last executing test programs: 1.476388924s ago: executing program 4 (id=443): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000010073797a30000000002c000000030a01010000000000000000010000800900010073797a30000000000900030073797a32000000003c000000060a01040000000000000a000100000008000b4000000000200004801c0001800b00010065787468647200000c00028005"], 0xb0}, 0x1, 0x0, 0x0, 0x200c0}, 0x40) r0 = socket(0xa, 0x3, 0x3a) capset(&(0x7f0000000600)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) setsockopt$inet6_int(r0, 0x29, 0xd1, 0x0, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a01020000000000000000000900030073797a320000000014000480080002400000000008000140000000000900010073797a30000000007cab07006e6174003c000000060a010400000000000000000100000008000b40000000000900010073797a3000000000140480100001800a0001007265646972000000140000001100010000000000000000000000000a000000"], 0xcc}}, 0x10) r1 = io_uring_setup(0x3eaf, &(0x7f0000000100)={0x0, 0x0, 0x2010, 0x0, 0x4}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x22, &(0x7f0000000340)=[{&(0x7f0000000480)=""/233}], 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f00000001c0), 0x10) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x70bd27, 0x25dfdbfd, {0x2}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x6, 0xf2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044c12}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r3) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x82000, 0x0) ioctl$MON_IOCX_GETX(r5, 0x4018920a, &(0x7f0000000580)={&(0x7f0000000180), &(0x7f0000000280)=""/181, 0xb5}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) fcntl$addseals(r4, 0x409, 0x6) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000240)=0x6a, 0x4) bind$inet(r7, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000000)=0x6012, 0x4) connect$inet(r7, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r7, &(0x7f0000000e40)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd295850eb86f7e5e91885c89d440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ab5375ab", 0x5f, 0xdf, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500090000000000050020"], 0x7c}}, 0x0) 1.00054852s ago: executing program 0 (id=452): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r0, 0x1) sendmmsg(r0, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc0) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") 895.928031ms ago: executing program 0 (id=455): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="36003300d00000000802110000fa0702110000005050505050500000150105000000000000003ca4def7f51bc85a802dd34e528ddf020000"], 0x54}}, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r4 = socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f00000000c0)=""/177) (async) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f00000000c0)=""/177) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x4d) fstat(r5, 0x0) write$FUSE_DIRENT(r5, &(0x7f00000000c0)={0x10, 0xffffffffffffffda}, 0x10) r6 = fcntl$dupfd(r0, 0x0, r4) epoll_create1(0x0) (async) r7 = epoll_create1(0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000040)) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fcffffff000000007d00000818110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007023d8da30000f8ffffffb703000008000000b70400000200000085000000820000009500000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_create1(0x0) (async) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r10, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r7, &(0x7f0000000000)={0xa0000001}) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071183b000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r13, 0x6, 0x0, 0x0, 0x0) fsmount(r13, 0x1, 0x6) (async) r14 = fsmount(r13, 0x1, 0x6) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) (async) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r12, r14, 0x2b, 0x0, @val=@perf_event={0x728}}, 0x18) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r12, r14, 0x2b, 0x0, @val=@perf_event={0x728}}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) (async) r15 = socket$inet_udp(0x2, 0x2, 0x0) close(r15) (async) close(r15) ioctl$TIOCGPTPEER(r6, 0x8001af85, 0xffffffffffffffff) (async) ioctl$TIOCGPTPEER(r6, 0x8001af85, 0xffffffffffffffff) 748.688442ms ago: executing program 3 (id=456): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x1000800, &(0x7f0000000840)=ANY=[], 0xff, 0x290, &(0x7f0000000540)="$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") socket$inet_tcp(0x2, 0x1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0x0, 0x0, &(0x7f00000004c0)='GPL\x00', 0xf9b, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000500)='./file1\x00', 0x3006804, &(0x7f0000000c40)={[{@user_xattr}, {@abort}, {@resuid}, {@auto_da_alloc}, {@nodioread_nolock}, {@errors_remount}, {@errors_continue}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}]}, 0x1, 0x56d, &(0x7f0000001200)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="000228bd7000fddbdf250100000004000300b76dd800ddb005996a064dc8804684fda27fdcf0b17dae8fb556efdc9bd08b95e76b6ae031323cc83765296db483672fa9a462773a7b2a261bbc8a2fce95d234e43bf2a63657"], 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x24000080) (async) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x1, 0x0, 0x2000051}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) (async) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r7, &(0x7f0000000040), 0x27, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x100000, @loopback}, 0x1c) (async) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 738.009077ms ago: executing program 0 (id=458): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0xc044) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="1f003300a0000000080211000001080211"], 0x3c}, 0x1, 0x0, 0x0, 0x2400c881}, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa8, r9, 0x300, 0x70bd25, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000200)={0x0, 0x600, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000ffdbdf250800000008000300", @ANYRES32=r8], 0x28}, 0x1, 0x0, 0x0, 0x4cca9349ed9d3bc}, 0x848) fcntl$notify(r0, 0x402, 0x0) (async) fcntl$notify(r0, 0x402, 0x0) 718.778786ms ago: executing program 2 (id=459): r0 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000140)={[{@journal_async_commit}, {}, {@sysvgroups}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) (async) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {}, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x8086}, 0x3000c81c) socket(0x1d, 0x1, 0x2) (async) r3 = socket(0x1d, 0x1, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r4, &(0x7f00000016c0)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd52a44fec4f6f1a6f65158bb6911c295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd4829bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2971f29d9364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bccdf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e807df4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfdb0c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681a03007e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22f3bb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7c5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cf8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46070039116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c949ca930e7a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4bc700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) setitimer(0x1, &(0x7f0000000000)={{}, {0xb, 0x4}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) connect$pppl2tp(r3, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x3, 0x1, 0x2, 0x3, {0xa, 0x4e23, 0xa, @private2, 0x40000}}}, 0x3a) (async) connect$pppl2tp(r3, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x3, 0x1, 0x2, 0x3, {0xa, 0x4e23, 0xa, @private2, 0x40000}}}, 0x3a) r5 = socket(0xa, 0x3, 0xff) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, 0x0, 0x0) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x3}, 0x1c) mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r6, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000016c0)=""/4096, 0x1000}], 0x1}, 0xfffffffe}], 0x1, 0x0, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) (async) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r9, 0x0) mlockall(0x6) ioctl$PPPIOCGL2TPSTATS(r7, 0x80487436, 0x0) (async) ioctl$PPPIOCGL2TPSTATS(r7, 0x80487436, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) (async) setsockopt$inet6_int(r5, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) 632.821721ms ago: executing program 1 (id=460): r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x4788, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xc05bb38d11e64b9a, 0x0, &(0x7f00000006c0), 0x0, 0x1000000000000, 0x0}) keyctl$dh_compute(0x17, &(0x7f00000002c0), 0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={'hmac(sha3-224)\x00'}}) r9 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[], 0xfdef) close(r9) recvmsg(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021) 614.738291ms ago: executing program 4 (id=461): syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000340)='./file1\x00', 0x1210000, &(0x7f0000000500)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x6}}, {@bh}, {@init_itable}, {@barrier}, {@nodelalloc}, {@data_ordered}, {@dax_always}, {@nouid32}, {@nodelalloc}, {@journal_checksum}, {@dax_inode}, {@user_xattr}, {@noblock_validity}], [{@dont_hash}]}, 0xfc, 0x582, &(0x7f0000000640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x2, 0x7b, 0x87fff) (async) fallocate(r0, 0x2, 0x7b, 0x87fff) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$vim2m(&(0x7f0000000180), 0x20000000204, 0x2) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x20000000204, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x1a, 0x2, 0x0, "11010000071400000100b64c0000005c4b7c0500", 0x34325241}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x1a, 0x2, 0x0, "11010000071400000100b64c0000005c4b7c0500", 0x34325241}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="030b00000800000000000e"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="030b00000800000000000e"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r6) sendfile(r5, r5, 0x0, 0xe3aa6ea) 532.213388ms ago: executing program 1 (id=462): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000000)={0x3, @sliced={0x5, [0x8, 0x4, 0xd1, 0x0, 0xffff, 0xad80, 0x4, 0x4, 0x4, 0x1, 0x2, 0x6, 0x1ff, 0x0, 0x50, 0x9, 0x2, 0xff, 0x5, 0xfff8, 0x3, 0x8, 0x4, 0x6, 0x10, 0x2, 0x6, 0x0, 0x3, 0x4, 0x5, 0x0, 0x7, 0x30, 0x4, 0x2, 0x8001, 0x2, 0x2e29, 0x3, 0x3, 0x3, 0x6, 0x1, 0x6, 0x8, 0x100, 0x20], 0x1}}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r3], 0x2c}}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x4540}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x27b2}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000881}, 0x48004) 464.954417ms ago: executing program 2 (id=463): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x25dfdbfc, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}}, 0x44080) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@mpls_newroute={0x24, 0x18, 0x601, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x1a00, 0x0, 0x1}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4009}, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x7b, 0x400) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, &(0x7f0000000040)) 464.610167ms ago: executing program 0 (id=464): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r2, @ANYRESOCT=r0, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r2], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f00000028c0)=ANY=[@ANYBLOB="71050103220102d904ffe62d7b308fe7daef9ab7d65a5330e82ff8a71a5ba4ca46da"], 0x109) 464.375391ms ago: executing program 3 (id=465): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000070000f9840500000000000095"], &(0x7f00000000c0)='GPL\x00', 0xc, 0x17, &(0x7f0000000200)=""/23, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100002}, 0x94) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f00000006c0)={&(0x7f0000000040), 0xc, &(0x7f0000000680)={&(0x7f0000000240)={0x430, 0x3f3, 0x200, 0x70bd25, 0x25dfdbff, {0x3, 0x0, 0x2, [0x3d6, 0x0, 0x41a3, 0x1cbd0572, 0x1cb, 0x10, 0x6, 0xa, 0xd, 0x7, 0x5, 0x4, 0x5, 0x7, 0xffffffff, 0x100, 0x7ff, 0x400, 0x8001, 0x5, 0x6, 0x2, 0x529, 0x3385, 0x4, 0x7fffffff, 0x4, 0xfffffbff, 0xfffffffd, 0xffff96b2, 0x3, 0x16dd, 0x9aec, 0x3ff, 0xf, 0x9, 0x3, 0x9, 0x6, 0x3, 0x5, 0x7, 0x400, 0xe5b, 0x5, 0x2e, 0x1, 0x1000000, 0x2, 0x3, 0x5bf1, 0xf, 0x4, 0x9f10, 0x3c1651e0, 0x4, 0x2, 0xf, 0xfffffff8, 0x6, 0x3, 0x7, 0x0, 0x100], [0x5, 0xfffffffb, 0xffff8001, 0x7, 0x9, 0x1, 0x7fff, 0x101, 0x3, 0x5, 0x1, 0x10001, 0xb, 0x1000, 0xffffffff, 0x93d7, 0x588e, 0x3, 0x4, 0x7, 0x6, 0xffff7fff, 0x7, 0x9, 0x7, 0x0, 0x8, 0x200, 0x4, 0x0, 0x4, 0x2, 0x42, 0x7fffffff, 0x5, 0x10001, 0x1, 0x80, 0x10, 0xfffff001, 0x1000, 0x6, 0x9, 0x7, 0x1, 0x6, 0x6, 0x0, 0xfffffff9, 0x7f, 0x8001, 0x0, 0x72, 0x4, 0x1, 0x3, 0x4, 0x7, 0xffff, 0x4, 0x1, 0x2, 0x6, 0x80000001], [0x2, 0x0, 0x2, 0x4, 0x10000000, 0x6, 0x0, 0x7, 0x6, 0x5, 0x9, 0x7f, 0x8507, 0x1, 0xcca, 0x7ff, 0x0, 0xfffff48d, 0x3, 0x1, 0xa65, 0x5, 0x800, 0xfbe0, 0x80000001, 0x3, 0xa, 0x9, 0x9, 0x5, 0x8, 0xf0000000, 0xffffffff, 0x4, 0x7, 0x0, 0x3, 0x2, 0x10000, 0x4, 0x9, 0x8, 0x0, 0x1000, 0x2e2, 0x6, 0x3, 0xa6, 0x2, 0x0, 0x0, 0x14c, 0xffffff81, 0xfffffffc, 0x5, 0x6, 0x81, 0xe6b, 0x7, 0x4000000, 0x7, 0xffffffff, 0x9, 0xf0], [0x200, 0x9, 0x7, 0x6, 0x6, 0x3, 0x200, 0x2, 0x8b0c, 0x3, 0x7, 0x873, 0x3c8b, 0xffff, 0xffffffff, 0x2, 0x4, 0x3ff, 0x3, 0x3800, 0xc, 0x0, 0x3e, 0x0, 0x5, 0xf384, 0x81, 0x5, 0x1, 0x8000, 0x10, 0x3, 0xb8, 0x4, 0x0, 0xfff, 0x2, 0x0, 0x0, 0x3, 0x7, 0x0, 0x744d, 0x30c45447, 0x8, 0x10000, 0xfffffffe, 0xfffffffa, 0x1, 0x0, 0x9, 0x3ff, 0x0, 0x4, 0x40000000, 0x7fffffff, 0x4d, 0xab, 0x3, 0x0, 0x7, 0x8, 0x6, 0x8], 0xd, ['**\x00', 'wlan1\x00', 'E]\x00', '\x00']}, ["", "", "", "", "", "", "", "", ""]}, 0x430}}, 0x4000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x1a9000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCSETSW2(r2, 0x80047456, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 374.185623ms ago: executing program 1 (id=466): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f00000000c0)={@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3f}, 0x1, "e742633dde450b4e9a6a261dc832072130a37a2282d237f324e1e46f692981f3", 0x8, 0x7, 0x101, 0x7ff}, 0x3c) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}, {}, {0x8, 0x6558, 0x2}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_bpf={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{}, {0x35, 0x0, 0x5}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}}, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084080000000000000001"], 0x0, 0x42}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x6, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r2, 0x0, 0x2}, 0x50) 339.955373ms ago: executing program 3 (id=467): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x2, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) r7 = fcntl$dupfd(r5, 0x0, r1) syz_ublk_setup_queues(r0, r6, &(0x7f00000003c0)={0x0, 0xa912, 0x10000, 0x3, 0x3}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x52a7, 0x5d340f1741c2b427, 0x1, 0x1d0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaa56, 0x20, 0x3, 0x218}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6428, 0x20, 0x2, 0xda, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x78e3, 0x100, 0x0, 0x63, 0x0, r7}}], 0x4, 0x0, 0x0) 280.892137ms ago: executing program 3 (id=468): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000100)=0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e000014000280050016000000000006000e000395"], 0x44}}, 0x0) 277.015368ms ago: executing program 3 (id=469): socket$packet(0x11, 0xa, 0x300) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40000080) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0xfffffffd, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) (async) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000400), 0x6, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$USBDEVFS_GETDRIVER(r2, 0x41045508, &(0x7f0000000480)={0x6d2d, "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"}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESDEC=0x0, @ANYRESDEC=0x0], 0xfd, 0x1be, &(0x7f0000000280)="$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") capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x10001, 0x0, 0x1}) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x20000, 0x9b) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x40047211, &(0x7f00000000c0)) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 272.891606ms ago: executing program 4 (id=470): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x44, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044804) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1e, 0x5}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20040014}, 0x1) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000040), 0x2000010, &(0x7f0000000080)=ANY=[@ANYBLOB="67727071756f74615f626c6f636b5f686172646c696d69743d65653c001d1d59d61d527e4565a141e5df13e79fd5c8ac89f0cf779ae2805e429df5fc9fc5c8e32190e89b806a116dccadeef5440855a5b27dc4366fcbb3213f65589b0f2da359ec8f786416aa3f42a4dde8fe5724f8b8755d60af80c737f489b286030fc21464384a961ddfe7c14b2d6a2275332723ce37ec5b25ebf8a3e3e7e3fc26c114781620362b780300e7efe26173d2b94d73461d4f11876c03926a6144e4a10eea8a268f47de32d25fd9d2ca8116c78bfd0daf9f351a126309add993e4453c45fe52deee751ab3fa6026d94e7f96c527ba93f2cfee8ebb4d99e04feb9fa65d4014b700db55ce6a07f2b35dbbe39bfc63e333411bb3ac89a1b7"]) 263.360167ms ago: executing program 1 (id=471): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80c440, &(0x7f00000006c0), 0x2, 0x252, &(0x7f0000000400)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x2a4384b, 0x0, 0x3, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x83) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000280)=@v1={0x0, @aes256, 0x0, @desc1}) openat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40042, 0x1) 188.739177ms ago: executing program 2 (id=472): r0 = socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000040071186a000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f00000000c0)=""/58, 0x30c000, 0x1800, 0x0, 0x3}, 0x20) r1 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000ec0)='nouser\x03\"\x1dm\x9e\'', 0xffffffffffffffff, 0x0) r2 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/smackfs/mapped\x00', 0x2, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)=')\x00', 0x0) write$smackfs_cipsonum(r2, &(0x7f00000000c0)=0x30a, 0x14) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) r4 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, 0x0) r5 = fsopen(&(0x7f0000000340)='devtmpfs\x00', 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000280)) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$sock(r6, &(0x7f0000003ac0)=[{{&(0x7f0000000800)=@rc={0x1f, @any, 0x8}, 0x80, 0x0}}], 0x1, 0x200088d4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000200)}) r7 = memfd_create(&(0x7f0000000140)='user\x00', 0x2) close_range(r7, r5, 0x0) r8 = getpid() syz_pidfd_open(r8, 0x0) socket(0x10, 0x3, 0x0) 187.975683ms ago: executing program 4 (id=473): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x4008, 0x3, 0x218, 0x0, 0x32, 0x148, 0x0, 0x148, 0x180, 0x240, 0x240, 0x180, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0x8010100, @rand_addr=0x64010102, 0xff, 0xff0000ff, 'syz_tun\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x2e, 0x2, 0x14}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@addrtype={{0x30}, {0x1040, 0x224, 0x0, 0x1}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x0, 0x334}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x2, 0x94}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0x0, 'vlan0\x00', 'caif0\x00', {0xff}, {}, 0x2, 0x3, 0x19}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x8}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=[@hopopts_2292={{0x28, 0x29, 0xb, {0x0, 0x1, '\x00', [@calipso={0x7, 0x8, {0xb1bbf2d6b755cdf8, 0x0, 0x0, 0x3}}]}}}, @hopopts={{0x18, 0x29, 0x36, {0x2e}}}], 0x40}, 0xff00) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000005, &(0x7f0000000300), 0x2, 0x1}}, 0x20) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x10, 0x0, 0xf, 0x0, {0x0, 0x9}, {0x350, 0x20002}, {0xf4ef, 0x0, 0x1}, {0x0, 0x0, 0x7fe}, 0x1, 0x100, 0x9, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x3}) 186.690176ms ago: executing program 0 (id=474): socket$nl_route(0x10, 0x3, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) (async) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, &(0x7f00000003c0)={0x0, 0x3938700}, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0xa04011, &(0x7f0000000040), 0xe8, 0xbaa, &(0x7f00000040c0)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 178.41337ms ago: executing program 1 (id=475): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x200, 0x4, 0x25dfdbfd, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9c}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40488c0}, 0x20004000) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8001, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000001dc0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001d80)={&(0x7f00000001c0)={0x1b84, 0x0, 0x301, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x401, 0x47}}}}, [@NL80211_ATTR_CSA_IES={0x814, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0xe, 0xba, [0x6, 0xbdf, 0x0, 0xc3, 0x9]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x3, 0x8b, 0x24d3, 0x5, 0x9]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x0, 0x79b, 0xcb, 0x5, 0x0, 0x6]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x16, 0xba, [0x8, 0x0, 0x0, 0x2, 0x1ff, 0x15b1, 0x7, 0x5, 0x6]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0x3, 0x2, 0x80, 0xc, 0x2, 0x1, 0x2]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x8769]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x18, 0xba, [0x8, 0xe, 0xd, 0x1, 0x4, 0x80, 0x3ff, 0x7fff, 0x3, 0x5]}, @beacon_params=[@NL80211_ATTR_IE={0x5a, 0x2a, [@dsss={0x3, 0x1, 0xa1}, @link_id={0x65, 0x12, {@initial, @device_b, @device_b}}, @cf={0x4, 0x6, {0x58, 0x5, 0xfff8, 0x7}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @random={0x26, 0x10, "bd8b5664590c93ee0bf20a318a0ced03"}, @ht={0x2d, 0x1a, {0x2, 0x1, 0x7, 0x0, {0xfffffffffffffc00, 0x40, 0x0, 0x7, 0x0, 0x1, 0x0, 0x3}, 0x800, 0x80000000, 0x1}}, @dsss={0x3, 0x1, 0xb6}]}], @beacon_params=[@NL80211_ATTR_IE={0xd8, 0x2a, [@mesh_id={0x72, 0x6}, @tim={0x5, 0xb2, {0x4, 0x97, 0x2, "0b97a664eb243d3e89e18c07d97d468560a217a6a9fa34ff2f907d886f81385214948a8f6195d8f615d6a0641dc4c11eb57daad43a25cf8d2b4516f0a4e73ecb767244970d5f078449b76e0aa09e783fad3caa8e77a4da92239cf0df783842e21be228053084afe0c81d126eaeee9b608f53dbb205cc3658220ae2a3ffca713b8d32b248138c71f8948918ac95f9500fec28635ec0a2f0e36282ca38a1b3be586e072909a70bd1c13fc74bf80b8c74"}}, @gcr_ga={0xbd, 0x6, @device_b}, @mesh_chsw={0x76, 0x6, {0x3, 0x8, 0x0, 0x1}}, @peer_mgmt={0x75, 0x6, {0x0, 0x5, @void, @val=0x34, @void}}]}, @NL80211_ATTR_PROBE_RESP={0x660, 0x91, "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"}]]}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CSA_IES={0x1290, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE={0x12a, 0x2a, [@mesh_config={0x71, 0x7, {0x1, 0x1, 0x1, 0x1, 0x1, 0xfc, 0x20}}, @ssid={0x0, 0x6, @default_ap_ssid}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0x4, 0x20}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x5, 0xb0, 0x1}}, @challenge={0x10, 0x1, 0xfd}, @channel_switch={0x25, 0x3, {0x0, 0xe, 0x8}}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0xbe}}, @measure_req={0x26, 0xf7, {0x7b, 0xff, 0x31, "e8a68bde5490bb33e6bf962d4dac899490001c5dbb36d83fcbf46b4a3e75d8acc362ee98440245945264de744c4ccb039ad3f23ee3866c4a9ad9cf973671479e4b022c7079a6f0c42285e85290048c3a818815725061f64f7f6290b051c9a06961a3315472e04a43618d46410c6ff37c4039298f14553ec622a8921f7a05c0d8fd31db7d5a87e6e4e691aa266323a3f6c3387cd873de4643ac0819a8aee49ea0df7d5807356e9edc628e8ce4bd8249d357ce368f66bdbbad281bd518dc930ab6f067aab8911692062ccab7ed64a310ce5da5cbc261a938ec819a009a02d492dd7d53ea8ac34a4b15965feed295b141579e6b0304"}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xe5, 0x80, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x40, 0x38, 0x10}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1, 0xab, 0xb}}, @measure_req={0x26, 0xb7, {0xba, 0x9, 0x3, "c01351a054129b99cbe5030258c555b707bc44e6e1cee2f863cefe91755ce18c262b5d24b3418d2c125def2e9d9fda53fc0753f9cd161be968a831af41310069c3d118fecdfe4e5fcd7b7c63dbbede28d2517e872b468f86e3d32dce410e8bf748588a66f010415bc820e4f4dd7513e9185a12d3490ea131f5cba457f463eb84fe63adb4cafd2001cc56499e84669b1f45d7d3892ad13ed15f6cfbb4d2b4ec7c81e943470580d92beff1b616c0e15dd913b64bdb"}}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @device_b, @broadcast}}, @ssid={0x0, 0x6, @default_ibss_ssid}]}, @NL80211_ATTR_PROBE_RESP={0x73d, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0x20, 0x80, [@ht={0x2d, 0x1a, {0x8, 0x2, 0x3, 0x0, {0x4, 0x7, 0x0, 0x3f9, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x400, 0x2, 0xb}}]}, @NL80211_ATTR_FTM_RESPONDER={0x6c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x62, 0x2, "85fdc2eece70a0b338f28c9c88ed0f6d3c2d04d01ec59cf34fae62634d453e173624f0058632f917e5daf45857d9636da862768924522564f09a1da6f84d276cbe0a3f5827417c73ba4ee6a499c4763df5e210b7e216932ad2acff455760"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_PROBE_RESP={0x85f, 0x91, "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"}, @NL80211_ATTR_BEACON_TAIL={0x3b, 0xf, [@supported_rates={0x1, 0x8, [{0x1}, {0x16, 0x1}, {0xc, 0x1}, {0x1, 0x1}, {0x12, 0x1}, {0x48}, {0x18}, {0x6, 0x1}]}, @gcr_ga={0xbd, 0x6, @device_b}, @ssid={0x0, 0x6, @default_ap_ssid}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @rann={0x7e, 0x15, {{}, 0x4, 0xba, @device_a, 0x5, 0x2, 0xfffffbff}}, @dsss={0x3, 0x1, 0xb9}]}, @NL80211_ATTR_BEACON_TAIL={0x8, 0xf, [@ibss={0x6, 0x2, 0xf5}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x0, 0x6]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ae}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xee}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3d3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x253}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xa57}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x1b84}, 0x1, 0x0, 0x0, 0x4080}, 0x20000005) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000001e00)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e80), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001f80)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001f40)={&(0x7f0000001ec0)={0x44, r3, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xf6, 0x3a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x140}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000002100)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002040)={0x70, r3, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x6, 0x7e}}}}, [@NL80211_ATTR_TID_CONFIG={0x48, 0x11d, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000000000000001}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x11}, 0x88a0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000002140)={0xa, 0x4e20, 0x100000, @local, 0xe5}, 0x1c) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000002240)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x20, r3, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x68}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8090}, 0x4004003) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000022c0), r0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000002300)=0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000023c0)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002380)={&(0x7f0000002340)={0x3c, r7, 0xa04, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4008000) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000002400)={0x7, 0x7, 0x1}, &(0x7f0000002440)=0x28) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000002480)) getsockname$netlink(r0, &(0x7f00000024c0), &(0x7f0000002500)=0xc) ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, &(0x7f0000002540)={r5, 0x0, 0xe, 0x2, 0xe, 0x9}) r9 = syz_open_dev$mtd(&(0x7f0000002580), 0x5, 0x2) ioctl$OTPERASE(r9, 0x400c4d19, &(0x7f00000025c0)={0xfffffffc, 0x8e53, 0xffffffff}) r10 = socket$unix(0x1, 0x1, 0x0) connect$unix(r10, &(0x7f0000002600)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000002680)='wlan1\x00') getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000026c0), &(0x7f0000002700)=0xc) getsockname$inet6(r5, &(0x7f0000002740)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}, &(0x7f0000002780)=0x1c) connect$can_j1939(0xffffffffffffffff, &(0x7f0000002880)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x6}, 0xfd}, 0x18) 150.039861ms ago: executing program 3 (id=476): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x185d02, 0x0) r1 = dup(r0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@private0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000802, r2, &(0x7f0000000140)={0xc0, 0x0, 0x1000, 0x8000000000000000, 0x2, 0xc, 0x6d, 0x10001, 0x5}) madvise(&(0x7f00000e8000/0x2000)=nil, 0x2000, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 98.37347ms ago: executing program 2 (id=477): syz_emit_ethernet(0x82, &(0x7f0000000140)={@link_local, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@ssrr={0x89, 0x7, 0xe, [@rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa011100, 0x1000000}, {@private}, {@broadcast}, {@dev}, {@private}, {@empty}, {@private}]}]}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) write$tun(r1, &(0x7f0000000240)={@val={0x0, 0xf6}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @void, {@generic={0x80f3, "9d8ccd788d561629fbeaadc6fdd87141bbe26dc2f32f75d49694a5f263dd1e04b6797f5589ac4d25cd74c3729d49f57ba67c2daa58c554275bcafeb754a01aaf9a447ab2d28aea680a31c52886f39e4516fb7b32b0"}}}}, 0x67) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_VLAN_ID={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4041) syz_emit_ethernet(0x82, &(0x7f0000000140)={@link_local, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@ssrr={0x89, 0x7, 0xe, [@rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa011100, 0x1000000}, {@private}, {@broadcast}, {@dev}, {@private}, {@empty}, {@private}]}]}}}}}}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) write$tun(r1, &(0x7f0000000240)={@val={0x0, 0xf6}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @void, {@generic={0x80f3, "9d8ccd788d561629fbeaadc6fdd87141bbe26dc2f32f75d49694a5f263dd1e04b6797f5589ac4d25cd74c3729d49f57ba67c2daa58c554275bcafeb754a01aaf9a447ab2d28aea680a31c52886f39e4516fb7b32b0"}}}}, 0x67) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_VLAN_ID={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4041) (async) 95.937456ms ago: executing program 4 (id=478): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000400)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) (async) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000000), 0x4) (async) recvmmsg(r2, &(0x7f0000009840)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x0, 0x0) (async) prlimit64(r0, 0xc, &(0x7f0000000440)={0x52f, 0x8}, &(0x7f0000000480)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000000440002000200000061bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf00000000000000006409f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}, {&(0x7f00000004c0)="bf23757cf624b52a952e3f502df4309dad3b38811a305cbe0fb68f3613e7ad8a41073bea276bc2127169d88fdb9f5acfd47095c2242952403c8ed4e3ce849dfb0e0d4b0d88d83e13ad1038c87735311fc222e61aaa1168d2", 0x58}, {&(0x7f0000000540)="f9d170e0c86a6c98a5c09b70c048424e81417f04ec12d18529eefdb6efb81aa818b2fe1f8ae4993ca0270019d2a087401ed321fe6f7ba277821ea7acf053", 0x3e}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) r6 = dup(r4) getpeername$packet(r6, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000800)=0x14) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket(0x10, 0x803, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) (async, rerun: 32) getsockname$packet(r9, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r11, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r11, @ANYBLOB="08000200ac1414aa"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000840)={'batadv0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f00000009c0)={'tunl0\x00', &(0x7f0000000880)={'tunl0\x00', 0x0, 0x40, 0x8000, 0x7f, 0x9, {{0x3c, 0x4, 0x3, 0x7, 0xf0, 0x66, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@lsrr={0x83, 0xf, 0x6b, [@multicast1, @dev={0xac, 0x14, 0x14, 0x41}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x38, 0xffffffffffffffff, [{0x1, 0x9, "d5b636060f4641"}, {0x7, 0xd, "7ddb6af553afe9d19bcc66"}, {0x7, 0xb, "42dade1d66b95ed5b0"}, {0x0, 0x8, "a5f59bb2e689"}, {0x5, 0x4, "9f02"}, {0x5, 0x5, "eb1735"}]}, @noop, @lsrr={0x83, 0x23, 0x3a, [@broadcast, @loopback, @rand_addr=0x64010102, @multicast2, @multicast1, @remote, @local, @broadcast]}, @cipso={0x86, 0x71, 0x1, [{0x2, 0x10, "03b0864e6d3e1ee46c77c8c7e6f4"}, {0x0, 0x5, "8b361e"}, {0x7, 0x5, "bb2d88"}, {0x1, 0xa, "2d796b93f867716a"}, {0x7, 0x9, "86316ea56a8b3f"}, {0x0, 0xd, "4074bd15e7f45a70def055"}, {0x5, 0xd, "f4e6e9865bfb372d324c79"}, {0x6, 0x10, "5831ba76dbe03a11de8382fe828f"}, {0x5, 0xe, "2a6e35419e9cf346320faae3"}, {0x1, 0x6, "e0d97ac0"}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000a80)={'tunl0\x00', &(0x7f0000000a00)={'ip_vti0\x00', 0x0, 0x80, 0x700, 0x0, 0xa, {{0x18, 0x4, 0x3, 0x8, 0x60, 0x65, 0x0, 0x2, 0x29, 0x0, @rand_addr=0x64010102, @remote, {[@timestamp_prespec={0x44, 0x4c, 0x9a, 0x3, 0x4, [{@empty, 0x8}, {@local, 0x401}, {@rand_addr=0x64010100, 0x5}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4000}, {@multicast1, 0x9}, {@empty, 0x8}, {@multicast1, 0x3}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x9}, {@local, 0xfffffffc}]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000ac0)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x198, 0x0, 0x400, 0xfb, 0x25dfdbff, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0xc5) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000080)={0x4, 0x31, 0x7, 0x20ec, 0x0, 0x0, 0x0}) r16 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r16, 0x5423, &(0x7f0000000000)=0xe) (async) ioctl$TIOCGSOFTCAR(r16, 0x5434, 0x0) (async, rerun: 32) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x130, 0x98, 0x130, 0x0, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0xff, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x2}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x40, 0x9, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x7, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x3f}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x1a}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) (async, rerun: 32) write$smackfs_load(r6, &(0x7f0000000640)=ANY=[@ANYBLOB="20697036677a65300020746200f58f1ab87f5efc742ab0cfa32687b4aefffa1c8049a98213b7b63b4138a03c7a32d156415de4558a240b837514220c97329069f2fe5351ef3fb4a515"], 0xd) 90.695377ms ago: executing program 2 (id=479): bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) syz_open_procfs(0x0, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="600000000002010400000000000000000a0000000400018004000380440002800c00028005000100000000002c00018014000300fc0000000000000004000000000000000e000400fe8000"/86], 0x60}}, 0x0) keyctl$set_reqkey_keyring(0xe, 0x3) (async) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f0000001380)=')\x00', 0x0) 53.469078ms ago: executing program 0 (id=480): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0xd3f, 0x5, 0x5, 0x80006, 0xfffffffe, 0x7}) r1 = syz_open_procfs$userns(0x0, &(0x7f0000000080)) setns(r1, 0x2000000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x3, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000980)=@IORING_OP_FSETXATTR={0x29, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f000000d740)='./file2\x00', 0x0, 0x0, 0x1}) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)=0x20) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x35ce9dbc6723c18f, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB='\x00\x00']) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) (async) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0xd3f, 0x5, 0x5, 0x80006, 0xfffffffe, 0x7}) (async) syz_open_procfs$userns(0x0, &(0x7f0000000080)) (async) setns(r1, 0x2000000) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) (async) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x3, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) (async) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000980)=@IORING_OP_FSETXATTR={0x29, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f000000d740)='./file2\x00', 0x0, 0x0, 0x1}) (async) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) (async) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)=0x20) (async) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x35ce9dbc6723c18f, 0x0) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB='\x00\x00']) (async) 49.273056ms ago: executing program 1 (id=481): madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe8000000000000000000000000000bb"], 0x190) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="ffff74ffffffaaaaaaaaaabb86dd600038ea00103afffe8000000000000000000000000000bbfe80000000000000000000000000002d86009078ff0b0000000000000000000096b4baa1ab6b0d7fed7b76c7989e73a88484d9542f47cffd71c1a9d1bf1c3253f7a8773bfe9219d105785fcea99768579e7fcf7619a1b10dd2"], 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@delalloc}]}, 0xff, 0x4a1, &(0x7f00000004c0)="$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") r4 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x40) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'pim6reg\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001d00010029bd70000000000007000000", @ANYRES32=r6, @ANYBLOB="080012000a0002"], 0x28}}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x2200015, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f00001c0000/0x2000)=nil, 0x2000, 0x64) socket$xdp(0x2c, 0x3, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000304000000000700000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400026008001c00020000000500010003000000740d65852fc7868577adf61d1c225d412c26757e126e8093c175aaf702177009db0fd85a8421ef0a780f88d91ecdc29f"], 0x44}, 0x1, 0x2000000000000000, 0x0, 0x44}, 0x0) 711.936µs ago: executing program 4 (id=482): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = socket$packet(0x11, 0xa, 0x300) setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000140)=0x1d, 0x4) recvmsg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2) add_key$keyring(&(0x7f0000000400), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$cgroup_devices(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='c *:+ w\x00'], 0x8) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c) ioctl$KDFONTOP_SET(r5, 0x4b72, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)) 0s ago: executing program 2 (id=483): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001080)={'wg0\x00', 0x0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x2, &(0x7f0000000000)=@raw=[@generic={0x1, 0x5, 0xc, 0xffff, 0x7f}, @jmp={0x5, 0x0, 0x9, 0x0, 0x2, 0x0, 0x15}], &(0x7f0000000040)='GPL\x00', 0x1000, 0x1000, &(0x7f0000000080)=""/4096, 0x41100, 0x24, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000010c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000001100)={0x3, 0x0, 0x6, 0x1}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001140), &(0x7f0000001180)=[{0x5, 0x2, 0x5, 0x5}, {0x0, 0x3, 0x4, 0xa}], 0x10, 0x7}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001340)={'syztnl0\x00', &(0x7f0000001280)={'tunl0\x00', r0, 0x700, 0x8, 0x7, 0x9, {{0x22, 0x4, 0x1, 0x1, 0x88, 0x65, 0x0, 0xd0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@noop, @timestamp_prespec={0x44, 0x44, 0x35, 0x3, 0x7, [{@remote, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80}, {@rand_addr=0x64010101, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000000}, {@rand_addr=0x64010101, 0x7}, {@private=0xa010101, 0x2}, {@multicast2, 0x5}, {@private=0xa010102, 0xa7eb}]}, @rr={0x7, 0x27, 0xe4, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @rand_addr=0x64010101, @loopback, @dev={0xac, 0x14, 0x14, 0x39}]}, @generic={0x7, 0x8, "1a27774e6820"}]}}}}}) r3 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r3, &(0x7f0000001380)="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", 0x1000, 0x20004081, &(0x7f0000002380)={0x2, 0x0, @rand_addr=0x64010101, 0x4}, 0x10) r4 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f00000023c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000002400)={{{@in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@private0}}, &(0x7f0000002500)=0xe8) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002540), 0x10300, 0x0) ioctl$TIOCSRS485(r5, 0x542f, &(0x7f0000002580)={0xff, 0x2, 0x6}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000002700)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x24, r7, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000004}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000002740), 0x103000, 0x0) ioctl$TUNSETSTEERINGEBPF(r9, 0x800454e0, &(0x7f0000002780)=r1) pread64(r6, &(0x7f00000027c0)=""/100, 0x64, 0x5) r10 = syz_open_dev$rtc(&(0x7f0000002840), 0x0, 0x448000) ioctl$RTC_AIE_ON(r10, 0x7001) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000002880)={0x7, 'batadv_slave_0\x00', {0x4}, 0x3}) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f00000028c0)={0xffffffffffffffff}) setsockopt$inet_msfilter(r11, 0x0, 0x29, &(0x7f0000002940)={@multicast1, @private=0xa010101}, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002980)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002d80), 0x900, 0x0) ioctl$KDGETLED(r12, 0x4b31, &(0x7f0000002dc0)) sendmsg$TIPC_NL_NET_GET(r11, &(0x7f0000002e40)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x8}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x54}, 0x800) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002f40)={0x1b, 0x0, 0x0, 0x40, 0x0, 0xffffffffffffffff, 0xc, '\x00', 0x0, r11, 0x4, 0x5, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003080)={0x6, 0x7, &(0x7f0000002e80)=@raw=[@alu={0x4, 0x1, 0x2, 0x4, 0xa, 0xc, 0x4}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f0000002ec0)='GPL\x00', 0x7f, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002f00)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000002fc0)=[r11, r11, r13], &(0x7f0000003000)=[{0x0, 0x2, 0xd, 0x7}, {0x1, 0x5, 0x1, 0x5}, {0x1, 0x2, 0x4, 0xb}, {0x4, 0x1, 0x2, 0x6}, {0x1, 0x2, 0x6, 0xb}, {0x0, 0x2, 0x9, 0xa}], 0x10, 0x1}, 0x94) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffa000/0x4000)=nil) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f0000003340)={0xffffffffffffffff, r9, 0x9}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.96' (ED25519) to the list of known hosts. [ 28.274323][ T4698] cgroup: Unknown subsys name 'net' [ 28.423921][ T4698] cgroup: Unknown subsys name 'cpuset' [ 28.426078][ T4698] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.587015][ T4698] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 30.173548][ T4717] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.176412][ T4720] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.188094][ T4723] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.188472][ T4723] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.188595][ T4723] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.199511][ T4716] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.200089][ T4725] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.200482][ T4725] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.200692][ T4725] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.202040][ T4725] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.202307][ T4725] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.203219][ T4725] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.203762][ T4725] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.204938][ T4714] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.205761][ T4714] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.205943][ T4714] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.206901][ T4714] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.207090][ T4714] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.210459][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.210635][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.211263][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.211397][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.212006][ T4717] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.222986][ T4723] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.224673][ T4723] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.575479][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.575732][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.575819][ T4711] bridge_slave_0: entered allmulticast mode [ 30.576298][ T4711] bridge_slave_0: entered promiscuous mode [ 30.588967][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.589043][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.589119][ T4711] bridge_slave_1: entered allmulticast mode [ 30.589561][ T4711] bridge_slave_1: entered promiscuous mode [ 30.600083][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.601523][ T4712] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.603044][ T4712] bridge_slave_0: entered allmulticast mode [ 30.605512][ T4712] bridge_slave_0: entered promiscuous mode [ 30.615456][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.615863][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.615930][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.616038][ T4710] bridge_slave_0: entered allmulticast mode [ 30.616457][ T4710] bridge_slave_0: entered promiscuous mode [ 30.617490][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.617512][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.617561][ T4710] bridge_slave_1: entered allmulticast mode [ 30.617976][ T4710] bridge_slave_1: entered promiscuous mode [ 30.627169][ T4710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.628048][ T4710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.630842][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.632389][ T4712] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.634817][ T4712] bridge_slave_1: entered allmulticast mode [ 30.636615][ T4712] bridge_slave_1: entered promiscuous mode [ 30.646942][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.659591][ T4712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.667280][ T4711] team0: Port device team_slave_0 added [ 30.670800][ T4710] team0: Port device team_slave_0 added [ 30.672381][ T4712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.677976][ T4711] team0: Port device team_slave_1 added [ 30.684962][ T4710] team0: Port device team_slave_1 added [ 30.695949][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.695977][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.696273][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.700176][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.700186][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.700201][ T4711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.700930][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.700937][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.700952][ T4711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.712500][ T4711] hsr_slave_0: entered promiscuous mode [ 30.712840][ T4711] hsr_slave_1: entered promiscuous mode [ 30.725896][ T4712] team0: Port device team_slave_0 added [ 30.726963][ T4712] team0: Port device team_slave_1 added [ 30.734894][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.741613][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.741855][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.755634][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.755662][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.755679][ T4712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.756253][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.756260][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.756275][ T4712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.767138][ T4712] hsr_slave_0: entered promiscuous mode [ 30.767425][ T4712] hsr_slave_1: entered promiscuous mode [ 30.767618][ T4712] debugfs: 'hsr0' already exists in 'hsr' [ 30.767662][ T4712] Cannot create hsr debugfs directory [ 30.782458][ T4710] hsr_slave_0: entered promiscuous mode [ 30.782810][ T4710] hsr_slave_1: entered promiscuous mode [ 30.783025][ T4710] debugfs: 'hsr0' already exists in 'hsr' [ 30.783035][ T4710] Cannot create hsr debugfs directory [ 30.818374][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.819910][ T4719] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.821328][ T4719] bridge_slave_0: entered allmulticast mode [ 30.823077][ T4719] bridge_slave_0: entered promiscuous mode [ 30.824114][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.824135][ T4719] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.824239][ T4719] bridge_slave_1: entered allmulticast mode [ 30.824640][ T4719] bridge_slave_1: entered promiscuous mode [ 30.860535][ T4719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.874808][ T4719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.901874][ T4719] team0: Port device team_slave_0 added [ 30.904062][ T4719] team0: Port device team_slave_1 added [ 30.911761][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.911828][ T4713] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.912087][ T4713] bridge_slave_0: entered allmulticast mode [ 30.913325][ T4713] bridge_slave_0: entered promiscuous mode [ 30.921807][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.921834][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.921849][ T4719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.922955][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.922965][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.922980][ T4719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.923180][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.923236][ T4713] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.923303][ T4713] bridge_slave_1: entered allmulticast mode [ 30.923737][ T4713] bridge_slave_1: entered promiscuous mode [ 30.931000][ T4713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.932290][ T4713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.945260][ T4711] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.948990][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.957219][ T4713] team0: Port device team_slave_0 added [ 30.959259][ T4713] team0: Port device team_slave_1 added [ 30.960217][ T4711] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.963102][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.968513][ T4719] hsr_slave_0: entered promiscuous mode [ 30.968876][ T4719] hsr_slave_1: entered promiscuous mode [ 30.969087][ T4719] debugfs: 'hsr0' already exists in 'hsr' [ 30.969098][ T4719] Cannot create hsr debugfs directory [ 30.975494][ T4711] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.977768][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.978094][ T4711] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.980114][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.990347][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.990373][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.990389][ T4713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.990957][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.990965][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.990979][ T4713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.001779][ T4713] hsr_slave_0: entered promiscuous mode [ 31.002089][ T4713] hsr_slave_1: entered promiscuous mode [ 31.002306][ T4713] debugfs: 'hsr0' already exists in 'hsr' [ 31.002316][ T4713] Cannot create hsr debugfs directory [ 31.042373][ T4712] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.045514][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.046440][ T4712] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.048368][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.050178][ T4712] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.053382][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.056570][ T4712] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.058769][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.074733][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.074805][ T4711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.074965][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.075002][ T4711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.098368][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.098417][ T4712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.098488][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.098516][ T4712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.126106][ T4710] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.128530][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.130173][ T4710] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.132362][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.134265][ T4710] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.136519][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.138202][ T4710] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.140549][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.158398][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.172154][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.174146][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.175507][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.176812][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.195688][ T4711] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.203777][ T4713] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.206406][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.207063][ T4713] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.208514][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.213727][ T4712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.216818][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.216871][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.219850][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.219884][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.223360][ T4713] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.225557][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.225929][ T4713] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.227722][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.253687][ T4712] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.257100][ T4711] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.257139][ T4711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.276686][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.276740][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.278304][ T4719] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.281375][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.284649][ T4719] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.287560][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.289345][ T4719] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.292139][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.298698][ T4719] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.300911][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.305362][ T1303] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.305413][ T1303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.330713][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.336338][ T4713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.354194][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.359610][ T4713] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.367317][ T4712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.385583][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.385641][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.385974][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.385991][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.403436][ T1303] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.403488][ T1303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.403857][ T1303] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.403881][ T1303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.419985][ T4719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.437917][ T4719] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.455507][ T4713] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.455558][ T4713] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.466284][ T1303] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.466334][ T1303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.476067][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.495212][ T1303] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.495269][ T1303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.543356][ T4711] veth0_vlan: entered promiscuous mode [ 31.547678][ T4711] veth1_vlan: entered promiscuous mode [ 31.560036][ T4711] veth0_macvtap: entered promiscuous mode [ 31.563089][ T4711] veth1_macvtap: entered promiscuous mode [ 31.586074][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.596814][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.609604][ T4712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.613002][ T1417] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.613368][ T1417] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.613398][ T1417] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.613419][ T1417] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.669504][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.701583][ T290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.701618][ T290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.716398][ T4710] veth0_vlan: entered promiscuous mode [ 31.723639][ T4710] veth1_vlan: entered promiscuous mode [ 31.732699][ T1303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.732735][ T1303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.736948][ T4713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.764742][ T4713] veth0_vlan: entered promiscuous mode [ 31.773114][ T4719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.776718][ T4710] veth0_macvtap: entered promiscuous mode [ 31.779377][ T4710] veth1_macvtap: entered promiscuous mode [ 31.782362][ T4713] veth1_vlan: entered promiscuous mode [ 31.788575][ T4711] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.814273][ T4713] veth0_macvtap: entered promiscuous mode [ 31.820962][ T4713] veth1_macvtap: entered promiscuous mode [ 31.826123][ T4719] veth0_vlan: entered promiscuous mode [ 31.831610][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.833672][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.846312][ T39] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.848400][ T39] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.851936][ T39] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.853181][ T39] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.854565][ T4719] veth1_vlan: entered promiscuous mode [ 31.868715][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.870567][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.883363][ T1417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.883398][ T1417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.890231][ T39] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.890348][ T39] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.890381][ T39] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.890406][ T39] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.913179][ T4712] veth0_vlan: entered promiscuous mode [ 31.914922][ T4712] veth1_vlan: entered promiscuous mode [ 31.925401][ T4894] loop3: detected capacity change from 0 to 512 [ 31.927293][ T4719] veth0_macvtap: entered promiscuous mode [ 31.934808][ T1417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.934839][ T1417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.938958][ T4894] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 31.944347][ T4719] veth1_macvtap: entered promiscuous mode [ 31.969291][ T4712] veth0_macvtap: entered promiscuous mode [ 31.987538][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.000697][ T4712] veth1_macvtap: entered promiscuous mode [ 32.006071][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.008797][ T39] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.008913][ T39] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.008972][ T39] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.009037][ T39] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.020103][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.021196][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.033981][ T1303] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.034226][ T1303] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.034251][ T1303] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.034269][ T1303] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.054331][ T4897] loop1: detected capacity change from 0 to 128 [ 32.059478][ T4897] EXT4-fs (loop1): Test dummy encryption mode enabled [ 32.076807][ T4897] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 32.090856][ T1382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.095810][ T1382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.111557][ T1382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.114027][ T1382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.117498][ T4897] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 32.122286][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.122321][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.194333][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.194366][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.198068][ T1382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.198094][ T1382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.210401][ T1417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.212091][ T1417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.233070][ T4723] Bluetooth: hci4: command tx timeout [ 32.233191][ T4720] Bluetooth: hci0: command tx timeout [ 32.233365][ T4720] Bluetooth: hci1: command tx timeout [ 32.233445][ T4720] Bluetooth: hci3: command tx timeout [ 32.362871][ T4717] Bluetooth: hci2: command tx timeout [ 32.575199][ T4910] Zero length message leads to an empty skb [ 32.681683][ T4914] loop4: detected capacity change from 0 to 256 [ 33.226621][ T4916] can0: slcan on ttyS3. [ 33.501732][ T4710] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 33.540052][ T4922] process 'syz.1.8' launched '/dev/fd/5' with NULL argv: empty string added [ 33.543126][ T4920] mmap: syz.2.9 (4920) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 33.553397][ T4915] can0 (unregistered): slcan off ttyS3. [ 33.629840][ T4926] input: syz1 as /devices/virtual/input/input2 [ 33.664826][ T4929] loop2: detected capacity change from 0 to 256 [ 33.734960][ T4932] loop4: detected capacity change from 0 to 512 [ 33.742265][ T4932] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.742297][ T4932] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 33.745164][ T4932] EXT4-fs (loop4): can't mount with commit=, fs mounted w/o journal [ 33.760228][ T4932] loop4: detected capacity change from 0 to 1024 [ 33.760635][ T4932] EXT4-fs: Ignoring removed bh option [ 33.770085][ T4938] capability: warning: `syz.1.14' uses deprecated v2 capabilities in a way that may be insecure [ 33.785287][ T4819] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.795976][ T4819] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 33.830003][ T4932] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.895788][ T4940] can0: slcan on ttyS3. [ 34.214457][ T4940] can0 (unregistered): slcan off ttyS3. [ 34.313013][ T4723] Bluetooth: hci3: command tx timeout [ 34.314321][ T4723] Bluetooth: hci1: command tx timeout [ 34.314342][ T4723] Bluetooth: hci4: command tx timeout [ 34.314356][ T4723] Bluetooth: hci0: command tx timeout [ 34.381820][ T4958] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.386223][ T4958] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.399684][ T4720] Bluetooth: hci2: command tx timeout [ 34.414766][ T4958] netlink: 'syz.1.19': attribute type 16 has an invalid length. [ 34.416446][ T4958] netlink: 'syz.1.19': attribute type 17 has an invalid length. [ 34.429046][ T4958] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.429106][ T4958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.431712][ T4958] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.431741][ T4958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.577176][ T4712] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 34.581551][ T4712] EXT4-fs error (device loop4): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /3/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 34.587511][ T4712] EXT4-fs (loop4): Remounting filesystem read-only [ 34.627824][ T4712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.649018][ T4964] loop2: detected capacity change from 0 to 1024 [ 34.683355][ T4964] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.696466][ T4964] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.21'. [ 34.722188][ T4970] netlink: 32 bytes leftover after parsing attributes in process `syz.1.23'. [ 34.724331][ T4970] netlink: 32 bytes leftover after parsing attributes in process `syz.1.23'. [ 34.726495][ T4970] netlink: 32 bytes leftover after parsing attributes in process `syz.1.23'. [ 34.729505][ T4970] netlink: 32 bytes leftover after parsing attributes in process `syz.1.23'. [ 34.739642][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 34.752112][ T4971] loop1: detected capacity change from 0 to 2048 [ 34.786149][ T4971] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.868624][ T4979] loop2: detected capacity change from 0 to 256 [ 34.928411][ T4882] hsr0: entered promiscuous mode [ 35.072090][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.131834][ T4990] loop4: detected capacity change from 0 to 256 [ 35.184067][ T4992] netlink: 20 bytes leftover after parsing attributes in process `syz.4.31'. [ 35.196540][ T4992] 8021q: VLANs not supported on ip6gre0 [ 35.274625][ T5004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35'. [ 35.672424][ T5023] Driver unsupported XDP return value 0 on prog (id 9) dev N/A, expect packet loss! [ 35.918030][ T5036] vfat: Unknown parameter '€' [ 35.970420][ T5044] EXT4-fs (loop1): Test dummy encryption mode enabled [ 35.977604][ T5044] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.46: inode has both inline data and extents flags [ 35.978039][ T5044] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 35.978976][ T5044] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.46: couldn't read orphan inode 15 (err -117) [ 35.979030][ T5044] loop1: lost filesystem error report for type 5 error -117 [ 35.980447][ T5044] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.982680][ T5046] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.135232][ T5044] block nbd1: shutting down sockets [ 36.153787][ T5059] can0: slcan on ttyS3. [ 36.175687][ T5059] can0 (unregistered): slcan off ttyS3. [ 36.211255][ T4400] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.212121][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.237391][ T30] audit: type=1326 audit(36.230:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5074 comm="syz.2.49" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa577fe8 code=0x0 [ 36.242775][ T5079] capability: warning: `syz.4.51' uses 32-bit capabilities (legacy support in use) [ 36.290875][ T5081] netlink: 12 bytes leftover after parsing attributes in process `syz.4.52'. [ 36.314350][ T4720] Bluetooth: hci5: command 0x1003 tx timeout [ 36.314419][ T4717] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 36.432380][ T5086] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 36.432552][ T5086] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 36.442724][ T4717] Bluetooth: hci0: command tx timeout [ 36.442882][ T4717] Bluetooth: hci4: command tx timeout [ 36.443062][ T4717] Bluetooth: hci1: command tx timeout [ 36.443244][ T4717] Bluetooth: hci3: command tx timeout [ 36.473369][ T4717] Bluetooth: hci2: command tx timeout [ 36.643737][ T5090] syz.4.54 uses obsolete (PF_INET,SOCK_PACKET) [ 36.704989][ T24] IPVS: starting estimator thread 0... [ 36.793078][ T5098] IPVS: using max 60 ests per chain, 144000 per kthread [ 36.958110][ T5105] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 37.012785][ T5112] set_capacity_and_notify: 3 callbacks suppressed [ 37.014287][ T5112] loop4: detected capacity change from 0 to 8 [ 37.022029][ T5112] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 37.022060][ T5112] unable to read xattr id index table [ 37.027939][ T5112] SQUASHFS error: zlib decompression failed, data probably corrupt [ 37.027972][ T5112] SQUASHFS error: Failed to read block 0x9b: -5 [ 37.027993][ T5112] SQUASHFS error: Unable to read metadata cache entry [99] [ 37.028008][ T5112] SQUASHFS error: Unable to read inode 0x127 [ 37.130523][ T5115] loop3: detected capacity change from 0 to 256 [ 37.216955][ T5122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.65'. [ 37.219382][ T5122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.65'. [ 37.235440][ T5109] loop0: detected capacity change from 0 to 1024 [ 37.238495][ T5109] ======================================================= [ 37.238495][ T5109] WARNING: The mand mount option has been deprecated and [ 37.238495][ T5109] and is ignored by this kernel. Remove the mand [ 37.238495][ T5109] option from the mount to silence this warning. [ 37.238495][ T5109] ======================================================= [ 37.322270][ T5128] loop1: detected capacity change from 0 to 512 [ 37.325710][ T5128] EXT4-fs: Ignoring removed nobh option [ 37.367304][ T5128] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 37.368212][ T5128] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349) [ 37.385186][ T5128] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 37.385513][ T5128] System zones: 1-12 [ 37.386325][ T5128] EXT4-fs (loop1): orphan cleanup on readonly fs [ 37.391921][ T5128] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.64: Block bitmap for bg 0 marked uninitialized [ 37.392055][ T5128] loop1: lost filesystem error report for type 5 error -117 [ 37.397444][ T5128] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.64: Block bitmap for bg 0 marked uninitialized [ 37.397508][ T5128] loop1: lost filesystem error report for type 5 error -117 [ 37.402438][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 37.402464][ C1] EXT4-fs (loop1): initial error at time 37: ext4_read_block_bitmap_nowait:517 [ 37.402486][ C1] EXT4-fs (loop1): last error at time 37: ext4_read_block_bitmap_nowait:517 [ 37.402845][ T5128] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.64: Block bitmap for bg 0 marked uninitialized [ 37.402894][ T5128] loop1: lost filesystem error report for type 5 error -117 [ 37.412630][ T5128] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.64: Block bitmap for bg 0 marked uninitialized [ 37.412690][ T5128] loop1: lost filesystem error report for type 5 error -117 [ 37.417001][ T5128] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.64: Block bitmap for bg 0 marked uninitialized [ 37.417059][ T5128] loop1: lost filesystem error report for type 5 error -117 [ 37.421513][ T5128] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.64: Block bitmap for bg 0 marked uninitialized [ 37.421554][ T5128] loop1: lost filesystem error report for type 5 error -117 [ 37.426388][ T5128] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 37.431433][ T5128] EXT4-fs (loop1): 1 truncate cleaned up [ 37.439077][ T5128] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 37.491600][ T5109] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 37.501452][ T5109] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 37.527796][ T5109] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.60: Invalid block bitmap block 0 in block_group 0 [ 37.527840][ T5109] loop0: lost filesystem error report for type 5 error -117 [ 37.532427][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 37.532462][ C1] EXT4-fs (loop0): initial error at time 37: ext4_read_block_bitmap_nowait:483 [ 37.532493][ C1] EXT4-fs (loop0): last error at time 37: ext4_read_block_bitmap_nowait:483 [ 37.544672][ T5109] Quota error (device loop0): write_blk: dquota write failed [ 37.544720][ T5109] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 37.544770][ T5109] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.60: Failed to acquire dquot type 0 [ 37.544790][ T5109] loop0: lost filesystem error report for type 5 error -117 [ 37.550261][ T5109] EXT4-fs error (device loop0): ext4_free_blocks:6718: comm syz.0.60: Freeing blocks not in datazone - block = 0, count = 4096 [ 37.550276][ T5109] loop0: lost filesystem error report for type 5 error -117 [ 37.555901][ T5109] EXT4-fs error (device loop0): ext4_read_inode_bitmap:141: comm syz.0.60: Invalid inode bitmap blk 0 in block_group 0 [ 37.569775][ T5109] EXT4-fs error (device loop0) in ext4_free_inode:363: Corrupt filesystem [ 37.571974][ T5109] EXT4-fs (loop0): 1 orphan inode deleted [ 37.575593][ T5109] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.578283][ T5136] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 37.605955][ T5136] binder_alloc: binder_alloc_mmap_handler: 5135 20ffd000-21000000 already mapped failed -16 [ 37.684015][ T5143] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 37.686859][ T4798] IPVS: starting estimator thread 0... [ 37.763963][ T5136] binder: 5135:5136 tried to acquire reference to desc 0, got 1 instead [ 37.765835][ T5139] binder_alloc: 5135: binder_alloc_buf, no vma [ 37.767287][ T5139] binder: cannot allocate buffer: vma cleared, target dead or dying [ 37.767392][ T5139] binder: 5135:5139 transaction call to 5135:0 failed 5/29189/-3, code 0 size 112-24 line 3408 [ 37.772494][ T5145] IPVS: using max 60 ests per chain, 144000 per kthread [ 37.781488][ T4798] binder: undelivered TRANSACTION_ERROR: 29189 [ 37.817283][ T5149] loop2: detected capacity change from 0 to 512 [ 37.847377][ T5149] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 37.851347][ T5149] EXT4-fs (loop2): warning: maximal mount count reached, running e2fsck is recommended [ 37.854072][ T5149] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.72: inode #15: comm syz.2.72: iget: illegal inode # [ 37.859637][ T5149] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.72: couldn't read orphan inode 15 (err -117) [ 37.862894][ T5149] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.867656][ T5154] warning: `syz.4.73' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 37.882803][ T5149] EXT4-fs: Ignoring sb option on remount [ 37.889292][ T5156] can0: slcan on ttyS3. [ 37.914668][ T5149] EXT4-fs (loop2): changing journal_checksum during remount not supported; ignoring [ 37.944504][ T5156] can0 (unregistered): slcan off ttyS3. [ 37.970358][ T290] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-7 [ 37.970437][ T290] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:4: Failed to release dquot type 0 [ 37.980919][ T5149] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 37.998163][ T5164] loop3: detected capacity change from 0 to 128 [ 38.002371][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.005050][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.036583][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.114491][ T5177] loop1: detected capacity change from 0 to 8192 [ 38.155196][ T5177] loop1: p2 p3 p4 [ 38.155333][ T5177] loop1: p2 size 64053 extends beyond EOD, truncated [ 38.157972][ T5177] loop1: p3 start 65280 is beyond EOD, truncated [ 38.159934][ T5177] loop1: p4 size 50331904 extends beyond EOD, truncated [ 38.264487][ T5193] loop4: detected capacity change from 0 to 1024 [ 38.264880][ T5193] ext4: Unknown parameter 'dont_hash' [ 38.282112][ T5193] loop4: detected capacity change from 0 to 8 [ 38.436236][ T5198] loop3: detected capacity change from 0 to 4096 [ 38.441314][ T5198] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.472662][ T4720] Bluetooth: hci3: command tx timeout [ 38.473020][ T4720] Bluetooth: hci1: command tx timeout [ 38.473049][ T4720] Bluetooth: hci4: command tx timeout [ 38.473066][ T4720] Bluetooth: hci0: command tx timeout [ 38.516261][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.530658][ T5202] can0: slcan on ttyS3. [ 38.562636][ T4717] Bluetooth: hci2: command tx timeout [ 38.581857][ T4727] udevd[4727]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 38.586982][ T4704] udevd[4704]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 38.594321][ T5202] can0 (unregistered): slcan off ttyS3. [ 38.973231][ T5216] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 39.028775][ T5224] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.041209][ T5224] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #15: comm syz.3.92: corrupted inode contents [ 39.045792][ T5224] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #15: comm syz.3.92: mark_inode_dirty error [ 39.048572][ T5224] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #15: comm syz.3.92: corrupted inode contents [ 39.051028][ T5224] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #15: comm syz.3.92: mark_inode_dirty error [ 39.114601][ T5224] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #15: comm syz.3.92: corrupted inode contents [ 39.115920][ T5224] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #15: comm syz.3.92: mark_inode_dirty error [ 39.116136][ T5224] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #15: comm syz.3.92: corrupted inode contents [ 39.117337][ T5224] EXT4-fs error (device loop3): ext4_truncate:4691: inode #15: comm syz.3.92: mark_inode_dirty error [ 39.117924][ T5224] EXT4-fs error (device loop3) in ext4_setattr:6172: Corrupt filesystem [ 39.156666][ T5225] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #15: comm syz.3.92: corrupted inode contents [ 39.189850][ T4711] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 39.191848][ T4711] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 39.192323][ T4711] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 39.199277][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.306751][ T5247] vfat: Unknown parameter 'uni_x¬™' [ 39.570255][ T5266] can0: slcan on ttyS3. [ 39.634610][ T5266] can0 (unregistered): slcan off ttyS3. [ 39.646246][ T5271] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.652636][ T5271] EXT4-fs error (device loop0): ext4_find_extent:904: inode #2: comm syz.0.102: inode has invalid extent depth: 8 [ 39.657827][ T5271] EXT4-fs (loop0): Remounting filesystem read-only [ 39.699942][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.810725][ T5291] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.110: iget: bad extra_isize 58 (inode size 256) [ 39.810770][ T5291] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 39.813869][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 39.813889][ C0] EXT4-fs (loop2): initial error at time 39: ext4_xattr_inode_iget:441: inode 11 [ 39.813908][ C0] EXT4-fs (loop2): last error at time 39: ext4_xattr_inode_iget:441: inode 11 [ 39.825988][ T5291] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.110: error while reading EA inode 11 err=-117 [ 39.830377][ T5291] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 39.834618][ T5291] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.110: iget: bad extra_isize 58 (inode size 256) [ 39.838338][ T5291] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 39.839460][ T5291] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.110: error while reading EA inode 11 err=-117 [ 39.845919][ T5291] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.110: iget: bad extra_isize 58 (inode size 256) [ 39.845964][ T5291] loop2: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 39.848913][ T5291] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.110: error while reading EA inode 18 err=-117 [ 39.854089][ T5291] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.110: iget: bad extra_isize 58 (inode size 256) [ 39.857769][ T5291] loop2: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 39.858136][ T5291] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.110: error while reading EA inode 18 err=-117 [ 39.864860][ T5291] EXT4-fs (loop2): 1 orphan inode deleted [ 39.867557][ T5291] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.898036][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.910719][ C1] vcan0: j1939_tp_rxtimer: 0x00000000c559803a: rx timeout, send abort [ 40.325439][ T1505] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 40.410938][ C1] vcan0: j1939_tp_rxtimer: 0x000000000ef4ec23: rx timeout, send abort [ 40.410997][ C1] vcan0: j1939_tp_rxtimer: 0x00000000c559803a: abort rx timeout. Force session deactivation [ 40.438183][ T5325] fuse: fd is not a fuse device [ 40.439605][ T5325] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 40.439620][ T5325] overlayfs: failed to set xattr on upper [ 40.439624][ T5325] overlayfs: ...falling back to redirect_dir=nofollow. [ 40.439628][ T5325] overlayfs: ...falling back to uuid=null. [ 40.452607][ T1505] usb 1-1: device descriptor read/64, error -71 [ 40.462361][ T5324] bond0: entered promiscuous mode [ 40.463623][ T5324] bond_slave_0: entered promiscuous mode [ 40.465019][ T5324] bond_slave_1: entered promiscuous mode [ 40.482873][ T5327] __nla_validate_parse: 5 callbacks suppressed [ 40.482910][ T5327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.120'. [ 40.675456][ T5329] netlink: 'syz.4.121': attribute type 29 has an invalid length. [ 40.692505][ T1505] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 40.800551][ T5336] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.812602][ T5336] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.124: corrupted xattr block 33: invalid header [ 40.818902][ T5336] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.124: corrupted xattr block 33: invalid header [ 40.822201][ T5336] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.124: corrupted xattr block 33: invalid header [ 40.828177][ T5336] netlink: 16 bytes leftover after parsing attributes in process `syz.1.124'. [ 40.832570][ T1505] usb 1-1: device descriptor read/64, error -71 [ 40.833706][ T5336] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.124: corrupted xattr block 33: invalid header [ 40.836016][ T5336] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 40.838550][ T5336] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 40.838573][ T5336] EXT4-fs (loop1): This should not happen!! Data will be lost [ 40.838573][ T5336] [ 40.838583][ T5336] EXT4-fs (loop1): Total free blocks count 0 [ 40.838592][ T5336] EXT4-fs (loop1): Free/Dirty block details [ 40.838611][ T5336] EXT4-fs (loop1): free_blocks=65280 [ 40.838627][ T5336] EXT4-fs (loop1): dirty_blocks=2 [ 40.838636][ T5336] EXT4-fs (loop1): Block reservation details [ 40.838645][ T5336] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 40.859655][ T4710] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 40.863279][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.911006][ C1] vcan0: j1939_tp_rxtimer: 0x000000000ef4ec23: abort rx timeout. Force session deactivation [ 40.911976][ T5350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.129'. [ 40.916637][ T5350] hsr_slave_0: left promiscuous mode [ 40.917964][ T5350] hsr_slave_1: left promiscuous mode [ 40.933369][ T5343] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 40.943127][ T1505] usb usb1-port1: attempt power cycle [ 40.947003][ T5343] EXT4-fs (loop4): orphan cleanup on readonly fs [ 40.948364][ T5343] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 40.951063][ T5343] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 40.951110][ T5343] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.126: bad orphan inode 768 [ 40.952722][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 40.952736][ C0] EXT4-fs (loop4): initial error at time 40: ext4_orphan_get:1425 [ 40.952748][ C0] EXT4-fs (loop4): last error at time 40: ext4_orphan_get:1425 [ 40.960928][ T5343] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.967364][ T5343] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.126: iget: bad i_size value: 2533274857506816 [ 40.971198][ T5343] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.126: iget: bad i_size value: 2533274857506816 [ 41.252892][ T5376] Injecting memory failure for pfn 0x135c01 at process virtual address 0x20001000 [ 41.254444][ T5376] Memory failure: 0x135c01: Sending SIGBUS to syz.3.136:5376 due to hardware memory corruption [ 41.254514][ T5376] Memory failure: 0x135c01: recovery action for unsplit thp: Failed [ 41.292489][ T1505] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 41.313071][ T1505] usb 1-1: device descriptor read/8, error -71 [ 41.383350][ T5387] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 41.385132][ T5387] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 41.389935][ T5387] EXT4-fs (loop2): orphan cleanup on readonly fs [ 41.391538][ T5387] Quota error (device loop2): v2_read_file_info: Block with free entry 5 out of range (1, 5). [ 41.400139][ T5387] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 41.400472][ T5387] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 41.406269][ T5387] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 41.409708][ T5387] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #12: comm syz.2.139: corrupted inode contents [ 41.412285][ T5387] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 41.414146][ T5387] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #12: comm syz.2.139: mark_inode_dirty error [ 41.418862][ T5387] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 41.422430][ C0] EXT4-fs (loop2): error count since last fsck: 3 [ 41.422461][ C0] EXT4-fs (loop2): initial error at time 41: mb_free_blocks:2049: inode 12: block 14 [ 41.422514][ C0] EXT4-fs (loop2): last error at time 41: ext4_dirty_inode:6639: inode 12 [ 41.429692][ T5387] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #12: comm syz.2.139: corrupted inode contents [ 41.429734][ T5387] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 41.431262][ T5388] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input4 [ 41.437820][ T5387] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm syz.2.139: mark_inode_dirty error [ 41.437871][ T5387] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 41.440355][ T5387] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #12: comm syz.2.139: corrupted inode contents [ 41.440388][ T5387] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 41.446193][ T5387] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 41.446232][ T5387] fserror_report: 9 callbacks suppressed [ 41.446257][ T5387] loop2: lost filesystem error report for type 5 error -117 [ 41.450660][ T5387] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #12: comm syz.2.139: corrupted inode contents [ 41.450696][ T5387] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 41.455785][ T5387] EXT4-fs error (device loop2): ext4_truncate:4691: inode #12: comm syz.2.139: mark_inode_dirty error [ 41.455818][ T5387] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 41.459989][ T5387] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 41.460013][ T5387] loop2: lost filesystem error report for type 5 error -117 [ 41.467758][ T5387] EXT4-fs (loop2): 1 truncate cleaned up [ 41.470600][ T5387] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.508817][ T5387] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 41.543391][ T5387] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 41.545523][ T5387] EXT4-fs warning (device loop2): ext4_multi_mount_protect:287: Invalid MMP block in superblock [ 41.560451][ T5400] vfat: Unknown parameter 'roonumtail' [ 41.561903][ T5400] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 41.561903][ T5400] Please contact the netfilter-devel mailing list or update your nftables rules. [ 41.565506][ T1505] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 41.585705][ T1505] usb 1-1: device descriptor read/8, error -71 [ 41.677682][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.694281][ T1505] usb usb1-port1: unable to enumerate USB device [ 41.718749][ T5404] random: crng reseeded on system resumption [ 41.735139][ T5406] netlink: 'syz.2.142': attribute type 40 has an invalid length. [ 41.856530][ T4712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.932382][ T5416] netlink: 'syz.4.147': attribute type 10 has an invalid length. [ 42.052488][ T1505] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 43.122501][ T1505] usb 1-1: device descriptor read/64, error -71 [ 43.159213][ T5441] netlink: 24 bytes leftover after parsing attributes in process `syz.0.155'. [ 43.227343][ T5450] set_capacity_and_notify: 10 callbacks suppressed [ 43.227394][ T5450] loop4: detected capacity change from 0 to 512 [ 43.247062][ T5450] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 43.247103][ T5450] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e018, mo2=0002] [ 43.247201][ T5450] EXT4-fs (loop4): orphan cleanup on readonly fs [ 43.254038][ T5450] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.158: bg 0: block 15: invalid block bitmap [ 43.254096][ T5450] loop4: lost filesystem error report for type 5 error -117 [ 43.254901][ T5450] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 43.254915][ T5450] loop4: lost filesystem error report for type 5 error -117 [ 43.255230][ T5450] EXT4-fs (loop4): 1 truncate cleaned up [ 43.255709][ T5450] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 43.305110][ T5450] ext4: Unknown parameter 'u' [ 43.432609][ T5479] loop2: detected capacity change from 0 to 256 [ 43.435083][ T5479] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 43.460559][ T5481] netlink: 'syz.3.168': attribute type 21 has an invalid length. [ 43.462349][ T5481] netlink: 132 bytes leftover after parsing attributes in process `syz.3.168'. [ 43.712685][ T5484] hugetlbfs: syz.2.167 (5484): Using mlock ulimits for SHM_HUGETLB is obsolete [ 43.883606][ T5491] can0: slcan on ttyS3. [ 44.010952][ T5491] can0 (unregistered): slcan off ttyS3. [ 44.101522][ T4712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.343800][ T5493] tmpfs: Bad value for 'huge' [ 44.352379][ T40] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 44.396897][ T5497] loop4: detected capacity change from 0 to 256 [ 44.423604][ T5501] loop1: detected capacity change from 0 to 512 [ 44.423929][ T5501] ext4: Unknown parameter 'nouser_xattr' [ 44.451176][ T5507] loop2: detected capacity change from 0 to 2048 [ 44.456299][ T5498] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 44.456343][ T5498] FAT-fs (loop4): Filesystem has been set read-only [ 44.456393][ T5498] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 44.456409][ T5498] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 44.473629][ T5497] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 44.473684][ T5497] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 44.473701][ T5497] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 44.486746][ T5507] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 44.534673][ T5503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.174'. [ 44.656735][ T5525] netlink: 9 bytes leftover after parsing attributes in process `syz.0.181'. [ 44.729400][ T5534] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.182'. [ 44.767873][ T5538] loop0: detected capacity change from 0 to 2048 [ 44.811756][ T5538] loop0: p1 < > p4 [ 44.811756][ T5538] p4: [ 44.817332][ T5538] loop0: p4 size 722688 extends beyond EOD, truncated [ 44.896029][ T5552] loop1: detected capacity change from 0 to 1024 [ 44.898336][ T5552] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 44.898370][ T5552] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 44.898423][ T5552] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 44.898439][ T5552] EXT4-fs (loop1): filesystem has both journal inode and journal device! [ 44.985158][ T5558] overlay: Unknown parameter 'euid<00000000000000000000' [ 45.050209][ T5544] vlan2: entered promiscuous mode [ 45.063428][ T5557] Injecting memory failure for pfn 0x139823 at process virtual address 0x20000000 [ 45.111489][ T5557] Memory failure: 0x139823: Sending SIGBUS to syz.1.188:5557 due to hardware memory corruption [ 45.111567][ T5557] Memory failure: 0x139823: recovery action for dirty LRU page: Recovered [ 45.111604][ T5557] Injecting memory failure for pfn 0x219430 at process virtual address 0x20001000 [ 45.117757][ T5557] Memory failure: 0x219430: unhandlable page. [ 45.117784][ T5557] Memory failure: 0x219430: recovery action for get hwpoison page: Ignored [ 45.219322][ T5567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.192'. [ 45.440263][ T5574] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 45.440306][ T5574] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 45.526311][ T5577] loop1: detected capacity change from 0 to 512 [ 45.527090][ T5577] EXT4-fs: quotafile must be on filesystem root [ 45.545217][ T5578] batman_adv: batadv0: Adding interface: dummy0 [ 45.545259][ T5578] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.545276][ T5578] batman_adv: batadv0: Interface activated: dummy0 [ 45.666540][ T5589] loop9: detected capacity change from 0 to 7 [ 45.679742][ T5589] Dev loop9: unable to read RDB block 7 [ 45.679780][ T5589] loop9: unable to read partition table [ 45.679864][ T5589] loop9: partition table beyond EOD, truncated [ 45.679895][ T5589] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 45.724319][ T5592] team0 (unregistering): Port device team_slave_0 removed [ 45.733711][ T5592] team0 (unregistering): Port device team_slave_1 removed [ 45.767821][ T5592] netlink: 580 bytes leftover after parsing attributes in process `syz.4.199'. [ 45.941901][ T5623] loop0: detected capacity change from 0 to 1024 [ 45.942325][ T5623] EXT4-fs: Ignoring removed bh option [ 45.947544][ T5623] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 45.959906][ T5623] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.996448][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.041924][ T5638] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 46.071753][ T5640] xt_TPROXY: Can be used only with -p tcp or -p udp [ 46.255856][ T5647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.215'. [ 46.255979][ T5647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.215'. [ 46.256071][ T5647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.215'. [ 46.256159][ T5647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.215'. [ 46.256231][ T5647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.215'. [ 46.256302][ T5647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.215'. [ 46.256386][ T5647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.215'. [ 46.256456][ T5647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.215'. [ 46.256525][ T5647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.215'. [ 46.456966][ T5649] can0: slcan on ttyS3. [ 46.614040][ T5649] can0 (unregistered): slcan off ttyS3. [ 46.761841][ T5651] ext2: Unknown parameter 'seclabel' [ 46.935081][ T5664] macvlan2: entered promiscuous mode [ 46.936397][ T5664] bridge0: entered promiscuous mode [ 47.053780][ T5665] syzkaller0: entered promiscuous mode [ 47.053815][ T5665] syzkaller0: entered allmulticast mode [ 47.480179][ T5699] fuse: fd is not a fuse device [ 47.767798][ T5726] fuse: fd is not a fuse device [ 48.389025][ T5767] ptrace attach of "ci-upstream-gce-arm64/syz-executor exec"[5768] was attempted by "ci-upstream-gce-arm64/syz-executor exec"[5767] [ 48.402785][ T5767] syzkaller1: entered promiscuous mode [ 48.402819][ T5767] syzkaller1: entered allmulticast mode [ 48.654449][ T5808] fuse: Bad value for 'fd' [ 48.931863][ T5817] set_capacity_and_notify: 2 callbacks suppressed [ 48.931912][ T5817] loop0: detected capacity change from 0 to 512 [ 48.947985][ T5817] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.985567][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.990094][ T5812] fuse: fd is not a fuse device [ 48.994454][ T5825] loop1: detected capacity change from 0 to 4096 [ 49.007903][ T5825] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.033344][ T5825] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.254: corrupted inode contents [ 49.036631][ T5825] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #15: comm syz.1.254: mark_inode_dirty error [ 49.041712][ T5825] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.254: corrupted inode contents [ 49.046825][ T5825] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.254: mark_inode_dirty error [ 49.049455][ T5825] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.254: corrupted inode contents [ 49.052267][ T5825] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.254: mark_inode_dirty error [ 49.052844][ T5825] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.254: corrupted inode contents [ 49.059192][ T5825] EXT4-fs error (device loop1): ext4_truncate:4691: inode #15: comm syz.1.254: mark_inode_dirty error [ 49.061872][ T5825] EXT4-fs error (device loop1) in ext4_setattr:6172: Corrupt filesystem [ 49.074500][ T5825] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.254: corrupted inode contents [ 49.124395][ T4710] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 49.124678][ T4710] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 49.125014][ T4710] EXT4-fs warning (device loop1): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 49.126752][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.223886][ T5843] netlink: 'syz.1.261': attribute type 1 has an invalid length. [ 49.954821][ T5853] slcan: can't register candev [ 49.997464][ T5868] loop0: detected capacity change from 0 to 512 [ 50.000868][ T5868] EXT4-fs (loop0): Test dummy encryption mode enabled [ 50.026082][ T5868] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.029269][ T5868] EXT4-fs error (device loop0): ext4_empty_dir:3085: inode #12: comm syz.0.265: Directory block failed checksum [ 50.040810][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.116471][ T5878] loop0: detected capacity change from 0 to 1024 [ 50.117205][ T5878] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.131482][ T5878] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 50.131538][ T5878] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 50.131548][ T5878] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.266: Failed to acquire dquot type 0 [ 50.131560][ T5878] loop0: lost filesystem error report for type 5 error -5 [ 50.132506][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 50.132521][ C0] EXT4-fs (loop0): initial error at time 50: ext4_acquire_dquot:7041 [ 50.132534][ C0] EXT4-fs (loop0): last error at time 50: ext4_acquire_dquot:7041 [ 50.133885][ T5878] EXT4-fs (loop0): 1 truncate cleaned up [ 50.134370][ T5878] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.135806][ T5878] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 50.135841][ T5878] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 50.135851][ T5878] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.266: Failed to acquire dquot type 0 [ 50.497219][ T5843] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 50.545425][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.688502][ T5904] loop2: detected capacity change from 0 to 512 [ 50.716656][ T5904] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.729970][ T5912] netlink: 'syz.4.276': attribute type 39 has an invalid length. [ 50.784377][ T5914] can0: slcan on ttyS3. [ 51.045622][ T5914] can0 (unregistered): slcan off ttyS3. [ 51.131557][ T5918] 9p: Bad value for 'wfdno' [ 51.226165][ T5924] loop4: detected capacity change from 0 to 512 [ 51.241060][ T5924] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.293166][ T5924] 9p: Bad value for 'wfdno' [ 51.316186][ T4712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.329607][ T5931] netlink: 'syz.1.282': attribute type 29 has an invalid length. [ 51.339561][ T5931] netlink: 'syz.1.282': attribute type 29 has an invalid length. [ 51.415594][ T5941] bond0: option lp_interval: invalid value (18446744073709551614) [ 51.417108][ T5941] bond0: option lp_interval: allowed values 1 - 2147483647 [ 51.577921][ T5950] netlink: 'syz.1.282': attribute type 29 has an invalid length. [ 52.192148][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.260075][ T5957] __nla_validate_parse: 54 callbacks suppressed [ 52.261323][ T5957] netlink: 20 bytes leftover after parsing attributes in process `syz.4.288'. [ 52.321406][ T5964] loop0: detected capacity change from 0 to 2048 [ 52.335745][ T5965] dns_resolver: Unsupported content type (254) [ 52.405311][ T5968] loop4: detected capacity change from 0 to 1024 [ 52.405743][ T5968] EXT4-fs: Invalid want_extra_isize 0 [ 52.423835][ T5964] loop0: p1 < > p4 < > [ 52.423866][ T5964] loop0: partition table partially beyond EOD, truncated [ 52.445647][ T5964] loop0: p4 start 42180 is beyond EOD, truncated [ 52.463173][ T5973] loop4: detected capacity change from 0 to 1024 [ 52.465104][ T5973] EXT4-fs: Ignoring removed bh option [ 52.509926][ T4704] udevd[4704]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 52.534496][ T5973] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 52.572742][ T5973] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.672839][ T5989] netlink: 1 bytes leftover after parsing attributes in process `syz.2.287'. [ 53.583810][ T4712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.633495][ T6003] loop2: detected capacity change from 0 to 128 [ 54.100564][ T6022] block device autoloading is deprecated and will be removed. [ 54.256465][ T6061] fuse: Bad value for 'user_id' [ 54.258626][ T6061] fuse: Bad value for 'user_id' [ 54.345304][ T6063] set_capacity_and_notify: 1 callbacks suppressed [ 54.347086][ T6063] loop4: detected capacity change from 0 to 8192 [ 54.351467][ T6065] tc_dump_action: action bad kind [ 54.356611][ T6065] can0: slcan on ttyS3. [ 54.378380][ T6063] loop4: AHDI p1 p2 p3 [ 54.378500][ T6063] loop4: p1 size 16383 extends beyond EOD, truncated [ 54.403669][ T6065] can0 (unregistered): slcan off ttyS3. [ 54.477089][ T4704] udevd[4704]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 54.537297][ T6071] loop4: detected capacity change from 0 to 2048 [ 54.555576][ T6071] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.577239][ T6082] loop1: detected capacity change from 0 to 128 [ 54.588554][ T6082] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 54.591411][ T6071] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.644472][ T4710] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.726364][ T6095] loop0: detected capacity change from 0 to 512 [ 54.748720][ T6095] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.802053][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.846324][ T6107] loop4: detected capacity change from 0 to 512 [ 54.870720][ T6107] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.920622][ T4712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.053587][ T6133] can0: slcan on ttyS3. [ 55.184254][ T6133] can0 (unregistered): slcan off ttyS3. [ 55.362623][ T4717] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 55.378006][ T1505] IPVS: starting estimator thread 0... [ 55.493716][ T6160] bridge1: entered promiscuous mode [ 55.493944][ T6160] bridge1: entered allmulticast mode [ 55.502545][ T6153] IPVS: using max 60 ests per chain, 144000 per kthread [ 56.115156][ T6174] fuse: fd is not a fuse device [ 56.168827][ T6175] netlink: 'syz.3.339': attribute type 1 has an invalid length. [ 56.190012][ T6175] bond1: entered promiscuous mode [ 56.196608][ T6175] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.219675][ T6175] macvtap1: entered allmulticast mode [ 56.249856][ T6175] bond1: (slave bridge1): making interface the new active one [ 56.249894][ T6175] bridge1: entered promiscuous mode [ 56.258262][ T6175] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 56.333258][ T6191] loop1: detected capacity change from 0 to 128 [ 56.346445][ T6191] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 56.356377][ T6191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.345'. [ 56.359104][ T6191] netlink: 34959 bytes leftover after parsing attributes in process `syz.1.345'. [ 56.370368][ T6191] netlink: 44 bytes leftover after parsing attributes in process `syz.1.345'. [ 56.374130][ T6191] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.374558][ T6191] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.391932][ T6191] netlink: 44 bytes leftover after parsing attributes in process `syz.1.345'. [ 56.406356][ T4710] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.537824][ T6203] overlay: Unknown parameter 'fsuuid' [ 56.578118][ T6206] netlink: 48 bytes leftover after parsing attributes in process `syz.3.350'. [ 56.580323][ T6209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.350'. [ 56.580465][ T6206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.350'. [ 56.838808][ T6219] loop4: detected capacity change from 0 to 512 [ 56.943884][ T6219] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.351: inode has both inline data and extents flags [ 56.943923][ T6219] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 56.944104][ T6219] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.351: couldn't read orphan inode 15 (err -117) [ 56.944126][ T6219] loop4: lost filesystem error report for type 5 error -117 [ 56.947384][ T6219] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.055319][ T6230] overlayfs: failed to clone upperpath [ 57.083808][ T4892] IPVS: starting estimator thread 0... [ 57.203775][ T6233] IPVS: using max 60 ests per chain, 144000 per kthread [ 57.325315][ T6238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.361'. [ 57.377698][ T6241] fuse: Bad value for 'fd' [ 57.659345][ T6219] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.670101][ T6238] team0: Port device team_slave_0 removed [ 57.781456][ T6258] loop2: detected capacity change from 0 to 512 [ 57.790828][ T6258] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 57.840710][ T6258] Quota error (device loop2): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 57.840796][ T6258] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 57.859767][ T6274] geneve3: entered promiscuous mode [ 57.861641][ T6274] geneve3: entered allmulticast mode [ 57.967853][ T4719] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 57.974953][ T6273] loop0: detected capacity change from 0 to 128 [ 58.007454][ T6273] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 58.014802][ T6273] syz.0.369 (pid 6273) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 58.036269][ T6284] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 58.062063][ T6273] fscrypt: key with descriptor e8dab99234bb312e is too short (got 16 bytes, need 32+ bytes) [ 58.125764][ T6289] netlink: 12 bytes leftover after parsing attributes in process `syz.4.373'. [ 58.155854][ T4713] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 58.190716][ T6294] loop0: detected capacity change from 0 to 256 [ 58.488101][ T26] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 58.496270][ T26] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 58.513746][ T6322] fido_id[6322]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 58.556768][ T6326] netlink: 'syz.0.384': attribute type 1 has an invalid length. [ 58.575065][ T6326] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.582826][ T6326] netlink: 3 bytes leftover after parsing attributes in process `syz.0.384'. [ 58.701515][ T6334] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.756307][ T6334] EXT4-fs error (device loop0): ext4_ext_precache:631: inode #2: comm syz.0.387: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 58.786305][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.164348][ T6361] overlayfs: workdir and upperdir must be separate subtrees [ 59.387851][ T6363] set_capacity_and_notify: 3 callbacks suppressed [ 59.387892][ T6363] loop4: detected capacity change from 0 to 32768 [ 59.440103][ T6363] loop4: p1 p2 p3 [ 59.658521][ T4947] udevd[4947]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 59.662292][ T4704] udevd[4704]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 59.667259][ T4727] udevd[4727]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 59.961193][ T6398] loop4: detected capacity change from 0 to 32768 [ 60.025090][ T6398] loop4: p1 < > p3 < p5 p6 p7 > p4[DM] [ 60.028421][ T6398] loop4: p5 size 50331648 extends beyond EOD, truncated [ 60.031207][ T6398] loop4: p7 size 1048576 extends beyond EOD, truncated [ 60.406560][ T6404] fuse: fd is not a fuse device [ 60.463934][ T6406] fuse: Bad value for 'fd' [ 60.469519][ T6395] tipc: Started in network mode [ 60.469579][ T6395] tipc: Node identity aaaaaaaaaa34, cluster identity 4711 [ 60.470466][ T6395] tipc: Enabled bearer , priority 30 [ 60.928454][ T6422] fuse: root generation should be zero [ 60.948507][ T6422] bridge_slave_0: left allmulticast mode [ 60.948555][ T6422] bridge_slave_0: left promiscuous mode [ 60.948649][ T6422] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.955337][ T6422] bridge_slave_1: left allmulticast mode [ 60.955379][ T6422] bridge_slave_1: left promiscuous mode [ 60.955468][ T6422] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.967002][ T6422] bond0: (slave bond_slave_0): Releasing backup interface [ 61.004922][ T6422] bond0: (slave bond_slave_1): Releasing backup interface [ 61.036306][ T6422] team0: Port device team_slave_0 removed [ 61.039517][ T6422] team0: Port device team_slave_1 removed [ 61.040117][ T6422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.040138][ T6422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.041385][ T6422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.041397][ T6422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.045157][ T6422] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 61.603655][ T24] tipc: Node number set to 10398378 [ 61.640670][ T6470] loop0: detected capacity change from 0 to 4096 [ 61.650809][ T6470] EXT4-fs (loop0): Test dummy encryption mode enabled [ 61.662265][ T6470] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.681811][ T6476] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 61.682708][ T6476] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 61.701559][ T6478] loop1: detected capacity change from 0 to 512 [ 61.703300][ T6478] EXT4-fs: Ignoring removed bh option [ 61.705132][ T6478] EXT4-fs: Ignoring removed oldalloc option [ 61.731465][ T6478] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 61.749045][ T6478] EXT4-fs (loop1): 1 truncate cleaned up [ 61.767714][ T6481] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 61.830359][ T6490] loop4: detected capacity change from 0 to 2048 [ 61.837549][ T6488] loop0: detected capacity change from 0 to 128 [ 61.855404][ T6488] af_packet: tpacket_rcv: packet too big, clamped from 18 to 4294967272. macoff=96 [ 61.855624][ T6488] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 61.901021][ T6490] overlay: ./file2 is not a directory [ 62.058771][ T6506] loop0: detected capacity change from 0 to 256 [ 62.108536][ T6500] Injecting memory failure for pfn 0x11fe79 at process virtual address 0x20000000 [ 62.116021][ T6510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.438'. [ 62.116059][ T6510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.438'. [ 62.128674][ T6500] Memory failure: 0x11fe79: Sending SIGBUS to syz.4.434:6500 due to hardware memory corruption [ 62.130968][ T6500] Memory failure: 0x11fe79: recovery action for dirty LRU page: Recovered [ 62.134497][ T6500] Injecting memory failure for pfn 0x219430 at process virtual address 0x20001000 [ 62.136770][ T6500] Memory failure: 0x219430: Sending SIGBUS to syz.4.434:6500 due to hardware memory corruption [ 62.140363][ T6500] Memory failure: 0x219430: recovery action for already poisoned page: Failed [ 62.150258][ T6027] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.150310][ T6027] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.150343][ T6027] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.261983][ T6518] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 62.263805][ T6520] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 62.556280][ T6534] netlink: 48 bytes leftover after parsing attributes in process `syz.4.443'. [ 62.714860][ T6553] loop0: detected capacity change from 0 to 2048 [ 62.735480][ T6562] tipc: Can't bind to reserved service type 2 [ 62.740126][ T6562] loop2: detected capacity change from 0 to 256 [ 62.746240][ T6562] syz.2.453: attempt to access beyond end of device [ 62.746240][ T6562] loop2: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 62.792942][ T6553] loop0: p2 p3 p7 [ 62.802354][ T6564] netlink: 'syz.2.454': attribute type 1 has an invalid length. [ 62.841139][ T6564] bond1: entered promiscuous mode [ 62.841339][ T6564] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.857195][ T4704] udevd[4704]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 62.860727][ T4947] udevd[4947]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 62.869021][ T6420] udevd[6420]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 62.883746][ T6564] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.894100][ T6564] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 62.894135][ T6564] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 62.928918][ T6572] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 62.928956][ T6572] IPv6: NLM_F_CREATE should be set when creating new route [ 62.928981][ T6572] IPv6: NLM_F_CREATE should be set when creating new route [ 62.933895][ T6572] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 62.939301][ T6564] bond1: (slave wireguard0): making interface the new active one [ 62.940801][ T6564] wireguard0: entered promiscuous mode [ 62.943284][ T6564] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 62.947296][ T6572] bond1: (slave wireguard1): The slave device specified does not support setting the MAC address [ 62.951247][ T6572] bond1: (slave wireguard1): Enslaving as a backup interface with an up link [ 63.006457][ T6580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.458'. [ 63.019649][ T6584] loop2: detected capacity change from 0 to 1024 [ 63.021288][ T6584] EXT4-fs: Ignoring removed oldalloc option [ 63.022796][ T6584] EXT4-fs: Ignoring removed oldalloc option [ 63.049822][ T6584] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 63.077839][ T6588] binder: 6587:6588 tried to acquire reference to desc 0, got 1 instead [ 63.079916][ T6588] binder: 6587:6588 unknown command 0 [ 63.081347][ T6588] binder: 6587:6588 ioctl c0306201 20000140 returned -22 [ 63.129300][ T6596] EXT4-fs: Ignoring removed bh option [ 63.132520][ T6596] ext2: Unknown parameter 'no' [ 63.227141][ T6601] gretap1: entered promiscuous mode [ 63.235693][ T6601] batman_adv: batadv0: Adding interface: gretap1 [ 63.235727][ T6601] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 63.235756][ T6601] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 63.433853][ T6619] syz_tun: entered allmulticast mode [ 63.445833][ T6612] syz_tun: left allmulticast mode [ 63.471585][ T6623] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 63.475385][ T6621] 9p: Bad value for 'rfdno' [ 63.545820][ T6632] netlink: 'syz.2.472': attribute type 1 has an invalid length. [ 63.547294][ T6637] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 63.549126][ T6632] netlink: 'syz.2.472': attribute type 4 has an invalid length. [ 63.549156][ T6632] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.472'. [ 63.553767][ T6632] netlink: 'syz.2.472': attribute type 1 has an invalid length. [ 63.553783][ T6632] netlink: 'syz.2.472': attribute type 4 has an invalid length. [ 63.553792][ T6632] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.472'. [ 63.619105][ T6634] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 63.633679][ T6647] netlink: 'syz.4.478': attribute type 2 has an invalid length. [ 63.688490][ T6652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.479'. [ 63.709734][ T6657] EXT4-fs (loop4): Test dummy encryption mode enabled [ 63.722618][ T6657] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.482: inode has both inline data and extents flags [ 63.722666][ T6657] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 63.725334][ T6657] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.482: couldn't read orphan inode 15 (err -117) [ 63.725356][ T6657] loop4: lost filesystem error report for type 5 error -117 [ 63.737699][ T6657] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 63.745380][ T6660] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 63.745425][ T6660] System zones: 1-3, 19-19, 35-36 [ 63.749979][ T6660] EXT4-fs warning (device loop0): verify_group_input:137: Cannot add at group 3391 (only 1 groups) [ 64.507567][ T1598] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.510666][ T1598] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.647638][ T6677] overlayfs: missing 'lowerdir' [ 64.733010][ T6038] [ 64.733530][ T6038] ====================================================== [ 64.733816][ T10] cfg80211: failed to load regulatory.db [ 64.735736][ T6038] WARNING: possible circular locking dependency detected [ 64.737011][ T6038] syzkaller #0 Tainted: G L [ 64.738062][ T6038] ------------------------------------------------------ [ 64.739240][ T6038] kworker/u8:31/6038 is trying to acquire lock: [ 64.740497][ T6038] ffff0000d0746938 (jbd2_handle){++++}-{0:0}, at: wait_transaction_locked+0x174/0x228 [ 64.742249][ T6038] [ 64.742249][ T6038] but task is already holding lock: [ 64.743511][ T6038] ffff0000d0608c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x170/0x2dc [ 64.745271][ T6038] [ 64.745271][ T6038] which lock already depends on the new lock. [ 64.745271][ T6038] [ 64.747088][ T6038] [ 64.747088][ T6038] the existing dependency chain (in reverse order) is: [ 64.748697][ T6038] [ 64.748697][ T6038] -> #2 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 64.750133][ T6038] percpu_down_read_internal+0x5c/0x294 [ 64.751150][ T6038] ext4_writepages+0x170/0x2dc [ 64.752076][ T6038] do_writepages+0x284/0x47c [ 64.752989][ T6038] __writeback_single_inode+0x140/0x1880 [ 64.754071][ T6038] writeback_single_inode+0x400/0xb20 [ 64.755076][ T6038] write_inode_now+0x170/0x208 [ 64.755990][ T6038] iput+0x7cc/0xc2c [ 64.756740][ T6038] ext4_xattr_block_set+0x1b1c/0x21e8 [ 64.757769][ T6038] ext4_expand_extra_isize_ea+0xaf4/0x1384 [ 64.758897][ T6038] __ext4_expand_extra_isize+0x2a4/0x378 [ 64.760036][ T6038] __ext4_mark_inode_dirty+0x394/0x828 [ 64.761070][ T6038] ext4_evict_inode+0x798/0xfb8 [ 64.762051][ T6038] evict+0x4c0/0x74c [ 64.762834][ T6038] iput+0x8f0/0xc2c [ 64.763560][ T6038] ext4_process_orphan+0x24c/0x2c0 [ 64.764525][ T6038] ext4_orphan_cleanup+0x7d4/0xd20 [ 64.765543][ T6038] ext4_fill_super+0x4628/0x4e14 [ 64.766482][ T6038] get_tree_bdev_flags+0x388/0x43c [ 64.767477][ T6038] get_tree_bdev+0x2c/0x3c [ 64.768330][ T6038] ext4_get_tree+0x28/0x38 [ 64.769167][ T6038] vfs_get_tree+0x90/0x28c [ 64.769992][ T6038] fc_mount+0x24/0xac [ 64.770769][ T6038] do_new_mount+0x2a4/0x538 [ 64.771645][ T6038] path_mount+0x5f0/0xa88 [ 64.772493][ T6038] do_mount+0xe8/0x148 [ 64.773405][ T6038] __arm64_sys_mount+0x334/0x380 [ 64.774408][ T6038] invoke_syscall+0x98/0x244 [ 64.775376][ T6038] el0_svc_common+0xec/0x23c [ 64.776354][ T6038] do_el0_svc+0x4c/0x5c [ 64.777226][ T6038] el0_svc+0x64/0x260 [ 64.778035][ T6038] el0t_64_sync_handler+0x48/0x148 [ 64.779033][ T6038] el0t_64_sync+0x198/0x19c [ 64.779888][ T6038] [ 64.779888][ T6038] -> #1 (&ei->xattr_sem){++++}-{4:4}: [ 64.781272][ T6038] down_write+0x50/0xc0 [ 64.782167][ T6038] ext4_xattr_set_handle+0x134/0xde4 [ 64.783248][ T6038] ext4_initxattrs+0xa8/0x11c [ 64.784178][ T6038] security_inode_init_security+0x244/0x370 [ 64.785310][ T6038] ext4_init_security+0x44/0x58 [ 64.786274][ T6038] __ext4_new_inode+0x286c/0x3308 [ 64.787327][ T6038] ext4_create+0x1f4/0x408 [ 64.788175][ T6038] path_openat+0x11f8/0x2a60 [ 64.789062][ T6038] do_file_open+0x1c8/0x2e8 [ 64.789905][ T6038] do_sys_openat2+0x114/0x1e8 [ 64.790743][ T6038] do_sys_open+0xb0/0xe0 [ 64.791531][ T6038] __arm64_sys_openat+0xa0/0xbc [ 64.792433][ T6038] invoke_syscall+0x98/0x244 [ 64.793390][ T6038] el0_svc_common+0xec/0x23c [ 64.794349][ T6038] do_el0_svc+0x4c/0x5c [ 64.795116][ T6038] el0_svc+0x64/0x260 [ 64.795901][ T6038] el0t_64_sync_handler+0x48/0x148 [ 64.796833][ T6038] el0t_64_sync+0x198/0x19c [ 64.797700][ T6038] [ 64.797700][ T6038] -> #0 (jbd2_handle){++++}-{0:0}: [ 64.798961][ T6038] __lock_acquire+0x17c0/0x2ebc [ 64.800023][ T6038] lock_acquire+0x140/0x364 [ 64.800883][ T6038] wait_transaction_locked+0x17c/0x228 [ 64.801980][ T6038] start_this_handle+0x57c/0x1bcc [ 64.802976][ T6038] jbd2__journal_start+0x260/0x534 [ 64.803977][ T6038] __ext4_journal_start_sb+0x228/0x948 [ 64.805065][ T6038] ext4_do_writepages+0xabc/0x3bc0 [ 64.806043][ T6038] ext4_writepages+0x198/0x2dc [ 64.807018][ T6038] do_writepages+0x284/0x47c [ 64.807890][ T6038] __writeback_single_inode+0x140/0x1880 [ 64.808979][ T6038] writeback_sb_inodes+0x798/0x1720 [ 64.809965][ T6038] __writeback_inodes_wb+0xec/0x210 [ 64.810930][ T6038] wb_writeback+0x3d0/0x10cc [ 64.811798][ T6038] wb_workfn+0xa78/0xda8 [ 64.812625][ T6038] process_scheduled_works+0x788/0x10b8 [ 64.813697][ T6038] worker_thread+0x798/0xbd0 [ 64.814608][ T6038] kthread+0x304/0x3d4 [ 64.815381][ T6038] ret_from_fork+0x10/0x20 [ 64.816360][ T6038] [ 64.816360][ T6038] other info that might help us debug this: [ 64.816360][ T6038] [ 64.818077][ T6038] Chain exists of: [ 64.818077][ T6038] jbd2_handle --> &ei->xattr_sem --> &sbi->s_writepages_rwsem [ 64.818077][ T6038] [ 64.820364][ T6038] Possible unsafe locking scenario: [ 64.820364][ T6038] [ 64.821617][ T6038] CPU0 CPU1 [ 64.822518][ T6038] ---- ---- [ 64.823419][ T6038] rlock(&sbi->s_writepages_rwsem); [ 64.824287][ T6038] lock(&ei->xattr_sem); [ 64.825479][ T6038] lock(&sbi->s_writepages_rwsem); [ 64.826750][ T6038] lock(jbd2_handle); [ 64.827448][ T6038] [ 64.827448][ T6038] *** DEADLOCK *** [ 64.827448][ T6038] [ 64.828865][ T6038] 4 locks held by kworker/u8:31/6038: [ 64.829820][ T6038] #0: ffff0000c191b140 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x734/0x10b8 [ 64.831753][ T6038] #1: ffff800097e87c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x73c/0x10b8 [ 64.834021][ T6038] #2: ffff0000d060a0d8 (&type->s_umount_key#31){++++}-{4:4}, at: super_trylock_shared+0x24/0xdc [ 64.835870][ T6038] #3: ffff0000d0608c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x170/0x2dc [ 64.837695][ T6038] [ 64.837695][ T6038] stack backtrace: [ 64.838763][ T6038] CPU: 1 UID: 0 PID: 6038 Comm: kworker/u8:31 Tainted: G L syzkaller #0 PREEMPT [ 64.840619][ T6038] Tainted: [L]=SOFTLOCKUP [ 64.841302][ T6038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 64.843054][ T6038] Workqueue: writeback wb_workfn (flush-259:0) [ 64.844118][ T6038] Call trace: [ 64.844667][ T6038] show_stack+0x2c/0x3c (C) [ 64.845442][ T6038] __dump_stack+0x30/0x40 [ 64.846226][ T6038] dump_stack_lvl+0xd8/0x12c [ 64.847009][ T6038] dump_stack+0x1c/0x28 [ 64.847703][ T6038] print_circular_bug+0x328/0x330 [ 64.848586][ T6038] check_noncircular+0x158/0x174 [ 64.849408][ T6038] __lock_acquire+0x17c0/0x2ebc [ 64.850245][ T6038] lock_acquire+0x140/0x364 [ 64.851039][ T6038] wait_transaction_locked+0x17c/0x228 [ 64.851937][ T6038] start_this_handle+0x57c/0x1bcc [ 64.852791][ T6038] jbd2__journal_start+0x260/0x534 [ 64.853657][ T6038] __ext4_journal_start_sb+0x228/0x948 [ 64.854634][ T6038] ext4_do_writepages+0xabc/0x3bc0 [ 64.855699][ T6038] ext4_writepages+0x198/0x2dc [ 64.856530][ T6038] do_writepages+0x284/0x47c [ 64.857324][ T6038] __writeback_single_inode+0x140/0x1880 [ 64.858267][ T6038] writeback_sb_inodes+0x798/0x1720 [ 64.859109][ T6038] __writeback_inodes_wb+0xec/0x210 [ 64.859943][ T6038] wb_writeback+0x3d0/0x10cc [ 64.860729][ T6038] wb_workfn+0xa78/0xda8 [ 64.861477][ T6038] process_scheduled_works+0x788/0x10b8 [ 64.862451][ T6038] worker_thread+0x798/0xbd0 [ 64.863296][ T6038] kthread+0x304/0x3d4 [ 64.864062][ T6038] ret_from_fork+0x10/0x20 [ 65.318166][ T6667] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.481: inode has both inline data and extents flags [ 65.318255][ T6667] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 65.318572][ T6667] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.481: couldn't read orphan inode 15 (err -117) [ 65.318613][ T6667] loop1: lost filesystem error report for type 5 error -117 [ 65.320145][ T6667] EXT4-fs mount: 11 callbacks suppressed [ 65.320182][ T6667] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.387098][ T4819] kernel read not supported for file / (pid: 4819 comm: kworker/0:4) [ 65.389601][ T6681] Injecting memory failure for pfn 0x11f0b0 at process virtual address 0x201c0000 [ 65.424722][ T6681] Memory failure: 0x11f0b0: Sending SIGBUS to syz.1.481:6681 due to hardware memory corruption [ 65.424860][ T6681] Memory failure: 0x11f0b0: recovery action for dirty LRU page: Recovered [ 65.424900][ T6681] Injecting memory failure for pfn 0x11fe4a at process virtual address 0x201c1000 [ 65.440683][ T6681] Memory failure: 0x11fe4a: Sending SIGBUS to syz.1.481:6681 due to hardware memory corruption [ 65.440726][ T6681] Memory failure: 0x11fe4a: recovery action for dirty LRU page: Recovered [ 65.640717][ T6660] EXT4-fs warning (device loop0): verify_group_input:137: Cannot add at group 3391 (only 1 groups) [ 65.653202][ T4712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.680218][ T4713] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 65.763482][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.