2, 0x2, 0x8, 0x80, 0x2, 0xfffffffb, 0x29, 0x6, 0x8, 0x1, 0xda4f, 0x3, 0x17ce, 0x5, 0x2, 0x7, 0x4, 0x8000, 0x80, 0x1, 0x8, 0x8, 0x8521, 0x100, 0x7f, 0x0, 0x4, 0xd7, 0x9, 0x8, 0x0, 0x8, 0x8, 0x3, 0x58fd, 0x8, 0xe, 0x9, 0x3, 0x6, 0x9, 0x1, 0x2, 0x0, 0x100, 0x8000, 0x3, 0xf635, 0xffffffff, 0x8001, 0x80000000, 0xffffffff, 0x4, 0x7, 0x8001, 0x6, 0xc6c, 0x0, 0x3708, 0xfff], [0x8, 0x2, 0x40, 0x1, 0xfffffff4, 0xe36d, 0x10000, 0x5, 0x80, 0x8000, 0x7, 0xb, 0x92fe, 0x3e, 0x1, 0x1, 0x816f, 0xc, 0x1, 0x6, 0x3, 0x7, 0x0, 0x472d, 0x3, 0x9, 0xff, 0xa0, 0x3, 0x726, 0x2, 0x36d, 0xfffffe00, 0x9, 0x73c, 0x8, 0x9, 0x7, 0x0, 0x6, 0x4, 0xff, 0x1, 0x8001, 0x0, 0x8, 0x1, 0x8, 0x40, 0x80, 0x0, 0x1ff, 0x8001, 0x9, 0x1, 0xcb7e, 0x4, 0x8001, 0x3, 0x6, 0x4, 0xe88, 0x0, 0xd80], [0x4, 0x100, 0x7, 0x7e, 0xfffffffd, 0xe, 0x8, 0x6, 0x8, 0xffffff81, 0x10000, 0x5, 0x9, 0x3, 0x8, 0xe0000000, 0xffffffff, 0x2, 0x6, 0x0, 0xb, 0x3, 0x4c, 0xfffffffe, 0x7, 0xfff, 0x5, 0x6, 0x7fffffff, 0x1, 0x63, 0xfff, 0x7fffffff, 0x9, 0xfffffffe, 0x80, 0x5, 0x8, 0x9, 0x81, 0x401, 0x8, 0x9ee, 0x9, 0xc33c, 0x67d0, 0x4, 0x0, 0xb, 0x9, 0xd2e, 0x8d9e2fa, 0xfffffff7, 0xda172800, 0x7, 0x40, 0x3, 0x5f2b, 0x9, 0x3, 0x7, 0x1, 0x9], 0x22, ['-#::/*^+\x00', '\\\x00', 'trusted.overlay.opaque\x00']}, ["", "", "", ""]}, 0x444}, 0x1, 0x0, 0x0, 0x80}, 0x20004040) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x103500, 0x1) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000006880)=@v1={0x0, @adiantum, 0x2, @desc4}) 4.944646882s ago: executing program 37 (id=514): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffc0000, {0x0, 0x0, 0x0, r1, {0x0, 0xc}, {0xffff, 0xffff}, {0x9, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x38, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x29, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x0, 0x2, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xf723}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xb3}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x918d}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40001}, 0x10) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x28541, 0x140) setxattr$trusted_overlay_opaque(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0, 0x1) sendmsg$AUDIT_ADD_RULE(r3, &(0x7f0000000d00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000840)={0x444, 0x3f3, 0x4, 0x70bd27, 0x25dfdbfd, {0x5, 0x0, 0x39, [0xf, 0x0, 0x1, 0x8, 0x1, 0xc, 0x4, 0x4, 0x0, 0x0, 0x2, 0x10cac41, 0x93a1, 0x6, 0x200, 0x8001, 0x6, 0x9, 0x46, 0x4, 0x0, 0xba, 0x8, 0x4, 0x10001, 0x8001, 0x10, 0x7, 0x68a3, 0xe0000, 0x2, 0x1f, 0x7ff, 0x201, 0x6, 0x3, 0x1, 0x2, 0xffffffff, 0x3, 0x3ff, 0x3, 0x3e, 0x3, 0xa57, 0x4, 0xa, 0x8, 0x0, 0x5, 0x71c, 0x9, 0x5, 0xa, 0x29f3, 0x7, 0x80000001, 0xffffffff, 0x4b0, 0x7, 0x40, 0x6, 0x2], [0x6, 0x9c, 0x10, 0xfffffff8, 0x2, 0x2, 0x8, 0x80, 0x2, 0xfffffffb, 0x29, 0x6, 0x8, 0x1, 0xda4f, 0x3, 0x17ce, 0x5, 0x2, 0x7, 0x4, 0x8000, 0x80, 0x1, 0x8, 0x8, 0x8521, 0x100, 0x7f, 0x0, 0x4, 0xd7, 0x9, 0x8, 0x0, 0x8, 0x8, 0x3, 0x58fd, 0x8, 0xe, 0x9, 0x3, 0x6, 0x9, 0x1, 0x2, 0x0, 0x100, 0x8000, 0x3, 0xf635, 0xffffffff, 0x8001, 0x80000000, 0xffffffff, 0x4, 0x7, 0x8001, 0x6, 0xc6c, 0x0, 0x3708, 0xfff], [0x8, 0x2, 0x40, 0x1, 0xfffffff4, 0xe36d, 0x10000, 0x5, 0x80, 0x8000, 0x7, 0xb, 0x92fe, 0x3e, 0x1, 0x1, 0x816f, 0xc, 0x1, 0x6, 0x3, 0x7, 0x0, 0x472d, 0x3, 0x9, 0xff, 0xa0, 0x3, 0x726, 0x2, 0x36d, 0xfffffe00, 0x9, 0x73c, 0x8, 0x9, 0x7, 0x0, 0x6, 0x4, 0xff, 0x1, 0x8001, 0x0, 0x8, 0x1, 0x8, 0x40, 0x80, 0x0, 0x1ff, 0x8001, 0x9, 0x1, 0xcb7e, 0x4, 0x8001, 0x3, 0x6, 0x4, 0xe88, 0x0, 0xd80], [0x4, 0x100, 0x7, 0x7e, 0xfffffffd, 0xe, 0x8, 0x6, 0x8, 0xffffff81, 0x10000, 0x5, 0x9, 0x3, 0x8, 0xe0000000, 0xffffffff, 0x2, 0x6, 0x0, 0xb, 0x3, 0x4c, 0xfffffffe, 0x7, 0xfff, 0x5, 0x6, 0x7fffffff, 0x1, 0x63, 0xfff, 0x7fffffff, 0x9, 0xfffffffe, 0x80, 0x5, 0x8, 0x9, 0x81, 0x401, 0x8, 0x9ee, 0x9, 0xc33c, 0x67d0, 0x4, 0x0, 0xb, 0x9, 0xd2e, 0x8d9e2fa, 0xfffffff7, 0xda172800, 0x7, 0x40, 0x3, 0x5f2b, 0x9, 0x3, 0x7, 0x1, 0x9], 0x22, ['-#::/*^+\x00', '\\\x00', 'trusted.overlay.opaque\x00']}, ["", "", "", ""]}, 0x444}, 0x1, 0x0, 0x0, 0x80}, 0x20004040) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x103500, 0x1) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000006880)=@v1={0x0, @adiantum, 0x2, @desc4}) 1.9094527s ago: executing program 8 (id=530): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x10, 0x2, 0x6}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xe}}}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r1, &(0x7f0000000400)={&(0x7f00000003c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000000c0)="257c01", 0x3}], 0x1, 0x0, 0x0, 0x4c840}, 0x4000001) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)="0b032200e0ff2500021d07540006a13bb1000000080086dd4803", 0x10000, 0x0, &(0x7f0000000140), 0xffffffffffffff49) recvmmsg(r1, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000a40)=""/188, 0xbc}], 0x1, &(0x7f00000008c0)=""/102, 0x66}, 0xfffffffc}], 0x1, 0x12360, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x403, 0x6, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x58}, 0x1, 0xba01}, 0x810) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) landlock_restrict_self(r4, 0xc) 1.752627464s ago: executing program 8 (id=531): syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) 1.599539131s ago: executing program 7 (id=532): syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000080)={0x0, 0x0, 0x20}, &(0x7f00000000c0)=0x18) (async) r3 = getpid() syz_pidfd_open(r3, 0x0) (async) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000280)=r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x30, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='|'}, @NL80211_ATTR_MAC_HINT={0xa}]}, 0x30}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r7, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x540f, 0x0, 0x402) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRESOCT, @ANYBLOB="1b366217c824d9187ef27a878ecb619a73c707d2310d28075c680a965fa2aa6aad7c38f756a9c06e025efc0789af3d7bb35aee2f02b9962b5c3c47b8c9d4d38036e2e698fff58ce4ac98df3e5d8b0a0f41b1d22af08370ed3f40a55092de0e68d2434227631674956767dd9c75c51847f3ed22880397970dd8385c76542353efc0e36db4a103209f50e1", @ANYRES64=r5, @ANYRESDEC=r6], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_DELRULE={0x0, 0x8, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_RULE_POSITION_ID, @NFTA_RULE_POSITION_ID, @NFTA_RULE_HANDLE={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x0, 0x4, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @tproxy={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR, @NFTA_TPROXY_REG_ADDR={0x0, 0x2, 0x1, 0x0, 0xe}, @NFTA_TPROXY_REG_ADDR={0x0, 0x2, 0x1, 0x0, 0xe}, @NFTA_TPROXY_REG_PORT={0x0, 0x3, 0x1, 0x0, 0x14}, @NFTA_TPROXY_REG_PORT={0x0, 0x3, 0x1, 0x0, 0x8}]}}}, {0x0, 0x1, 0x0, 0x1, @exthdr={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x0, 0x4, 0x1, 0x0, 0x1c}, @NFTA_EXTHDR_OP={0x0, 0x6, 0x1, 0x0, 0x3}, @NFTA_EXTHDR_FLAGS, @NFTA_EXTHDR_OP, @NFTA_EXTHDR_FLAGS={0x0, 0x5, 0x1, 0x0, 0x1}]}}}, {0x0, 0x1, 0x0, 0x1, @lookup={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS, @NFTA_LOOKUP_DREG={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_LOOKUP_SET_ID, @NFTA_LOOKUP_SET={0x0, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SREG={0x0, 0x2, 0x1, 0x0, 0xb}]}}}, {0x0, 0x1, 0x0, 0x1, @dup={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV, @NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0x1aa9e9f72d17229b}, @NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0x16}]}}}, {0x0, 0x1, 0x0, 0x1, @counter={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0x0, 0x2, 0x1, 0x0, 0x2}]}}}, {0x0, 0x1, 0x0, 0x1, @redir={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @numgen={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x0, 0x4, 0x1, 0x0, 0x9}]}}}, {0x0, 0x1, 0x0, 0x1, @osf={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @tunnel={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @exthdr={{}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x0, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0x0, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x1b4}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 1.495460473s ago: executing program 8 (id=535): unshare(0x14040400) unshare(0x20000) r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x1e, 0x1, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0x74, 0x30, 0xb, 0x70bd27, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x6a, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x3}}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xffff}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno', 0xa) file_setattr(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x1ba8, 0xd9, 0x3, 0x1000c, 0x3f91}, 0x18, 0x1000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x8000}, &(0x7f00000002c0)=0x8) 1.392609884s ago: executing program 7 (id=537): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000240)={[{@mblk_io_submit}, {@nodioread_nolock}, {@noquota}, {@debug}, {@noblock_validity}, {@nojournal_checksum}]}, 0x1, 0x5b7, &(0x7f0000001380)="$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") prlimit64(0x0, 0xe, &(0x7f0000001940)={0xe, 0x400000000008d}, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0xa) r0 = getpid() prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001340)={0xffffffffffffffff, &(0x7f0000000340)="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"}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_int(r2, 0x1, 0x22, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 1.392103374s ago: executing program 1 (id=538): r0 = socket$inet(0x2, 0x4, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x70, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002000), r3) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000002280)=ANY=[@ANYBLOB='5\'\x00t', @ANYRES16=r4, @ANYBLOB="010029bd7000fddbdf250100000005001100f8000000050007000b000000"], 0x24}, 0x1, 0x0, 0x0, 0x4040840}, 0xc044) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f000000a340)=[{{&(0x7f0000000480)=@file={0x0, './cgroup\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000540)="689a06f8b42ca10f0ef6a32938fbf5bc7c9b11106ad4d44fc78bfadc266fae67f431fb93", 0x24}], 0x1, 0x0, 0x0, 0x4000}}, {{&(0x7f00000005c0)=@file={0x1, './cgroup\x00'}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000640)="8d09fe9663eb1833f951c98b0f3ea0d10b06773fe19b8460b3996614a239f187aa41cb2c5e3e98453c543b917985767e5170700ca596716ba95f896da46262335b73d900dad118815c326f7e8437cbf69c245769c16360e6b1a4953610700ead494289ea70e7854c9bd874d9e2a72179449ea98dbcc5f6e24ee7dd55072cd16e4c151e3b720ab99789ea51c73aeb7b32ebfe2666991f666e621722a86f26307159035bd46c27c1da337c4b727f6010fb4aa88deaa4ba3ac7de2141e029e980", 0xbf}], 0x1, &(0x7f0000000b40)=[@rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x28, 0x1, 0x1, [r1, r1, r1, r6, r6, r1]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x14, 0x1, 0x1, [r6]}}], 0x108, 0x40000}}, {{&(0x7f0000000c80)=@file={0x0, './cgroup\x00'}, 0x6e, &(0x7f00000011c0)=[{&(0x7f0000000d00)="5799f8c12f30ba747d5a485281af21c69bc3ff036797c0d53039a8e10429643ddc385b81ee676f34b41bfa9ecd6640a4c231886b1e6568443204e784dbfa284801f0d604047a3f5f615d9f2dedceebbf04fe5ece1a1eec548ff7a0d8eb69bf686dfeabcdc0a08d8faf14b2895fe0421efb272ea01cde794b1b93cd40f263bd4b6f14eecac677b3f8a56e5af98523603e7525bade4fe56863d2bb7556f544e9b26f1ea198e1ddb12651acb593d736614f98ef66dd629067bd030b7cf154075bf2070f05ba70baf4ebbfc3865f9bf757aa", 0xd0}, {&(0x7f0000000e00)="304b6533f38575fba20b26bdf785d791", 0x10}, {&(0x7f0000000e40)="2411369f1153094b546f31a1fbb45893c2eb7d1377940cd40186447c78f18e730e7675e3ebf63bb3ed260c7b48ed18f81bf90582c180", 0x36}, {&(0x7f0000000e80)="3b1278f6565fc47823c3191d2b296d51b0851a80bef82e9072e8bd8c7c83f27cdc800dfc60f4f08742610ce7c9cd12dc60e65f538bf493b71cdd6dd477b61ee6f7ce41125d348bbfd5b167d2bdd122d9b97f8db71536e5c311af7282fb943fe5e497ce21143acf46ab2a7e15179e9c9d8da1364e455f45a6181ceb8e98287b0db83428955282f9febf640ef009c567bfd6f0aa9d57374eb253771a16772f2564dfd87789640c1ca6a6688a977498f5a143128726d1b20211cdc125a8958abe6ce995f45eb98589e30ac56cfac51db269e32a3974af261268d0f51126cb1a273a1c64f35a21ebbeaa2a175e26474b7a234fecdfed143dac02cb951003c6", 0xfd}, {&(0x7f0000000f80)="632270de134562e33d7a989364a7138869506ed76a77fd889bb81daed014963518c0087480be956b86943f2ea4e75ed8", 0x30}, {&(0x7f0000000fc0)="844bc5e8b3d4401879623a69e234f9de2083bbaf07347725bf5626d8e582bacd4479f4f561ef0f5949d7e63660b5f2da0ea57ca51a782caa104f61d4e4a71520393f79a31479b01202f011c7e59e7e773a53bf9ea50875bc197b67133b11b792f7b0706e4e8db704e7", 0x69}, {&(0x7f0000001040)="cf2cd59c775ef8c5dd62672aa3765771445f060718a6428568c13a36cb89d7554011570051ec4966fab63c1c1e2eb8eafce20e4fd3ae9eedecb6c53bc3f00a0764d901cbd2558dd839ba7caba4fe027c77d20ccad0bdb2537cae3593507a4fa66d2b5ff2995dce3298c18f1c709ebe75e9f9ff32a12a78795569b3753b9e8b650b0e40e2eb", 0x85}, {&(0x7f0000001100)="0fbe3bc970b71c690567b9bcbdcd148181e8990bd43b79e8e51db19b5b13bed35f28b82b0eb515288fefb042cc387bd6a80cb738a5d45c2413f7fab023a43d6d1924082c85724438e6e5d0729907d30c180235b9279342deb165b412802e2f00e6758598dbd003ee27cbfdd2032fe676bb82764a34d09a4d0a0a53c9ef2c3c2f43fff489c1b9fe4c3e4eb98cb1ae43bbd68dd4e92537b63c55dc2d28", 0x9c}], 0x8, &(0x7f00000012c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c}}], 0x80, 0x800}}, {{&(0x7f0000006200)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000006900)=[{&(0x7f0000006280)="db974e981d1a9b74c608924e80f1f7edc535804d1d1baef5", 0x18}, {&(0x7f0000006380)="077299867069dfc84df698dc198902de9d6cd4a54f57c9b3bfc0bf80cb677fda8894ef16feeb0611093975bd70a607b54ccbd268b37990cac171771ad1a4739637641876206a09389da831a129e28d0441a77b4014b328c09f9fdb243b591ac2c821b847c1efee2757d20abc850d4039fe33b390673e514c4c6ba1cb923919cac937c974f1a27ca8a7cf466c6001ae48a057e39da2634f0823aca9f2cb0ff35f811e9c5d644b872da43dd768b29b7a51d60db97cfda9d970ac48e85a620ffd8bacca0806c6bce52e18ac0301e35c12d3d082a88c9e1c4355ddc8ec81756884b15689d3179d5f8ec738f3d83fa92ccd5a77a291a5", 0xf4}, {&(0x7f0000006480)="8f47927f339b77ccc65ef842154e8ac1aac22f2303570730b9b2274a65e6fd362d38ed5273e72b3cd97c8709440f04289a1df67b0ab6df514c846800ad118b4ba91d2bf3aa03f3079beed32231b2d2313ebb74e5e3be591da69792ed2b4dddc71b5508721341f195cc62c2fde1dc8273e22dfe7be42aa0aa6c0b0d4bba5421ebfd83207f16f8d03838de8d7e6f17fec2e402c6a3934ff991d06c788dc55fea924dede7858642c8955b2ad0980afa8c30eda0e50bf64abc38d5381ba07520c267fd4af3a20127e5b1f9252cd22b2522c07629be7abf054338fae20caf6bca", 0xde}, {&(0x7f0000006580)="90ea7221c2716ebc5575b3fb5cc1a9028a1f5ae69c72e9cac3a8c5d7849e19653dda45d8c4ba7204bd7566d7b055e3a23d6d3480b7cbc91b18adcb8f1faa49dbe994f7a2a66f7039fb599812c34e80040f63bd064a0ac0b152c44abf0cf71ea03d15187a61ea084e6c64a71989a8dae3c737c767700c85551bdfcb0ff6e8527f5cd723da2a764d241931185e942ca51411eee58b9d", 0x95}, {&(0x7f0000006640)="3836674d39a53632a3ed7e464ba97a3201fa2349a65b33f536f9ddefbdff868403b1f631e8a8c9845679e17437c390c83484ee", 0x33}, {&(0x7f0000006680)="2230f61e89ae69d0cdd703a510adbd224dd08d7c0a464f657e00f7f16362650feabfd054af270e681eb02dd9bc396a776e0ce2cb890df81f0d0131ab80a10e4629f364d757d22271b90f133812565eaccacdae331226f58fd26be85f0529220bcbbda21443f7733f0b", 0x69}, {&(0x7f0000006700)="f164818ac690eb26c79690b55675e520b4914b04d86188ed95dbffb84340bba4e5372f07a45dcdfce4326fcfbc173b25dbe81f9abe56931654c1a62e4480f0fd09051567372276466a63df3dd2e44d5ef4199ab89215ae80da7be25b2f004c6496ff5bca59de026461ccb7d91d4cba427b7751624053", 0x76}, {&(0x7f0000006780)="34259df6ff9b02a834d4f10450202aa3e1e2c49b745826e2a9041ae685f83c5d9fce5569285b21af3b8af78478386831ca9fff9c2f990087ec3031057ace086034e6f9d1890d42acb883500c6ddf4f6ba7f847a0fd3dac48d4382c5c71d3855fd9078aef7979bf71e08ca19416dbe95d9a9bb8cde4dfac420de28f9a6bb3ba2a5de22d640a8789d525ec8a0816b045166bdc24393174e3a117864101f04e65e6cddac8b03881958c7e129899694cfa0f584d6d7598b56f9f42f9d9092f7d27e280a559997fbf01fd5f8638fffc30d8ee197c183201f557d5ba5bf90a758faac7222ea858ea9118ee13c4e3947ba9a62280eb52942b59e4", 0xf7}, {&(0x7f0000006880)="dbcf6941bf6bacd7778b6f100501876e6f027e684199581f2eeb6263421c31ddafd5cc88e89214ed6819b7532336d9915699435c1c1688151c798259747f4468300c96661df4ce0e6f32d566014d", 0x4e}], 0x9, &(0x7f0000006a00)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r6, r0, r5]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120, 0x4000040}}, {{&(0x7f0000006b40)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000006c80)=[{&(0x7f0000006bc0)="8fe34e9f42893d3501aff2d8adb0fe237809c34f4dc717f7c2d05290d32c52d07596ed8f011fc71887468612362d4064b8d41876890ef5068a600def98310572201d4f395937229802779d051f832a823eb9594686e7d7bf47279c14b18936ead9c2207a10e8700f22dc2784c5429fbf5f6272131acd6d788f97a60813bd1826365a5e2c468b7b2689279da89ea21a8d4b8ada659360f40a990373e751c9592bd5e1bb816f388e1da76745499f5be643875c434fc88a74bfcf8515afec", 0xbd}], 0x1, &(0x7f0000006cc0)=[@rights={{0x2c, 0x1, 0x1, [r5, r1, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}], 0x30, 0x4000004}}, {{&(0x7f0000006d00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000a300)=[{&(0x7f000000a280)="2342dbda90a4c3aec08bca01bef7bf21b02790756c32937ae184705258358e22db9f133eda245bae7b2dbd213386684718f0820b987dadff00417458c302c44edbdbd02b0de40ca40a52ba9ef883aee5555dc84c1b39", 0x56}], 0x1, 0x0, 0x0, 0x24000804}}], 0x6, 0xc005) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat(0xffffffffffffffff, &(0x7f0000000180)='./cgroup\x00', 0x81c0, 0x800) r7 = syz_open_procfs(r2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4004041}, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0x20) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000000)=r8, 0x4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000140)={0xa, 0x6e22, 0x0, @empty, 0xc70}, 0x1c) getsockopt$sock_buf(r7, 0x1, 0x3b, &(0x7f0000000300)=""/196, &(0x7f0000000440)=0xc4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r10, r11, 0x6, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}, 0x40) write$cgroup_int(r8, &(0x7f0000000040)=0x1c9, 0x12) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x5, 0x4) 546.969957ms ago: executing program 8 (id=539): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (async) userfaultfd(0x80801) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = dup(r1) (rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) accept4(r2, 0x0, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000004140100000000000000000008000300000000000800", @ANYRES64=r3], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x814) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async, rerun: 32) r9 = geteuid() (async, rerun: 32) r10 = getuid() r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) r12 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r12, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r11, r13, r14) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x22080, &(0x7f00000004c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x34, 0x37, 0x1b]}}], [{@fowner_lt={'fowner<', r9}}, {@permit_directio}, {@fowner_gt={'fowner>', r10}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'cpu.stat\x00'}}, {@dont_measure}, {@appraise_type}, {@euid_lt={'euid<', 0xee00}}, {@euid_eq={'euid', 0x3d, r13}}, {@smackfstransmute={'smackfstransmute', 0x3d, '#'}}]}) 523.521919ms ago: executing program 1 (id=540): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x90000, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000200)={0xb, 0x84, "11ae563bca38205081c79f8032b36bfecd02607891b690f1b18c6e13e5a996ff1cbb290578748c8e7f2fe77eb26eed4ad85dce8b0ead16102db0f88096fa09d75a58177c55b14922c701c77d867b9ac4dcef0262c5b5068a350bd77b97ea90dc8eed13f9046f8d1f9c1b9da49b554a23e3bda04433a586f348e07b5341f67020474730de"}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04f74120"], 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2e}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 476.584411ms ago: executing program 7 (id=541): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40440, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$XFS_IOC_ERROR_INJECTION(r0, 0x40085874, &(0x7f0000000140)={r0, 0x2}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001300)=[{0x0}], 0x1}, 0x0) madvise(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x15) madvise(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x64) close_range(r0, r0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)="e2", 0x1}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) fsopen(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfdfffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000800) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r2, 0x402c542b, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000000)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 456.173523ms ago: executing program 1 (id=542): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") socket$inet_tcp(0x2, 0x1, 0x0) inotify_init1(0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$igmp(0x2, 0x3, 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r2], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x9, [@int={0x3, 0x0, 0x0, 0x1, 0x0, 0x36, 0x0, 0x71, 0x6}]}, {0x0, [0x2e, 0x30, 0x30, 0x2e, 0x61, 0x5f, 0xdc]}}, &(0x7f0000000200)=""/114, 0x31, 0x72, 0x0, 0x152}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x20, &(0x7f00000004c0)={&(0x7f0000000340)=""/111, 0x6f, 0x0, &(0x7f00000003c0)=""/237, 0xed}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000540)={0xffffffffffffffff}, 0x4) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000001040)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x2, 0x0}}, 0x10, &(0x7f0000000940)=[{&(0x7f00000009c0)="1c", 0x1}], 0x1}}], 0x3, 0x48000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000040)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x10) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r6) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) 446.552367ms ago: executing program 8 (id=543): openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0xc0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='-'], 0x6) r1 = socket$nl_crypto(0x10, 0x3, 0x15) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000001000000000000010"], &(0x7f0000000100)=""/141, 0x26, 0x8d, 0x1, 0x7}, 0x28) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x61}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000200001002cbd7000fedbdf250220102d00000004030001000800100008000000080002"], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0xc31fe084736598c) syz_socket_connect_nvme_tcp() mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000002e80)={'wg1\x00', &(0x7f0000002d80)=@ethtool_rxnfc={0x31, 0x1, 0x9, {0x5, @ah_ip6_spec={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x0, 0xa}, {0x0, @random="7850717a7704", 0x3, 0x7, [0xf, 0x80]}, @hdata="6a6604bd0b37243d389fc242f228ebfc6016b5f5671bf4b52cf7130065451016ee803e635258cb8be9ad9d0c9a8dd05ce77a6b7f", {0x0, @local, 0x0, 0x0, [0x14, 0x1]}, 0x9, 0xfffff10b}}}) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="639c95140e924b3000"], 0x1, 0x167, &(0x7f0000000240)="$eJzslbtOAkEUhv+B4aKxoNaGxBsWyjKoMbGh8BEsLSSwInHxwpIohMja+RTyCpaWvgWvYGIssDQxa2bnzDBsr4nJkrDfuWT+OTPFP+f+jZ8D8D0dNlAAGOR/Ce+MgQNYkQUAJzlFEI+Ib1xxPav4TPwk+v3BRd3z3O4vBn+xRxIkQRL8t2CWHj6k8BF52WQ6bJCpmV8TgN1Px3rLHEgjNH0O5ZSbAMq9znXZ7w+22516y225l0JU951dx9kT5bO25zrqyyz5FElLbpGnLlj9jLX9YmxUPfo9Ga+9TnruKfVLq/Pr5F5hGIawONN8NRra5+UVHGMDeQC3AbOqxUiNIzpWDQxpSio8NmMK+aix07jymiMwML1sDG40KhNkTCLspFoI9HEeuVJ9onflINDDj4hFYo04Jk6I+iV7IQUeKXxRVgqALO7qvV63IksqMjVhaqIQ2Fe6BiCfmz+2oPwnAAD//2EYVFA=") 300.312118ms ago: executing program 1 (id=544): syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) 299.800797ms ago: executing program 7 (id=545): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000140), 0x1, 0x25f, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @aes256, 0x1, @auto="ce48ca4cbadfac4e"}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xfe, 0x2b7, &(0x7f0000001340)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f000017f000/0x1000)=nil, 0x1000, 0x1000004, 0x28011, r1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fedbdf25020202000900010073c4cb19af00000081b226e03ece8b8641291b47b7a30ccb5aa584783006676d083444"], 0x20}, 0x1, 0x40030000000000}, 0x80) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000009179aed110ecdced1d28fc2c203260f5557a493bbdd0f4daeb153b95b976d4171ad943cc6250f8740cde2bd8e3422688d48b27a442140800e1b9", @ANYRES16=r3, @ANYBLOB="000125bd7000ffdbdf25010000000500040001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x400e801}, 0x20000010) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_GET_TSC(0x43, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000540), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r7, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0xd4, 0x0, 0x0, 0x6}, 0x0, 0x0, &(0x7f0000000040)={{0x0, 0x100000}}, 0x2, 0x0, 0x80}}) 197.515431ms ago: executing program 1 (id=546): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x50, 0x20}, {0x20, 0xfe, 0x0, 0xffff700c}, {0x6, 0x8, 0x0, 0x3}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x50, 0x20}, {0x20, 0xfe, 0x0, 0xffff700c}, {0x6, 0x8, 0x0, 0x3}]}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@deltaction={0x34, 0x18, 0x1, 0x0, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x20, 0x1, [{0xb, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8008001}, 0x40c0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x13) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x13) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x100000e) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x100000e) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000002440)=0xd) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000180)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_vlan={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x60}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={[0x1]}, &(0x7f00000000c0), 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r3, 0x0, 0x1, 0x8ffff) (async) fallocate(r3, 0x0, 0x1, 0x8ffff) rt_sigsuspend(&(0x7f0000000100)={[0xf]}, 0x8) (async) rt_sigsuspend(&(0x7f0000000100)={[0xf]}, 0x8) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x4000) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x4000) recvfrom$l2tp6(r3, &(0x7f00000001c0)=""/102, 0x66, 0x7642e8f8096ce289, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote}, 0x20) madvise(&(0x7f0000612000/0x2000)=nil, 0x2000, 0x0) write$binfmt_script(r3, &(0x7f0000000140)={'#! ', './file0', [{0x20, 'Q$*\x92$'}, {0x20, '\\'}, {0x20, ':'}], 0xa, "9955bfe69407586ed2ef1e8782d99bbba97fb08dea9e8a37df4b6949be59eaad5778dc85891e9e1b0d"}, 0x3e) write(r3, &(0x7f0000000340)="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", 0x1000) 132.477168ms ago: executing program 8 (id=547): unshare(0x14040400) unshare(0x20000) r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x1e, 0x1, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0x74, 0x30, 0xb, 0x70bd27, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x6a, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x3}}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xffff}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno', 0xa) file_setattr(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x1ba8, 0xd9, 0x3, 0x1000c, 0x3f91}, 0x18, 0x1000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x8000}, &(0x7f00000002c0)=0x8) 131.866232ms ago: executing program 7 (id=548): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x2005) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) (async) r2 = openat$smackfs_access(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/smackfs/access\x00', 0x2, 0x0) writev(r2, &(0x7f0000000a40)=[{&(0x7f0000000680)="40decb2540edd0f4218dc5c618268bb9363ae212675f46ea278af9cf8130fcec4d92a7561866559c1098136938a7427424c9eb69bc47", 0xff7}], 0x1) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000100)=[@increfs, @decrefs={0x40046307, 0x3}], 0x0, 0x0, 0x0}) (async) r4 = dup3(r3, r1, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r6, &(0x7f0000000280)={0x10, 0x30, 0xfa00, {0x0, 0x1, {0xa, 0x4e23, 0x9555, @private2={0xfc, 0x2, '\x00', 0x1}, 0x18}}}, 0x38) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000001080)="7ac38eec45ca1d815e0a3c414cceeaa2cd5c40924eda883d602a472ddda34fa0b8e254b3d2203f374ada444030a706cffeeb13a2a0a1c4b6db2acba607156783ae975daf8e382252c37824ac019d37d4"}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0x7ff}) (async) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f00000001c0)={0x3}) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="cdcb0200bdd23c6bb55a485b2ef096aa98d6fa33581443eb"], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 600.496µs ago: executing program 1 (id=549): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, r2, 0x25, 0x4, @val=@tcx={@void, @value=r0}}, 0x1c) (async) syz_emit_ethernet(0x36, &(0x7f0000000400)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x8, 0x28, 0x66, 0x0, 0x9, 0x6, 0x0, @remote, @private=0xa010101}, {{0x4e23, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x6, 0x0, 0xfffe}}}}}}, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') write$binfmt_script(r3, &(0x7f0000000300)={'#! ', './file0'}, 0xb) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x0, 0x0) 0s ago: executing program 7 (id=550): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x70, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x1b, &(0x7f0000002080)=0x7, 0x4) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r4 = socket$kcm(0x29, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x800) r7 = syz_open_procfs(r2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4004041}, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0x20) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000000)=r8, 0x4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000140)={0xa, 0x6e22, 0x0, @empty, 0xc70}, 0x1c) getsockopt$sock_buf(r9, 0x1, 0x1c, &(0x7f0000000380)=""/185, &(0x7f0000000440)=0xb9) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xf, 0x3, &(0x7f0000000280)=ANY=[@ANYRESDEC=r7, @ANYRESHEX, @ANYRESDEC=r4], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, r8, 0x6, 0x0, @void}, 0x10) write$cgroup_int(r8, &(0x7f0000000040)=0x1c9, 0x12) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x5, 0x4) kernel console output (not intermixed with test programs): m0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.948445][ T3292] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.948507][ T3292] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.948562][ T3292] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.962079][ T4896] loop2: detected capacity change from 0 to 1024 [ 32.040357][ T4902] bond1: (slave veth3): Enslaving as an active interface with a down link [ 32.049950][ T4902] bond1: (slave ip6gretap1): making interface the new active one [ 32.053353][ T4902] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 32.057294][ T4902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 32.058037][ T3739] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.058048][ T3739] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.075159][ T3739] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.075180][ T3739] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.096305][ T113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.096328][ T113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.116232][ T113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.116260][ T113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.122440][ T3739] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.122465][ T3739] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.134638][ T3739] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.136325][ T3739] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.156866][ T4722] Bluetooth: hci1: command tx timeout [ 32.156878][ T4718] Bluetooth: hci0: command tx timeout [ 32.182325][ T4910] Zero length message leads to an empty skb [ 32.236509][ T4722] Bluetooth: hci3: command tx timeout [ 32.236669][ T4722] Bluetooth: hci4: command tx timeout [ 32.598258][ T4934] netlink: 'syz.4.5': attribute type 12 has an invalid length. [ 32.654775][ T4948] can0: slcan on ptm0. [ 32.682194][ T4940] loop0: detected capacity change from 0 to 512 [ 32.685745][ T4940] EXT4-fs: Ignoring removed oldalloc option [ 32.697652][ T4940] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.16: Parent and EA inode have the same ino 15 [ 32.700582][ T4940] loop0: lost filesystem error report for type 5 error -117 [ 32.706450][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 32.706475][ C0] EXT4-fs (loop0): initial error at time 32: ext4_xattr_inode_iget:437 [ 32.706496][ C0] EXT4-fs (loop0): last error at time 32: ext4_xattr_inode_iget:437 [ 32.707969][ T4947] can0 (unregistered): slcan off ptm0. [ 32.716310][ T4942] nfs: Deprecated parameter 'intr' [ 32.738327][ T4955] loop1: detected capacity change from 0 to 128 [ 32.747367][ T4955] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 32.751285][ T4940] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 32.751419][ T4940] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.16: Parent and EA inode have the same ino 15 [ 32.751431][ T4940] loop0: lost filesystem error report for type 5 error -117 [ 32.754595][ T4940] EXT4-fs (loop0): 1 orphan inode deleted [ 32.755026][ T4940] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.781005][ T4940] EXT4-fs error (device loop0): ext4_lookup:1789: inode #2: comm syz.0.16: deleted inode referenced: 15 [ 32.839474][ T4949] warning: `syz.0.16' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 32.894590][ T4967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20'. [ 32.916218][ T4708] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.949629][ T4972] netlink: 'syz.0.21': attribute type 8 has an invalid length. [ 32.949658][ T4972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21'. [ 32.955102][ T4972] veth1_to_team: entered promiscuous mode [ 32.955593][ T4972] gretap0: entered promiscuous mode [ 32.958250][ T4972] hsr1: entered promiscuous mode [ 32.977153][ T4709] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 33.041796][ T4974] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 33.044512][ T4974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22'. [ 33.071780][ T4974] bond1: Invalid ad_actor_system MAC address. [ 33.071808][ T4974] bond1: option ad_actor_system: invalid value (1) [ 33.074864][ T4974] bond1 (unregistering): Released all slaves [ 33.158221][ T4974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22'. [ 33.171663][ T4974] bond1: Invalid ad_actor_system MAC address. [ 33.171684][ T4974] bond1: option ad_actor_system: invalid value (1) [ 33.176022][ T30] audit: type=1400 audit(33.160:2): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=4985 comm="syz.3.25" name="1" dev="tmpfs" ino=18 [ 33.179221][ T30] audit: type=1400 audit(33.170:3): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=rw pid=4985 comm="syz.3.25" name="loop3" dev="devtmpfs" ino=642 [ 33.181133][ T30] audit: type=1400 audit(33.170:4): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=4985 comm="syz.3.25" name="1" dev="tmpfs" ino=18 [ 33.188184][ T4974] bond1 (unregistering): Released all slaves [ 33.210870][ T4991] loop4: detected capacity change from 0 to 4096 [ 33.221173][ T4991] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.326303][ T5006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.28'. [ 33.389525][ T5019] loop3: detected capacity change from 0 to 512 [ 33.390752][ T5021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.32'. [ 33.390791][ T5021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.32'. [ 33.390893][ T5021] 8021q: VLANs not supported on gre0 [ 33.399225][ T5019] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.399255][ T5019] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 33.409417][ T5019] EXT4-fs (loop3): orphan cleanup on readonly fs [ 33.409879][ T5019] EXT4-fs (loop3): 1 truncate cleaned up [ 33.412309][ T5019] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 33.448258][ T5026] loop1: detected capacity change from 0 to 1024 [ 33.474650][ T5026] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 33.680676][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 33.705834][ T5047] loop1: detected capacity change from 0 to 1024 [ 33.709992][ T5047] EXT4-fs: Ignoring removed bh option [ 33.726771][ T5047] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.760634][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.236972][ T4718] Bluetooth: hci0: command tx timeout [ 34.237019][ T4718] Bluetooth: hci1: command tx timeout [ 34.316470][ T4722] Bluetooth: hci4: command tx timeout [ 34.316506][ T4722] Bluetooth: hci3: command tx timeout [ 34.942835][ T5081] loop1: detected capacity change from 0 to 512 [ 34.944287][ T5081] EXT4-fs (loop1): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 34.944327][ T5081] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 34.944341][ T5081] EXT4-fs (loop1): The Hurd can't support 64-bit file systems [ 35.917347][ T4718] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 35.919175][ T4718] Bluetooth: hci2: Injecting HCI hardware error event [ 35.919973][ T4722] Bluetooth: hci2: hardware error 0x00 [ 36.200728][ T4991] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 36.229541][ T5083] netlink: 'syz.2.38': attribute type 12 has an invalid length. [ 36.229570][ T5083] netlink: 'syz.2.38': attribute type 29 has an invalid length. [ 36.229580][ T5083] netlink: 148 bytes leftover after parsing attributes in process `syz.2.38'. [ 36.230918][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.304758][ T5087] loop3: detected capacity change from 0 to 1024 [ 36.305564][ T5087] EXT4-fs: Ignoring removed orlov option [ 36.309631][ T4724] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.318256][ T4718] Bluetooth: hci1: command tx timeout [ 36.318268][ T4712] Bluetooth: hci0: command tx timeout [ 36.327741][ T5087] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.338276][ T5087] netlink: 5 bytes leftover after parsing attributes in process `syz.3.39'. [ 36.340110][ T5089] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.345759][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.354003][ T5089] overlayfs: failed to set xattr on upper [ 36.354040][ T5089] overlayfs: ...falling back to redirect_dir=nofollow. [ 36.354056][ T5089] overlayfs: ...falling back to index=off. [ 36.354061][ T5089] overlayfs: ...falling back to uuid=null. [ 36.354066][ T5089] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 36.362547][ T9] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 36.396917][ T4712] Bluetooth: hci3: command tx timeout [ 36.396954][ T4712] Bluetooth: hci4: command tx timeout [ 36.438488][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.481455][ T5105] syz.0.46 uses obsolete (PF_INET,SOCK_PACKET) [ 36.527181][ T5111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.527500][ T5111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.263647][ T5115] infiniband syz2: set down [ 37.263802][ T5115] infiniband syz2: added ipvlan0 [ 37.511201][ T5115] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 37.512402][ T5115] infiniband syz2: Couldn't open port 1 [ 37.517691][ T5115] RDS/IB: syz2: added [ 37.517791][ T5115] smc: adding ib device syz2 with port count 1 [ 37.517816][ T5115] smc: ib device syz2 port 1 has no pnetid [ 37.561565][ T5098] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.852004][ T4718] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.852419][ T4718] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.852643][ T4718] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.852979][ T4718] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.853206][ T4718] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.879896][ T5141] set_capacity_and_notify: 1 callbacks suppressed [ 37.879922][ T5141] loop0: detected capacity change from 0 to 128 [ 37.885868][ T5141] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 37.900817][ T15] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.023048][ T5141] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 38.087003][ T4722] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 38.106830][ T5141] EXT4-fs error (device loop0): __ext4_find_entry:1626: inode #2: comm syz.0.54: checksumming directory block 0 [ 38.124371][ T15] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.315487][ T5160] EXT4-fs error (device loop0): __ext4_find_entry:1626: inode #2: comm syz.0.54: checksumming directory block 0 [ 38.396444][ T4712] Bluetooth: hci1: command tx timeout [ 38.397862][ T4722] Bluetooth: hci0: command tx timeout [ 38.457722][ T5157] hugetlbfs: syz.1.56 (5157): Using mlock ulimits for SHM_HUGETLB is obsolete [ 38.477845][ T4722] Bluetooth: hci4: command tx timeout [ 38.481467][ T15] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.521482][ T5165] loop1: detected capacity change from 0 to 256 [ 38.522232][ T5165] vfat: Unknown parameter 'sVor ' [ 38.572655][ T5171] loop4: detected capacity change from 0 to 1024 [ 38.575443][ T5171] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 38.575544][ T5171] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 38.584128][ T5171] EXT4-fs error (device loop4): ext4_get_journal_inode:5896: inode #32: comm syz.4.58: iget: special inode unallocated [ 38.584200][ T5171] loop4: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 38.587184][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 38.587201][ C1] EXT4-fs (loop4): initial error at time 38: ext4_get_journal_inode:5896: inode 32 [ 38.587217][ C1] EXT4-fs (loop4): last error at time 38: ext4_get_journal_inode:5896: inode 32 [ 38.595050][ T5171] EXT4-fs (loop4): Remounting filesystem read-only [ 38.595118][ T5171] EXT4-fs (loop4): no journal found [ 38.595137][ T5171] EXT4-fs (loop4): can't get journal size [ 38.595999][ T15] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.605588][ T5171] EXT4-fs (loop4): filesystem is read-only [ 38.606064][ T5171] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 38.681948][ T4724] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.753482][ T4708] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.775376][ T5132] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.776661][ T5132] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.776741][ T5132] bridge_slave_0: entered allmulticast mode [ 38.777220][ T5132] bridge_slave_0: entered promiscuous mode [ 38.781831][ T5132] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.781880][ T5132] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.781959][ T5132] bridge_slave_1: entered allmulticast mode [ 38.782397][ T5132] bridge_slave_1: entered promiscuous mode [ 38.808248][ T5132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.809345][ T5132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.819934][ T5132] team0: Port device team_slave_0 added [ 38.820727][ T5132] team0: Port device team_slave_1 added [ 38.832074][ T5132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.832100][ T5132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.832129][ T5132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.833592][ T5132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.833606][ T5132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.833621][ T5132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.925652][ T5132] hsr_slave_0: entered promiscuous mode [ 38.926374][ T5132] hsr_slave_1: entered promiscuous mode [ 38.931888][ T5132] debugfs: 'hsr0' already exists in 'hsr' [ 38.933496][ T5132] Cannot create hsr debugfs directory [ 39.015087][ T5214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.74'. [ 39.017321][ T5214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.74'. [ 39.117642][ T15] bridge_slave_1: left allmulticast mode [ 39.117681][ T15] bridge_slave_1: left promiscuous mode [ 39.118041][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.120945][ T15] bridge_slave_0: left allmulticast mode [ 39.120958][ T15] bridge_slave_0: left promiscuous mode [ 39.121032][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.359066][ T5225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.76'. [ 39.523899][ T15] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.530681][ T5227] loop1: detected capacity change from 0 to 1024 [ 39.539136][ T5227] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.548497][ T15] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.577542][ T15] bond0 (unregistering): Released all slaves [ 39.601640][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.655180][ T5234] loop1: detected capacity change from 0 to 512 [ 39.695858][ T5234] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.749557][ T5234] loop8: detected capacity change from 0 to 7 [ 39.752631][ T5234] Dev loop8: unable to read RDB block 7 [ 39.754144][ T5234] loop8: unable to read partition table [ 39.758778][ T5234] loop8: partition table beyond EOD, truncated [ 39.758821][ T5234] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 39.790495][ T5234] Dev loop8: unable to read RDB block 7 [ 39.790523][ T5234] loop8: unable to read partition table [ 39.790589][ T5234] loop8: partition table beyond EOD, truncated [ 39.790606][ T5234] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 39.799199][ T5132] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 39.804110][ T5132] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.807308][ T5251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.81'. [ 39.809884][ T5132] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 39.812481][ T5132] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.820677][ T5132] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 39.825234][ T5132] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.828947][ T5251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.81'. [ 39.829693][ T4398] 8021q: adding VLAN 0 to HW filter on device eth0 [ 39.830131][ T5132] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 39.875429][ T5132] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.892656][ T5242] EXT4-fs error (device loop1): ext4_get_first_dir_block:3537: inode #12: comm syz.1.78: Attempting to read directory block (0) that is past i_size (3) [ 39.894169][ T5234] EXT4-fs error (device loop1): ext4_get_first_dir_block:3537: inode #12: comm syz.1.78: Attempting to read directory block (0) that is past i_size (3) [ 39.921313][ T5259] loop0: detected capacity change from 0 to 256 [ 39.926453][ T4722] Bluetooth: hci3: command tx timeout [ 39.935884][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.945475][ T5259] FAT-fs (loop0): Directory bread(block 64) failed [ 39.945510][ T5259] FAT-fs (loop0): Directory bread(block 65) failed [ 39.945535][ T5259] FAT-fs (loop0): Directory bread(block 66) failed [ 39.945547][ T5259] FAT-fs (loop0): Directory bread(block 67) failed [ 39.945570][ T5259] FAT-fs (loop0): Directory bread(block 68) failed [ 39.945582][ T5259] FAT-fs (loop0): Directory bread(block 69) failed [ 39.945653][ T5259] FAT-fs (loop0): Directory bread(block 70) failed [ 39.945664][ T5259] FAT-fs (loop0): Directory bread(block 71) failed [ 39.945686][ T5259] FAT-fs (loop0): Directory bread(block 72) failed [ 39.945696][ T5259] FAT-fs (loop0): Directory bread(block 73) failed [ 40.066280][ T5132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.148598][ T5132] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.152513][ T3462] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.152559][ T3462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.167362][ T3462] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.167405][ T3462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.253601][ T15] hsr_slave_0: left promiscuous mode [ 40.254961][ T15] hsr_slave_1: left promiscuous mode [ 40.255610][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.255631][ T15] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.256934][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.256952][ T15] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.263112][ T15] veth1_macvtap: left promiscuous mode [ 40.263161][ T15] veth0_macvtap: left promiscuous mode [ 40.263196][ T15] veth1_vlan: left promiscuous mode [ 40.263232][ T15] veth0_vlan: left promiscuous mode [ 40.378953][ T15] team0 (unregistering): Port device team_slave_1 removed [ 40.382888][ T15] team0 (unregistering): Port device team_slave_0 removed [ 40.433096][ T4398] 8021q: adding VLAN 0 to HW filter on device eth1 [ 40.531288][ T5132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.629740][ T5132] veth0_vlan: entered promiscuous mode [ 40.632870][ T4398] 8021q: adding VLAN 0 to HW filter on device eth2 [ 40.635312][ T5132] veth1_vlan: entered promiscuous mode [ 40.658370][ T5132] veth0_macvtap: entered promiscuous mode [ 40.661794][ T5132] veth1_macvtap: entered promiscuous mode [ 40.670336][ T5132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.671456][ T5132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.674125][ T3441] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.674159][ T3441] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.674186][ T3441] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.674212][ T3441] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.688755][ T5259] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 40.850505][ T5351] loop1: detected capacity change from 0 to 512 [ 40.870102][ T1390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.870127][ T1390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.889821][ T3441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.889848][ T3441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.890989][ T5351] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.905332][ T5351] dns_resolver: Unsupported content type (254) [ 40.911426][ T5351] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 40.912547][ T5351] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 40.912563][ T5351] EXT4-fs (loop1): This should not happen!! Data will be lost [ 40.912563][ T5351] [ 40.912571][ T5351] EXT4-fs (loop1): Total free blocks count 0 [ 40.912578][ T5351] EXT4-fs (loop1): Free/Dirty block details [ 40.912593][ T5351] EXT4-fs (loop1): free_blocks=65280 [ 40.912607][ T5351] EXT4-fs (loop1): dirty_blocks=33 [ 40.912614][ T5351] EXT4-fs (loop1): Block reservation details [ 40.912620][ T5351] EXT4-fs (loop1): i_reserved_data_blocks=33 [ 40.916329][ T5351] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 14 with max blocks 2 with error 28 [ 40.933658][ T4709] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 41.044428][ T4398] 8021q: adding VLAN 0 to HW filter on device eth3 [ 41.091156][ T5385] loop0: detected capacity change from 0 to 512 [ 41.099438][ T5384] netlink: 20 bytes leftover after parsing attributes in process `syz.1.94'. [ 41.110739][ T5384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.94'. [ 41.127933][ T5385] EXT4-fs (loop0): orphan cleanup on readonly fs [ 41.128161][ T5385] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.98: corrupted in-inode xattr: invalid size in ea xattr [ 41.128187][ T5385] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 41.129717][ T5385] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.98: couldn't read orphan inode 15 (err -117) [ 41.129737][ T5385] loop0: lost filesystem error report for type 5 error -117 [ 41.133198][ T5385] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.147447][ T5392] loop2: detected capacity change from 0 to 512 [ 41.147788][ T5392] EXT4-fs: inline encryption not supported [ 41.221660][ T5392] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 41.242463][ T5398] FAT-fs (loop4): Directory bread(block 64) failed [ 41.242499][ T5398] FAT-fs (loop4): Directory bread(block 65) failed [ 41.242527][ T5398] FAT-fs (loop4): Directory bread(block 66) failed [ 41.242539][ T5398] FAT-fs (loop4): Directory bread(block 67) failed [ 41.242561][ T5398] FAT-fs (loop4): Directory bread(block 68) failed [ 41.242572][ T5398] FAT-fs (loop4): Directory bread(block 69) failed [ 41.242594][ T5398] FAT-fs (loop4): Directory bread(block 70) failed [ 41.242604][ T5398] FAT-fs (loop4): Directory bread(block 71) failed [ 41.242862][ T5398] FAT-fs (loop4): Directory bread(block 72) failed [ 41.242876][ T5398] FAT-fs (loop4): Directory bread(block 73) failed [ 41.259761][ T5408] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 41.273950][ T4708] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.701084][ T5453] netlink: 224 bytes leftover after parsing attributes in process `syz.5.115'. [ 41.701126][ T5453] netlink: 16 bytes leftover after parsing attributes in process `syz.5.115'. [ 41.997758][ T4722] Bluetooth: hci3: command tx timeout [ 42.227695][ T5473] netlink: 76 bytes leftover after parsing attributes in process `syz.2.118'. [ 42.327398][ T5478] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 42.327408][ T5479] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 42.327440][ T5479] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 42.334491][ T5478] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 42.582531][ T5490] netlink: 'syz.1.121': attribute type 12 has an invalid length. [ 42.724999][ T5492] netlink: 'syz.0.122': attribute type 12 has an invalid length. [ 42.987829][ T5508] set_capacity_and_notify: 3 callbacks suppressed [ 42.989112][ T5508] loop2: detected capacity change from 0 to 1024 [ 42.991522][ T5508] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.214435][ T5511] block device autoloading is deprecated and will be removed. [ 43.238706][ T5508] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8802c018, mo2=0002] [ 43.241099][ T5508] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 43.699753][ T5526] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.129: bg 0: block 112: padding at end of block bitmap is not set [ 44.330210][ T4722] Bluetooth: hci3: command tx timeout [ 44.369997][ T5530] loop0: detected capacity change from 0 to 512 [ 44.372344][ T5530] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 44.380054][ T5530] EXT4-fs (loop0): 1 truncate cleaned up [ 44.380804][ T5530] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.405614][ T5526] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 44.406142][ T5526] EXT4-fs (loop2): This should not happen!! Data will be lost [ 44.406142][ T5526] [ 44.406227][ T5526] EXT4-fs (loop2): Total free blocks count 0 [ 44.406247][ T5526] EXT4-fs (loop2): Free/Dirty block details [ 44.406261][ T5526] EXT4-fs (loop2): free_blocks=0 [ 44.406273][ T5526] EXT4-fs (loop2): dirty_blocks=64 [ 44.406284][ T5526] EXT4-fs (loop2): Block reservation details [ 44.406294][ T5526] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 45.087478][ T5535] netlink: 'syz.5.134': attribute type 3 has an invalid length. [ 45.116015][ T4716] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 45.116864][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 45.117014][ T5532] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 45.140139][ T5538] netlink: 4 bytes leftover after parsing attributes in process `syz.5.136'. [ 45.156439][ T4708] EXT4-fs error (device loop0): mb_free_blocks:2049: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 45.157345][ T4708] EXT4-fs (loop0): Remounting filesystem read-only [ 45.204311][ T5546] Injecting memory failure for pfn 0x13c9fe at process virtual address 0x20ffe000 [ 45.213578][ T5370] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.242552][ T5546] Memory failure: 0x13c9fe: Sending SIGBUS to syz.4.139:5546 due to hardware memory corruption [ 45.245703][ T5546] Memory failure: 0x13c9fe: recovery action for dirty LRU page: Recovered [ 45.264276][ T5554] team0: entered promiscuous mode [ 45.265282][ T5554] team_slave_0: entered promiscuous mode [ 45.266702][ T5554] team_slave_1: entered promiscuous mode [ 45.273362][ T5543] loop2: detected capacity change from 0 to 512 [ 45.280678][ T5543] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.137: bg 0: block 5: invalid block bitmap [ 45.280719][ T5543] loop2: lost filesystem error report for type 5 error -117 [ 45.281452][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 45.281465][ C0] EXT4-fs (loop2): initial error at time 45: ext4_validate_block_bitmap:432 [ 45.281476][ C0] EXT4-fs (loop2): last error at time 45: ext4_validate_block_bitmap:432 [ 45.282669][ T5543] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 45.282684][ T5543] loop2: lost filesystem error report for type 5 error -117 [ 45.282811][ T5543] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.137: invalid indirect mapped block 3 (level 2) [ 45.282825][ T5543] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 45.283057][ T5543] EXT4-fs (loop2): 1 orphan inode deleted [ 45.283065][ T5543] EXT4-fs (loop2): 1 truncate cleaned up [ 45.284407][ T5543] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.328718][ T5560] loop4: detected capacity change from 0 to 1024 [ 45.330655][ T5560] EXT4-fs: Ignoring removed orlov option [ 45.338769][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.349053][ T5560] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.356948][ T5560] EXT4-fs error (device loop4): __ext4_new_inode:1285: comm syz.4.144: failed to insert inode 16: doubly allocated? [ 45.457397][ T4724] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.734974][ T5575] loop5: detected capacity change from 0 to 512 [ 45.741684][ T5575] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 45.743993][ T5575] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002] [ 45.744383][ T5575] System zones: 1-12 [ 45.744483][ T5575] EXT4-fs (loop5): orphan cleanup on readonly fs [ 45.748928][ T5575] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.149: invalid indirect mapped block 12 (level 1) [ 45.748962][ T5575] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 45.752088][ T5575] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.149: invalid indirect mapped block 2 (level 2) [ 45.752128][ T5575] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 45.755000][ C0] EXT4-fs (loop5): error count since last fsck: 2 [ 45.755015][ C0] EXT4-fs (loop5): initial error at time 45: ext4_free_branches:1023: inode 11 [ 45.755031][ C0] EXT4-fs (loop5): last error at time 45: ext4_free_branches:1023: inode 11 [ 45.759464][ T5575] EXT4-fs (loop5): 1 truncate cleaned up [ 45.761110][ T5575] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 45.849002][ T5132] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 45.962697][ T3462] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.979407][ T4712] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.980443][ T4712] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.980788][ T4712] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.981679][ T4712] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.982649][ T4712] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.093591][ T3462] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.162935][ T3462] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.292599][ T3462] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.300712][ T5615] loop1: detected capacity change from 0 to 256 [ 46.301209][ T5615] vfat: Unknown parameter 'uni_xladir' [ 46.350237][ T4712] Bluetooth: hci3: command tx timeout [ 46.489951][ T5620] loop4: detected capacity change from 0 to 256 [ 46.524450][ T5615] fuse: Bad value for 'group_id' [ 46.525477][ T5615] fuse: Bad value for 'group_id' [ 46.525554][ T5620] netlink: 'syz.4.159': attribute type 1 has an invalid length. [ 46.712169][ T3462] bridge_slave_1: left allmulticast mode [ 46.712201][ T3462] bridge_slave_1: left promiscuous mode [ 46.712287][ T3462] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.718022][ T3462] bridge_slave_0: left allmulticast mode [ 46.718048][ T3462] bridge_slave_0: left promiscuous mode [ 46.718142][ T3462] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.846442][ T3462] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 46.892268][ T3462] gretap0 (unregistering): left promiscuous mode [ 47.040759][ T3462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.057424][ T3462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.086435][ T3462] bond0 (unregistering): Released all slaves [ 47.095644][ T3462] bond1 (unregistering): (slave veth3): Releasing active interface [ 47.128279][ T3462] bond1 (unregistering): Released all slaves [ 47.182807][ T5646] IPVS: set_ctl: invalid protocol: 158 224.0.0.2:20002 [ 47.260807][ T5654] loop5: detected capacity change from 0 to 2048 [ 47.311429][ T5654] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.321203][ T5654] netlink: 20 bytes leftover after parsing attributes in process `syz.5.165'. [ 47.361196][ T5669] loop1: detected capacity change from 0 to 2048 [ 47.397920][ T5591] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.397957][ T5591] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.398101][ T5591] bridge_slave_0: entered allmulticast mode [ 47.405582][ T5591] bridge_slave_0: entered promiscuous mode [ 47.429574][ T5669] loop1: p1 < > p4 [ 47.429574][ T5669] p4: [ 47.431661][ T5669] loop1: p4 size 722688 extends beyond EOD, truncated [ 47.439744][ T5591] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.441228][ T5591] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.442881][ T5591] bridge_slave_1: entered allmulticast mode [ 47.445284][ T5591] bridge_slave_1: entered promiscuous mode [ 47.516346][ T5677] netlink: 56 bytes leftover after parsing attributes in process `syz.1.167'. [ 47.724676][ T4398] 8021q: adding VLAN 0 to HW filter on device eth4 [ 47.742007][ T5132] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.787008][ T5683] loop5: detected capacity change from 0 to 512 [ 47.810091][ T5683] EXT4-fs warning (device loop5): ext4_multi_mount_protect:288: Invalid MMP block in superblock [ 47.827898][ T5591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.833533][ T5591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.868695][ T5690] Bluetooth: MGMT ver 1.23 [ 47.943972][ T5591] team0: Port device team_slave_0 added [ 47.967457][ T5693] netlink: 20 bytes leftover after parsing attributes in process `syz.5.172'. [ 47.978109][ T5591] team0: Port device team_slave_1 added [ 48.012562][ T5707] EXT4-fs: Ignoring removed i_version option [ 48.013976][ T5707] EXT4-fs: inline encryption not supported [ 48.015535][ T5707] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 48.029724][ T5707] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.058414][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.058440][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.058465][ T5591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.059048][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.059062][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.059090][ T5591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.086888][ T5707] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.175: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 48.122464][ T4712] Bluetooth: hci1: command tx timeout [ 48.126238][ T4724] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 48.134606][ T4724] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 48.237688][ T3462] veth1_to_team: left promiscuous mode [ 48.249712][ T3462] hsr_slave_0: left promiscuous mode [ 48.251335][ T3462] hsr_slave_1: left promiscuous mode [ 48.251625][ T3462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.251637][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.262205][ T3462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.262236][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.286450][ T3462] veth1_macvtap: left promiscuous mode [ 48.286491][ T3462] veth0_macvtap: left promiscuous mode [ 48.286526][ T3462] veth1_vlan: left promiscuous mode [ 48.286551][ T3462] veth0_vlan: left promiscuous mode [ 48.568959][ T3462] team0 (unregistering): Port device team_slave_1 removed [ 48.581904][ T3462] team0 (unregistering): Port device team_slave_0 removed [ 48.669051][ T5591] hsr_slave_0: entered promiscuous mode [ 48.669409][ T5591] hsr_slave_1: entered promiscuous mode [ 48.669608][ T5591] debugfs: 'hsr0' already exists in 'hsr' [ 48.669620][ T5591] Cannot create hsr debugfs directory [ 48.737590][ T4398] 8021q: adding VLAN 0 to HW filter on device eth5 [ 48.813921][ T5591] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 48.816448][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.816736][ T5591] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 48.819266][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.822082][ T5591] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 48.929319][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.931195][ T5737] netlink: 76 bytes leftover after parsing attributes in process `syz.1.179'. [ 48.931231][ T5737] netlink: 76 bytes leftover after parsing attributes in process `syz.1.179'. [ 48.936885][ T5591] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 48.939380][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.985189][ T4724] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.068100][ T5591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.092903][ T5591] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.101155][ T1249] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.101195][ T1249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.118076][ T3292] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.118118][ T3292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.190194][ T3462] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.263269][ T3462] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.267568][ T5761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.183'. [ 49.281134][ T4722] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 49.282225][ T4722] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 49.282541][ T4722] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 49.283218][ T4722] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 49.284297][ T4722] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 49.299631][ T4398] 8021q: adding VLAN 0 to HW filter on device eth6 [ 49.355770][ T3462] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.357790][ T5770] netlink: 16 bytes leftover after parsing attributes in process `syz.2.183'. [ 49.368695][ T5770] set_capacity_and_notify: 3 callbacks suppressed [ 49.369485][ T5770] loop2: detected capacity change from 0 to 256 [ 49.373450][ T5770] FAT-fs (loop2): bogus logical sector size 0 [ 49.373486][ T5770] FAT-fs (loop2): Can't find a valid FAT filesystem [ 49.432068][ T3462] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.611683][ T5794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.614643][ T5794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.704533][ T5591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.121249][ T3462] bridge_slave_1: left allmulticast mode [ 50.121283][ T3462] bridge_slave_1: left promiscuous mode [ 50.121392][ T3462] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.125947][ T3462] bridge_slave_0: left allmulticast mode [ 50.125970][ T3462] bridge_slave_0: left promiscuous mode [ 50.126040][ T3462] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.217147][ T4722] Bluetooth: hci1: command tx timeout [ 50.502377][ T3462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.520453][ T3462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.530373][ T3462] bond0 (unregistering): Released all slaves [ 50.592689][ T4398] 8021q: adding VLAN 0 to HW filter on device eth7 [ 50.797427][ T5591] veth0_vlan: entered promiscuous mode [ 50.799214][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.801975][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.803798][ T5766] bridge_slave_0: entered allmulticast mode [ 50.806466][ T5766] bridge_slave_0: entered promiscuous mode [ 50.809498][ T4398] 8021q: adding VLAN 0 to HW filter on device eth8 [ 50.811475][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.813085][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.813186][ T5766] bridge_slave_1: entered allmulticast mode [ 50.813623][ T5766] bridge_slave_1: entered promiscuous mode [ 50.864728][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.866028][ T5591] veth1_vlan: entered promiscuous mode [ 50.867745][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.877478][ T5766] team0: Port device team_slave_0 added [ 50.879776][ T5766] team0: Port device team_slave_1 added [ 50.888634][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.888657][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.888673][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.890616][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.890624][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.890640][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.895166][ T5591] veth0_macvtap: entered promiscuous mode [ 50.945093][ T5591] veth1_macvtap: entered promiscuous mode [ 50.954936][ T5766] hsr_slave_0: entered promiscuous mode [ 50.956803][ T5766] hsr_slave_1: entered promiscuous mode [ 50.957054][ T5766] debugfs: 'hsr0' already exists in 'hsr' [ 50.957063][ T5766] Cannot create hsr debugfs directory [ 51.006199][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.038727][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.041476][ T113] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.041690][ T113] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.041816][ T113] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.041883][ T113] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.086002][ T5862] netlink: 'syz.5.189': attribute type 1 has an invalid length. [ 51.093856][ T5862] 8021q: adding VLAN 0 to HW filter on device bond1 [ 51.099059][ T3462] hsr_slave_0: left promiscuous mode [ 51.100259][ T3462] hsr_slave_1: left promiscuous mode [ 51.100535][ T3462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.100545][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.101606][ T3462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.101617][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.112899][ T3462] veth1_macvtap: left promiscuous mode [ 51.112935][ T3462] veth0_macvtap: left promiscuous mode [ 51.114111][ T3462] veth1_vlan: left promiscuous mode [ 51.114141][ T3462] veth0_vlan: left promiscuous mode [ 51.129928][ T5869] loop2: detected capacity change from 0 to 512 [ 51.132936][ T5869] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.190: inode has both inline data and extents flags [ 51.132969][ T5869] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 51.135958][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 51.135974][ C0] EXT4-fs (loop2): initial error at time 51: ext4_orphan_get:1397: inode 15 [ 51.136005][ C0] EXT4-fs (loop2): last error at time 51: ext4_orphan_get:1397: inode 15 [ 51.150439][ T5869] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.190: couldn't read orphan inode 15 (err -117) [ 51.150469][ T5869] loop2: lost filesystem error report for type 5 error -117 [ 51.153679][ T5869] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.159940][ T5869] fscrypt (loop2, inode 18): Direct key flag not allowed with different contents and filenames modes [ 51.189156][ T12] smc: removing ib device syz2 [ 51.344824][ T4722] Bluetooth: hci4: command tx timeout [ 51.397297][ T3462] team0 (unregistering): Port device team_slave_1 removed [ 51.410149][ T3462] team0 (unregistering): Port device team_slave_0 removed [ 51.558717][ T5864] veth3: entered promiscuous mode [ 51.560383][ T5869] tipc: Enabling of bearer rejected, failed to enable media [ 51.614328][ T5874] netlink: 'syz.5.191': attribute type 10 has an invalid length. [ 51.621594][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.729908][ T5874] team0: Device veth1_vlan failed to register rx_handler [ 51.745707][ T5877] loop5: detected capacity change from 0 to 2048 [ 51.790251][ T5877] loop5: p1 p3 [ 51.790359][ T5877] loop5: p1 size 67110656 extends beyond EOD, truncated [ 51.797180][ T5877] loop5: p3 size 134217728 extends beyond EOD, truncated [ 51.818546][ T3292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.818565][ T3292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.881853][ T5880] netlink: 76 bytes leftover after parsing attributes in process `syz.2.192'. [ 51.881893][ T5880] netlink: 76 bytes leftover after parsing attributes in process `syz.2.192'. [ 51.932929][ T4698] udevd[4698]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 51.946493][ T4701] udevd[4701]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 52.039319][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.039350][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.066761][ T5766] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 52.069476][ T5766] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 52.074279][ T5766] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 52.078224][ T5766] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 52.080820][ T5766] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 52.085517][ T5766] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 52.087436][ T5766] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 52.090128][ T5766] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 52.200169][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.205041][ T4398] 8021q: adding VLAN 0 to HW filter on device eth9 [ 52.216119][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.219655][ T3739] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.219696][ T3739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.232663][ T113] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.232704][ T113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.239533][ T5914] loop6: detected capacity change from 0 to 2048 [ 52.280561][ T5914] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.295584][ T5914] EXT4-fs error (device loop6): ext4_find_extent:939: inode #2: comm syz.6.194: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 52.299927][ T5914] EXT4-fs error (device loop6): ext4_find_extent:939: inode #2: comm syz.6.194: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 52.301329][ T5914] EXT4-fs error (device loop6): ext4_find_extent:939: inode #2: comm syz.6.194: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 52.302663][ T5914] EXT4-fs error (device loop6): ext4_find_extent:939: inode #2: comm syz.6.194: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 52.311729][ T4722] Bluetooth: hci1: command tx timeout [ 52.972341][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.298800][ T5591] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.344871][ T5966] loop6: detected capacity change from 0 to 512 [ 53.349494][ T4398] 8021q: adding VLAN 0 to HW filter on device eth10 [ 53.405107][ T5975] tipc: Enabling of bearer rejected, failed to enable media [ 53.438868][ T4722] Bluetooth: hci4: command tx timeout [ 53.464679][ T5766] veth0_vlan: entered promiscuous mode [ 53.467941][ T5766] veth1_vlan: entered promiscuous mode [ 53.498944][ T5766] veth0_macvtap: entered promiscuous mode [ 53.504910][ T5766] veth1_macvtap: entered promiscuous mode [ 53.532964][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.538517][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.547861][ T40] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.547950][ T40] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.547971][ T40] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.547985][ T40] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.637995][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.639878][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.656660][ T3292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.656687][ T3292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.737231][ T6000] netlink: 'syz.6.203': attribute type 12 has an invalid length. [ 53.987284][ T5999] loop5: detected capacity change from 0 to 512 [ 53.987946][ T5999] EXT4-fs (loop5): Test dummy encryption mode enabled [ 53.987970][ T5999] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 53.989233][ T5999] EXT4-fs error (device loop5): ext4_init_orphan_info:618: comm syz.5.204: orphan file block 0: bad magic [ 53.989256][ T5999] loop5: lost filesystem error report for type 5 error -117 [ 53.989712][ T5999] EXT4-fs (loop5): mount failed [ 54.033159][ T5999] netlink: 32 bytes leftover after parsing attributes in process `syz.5.204'. [ 54.041790][ T5999] loop5: detected capacity change from 0 to 256 [ 54.062698][ T5999] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 54.062726][ T5999] FAT-fs (loop5): Filesystem has been set read-only [ 54.194920][ T6024] netlink: 76 bytes leftover after parsing attributes in process `syz.1.205'. [ 54.194958][ T6024] netlink: 76 bytes leftover after parsing attributes in process `syz.1.205'. [ 54.229481][ T4398] 8021q: adding VLAN 0 to HW filter on device eth11 [ 54.297493][ T6034] loop5: detected capacity change from 0 to 512 [ 54.306130][ T6034] EXT4-fs: Ignoring removed oldalloc option [ 54.332223][ T6037] loop7: detected capacity change from 0 to 8192 [ 54.402425][ T6034] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 54.405710][ T4722] Bluetooth: hci1: command tx timeout [ 54.408854][ T6034] EXT4-fs (loop5): 1 truncate cleaned up [ 54.419107][ T6034] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.427062][ T6034] netlink: 4 bytes leftover after parsing attributes in process `syz.5.208'. [ 54.471043][ T5132] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.618481][ T6061] sch_tbf: burst 32852 is lower than device lo mtu (65550) ! [ 54.831916][ T6072] netlink: 4 bytes leftover after parsing attributes in process `syz.6.216'. [ 55.003145][ T6072] geneve2: entered promiscuous mode [ 55.003183][ T6072] geneve2: entered allmulticast mode [ 55.008588][ T6073] bond0: (slave bond_slave_1): Releasing backup interface [ 55.052845][ T15] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 53687 - 0 [ 55.328696][ T6080] loop2: detected capacity change from 0 to 512 [ 55.390625][ T6080] EXT4-fs (loop2): orphan cleanup on readonly fs [ 55.392867][ T6080] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.215: bg 0: block 63: padding at end of block bitmap is not set [ 55.392896][ T6080] loop2: lost filesystem error report for type 5 error -117 [ 55.396430][ T6080] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 55.396689][ T6080] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.2.215: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 55.396704][ T6080] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 55.402402][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 55.402422][ C0] EXT4-fs (loop2): initial error at time 55: ext4_validate_block_bitmap:441 [ 55.402435][ C0] EXT4-fs (loop2): last error at time 55: ext4_xattr_inode_update_ref:1037: inode 11 [ 55.412971][ T6080] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.2.215: ea_inode dec ref err=-117 [ 55.413113][ T6080] EXT4-fs (loop2): 1 orphan inode deleted [ 55.413579][ T6080] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 55.439037][ T6076] fuse: Bad value for 'max_read' [ 55.442508][ T113] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 53687 - 0 [ 55.442560][ T113] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 53687 - 0 [ 55.442592][ T113] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 53687 - 0 [ 55.505915][ T6083] overlay: Unknown parameter 'uid' [ 55.529233][ T6096] Illegal XDP return value 3887342913 on prog (id 40) dev N/A, expect packet loss! [ 55.532733][ T4722] Bluetooth: hci4: command tx timeout [ 55.588139][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.600027][ T6096] 9p: Bad value for 'wfdno' [ 55.835251][ T6126] netlink: 'syz.2.221': attribute type 12 has an invalid length. [ 56.027921][ T6139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.224'. [ 56.033453][ T6139] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.033802][ T6139] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.058571][ T6137] xt_TCPMSS: Only works on TCP SYN packets [ 56.311018][ T6166] netlink: 'syz.1.228': attribute type 12 has an invalid length. [ 56.641782][ T6192] netlink: 72 bytes leftover after parsing attributes in process `syz.2.231'. [ 56.662769][ T6192] netlink: 72 bytes leftover after parsing attributes in process `syz.2.231'. [ 56.718842][ T6208] loop2: detected capacity change from 0 to 512 [ 56.721938][ T6208] EXT4-fs: Ignoring removed i_version option [ 56.724521][ T6208] EXT4-fs: Ignoring removed i_version option [ 56.724557][ T6208] ext4: Unknown parameter 'appraise' [ 56.947882][ T6217] loop2: detected capacity change from 0 to 128 [ 56.950406][ T6217] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 288230376151711779)! [ 56.950450][ T6217] EXT4-fs (loop2): group descriptors corrupted! [ 57.016974][ T6217] ucma_write: process 199 (syz.2.235) changed security contexts after opening file descriptor, this is not allowed. [ 57.152489][ T6227] loop6: detected capacity change from 0 to 128 [ 57.160368][ T6227] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 57.184902][ T6227] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 57.226494][ T6227] EXT4-fs error (device loop6): __ext4_find_entry:1626: inode #2: comm syz.6.237: checksumming directory block 0 [ 57.249129][ T6229] netlink: 4 bytes leftover after parsing attributes in process `syz.5.232'. [ 57.249203][ T6229] bridge_slave_1: left allmulticast mode [ 57.249216][ T6229] bridge_slave_1: left promiscuous mode [ 57.249310][ T6229] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.337203][ T6229] bridge_slave_0: left allmulticast mode [ 57.338709][ T6229] bridge_slave_0: left promiscuous mode [ 57.340078][ T6229] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.626529][ T4722] Bluetooth: hci4: command tx timeout [ 57.832008][ T6248] loop1: detected capacity change from 0 to 512 [ 57.835581][ T6248] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 57.901291][ T6248] EXT4-fs (loop1): 1 orphan inode deleted [ 57.902609][ T6248] EXT4-fs (loop1): 1 truncate cleaned up [ 57.905879][ T6248] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.946593][ T6252] netlink: 28 bytes leftover after parsing attributes in process `syz.2.243'. [ 58.027736][ T5591] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 58.054699][ T6254] overlayfs: missing 'lowerdir' [ 58.071168][ T6258] loop5: detected capacity change from 0 to 128 [ 58.162948][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.273818][ T6274] loop6: detected capacity change from 0 to 512 [ 58.289052][ T6274] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.248: inode has both inline data and extents flags [ 58.289085][ T6274] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 58.291939][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 58.291953][ C0] EXT4-fs (loop6): initial error at time 58: ext4_orphan_get:1397: inode 15 [ 58.291970][ C0] EXT4-fs (loop6): last error at time 58: ext4_orphan_get:1397: inode 15 [ 58.298486][ T6274] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.248: couldn't read orphan inode 15 (err -117) [ 58.298512][ T6274] loop6: lost filesystem error report for type 5 error -117 [ 58.301518][ T6274] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.564886][ T5591] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.675861][ T6281] netlink: 28 bytes leftover after parsing attributes in process `syz.6.250'. [ 58.926341][ T6300] netlink: 32 bytes leftover after parsing attributes in process `syz.7.256'. [ 59.006687][ T6302] netlink: 'syz.6.254': attribute type 12 has an invalid length. [ 59.190182][ T6305] syz.1.257 (6305): /proc/6303/oom_adj is deprecated, please use /proc/6303/oom_score_adj instead. [ 59.264890][ T6313] loop1: detected capacity change from 0 to 512 [ 59.273297][ T6313] EXT4-fs: Ignoring removed nobh option [ 59.295436][ T6316] loop5: detected capacity change from 0 to 8192 [ 59.301470][ T6316] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 59.303538][ T6313] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #3: comm syz.1.258: corrupted inode contents [ 59.304719][ T6313] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 59.305705][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 59.305723][ C0] EXT4-fs (loop1): initial error at time 59: ext4_do_update_inode:5690: inode 3 [ 59.305739][ C0] EXT4-fs (loop1): last error at time 59: ext4_do_update_inode:5690: inode 3 [ 59.308209][ T6313] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #3: comm syz.1.258: mark_inode_dirty error [ 59.308246][ T6313] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 59.313635][ T6313] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #3: comm syz.1.258: corrupted inode contents [ 59.313651][ T6313] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 59.314152][ T6313] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #3: comm syz.1.258: mark_inode_dirty error [ 59.314182][ T6313] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 59.317304][ T6313] Quota error (device loop1): write_blk: dquota write failed [ 59.317362][ T6313] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 59.317381][ T6313] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.258: Failed to acquire dquot type 0 [ 59.317391][ T6313] loop1: lost filesystem error report for type 5 error -117 [ 59.320174][ T6313] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.258: corrupted inode contents [ 59.320193][ T6313] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 59.321822][ T6313] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #16: comm syz.1.258: mark_inode_dirty error [ 59.321849][ T6313] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 59.322051][ T6313] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.258: corrupted inode contents [ 59.322065][ T6313] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 59.323461][ T6313] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.258: mark_inode_dirty error [ 59.323487][ T6313] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 59.324390][ T6313] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.258: corrupted inode contents [ 59.324404][ T6313] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 59.324562][ T6313] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 59.324572][ T6313] loop1: lost filesystem error report for type 5 error -117 [ 59.324962][ T6313] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.258: corrupted inode contents [ 59.325109][ T6313] EXT4-fs error (device loop1): ext4_truncate:4690: inode #16: comm syz.1.258: mark_inode_dirty error [ 59.325275][ T6313] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 59.325293][ T6313] loop1: lost filesystem error report for type 5 error -117 [ 59.339045][ T6313] EXT4-fs (loop1): 1 truncate cleaned up [ 59.340061][ T6313] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.405192][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.454190][ T6311] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.454363][ T6311] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.502601][ T6336] loop5: detected capacity change from 0 to 512 [ 59.504648][ T6336] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 59.510740][ T6336] EXT4-fs (loop5): 1 truncate cleaned up [ 59.511240][ T6336] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.798294][ T6311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.801697][ T6311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.511510][ T5132] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.537884][ T1249] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.540506][ T3739] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.541058][ T3739] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.799849][ T6375] gtp0: entered promiscuous mode [ 60.804320][ T6375] gtp0: entered allmulticast mode [ 60.892286][ T6383] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 60.892314][ T6383] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 60.892336][ T6383] overlayfs: missing 'lowerdir' [ 60.903248][ T6383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.270'. [ 60.989518][ T6399] openvswitch: netlink: Message has 5 unknown bytes. [ 60.998504][ T6401] fuse: Bad value for 'fd' [ 60.998892][ T6401] fuse: Unknown parameter '184467440737095516150xffffffffffffffff' [ 61.453215][ T6429] loop5: detected capacity change from 0 to 512 [ 61.460467][ T6429] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 61.787557][ T6434] loop7: detected capacity change from 0 to 8 [ 61.787933][ T6434] squashfs: Unknown parameter '01777777777777777777777' [ 62.039253][ T6442] loop6: detected capacity change from 0 to 512 [ 62.040982][ T6442] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 62.058721][ T6442] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 62.059036][ T6442] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.285: bg 0: block 248: padding at end of block bitmap is not set [ 62.059053][ T6442] loop6: lost filesystem error report for type 5 error -117 [ 62.059243][ T6442] Quota error (device loop6): write_blk: dquota write failed [ 62.059273][ T6442] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 62.059290][ T6442] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.285: Failed to acquire dquot type 1 [ 62.059300][ T6442] loop6: lost filesystem error report for type 5 error -28 [ 62.059880][ T6442] EXT4-fs (loop6): 1 truncate cleaned up [ 62.060335][ T6442] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 62.100003][ T5591] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 62.100380][ T39] Quota error (device loop6): do_check_range: Getting block 0 out of range 1-5 [ 62.100444][ T39] EXT4-fs error (device loop6): ext4_release_dquot:7070: comm kworker/u8:2: Failed to release dquot type 1 [ 62.100456][ T39] loop6: lost filesystem error report for type 5 error -117 [ 62.136987][ T6447] capability: warning: `syz.1.287' uses deprecated v2 capabilities in a way that may be insecure [ 62.165098][ T6449] loop1: detected capacity change from 0 to 128 [ 62.173107][ T6449] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 62.178851][ T6449] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 62.203134][ T6449] EXT4-fs error (device loop1): __ext4_find_entry:1626: inode #2: comm syz.1.288: checksumming directory block 0 [ 62.970487][ T5132] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 63.048881][ T4709] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 63.071513][ T6478] 9p: Bad value for 'wfdno' [ 63.245440][ T6498] loop2: detected capacity change from 0 to 8 [ 63.245772][ T6498] squashfs: Unknown parameter './file0' [ 63.654256][ T6524] netlink: 20 bytes leftover after parsing attributes in process `syz.5.301'. [ 63.840764][ T6543] netlink: 'syz.1.302': attribute type 4 has an invalid length. [ 64.152450][ T6554] loop2: detected capacity change from 0 to 512 [ 64.152837][ T6554] EXT4-fs: Ignoring removed bh option [ 64.158645][ T6554] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 64.159103][ T6554] EXT4-fs (loop2): 1 truncate cleaned up [ 64.159544][ T6554] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.166348][ T6559] loop6: detected capacity change from 0 to 512 [ 64.168839][ T6554] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.309: bg 0: block 465: padding at end of block bitmap is not set [ 64.169449][ T6554] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 131587 with max blocks 1 with error 117 [ 64.169463][ T6554] EXT4-fs (loop2): This should not happen!! Data will be lost [ 64.169463][ T6554] [ 64.170023][ T6554] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 64.170036][ T6554] EXT4-fs (loop2): This should not happen!! Data will be lost [ 64.170036][ T6554] [ 64.170044][ T6554] EXT4-fs (loop2): Total free blocks count 0 [ 64.170051][ T6554] EXT4-fs (loop2): Free/Dirty block details [ 64.170065][ T6554] EXT4-fs (loop2): free_blocks=0 [ 64.170078][ T6554] EXT4-fs (loop2): dirty_blocks=1 [ 64.170085][ T6554] EXT4-fs (loop2): Block reservation details [ 64.191007][ T4716] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 64.335008][ T6567] loop6: detected capacity change from 0 to 512 [ 64.338254][ T6568] loop6: detected capacity change from 0 to 512 [ 64.375702][ T6568] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 64.412924][ T6567] infiniband syz2: set down [ 64.412950][ T6567] infiniband syz2: added ipvlan0 [ 64.423106][ T6567] RDS/IB: syz2: added [ 64.423141][ T6567] smc: adding ib device syz2 with port count 1 [ 64.423169][ T6567] smc: ib device syz2 port 1 has no pnetid [ 64.646902][ T1596] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.646956][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.688112][ T6590] netlink: 28 bytes leftover after parsing attributes in process `syz.2.320'. [ 64.719394][ T1013] cfg80211: failed to load regulatory.db [ 64.888425][ T6598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.323'. [ 64.946069][ T6608] xt_l2tp: unknown flags: 51 [ 65.087211][ T6619] loop2: detected capacity change from 0 to 1024 [ 65.088888][ T6619] EXT4-fs: Ignoring removed mblk_io_submit option [ 65.106143][ T6619] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8802c018, mo2=0002] [ 65.106710][ T6619] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 65.205461][ T6627] dvmrp5: entered allmulticast mode [ 65.234558][ T6631] netlink: 72 bytes leftover after parsing attributes in process `syz.7.334'. [ 65.234587][ T6631] netlink: 12 bytes leftover after parsing attributes in process `syz.7.334'. [ 65.234596][ T6631] netlink: 4 bytes leftover after parsing attributes in process `syz.7.334'. [ 66.090128][ T6631] usb usb8: usbfs: process 6631 (syz.7.334) did not claim interface 0 before use [ 66.101532][ T6634] ext4: Unknown parameter 'fowner>00000000000000000000' [ 66.149047][ T6639] capability: warning: `syz.6.337' uses 32-bit capabilities (legacy support in use) [ 66.161763][ T6639] netlink: 'syz.6.337': attribute type 40 has an invalid length. [ 66.161789][ T6639] netlink: 16 bytes leftover after parsing attributes in process `syz.6.337'. [ 66.211514][ T6645] netlink: 68 bytes leftover after parsing attributes in process `syz.7.338'. [ 66.240100][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 66.250066][ T6650] faux_driver vkms: [drm] Unknown color mode 36865; guessing buffer size. [ 66.251116][ T6654] binder: 6652:6654 got transaction to invalid handle, 1 [ 66.251154][ T6654] binder: 6652:6654 cannot find target node [ 66.251169][ T6654] binder: 6652:6654 transaction call to 0:0 failed 2/29201/-22, code 0 size 0-0 line 3236 [ 66.257546][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 66.265257][ T6645] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 66.281334][ T30] audit: type=1326 audit(66.109:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6658 comm="syz.1.342" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3977aa8 code=0x0 [ 66.299516][ T6645] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.338: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 66.299554][ T6645] fserror_report: 2 callbacks suppressed [ 66.299573][ T6645] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 66.300377][ T6645] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.338: couldn't read orphan inode 15 (err -117) [ 66.300399][ T6645] loop7: lost filesystem error report for type 5 error -117 [ 66.315398][ T6645] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.364246][ T6661] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.374180][ T5766] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.493531][ T6661] netlink: 'syz.6.343': attribute type 32 has an invalid length. [ 66.493566][ T6661] netlink: 8 bytes leftover after parsing attributes in process `syz.6.343'. [ 66.505929][ T6661] bond2: Setting coupled_control to off (0) [ 66.541830][ T5591] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.872874][ T6701] set_capacity_and_notify: 3 callbacks suppressed [ 66.874632][ T6701] loop2: detected capacity change from 0 to 512 [ 66.891849][ T6701] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.930002][ T4716] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 66.930694][ T4716] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 66.931171][ T4716] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 66.931414][ T4716] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 66.931640][ T4716] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 66.931959][ T4716] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 66.932308][ T4716] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 66.932526][ T4716] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 66.932743][ T4716] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 66.933020][ T4716] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 67.083719][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.184191][ T4712] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.185927][ T4712] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.187597][ T4712] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.188452][ T4712] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.188688][ T4712] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.260506][ T6720] loop5: detected capacity change from 0 to 1024 [ 67.264334][ T6718] vlan2: entered allmulticast mode [ 67.265612][ T6718] virt_wifi0: entered allmulticast mode [ 67.328557][ T6720] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 67.390731][ T6081] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: block 3: comm kworker/u8:11: lblock 3 mapped to illegal pblock 3 (length 3) [ 67.392719][ T6081] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 67.392747][ T6081] EXT4-fs (loop5): This should not happen!! Data will be lost [ 67.392747][ T6081] [ 67.393434][ T6081] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:11: lblock 8 mapped to illegal pblock 8 (length 5) [ 67.393767][ T6081] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117 [ 67.394256][ T6081] EXT4-fs (loop5): This should not happen!! Data will be lost [ 67.394256][ T6081] [ 67.395072][ T5132] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 67.395798][ T5132] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 67.515561][ T6749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.515757][ T6749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.517605][ T6749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.517759][ T6749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.518437][ T4712] Bluetooth: hci3: unknown advertising packet type: 0xbf [ 67.518448][ T4712] Bluetooth: hci3: Malformed LE Event: 0x02 [ 67.847125][ T6758] netlink: 'syz.1.366': attribute type 15 has an invalid length. [ 67.847158][ T6758] netlink: 24 bytes leftover after parsing attributes in process `syz.1.366'. [ 67.852572][ T12] bridge_slave_1: left allmulticast mode [ 67.852603][ T12] bridge_slave_1: left promiscuous mode [ 67.852685][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.856307][ T12] bridge_slave_0: left allmulticast mode [ 67.856320][ T12] bridge_slave_0: left promiscuous mode [ 67.856384][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.931114][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.955536][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.974929][ T12] bond0 (unregistering): Released all slaves [ 67.984138][ T6755] bridge1: entered promiscuous mode [ 67.985762][ T6755] bridge1: entered allmulticast mode [ 67.989117][ T4398] 8021q: adding VLAN 0 to HW filter on device eth12 [ 68.042464][ T6776] loop6: detected capacity change from 0 to 512 [ 68.074557][ T6776] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.084579][ T6776] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 68.085997][ T6776] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 68.086015][ T6776] EXT4-fs (loop6): This should not happen!! Data will be lost [ 68.086015][ T6776] [ 68.086026][ T6776] EXT4-fs (loop6): Total free blocks count 0 [ 68.086034][ T6776] EXT4-fs (loop6): Free/Dirty block details [ 68.086041][ T6776] EXT4-fs (loop6): free_blocks=65280 [ 68.086049][ T6776] EXT4-fs (loop6): dirty_blocks=33 [ 68.086055][ T6776] EXT4-fs (loop6): Block reservation details [ 68.086060][ T6776] EXT4-fs (loop6): i_reserved_data_blocks=33 [ 68.102876][ T15] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 68.103401][ T5591] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 68.271616][ T6711] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.273642][ T6711] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.275115][ T6711] bridge_slave_0: entered allmulticast mode [ 68.279816][ T6711] bridge_slave_0: entered promiscuous mode [ 68.282643][ T6711] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.284294][ T6711] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.288690][ T6711] bridge_slave_1: entered allmulticast mode [ 68.290728][ T6711] bridge_slave_1: entered promiscuous mode [ 68.299789][ T6711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.305075][ T6711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.356143][ T4398] 8021q: adding VLAN 0 to HW filter on device eth13 [ 68.362094][ T6807] ªªªªªª: renamed from lo (while UP) [ 68.377283][ T6711] team0: Port device team_slave_0 added [ 68.387092][ T6711] team0: Port device team_slave_1 added [ 68.444119][ T6711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.444147][ T6711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.444367][ T6711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.504911][ T12] hsr_slave_0: left promiscuous mode [ 68.508360][ T12] hsr_slave_1: left promiscuous mode [ 68.509863][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.512164][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.564800][ T6839] Option ' ' to dns_resolver key: bad/missing value [ 68.634773][ T12] team0 (unregistering): Port device team_slave_1 removed [ 68.646566][ T12] team0 (unregistering): Port device team_slave_0 removed [ 68.798625][ T6843] loop6: detected capacity change from 0 to 8 [ 68.951526][ T6711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.951549][ T6711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.951573][ T6711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.022449][ T6711] hsr_slave_0: entered promiscuous mode [ 69.023146][ T6711] hsr_slave_1: entered promiscuous mode [ 69.054496][ T6853] loop7: detected capacity change from 0 to 2048 [ 69.118504][ T6853] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.140286][ T6852] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 69.153596][ T6852] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 69.153633][ T6852] EXT4-fs (loop7): This should not happen!! Data will be lost [ 69.153633][ T6852] [ 69.153642][ T6852] EXT4-fs (loop7): Total free blocks count 0 [ 69.153649][ T6852] EXT4-fs (loop7): Free/Dirty block details [ 69.153671][ T6852] EXT4-fs (loop7): free_blocks=2415919504 [ 69.153686][ T6852] EXT4-fs (loop7): dirty_blocks=32 [ 69.153693][ T6852] EXT4-fs (loop7): Block reservation details [ 69.153699][ T6852] EXT4-fs (loop7): i_reserved_data_blocks=2 [ 69.211190][ T4712] Bluetooth: hci2: command tx timeout [ 69.212168][ T6711] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 69.216338][ T6711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.218667][ T6711] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 69.225605][ T6711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.225907][ T6711] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 69.228239][ T6711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.231149][ T6711] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 69.238015][ T6711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.346879][ T6880] loop5: detected capacity change from 0 to 128 [ 69.360796][ T6711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.665565][ T6895] FAULT_INJECTION: forcing a failure. [ 69.665565][ T6895] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 69.665597][ T6895] CPU: 0 UID: 0 PID: 6895 Comm: syz.6.384 Not tainted syzkaller #0 PREEMPT [ 69.665610][ T6895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 69.665617][ T6895] Call trace: [ 69.665620][ T6895] show_stack+0x2c/0x3c (C) [ 69.665639][ T6895] __dump_stack+0x30/0x40 [ 69.665651][ T6895] dump_stack_lvl+0xd8/0x12c [ 69.665660][ T6895] dump_stack+0x1c/0x28 [ 69.665670][ T6895] should_fail_ex+0x414/0x588 [ 69.665680][ T6895] should_fail+0x14/0x24 [ 69.665687][ T6895] should_fail_usercopy+0x20/0x30 [ 69.665696][ T6895] _inline_copy_from_user+0x40/0x180 [ 69.665707][ T6895] __sys_bpf+0x140/0x5f0 [ 69.665716][ T6895] __arm64_sys_bpf+0x80/0x98 [ 69.665725][ T6895] invoke_syscall+0x98/0x244 [ 69.665735][ T6895] el0_svc_common+0xe8/0x23c [ 69.665744][ T6895] do_el0_svc+0x48/0x58 [ 69.665754][ T6895] el0_svc+0x64/0x260 [ 69.665762][ T6895] el0t_64_sync_handler+0x48/0x148 [ 69.665769][ T6895] el0t_64_sync+0x198/0x19c [ 70.358988][ T6711] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.361012][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.361054][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.367184][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.367220][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.369183][ T6852] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 70.454054][ T5766] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 70.633316][ T6711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.517603][ T4712] Bluetooth: hci2: command tx timeout [ 71.761959][ T6711] veth0_vlan: entered promiscuous mode [ 71.767231][ T6711] veth1_vlan: entered promiscuous mode [ 71.777443][ T6711] veth0_macvtap: entered promiscuous mode [ 71.780428][ T6711] veth1_macvtap: entered promiscuous mode [ 71.786451][ T6711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.802963][ T6711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.872926][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.879527][ T3739] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.879956][ T3739] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.880036][ T3739] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.955560][ T6986] Invalid option length (665) for dns_resolver key [ 72.003043][ T6992] loop6: detected capacity change from 0 to 512 [ 72.004691][ T3739] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.004713][ T3739] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.021281][ T6992] EXT4-fs (loop6): orphan cleanup on readonly fs [ 72.021631][ T6992] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.399: bg 0: block 63: padding at end of block bitmap is not set [ 72.021647][ T6992] loop6: lost filesystem error report for type 5 error -117 [ 72.025017][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 72.025032][ C0] EXT4-fs (loop6): initial error at time 71: ext4_validate_block_bitmap:441 [ 72.025044][ C0] EXT4-fs (loop6): last error at time 71: ext4_validate_block_bitmap:441 [ 72.025591][ T6992] EXT4-fs error (device loop6): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.6.399: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 72.025608][ T6992] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 72.025968][ T6992] EXT4-fs warning (device loop6): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.6.399: ea_inode dec ref err=-117 [ 72.026074][ T6992] EXT4-fs (loop6): 1 orphan inode deleted [ 72.026535][ T6992] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 72.061076][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.061099][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.072886][ T5591] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.097026][ T7000] loop7: detected capacity change from 0 to 512 [ 72.124729][ T7000] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.401: invalid indirect mapped block 4294967295 (level 1) [ 72.124807][ T7000] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 72.125492][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 72.125505][ C0] EXT4-fs (loop7): initial error at time 71: ext4_free_branches:1023: inode 11 [ 72.125524][ C0] EXT4-fs (loop7): last error at time 71: ext4_free_branches:1023: inode 11 [ 72.125847][ T7000] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.401: invalid indirect mapped block 4294967295 (level 1) [ 72.125878][ T7000] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 72.126152][ T7000] EXT4-fs (loop7): 2 truncates cleaned up [ 72.126597][ T7000] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.843809][ T4398] 8021q: adding VLAN 0 to HW filter on device eth14 [ 73.425083][ T7081] loop5: detected capacity change from 0 to 1024 [ 73.431557][ T7081] EXT4-fs (loop5): stripe (31) is not aligned with cluster size (16), stripe is disabled [ 73.462158][ T7081] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.477151][ T5766] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.555498][ T4712] Bluetooth: hci2: command tx timeout [ 73.870586][ T7093] loop7: detected capacity change from 0 to 4096 [ 73.884398][ T7093] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.937136][ T7093] EXT4-fs error (device loop7): ext4_get_first_dir_block:3557: inode #12: block 80: comm syz.7.414: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 73.944612][ T7093] EXT4-fs error (device loop7): ext4_get_first_dir_block:3560: inode #12: comm syz.7.414: directory missing '..' [ 73.973227][ T5766] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.984847][ T4398] 8021q: adding VLAN 0 to HW filter on device eth15 [ 74.170069][ T7111] loop7: detected capacity change from 0 to 1024 [ 74.170440][ T7111] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.172434][ T7114] 9p: Bad value for 'wfdno' [ 74.181575][ T7111] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8802c018, mo2=0002] [ 74.182151][ T7111] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 75.045550][ T5132] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.232351][ T5766] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 75.251390][ T7130] __nla_validate_parse: 2 callbacks suppressed [ 75.251421][ T7130] netlink: 8 bytes leftover after parsing attributes in process `syz.5.422'. [ 75.251685][ T7130] netlink: 8 bytes leftover after parsing attributes in process `syz.5.422'. [ 75.251695][ T7130] netlink: 16 bytes leftover after parsing attributes in process `syz.5.422'. [ 75.365237][ T7144] loop5: detected capacity change from 0 to 1024 [ 75.423480][ T7144] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 75.470485][ T5132] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 75.694057][ T4712] Bluetooth: hci2: command tx timeout [ 75.876809][ T4712] Bluetooth: hci1: connection err: -111 [ 75.910303][ T7170] netlink: 'syz.1.433': attribute type 5 has an invalid length. [ 75.977869][ T7176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.436'. [ 75.977898][ T7176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.436'. [ 75.983295][ T1249] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.983347][ T1249] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.983369][ T1249] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.983387][ T1249] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.074817][ T7183] netlink: 16 bytes leftover after parsing attributes in process `syz.1.437'. [ 76.074838][ T7180] netlink: 16 bytes leftover after parsing attributes in process `syz.1.437'. [ 76.257967][ T7193] loop7: detected capacity change from 0 to 512 [ 76.278770][ T7193] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.291374][ T7193] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.317910][ T7193] EXT4-fs (loop7): changing journal_checksum during remount not supported; ignoring [ 76.320040][ T7193] EXT4-fs (loop7): can't disable delalloc during remount [ 76.392096][ T5766] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.394653][ T7202] loop6: detected capacity change from 0 to 256 [ 76.456941][ T7208] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.457234][ T7208] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.457668][ T7208] bridge0: entered allmulticast mode [ 76.469238][ T7211] netlink: 'syz.6.445': attribute type 10 has an invalid length. [ 76.520449][ T7214] syzkaller0: entered promiscuous mode [ 76.521852][ T7214] syzkaller0: entered allmulticast mode [ 76.559393][ T7221] netlink: 28 bytes leftover after parsing attributes in process `syz.6.449'. [ 76.559428][ T7221] netlink: 28 bytes leftover after parsing attributes in process `syz.6.449'. [ 76.571968][ T7221] team0: entered promiscuous mode [ 76.571997][ T7221] team_slave_0: entered promiscuous mode [ 76.572073][ T7221] team_slave_1: entered promiscuous mode [ 76.573644][ T7221] bond0: entered promiscuous mode [ 76.573656][ T7221] bond_slave_0: entered promiscuous mode [ 76.575177][ T7221] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 76.602540][ T7224] loop6: detected capacity change from 0 to 128 [ 76.609637][ T7224] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.757278][ T7232] loop7: detected capacity change from 0 to 256 [ 76.771491][ T7232] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 76.772857][ T7232] FAT-fs (loop7): error, corrupted file size (i_pos 196, 2048) [ 76.772877][ T7232] FAT-fs (loop7): Filesystem has been set read-only [ 77.654115][ T7173] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 78.389279][ T5591] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.548443][ T7243] fuse: Unknown parameter 'üúoup_id' [ 78.714300][ T7252] loop5: detected capacity change from 0 to 256 [ 78.892827][ T7262] netlink: 8 bytes leftover after parsing attributes in process `syz.7.461'. [ 78.898256][ T7262] netlink: 'syz.7.461': attribute type 1 has an invalid length. [ 79.852589][ T7306] tipc: Enabling of bearer rejected, failed to enable media [ 79.854641][ T7306] IPVS: set_ctl: invalid protocol: 58 172.20.20.41:20001 [ 79.965054][ T7285] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 80.030241][ T7315] loop7: detected capacity change from 0 to 1024 [ 80.032696][ T7315] EXT4-fs: Ignoring removed orlov option [ 80.060658][ T7315] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.070686][ T7315] ieee802154 phy0 wpan0: encryption failed: -22 [ 80.089789][ T5766] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.098814][ T7321] loop5: detected capacity change from 0 to 2048 [ 80.099145][ T7321] EXT4-fs: Ignoring removed i_version option [ 80.113848][ T7321] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.133257][ T7326] macsec1: entered allmulticast mode [ 80.134539][ T7326] veth1_macvtap: entered allmulticast mode [ 80.138003][ T5132] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.222094][ T7330] loop5: detected capacity change from 0 to 1024 [ 80.236760][ T7330] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 80.251050][ T5132] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 80.564124][ T4712] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 80.564168][ T4712] Bluetooth: hci1: Injecting HCI hardware error event [ 80.567402][ T4722] Bluetooth: hci1: hardware error 0x00 [ 80.608637][ T7343] tmpfs: User quota inode hardlimit too large. [ 80.667870][ T7347] netlink: 'syz.5.483': attribute type 4 has an invalid length. [ 80.889836][ T7343] tmpfs: User quota inode hardlimit too large. [ 80.889944][ T7343] tmpfs: User quota inode hardlimit too large. [ 80.890038][ T7343] tmpfs: User quota inode hardlimit too large. [ 80.890108][ T7343] tmpfs: User quota inode hardlimit too large. [ 80.890179][ T7343] tmpfs: User quota inode hardlimit too large. [ 80.904984][ T7343] tmpfs: User quota inode hardlimit too large. [ 80.910903][ T7343] tmpfs: User quota inode hardlimit too large. [ 80.911018][ T7343] tmpfs: User quota inode hardlimit too large. [ 80.911090][ T7343] tmpfs: User quota inode hardlimit too large. [ 80.911152][ T7343] tmpfs: User quota inode hardlimit too large. [ 80.911220][ T7343] tmpfs: User quota inode hardlimit too large. [ 80.911278][ T7343] tmpfs: User quota inode hardlimit too large. [ 80.911609][ T7343] tmpfs: User quota inode hardlimit too large. [ 80.918883][ T7343] tmpfs: User quota inode hardlimit too large. [ 80.918977][ T7343] tmpfs: User quota inode hardlimit too large. [ 80.919057][ T7343] tmpfs: User quota inode hardlimit too large. [ 80.919120][ T7343] tmpfs: User quota inode hardlimit too large. [ 80.919182][ T7343] tmpfs: User quota inode hardlimit too large. [ 80.919242][ T7343] tmpfs: User quota inode hardlimit too large. [ 80.919302][ T7343] tmpfs: User quota inode hardlimit too large. [ 80.919366][ T7343] tmpfs: User quota inode hardlimit too large. [ 80.919425][ T7343] tmpfs: User quota inode hardlimit too large. [ 80.919482][ T7343] tmpfs: User quota inode hardlimit too large. [ 80.919548][ T7343] tmpfs: User quota inode hardlimit too large. [ 80.919604][ T7343] tmpfs: User quota inode hardlimit too large. [ 80.919662][ T7343] tmpfs: User quota inode hardlimit too large. [ 80.919718][ T7343] tmpfs: User quota inode hardlimit too large. [ 80.922076][ T7343] tmpfs: User quota inode hardlimit too large. [ 80.922144][ T7343] tmpfs: User quota inode hardlimit too large. [ 80.922211][ T7343] tmpfs: User quota inode hardlimit too large. [ 80.922272][ T7343] tmpfs: User quota inode hardlimit too large. [ 80.922331][ T7343] tmpfs: User quota inode hardlimit too large. [ 80.922392][ T7343] tmpfs: User quota inode hardlimit too large. [ 80.922449][ T7343] tmpfs: User quota inode hardlimit too large. [ 80.922508][ T7343] tmpfs: User quota inode hardlimit too large. [ 80.960140][ T7352] loop6: detected capacity change from 0 to 512 [ 80.962299][ T7352] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.963547][ T7352] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.487: iget: bad i_size value: 38620345925642 [ 80.963563][ T7352] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 80.963718][ T7352] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.487: couldn't read orphan inode 15 (err -117) [ 80.963730][ T7352] loop6: lost filesystem error report for type 5 error -117 [ 80.964360][ T7352] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.979168][ T7352] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.487: bg 0: block 5: invalid block bitmap [ 80.987349][ T7352] overlayfs: failed to set uuid (/file0, err=-28); falling back to uuid=null. [ 81.041766][ T7361] netlink: 'syz.1.486': attribute type 1 has an invalid length. [ 81.041799][ T7361] __nla_validate_parse: 1 callbacks suppressed [ 81.041821][ T7361] netlink: 220 bytes leftover after parsing attributes in process `syz.1.486'. [ 81.075707][ T7365] loop7: detected capacity change from 0 to 4096 [ 81.077654][ T7365] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.081892][ T7365] EXT4-fs (loop7): Test dummy encryption mode enabled [ 81.083645][ T7365] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.180766][ T5766] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.207458][ T7368] netlink: 'syz.7.492': attribute type 11 has an invalid length. [ 81.253845][ T7370] loop8: detected capacity change from 0 to 512 [ 81.283324][ T7370] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2860: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 81.286018][ T7370] EXT4-fs (loop8): 1 truncate cleaned up [ 81.289128][ T7370] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.293377][ T7370] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.494: bg 0: block 7: invalid block bitmap [ 81.384316][ T7377] loop5: detected capacity change from 0 to 256 [ 81.421466][ T6711] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.443506][ T7380] loop8: detected capacity change from 0 to 128 [ 81.444370][ T7380] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 81.450038][ T7380] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 81.465671][ T7380] EXT4-fs error (device loop8): __ext4_find_entry:1626: inode #2: comm syz.8.496: checksumming directory block 0 [ 81.568430][ T6711] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 81.603409][ T7382] x_tables: ip_tables: osf match: only valid for protocol 6 [ 81.956649][ T7390] vivid-000: disconnect [ 81.968500][ T7390] netlink: 20 bytes leftover after parsing attributes in process `syz.1.498'. [ 81.968576][ T7390] netlink: 20 bytes leftover after parsing attributes in process `syz.1.498'. [ 81.968628][ T7390] netlink: 20 bytes leftover after parsing attributes in process `syz.1.498'. [ 81.968673][ T7390] netlink: 20 bytes leftover after parsing attributes in process `syz.1.498'. [ 81.968718][ T7390] netlink: 20 bytes leftover after parsing attributes in process `syz.1.498'. [ 81.968761][ T7390] netlink: 20 bytes leftover after parsing attributes in process `syz.1.498'. [ 81.968802][ T7390] netlink: 20 bytes leftover after parsing attributes in process `syz.1.498'. [ 81.968846][ T7390] netlink: 20 bytes leftover after parsing attributes in process `syz.1.498'. [ 81.968893][ T7390] netlink: 20 bytes leftover after parsing attributes in process `syz.1.498'. [ 81.982213][ T7389] vivid-000: reconnect [ 82.239932][ T5132] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 82.239966][ T5132] FAT-fs (loop5): Filesystem has been set read-only [ 82.240212][ T5132] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 82.554477][ T7417] overlay: filesystem on ./file0 is read-only [ 82.954859][ T4722] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 83.170203][ T7420] mmap: syz.8.508 (7420) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 83.200752][ T7422] loop7: detected capacity change from 0 to 1024 [ 83.280004][ T1249] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.286541][ T7422] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.335331][ T5591] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.501646][ T1249] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.568645][ T4712] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.571195][ T4712] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.573259][ T4712] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.575136][ T4712] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.580589][ T4712] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.671230][ T1249] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.778551][ T4722] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.781023][ T4722] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.782896][ T4722] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.785083][ T4722] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.787431][ T4722] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.870527][ T1249] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.049503][ T5766] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 84.127500][ T7459] loop7: detected capacity change from 0 to 512 [ 84.136133][ T7459] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 84.136160][ T7459] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 84.149064][ T7459] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 84.156149][ T7459] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 84.156214][ T7459] System zones: 0-2, 18-18, 34-35 [ 84.184318][ T7459] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.223282][ T7459] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 84.225557][ T7459] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 84.228701][ T7459] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 84.228883][ T7459] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 84.238757][ T7459] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.516: bg 0: block 353: padding at end of block bitmap is not set [ 84.257490][ T7459] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 84.328609][ T5766] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.369985][ T7470] netlink: 'syz.8.517': attribute type 3 has an invalid length. [ 84.516329][ T7479] Soft offlining pfn 0x13e869 at process virtual address 0x20465000 [ 84.531610][ T7479] Soft offline: 0x13e869: page migration failed 1, type 0x5ffc00000021008(uptodate|arch_1|swapbacked|node=0|zone=2|lastcpupid=0x7ff) [ 84.554071][ T1249] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.586271][ T1249] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.612258][ T1249] bond0 (unregistering): Released all slaves [ 84.616276][ T1249] bond1 (unregistering): Released all slaves [ 84.626704][ T4398] 8021q: adding VLAN 0 to HW filter on device eth16 [ 84.870114][ T4398] 8021q: adding VLAN 0 to HW filter on device eth17 [ 85.014265][ T7436] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.015832][ T7436] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.015934][ T7436] bridge_slave_0: entered allmulticast mode [ 85.016407][ T7436] bridge_slave_0: entered promiscuous mode [ 85.024633][ T7436] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.026390][ T7436] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.028285][ T7436] bridge_slave_1: entered allmulticast mode [ 85.030163][ T7436] bridge_slave_1: entered promiscuous mode [ 85.285274][ T7479] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 85.299159][ T7436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.300179][ T7436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.311498][ T7436] team0: Port device team_slave_0 added [ 85.326645][ T7436] team0: Port device team_slave_1 added [ 85.394657][ T7436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.394688][ T7436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.394715][ T7436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.395247][ T7436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.395254][ T7436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.395267][ T7436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.411936][ T7436] hsr_slave_0: entered promiscuous mode [ 85.412285][ T7436] hsr_slave_1: entered promiscuous mode [ 85.412473][ T7436] debugfs: 'hsr0' already exists in 'hsr' [ 85.412482][ T7436] Cannot create hsr debugfs directory [ 85.436565][ T1249] hsr_slave_0: left promiscuous mode [ 85.440321][ T1249] hsr_slave_1: left promiscuous mode [ 85.441376][ T1249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.441389][ T1249] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.443553][ T1249] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.443566][ T1249] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.449766][ T1249] veth1_macvtap: left promiscuous mode [ 85.451052][ T1249] veth0_macvtap: left promiscuous mode [ 85.454188][ T7528] loop7: detected capacity change from 0 to 1024 [ 85.467217][ T7528] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.501439][ T7528] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.586151][ T1249] team_slave_1 (unregistering): left promiscuous mode [ 85.587642][ T1249] team0 (unregistering): Port device team_slave_1 removed [ 85.593284][ T1249] team_slave_0 (unregistering): left promiscuous mode [ 85.595130][ T1249] team0 (unregistering): Port device team_slave_0 removed [ 85.671914][ T5766] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.685819][ T4712] Bluetooth: hci1: command tx timeout [ 85.731638][ T7552] loop7: detected capacity change from 0 to 1024 [ 85.733576][ T7552] EXT4-fs: Ignoring removed mblk_io_submit option [ 85.762045][ T7552] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8802c018, mo2=0002] [ 85.807166][ T7443] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.808695][ T7443] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.810109][ T7443] bridge_slave_0: entered allmulticast mode [ 85.811783][ T7552] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 85.814570][ T7443] bridge_slave_0: entered promiscuous mode [ 85.826404][ T7443] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.827791][ T7443] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.829825][ T7443] bridge_slave_1: entered allmulticast mode [ 85.830309][ T7443] bridge_slave_1: entered promiscuous mode [ 85.847350][ T4712] Bluetooth: hci3: command tx timeout [ 85.851066][ T7443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.853867][ T7443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.974497][ T7443] team0: Port device team_slave_0 added [ 85.994348][ T7443] team0: Port device team_slave_1 added [ 86.046185][ T7443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.046214][ T7443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.046239][ T7443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.046872][ T7443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.046886][ T7443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.046907][ T7443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.059135][ T7443] hsr_slave_0: entered promiscuous mode [ 86.059445][ T7443] hsr_slave_1: entered promiscuous mode [ 86.059667][ T7443] debugfs: 'hsr0' already exists in 'hsr' [ 86.059677][ T7443] Cannot create hsr debugfs directory [ 86.131772][ T7436] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 86.134386][ T7436] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.140643][ T7436] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 86.143003][ T7436] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.153759][ T7436] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 86.160037][ T7436] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.160419][ T7436] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 86.164197][ T7436] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.324383][ T7436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.354474][ T1249] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.356671][ T1249] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 53687 - 0 [ 86.365635][ T4398] 8021q: adding VLAN 0 to HW filter on device eth18 [ 86.407622][ T7436] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.415530][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.415568][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.425850][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.425891][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.441221][ T1249] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.443410][ T1249] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 53687 - 0 [ 86.542810][ T1249] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.542851][ T1249] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 53687 - 0 [ 86.602045][ T5766] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 86.673135][ T1249] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.673176][ T1249] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 53687 - 0 [ 86.691454][ T7616] ip6tnl1: entered promiscuous mode [ 86.705697][ T7620] netlink: 'syz.7.529': attribute type 1 has an invalid length. [ 86.740981][ T7620] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.762850][ T7620] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.765466][ T7620] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 86.768202][ T7620] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 86.847637][ T7624] __nla_validate_parse: 27 callbacks suppressed [ 86.847760][ T7624] netlink: 32 bytes leftover after parsing attributes in process `syz.7.529'. [ 86.859001][ T4398] 8021q: adding VLAN 0 to HW filter on device eth19 [ 86.900806][ T7443] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.930025][ T7443] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.931965][ T7443] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.940848][ T7443] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.942750][ T7443] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.951408][ T7443] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.953222][ T7443] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.955695][ T7443] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.990750][ T7639] netlink: 12 bytes leftover after parsing attributes in process `syz.1.533'. [ 86.990778][ T7639] tipc: Started in network mode [ 86.990800][ T7639] tipc: Node identity 7, cluster identity 4711 [ 86.990813][ T7639] tipc: Node number set to 7 [ 87.124511][ T7443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.146063][ T7662] loop7: detected capacity change from 0 to 1024 [ 87.147930][ T7662] EXT4-fs: Ignoring removed mblk_io_submit option [ 87.165238][ T7662] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8802c018, mo2=0002] [ 87.165905][ T7662] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 87.362659][ T1249] bridge_slave_1: left allmulticast mode [ 87.362686][ T1249] bridge_slave_1: left promiscuous mode [ 87.362780][ T1249] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.365599][ T1249] bridge_slave_0: left allmulticast mode [ 87.365613][ T1249] bridge_slave_0: left promiscuous mode [ 87.365669][ T1249] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.540528][ T1249] dvmrp5: left allmulticast mode [ 87.766741][ T1249] bond0 (unregistering): left promiscuous mode [ 87.766771][ T1249] bond_slave_0: left promiscuous mode [ 87.769399][ T1249] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.774126][ T4712] Bluetooth: hci1: command tx timeout [ 87.785204][ T1249] bond0 (unregistering): Released all slaves [ 87.787664][ T1249] bond1 (unregistering): Released all slaves [ 87.792087][ T1249] bond2 (unregistering): Released all slaves [ 87.795813][ T1249] bond3 (unregistering): Released all slaves [ 87.802013][ T7677] netlink: 76 bytes leftover after parsing attributes in process `syz.8.535'. [ 87.802557][ T7677] netlink: 76 bytes leftover after parsing attributes in process `syz.8.535'. [ 87.809938][ T7436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.818105][ T7443] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.826894][ T6193] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.826941][ T6193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.831796][ T6081] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.831841][ T6081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.934472][ T4712] Bluetooth: hci3: command tx timeout [ 87.983636][ T7436] veth0_vlan: entered promiscuous mode [ 87.989611][ T7436] veth1_vlan: entered promiscuous mode [ 88.028754][ T7436] veth0_macvtap: entered promiscuous mode [ 88.031179][ T7436] veth1_macvtap: entered promiscuous mode [ 88.039635][ T7436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.053445][ T5766] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 88.060169][ T7436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.071096][ T6193] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.071145][ T6193] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.071166][ T6193] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.071183][ T6193] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.153776][ T7712] tun0: tun_chr_ioctl cmd 1074288756 [ 88.153905][ T7712] tun0: tun_chr_ioctl cmd 1074025678 [ 88.153913][ T7712] tun0: group set to 0 [ 88.155874][ T7712] Injecting memory failure for pfn 0x13f757 at process virtual address 0x20000000 [ 88.160270][ T7715] netlink: 'syz.8.543': attribute type 2 has an invalid length. [ 88.163485][ T7712] Memory failure: 0x13f757: keeping poisoned page in swap cache [ 88.167500][ T7712] Memory failure: 0x13f757: Sending SIGBUS to syz.7.541:7712 due to hardware memory corruption [ 88.169448][ T7712] Memory failure: 0x13f757: recovery action for dirty swapcache page: Delayed [ 88.265112][ T7726] loop7: detected capacity change from 0 to 128 [ 88.276773][ T7726] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 88.280659][ T7726] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 88.298557][ T7726] EXT4-fs error (device loop7): __ext4_find_entry:1626: inode #2: comm syz.7.545: checksumming directory block 0 [ 88.405514][ T1249] team0: left promiscuous mode [ 88.405546][ T1249] team_slave_0: left promiscuous mode [ 88.405648][ T1249] team_slave_1: left promiscuous mode [ 88.435999][ T5766] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 88.454547][ T1249] hsr_slave_0: left promiscuous mode [ 88.455886][ T1249] hsr_slave_1: left promiscuous mode [ 88.464988][ T1249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.466770][ T1249] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.474463][ T1249] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.476844][ T1249] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.486873][ T1249] veth1_macvtap: left promiscuous mode [ 88.486913][ T1249] veth0_macvtap: left promiscuous mode [ 88.486944][ T1249] veth1_vlan: left promiscuous mode [ 88.486966][ T1249] veth0_vlan: left promiscuous mode [ 88.521421][ T7743] binder: 7742:7743 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 88.521450][ T7743] binder: 7742:7743 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 88.631561][ T3292] smc: removing ib device syz2 [ 88.719252][ T1249] team0 (unregistering): Port device team_slave_1 removed [ 88.734623][ T1249] team0 (unregistering): Port device team_slave_0 removed [ 88.889292][ T6193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.889320][ T6193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.890666][ T7443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.912809][ T4713] ================================================================== [ 88.912826][ T4713] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x60/0x174 [ 88.912852][ T4713] Read of size 8 at addr ffff0000ef9062f0 by task kworker/1:4/4713 [ 88.912860][ T4713] [ 88.912866][ T4713] CPU: 1 UID: 0 PID: 4713 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT [ 88.912876][ T4713] Tainted: [L]=SOFTLOCKUP [ 88.912879][ T4713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 88.912884][ T4713] Workqueue: events smc_ib_port_event_work [ 88.912897][ T4713] Call trace: [ 88.912900][ T4713] show_stack+0x2c/0x3c (C) [ 88.912912][ T4713] __dump_stack+0x30/0x40 [ 88.912922][ T4713] dump_stack_lvl+0xd8/0x12c [ 88.912931][ T4713] print_address_description+0xb0/0x238 [ 88.912939][ T4713] print_report+0x68/0x84 [ 88.912945][ T4713] kasan_report+0x8c/0xc4 [ 88.912955][ T4713] __asan_report_load8_noabort+0x20/0x2c [ 88.912965][ T4713] __ethtool_get_link_ksettings+0x60/0x174 [ 88.912973][ T4713] ipvlan_ethtool_get_link_ksettings+0x48/0x58 [ 88.912983][ T4713] __ethtool_get_link_ksettings+0x118/0x174 [ 88.912996][ T4713] ib_get_eth_speed+0x154/0x6b0 [ 88.913006][ T4713] rxe_query_port+0x98/0x36c [ 88.913019][ T4713] ib_query_port+0x168/0x770 [ 88.913029][ T4713] smc_ib_port_event_work+0x104/0x8ac [ 88.913038][ T4713] process_scheduled_works+0x79c/0x1098 [ 88.913047][ T4713] worker_thread+0x754/0xba0 [ 88.913055][ T4713] kthread+0x2f8/0x3c8 [ 88.913062][ T4713] ret_from_fork+0x10/0x20 [ 88.913069][ T4713] [ 88.913071][ T4713] Allocated by task 5591: [ 88.913075][ T4713] kasan_save_track+0x40/0x78 [ 88.913082][ T4713] kasan_save_alloc_info+0x44/0x54 [ 88.913090][ T4713] __kasan_kmalloc+0x9c/0xb4 [ 88.913097][ T4713] __kvmalloc_node_noprof+0x3d8/0x880 [ 88.913105][ T4713] alloc_netdev_mqs+0xac/0xe60 [ 88.913112][ T4713] rtnl_create_link+0x2c8/0xb94 [ 88.913118][ T4713] rtnl_newlink_create+0x210/0x768 [ 88.913126][ T4713] rtnl_newlink+0xdc4/0x113c [ 88.913133][ T4713] rtnetlink_rcv_msg+0x66c/0x9c8 [ 88.913141][ T4713] netlink_rcv_skb+0x22c/0x410 [ 88.913149][ T4713] rtnetlink_rcv+0x28/0x38 [ 88.913156][ T4713] netlink_unicast+0x610/0x800 [ 88.913163][ T4713] netlink_sendmsg+0x63c/0x920 [ 88.913171][ T4713] __sock_sendmsg+0xc8/0x138 [ 88.913179][ T4713] __sys_sendto+0x254/0x338 [ 88.913187][ T4713] __arm64_sys_sendto+0xd8/0xf8 [ 88.913196][ T4713] invoke_syscall+0x98/0x244 [ 88.913204][ T4713] el0_svc_common+0xe8/0x23c [ 88.913212][ T4713] do_el0_svc+0x48/0x58 [ 88.913220][ T4713] el0_svc+0x64/0x260 [ 88.913226][ T4713] el0t_64_sync_handler+0x48/0x148 [ 88.913231][ T4713] el0t_64_sync+0x198/0x19c [ 88.913237][ T4713] [ 88.913239][ T4713] Freed by task 1249: [ 88.913242][ T4713] kasan_save_track+0x40/0x78 [ 88.913249][ T4713] kasan_save_free_info+0x58/0x70 [ 88.913256][ T4713] __kasan_slab_free+0x74/0xa4 [ 88.913263][ T4713] kfree+0x188/0x690 [ 88.913269][ T4713] kvfree+0x30/0x40 [ 88.913276][ T4713] netdev_release+0x88/0xb0 [ 88.913282][ T4713] device_release+0xa8/0x1c8 [ 88.913290][ T4713] kobject_put+0x1dc/0x4bc [ 88.913297][ T4713] netdev_run_todo+0xab4/0xc48 [ 88.913303][ T4713] rtnl_unlock+0x14/0x20 [ 88.913309][ T4713] default_device_exit_batch+0x584/0x600 [ 88.913316][ T4713] ops_undo_list+0x428/0x818 [ 88.913322][ T4713] cleanup_net+0x470/0x6b8 [ 88.913326][ T4713] process_scheduled_works+0x79c/0x1098 [ 88.913333][ T4713] worker_thread+0x754/0xba0 [ 88.913340][ T4713] kthread+0x2f8/0x3c8 [ 88.913345][ T4713] ret_from_fork+0x10/0x20 [ 88.913351][ T4713] [ 88.913352][ T4713] The buggy address belongs to the object at ffff0000ef906000 [ 88.913352][ T4713] which belongs to the cache kmalloc-cg-4k of size 4096 [ 88.913358][ T4713] The buggy address is located 752 bytes inside of [ 88.913358][ T4713] freed 4096-byte region [ffff0000ef906000, ffff0000ef907000) [ 88.913365][ T4713] [ 88.913367][ T4713] The buggy address belongs to the physical page: [ 88.913371][ T4713] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12f900 [ 88.913377][ T4713] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 88.913383][ T4713] memcg:ffff0000ef901011 [ 88.913386][ T4713] flags: 0x5ffc00000000040(head|node=0|zone=2|lastcpupid=0x7ff) [ 88.913393][ T4713] page_type: f5(slab) [ 88.913400][ T4713] raw: 05ffc00000000040 ffff0000c001d500 dead000000000100 dead000000000122 [ 88.913406][ T4713] raw: 0000000000000000 0000200000040004 00000000f5000000 ffff0000ef901011 [ 88.913412][ T4713] head: 05ffc00000000040 ffff0000c001d500 dead000000000100 dead000000000122 [ 88.913417][ T4713] head: 0000000000000000 0000200000040004 00000000f5000000 ffff0000ef901011 [ 88.913422][ T4713] head: 05ffc00000000003 fffffdffc3be4001 00000000ffffffff 00000000ffffffff [ 88.913428][ T4713] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 88.913431][ T4713] page dumped because: kasan: bad access detected [ 88.913434][ T4713] [ 88.913435][ T4713] Memory state around the buggy address: [ 88.913439][ T4713] ffff0000ef906180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.913443][ T4713] ffff0000ef906200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.913448][ T4713] >ffff0000ef906280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.913451][ T4713] ^ [ 88.913454][ T4713] ffff0000ef906300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.913458][ T4713] ffff0000ef906380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.913462][ T4713] ================================================================== [ 88.913521][ T4713] Disabling lock debugging due to kernel taint [ 88.957315][ T7765] netlink: 76 bytes leftover after parsing attributes in process `syz.8.547'. [ 88.957342][ T7765] netlink: 76 bytes leftover after parsing attributes in process `syz.8.547'. [ 89.005989][ T7443] veth0_vlan: entered promiscuous mode [ 89.055259][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.055283][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.057885][ T7443] veth1_vlan: entered promiscuous mode [ 89.110921][ T7443] veth0_macvtap: entered promiscuous mode [ 89.132127][ T7443] veth1_macvtap: entered promiscuous mode [ 89.157053][ T7443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.163415][ T7443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.185161][ T15] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.185253][ T15] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.185311][ T15] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.185325][ T15] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.256584][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.256610][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.277402][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.277425][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.862612][ T4712] Bluetooth: hci1: command tx timeout [ 90.022689][ T4712] Bluetooth: hci3: command tx timeout [ 90.266702][ T4398] 8021q: adding VLAN 0 to HW filter on device eth0 [ 90.358370][ T4398] 8021q: adding VLAN 0 to HW filter on device eth1 [ 90.456972][ T4398] 8021q: adding VLAN 0 to HW filter on device eth2 [ 90.546442][ T4398] 8021q: adding VLAN 0 to HW filter on device eth3 [ 91.949924][ T4712] Bluetooth: hci1: command tx timeout [ 92.110176][ T4712] Bluetooth: hci3: command tx timeout