last executing test programs: 2m27.429477153s ago: executing program 2 (id=144): futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x1) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) r0 = syz_open_dev$vim2m(&(0x7f0000002a80), 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000280)) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000000711052000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r4 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}, 0x80) ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f00000000c0)) munmap$binder(0x0, 0xffffffff) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440), 0x402, &(0x7f00000001c0)={[{@mode={'mode', 0x3d, 0x6}}]}) 2m25.587541581s ago: executing program 2 (id=161): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x10b243, 0x0) lsm_get_self_attr(0x67, &(0x7f0000000000)={0x0, 0x0, 0x35, 0x15, ""/21}, &(0x7f0000001040)=0x8d, 0x1) r1 = io_uring_setup(0x7272, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x1, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/141, 0x8d}], 0x113e) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x5}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x11, 0x2, 0x1, 0x0, 0x20}) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000040)={0x2, 0x4, 0x100, 0x10800}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mknodat$null(r0, &(0x7f00000011c0)='./file0\x00', 0x4, 0x103) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000b80)={0x0, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e23, @local}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x61, 0xfffffffffffffffa, 0x8}) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000a40)={0x4000002, {{0x2, 0x4e22, @remote}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x35}}}}, 0x108) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x24, 0x756, &(0x7f00000002c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x20000, 0x6) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f00000001c0)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001040)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) r7 = syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) process_madvise(r8, 0x0, 0x0, 0x4, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000000240)={0x1, 0x1, 0x1000, 0x1, &(0x7f0000000100)="a8", 0x5, 0x0, &(0x7f0000000180)="b100000000"}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000140016"], 0x4c}}, 0x0) ioctl$XFS_IOC_EXCHANGE_RANGE(0xffffffffffffffff, 0x40285881, &(0x7f00000000c0)={r4, 0x0, 0x6, 0x0, 0xffff, 0x4}) 2m25.373756619s ago: executing program 2 (id=163): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@ipv4_newroute={0x38, 0x18, 0x1, 0x70bd2d, 0x0, {0x2, 0x10, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x1}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r2, 0x8, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ffffff7f71122500000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) 2m24.139726922s ago: executing program 2 (id=170): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x5, @private2={0xfc, 0x2, '\x00', 0x20}, 0x42}, 0x1c, &(0x7f00000039c0)=[{&(0x7f00000003c0)="eb", 0x1}], 0x1}}], 0x1, 0x20040944) listen(r0, 0xfff) r1 = accept(r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0xfffffff9}, &(0x7f0000000380)=0x8) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r5 = accept$alg(r4, 0x0, 0x0) recvmmsg(r5, &(0x7f0000007100)=[{{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f00000017c0)=""/6, 0x6}, {&(0x7f0000001800)=""/52, 0x34}], 0x2}, 0x3}], 0x1, 0x40002122, 0x0) sendmmsg$inet(r5, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="ec0767137af7e7d890debdedb6aba1a8", 0x10}], 0x1}}], 0x1, 0x8058) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) 2m24.101101411s ago: executing program 32 (id=170): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x5, @private2={0xfc, 0x2, '\x00', 0x20}, 0x42}, 0x1c, &(0x7f00000039c0)=[{&(0x7f00000003c0)="eb", 0x1}], 0x1}}], 0x1, 0x20040944) listen(r0, 0xfff) r1 = accept(r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0xfffffff9}, &(0x7f0000000380)=0x8) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r5 = accept$alg(r4, 0x0, 0x0) recvmmsg(r5, &(0x7f0000007100)=[{{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f00000017c0)=""/6, 0x6}, {&(0x7f0000001800)=""/52, 0x34}], 0x2}, 0x3}], 0x1, 0x40002122, 0x0) sendmmsg$inet(r5, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="ec0767137af7e7d890debdedb6aba1a8", 0x10}], 0x1}}], 0x1, 0x8058) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) 10.360802687s ago: executing program 4 (id=1027): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x7a, &(0x7f0000000640)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '@\x00', 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x1, 0x0, 0x500, {0x0, 0x6, '\x00', 0x40, 0x0, 0xff, @private1, @private2, [@hopopts={0x3a}], "f4c638bed6f068cc"}}}}}}}, 0x0) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000007c0)=@filter={'filter\x00', 0x42, 0x4, 0x380, 0xffffffff, 0x1c8, 0x1c8, 0x108, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'macsec0\x00', {}, {}, 0x11, 0x0, 0x4}, 0x0, 0xe0, 0x108, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xe}}, @common=@set={{0x40}, {{0x3, [0x7, 0x1, 0x0, 0x8, 0x4, 0x3], 0x6, 0x4}}}]}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @rand_addr=0x64010101, 0x0, 0x0, 'dvmrp0\x00', 'dvmrp1\x00', {0xb25f05e6834eb86f}, {0xff}, 0x1d, 0x1, 0x49}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@addrtype={{0x30}, {0x60b, 0xe03, 0x1, 0x20000000}}, @common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x0, 0x2, 0x0, 0x5], 0x0, 0x9}, {0x1, [0x3, 0x8, 0x5, 0x6, 0x2], 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000007c0)=@filter={'filter\x00', 0x42, 0x4, 0x380, 0xffffffff, 0x1c8, 0x1c8, 0x108, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'macsec0\x00', {}, {}, 0x11, 0x0, 0x4}, 0x0, 0xe0, 0x108, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xe}}, @common=@set={{0x40}, {{0x3, [0x7, 0x1, 0x0, 0x8, 0x4, 0x3], 0x6, 0x4}}}]}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @rand_addr=0x64010101, 0x0, 0x0, 'dvmrp0\x00', 'dvmrp1\x00', {0xb25f05e6834eb86f}, {0xff}, 0x1d, 0x1, 0x49}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@addrtype={{0x30}, {0x60b, 0xe03, 0x1, 0x20000000}}, @common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x0, 0x2, 0x0, 0x5], 0x0, 0x9}, {0x1, [0x3, 0x8, 0x5, 0x6, 0x2], 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000000)=0x1, 0x4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$eJzs289PHFUcAPDv7EKR/hBs6o/Sqmg1En9AobX24EWjiQdNTPRQjwi0wW6LKZjYhigaU4+miXfj0cS/wJNejHoy8ap306QxXFo9rZndGdhddrdAF7a6n08y8N7MW9777szbfW8eE0DPGk1/JBH7I+L3iBiqZusLjFZ/3Vpdnvl7dXkmiXL5rb+SSrmbq8szedH8dfvyTF9E4bMkjjSpd/HylfPTpdLcpSw/sXTh/YnFy1eem78wfW7u3NzFqdOnT56YfOHU1PMdiTON6+bIRwtHD7/2zrU3Zs5ce/fnb5M8/oY4OmS03cEny+UOV9ddB2rSSV8XG8KWFKvdNPor/X8oirF+8obi1U+72jhgR5XL5fIDrQ+vlIH/sSS63QKgO/Iv+nT+m2+7NPS4K9x4qToBSuO+lW3VI31RyMr0N8xvO2k0Is6s/PNVusXO3IcAAKjzfTr+ebbZ+K8QtfeF7s3WUIYj4r6IOBgRpyLiUETcH1Ep+2BEPNSskqR1/Y2LJBvHP4Xr2w5uE9Lx34vZ2lb9+C8f/cVwMcsdqMTfn5ydL80dz96TsegfSPOTber44ZXfvmh1rHb8l25p/flYMGvH9b6B+tfMTi9N30nMtW58EjHS1yz+ZG0lID19hyNiZJt1zD/9zdFWx24ffxsdWGcqfx3xVPX8r0RD/Lmk/frkxD1Rmjs+kV8VG/3y69U3W9V/R/F3QHr+9za9/tfiH05q12sXt17H1T8+bzmn2e71vyd5u27fh9NLS5cmI/Ykr1cbXbt/qqHc1Hr5NP6xY837/8FYfyeORER6ET8cEY9ExKNZ2x+LiMcj4lib+H96+Yn3thf/QJu/2hlp/LNbOv/riT3RuKd5onj+x+/qKh3ebPyRnf+TldRYtmczn3+badf2rmYAAAD47ylExP5ICuNr6UJhfLz6P/yHYm+htLC49MzZhQ8uzlafERiO/kJ+p2uo5n7oZDatz/NTDfkT2X3jL4uDlfz4zEJpttvBQ4/b16L/p/4sdrt1wI7zvBb0Lv0fepf+D71L/4fe1aT/D3ajHcDua/b9/3EX2gHsvob+b9kPeoj5P/Qu/R96l/4PPWlxMG7/kLyExIZEFO6KZkjsUKLbn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8W8AAAD//zpS5t0=") (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0xdd) pwrite64(r5, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) getpid() (async) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 9.948673328s ago: executing program 4 (id=1033): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r0, &(0x7f0000000600)=[{0x0}, {&(0x7f00000001c0)="01200000", 0x4}], 0x2, 0x3, 0x7fffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@getsa={0x28, 0x12, 0x1, 0x70bd2c, 0x25dfdbfe, {@in=@loopback, 0x4d3, 0xa, 0x3c}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x2, 0x0, 0x0, 0x6, 0x6}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x80, 0x19}]}, &(0x7f0000003ff6)='GPL\x00', 0xc, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x11}, 0x94) 9.883790435s ago: executing program 4 (id=1034): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x1}], 0x1}, 0xfc) sendmsg$inet(r0, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000000)="d02dc101", 0x4}], 0x1}, 0x10) recvmsg$kcm(r0, &(0x7f0000002180)={&(0x7f0000000040)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000002080)=[{&(0x7f00000000c0)=""/253, 0xfd}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/96, 0x60}, {&(0x7f0000001b80)=""/44, 0x2c}, {&(0x7f0000001bc0)=""/231, 0xe7}, {&(0x7f0000001cc0)=""/163, 0xa3}, {&(0x7f0000001d80)=""/115, 0x73}, {&(0x7f0000001e00)=""/184, 0xb8}, {&(0x7f0000001ec0)=""/186, 0xba}, {&(0x7f0000001f80)=""/209, 0xd1}], 0xa, &(0x7f0000002140)}, 0x0) 9.676708728s ago: executing program 4 (id=1037): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x4, 0x88a880) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x62000000) prlimit64(r0, 0xe, &(0x7f00000002c0)={0x3, 0x5}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x1ff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/clients\x00', 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3c}}, 0x2}, 0x1c) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000002940)={[{@shortname_winnt}, {@shortname_winnt}, {@numtail}, {@fat=@tz_utc}, {@rodir}, {@utf8}, {@utf8no}, {@fat=@nfs_nostale_ro}, {@shortname_mixed}, {@fat=@sys_immutable}, {@rodir}, {@utf8no}, {@shortname_lower}]}, 0x0, 0x2ad, &(0x7f0000000580)="$eJzs3UFrE1sYxvGnSdukKW2yKBfuhYsH3ehmaOMnCNKCGFBqI+pCmNqJhoxJyMRIRGx3bv0cxaUrBfULdOPOvbgpguCmC3GkyUybpgHTapza/H9Q5u05886c4cyEdwYy2b75/EG56FlFu6FY0igmbWhHyuxGgbFgGWvHk+q2oQvTXz/8f/3W7Su5fH5x2Zil3MrFrDFm9sybR09enH3XmL7xcvZ1QluZO9tfsh+3/tn6d/v7Srj1qmSb1Wq1Ya+6jlkreWXLmGuuY3uOKVU8p94wXf1Ft1qrtYxdWZtJ1eqO5xm70jJlp2UaVdOot4x9zy5VjGVZZialURM/ckZhc3nZzg1lMIjCVL/Gej1nx/t2Fjb/xKAAAMDJElX9f7/kmZJnKtUD9f3h+j+mI9T/0kjX/8dVi3oAGKrd+j8VXL8HUf8DAAAAAAAAAAAAAAAAAAAAAPA32PH9tO/76XAZ/iUkJSWF/0c9TgwH8z/aur64l5TcZ81Cs9BZdvpzRZXkytH8hPStfT4EOvHS5fzivGnL6K27HuSvNwtxJcL8UKZ//kIn33Tnr2tCqe79Z5XWXP/8bJ/8ZmFS58/5iWDPjiyl9f6uqnK11j6v9/OfLhhz6Wq+J3+qvR4AAAAAAKeBZfYcun9v91smfG1IT3+ncf/5gNI/eT7Qc389rv/GoztuAAAAAABGiTepsu26Tt1rPT7tQfj7B79lg1LUh5McdOVxSUHLq5MyF4MEMUm9XROHWvoH8V+b5c/SwetiLvLpPnbgx/fO1U8PO1fAIOlRfioBAAAAGIaw6B+LeiAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIywQd8iFq5/nJeQde0uHs1RAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACfDjwAAAP//5JwTUw==") r4 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x11480, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r4, &(0x7f0000000840)={0x2020}, 0x2020) unshare(0x20000400) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9}, 0x28) 7.298943267s ago: executing program 1 (id=1058): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x6b, 0x1, 0x1, 0x3e}]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000040)={0x4, 0x7ff}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1, 0xffffffffffffffff}, 0x4) getsockopt$inet6_mreq(r0, 0x29, 0x1, &(0x7f0000000440)={@private0, 0x0}, &(0x7f0000000480)=0x14) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='timerslack_ns\x00') write$tun(r7, &(0x7f0000000600)=ANY=[@ANYRESDEC, @ANYRESDEC], 0xfdef) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r9 = socket$inet(0xa, 0x801, 0x84) listen(r9, 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x1004000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) r10 = syz_open_dev$vcsu(&(0x7f0000000540), 0x2a8b, 0x10d040) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x11, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x800}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', r6, 0x0, r7, 0x8, &(0x7f00000004c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x7, 0x92a, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000600)=[r8, r10, r11], &(0x7f0000000640)=[{0x2, 0x10001, 0x8, 0x2}, {0x1, 0x5, 0x10, 0xa}, {0x5, 0x5, 0x9, 0x5}], 0x10, 0xffffffff}, 0x94) userfaultfd(0x801) 6.410954707s ago: executing program 1 (id=1066): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000002c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="b3", 0x1}], 0x1, &(0x7f0000000080)=ANY=[], 0xf0}}], 0x1, 0x2400cc40) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x0, 0xc95a, 0xf, 0x8, 0x80, 0x4, 0x3, 0x80000000, 0x20000006, 0x4d, 0x9, 0x5d, 0xa, 0x5, 0xffff2d38, 0xffffff03, 0x6, 0x3, 0x0, 0xe, 0x7, 0x0, 0x7, 0x23c5b, 0x1, 0x20, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x7, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x6, 0x3e, 0x4000008c, 0x6, 0x5, 0x0, 0x4, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x6, 0x4, 0x1, 0xf], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x2, 0x9, 0xfffffffe, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x0, 0x312, 0x78, 0xe, 0xfffffffe, 0x4, 0x7, 0x7fff, 0x5, 0x400, 0x401, 0x7, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0x1, 0x4e2, 0xc, 0x4, 0xb, 0x10000, 0x9, 0x8, 0x1009, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x0, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x94f, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x7, 0x5, 0xfffffffe, 0x6, 0x8d2, 0x9, 0x5, 0x8002, 0x0, 0x5, 0xb, 0x4, 0x5, 0x7, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x2, 0x4, 0x6d01, 0x3, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xc8, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x1, 0x1c, 0x7, 0x3, 0x3, 0x5, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0x0, 0x5, 0x93a, 0x5, 0x2, 0xfffffffc, 0xb9, 0xce7, 0x203, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0xb8, 0x3, 0x28, 0xa620, 0x2, 0x5, 0x1, 0x7ff, 0x14c, 0x20a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x10001, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0xfffffff9, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xb1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd8, 0x200, 0xffff3441, 0xfff]}, 0x45c) r1 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) pwritev(r1, &(0x7f0000000400)=[{&(0x7f0000000340)='-1', 0x2}, {&(0x7f0000000080)="a8", 0x1}], 0x2, 0x4, 0xa) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000002c0)=0x1, 0x4) (async) sendmmsg$inet(r0, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="b3", 0x1}], 0x1, &(0x7f0000000080)=ANY=[], 0xf0}}], 0x1, 0x2400cc40) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x0, 0xc95a, 0xf, 0x8, 0x80, 0x4, 0x3, 0x80000000, 0x20000006, 0x4d, 0x9, 0x5d, 0xa, 0x5, 0xffff2d38, 0xffffff03, 0x6, 0x3, 0x0, 0xe, 0x7, 0x0, 0x7, 0x23c5b, 0x1, 0x20, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x7, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x6, 0x3e, 0x4000008c, 0x6, 0x5, 0x0, 0x4, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x6, 0x4, 0x1, 0xf], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x2, 0x9, 0xfffffffe, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x0, 0x312, 0x78, 0xe, 0xfffffffe, 0x4, 0x7, 0x7fff, 0x5, 0x400, 0x401, 0x7, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0x1, 0x4e2, 0xc, 0x4, 0xb, 0x10000, 0x9, 0x8, 0x1009, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x0, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x94f, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x7, 0x5, 0xfffffffe, 0x6, 0x8d2, 0x9, 0x5, 0x8002, 0x0, 0x5, 0xb, 0x4, 0x5, 0x7, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x2, 0x4, 0x6d01, 0x3, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xc8, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x1, 0x1c, 0x7, 0x3, 0x3, 0x5, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0x0, 0x5, 0x93a, 0x5, 0x2, 0xfffffffc, 0xb9, 0xce7, 0x203, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0xb8, 0x3, 0x28, 0xa620, 0x2, 0x5, 0x1, 0x7ff, 0x14c, 0x20a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x10001, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0xfffffff9, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xb1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd8, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) (async) pwritev(r1, &(0x7f0000000400)=[{&(0x7f0000000340)='-1', 0x2}, {&(0x7f0000000080)="a8", 0x1}], 0x2, 0x4, 0xa) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) 6.400766263s ago: executing program 4 (id=1067): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@test_dummy_encryption}, {@data_journal}, {@norecovery}]}, 0x3, 0x481, &(0x7f00000004c0)="$eJzs3M1vG0UbAPBnN3Hy5m0hoZSvlo9AQVQIkqYt0AMHQCBxKAIJDnC0klCVpgU1QaJVJFIO5YQQEnfEkX+BE1wQ4oTEFe6oUoVyacvJaL27ie04bt3acYt/P8n1zH5k5vHu2M/u2A1gaE1n/yQRuyPij4iYzKvNG0znT1fXV+evra/OJ1GrvfN3Ut/uyvrqfLlpud+uxkoksb9Nu8vnzp+qLi0tni3qsyunP55dPnf+uZOnqycWTyyeOXzs2NEjcy++cPj5W4xwz1v5c1rU33j/6zePf9kUf0scPTLdaeVTtVqPmxusuxrKowPsB90ZKY5XpT7+J2Ok4ehNxuufb1Q+G1AHgb6p1Wq1XduvXqsB/2FJNNcNeRgW5Qd9ef1bPI83JgEv9zUDGazLr+QXQFncV4tHvmZ0445BpeX6tpemI+K9tX++zR7R8T5E0qceAADD5scs/3k2y3ZW57PcYzP/SOP+hu3uLuaGpiLinojYExH3xpnYGxH3RdS3fSAiHuyy/YZJknqaeWV9rCX/SS/ddHA3IMv/XirmtprzvzL7i6mReu1cXolK8sHJpcVDxWtyMCrjWX2uQxs/vfb7V9uta8z/skfWfpkLFv24NDrevM9CdaV68xE3u3whYt9ou/iTjZmALPN8KCL2tfsD6fXbOPnM9w9vt+768XfQg4mm2ncRT+fHfy1a4i8lnecnZ/8XS4uHZsuzYqtff7v49nbt31L8PZAd//+3Pf834p9KGudrl7tv4+KfX2w7tzpdKQpdnP9r1ZXqWPJuvTxWLPu0urJydi5iLDmed7px+eHNfct6uX0W/8ED7cf/nth8JfZHRHYSPxIRj0bEY8WxezwinoiIAx3i/+XVJz9sXTZRxn8bHP+Fro7/ZmEsmpekbbbJCiOnfv6hqdGpzWIR/7XO739H66WDxZIbef/b2ov2hVt9/QAAAOBOkEbE7kjSmY1yms7M5N/h35tPfWc+ObOQ/0ZgKippeadrsuF+6FxxWZ/XL0RE/tWCcv2RSOv3jb8ZmajXZ+Y/WloYaOTArm3Gf+avkUH3Dug7P9iC4WX8w/DqOP4rO9cPYOdtGf8dx/x4X/sC7Kw2n/8Tg+gHsPPa5f/+vx8YDi3j37QfDBH3/2F4Gf8wvIx/GErLE3H9H8lvFCoR0bqq/Es3sPvNFCYjuunh7VOIym3Rjb4VIu17E2P9PbX6VkjuwD5vKQzuPQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCX/g0AAP//uvzMag==") fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x3a, 0x8}) symlinkat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001a40)=ANY=[@ANYBLOB="1c0000002d0007032bbd5000ffdbdf25067c"], 0x1c}}, 0x4008030) writev(0xffffffffffffffff, &(0x7f00000015c0), 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000038c0), 0x0, 0x100, &(0x7f0000003a00)) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x84) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0x95, 0x0, 0x0, 0xc0e, 0xa0, "3f3cd714000021000000fffff903e7ffffff00", 0x400, 0x81}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xff) 6.302880867s ago: executing program 1 (id=1071): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES16=r1], 0x114}, 0x1, 0x0, 0x0, 0x8014}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00') read$eventfd(r2, &(0x7f0000000280), 0x8) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000040)={0x12000, r0}, 0x0) 6.229406538s ago: executing program 1 (id=1073): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000280)={[{@grpjquota}, {@noinit_itable}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8800}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000280)={r0}) r1 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x4003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x800, 0x3, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0x8, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3010009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@xino_on}, {@index_off}]}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x55eb471eb70fd60d) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000000900)={r3, &(0x7f00000001c0)='\'\x00', 0x581201, &(0x7f0000000240)={@align=0x8, {0xd, 0x0, 0x8, 0x1}}, 0x0, &(0x7f0000000840), &(0x7f0000000880)=0x6}) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012bbd08002b00060000000033000000000008003c000200000005002a00010000000a00090000002000"/57], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20004000) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000a40)={0x0, 0x0}, &(0x7f0000000a80)=0xc) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2a0471a, &(0x7f0000000ac0)={[{@delalloc}], [{@uid_eq={'uid', 0x3d, r6}}, {@uid_lt={'uid<', r6}}, {@context={'context', 0x3d, 'staff_u'}}, {@pcr={'pcr', 0x3d, 0x11}}, {@dont_hash}, {@measure}, {@obj_role={'obj_role', 0x3d, 'noblock_validity'}}, {@smackfsdef={'smackfsdef', 0x3d, 'index=off'}}]}, 0x0, 0x48f, &(0x7f0000000380)="$eJzs3MtvVNUfAPDvvX3w+/GsigpItEqMjY+WFlQWbjSauMBoogvUVW0LIRRqaE0sIVCNwY2JIdG1ujTxL3DnxqgrExNXujckRNmAxsWYe+demU47zFCnM4X5fJJLz7nn3J5z5tzHuecwDaBnDWf/JBFbI+KXiNhRjS7PMFz9ce3K2ak/r5ydSqJSefX3JM939crZqTJredyWIjKSRqQfJEUhy80vnjkxOTs7c7qIjy2cfHtsfvHME8dPTh6bOTZzauLQoYMHxp9+auLJtrQza9fVPefm9u5+8fWLL00dufjW919l9d1apNe2Y00GV+4azhr+RyVXn/Zw/P8/FbfRbKsJJ/1drAg3pS8isu4ayK7/SqVyviZtR7zwfpPDt6xz9YB1lD2bNq2yv3guLlUaSm6YCtwKkuh2DYDuKJ/32ftvuXVw+NF1l5+tvgBl7b5WbNWU/kiLPAN177ftNBwRR5b++izboh3zEAAATXw09enheHy18V8a99Tk216soQxFxB0RcWdE3BUROyPi7og8770RsauVQmsWCOqXhlaOf9JLa29dc9n475libWv5+K8c/cVQXxHblrd/IDl6fHZmf/GZjMTApiw+foMyvnn+p48bpdWO/7ItK78cCxb1uNRfN0E3PbkwmQ9K2+DyexF7+uPvSqVS1/4kyl5KImJ3ROxp9ZdWl7a2l9Hjj365t1HW5u0vbV+5qw3rTJUvIh6p9v9S1LW/lKxcnxzcdn19cux/MTuzf6w8K1b64ccLrzQqv/X2r4+s/zcvP/+LlM8Xi8DQm7XrtfPRYOVya8MyLvz6YcN3mrWe/4PJa/n9qFx2fXdyYeH0eMRgcjiPL9s/cf3YMl7mz9o/si9LKdtfHpnm97go+v++iNhbrJfdHxEPFHV/MCIeioh9DVsf8d1zjdM2Qv9P1/R/EvXn/65z1Z9l/y/edKDvxLdfNyq/tf4/mIdGij35/a+JViu49k8OAAAAbh1pPnOTpKP/htN0dLT6H3t3xuZ0dm5+4bGjc++cmq7O8AzFQFrOdO2omQ8dT5aK31iNTxRzxWX6gWLe+JO+yOOjU3Oz011uO/S6LQ2u/8xvfd2uHbDuVltHm1jlC23A7af++k+XR8+/3MnKAB3l+9rQu5pc/2mn6gF0nuc/9K7Vrv/zdXFrAXB78vyH3uX6B4DeU/f874ufu1UToIPW8HV+AYH5xTORbohqtBRo/e9BrHfgjY1RjRYC3b4zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtMc/AQAA//+uguww") chdir(&(0x7f0000000140)='./file0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x180) read$FUSE(r7, &(0x7f0000000e40)={0x2020}, 0x2020) ioctl$EXT4_IOC_MOVE_EXT(r7, 0x40305829, &(0x7f0000000e00)={0x17c04, r7, 0x1000, 0x24000003, 0x400000006, 0x7}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000040)={0x0, 0x280000, 0x2016, 0x1}) 6.194429543s ago: executing program 1 (id=1077): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000013980)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) exit(0x80000000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) unshare(0x62000000) (async) syz_emit_ethernet(0x2a, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x24, 0x10, 0x1, 0x70bd25, 0x25df9bfc, {0x6, 0x0, 0x8100, 0x0, {0xfff2, 0x10}, {0xfff1}, {0xe, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c800}, 0x44) 6.086761249s ago: executing program 1 (id=1078): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000040)={0x14, 0x4, 0x7, 0x201, 0x70bd2c, 0x25dfdbfc, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x520, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x450, 0x2e0, 0x2e0, 0x450, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x4d, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {0x0, 0x10}, {0x0, 0xfe, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x0, 0x6, 0x2}, {0xffffffffffffffff, 0x1, 0x4}, 0x9, 0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x12, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005100000095"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_netfilter(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000040)={0x14, 0x4, 0x7, 0x201, 0x70bd2c, 0x25dfdbfc, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x520, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x450, 0x2e0, 0x2e0, 0x450, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x4d, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {0x0, 0x10}, {0x0, 0xfe, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x0, 0x6, 0x2}, {0xffffffffffffffff, 0x1, 0x4}, 0x9, 0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) (async) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x12, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005100000095"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 6.033094969s ago: executing program 33 (id=1078): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000040)={0x14, 0x4, 0x7, 0x201, 0x70bd2c, 0x25dfdbfc, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x520, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x450, 0x2e0, 0x2e0, 0x450, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x4d, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {0x0, 0x10}, {0x0, 0xfe, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x0, 0x6, 0x2}, {0xffffffffffffffff, 0x1, 0x4}, 0x9, 0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x12, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005100000095"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_netfilter(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000040)={0x14, 0x4, 0x7, 0x201, 0x70bd2c, 0x25dfdbfc, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x520, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x450, 0x2e0, 0x2e0, 0x450, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x4d, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {0x0, 0x10}, {0x0, 0xfe, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x0, 0x6, 0x2}, {0xffffffffffffffff, 0x1, 0x4}, 0x9, 0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) (async) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x12, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005100000095"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 5.182567564s ago: executing program 4 (id=1092): syz_emit_ethernet(0x4a, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x3, 0x3, {0x60, 0x0, 0x0, r1, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x1}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r2, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) shutdown(0xffffffffffffffff, 0x1) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f00000016c0)=[{0x0}], 0x1}, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r7, 0x5437, 0x2) sendto$inet6(r6, 0x0, 0x0, 0x20004041, 0x0, 0x0) 5.109136432s ago: executing program 34 (id=1092): syz_emit_ethernet(0x4a, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x3, 0x3, {0x60, 0x0, 0x0, r1, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x1}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r2, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) shutdown(0xffffffffffffffff, 0x1) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f00000016c0)=[{0x0}], 0x1}, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r7, 0x5437, 0x2) sendto$inet6(r6, 0x0, 0x0, 0x20004041, 0x0, 0x0) 3.984235887s ago: executing program 6 (id=1079): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000005c0)={0xa, 0x4e23, 0x80, @remote, 0x2}, 0x1c) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000000)="ea", 0x1) write(r2, &(0x7f00000002c0)="04", 0x1) sendmsg$NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x1f8, 0x0, 0xb2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x3e, 0x2a, [@chsw_timing={0x68, 0x4, {0x3, 0x1af3}}, @peer_mgmt={0x75, 0x16, {0x1, 0x3, @val=0x4, @void, @val="eac8f999472303b05855e547a6871ee8"}}, @ht={0x2d, 0x1a, {0x4000, 0x1, 0x0, 0x0, {0x9, 0x4f5, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x1, 0x8000, 0xfb}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x7}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8000}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xffff}, @NL80211_ATTR_IE={0x88, 0x2a, [@challenge={0x10, 0x1, 0x89}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @rann={0x7e, 0x15, {{0x1, 0x19}, 0xe8, 0x1, @broadcast, 0x2, 0x10001, 0xfffffff8}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x2, 0x7f, @device_b, 0x3f59b4b0, @value, 0xfffff801, 0x1, @broadcast, 0x9}}, @prep={0x83, 0x1f, {{}, 0xff, 0x81, @device_b, 0x1, @void, 0x9, 0x8, @broadcast, 0x80000001}}, @channel_switch={0x25, 0x3, {0x0, 0xaf, 0x17}}, @link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}, @challenge={0x10, 0x1, 0xf1}, @erp={0x2a, 0x1, {0x1, 0x1}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}, @NL80211_ATTR_IE={0x7d, 0x2a, [@chsw_timing={0x68, 0x4, {0xd7, 0x6}}, @preq={0x82, 0x2b, {{0x0, 0x1, 0x0, 0x0, 0x1}, 0xcf, 0xf, 0xffffff80, @device_b, 0x81, @value=@device_b, 0x0, 0x7, 0x1, [{{0x0, 0x0, 0x1}, @device_a, 0x661}]}}, @preq={0x82, 0x36, {{0x0, 0x0, 0x1, 0x0, 0x1}, 0xd1, 0x8, 0x5, @device_a, 0x3, @value=@device_b, 0xab0, 0x7, 0x2, [{{0x0, 0x0, 0x1}, @device_b, 0x5}, {{0x1}, @device_b}]}}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x2, 0xf3, 0x29}}, @channel_switch={0x25, 0x3, {0x0, 0xe}}]}, @NL80211_ATTR_IE={0x32, 0x2a, [@mic={0x8c, 0x18, {0x56b, "f3887fcc662c", @long="17842cd8ee9fad6ce377f8e0004857c2"}}, @link_id={0x65, 0x12, {@from_mac, @broadcast}}]}, @NL80211_ATTR_IE={0x3d, 0x2a, [@cf={0x4, 0x6, {0x28, 0x5, 0x5, 0x7ff}}, @rann={0x7e, 0x15, {{0x0, 0x4}, 0x4, 0x2, @device_a, 0x3, 0x9, 0xffffff81}}, @chsw_timing={0x68, 0x4, {0x9, 0x80}}, @peer_mgmt={0x75, 0x6, {0x0, 0x230, @void, @val=0x33, @void}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0xc8, 0x64, 0x1}}, @supported_rates={0x1, 0x4, [{0x36}, {0x31}, {0x4f}, {0x60}]}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x0, 0x100002, 0xfbffffff}, 0x10) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x8) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000700)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r4) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000300)=0x3) ioctl$TCGETS2(r5, 0x802c542a, &(0x7f0000000080)) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000180)={{0x2, 0x4e22, @local}, {0x1}, 0x0, {0x2, 0x4e24, @local}, 'dvmrp0\x00'}) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x3c, r8, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r9}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x400003}]}, 0x3c}}, 0x20000018) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0x6001, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}}, 0x40848c0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x101}]}}}]}, 0x3c}}, 0xc004) 3.897788028s ago: executing program 6 (id=1109): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r1 = socket(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, r2}, 0x38) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x141080, 0x0) readv(r3, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/12, 0xc}, {&(0x7f0000000100)=""/240, 0xf0}], 0x2) ioctl$sock_ifreq(r1, 0x8929, &(0x7f0000000040)={'veth1_to_team\x00', @ifru_map={0x7276, 0x7, 0x0, 0x5, 0xd, 0x6}}) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@bridge_dellink={0x4c, 0x11, 0x121, 0x70bd2c, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKMODE={0x5, 0x11, 0xb8}, @IFLA_WEIGHT={0x8, 0xf, 0xfffffffd}, @IFLA_EXT_MASK={0x8, 0x1d, 0x9}, @IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44}, 0x40000040) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) tee(0xffffffffffffffff, r0, 0x1, 0x8) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x20000030, 0x0, 0x0, 0x20000030, 0x20000060], 0x11e, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00001b09"]}, 0x108) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000280)={0x1, 0x4, [@remote, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @multicast]}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) signalfd4(r0, &(0x7f00000002c0)={[0x5]}, 0x8, 0x80000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x0, 0x2e0, 0x428, 0x2e0, 0x2e0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000700)={0x3, &(0x7f0000000740)=[{0x5, 0x3, 0x0, 0x7fff2800}, {0x400, 0x9, 0x10, 0x7dc}, {0x7, 0x3, 0x2, 0x5d}]}) r7 = socket$tipc(0x1e, 0x2, 0x0) close_range(r0, r7, 0x0) 3.727383336s ago: executing program 6 (id=1112): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$igmp(0x2, 0x3, 0x2) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x2, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r5, r6, r7, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, 0x0) syz_ublk_setup_queues(r0, 0x0, &(0x7f00000003c0)={0x0, 0xa912, 0x10000, 0x3, 0x43}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x52a7, 0x5d340f1741c2b427, 0x3, 0x1d0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaa56, 0x20, 0x3, 0x218}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6428, 0x20, 0x2, 0xda, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x78e3, 0x100, 0x0, 0x63}}], 0x4, 0x0, 0x0) 2.857787912s ago: executing program 0 (id=1120): epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c, 0x800) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000080)={0x0, @adiantum}) 2.848915967s ago: executing program 0 (id=1121): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 64) ioctl$UBLK_U_CMD_START_USER_RECOVERY(0xffffffffffffffff, 0xc0207510, &(0x7f00000001c0)={0x0}) (rerun: 64) ioctl$UBLK_U_CMD_STOP_DEV(r0, 0xc0207507, &(0x7f0000000240)={r1}) (async) r2 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x1028802, &(0x7f0000000ac0)={[{@nodelalloc}, {@journal_async_commit}, {@nodiscard}, {@nomblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@debug_want_extra_isize}, {@stripe={'stripe', 0x3d, 0x7}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000003780)="$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") (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_netdev_private(r3, 0x8949, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a") (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000080)={0x1, 0x40000, 0x0, 0x9}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='attr/sockcreate\x00') readv(r4, &(0x7f0000004880)=[{&(0x7f0000002680)=""/148, 0x94}], 0x100000000000023a) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="09000000020000006d05000003"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r5 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r5, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) r8 = fsmount(r7, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r8, 0x16, 0x0, @void}, 0x10) (async, rerun: 64) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$inet6_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2e}, 0x14) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r10) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r10, 0x9) (async) accept(r10, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) 2.848164734s ago: executing program 0 (id=1122): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000500)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x3564}, 0x18, 0x0) landlock_restrict_self(r5, 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42042, 0x85) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x4) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141180, 0x164) r8 = fanotify_init(0xf00, 0x1) fanotify_mark(r8, 0x1, 0x10001011, r7, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, 0x0, 0x844) sendto$inet6(r6, &(0x7f0000000180)="2edfb2260564db60a7c2af05858b9b40ab72da80250d9b41282d3cd50da373d11a2472a94eba07ab0c73f09aa6674f9d2d5b39ba9ab95b7dc5abc7f973057a5bd9302fdbfd24", 0x46, 0x24040800, &(0x7f0000000280)={0xa, 0x4e22, 0x2, @loopback, 0x10000}, 0x1c) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r10, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fbdbdf250500000014002000fc010000000000000000000000000000050005000000000006001c00800000000500130008e8ffff050003000300000008000b00020000000500050019000000050004003c000000"], 0x60}, 0x1, 0x0, 0x0, 0x20040004}, 0x4008040) sendmmsg(r10, &(0x7f0000007fc0), 0x800001d, 0x300) 2.798663946s ago: executing program 6 (id=1123): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0xa0c41, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 2.033701373s ago: executing program 3 (id=1132): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010026000000000000800c0000000c00000250ac0000000000"], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@typedef={0x4, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x30, 0x0, 0x0, 0x2e]}}, &(0x7f0000000f40)=""/4079, 0x2a, 0xfef, 0x8}, 0x28) 2.033249721s ago: executing program 3 (id=1133): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x30, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, @mcast2, {[], @time_exceed={0x4, 0x1, 0x0, 0x9, '\x00', {0x0, 0x6, "f99063", 0x800, 0x87, 0xff, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@dellink={0x28, 0x11, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x44004}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x440, 0x0) gettid() recvmmsg(r1, &(0x7f00000048c0), 0x4000000000000db, 0x10122, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(r6, 0x8912, &(0x7f00000006c0)) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0x9, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x40401, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) ioctl$RTC_PIE_OFF(r8, 0x7006) r9 = io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x200, 0x2, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1.973115212s ago: executing program 0 (id=1134): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@test_dummy_encryption}, {@data_journal}, {@norecovery}]}, 0x3, 0x481, &(0x7f00000004c0)="$eJzs3M1vG0UbAPBnN3Hy5m0hoZSvlo9AQVQIkqYt0AMHQCBxKAIJDnC0klCVpgU1QaJVJFIO5YQQEnfEkX+BE1wQ4oTEFe6oUoVyacvJaL27ie04bt3acYt/P8n1zH5k5vHu2M/u2A1gaE1n/yQRuyPij4iYzKvNG0znT1fXV+evra/OJ1GrvfN3Ut/uyvrqfLlpud+uxkoksb9Nu8vnzp+qLi0tni3qsyunP55dPnf+uZOnqycWTyyeOXzs2NEjcy++cPj5W4xwz1v5c1rU33j/6zePf9kUf0scPTLdaeVTtVqPmxusuxrKowPsB90ZKY5XpT7+J2Ok4ehNxuufb1Q+G1AHgb6p1Wq1XduvXqsB/2FJNNcNeRgW5Qd9ef1bPI83JgEv9zUDGazLr+QXQFncV4tHvmZ0445BpeX6tpemI+K9tX++zR7R8T5E0qceAADD5scs/3k2y3ZW57PcYzP/SOP+hu3uLuaGpiLinojYExH3xpnYGxH3RdS3fSAiHuyy/YZJknqaeWV9rCX/SS/ddHA3IMv/XirmtprzvzL7i6mReu1cXolK8sHJpcVDxWtyMCrjWX2uQxs/vfb7V9uta8z/skfWfpkLFv24NDrevM9CdaV68xE3u3whYt9ou/iTjZmALPN8KCL2tfsD6fXbOPnM9w9vt+768XfQg4mm2ncRT+fHfy1a4i8lnecnZ/8XS4uHZsuzYqtff7v49nbt31L8PZAd//+3Pf834p9KGudrl7tv4+KfX2w7tzpdKQpdnP9r1ZXqWPJuvTxWLPu0urJydi5iLDmed7px+eHNfct6uX0W/8ED7cf/nth8JfZHRHYSPxIRj0bEY8WxezwinoiIAx3i/+XVJz9sXTZRxn8bHP+Fro7/ZmEsmpekbbbJCiOnfv6hqdGpzWIR/7XO739H66WDxZIbef/b2ov2hVt9/QAAAOBOkEbE7kjSmY1yms7M5N/h35tPfWc+ObOQ/0ZgKippeadrsuF+6FxxWZ/XL0RE/tWCcv2RSOv3jb8ZmajXZ+Y/WloYaOTArm3Gf+avkUH3Dug7P9iC4WX8w/DqOP4rO9cPYOdtGf8dx/x4X/sC7Kw2n/8Tg+gHsPPa5f/+vx8YDi3j37QfDBH3/2F4Gf8wvIx/GErLE3H9H8lvFCoR0bqq/Es3sPvNFCYjuunh7VOIym3Rjb4VIu17E2P9PbX6VkjuwD5vKQzuPQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCX/g0AAP//uvzMag==") fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x3a, 0x8}) symlinkat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001a40)=ANY=[@ANYBLOB="1c0000002d0007032bbd5000ffdbdf25067c"], 0x1c}}, 0x4008030) writev(0xffffffffffffffff, &(0x7f00000015c0), 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, &(0x7f0000003a00)) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)="46bce9b195c1a79dc7e7c58af1d123dab0f1db005fd3d02f048e6fc8abdf88a3f1e92c8e2dfd9ba28cf1ce49c6dc", 0x2e}, 0x1, 0x0, 0x0, 0x4008}, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0x95, 0x0, 0x0, 0xc0e, 0xa0, "3f3cd714000021000000fffff903e7ffffff00", 0x400, 0x81}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xff) 1.925552552s ago: executing program 5 (id=1135): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x28, r0, 0x701, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x1, 0x75}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x28}}, 0x0) 1.637678512s ago: executing program 0 (id=1136): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbmon(0x0, 0x4, 0x88a880) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000005900)=[{{&(0x7f0000000440)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001b00)=[{&(0x7f00000004c0)="954b18c83bb81c6d3ff9975ea7c5a7ff7e330b256e319d0bbb4b71ed6afbbd7b29f716d7a2eccb0be576ec1dad6f489def11fefb0bc5c96af4d4f41e297e9ffa75b93acd3e1ba2f67867f7ceb3f49508617ed62bc2d55c00c47e873a498499288740bda062b3960c7eef8369dc881a7ec8a8920858ac0e2b5f331bc2815018e2169a73d9e64ab72adb423ca8fcdd6baf94b5fa33870afb77af2ddbc3bd7a1caa56ab4a88c66195c59ce0c8eff476a74114250fa9985607151e4f87ac3843cf34824a12a4102e3954b7d990a9bbf9fcfa6171672d66390feb5ae0f906bb583dfbe8dc0b67b13f4a33ebe3d2b6c59492da", 0xf0}, {&(0x7f0000000740)="b51652d006b3bf8aef9d65b98176390984b69664c4722bf452c3dc2b24b204ab62f922aa1575e00fa3fef558a8fea8138cefc663b54443982e2a36012e0638411f354426e6c1f687e7542fb9ed14b933d41266988d89ec9e8cee60f6e6e5977d642fb85a7470cd222b088ef29f5c4c0e91ac3974df822e0c1e3d1d6f3eca06fa4ba7408b37a76cb3a28e72b66d3748002ca953d80127b5128e24edac8a0a3a57d81cea93a09d679287e5c25a6e4f25906e67b6cf0f70c4ffaa37aa16a085ab7f2a4283c3df2795b26a827d9d7e6f24759f3fca29bae3bcbae72db984", 0xdc}, {&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000001840)="1be9d2560e27e24141d4f8cb205925aafc42e9fb73c64c4de800af6bd7fefba8c1684b802de1e50ee163551e6e84efea9bca724abbd0c48b29b677b1cf8050e69ef4c99caf84670a19e19984906ccd5e9876675239cacf5ef3f420bd16146f37df2e3ced90afa24516b4991a961ee3dc8930740384c2c8b06fd6e79714194b76af554b9359c551a586b510bd279ff2dbaa8a597ac201db057ac86d0d848a3350affc81d8db67f3148ecbbdc48bb0f8bd99a325fc0b3b6228d509ca0bbdf1018f7ea7c2fa1556c46066b423a9cdf45f1dda9c956cf7ad4b0aa8", 0xd9}, {&(0x7f0000001940)="8c95f058a4", 0x5}, {&(0x7f0000001980)="46bde1cd28f61e34367a225e19ba8a88817f722109e925abb661c08b8a61b38f822a8e40ae", 0x25}, {&(0x7f00000019c0)="8069792e40a9bec98e9c5fad359ce560b1a36afd73272a1959705c2a03deb4bc03e2cf81b210c3e38ba8d31781f5ff8b35db2df01f5d12493987a227c4", 0x3d}, {&(0x7f0000001a00)="bc45aef2f1ca2b7bb7b3ece95cc1fc76fc452d887c4709cd16f47e7e5e9b528fe5fc27598f7ce1a1cad59a46c41317e16219c2c78ad55a5507e7af01a6721fd83a7806c8e1d15ae866445943b338ca9c0b8e73de1daa75146f1ddd87b4b1d5b7297067e6fbb341cbf5eef22aa743b881a90e16236b1fe02c77686bc6b21521a95801806e8ef9db0ea1eaa295dd5464b4e16740bfa7fda868a9e098b9bed4d737dd225d90e01700e4a95462aeacaddb8136d328631a729072a7dfad579cc9a9d88daed785858cb8bad2ca866857181a204d2234b555c6f43122a1e1f49ad170e46c8e6d320d23824ffc60ba9f217c6c902cfdd4a3", 0xf4}], 0x8, &(0x7f0000004300)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [r1, r4, r0, r5]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}], 0xa0, 0x20000000}}, {{&(0x7f00000043c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000004580)=[{&(0x7f0000004440)="406db576b48befae73bf87539e954974c4c805d48b84e008", 0x18}, {&(0x7f0000004480)="24ff070d708abe9818ffba77ddd40c94a834a4fac95fa2a3893451ed02baafc5ce3dc7cdb16a6110f48e4c7ec0e31e4b9d928361ffced3f35edb21b6dc401d47104fa3a958d62db48e66d658cb99a97194", 0x51}, {&(0x7f0000004500)="254545b760da7aba1df29486532bda317259969b485253209315fca040bde92eb37c3109a1d4f322952838f0b914adb75cb4d1ebe647be80f3ad6e37a10897b1b13a2b8dfa35bdacbd8817be97dd04c45d6610f06d897f89e4838bb3214b045930c5bfc2b7f8c3cd86d39ddc7a6ccc8345416a5792b2a08d319fc60bbdaf", 0x7e}], 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=r3, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="1c00000000000000010000000200000078e5028e13d191114d664fbe69e67e0c87ff9778cfe38958f8f6a546f12061dac951671244a4c8835c9c8156379909f0d72feb100717dfb94436a3e99e0994495d8e4002686767559955f80711c173c8c2f0704a9b9bd901b2a1335d981ae0452fd7425d83298e08965406", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32, @ANYRES32=r1, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120, 0x4}}, {{&(0x7f0000004800)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000004b00)=[{&(0x7f0000004880)="9e71120af8dfd92e60101c6a16ec839edd7ac1bdef10b8c500410f16f13a32affe9cac6de1a122372807efdef300927e2c3c4c510d7703ef35366d659c924f6b46b96b35fe8543b2df356f1347e76e162a049058a1e5ecab6608a3464c782bbe8382f23d802fe5023dab475bd12445e6a9631bcb44f099748a166d1c7e70ef77e1995b90bc37c68ff190a9dd65c3fea1dbba1e35d4e6bee44fbb9c050d15ce6ce6d9e8dbc3cdd4d59d9618f5509d1938cf7443a81563fce3c6ee04d2ce3ddb05ba91c67b1f968653b5a95ee0395c0d45a440310648217f93fa750f6b303b4116dd", 0xe1}, {&(0x7f0000004980)="964024ae56d1b4d9816d996422c0c663c5c84923df646f2ef6351b322679af14d4ee79f29992ec916ad67227d220641264f0cd4b674c1d481c486747e6d1797bc2e5cda62dd87256fe11e649d8ea44867c7e13fe9a944427f5714f4802896b", 0x5f}, {&(0x7f0000004a00)="a472dbcac39d1c42f89ef44d29ff374e382434bb4566dad393ea11b86f51e7c25a630a982c72d85647d8055f1332dc0a3b02957b00547e7f94ad05837e929da840282666a5453d1579aca10447d681172d69a6e5ffec0c8aa2a38b50fac2284ef079da8bc9e4bdab09d8d715338be7824850b9b3ba555ae53a8f691b5248fd682865f92ab07c676c4589f2fa5a4a8df338a0c0a55d0dd007f441522fd7615220ac88bfa4c251fbfbc9d42b42684cd173c640226fe617ae14ac055d670599aadb9485629186f3c4c8", 0xc8}], 0x3, &(0x7f0000004dc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c}}], 0x48, 0x4000}}, {{&(0x7f0000004e40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005340)=[{&(0x7f0000004ec0)="d1677116844079bf031921ac83446603862b69230c2eafbd290f2f568f4d73723520f5338cfa388ade870d40667c70a13fc5e19e04ae63f60117918fbf1bee58b597cbe90d83250cb88524e4cb", 0x4d}, {&(0x7f0000004f40)="bf409779d22553ca23af371072b8d00d629b1e342f0d7ca8d2b0635353f8f0472e25c3d1f7309ef0c4", 0x29}, {&(0x7f0000004f80)="c533e92a8815c6b73a81567b74c5549de1230db2b2820bde7ec071a49585e138b6263fe877cc5c22ba3b24d74fd0b23eca2eaa9a6f1e6a75db2c46d727f2d0e7fd74ba94ab0b10b2e337c75238ca5d9a9866f92503c72684ccfc7f85e0da31c3a098a8683b7d65b1ea82112d1f4eed40ce318cd9c985fa77ce31e65c1e1e9ecc9cb572e83620b963d12f005ad99f5befab9e08ce37233cfd2025d9ef1e97e4648510c527699365af7fd1f8", 0xab}, {&(0x7f0000005040)="08762b0aed3f1a51c991dba1f48f0c5c59229c4fe6fefc09189559d132e9f102261c0960e8d24b397e6223a460d8881fcb54d123a59e4b0dcbaffc26a87e", 0x3e}, {&(0x7f0000005080)="fbe14162a008d4ffcb7c401278ed2e5934ba1c60a0f54243efeb9d7801c7ff2d96608d7f65a32925e1b4e240b0efdb29a9ce", 0x32}, {&(0x7f00000050c0)="efe1c73ef9a9247b7e972692148337ab2f4aa949f1da4e30785129af643d318df5f444274e8ace9f50bc09ef24229f6756c99ab674d949fa20e1e7b81ca0b0b31e5da3d7a040ed43ef9ad28d3c826f9f20af9721", 0x54}, {&(0x7f0000005140)="f51272e830e488d6e51ca7d533bcfd789b8f358f4bfc30095017ef5801d6b92ddc52284cab5550f709198df63951ce394d3040c8cde8563a3b34f89fd64414bbf68440badc91936fa0c332be5af0dd1af87fba4c038f3f1156ea6a0647544fa04debed57b32717adba39bc5003a29c6364f1a9cb4f9838272bc9b430d8deabe4d18e2ae4c14854b397c0fe078cc5b4caf000fb6ec0b02abea066d6e1479d4e937a18588fedb24ee535fd6f133365daeef83614bff46a45aab195865b99634d73482bb6a7994be5909a464e7ed8566d8321e0dca47ca755855fb3b8c53b57", 0xde}, {&(0x7f0000005240)="67b068cf220e4d277c1d80d537ca55bdc0757fc9dc295362362a3b229811e483c9d1d389b47b6be76c7cd1515de86f2ec6c4b0b35e8f224603861db05f03d59f8d601d8cc0b6c4b55c28a23c399d0b65a7afc2e5124e75fbd13f11c236d05419276204686591be76b89aa98a585542db457280890e1e6c3926beaa8d8bd63938171d87e9b901274776a4cdd87654a97aec47dd", 0x93}, {&(0x7f0000005300)="e6e5dd76b970297b8c82fbd60d515f5e5f90be2f64b0aad668411097a110cc3694cee8898fe22eb944d64d5a1e0b0f97", 0x30}], 0x9, &(0x7f0000005580)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, r3, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78, 0x200040d1}}, {{&(0x7f0000005600)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005780)=[{&(0x7f0000005680)="65cded81cb7333a33bd75700a7e380bf48b2c390995ead4a21ed1326b0c6c089b91d2373d3f39db0fb545aeebf7f74d33b29a420e35101c83f3caeabef381303a4dc5998bb1ffadd8e44459776d2deafe359e66bbef9c28958a85c51833d44006c49079b2282f81742d7726064d5630fa670b15958de8993f57f13c99f96cb823f05b81ac289afcd9d866ee8b0ee1b30aecdf8c4246c1c6a76f0cfd000830558b6c109d6c4667251fd879a37ffcc16e16b3f58a1c6584408d82538be9398afc3e7a7dd1686", 0xc5}], 0x1, &(0x7f0000005800)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0, 0x800}}], 0x5, 0x24000815) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x62000000) prlimit64(r2, 0xe, &(0x7f00000002c0)={0x3, 0x5}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000002280)={'team_slave_0\x00', @local}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x1ff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/clients\x00', 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x6, 0x0) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r7, 0xc00c6211, &(0x7f00000005c0)) bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @local, 0x2}, 0x1c) r9 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) request_key(&(0x7f0000000200)='.dead\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000340)='/proc/asound/seq/clients\x00', r9) unshare(0x20000400) 501.531702ms ago: executing program 3 (id=1137): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz1\x00', {0x6, 0x7fff, 0x0, 0xb}, 0x7, [0x9, 0x8, 0x5, 0x6, 0x6, 0x3, 0xafc, 0x32, 0x838, 0x9, 0x6ff5, 0x9f5, 0x5, 0x1000000, 0x0, 0x6, 0x8001, 0x6, 0x4a4c, 0x3, 0xfffffffd, 0x9, 0x5, 0x8001, 0x5, 0x2, 0xd4a, 0xffefe87a, 0x1, 0x8, 0x9, 0x5a, 0x8, 0x9, 0x0, 0xe, 0xf9c6, 0x3ff, 0x3ff, 0x4, 0xd, 0xff, 0x8, 0x9, 0x80000001, 0x83f5, 0x0, 0x2, 0xfe0, 0x7ff, 0x8, 0x3, 0x4, 0x2, 0xa45, 0x1df, 0xffff, 0x0, 0x2, 0x9, 0xf, 0x101, 0x200, 0x9a0], [0x3, 0x8, 0x6, 0xd, 0x1, 0xad10, 0x6, 0x13a0, 0x86, 0x7fff, 0x101, 0x8, 0x5, 0x1, 0x2, 0xffff, 0x4, 0x4a, 0xf, 0xfffff32a, 0xfffffff7, 0x4c4, 0x400, 0x7f, 0x10000, 0x7, 0x4, 0x8, 0x30, 0x1, 0x1, 0x3, 0x4c6fbc51, 0x10001, 0xd35, 0xa, 0x6, 0x0, 0xfff, 0x200, 0x20, 0x9, 0x0, 0x3ec8d8d2, 0x0, 0x3, 0x3, 0x2, 0x8, 0x0, 0xe51, 0x1, 0x7, 0x8, 0x3, 0x2, 0x0, 0x62, 0x7, 0x6, 0x4, 0x6, 0xfff, 0x4], [0xfffffffd, 0x9, 0x6, 0x10000, 0x6, 0x8, 0xffffffff, 0xfd, 0x20, 0x0, 0x9, 0x74, 0x283, 0x2, 0x4d, 0x6, 0x4, 0x3ff, 0x10000, 0x5, 0x40, 0x4, 0x8, 0x0, 0x4, 0x2, 0x80008001, 0x9, 0x1, 0xffff, 0x5, 0x7, 0x1, 0x9, 0x4, 0xfff, 0x3, 0x0, 0x5, 0x80000001, 0x53c2, 0x4, 0x4, 0x3, 0x80, 0x50, 0x3, 0xc, 0x8, 0x5, 0x4, 0x400, 0x3, 0x5, 0x86, 0x6, 0x400000, 0xb, 0x4, 0x0, 0x420, 0xfe6c, 0x2, 0xfffffff6], [0x3, 0x9, 0xffffffff, 0x2, 0x66, 0xffff, 0x401, 0x6, 0x8, 0x3, 0x101, 0x4, 0x9, 0x7, 0xce, 0x2, 0x8001, 0x1, 0x7, 0x6, 0x601000, 0x9, 0x5, 0xd, 0x1, 0x446, 0x800, 0x2, 0x0, 0x3, 0x2, 0x375, 0xfffffff1, 0x5, 0x5, 0x4, 0x7fff, 0x4, 0x3a2, 0x3, 0x2005, 0x80000001, 0xee6, 0x800, 0x7, 0x3, 0x1, 0x7, 0x3, 0x9, 0xc, 0x3, 0x1, 0x1, 0x3, 0x296, 0x6, 0xb, 0xf, 0x4, 0x6, 0x7, 0xd, 0x400]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r1, 0x84, 0x75, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {0x0, 0x0, 0x6, 0x101}, 0xfffffffd, [0x8, 0x4, 0x0, 0x4, 0x1, 0x1, 0x401, 0x0, 0x4, 0x2, 0x2000, 0x3, 0x0, 0x7, 0x2000007e, 0x5, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x77, 0x90, 0x801, 0x0, 0x2, 0x1000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x3, 0x0, 0x8, 0x0, 0x0, 0xfffffff9, 0x0, 0x3, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0xffff1e06, 0x3], [0xfffffffd, 0x3, 0x6, 0x4, 0x0, 0x2, 0x3, 0xff, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x6189fbd8, 0x0, 0x400000, 0x0, 0x40000fff, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x9e2b, 0x0, 0xfffffffa, 0x5, 0x7aae62b1, 0x100000, 0x0, 0x40002, 0xffffffff, 0x1c, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x7, 0xfd5], [0x0, 0xfffffffc, 0x0, 0xd1, 0x0, 0x914, 0x0, 0xfa, 0x0, 0x0, 0x7, 0x7, 0x4, 0x1, 0x0, 0x3, 0x0, 0xf, 0x0, 0xfffffffc, 0x0, 0x74d3, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x3, 0x8800000, 0x4, 0x0, 0x0, 0x99, 0xfffffffd, 0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x836, 0x1, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xf, 0x0, 0x0, 0x0, 0xe9cb], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4bdf, 0x4a92, 0xf152, 0x0, 0x10004, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffff9bf, 0x0, 0x8000, 0x0, 0x800, 0x81, 0x0, 0x7fffffff, 0x0, 0x0, 0xfffffffe, 0x0, 0x5, 0x8, 0x0, 0x735, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xb6, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0xcfb0]}, 0x45c) 491.593297ms ago: executing program 5 (id=1138): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r0 = getpid() ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) (async, rerun: 32) syz_open_dev$tty20(0xc, 0x4, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (rerun: 32) socket(0x10, 0x3, 0x0) (async) preadv(0xffffffffffffffff, 0x0, 0x0, 0x9e, 0x3) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000100), 0x8, 0x41a400) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0b}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xd4}}, 0x0) (async, rerun: 64) r4 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) (rerun: 64) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x33, 0x2, 0x0, "d569e8e1dd2f1ae97ee8589301f453a0c04b1410b2eafa4496ba216b1e8ac11e"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 413.673809ms ago: executing program 5 (id=1139): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001540)={0x2020}, 0x2020) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x400, 0x8, 0x0, 0x7fff0026}]}) (async) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xc3) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x8000}, 0x4) (async) socket(0x11, 0x3, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045"], 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="200000006800e97800000000ffdbdf250a0000000000000008000500", @ANYRES32=r10, @ANYBLOB="88a202e7a89875191d922acaac03b6c8133f60a854a239d8f3f9c8a79c45b867872eac05bf77b62516d0b0092758b6ad6ace145e3689b9f5b67c6b0f164a9a250bfe7bcb289dddc716b2bf4d7495c23335684991991fc3d41a8068fe797a909c9835d76ecbdd4243957c59656adce2800f69a3b6ad315d315490f494248fdc009ab7e1af6c606d747b819e9f83e5fe044abe7502a9b7560a9d2716aa5ee7fc50e80683da68500412209ae8b1d06e4a5d2ffe590eeed47b6050926d456e6e804e7ccc4cb0c1e8a9e7af4b70bb5e26a2e0f9eb15822a6b93e97f3f573a52714027a79ca9a73f211ce766d2171706679c337fe103c859d9df400466c158e3cd8682d2a2939df11f9e10494dde19921c32e9318f62082bf938a02fce6bbc71d895da560eb96edda1b09d7d2983dbf6624be3a2700c24b43e3b5fdab495a67e3bc0640ee637b9f7d354a195d14263dc4c62a2fc7996b91e506be237a9aca6eac4f6e31dd392927178e27674e9a7e5181e5fc3b04df5ba4015fdf8ea2caf3f3bcdb28fa22b5de047c60aee89b868e5bc4ff589efe4b24a18b161d70f538879546e9e5828b0c0ac10abf2dd08a29cbb8dc30d02afa2185337ee891cb1d7c7eb938d685fb68d65cdc9eb96a8584390b4d27977c012d635d74202bd059390496af094ffdacd8e2fe38b6f0573344f0c1fe306733250a1f89ed2ff"], 0x20}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000010003704000000002300000000000000", @ANYRES32=r10, @ANYBLOB="9201000000000000"], 0x20}}, 0x0) (async) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) 231.172847ms ago: executing program 5 (id=1140): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x4, 0x4, 0x1800}], 0x1, 0x0) (async) semop(r0, &(0x7f0000000000)=[{0x4}, {0x0, 0xdf8, 0x800}, {0x2, 0x8, 0x800}, {0x2, 0x1, 0x1800}], 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) pwrite64(r1, 0x0, 0x0, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x5, 0x8000000000002}) (async) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000002c0)={0x5, 0x400}) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) (async) r5 = dup3(r4, r2, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000007c0)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="dbd33bdc3ef86f66ea880c2a83a650ef732b6ff32c6a45852d1f2e4ef26cfe89c7e1a87d9c4ca1a853bf3cfe1e0f5a184735fad95ef7e7bdeb238bce746d915bb0951607f13019d19cc6a527446f1a1533163bb5eba5b62f3361bf8ba15a730cd97cca4253e58eb85842a918eac0374588a2be5efd143b4674fee9fb7b19f1b26339ca7cd889cae9b612ab5901f3fd150af6d7e1c7aaa3ab1c6a895ace341617babe1d22ce2e3a", @ANYRES16=r6, @ANYBLOB="00022abd7000fedbdf2509000000080031000500000008002b00ff0f000008000b0001010000050038000000000008003c0004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x240c8884}, 0x60000804) semctl$IPC_RMID(r0, 0x0, 0x0) 197.501505ms ago: executing program 3 (id=1142): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) (async) syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d"], 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e08092320"], 0xb) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x9, 0x0) (async) get_mempolicy(0x0, 0x0, 0x800, &(0x7f000031e000/0x4000)=nil, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x17c, r5, 0x300, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0x160, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}]}}]}, 0x17c}}, 0xc4) (async) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) 89.685069ms ago: executing program 5 (id=1143): mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ff0000/0xe000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000d25000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000aeb000/0x4000)=nil, &(0x7f0000f93000/0x4000)=nil, &(0x7f000083d000/0x3000)=nil, &(0x7f0000cc2000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000b9b000/0x2000)=nil, &(0x7f0000b3c000/0x2000)=nil, &(0x7f0000000000)="0cb04b4e8557361fe5006d3bd8dcbebfcc275472a2c37665cbc414f17b37a3b510", 0x21}, 0x68) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r1 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x78, r2}) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x5]}, 0x8, 0x80800) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1b, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x274100, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xee2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd]}, &(0x7f0000000200)='GPL\x00', 0x6e03, 0x0, 0x0, 0x41100, 0x5d, '\x00', r2, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x8, 0xdf87, 0xffffff14}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000400)=[r4, r5, 0xffffffffffffffff, r6, r7, r8], &(0x7f0000000440)=[{0x0, 0x1, 0x1, 0x8}, {0x1, 0x2, 0x5, 0xc}, {0x3, 0x2, 0xb, 0x5}, {0x3, 0x2, 0x1, 0x5}], 0x10, 0xeaa}, 0x94) 89.423618ms ago: executing program 3 (id=1144): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) (async) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) (async) r0 = socket$unix(0x1, 0x2, 0x0) connect$unix(r0, 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0xff, 0x2000000e, 0x8, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) (async) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0x1a1c08, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) umount2(&(0x7f0000000240)='./file0/file0/../file0\x00', 0xc) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x2000080, 0x0) 75.274829ms ago: executing program 0 (id=1145): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = dup(0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYRESDEC], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffd}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000005dc0)={@ifindex, 0x11, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400e5ea29bd7000ffffffff07000002", @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x2800}, 0x40084c0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0) prctl$PR_SET_MM_MAP(0x41555856, 0xe, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5}}, @NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}]}, 0x3c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[], 0x47) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, &(0x7f0000000040)=[0x5, 0xffffffff], 0x2) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xfe, 0xc8, 0x9}}}, 0x7) 202.354µs ago: executing program 5 (id=1146): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@test_dummy_encryption}, {@data_journal}, {@norecovery}]}, 0x3, 0x481, &(0x7f00000004c0)="$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") fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x3a, 0x8}) symlinkat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001a40)=ANY=[@ANYBLOB="1c0000002d0007032bbd5000ffdbdf25067c"], 0x1c}}, 0x4008030) writev(0xffffffffffffffff, &(0x7f00000015c0), 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000038c0), 0x0, 0x100, &(0x7f0000003a00)) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)="46bce9b195c1a79dc7e7c58af1d123dab0f1db005fd3d02f048e6fc8abdf88a3f1e92c8e2dfd9ba28cf1ce49c6dc", 0x2e}, 0x1, 0x0, 0x0, 0x4008}, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0x95, 0x0, 0x0, 0xc0e, 0xa0, "3f3cd714000021000000fffff903e7ffffff00", 0x400, 0x81}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xff) 0s ago: executing program 3 (id=1147): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000010073797a30000000002c000000030a01010000000000000000010000800900010073797a30000000000900030073797a32000000003c000000060a01040000000000000a000100000008000b4000000000200004801c0001800b00010065787468647200000c00028005"], 0xb0}, 0x1, 0x0, 0x0, 0x200c0}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500090000000000050020"], 0x7c}}, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d42400000000000000290000000200e000", 0xfe60) kernel console output (not intermixed with test programs): sing buffer size. [ 117.392105][ T30] audit: type=1326 audit(117.190:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6566 comm="syz.1.361" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff88177fe8 code=0x0 [ 117.410356][ T6586] EXT4-fs: Ignoring removed nobh option [ 117.422184][ T6586] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 117.425564][ T6586] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.366: attempt to clear invalid blocks 1 len 1 [ 117.425608][ T6586] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 117.428334][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 117.428349][ C1] EXT4-fs (loop3): initial error at time 117: ext4_clear_blocks:876: inode 13 [ 117.428367][ C1] EXT4-fs (loop3): last error at time 117: ext4_clear_blocks:876: inode 13 [ 117.435912][ T6586] EXT4-fs (loop3): Remounting filesystem read-only [ 117.436230][ T6586] EXT4-fs (loop3): 1 truncate cleaned up [ 117.436726][ T6586] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.442658][ T6596] netlink: 12 bytes leftover after parsing attributes in process `syz.4.369'. [ 117.450975][ T5279] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.451089][ T5279] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.451111][ T5279] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.451129][ T5279] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.451906][ T6596] netlink: 12 bytes leftover after parsing attributes in process `syz.4.369'. [ 117.463460][ T6586] netlink: 'syz.3.366': attribute type 1 has an invalid length. [ 117.472677][ T6599] netlink: 52 bytes leftover after parsing attributes in process `syz.5.368'. [ 117.490478][ T6604] set_capacity_and_notify: 2 callbacks suppressed [ 117.491840][ T6604] loop4: detected capacity change from 0 to 512 [ 117.505181][ T6586] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.511441][ T6586] macvlan2: entered promiscuous mode [ 117.512540][ T6586] macvlan2: entered allmulticast mode [ 117.514180][ T6586] bond1: entered promiscuous mode [ 117.515569][ T6586] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 117.578083][ T6586] bond1: left promiscuous mode [ 117.695350][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.725446][ T6608] netlink: 148 bytes leftover after parsing attributes in process `syz.0.371'. [ 117.766947][ T6608] netlink: 148 bytes leftover after parsing attributes in process `syz.0.371'. [ 117.883344][ T6617] fuse: Unknown parameter '0xffffffffffffffff0x00000000000001210rootmode' [ 117.976815][ T6623] lo speed is unknown, defaulting to 1000 [ 117.976862][ T6623] lo speed is unknown, defaulting to 1000 [ 117.977488][ T6623] lo speed is unknown, defaulting to 1000 [ 117.978421][ T6623] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 117.979687][ T6623] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 117.992411][ T6623] lo speed is unknown, defaulting to 1000 [ 117.992789][ T6623] lo speed is unknown, defaulting to 1000 [ 117.993124][ T6623] lo speed is unknown, defaulting to 1000 [ 117.993442][ T6623] lo speed is unknown, defaulting to 1000 [ 117.994075][ T6623] lo speed is unknown, defaulting to 1000 [ 118.587968][ T6636] loop1: detected capacity change from 0 to 512 [ 118.589937][ T6636] EXT4-fs: Ignoring removed i_version option [ 118.598634][ T6636] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 118.614728][ T6636] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.651839][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.716736][ T6654] loop3: detected capacity change from 0 to 8192 [ 118.822223][ T6668] loop3: detected capacity change from 0 to 512 [ 118.836351][ T6668] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.891686][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.896944][ T6681] netlink: 40 bytes leftover after parsing attributes in process `syz.0.395'. [ 119.059004][ T6704] loop1: detected capacity change from 0 to 128 [ 119.078419][ T6704] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 119.109062][ T4710] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.241886][ T6717] netlink: 'syz.0.407': attribute type 4 has an invalid length. [ 119.265359][ T6721] binder: 6719:6721 ioctl c0306201 200001c0 returned -14 [ 119.267729][ T6721] binder: 6719:6721 ioctl c058560f 20000200 returned -22 [ 119.296308][ T6723] syzkaller0: entered promiscuous mode [ 119.297625][ T6723] syzkaller0: entered allmulticast mode [ 119.301888][ T6723] tipc: Started in network mode [ 119.303153][ T6723] tipc: Node identity 8a39df3a3abd, cluster identity 4711 [ 119.304777][ T6723] tipc: Enabled bearer , priority 0 [ 119.309870][ T6723] tipc: Resetting bearer [ 119.312535][ T6722] tipc: Resetting bearer [ 119.320367][ T6722] tipc: Disabling bearer [ 119.550651][ T6742] loop5: detected capacity change from 0 to 512 [ 119.552230][ T6742] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 119.555313][ T6742] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 119.555358][ T6742] System zones: 0-2, 18-18, 34-34 [ 119.558509][ T6742] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.416: bad orphan inode 15 [ 119.560552][ T6742] loop5: lost filesystem error report for type 5 error -117 [ 119.561520][ T6742] ext4_test_bit(bit=14, block=18) = 1 [ 119.561554][ T6742] is_bad_inode(inode)=0 [ 119.561578][ T6742] NEXT_ORPHAN(inode)=2264924160 [ 119.561592][ T6742] max_ino=32 [ 119.561604][ T6742] i_nlink=0 [ 119.567531][ T6742] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2972: inode #15: comm syz.5.416: corrupted xattr block 19: e_value out of bounds [ 119.570721][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 119.570735][ C0] EXT4-fs (loop5): initial error at time 375: ext4_orphan_get:1425 [ 119.570747][ C0] EXT4-fs (loop5): last error at time 375: ext4_orphan_get:1425 [ 119.575980][ T6742] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 119.577391][ T6742] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 119.585289][ T6742] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.591869][ T30] audit: type=1326 audit(375.564:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6741 comm="syz.5.416" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91f77fe8 code=0x7ffc0000 [ 119.596349][ T30] audit: type=1326 audit(375.564:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6741 comm="syz.5.416" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91f77fe8 code=0x7ffc0000 [ 119.598555][ T30] audit: type=1326 audit(375.564:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6741 comm="syz.5.416" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff91f77fe8 code=0x7ffc0000 [ 119.598680][ T30] audit: type=1326 audit(375.564:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6741 comm="syz.5.416" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91f77fe8 code=0x7ffc0000 [ 119.598838][ T30] audit: type=1326 audit(375.564:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6741 comm="syz.5.416" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91f77fe8 code=0x7ffc0000 [ 119.598963][ T30] audit: type=1326 audit(375.564:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6741 comm="syz.5.416" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff91f77fe8 code=0x7ffc0000 [ 119.599158][ T30] audit: type=1326 audit(375.564:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6741 comm="syz.5.416" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91f77fe8 code=0x7ffc0000 [ 119.599333][ T30] audit: type=1326 audit(375.564:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6741 comm="syz.5.416" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff91f77fe8 code=0x7ffc0000 [ 119.611780][ T6742] EXT4-fs error (device loop5): ext4_search_dir:1474: inode #2: block 3: comm syz.5.416: bad entry in directory: directory entry overrun - offset=44, inode=262156, rec_len=4096, size=4096 fake=0 [ 119.618350][ T4716] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 119.662550][ T5556] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.816928][ T6761] loop5: detected capacity change from 0 to 512 [ 120.631597][ T6772] loop3: detected capacity change from 0 to 512 [ 120.752981][ T6783] loop3: detected capacity change from 0 to 1024 [ 120.756878][ T6783] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 120.759086][ T6783] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 120.761808][ T6783] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 120.763573][ T6783] EXT4-fs (loop3): orphan cleanup on readonly fs [ 120.773876][ T6783] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #3: block 3: comm syz.3.428: lblock 3 mapped to illegal pblock 3 (length 1) [ 120.773912][ T6783] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 120.777224][ T6783] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.428: Failed to acquire dquot type 0 [ 120.777257][ T6783] loop3: lost filesystem error report for type 5 error -117 [ 120.779148][ C1] EXT4-fs (loop3): error count since last fsck: 2 [ 120.779161][ C1] EXT4-fs (loop3): initial error at time 376: ext4_map_blocks:833: inode 3: block 3 [ 120.779179][ C1] EXT4-fs (loop3): last error at time 376: ext4_acquire_dquot:7041 [ 120.795897][ T6783] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 3: comm syz.3.428: lblock 3 mapped to illegal pblock 3 (length 1) [ 120.795930][ T6783] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 120.807671][ T6783] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.428: Failed to acquire dquot type 0 [ 120.807702][ T6783] loop3: lost filesystem error report for type 5 error -117 [ 120.808516][ T6783] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.428: Freeing blocks not in datazone - block = 0, count = 4096 [ 120.808541][ T6783] loop3: lost filesystem error report for type 5 error -117 [ 120.821352][ T6783] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 3: comm syz.3.428: lblock 3 mapped to illegal pblock 3 (length 1) [ 120.821389][ T6783] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 120.825908][ T6783] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.428: Failed to acquire dquot type 0 [ 120.829799][ T6783] loop3: lost filesystem error report for type 5 error -117 [ 120.830587][ T6783] EXT4-fs (loop3): 1 orphan inode deleted [ 120.834663][ T6783] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 120.837261][ T6761] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.847779][ T4711] Bluetooth: hci4: unexpected event for opcode 0x041c [ 120.878773][ T6793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.431'. [ 120.895114][ T6795] loop1: detected capacity change from 0 to 4096 [ 120.895261][ T5556] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.906161][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.924298][ T6795] EXT4-fs (loop1): Test dummy encryption mode enabled [ 120.983840][ T6795] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.292923][ T6813] EXT4-fs (loop4): Test dummy encryption mode enabled [ 121.294625][ T6813] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 121.320692][ T6813] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.438: bad orphan inode 131072 [ 121.320721][ T6813] loop4: lost filesystem error report for type 5 error -117 [ 121.321581][ T6813] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.349794][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.367242][ T6821] netlink: 12 bytes leftover after parsing attributes in process `syz.4.441'. [ 121.401537][ T6825] random: crng reseeded on system resumption [ 122.161202][ T6815] overlayfs: failed to resolve './file0/file0': -2 [ 122.240447][ T6833] __nla_validate_parse: 1 callbacks suppressed [ 122.240487][ T6833] netlink: 40 bytes leftover after parsing attributes in process `syz.0.444'. [ 122.271843][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.328912][ T6840] tc_dump_action: action bad kind [ 122.426279][ T6849] EXT4-fs (loop5): Test dummy encryption mode enabled [ 122.426330][ T6849] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 122.433811][ T6849] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.451: bad orphan inode 131072 [ 122.439373][ T6849] loop5: lost filesystem error report for type 5 error -117 [ 122.441179][ T6849] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.491454][ T6858] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.502952][ T6855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.452'. [ 122.502985][ T6855] netlink: 12 bytes leftover after parsing attributes in process `syz.3.452'. [ 122.509590][ T5556] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.544619][ T6852] lo speed is unknown, defaulting to 1000 [ 122.663494][ T6870] 9pnet_fd: Insufficient options for proto=fd [ 122.673981][ T6872] set_capacity_and_notify: 4 callbacks suppressed [ 122.674014][ T6872] loop3: detected capacity change from 0 to 4096 [ 122.685712][ T6872] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.746816][ T6876] loop5: detected capacity change from 0 to 256 [ 122.748332][ T6876] vfat: Unknown parameter 'nnonumtail' [ 122.854187][ T6872] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #15: comm syz.3.456: corrupted inode contents [ 122.858805][ T6872] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #15: comm syz.3.456: mark_inode_dirty error [ 122.862837][ T6872] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #15: comm syz.3.456: corrupted inode contents [ 122.865524][ T6872] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #15: comm syz.3.456: mark_inode_dirty error [ 122.869372][ T6872] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #15: comm syz.3.456: corrupted inode contents [ 122.872593][ T6872] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #15: comm syz.3.456: mark_inode_dirty error [ 122.875109][ T6872] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #15: comm syz.3.456: corrupted inode contents [ 122.878672][ T6872] EXT4-fs error (device loop3): ext4_truncate:4691: inode #15: comm syz.3.456: mark_inode_dirty error [ 122.878842][ T6872] EXT4-fs error (device loop3) in ext4_setattr:6172: Corrupt filesystem [ 122.885115][ T6872] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #15: comm syz.3.456: corrupted inode contents [ 122.909499][ T4715] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 122.911554][ T4715] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 122.911774][ T4715] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 122.915590][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.924282][ T6897] fuse: Unknown parameter ':…n˘¸> ăqŐŇš×őăŤ]¶.d¸őÍ•_eĹ‚Đ ©ŠŢ÷çmyäŐ‘BöBNŇíZ/vđy0-&­U´Š×3ĆçşŇ˝ű˘Ł~ÓřMm´¶śÉ/lŞ.×N+ű[xôxUIŰt~¦VŵHŤ+>D »›€ZÎQí2Šq'¶Hí†y¶0x0000000000000005' [ 123.946126][ T6900] sit0: entered promiscuous mode [ 123.950730][ T6900] netlink: 'syz.4.464': attribute type 1 has an invalid length. [ 123.953396][ T6900] netlink: 1 bytes leftover after parsing attributes in process `syz.4.464'. [ 124.014855][ T6902] loop4: detected capacity change from 0 to 512 [ 124.022291][ T6902] EXT4-fs (loop4): Test dummy encryption mode enabled [ 124.022323][ T6902] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 124.033285][ T6902] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.465: bad orphan inode 131072 [ 124.033319][ T6902] loop4: lost filesystem error report for type 5 error -117 [ 124.036358][ T6902] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.079053][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.627098][ T6913] netlink: 'syz.3.469': attribute type 1 has an invalid length. [ 124.657141][ T6914] macvtap1: entered allmulticast mode [ 124.667322][ T6913] macvtap2: entered allmulticast mode [ 124.674900][ T6914] macvtap3: entered allmulticast mode [ 124.688107][ T6913] bond2: (slave bridge1): making interface the new active one [ 124.692094][ T6913] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 124.903797][ T6926] loop1: detected capacity change from 0 to 8192 [ 124.959439][ T6926] loop1: p1 < > p2 < > p3 p4 < > [ 124.959471][ T6926] loop1: partition table partially beyond EOD, truncated [ 124.959621][ T6926] loop1: p1 start 67108864 is beyond EOD, truncated [ 124.960156][ T6926] loop1: p3 start 100859904 is beyond EOD, truncated [ 124.969689][ T6926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.471'. [ 125.047228][ T6114] udevd[6114]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 125.051210][ T6433] udevd[6433]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 125.093124][ T6946] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 125.138062][ T6949] loop5: detected capacity change from 0 to 512 [ 125.138658][ T6949] EXT4-fs (loop5): Test dummy encryption mode enabled [ 125.138668][ T6949] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 125.140089][ T6949] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.477: bad orphan inode 131072 [ 125.140111][ T6949] loop5: lost filesystem error report for type 5 error -117 [ 125.142441][ T6949] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.165289][ T5556] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.976301][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.976346][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.003931][ T6965] loop5: detected capacity change from 0 to 1024 [ 126.004316][ T6965] EXT4-fs: Ignoring removed bh option [ 126.009994][ T6965] EXT4-fs (loop5): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 126.050652][ T6970] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 126.067199][ T6970] netlink: 'syz.3.481': attribute type 1 has an invalid length. [ 126.067228][ T6970] netlink: 224 bytes leftover after parsing attributes in process `syz.3.481'. [ 126.115973][ T6965] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.137060][ T6965] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #12: block 7: comm syz.5.479: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 126.152079][ T6965] EXT4-fs (loop5): Remounting filesystem read-only [ 126.159053][ T6980] binder: 6978:6980 BC_INCREFS_DONE u0000000000000002 no match [ 126.159099][ T6980] binder: 6978:6980 got transaction to invalid handle, 2 [ 126.159143][ T6980] binder: 6978:6980 cannot find target node [ 126.159163][ T6980] binder: 6978:6980 transaction call to 0:0 failed 2/29201/-22, code 0 size 0-0 line 3252 [ 126.198017][ T5556] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.212649][ T6980] xt_hashlimit: max too large, truncated to 1048576 [ 126.212706][ T6980] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 126.216099][ T6980] loop1: detected capacity change from 0 to 1024 [ 126.221533][ T6980] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 126.221565][ T6980] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 126.221614][ T6980] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 126.222185][ T6980] EXT4-fs error (device loop1): ext4_get_journal_inode:5900: inode #5: comm syz.1.483: unexpected bad inode w/o EXT4_IGET_BAD [ 126.222199][ T6980] loop1: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 126.222308][ T6980] EXT4-fs (loop1): no journal found [ 126.222315][ T6980] EXT4-fs (loop1): can't get journal size [ 126.227313][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 126.227327][ C0] EXT4-fs (loop1): initial error at time 382: ext4_get_journal_inode:5900: inode 5 [ 126.227342][ C0] EXT4-fs (loop1): last error at time 382: ext4_get_journal_inode:5900: inode 5 [ 126.233209][ T6986] loop4: detected capacity change from 0 to 512 [ 126.245112][ T6980] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 126.261788][ T10] binder: undelivered TRANSACTION_ERROR: 29201 [ 126.267195][ T6986] EXT4-fs (loop4): 1 truncate cleaned up [ 126.267746][ T6986] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.269181][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.299299][ T6993] loop5: detected capacity change from 0 to 2048 [ 126.341525][ T6993] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.550485][ T7005] loop3: detected capacity change from 0 to 512 [ 126.552319][ T7005] EXT4-fs (loop3): Test dummy encryption mode enabled [ 126.552356][ T7005] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 126.600596][ T7005] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.488: bad orphan inode 131072 [ 126.600629][ T7005] loop3: lost filesystem error report for type 5 error -117 [ 126.603535][ T7005] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.622797][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.020345][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.064368][ T5556] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.133019][ T7010] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.212095][ T7032] netlink: 40 bytes leftover after parsing attributes in process `syz.1.496'. [ 127.232463][ T7032] netlink: 16 bytes leftover after parsing attributes in process `syz.1.496'. [ 127.232761][ T7032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.496'. [ 127.232776][ T7032] netlink: 12 bytes leftover after parsing attributes in process `syz.1.496'. [ 127.236051][ T1191] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.236138][ T1191] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.236162][ T1191] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.236176][ T1191] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.245812][ T7027] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 127.245896][ T7027] bridge0: port 3(veth1_virt_wifi) entered disabled state [ 127.245971][ T7027] veth1_virt_wifi: entered allmulticast mode [ 127.246813][ T7027] veth1_virt_wifi: left allmulticast mode [ 127.284311][ T7036] __nla_validate_parse: 2 callbacks suppressed [ 127.285247][ T7036] netlink: 8 bytes leftover after parsing attributes in process `syz.5.499'. [ 127.285266][ T7036] netlink: 'syz.5.499': attribute type 21 has an invalid length. [ 127.285275][ T7036] netlink: 4 bytes leftover after parsing attributes in process `syz.5.499'. [ 127.289967][ T7036] netlink: 8 bytes leftover after parsing attributes in process `syz.5.499'. [ 127.289983][ T7036] netlink: 'syz.5.499': attribute type 21 has an invalid length. [ 127.289992][ T7036] netlink: 4 bytes leftover after parsing attributes in process `syz.5.499'. [ 127.320898][ T7039] EXT4-fs (loop5): Test dummy encryption mode enabled [ 127.322566][ T7039] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 127.325485][ T7039] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.500: bad orphan inode 131072 [ 127.327688][ T7039] loop5: lost filesystem error report for type 5 error -117 [ 127.328400][ T7039] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.372072][ T5556] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.449772][ T7049] overlayfs: overlapping lowerdir path [ 127.554316][ T7059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.502'. [ 127.788290][ T7064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.506'. [ 127.874332][ T7069] IPVS: set_ctl: invalid protocol: 12 127.0.0.1:20001 [ 127.942522][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.981768][ T7086] fuse: Bad value for 'fd' [ 127.981872][ T7086] fuse: Bad value for 'fd' [ 127.981957][ T7086] fuse: Bad value for 'fd' [ 127.982033][ T7086] fuse: Bad value for 'fd' [ 127.982484][ T7086] fuse: Bad value for 'fd' [ 127.982580][ T7086] fuse: Bad value for 'fd' [ 127.982657][ T7086] fuse: Bad value for 'fd' [ 127.982742][ T7086] fuse: Bad value for 'fd' [ 127.982821][ T7086] fuse: Bad value for 'fd' [ 127.982891][ T7086] fuse: Bad value for 'fd' [ 127.982962][ T7086] fuse: Bad value for 'fd' [ 127.983031][ T7086] fuse: Bad value for 'fd' [ 127.983101][ T7086] fuse: Bad value for 'fd' [ 127.983786][ T7086] fuse: Bad value for 'fd' [ 128.721461][ T7116] netlink: 'syz.1.520': attribute type 21 has an invalid length. [ 128.721495][ T7116] netlink: 128 bytes leftover after parsing attributes in process `syz.1.520'. [ 128.721540][ T7116] netlink: 'syz.1.520': attribute type 5 has an invalid length. [ 128.721553][ T7116] netlink: 3 bytes leftover after parsing attributes in process `syz.1.520'. [ 129.177167][ T7140] set_capacity_and_notify: 2 callbacks suppressed [ 129.177208][ T7140] loop1: detected capacity change from 0 to 2048 [ 129.263313][ T7147] netlink: 56 bytes leftover after parsing attributes in process `syz.1.528'. [ 129.299383][ T7145] syzkaller0: entered promiscuous mode [ 129.299412][ T7145] syzkaller0: entered allmulticast mode [ 129.316868][ T7145] loop4: detected capacity change from 0 to 8 [ 129.320059][ T7145] squashfs: Unknown parameter '€' [ 129.436656][ T7162] loop4: detected capacity change from 0 to 512 [ 129.438931][ T7162] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 129.441004][ T7162] EXT4-fs (loop4): external journal has bad superblock [ 129.495122][ T7163] netlink: 148 bytes leftover after parsing attributes in process `syz.3.529'. [ 130.059265][ T4711] Bluetooth: hci4: unexpected event for opcode 0x2007 [ 131.110340][ T7202] binder: 7201:7202 ioctl 400c620e 20000100 returned -22 [ 131.120064][ T7204] binder: 7201:7204 ioctl 400c620e 20000100 returned -22 [ 131.229838][ T7214] fuse: Bad value for 'fd' [ 131.244087][ T7215] lo speed is unknown, defaulting to 1000 [ 131.244124][ T7215] lo speed is unknown, defaulting to 1000 [ 131.246461][ T7215] lo speed is unknown, defaulting to 1000 [ 131.259496][ T7215] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 131.529243][ T7215] lo speed is unknown, defaulting to 1000 [ 131.538449][ T7215] lo speed is unknown, defaulting to 1000 [ 131.542922][ T7215] lo speed is unknown, defaulting to 1000 [ 131.545572][ T7215] lo speed is unknown, defaulting to 1000 [ 131.548715][ T7215] lo speed is unknown, defaulting to 1000 [ 132.065955][ T7243] loop1: detected capacity change from 0 to 512 [ 132.095532][ T7243] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.104042][ T7243] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.191728][ T7258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.191939][ T7258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.213591][ T7260] loop4: detected capacity change from 0 to 512 [ 132.216708][ T7260] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 132.218699][ T7260] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #17: comm syz.4.559: corrupted in-inode xattr: e_name out of bounds [ 132.218716][ T7260] loop4: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 132.219087][ T7260] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.559: couldn't read orphan inode 17 (err -117) [ 132.219107][ T7260] loop4: lost filesystem error report for type 5 error -117 [ 132.219667][ T7260] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.240411][ T7260] EXT4-fs error (device loop4): ext4_lookup:1785: inode #15: comm syz.4.559: iget: bad extra_isize 46 (inode size 256) [ 132.274012][ T7260] EXT4-fs error (device loop4): ext4_lookup:1785: inode #15: comm syz.4.559: iget: bad extra_isize 46 (inode size 256) [ 132.280878][ T7260] EXT4-fs error (device loop4): ext4_lookup:1785: inode #15: comm syz.4.559: iget: bad extra_isize 46 (inode size 256) [ 132.304782][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.352240][ T7263] loop1: detected capacity change from 0 to 8192 [ 132.406718][ T7270] __nla_validate_parse: 3 callbacks suppressed [ 132.408278][ T7270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.562'. [ 132.409050][ T7263] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 132.409063][ T7263] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 132.410262][ T7263] loop1: unable to read partition table [ 132.410316][ T7263] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 132.519069][ T7280] netlink: 24 bytes leftover after parsing attributes in process `syz.4.565'. [ 133.326684][ T7282] loop4: detected capacity change from 0 to 512 [ 133.343632][ T7282] EXT4-fs (loop4): Test dummy encryption mode enabled [ 133.343672][ T7282] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 133.352711][ T7282] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.566: bad orphan inode 131072 [ 133.352741][ T7282] loop4: lost filesystem error report for type 5 error -117 [ 133.355546][ T7282] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.409755][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.559522][ T7293] tmpfs: Bad value for 'mpol' [ 133.769152][ T7325] loop5: detected capacity change from 0 to 2048 [ 133.833687][ T7325] netlink: 56 bytes leftover after parsing attributes in process `syz.5.573'. [ 133.852385][ T7336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.576'. [ 133.852414][ T7336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.576'. [ 133.887955][ T7336] 9pnet_fd: Insufficient options for proto=fd [ 133.930828][ T7338] vlan3: entered promiscuous mode [ 133.931956][ T7338] hsr0: entered promiscuous mode [ 133.933300][ T7338] vlan3: entered allmulticast mode [ 133.934721][ T7338] hsr0: entered allmulticast mode [ 133.936075][ T7338] hsr_slave_0: entered allmulticast mode [ 133.937456][ T7338] hsr_slave_1: entered allmulticast mode [ 133.941086][ T7338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.577'. [ 134.320798][ T7353] netlink: 134812 bytes leftover after parsing attributes in process `syz.4.583'. [ 134.321474][ T7353] binder: 7352:7353 ioctl c0046209 100000000000000 returned -22 [ 134.423368][ T7360] netlink: 164 bytes leftover after parsing attributes in process `syz.4.585'. [ 134.488221][ T7362] loop4: detected capacity change from 0 to 512 [ 134.489826][ T7362] EXT4-fs: Ignoring removed bh option [ 134.492065][ T7362] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 134.498086][ T7362] EXT4-fs (loop4): 1 truncate cleaned up [ 134.534609][ T7365] loop4: detected capacity change from 0 to 128 [ 134.566461][ T4716] Bluetooth: hci5: command 0x1003 tx timeout [ 134.568638][ T4711] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 134.745214][ T7381] netlink: 'syz.1.592': attribute type 2 has an invalid length. [ 136.179071][ T7397] netlink: 36 bytes leftover after parsing attributes in process `syz.0.597'. [ 136.189375][ T7397] netlink: 36 bytes leftover after parsing attributes in process `syz.0.597'. [ 136.226952][ T7397] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.227072][ T7397] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.312699][ T7420] xt_TPROXY: Can be used only with -p tcp or -p udp [ 136.330179][ T7421] tipc: Enabling of bearer rejected, failed to enable media [ 136.487751][ T7433] sctp: [Deprecated]: syz.5.602 (pid 7433) Use of int in max_burst socket option. [ 136.487751][ T7433] Use struct sctp_assoc_value instead [ 136.991142][ T7444] loop3: detected capacity change from 0 to 4096 [ 136.997878][ T7444] EXT4-fs mount: 4 callbacks suppressed [ 136.999336][ T7444] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 137.206106][ T7450] binder: 7449:7450 ERROR: BC_REGISTER_LOOPER called without request [ 137.206139][ T7450] binder: 7449:7450 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 137.206163][ T7450] binder: 7449:7450 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 137.207186][ T7450] ubi31: attaching mtd0 [ 137.209427][ T7450] ubi31: scanning is finished [ 137.209440][ T7450] ubi31: empty MTD device detected [ 137.229104][ T7448] loop5: detected capacity change from 0 to 8192 [ 137.302657][ T7454] fuse: Unknown parameter 'fG' [ 137.304820][ T7454] fuse: fd is not a fuse device [ 137.308682][ T7448] loop5: p1 p2 p3 p4 [ 137.308707][ T7448] loop5: partition table partially beyond EOD, truncated [ 137.308815][ T7448] loop5: p1 start 51379968 is beyond EOD, truncated [ 137.308836][ T7448] loop5: p2 size 100664832 extends beyond EOD, truncated [ 137.315179][ T7448] loop5: p3 start 83886080 is beyond EOD, truncated [ 137.317421][ T7448] loop5: p4 start 131072 is beyond EOD, truncated [ 137.343044][ T7450] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 137.343071][ T7450] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 137.343093][ T7450] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 137.343107][ T7450] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 137.343119][ T7450] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 137.343130][ T7450] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 137.343141][ T7450] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 773823672 [ 137.343153][ T7450] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 137.347343][ T7457] ubi31: background thread "ubi_bgt31d" started, PID 7457 [ 137.429230][ T7462] loop4: detected capacity change from 0 to 512 [ 137.434243][ T7462] EXT4-fs (loop4): Test dummy encryption mode enabled [ 137.434287][ T7462] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 137.439508][ T7462] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.618: bad orphan inode 131072 [ 137.439544][ T7462] loop4: lost filesystem error report for type 5 error -117 [ 137.442068][ T7462] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.450657][ T6433] udevd[6433]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 137.498363][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.690353][ T7478] IPVS: Error connecting to the multicast addr [ 137.861092][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.537488][ T7510] loop1: detected capacity change from 0 to 512 [ 138.539835][ T7510] EXT4-fs (loop1): Test dummy encryption mode enabled [ 138.539867][ T7510] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 138.544591][ T7510] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.630: bad orphan inode 131072 [ 138.547555][ T7510] loop1: lost filesystem error report for type 5 error -117 [ 138.548667][ T7510] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.565552][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.698772][ T7515] loop1: detected capacity change from 0 to 128 [ 139.611373][ T7515] EXT4-fs error (device loop1): __ext4_fill_super:5600: inode #2: comm syz.1.631: iget: checksum invalid [ 139.611455][ T7515] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -74 [ 139.614446][ T7515] EXT4-fs (loop1): get root inode failed [ 139.614488][ T7515] EXT4-fs (loop1): mount failed [ 139.617072][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 139.617084][ C0] EXT4-fs (loop1): initial error at time 395: __ext4_fill_super:5600: inode 2 [ 139.617101][ C0] EXT4-fs (loop1): last error at time 395: __ext4_fill_super:5600: inode 2 [ 139.672795][ T7515] __nla_validate_parse: 51 callbacks suppressed [ 139.672831][ T7515] netlink: 24 bytes leftover after parsing attributes in process `syz.1.631'. [ 139.693008][ T7518] loop5: detected capacity change from 0 to 1024 [ 139.714450][ T7520] netlink: 268 bytes leftover after parsing attributes in process `syz.0.633'. [ 139.714487][ T7520] netlink: 268 bytes leftover after parsing attributes in process `syz.0.633'. [ 148.929614][ T7529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.637'. [ 148.931746][ T7529] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 148.939550][ T7529] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 148.965540][ T7528] loop1: detected capacity change from 0 to 256 [ 148.984229][ T7539] netlink: 40 bytes leftover after parsing attributes in process `syz.3.637'. [ 149.040512][ T7541] netlink: 'syz.0.638': attribute type 5 has an invalid length. [ 149.040545][ T7541] netlink: 40 bytes leftover after parsing attributes in process `syz.0.638'. [ 149.165817][ T7554] loop4: detected capacity change from 0 to 512 [ 149.178631][ T7554] EXT4-fs (loop4): Test dummy encryption mode enabled [ 149.178669][ T7554] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 149.194423][ T7554] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.644: bad orphan inode 131072 [ 149.194451][ T7554] loop4: lost filesystem error report for type 5 error -117 [ 149.194508][ C0] EXT4-fs (loop4): initial error at time 405: ext4_orphan_get:1425 [ 149.194533][ C0] EXT4-fs (loop4): last error at time 405: ext4_orphan_get:1425 [ 149.197190][ T7554] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.212088][ T7560] netlink: 16 bytes leftover after parsing attributes in process `syz.1.645'. [ 149.480751][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.017683][ T7607] random: crng reseeded on system resumption [ 150.425505][ T7620] fuse: blksize only supported for fuseblk [ 150.481360][ T7630] loop5: detected capacity change from 0 to 2048 [ 150.514983][ T7630] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.549112][ T5556] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.967689][ T7659] loop5: detected capacity change from 0 to 512 [ 151.018942][ T7659] EXT4-fs (loop5): Test dummy encryption mode enabled [ 151.018978][ T7659] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 151.047613][ T7659] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.671: bad orphan inode 131072 [ 151.047651][ T7659] loop5: lost filesystem error report for type 5 error -117 [ 151.050335][ T7659] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.094286][ T7686] bond3 (unregistering): Released all slaves [ 151.109506][ T5556] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.166693][ T4824] hsr0: entered promiscuous mode [ 151.185303][ T7702] loop3: detected capacity change from 0 to 512 [ 151.187390][ T7702] ext4: Bad value for 'commit' [ 151.683902][ T7710] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 151.722158][ T26] lo speed is unknown, defaulting to 1000 [ 151.761424][ T7721] binder: 7720:7721 ioctl c0306201 0 returned -14 [ 151.765528][ T7721] binder: 7720:7721 context manager tried to acquire desc 0 [ 151.767738][ T7721] binder: 7720:7721 ioctl c0306201 200003c0 returned -22 [ 151.800299][ T7725] loop5: detected capacity change from 0 to 512 [ 151.808199][ T7725] EXT4-fs (loop5): Test dummy encryption mode enabled [ 151.808242][ T7725] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 151.814900][ T7725] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.684: bad orphan inode 131072 [ 151.817015][ T7725] loop5: lost filesystem error report for type 5 error -117 [ 151.819517][ T7725] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.900922][ T7730] block nbd4: NBD_DISCONNECT [ 151.939436][ T5556] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.038590][ T7740] loop4: detected capacity change from 0 to 512 [ 152.039014][ T7740] EXT4-fs: Ignoring removed nomblk_io_submit option [ 152.039390][ T7740] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 152.041390][ T7740] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 152.041400][ T7740] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e018, mo2=0002] [ 152.041427][ T7740] System zones: 0-1, 15-15, 18-18, 34-34 [ 152.041533][ T7740] EXT4-fs (loop4): orphan cleanup on readonly fs [ 152.041559][ T7740] __quota_error: 22 callbacks suppressed [ 152.041564][ T7740] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 152.041595][ T7740] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 152.041606][ T7740] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 152.041912][ T7740] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.690: bg 0: block 40: padding at end of block bitmap is not set [ 152.041924][ T7740] loop4: lost filesystem error report for type 5 error -117 [ 152.042003][ T7740] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 152.042012][ T7740] loop4: lost filesystem error report for type 5 error -117 [ 152.042183][ T7740] EXT4-fs (loop4): 1 truncate cleaned up [ 152.042646][ T7740] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 152.043767][ T7740] EXT4-fs warning (device loop4): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 152.051106][ T7740] EXT4-fs error (device loop4): ext4_lookup:1785: inode #15: comm syz.4.690: iget: bad i_size value: 360287970189639690 [ 152.052630][ T7740] EXT4-fs error (device loop4): ext4_lookup:1785: inode #15: comm syz.4.690: iget: bad i_size value: 360287970189639690 [ 152.113897][ T7746] loop1: detected capacity change from 0 to 256 [ 152.122467][ T7746] vfat: Unknown parameter 'uni_xlqte' [ 152.164945][ T4711] Bluetooth: hci2: unexpected event for opcode 0x0c20 [ 152.171989][ T7753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.694'. [ 152.185307][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.210558][ T7748] geneve2: entered promiscuous mode [ 152.328583][ T7764] loop1: detected capacity change from 0 to 512 [ 152.679778][ T7776] input: syz0 as /devices/virtual/input/input11 [ 152.681227][ T7776] input: failed to attach handler leds to device input11, error: -6 [ 153.022130][ T7784] sock: sock_set_timeout: `syz.3.704' (pid 7784) tries to set negative timeout [ 153.392365][ T7791] virtiofs: Unknown parameter 'ÖC—ŕ' [ 153.452651][ T7795] netlink: 24 bytes leftover after parsing attributes in process `syz.0.707'. [ 153.452680][ T7795] netlink: 'syz.0.707': attribute type 1 has an invalid length. [ 153.481893][ T7799] loop3: detected capacity change from 0 to 512 [ 153.488885][ T7799] ext4: Invalid gid '0x00000000ffffffff' [ 153.534901][ T7804] EXT4-fs: Ignoring removed i_version option [ 153.539160][ T7804] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 153.544406][ T7801] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 153.548001][ T7804] EXT4-fs (loop5): 1 truncate cleaned up [ 153.548459][ T7804] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.640516][ T7815] random: crng reseeded on system resumption [ 153.658634][ T5556] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.661035][ T4709] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 154.060756][ T7840] netlink: 8 bytes leftover after parsing attributes in process `syz.5.720'. [ 154.461184][ T7847] lo speed is unknown, defaulting to 1000 [ 155.269209][ T7876] set_capacity_and_notify: 2 callbacks suppressed [ 155.275074][ T7876] loop3: detected capacity change from 0 to 8 [ 155.287948][ T7876] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 155.287973][ T7876] unable to read xattr id index table [ 155.310155][ T7876] SQUASHFS error: zlib decompression failed, data probably corrupt [ 155.310193][ T7876] SQUASHFS error: Failed to read block 0x13e: -5 [ 155.310217][ T7876] SQUASHFS error: Unable to read metadata cache entry [13c] [ 155.310232][ T7876] SQUASHFS error: Unable to read directory block [13c:26] [ 155.729007][ T7885] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 155.729354][ T7885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.735'. [ 155.752723][ T7883] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 155.752892][ T7883] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 155.752951][ T7883] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 155.753007][ T7883] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 155.753059][ T7883] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 155.799983][ T7888] loop1: detected capacity change from 0 to 512 [ 155.820101][ T7888] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.841586][ T3290] Bluetooth: hci5: Frame reassembly failed (-84) [ 155.848457][ T7888] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.736: corrupted xattr block 33: invalid header [ 155.855158][ T7888] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.736: corrupted xattr block 33: invalid header [ 155.858907][ T7888] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.736: corrupted xattr block 33: invalid header [ 156.046175][ T7895] Soft offlining pfn 0x219430 at process virtual address 0x20563000 [ 156.046204][ T7895] Soft offline: 0x219430: page already poisoned [ 156.054524][ T7895] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 156.178929][ T7909] loop5: detected capacity change from 0 to 128 [ 156.179320][ T7909] vfat: Unknown parameter 'uni_x¬™' [ 156.492030][ T7916] netlink: 'syz.4.743': attribute type 1 has an invalid length. [ 156.523235][ T7916] bond2: entered promiscuous mode [ 156.525532][ T7916] 8021q: adding VLAN 0 to HW filter on device bond2 [ 156.551707][ T7917] bond2: (slave bridge4): making interface the new active one [ 156.551743][ T7917] bridge4: entered promiscuous mode [ 156.556363][ T7917] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 156.584921][ T7916] bond2 (unregistering): (slave bridge4): Releasing backup interface [ 156.586700][ T7916] bridge4: left promiscuous mode [ 156.626184][ T7916] bond2 (unregistering): Released all slaves [ 156.779026][ T7924] loop4: detected capacity change from 0 to 512 [ 156.820075][ T7924] EXT4-fs (loop4): Test dummy encryption mode enabled [ 156.823212][ T7924] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 156.853189][ T7924] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.745: bad orphan inode 131072 [ 156.853208][ T7924] loop4: lost filesystem error report for type 5 error -117 [ 156.854176][ T7924] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.140164][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.247283][ T7938] loop3: detected capacity change from 0 to 2048 [ 157.285562][ T7938] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.357463][ T7938] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 157.377716][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.763714][ T4719] Bluetooth: hci3: command 0x0c1a tx timeout [ 157.763818][ T4719] Bluetooth: hci2: command 0x0c1a tx timeout [ 157.763896][ T4719] Bluetooth: hci1: command 0x0c1a tx timeout [ 157.763963][ T4719] Bluetooth: hci0: command 0x0c1a tx timeout [ 157.768996][ T4711] Bluetooth: hci4: command 0x0c1a tx timeout [ 157.839295][ T7956] netlink: 'syz.5.754': attribute type 1 has an invalid length. [ 157.843674][ T4711] Bluetooth: hci5: command 0x1003 tx timeout [ 157.844963][ T4716] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 157.874314][ T7956] 8021q: adding VLAN 0 to HW filter on device bond3 [ 157.876773][ T7956] bond2: (slave bond3): making interface the new active one [ 157.879280][ T7956] bond2: (slave bond3): Enslaving as an active interface with an up link [ 157.907658][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.076912][ T7967] 0xfffffffffffffffd-0x000000020000 : "" [ 158.076944][ T7967] mtd: partition "" is out of reach -- disabled [ 158.086135][ T7967] ftl_cs: FTL header not found. [ 158.233637][ T7980] tmpfs: Bad value for 'mpol' [ 158.332358][ T7994] netlink: 'syz.5.767': attribute type 2 has an invalid length. [ 158.332390][ T7994] netlink: 'syz.5.767': attribute type 1 has an invalid length. [ 158.406848][ T8002] loop4: detected capacity change from 0 to 512 [ 158.408671][ T8002] EXT4-fs (loop4): Test dummy encryption mode enabled [ 158.408696][ T8002] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 158.431349][ T8002] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.769: bad orphan inode 131072 [ 158.431380][ T8002] loop4: lost filesystem error report for type 5 error -117 [ 158.434365][ T8002] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.499181][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.505196][ T8007] pimreg: tun_chr_ioctl cmd 2147767506 [ 158.515180][ T8007] loop3: detected capacity change from 0 to 512 [ 158.531899][ T8007] 9p: Bad value for 'wfdno' [ 159.062469][ T8033] loop4: detected capacity change from 0 to 512 [ 159.067389][ T8033] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 159.073766][ T8033] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.777: casefold flag without casefold feature [ 159.073799][ T8033] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 159.074605][ T8033] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.777: couldn't read orphan inode 15 (err -117) [ 159.074627][ T8033] loop4: lost filesystem error report for type 5 error -117 [ 159.075625][ T8033] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.085520][ T8033] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #2: block 4: comm syz.4.777: lblock 0 mapped to illegal pblock 4 (length 1) [ 159.117957][ T8036] loop3: detected capacity change from 0 to 512 [ 159.137297][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.140091][ T8036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.778'. [ 159.211726][ T8041] loop1: detected capacity change from 0 to 512 [ 159.221530][ T8041] EXT4-fs (loop1): Test dummy encryption mode enabled [ 159.221568][ T8041] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 159.223227][ T8041] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.781: bad orphan inode 131072 [ 159.223245][ T8041] loop1: lost filesystem error report for type 5 error -117 [ 159.226325][ T8041] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.978715][ T8050] FAT-fs (loop3): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 159.978959][ T8050] FAT-fs (loop3): Filesystem has been set read-only [ 159.983561][ T8050] netlink: 'syz.3.778': attribute type 1 has an invalid length. [ 160.303451][ T8054] fuse: fd is not a fuse device [ 160.328638][ T8054] IPv6: NLM_F_CREATE should be specified when creating new route [ 160.346531][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.899541][ T8093] tmpfs: Bad value for 'mpol' [ 160.932935][ T8107] netlink: 16 bytes leftover after parsing attributes in process `syz.5.796'. [ 160.932970][ T8107] netlink: 60 bytes leftover after parsing attributes in process `syz.5.796'. [ 160.939751][ T8111] set_capacity_and_notify: 1 callbacks suppressed [ 160.941752][ T8111] loop4: detected capacity change from 0 to 512 [ 160.954554][ T8111] EXT4-fs (loop4): Test dummy encryption mode enabled [ 160.959055][ T8111] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 160.965863][ T8111] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.797: bad orphan inode 131072 [ 160.965903][ T8111] loop4: lost filesystem error report for type 5 error -117 [ 160.965922][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.5.798'. [ 160.966256][ T8133] netlink: 312 bytes leftover after parsing attributes in process `syz.5.798'. [ 160.966272][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.5.798'. [ 160.968619][ T8111] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.994460][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.033071][ T8136] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 161.033091][ T8136] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 161.033821][ T8136] vhci_hcd vhci_hcd.0: Device attached [ 161.037441][ T8137] usbip_core: unknown command [ 161.037449][ T8137] vhci_hcd: unknown pdu 67121200 [ 161.037457][ T8137] usbip_core: unknown command [ 161.041703][ T8136] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(12) [ 161.041722][ T8136] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 161.042378][ T8136] vhci_hcd vhci_hcd.0: Device attached [ 161.045637][ T8120] vhci_hcd vhci_hcd.4: stop threads [ 161.045666][ T8120] vhci_hcd vhci_hcd.4: release socket [ 161.045718][ T8120] vhci_hcd vhci_hcd.4: disconnect device [ 161.049725][ T8140] vhci_hcd: connection closed [ 161.050556][ T8120] vhci_hcd vhci_hcd.4: stop threads [ 161.050820][ T8120] vhci_hcd vhci_hcd.4: release socket [ 161.050833][ T8120] vhci_hcd vhci_hcd.4: disconnect device [ 161.067696][ T8145] loop4: detected capacity change from 0 to 256 [ 161.554231][ T8161] xt_hashlimit: size too large, truncated to 1048576 [ 161.580571][ T4470] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 161.588193][ T4470] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 161.786303][ T8173] lo speed is unknown, defaulting to 1000 [ 161.816861][ T8173] netlink: 75 bytes leftover after parsing attributes in process `syz.1.808'. [ 161.821029][ T8173] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 161.851155][ T8179] netlink: 'syz.5.811': attribute type 1 has an invalid length. [ 161.917177][ T8179] 8021q: adding VLAN 0 to HW filter on device bond4 [ 161.925743][ T8179] bond4: (slave gretap1): making interface the new active one [ 161.928007][ T8179] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 161.938529][ T8180] loop1: detected capacity change from 0 to 1024 [ 162.047282][ T8180] lo speed is unknown, defaulting to 1000 [ 162.519700][ T4716] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 162.535309][ T4716] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 162.568615][ T8225] netlink: 8 bytes leftover after parsing attributes in process `syz.5.819'. [ 162.571493][ T8228] loop1: detected capacity change from 0 to 512 [ 162.574346][ T8228] EXT4-fs: inline encryption not supported [ 162.643210][ T8228] EXT4-fs (loop1): 1 truncate cleaned up [ 162.643690][ T8228] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.715396][ T8255] loop3: detected capacity change from 0 to 512 [ 162.722588][ T8255] EXT4-fs (loop3): Test dummy encryption mode enabled [ 162.722622][ T8255] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 162.732007][ T8255] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.822: bad orphan inode 131072 [ 162.732043][ T8255] loop3: lost filesystem error report for type 5 error -117 [ 162.734118][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 162.734141][ C0] EXT4-fs (loop3): initial error at time 418: ext4_orphan_get:1425 [ 162.734153][ C0] EXT4-fs (loop3): last error at time 418: ext4_orphan_get:1425 [ 162.744783][ T8255] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.771585][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.823749][ T8274] loop3: detected capacity change from 0 to 512 [ 162.836556][ T8274] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.841639][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.850538][ T8274] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.827: corrupted xattr block 33: invalid header [ 162.856795][ T8274] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.827: corrupted xattr block 33: invalid header [ 162.859302][ T8274] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.827: corrupted xattr block 33: invalid header [ 162.914435][ T8112] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 162.915269][ T8112] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 162.915296][ T8112] EXT4-fs (loop3): This should not happen!! Data will be lost [ 162.915296][ T8112] [ 162.915316][ T8112] EXT4-fs (loop3): Total free blocks count 0 [ 162.915328][ T8112] EXT4-fs (loop3): Free/Dirty block details [ 162.915349][ T8112] EXT4-fs (loop3): free_blocks=65280 [ 162.915368][ T8112] EXT4-fs (loop3): dirty_blocks=31 [ 162.915377][ T8112] EXT4-fs (loop3): Block reservation details [ 162.915386][ T8112] EXT4-fs (loop3): i_reserved_data_blocks=31 [ 162.922315][ T8288] loop1: detected capacity change from 0 to 1024 [ 162.923496][ T8288] EXT4-fs: Ignoring removed mblk_io_submit option [ 162.938550][ T4715] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 162.970604][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.025214][ T8288] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.055414][ T8300] tmpfs: Bad value for 'mpol' [ 163.511552][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.670036][ T8327] loop1: detected capacity change from 0 to 512 [ 163.674716][ T8327] EXT4-fs (loop1): Test dummy encryption mode enabled [ 163.676249][ T8327] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 163.679952][ T8327] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.838: bad orphan inode 131072 [ 163.683460][ T8327] loop1: lost filesystem error report for type 5 error -117 [ 163.685240][ T8327] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.703269][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.839898][ T8343] loop1: detected capacity change from 0 to 256 [ 163.840387][ T8343] vfat: Deprecated parameter 'posix' [ 163.840414][ T8343] FAT-fs: "posix" option is obsolete, not supported now [ 164.186187][ T8358] netlink: 'syz.1.846': attribute type 4 has an invalid length. [ 164.270914][ T8364] loop4: detected capacity change from 0 to 512 [ 164.273462][ T8364] EXT4-fs (loop4): Test dummy encryption mode enabled [ 164.273492][ T8364] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 164.523891][ T8364] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.852: bad orphan inode 131072 [ 164.523926][ T8364] loop4: lost filesystem error report for type 5 error -117 [ 164.524670][ T8364] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.548217][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.823082][ T8382] lo speed is unknown, defaulting to 1000 [ 164.832582][ T8394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.853'. [ 165.770012][ T8422] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 165.974526][ T8441] overlayfs: failed to clone lowerpath [ 165.977546][ T8441] overlayfs: failed to clone lowerpath [ 166.265623][ T4716] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 166.269213][ T8452] geneve2: entered promiscuous mode [ 166.271247][ T8452] netlink: 20 bytes leftover after parsing attributes in process `syz.0.875'. [ 166.280693][ T8452] ip6t_REJECT: ECHOREPLY is not supported [ 166.282374][ T8452] netlink: 48 bytes leftover after parsing attributes in process `syz.0.875'. [ 166.536510][ T8471] netlink: 'syz.1.881': attribute type 16 has an invalid length. [ 166.536545][ T8471] netlink: 'syz.1.881': attribute type 3 has an invalid length. [ 166.536556][ T8471] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.881'. [ 166.543936][ T8471] fuse: Unknown parameter 'defyult_permissions' [ 166.709009][ T8489] set_capacity_and_notify: 1 callbacks suppressed [ 166.709210][ T8489] loop4: detected capacity change from 0 to 256 [ 167.046396][ T8502] loop4: detected capacity change from 0 to 512 [ 167.059435][ T8502] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.062637][ T8502] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.891: corrupted xattr block 33: invalid header [ 167.064419][ T8502] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.891: corrupted xattr block 33: invalid header [ 167.064633][ T8502] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.891: corrupted xattr block 33: invalid header [ 167.408314][ T8512] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 167.408692][ T8512] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 167.729118][ T8521] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20000 [ 167.910522][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.924650][ T8531] loop1: detected capacity change from 0 to 256 [ 167.927006][ T8531] vfat: Unknown parameter 'ioch' [ 167.959598][ T8536] loop4: detected capacity change from 0 to 512 [ 167.988783][ T8537] lo speed is unknown, defaulting to 1000 [ 168.021832][ T4824] IPVS: starting estimator thread 0... [ 168.092413][ T8542] loop4: detected capacity change from 0 to 512 [ 168.112810][ T8541] IPVS: using max 58 ests per chain, 139200 per kthread [ 168.115386][ T8542] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.120532][ T8542] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.900: corrupted xattr block 33: invalid ea_ino [ 168.121476][ T8542] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.900: corrupted xattr block 33: invalid ea_ino [ 168.121937][ T8542] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.900: corrupted xattr block 33: invalid ea_ino [ 168.149958][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.707461][ T8558] 8021q: adding VLAN 0 to HW filter on device bond1 [ 168.711261][ T8558] gretap0: entered promiscuous mode [ 168.716637][ T8558] 8021q: adding VLAN 0 to HW filter on device bond2 [ 168.720251][ T24] gretap1: entered promiscuous mode [ 170.024641][ T8588] netlink: 8 bytes leftover after parsing attributes in process `syz.5.913'. [ 170.024690][ T8588] netlink: 'syz.5.913': attribute type 8 has an invalid length. [ 170.029105][ T8588] geneve3: entered promiscuous mode [ 170.029151][ T8588] geneve3: entered allmulticast mode [ 170.232444][ T8588] netlink: 8 bytes leftover after parsing attributes in process `syz.5.913'. [ 170.232485][ T8588] netlink: 'syz.5.913': attribute type 8 has an invalid length. [ 170.348713][ T8605] netlink: 8 bytes leftover after parsing attributes in process `syz.5.917'. [ 170.390990][ T8608] loop4: detected capacity change from 0 to 2048 [ 170.418811][ T8608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.449485][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.572439][ T8627] fuse: fd is not a fuse device [ 170.667440][ T8634] lo speed is unknown, defaulting to 1000 [ 170.853705][ T8635] netlink: 64 bytes leftover after parsing attributes in process `syz.3.921'. [ 170.889053][ T8643] netlink: 28 bytes leftover after parsing attributes in process `syz.3.924'. [ 170.899837][ T8645] loop1: detected capacity change from 0 to 128 [ 170.900933][ T8645] FAT-fs (loop1): bogus logical sector size 0 [ 170.900954][ T8645] FAT-fs (loop1): Can't find a valid FAT filesystem [ 171.079451][ T8665] misc userio: Begin command sent, but we're already running [ 171.113439][ T8667] lo speed is unknown, defaulting to 1000 [ 171.396260][ T8687] netlink: 24 bytes leftover after parsing attributes in process `syz.4.934'. [ 171.429090][ T8687] netlink: 24 bytes leftover after parsing attributes in process `syz.4.934'. [ 171.570143][ T8716] netlink: 24 bytes leftover after parsing attributes in process `syz.0.943'. [ 171.819101][ T4470] IPVS: starting estimator thread 0... [ 171.826522][ T8713] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 171.835346][ T8724] tmpfs: Unknown parameter 'noswapĂ' [ 171.877045][ T8728] overlayfs: failed to resolve './file0': -2 [ 171.911429][ T8730] bond1: entered promiscuous mode [ 171.911643][ T8730] 8021q: adding VLAN 0 to HW filter on device bond1 [ 171.913674][ T8720] IPVS: using max 60 ests per chain, 144000 per kthread [ 171.921382][ T8733] loop4: detected capacity change from 0 to 128 [ 171.935890][ T8733] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 171.964186][ T8733] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:375: inode #2: comm syz.4.947: No space for directory leaf checksum. Please run e2fsck -D. [ 171.967327][ T8733] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #2: comm syz.4.947: checksumming directory block 0 [ 171.970036][ T8733] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:375: inode #2: comm syz.4.947: No space for directory leaf checksum. Please run e2fsck -D. [ 171.970063][ T8733] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #2: comm syz.4.947: checksumming directory block 0 [ 171.979345][ T8733] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:375: inode #2: comm syz.4.947: No space for directory leaf checksum. Please run e2fsck -D. [ 171.979377][ T8733] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #2: comm syz.4.947: checksumming directory block 0 [ 171.980312][ T8733] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:375: inode #2: comm syz.4.947: No space for directory leaf checksum. Please run e2fsck -D. [ 171.980327][ T8733] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #2: comm syz.4.947: checksumming directory block 0 [ 172.024447][ T4709] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 172.043102][ T8741] netlink: 20 bytes leftover after parsing attributes in process `syz.4.950'. [ 172.163645][ T26] atkbd serio0: keyboard reset failed on [ 172.303859][ T8745] xfrm0 speed is unknown, defaulting to 1000 [ 172.313105][ T8745] xfrm0 speed is unknown, defaulting to 1000 [ 172.319864][ T8745] xfrm0 speed is unknown, defaulting to 1000 [ 172.401798][ T8745] infiniband syz0: set active [ 172.401824][ T8745] infiniband syz0: added xfrm0 [ 172.404501][ T4824] xfrm0 speed is unknown, defaulting to 1000 [ 172.421583][ T8745] RDS/IB: syz0: added [ 172.421824][ T8745] smc: adding ib device syz0 with port count 1 [ 172.421864][ T8745] smc: ib device syz0 port 1 has no pnetid [ 172.422991][ T8745] xfrm0 speed is unknown, defaulting to 1000 [ 172.442398][ T8751] netlink: 28 bytes leftover after parsing attributes in process `syz.5.953'. [ 172.454770][ T4805] xfrm0 speed is unknown, defaulting to 1000 [ 172.465595][ T8745] xfrm0 speed is unknown, defaulting to 1000 [ 172.502884][ T8746] loop4: detected capacity change from 0 to 512 [ 172.503048][ T8745] xfrm0 speed is unknown, defaulting to 1000 [ 172.510338][ T8746] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.951: inode has both inline data and extents flags [ 172.510386][ T8746] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 172.510627][ T8746] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.951: couldn't read orphan inode 15 (err -117) [ 172.510645][ T8746] loop4: lost filesystem error report for type 5 error -117 [ 172.516882][ T8746] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.573215][ T8745] xfrm0 speed is unknown, defaulting to 1000 [ 172.608672][ T8745] xfrm0 speed is unknown, defaulting to 1000 [ 173.876555][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.407608][ T8788] lo speed is unknown, defaulting to 1000 [ 174.412598][ T8788] xfrm0 speed is unknown, defaulting to 1000 [ 174.790419][ T8776] syz.5.962 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 174.790461][ T8776] CPU: 0 UID: 0 PID: 8776 Comm: syz.5.962 Tainted: G L syzkaller #0 PREEMPT [ 174.790474][ T8776] Tainted: [L]=SOFTLOCKUP [ 174.790478][ T8776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 174.790482][ T8776] Call trace: [ 174.790485][ T8776] show_stack+0x2c/0x3c (C) [ 174.790505][ T8776] __dump_stack+0x30/0x40 [ 174.790518][ T8776] dump_stack_lvl+0xd8/0x12c [ 174.790528][ T8776] dump_stack+0x1c/0x28 [ 174.790537][ T8776] dump_header+0xbc/0x3f0 [ 174.790545][ T8776] oom_kill_process+0x248/0x8a0 [ 174.790556][ T8776] out_of_memory+0xd24/0x1064 [ 174.790564][ T8776] mem_cgroup_out_of_memory+0xe8/0x170 [ 174.790574][ T8776] try_charge_memcg+0x8ec/0xc64 [ 174.790581][ T8776] charge_memcg+0x17c/0x280 [ 174.790588][ T8776] mem_cgroup_swapin_charge_folio+0x2b0/0x3f8 [ 174.790595][ T8776] swap_cache_alloc_folio+0x3f4/0x9a4 [ 174.790604][ T8776] swap_cache_read_folio+0x60/0x220 [ 174.790611][ T8776] swapin_readahead+0x708/0xa8c [ 174.790619][ T8776] do_swap_page+0x28c/0x3ce0 [ 174.790630][ T8776] handle_mm_fault+0x115c/0x253c [ 174.790637][ T8776] do_page_fault+0x77c/0xb88 [ 174.790647][ T8776] do_translation_fault+0xc4/0x114 [ 174.790656][ T8776] do_mem_abort+0x70/0x194 [ 174.790665][ T8776] el0_da+0x78/0x254 [ 174.790675][ T8776] el0t_64_sync_handler+0x10c/0x148 [ 174.790684][ T8776] el0t_64_sync+0x198/0x19c [ 174.790705][ T8776] memory: usage 307200kB, limit 307200kB, failcnt 818 [ 174.790714][ T8776] memory+swap: usage 307584kB, limit 9007199254740988kB, failcnt 0 [ 174.790724][ T8776] kmem: usage 302824kB, limit 9007199254740988kB, failcnt 0 [ 174.790732][ T8776] Memory cgroup stats for /syz5: [ 174.790805][ T8776] cache 4460544 [ 174.790813][ T8776] rss 8192 [ 174.790819][ T8776] rss_huge 0 [ 174.790825][ T8776] shmem 4460544 [ 174.790832][ T8776] mapped_file 0 [ 174.790838][ T8776] dirty 0 [ 174.790844][ T8776] writeback 0 [ 174.790851][ T8776] workingset_refault_anon 167 [ 174.790857][ T8776] workingset_refault_file 9 [ 174.790864][ T8776] swap 393216 [ 174.790870][ T8776] swapcached 3293184 [ 174.790876][ T8776] pgpgin 142696 [ 174.790882][ T8776] pgpgout 141602 [ 174.790889][ T8776] pgfault 132886 [ 174.790895][ T8776] pgmajfault 128 [ 174.790901][ T8776] inactive_anon 1814528 [ 174.790908][ T8776] active_anon 2404352 [ 174.790914][ T8776] inactive_file 0 [ 174.790920][ T8776] active_file 0 [ 174.790927][ T8776] unevictable 0 [ 174.790933][ T8776] hierarchical_memory_limit 314572800 [ 174.790939][ T8776] hierarchical_memsw_limit 9223372036854771712 [ 174.790946][ T8776] total_cache 4460544 [ 174.790953][ T8776] total_rss 8192 [ 174.790959][ T8776] total_rss_huge 0 [ 174.790965][ T8776] total_shmem 4460544 [ 174.790971][ T8776] total_mapped_file 0 [ 174.790978][ T8776] total_dirty 0 [ 174.790984][ T8776] total_writeback 0 [ 174.790990][ T8776] total_workingset_refault_anon 167 [ 174.790997][ T8776] total_workingset_refault_file 9 [ 174.791003][ T8776] total_swap 393216 [ 174.791010][ T8776] total_swapcached 3293184 [ 174.791016][ T8776] total_pgpgin 142696 [ 174.791022][ T8776] total_pgpgout 141602 [ 174.791028][ T8776] total_pgfault 132886 [ 174.791035][ T8776] total_pgmajfault 128 [ 174.791041][ T8776] total_inactive_anon 1814528 [ 174.791048][ T8776] total_active_anon 2404352 [ 174.791054][ T8776] total_inactive_file 0 [ 174.791060][ T8776] total_active_file 0 [ 174.791067][ T8776] total_unevictable 0 [ 174.791073][ T8776] anon_cost 147 [ 174.791079][ T8776] file_cost 0 [ 174.791086][ T8776] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.307,pid=6350,uid=0 [ 174.792310][ T8776] Memory cgroup out of memory: Killed process 6350 (syz.5.307) total-vm:102176kB, anon-rss:1212kB, file-rss:20484kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 175.663663][ T8776] syz.5.962 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 175.663687][ T8776] CPU: 0 UID: 0 PID: 8776 Comm: syz.5.962 Tainted: G L syzkaller #0 PREEMPT [ 175.663699][ T8776] Tainted: [L]=SOFTLOCKUP [ 175.663702][ T8776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 175.663707][ T8776] Call trace: [ 175.663710][ T8776] show_stack+0x2c/0x3c (C) [ 175.663729][ T8776] __dump_stack+0x30/0x40 [ 175.663739][ T8776] dump_stack_lvl+0xd8/0x12c [ 175.663748][ T8776] dump_stack+0x1c/0x28 [ 175.663758][ T8776] dump_header+0xbc/0x3f0 [ 175.663765][ T8776] oom_kill_process+0x248/0x8a0 [ 175.663774][ T8776] out_of_memory+0xd24/0x1064 [ 175.663782][ T8776] mem_cgroup_out_of_memory+0xe8/0x170 [ 175.663791][ T8776] try_charge_memcg+0x8ec/0xc64 [ 175.663798][ T8776] charge_memcg+0x17c/0x280 [ 175.663804][ T8776] mem_cgroup_swapin_charge_folio+0x2b0/0x3f8 [ 175.663811][ T8776] swap_cache_alloc_folio+0x3f4/0x9a4 [ 175.663820][ T8776] swap_cache_read_folio+0x60/0x220 [ 175.663827][ T8776] swapin_readahead+0x708/0xa8c [ 175.663834][ T8776] do_swap_page+0x28c/0x3ce0 [ 175.663845][ T8776] handle_mm_fault+0x115c/0x253c [ 175.663852][ T8776] do_page_fault+0x77c/0xb88 [ 175.663861][ T8776] do_translation_fault+0xc4/0x114 [ 175.663870][ T8776] do_mem_abort+0x70/0x194 [ 175.663879][ T8776] el0_da+0x78/0x254 [ 175.663889][ T8776] el0t_64_sync_handler+0x10c/0x148 [ 175.663898][ T8776] el0t_64_sync+0x198/0x19c [ 175.663907][ T8776] memory: usage 307200kB, limit 307200kB, failcnt 1056 [ 175.663913][ T8776] memory+swap: usage 307420kB, limit 9007199254740988kB, failcnt 0 [ 175.663918][ T8776] kmem: usage 302828kB, limit 9007199254740988kB, failcnt 0 [ 175.663923][ T8776] Memory cgroup stats for /syz5: [ 175.663977][ T8776] cache 4460544 [ 175.663981][ T8776] rss 0 [ 175.663984][ T8776] rss_huge 0 [ 175.663987][ T8776] shmem 4460544 [ 175.663990][ T8776] mapped_file 0 [ 175.663993][ T8776] dirty 0 [ 175.663996][ T8776] writeback 0 [ 175.663999][ T8776] workingset_refault_anon 169 [ 175.664002][ T8776] workingset_refault_file 9 [ 175.664005][ T8776] swap 225280 [ 175.664008][ T8776] swapcached 3301376 [ 175.664011][ T8776] pgpgin 142698 [ 175.664014][ T8776] pgpgout 141605 [ 175.664017][ T8776] pgfault 132886 [ 175.664020][ T8776] pgmajfault 128 [ 175.664023][ T8776] inactive_anon 2371584 [ 175.664027][ T8776] active_anon 2056192 [ 175.664030][ T8776] inactive_file 0 [ 175.664033][ T8776] active_file 0 [ 175.664036][ T8776] unevictable 0 [ 175.664039][ T8776] hierarchical_memory_limit 314572800 [ 175.664042][ T8776] hierarchical_memsw_limit 9223372036854771712 [ 175.664045][ T8776] total_cache 4460544 [ 175.664048][ T8776] total_rss 0 [ 175.664051][ T8776] total_rss_huge 0 [ 175.664054][ T8776] total_shmem 4460544 [ 175.664057][ T8776] total_mapped_file 0 [ 175.664061][ T8776] total_dirty 0 [ 175.664063][ T8776] total_writeback 0 [ 175.664066][ T8776] total_workingset_refault_anon 169 [ 175.664070][ T8776] total_workingset_refault_file 9 [ 175.664073][ T8776] total_swap 225280 [ 175.664076][ T8776] total_swapcached 3301376 [ 175.664079][ T8776] total_pgpgin 142698 [ 175.664082][ T8776] total_pgpgout 141605 [ 175.664085][ T8776] total_pgfault 132886 [ 175.664088][ T8776] total_pgmajfault 128 [ 175.664091][ T8776] total_inactive_anon 2371584 [ 175.664094][ T8776] total_active_anon 2056192 [ 175.664097][ T8776] total_inactive_file 0 [ 175.664100][ T8776] total_active_file 0 [ 175.664103][ T8776] total_unevictable 0 [ 175.664107][ T8776] anon_cost 139 [ 175.664109][ T8776] file_cost 0 [ 175.664113][ T8776] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.962,pid=8776,uid=0 [ 175.664218][ T8776] Memory cgroup out of memory: Killed process 8776 (syz.5.962) total-vm:104608kB, anon-rss:1212kB, file-rss:22756kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:0 [ 176.203300][ T8797] loop1: detected capacity change from 0 to 512 [ 176.273228][ T8797] EXT4-fs (loop1): Test dummy encryption mode enabled [ 176.273258][ T8797] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 176.274208][ T8797] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.966: bad orphan inode 131072 [ 176.274222][ T8797] loop1: lost filesystem error report for type 5 error -117 [ 176.274768][ T8797] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.300297][ T8799] input: syz1 as /devices/virtual/input/input14 [ 176.347030][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.435022][ T8807] __nla_validate_parse: 1 callbacks suppressed [ 176.435059][ T8807] netlink: 180 bytes leftover after parsing attributes in process `syz.5.971'. [ 176.435256][ T8805] 9p: Bad value for 'rfdno' [ 177.014064][ T8809] lo speed is unknown, defaulting to 1000 [ 177.015621][ T8809] xfrm0 speed is unknown, defaulting to 1000 [ 177.090457][ T8816] netlink: 44 bytes leftover after parsing attributes in process `syz.4.972'. [ 177.626503][ T8841] loop3: detected capacity change from 0 to 512 [ 177.628962][ T8841] EXT4-fs (loop3): Test dummy encryption mode enabled [ 177.630527][ T8841] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 177.635848][ T8841] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.981: bad orphan inode 131072 [ 177.638002][ T8841] loop3: lost filesystem error report for type 5 error -117 [ 177.638656][ T8841] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.761774][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.130926][ T8849] netlink: 12 bytes leftover after parsing attributes in process `syz.5.983'. [ 178.186840][ T8857] netlink: 'syz.4.985': attribute type 10 has an invalid length. [ 178.189177][ T8857] team0: Device veth0_vlan failed to register rx_handler [ 178.240937][ T8862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.987'. [ 178.287878][ T8868] fuse: fd is not a fuse device [ 178.340947][ T8871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.989'. [ 178.341606][ T8871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.989'. [ 178.420532][ T8875] loop4: detected capacity change from 0 to 512 [ 178.420843][ T4716] Bluetooth: hci3: unexpected event for opcode 0x200c [ 178.424655][ T8875] EXT4-fs (loop4): Test dummy encryption mode enabled [ 178.426165][ T8875] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 178.511673][ T8875] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.990: bad orphan inode 131072 [ 178.511709][ T8875] loop4: lost filesystem error report for type 5 error -117 [ 178.514440][ T8875] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.530638][ T8879] loop1: detected capacity change from 0 to 512 [ 178.539577][ T8881] lo speed is unknown, defaulting to 1000 [ 178.564939][ T8879] EXT4-fs (loop1): Test dummy encryption mode enabled [ 178.564970][ T8879] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 178.581139][ T8879] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.992: bad orphan inode 131072 [ 178.581167][ T8879] loop1: lost filesystem error report for type 5 error -117 [ 178.584382][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.587725][ T8879] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.598697][ T8881] xfrm0 speed is unknown, defaulting to 1000 [ 178.616511][ T8886] lo speed is unknown, defaulting to 1000 [ 178.653378][ T8888] mmap: syz.4.994 (8888): VmData 37756928 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 178.717784][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.005494][ T8886] xfrm0 speed is unknown, defaulting to 1000 [ 179.278600][ T8927] tmpfs: Unknown parameter '' [ 179.596329][ T8929] loop4: detected capacity change from 0 to 512 [ 179.635600][ T8929] EXT4-fs (loop4): 1 orphan inode deleted [ 179.652794][ T8123] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 179.652848][ T8123] EXT4-fs error (device loop4): ext4_release_dquot:7077: comm kworker/u8:41: Failed to release dquot type 1 [ 179.652862][ T8123] loop4: lost filesystem error report for type 5 error -117 [ 179.678931][ T8929] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.709542][ T8933] loop1: detected capacity change from 0 to 256 [ 179.718493][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.899052][ T4716] Bluetooth: hci0: unexpected cc 0x042d length: 63 > 7 [ 179.899915][ T4716] Bluetooth: hci0: unexpected event for opcode 0x042d [ 180.040262][ T8951] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1013'. [ 180.199890][ T8960] loop4: detected capacity change from 0 to 512 [ 180.200300][ T8960] EXT4-fs: Ignoring removed oldalloc option [ 180.200557][ T8960] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 180.214294][ T8960] EXT4-fs (loop4): 1 orphan inode deleted [ 180.214327][ T8960] EXT4-fs (loop4): 1 truncate cleaned up [ 180.214796][ T8960] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.283216][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.481701][ T8969] loop4: detected capacity change from 0 to 512 [ 180.490142][ T8969] EXT4-fs (loop4): Test dummy encryption mode enabled [ 180.490183][ T8969] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 180.498653][ T8969] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.1017: bad orphan inode 131072 [ 180.498689][ T8969] loop4: lost filesystem error report for type 5 error -117 [ 180.501307][ T8969] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.545532][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.602940][ T8976] netlink: 'syz.4.1019': attribute type 1 has an invalid length. [ 180.602974][ T8976] netlink: 'syz.4.1019': attribute type 2 has an invalid length. [ 180.626751][ T8979] syzkaller0: entered promiscuous mode [ 180.640795][ T8979] syzkaller0: entered allmulticast mode [ 180.846490][ T4716] Bluetooth: hci4: unexpected event for opcode 0x0c7c [ 181.014477][ T30] audit: type=1326 audit(436.891:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8988 comm="syz.4.1023" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbf77fe8 code=0x0 [ 181.095280][ T9001] Cannot find set identified by id 3 to match [ 181.102851][ T9002] Cannot find set identified by id 3 to match [ 181.112317][ T9001] loop4: detected capacity change from 0 to 512 [ 181.114746][ T9004] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 181.142380][ T9001] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 181.189393][ T9001] EXT4-fs (loop4): 1 truncate cleaned up [ 181.189853][ T9001] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.214975][ T9004] loop3: detected capacity change from 0 to 512 [ 181.285308][ T9010] loop3: detected capacity change from 0 to 512 [ 181.289931][ T9010] EXT4-fs (loop3): Test dummy encryption mode enabled [ 181.291708][ T9010] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 181.296050][ T9010] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.1030: bad orphan inode 131072 [ 181.296084][ T9010] loop3: lost filesystem error report for type 5 error -117 [ 181.298606][ T9010] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.345960][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.549362][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.976714][ T9056] fuse: fd is not a fuse device [ 182.009181][ T9064] EXT4-fs (loop3): Test dummy encryption mode enabled [ 182.010864][ T9064] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 182.014562][ T9064] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.1042: bad orphan inode 131072 [ 182.024583][ T9064] loop3: lost filesystem error report for type 5 error -117 [ 182.029548][ T9064] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.031476][ T9059] lo speed is unknown, defaulting to 1000 [ 182.031836][ T9059] xfrm0 speed is unknown, defaulting to 1000 [ 182.172031][ T9068] netlink: 'syz.0.1043': attribute type 2 has an invalid length. [ 182.172066][ T9068] netlink: 'syz.0.1043': attribute type 1 has an invalid length. [ 182.172076][ T9068] netlink: 'syz.0.1043': attribute type 2 has an invalid length. [ 182.172084][ T9068] netlink: 'syz.0.1043': attribute type 2 has an invalid length. [ 182.172156][ T9068] netlink: 'syz.0.1043': attribute type 2 has an invalid length. [ 182.172165][ T9068] netlink: 'syz.0.1043': attribute type 1 has an invalid length. [ 182.172174][ T9068] netlink: 'syz.0.1043': attribute type 2 has an invalid length. [ 182.203201][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.244252][ T9073] loop1: p1 p2 p3 p4 [ 182.244252][ T9073] p1: [ 182.251525][ T9073] loop1: p1 size 16779263 extends beyond EOD, truncated [ 182.261617][ T9073] loop1: p2 size 458752 extends beyond EOD, truncated [ 182.264297][ T9073] loop1: p3 start 3036676096 is beyond EOD, truncated [ 182.264336][ T9073] loop1: p4 start 100663296 is beyond EOD, truncated [ 182.382221][ T7558] udevd[7558]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 182.391723][ T9082] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.392757][ T7743] udevd[7743]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 182.421210][ T9084] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.1048: Directory hole found for htree index block 0 [ 182.421241][ T9084] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 182.426021][ T9084] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 182.426476][ T9084] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.562860][ T9082] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1047: iget: bad i_size value: 2533274857506816 [ 182.563163][ T9082] EXT4-fs (loop1): Remounting filesystem read-only [ 182.567685][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.624111][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.653519][ T9095] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.708328][ T9107] fuse: Bad value for 'fd' [ 182.772510][ T9120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1050'. [ 182.902992][ T9107] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.903165][ T9107] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.265079][ T9107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.286568][ T9107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.586488][ T9122] syz.1.1053 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 183.586532][ T9122] CPU: 0 UID: 0 PID: 9122 Comm: syz.1.1053 Tainted: G L syzkaller #0 PREEMPT [ 183.586547][ T9122] Tainted: [L]=SOFTLOCKUP [ 183.586551][ T9122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 183.586558][ T9122] Call trace: [ 183.586562][ T9122] show_stack+0x2c/0x3c (C) [ 183.586584][ T9122] __dump_stack+0x30/0x40 [ 183.586595][ T9122] dump_stack_lvl+0xd8/0x12c [ 183.586605][ T9122] dump_stack+0x1c/0x28 [ 183.586615][ T9122] dump_header+0xbc/0x3f0 [ 183.586622][ T9122] oom_kill_process+0x248/0x8a0 [ 183.586631][ T9122] out_of_memory+0xd24/0x1064 [ 183.586639][ T9122] mem_cgroup_out_of_memory+0xe8/0x170 [ 183.586648][ T9122] try_charge_memcg+0x8ec/0xc64 [ 183.586656][ T9122] charge_memcg+0x17c/0x280 [ 183.586662][ T9122] mem_cgroup_swapin_charge_folio+0x2b0/0x3f8 [ 183.586670][ T9122] swap_cache_alloc_folio+0x3f4/0x9a4 [ 183.586678][ T9122] swap_cache_read_folio+0x60/0x220 [ 183.586686][ T9122] swapin_readahead+0x708/0xa8c [ 183.586693][ T9122] do_swap_page+0x28c/0x3ce0 [ 183.586704][ T9122] handle_mm_fault+0x115c/0x253c [ 183.586711][ T9122] do_page_fault+0x77c/0xb88 [ 183.586720][ T9122] do_translation_fault+0xc4/0x114 [ 183.586730][ T9122] do_mem_abort+0x70/0x194 [ 183.586738][ T9122] el0_da+0x78/0x254 [ 183.586748][ T9122] el0t_64_sync_handler+0x10c/0x148 [ 183.586757][ T9122] el0t_64_sync+0x198/0x19c [ 183.586778][ T9122] memory: usage 307200kB, limit 307200kB, failcnt 171 [ 183.586788][ T9122] memory+swap: usage 311740kB, limit 9007199254740988kB, failcnt 0 [ 183.586798][ T9122] kmem: usage 302828kB, limit 9007199254740988kB, failcnt 0 [ 183.586806][ T9122] Memory cgroup stats for /syz1: [ 183.586871][ T9122] cache 4460544 [ 183.586878][ T9122] rss 4096 [ 183.586885][ T9122] rss_huge 0 [ 183.586891][ T9122] shmem 4460544 [ 183.586897][ T9122] mapped_file 0 [ 183.586904][ T9122] dirty 0 [ 183.586910][ T9122] writeback 0 [ 183.586916][ T9122] workingset_refault_anon 18 [ 183.586923][ T9122] workingset_refault_file 267 [ 183.586929][ T9122] swap 4648960 [ 183.586936][ T9122] swapcached 4739072 [ 183.586942][ T9122] pgpgin 142159 [ 183.586948][ T9122] pgpgout 141066 [ 183.586955][ T9122] pgfault 172219 [ 183.586961][ T9122] pgmajfault 126 [ 183.586967][ T9122] inactive_anon 2310144 [ 183.586974][ T9122] active_anon 2035712 [ 183.586980][ T9122] inactive_file 0 [ 183.586987][ T9122] active_file 0 [ 183.586993][ T9122] unevictable 0 [ 183.586999][ T9122] hierarchical_memory_limit 314572800 [ 183.587006][ T9122] hierarchical_memsw_limit 9223372036854771712 [ 183.587013][ T9122] total_cache 4460544 [ 183.587019][ T9122] total_rss 4096 [ 183.587025][ T9122] total_rss_huge 0 [ 183.587032][ T9122] total_shmem 4460544 [ 183.587038][ T9122] total_mapped_file 0 [ 183.587044][ T9122] total_dirty 0 [ 183.587051][ T9122] total_writeback 0 [ 183.587057][ T9122] total_workingset_refault_anon 18 [ 183.587064][ T9122] total_workingset_refault_file 267 [ 183.587070][ T9122] total_swap 4648960 [ 183.587077][ T9122] total_swapcached 4739072 [ 183.587083][ T9122] total_pgpgin 142159 [ 183.587089][ T9122] total_pgpgout 141066 [ 183.587096][ T9122] total_pgfault 172219 [ 183.587102][ T9122] total_pgmajfault 126 [ 183.587109][ T9122] total_inactive_anon 2310144 [ 183.587115][ T9122] total_active_anon 2035712 [ 183.587122][ T9122] total_inactive_file 0 [ 183.587128][ T9122] total_active_file 0 [ 183.587134][ T9122] total_unevictable 0 [ 183.587141][ T9122] anon_cost 222 [ 183.587147][ T9122] file_cost 0 [ 183.587154][ T9122] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1053,pid=9122,uid=0 [ 183.587253][ T9122] Memory cgroup out of memory: Killed process 9122 (syz.1.1053) total-vm:113200kB, anon-rss:1216kB, file-rss:30856kB, shmem-rss:0kB, UID:0 pgtables:164kB oom_score_adj:1000 [ 183.932354][ T4716] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 183.932406][ T4716] Bluetooth: hci0: Injecting HCI hardware error event [ 183.933361][ T4716] Bluetooth: hci0: hardware error 0x00 [ 184.122282][ T9095] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.147499][ T8113] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.147561][ T8113] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.147582][ T8113] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.147600][ T8113] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.306918][ T9148] set_capacity_and_notify: 5 callbacks suppressed [ 184.306959][ T9148] loop3: detected capacity change from 0 to 128 [ 184.318069][ T9148] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 184.318671][ T9148] EXT4-fs: failed to create workqueue [ 184.321855][ T9148] EXT4-fs (loop3): mount failed [ 184.442976][ T9159] overlayfs: failed to clone upperpath [ 184.573374][ T9162] loop3: detected capacity change from 0 to 2048 [ 184.609243][ T9095] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.618529][ T9162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.621838][ T30] audit: type=1326 audit(440.602:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9161 comm="syz.3.1061" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d77fe8 code=0x0 [ 184.889067][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.902584][ T9095] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.056770][ T4709] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 185.057092][ T4709] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 185.072119][ T8114] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.076650][ T8114] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.091285][ T8113] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.104068][ T8113] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.153932][ T9203] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1068'. [ 185.245503][ T9217] loop1: detected capacity change from 0 to 1024 [ 185.245870][ T9217] EXT4-fs: inline encryption not supported [ 185.247695][ T9217] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 185.251092][ T9217] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.268077][ T9217] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 185.288327][ T4710] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 185.288590][ T4710] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 185.384927][ T6588] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.452932][ T8113] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.486718][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 185.487582][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 185.488285][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 185.489004][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 185.490346][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 185.581803][ T8113] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.591259][ T9233] lo speed is unknown, defaulting to 1000 [ 185.592718][ T9233] xfrm0 speed is unknown, defaulting to 1000 [ 185.676939][ T8113] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.709536][ T9233] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.711949][ T9233] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.713607][ T9233] bridge_slave_0: entered allmulticast mode [ 185.715403][ T9233] bridge_slave_0: entered promiscuous mode [ 185.717493][ T9233] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.719070][ T9233] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.720914][ T9233] bridge_slave_1: entered allmulticast mode [ 185.722686][ T9233] bridge_slave_1: entered promiscuous mode [ 185.732235][ T9233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.734898][ T9233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.735869][ T9260] fuse: fd is not a fuse device [ 185.744309][ T9233] team0: Port device team_slave_0 added [ 185.746190][ T9233] team0: Port device team_slave_1 added [ 185.756123][ T8113] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.761319][ T50] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 185.765563][ T9233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.765588][ T9233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.765605][ T9233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.766113][ T9233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.766121][ T9233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.766137][ T9233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.776444][ T9233] hsr_slave_0: entered promiscuous mode [ 185.776726][ T9233] hsr_slave_1: entered promiscuous mode [ 185.776914][ T9233] debugfs: 'hsr0' already exists in 'hsr' [ 185.776923][ T9233] Cannot create hsr debugfs directory [ 185.808880][ T9264] validate_nla: 1 callbacks suppressed [ 185.809018][ T9264] netlink: 'syz.5.1087': attribute type 1 has an invalid length. [ 185.818645][ T9264] 8021q: adding VLAN 0 to HW filter on device bond5 [ 185.832276][ T9264] bond5: (slave veth7): Enslaving as an active interface with a down link [ 185.838021][ T9264] bond5: (slave dummy0): making interface the new active one [ 185.838782][ T9264] dummy0: entered promiscuous mode [ 185.839518][ T9264] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 185.842132][ T9264] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1087'. [ 185.853443][ T9264] bond5: (slave dummy0): Releasing active interface [ 185.853476][ T9264] dummy0 (unregistering): left promiscuous mode [ 185.915793][ T9233] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 185.918085][ T9233] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 185.925212][ T9233] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 185.927506][ T9233] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 185.927855][ T9233] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 185.931294][ T9233] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 185.934114][ T8113] bridge_slave_1: left allmulticast mode [ 185.934143][ T8113] bridge_slave_1: left promiscuous mode [ 185.934231][ T8113] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.936999][ T8113] bridge_slave_0: left allmulticast mode [ 185.937013][ T8113] bridge_slave_0: left promiscuous mode [ 185.937077][ T8113] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.010196][ T4716] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 186.018554][ T9275] loop3: detected capacity change from 0 to 1024 [ 186.019177][ T9275] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 186.033484][ T9275] loop3: detected capacity change from 0 to 256 [ 186.036585][ T8113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.045196][ T9275] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1088'. [ 186.060585][ T30] audit: type=1326 audit(442.042:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9276 comm="syz.5.1090" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91f77fe8 code=0x7ffc0000 [ 186.064957][ T30] audit: type=1326 audit(442.042:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9276 comm="syz.5.1090" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91f77fe8 code=0x7ffc0000 [ 186.069796][ T30] audit: type=1326 audit(442.042:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9276 comm="syz.5.1090" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91f77fe8 code=0x7ffc0000 [ 186.074681][ T30] audit: type=1326 audit(442.042:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9276 comm="syz.5.1090" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff91f77fe8 code=0x7ffc0000 [ 186.074702][ T30] audit: type=1326 audit(442.042:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9276 comm="syz.5.1090" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91f77fe8 code=0x7ffc0000 [ 186.084558][ T8113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.110536][ T8113] bond0 (unregistering): Released all slaves [ 186.111236][ T30] audit: type=1326 audit(442.092:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9276 comm="syz.5.1090" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91f77fe8 code=0x7ffc0000 [ 186.111262][ T30] audit: type=1326 audit(442.092:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9276 comm="syz.5.1090" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff91f5aeac code=0x7ffc0000 [ 186.112330][ T30] audit: type=1326 audit(442.092:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9276 comm="syz.5.1090" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff91f5aeac code=0x7ffc0000 [ 186.114437][ T30] audit: type=1326 audit(442.092:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9276 comm="syz.5.1090" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff91f5aeac code=0x7ffc0000 [ 186.115959][ T9233] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 186.121593][ T30] audit: type=1326 audit(442.102:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9276 comm="syz.5.1090" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff91f5aeac code=0x7ffc0000 [ 186.122778][ T9233] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 186.189745][ T8113] tipc: Left network mode [ 186.203390][ T9233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.209709][ T9233] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.216872][ T8114] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.217028][ T8114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.219722][ T8114] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.219748][ T8114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.388561][ T4399] 8021q: adding VLAN 0 to HW filter on device eth4 [ 186.424988][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 186.427865][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 186.429948][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 186.433140][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 186.435375][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 186.505353][ T9315] lo speed is unknown, defaulting to 1000 [ 186.505886][ T9315] xfrm0 speed is unknown, defaulting to 1000 [ 186.512520][ T9233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.688754][ T8113] hsr_slave_0: left promiscuous mode [ 186.689038][ T8113] hsr_slave_1: left promiscuous mode [ 186.689678][ T8113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.694238][ T8113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.769142][ T8113] team0 (unregistering): Port device team_slave_1 removed [ 186.775551][ T8113] team0 (unregistering): Port device team_slave_0 removed [ 186.828561][ T9356] loop3: detected capacity change from 0 to 1024 [ 186.845510][ T9356] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.879623][ T4399] 8021q: adding VLAN 0 to HW filter on device eth5 [ 186.897694][ T9356] overlayfs: failed lookup in lower (/, name='file0', err=-40): overlapping layers [ 186.916325][ T9317] lo speed is unknown, defaulting to 1000 [ 186.917355][ T9317] xfrm0 speed is unknown, defaulting to 1000 [ 186.933611][ T9233] veth0_vlan: entered promiscuous mode [ 186.956441][ T9233] veth1_vlan: entered promiscuous mode [ 186.960748][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.968966][ T9233] veth0_macvtap: entered promiscuous mode [ 186.972647][ T9233] veth1_macvtap: entered promiscuous mode [ 186.974155][ T9362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1098'. [ 186.980631][ T9233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.984033][ T9233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.987774][ T8119] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.987852][ T8119] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.987877][ T8119] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.987899][ T8119] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.037611][ T9367] loop3: detected capacity change from 0 to 256 [ 187.072620][ T8112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.072647][ T8112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.152987][ T8112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.153018][ T8112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.390394][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.390942][ T1595] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 187.530747][ T4716] Bluetooth: hci1: command tx timeout [ 187.545949][ T8113] IPVS: stop unused estimator thread 0... [ 187.568282][ T4399] 8021q: adding VLAN 0 to HW filter on device eth6 [ 187.578086][ T9317] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.586468][ T9317] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.586602][ T9317] bridge_slave_0: entered allmulticast mode [ 187.593188][ T9317] bridge_slave_0: entered promiscuous mode [ 187.596688][ T9411] lo speed is unknown, defaulting to 1000 [ 187.597142][ T9411] xfrm0 speed is unknown, defaulting to 1000 [ 187.605625][ T9317] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.607345][ T9317] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.609051][ T9317] bridge_slave_1: entered allmulticast mode [ 187.619714][ T9417] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1106'. [ 187.629449][ T9416] dlm: non-version read from control device 240 [ 187.630813][ T9317] bridge_slave_1: entered promiscuous mode [ 187.643299][ T9419] loop3: detected capacity change from 0 to 512 [ 187.644158][ T9419] ext4: Unknown parameter 'noacl' [ 187.668736][ T9317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.674998][ T9416] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 187.680539][ T9317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.731683][ T9317] team0: Port device team_slave_0 added [ 187.733612][ T9317] team0: Port device team_slave_1 added [ 187.771456][ T9426] loop3: detected capacity change from 0 to 1024 [ 187.772041][ T9317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.772052][ T9317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.772069][ T9317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.772612][ T9317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.772619][ T9317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.772634][ T9317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.792001][ T9426] EXT4-fs: Ignoring removed bh option [ 187.793553][ T9426] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 187.843714][ T9426] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.857713][ T9426] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 187.857730][ T9426] overlayfs: failed to set xattr on upper [ 187.857737][ T9426] overlayfs: ...falling back to redirect_dir=nofollow. [ 187.857743][ T9426] overlayfs: ...falling back to uuid=null. [ 187.872596][ T8113] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.874927][ T8113] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.887242][ T9426] Bluetooth: MGMT ver 1.23 [ 187.900355][ T9317] hsr_slave_0: entered promiscuous mode [ 187.900857][ T9317] hsr_slave_1: entered promiscuous mode [ 187.901186][ T9317] debugfs: 'hsr0' already exists in 'hsr' [ 187.901291][ T9317] Cannot create hsr debugfs directory [ 187.995209][ T4715] EXT4-fs error (device loop3): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /212/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 188.207439][ T4715] EXT4-fs (loop3): Remounting filesystem read-only [ 188.216246][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.263255][ T9447] loop3: detected capacity change from 0 to 256 [ 188.266625][ T9447] /dev/loop3: Can't open blockdev [ 188.284281][ T8113] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.284319][ T8113] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.293470][ T4399] 8021q: adding VLAN 0 to HW filter on device eth7 [ 188.380595][ T8113] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.380637][ T8113] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.411112][ T9317] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 188.418515][ T9317] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 188.422943][ T9317] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 188.427355][ T9459] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1117'. [ 188.429336][ T9317] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 188.431923][ T9459] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1117'. [ 188.434017][ T9317] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 188.437499][ T9317] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 188.437827][ T9317] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 188.441769][ T9317] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 188.448442][ T9460] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1117'. [ 188.473744][ T8113] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.473784][ T8113] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.480394][ T4716] Bluetooth: hci0: command tx timeout [ 188.510480][ T9317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.517121][ T9317] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.523165][ T8114] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.523210][ T8114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.527759][ T8114] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.527806][ T8114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.589394][ T8113] bridge_slave_1: left allmulticast mode [ 188.589440][ T8113] bridge_slave_1: left promiscuous mode [ 188.589524][ T8113] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.593728][ T8113] bridge_slave_0: left allmulticast mode [ 188.593757][ T8113] bridge_slave_0: left promiscuous mode [ 188.593821][ T8113] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.046566][ T8113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.073944][ T8113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.104434][ T8113] bond0 (unregistering): Released all slaves [ 189.107135][ T8113] bond1 (unregistering): Released all slaves [ 189.158466][ T9498] lo speed is unknown, defaulting to 1000 [ 189.191053][ T9498] xfrm0 speed is unknown, defaulting to 1000 [ 189.311556][ T9506] loop3: detected capacity change from 0 to 256 [ 189.517296][ T9536] overlayfs: failed to clone upperpath [ 189.520799][ T9490] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 189.520836][ T9490] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 189.535031][ T9317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.540276][ T9490] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 189.540303][ T9490] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 189.659899][ T4716] Bluetooth: hci1: command tx timeout [ 189.869643][ T4716] Bluetooth: hci4: command 0x0c1a tx timeout [ 190.218684][ T9549] syz.3.1133 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 190.218730][ T9549] CPU: 1 UID: 0 PID: 9549 Comm: syz.3.1133 Tainted: G L syzkaller #0 PREEMPT [ 190.218745][ T9549] Tainted: [L]=SOFTLOCKUP [ 190.218749][ T9549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 190.218754][ T9549] Call trace: [ 190.218757][ T9549] show_stack+0x2c/0x3c (C) [ 190.218777][ T9549] __dump_stack+0x30/0x40 [ 190.218788][ T9549] dump_stack_lvl+0xd8/0x12c [ 190.218798][ T9549] dump_stack+0x1c/0x28 [ 190.218808][ T9549] dump_header+0xbc/0x3f0 [ 190.218816][ T9549] oom_kill_process+0x248/0x8a0 [ 190.218825][ T9549] out_of_memory+0xd24/0x1064 [ 190.218834][ T9549] mem_cgroup_out_of_memory+0xe8/0x170 [ 190.218843][ T9549] try_charge_memcg+0x8ec/0xc64 [ 190.218850][ T9549] obj_cgroup_charge_pages+0x30/0xb0 [ 190.218861][ T9549] __memcg_kmem_charge_page+0x1e4/0x354 [ 190.218871][ T9549] __alloc_frozen_pages_noprof+0x1ac/0x320 [ 190.218880][ T9549] alloc_pages_mpol+0x1ec/0x3c0 [ 190.218889][ T9549] alloc_frozen_pages_noprof+0xc4/0x10c [ 190.218898][ T9549] alloc_pages_noprof+0x30/0x148 [ 190.218907][ T9549] __vmalloc_node_range_noprof+0xa18/0x105c [ 190.218916][ T9549] __kvmalloc_node_noprof+0x51c/0x7d8 [ 190.218926][ T9549] io_pin_pages+0xb0/0x198 [ 190.218936][ T9549] io_sqe_buffer_register+0x1c0/0xcac [ 190.218946][ T9549] io_sqe_buffers_register+0x2b0/0x714 [ 190.218956][ T9549] __arm64_sys_io_uring_register+0x480/0x148c [ 190.218966][ T9549] invoke_syscall+0x98/0x244 [ 190.218977][ T9549] el0_svc_common+0xec/0x23c [ 190.218987][ T9549] do_el0_svc+0x4c/0x5c [ 190.218996][ T9549] el0_svc+0x64/0x260 [ 190.219006][ T9549] el0t_64_sync_handler+0x48/0x148 [ 190.219015][ T9549] el0t_64_sync+0x198/0x19c [ 190.219038][ T9549] memory: usage 307200kB, limit 307200kB, failcnt 173 [ 190.219049][ T9549] memory+swap: usage 311856kB, limit 9007199254740988kB, failcnt 0 [ 190.219059][ T9549] kmem: usage 302820kB, limit 9007199254740988kB, failcnt 0 [ 190.219067][ T9549] Memory cgroup stats for /syz3: [ 190.219132][ T9549] cache 4460544 [ 190.219140][ T9549] rss 0 [ 190.219146][ T9549] rss_huge 0 [ 190.219153][ T9549] shmem 4460544 [ 190.219159][ T9549] mapped_file 0 [ 190.219166][ T9549] dirty 0 [ 190.219172][ T9549] writeback 0 [ 190.219179][ T9549] workingset_refault_anon 23 [ 190.219185][ T9549] workingset_refault_file 251 [ 190.219192][ T9549] swap 4767744 [ 190.219198][ T9549] swapcached 4886528 [ 190.219205][ T9549] pgpgin 136128 [ 190.219211][ T9549] pgpgout 135033 [ 190.219218][ T9549] pgfault 157508 [ 190.219224][ T9549] pgmajfault 80 [ 190.219231][ T9549] inactive_anon 2056192 [ 190.219237][ T9549] active_anon 2166784 [ 190.219244][ T9549] inactive_file 0 [ 190.219250][ T9549] active_file 0 [ 190.219257][ T9549] unevictable 0 [ 190.219263][ T9549] hierarchical_memory_limit 314572800 [ 190.219270][ T9549] hierarchical_memsw_limit 9223372036854771712 [ 190.219277][ T9549] total_cache 4460544 [ 190.219284][ T9549] total_rss 0 [ 190.219290][ T9549] total_rss_huge 0 [ 190.219296][ T9549] total_shmem 4460544 [ 190.219303][ T9549] total_mapped_file 0 [ 190.219309][ T9549] total_dirty 0 [ 190.219316][ T9549] total_writeback 0 [ 190.219322][ T9549] total_workingset_refault_anon 23 [ 190.219329][ T9549] total_workingset_refault_file 251 [ 190.219336][ T9549] total_swap 4767744 [ 190.219343][ T9549] total_swapcached 4886528 [ 190.219349][ T9549] total_pgpgin 136128 [ 190.219356][ T9549] total_pgpgout 135033 [ 190.219362][ T9549] total_pgfault 157508 [ 190.219368][ T9549] total_pgmajfault 80 [ 190.219375][ T9549] total_inactive_anon 2056192 [ 190.219382][ T9549] total_active_anon 2166784 [ 190.219388][ T9549] total_inactive_file 0 [ 190.219395][ T9549] total_active_file 0 [ 190.219401][ T9549] total_unevictable 0 [ 190.219408][ T9549] anon_cost 215 [ 190.219414][ T9549] file_cost 0 [ 190.219421][ T9549] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1133,pid=9531,uid=0 [ 190.219525][ T9549] Memory cgroup out of memory: Killed process 9531 (syz.3.1133) total-vm:108904kB, anon-rss:1208kB, file-rss:26696kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 190.590052][ T4711] Bluetooth: hci0: command tx timeout [ 190.955038][ T4399] 8021q: adding VLAN 0 to HW filter on device eth8 [ 191.024530][ T9567] input: syz1 as /devices/virtual/input/input16 [ 191.297292][ T9490] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 191.297326][ T9490] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 191.305428][ T9584] netlink: 'syz.3.1142': attribute type 1 has an invalid length. [ 191.313990][ T9584] bond3: entered promiscuous mode [ 191.314170][ T9584] 8021q: adding VLAN 0 to HW filter on device bond3 [ 191.324321][ T9584] bond3: (slave bridge3): making interface the new active one [ 191.324351][ T9584] bridge3: entered promiscuous mode [ 191.324886][ T9584] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 191.329575][ T9317] veth0_vlan: entered promiscuous mode [ 191.331289][ T9317] veth1_vlan: entered promiscuous mode [ 191.397957][ T9317] veth0_macvtap: entered promiscuous mode [ 191.501621][ T9490] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 191.501650][ T9490] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 191.506663][ T9317] veth1_macvtap: entered promiscuous mode [ 191.521143][ T9317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.522210][ T9317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.634599][ T9612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.679392][ C1] ------------[ cut here ]------------ [ 191.679403][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci1 [ 191.679451][ C1] WARNING: kernel/workqueue.c:2306 at __queue_work+0x1050/0x1440, CPU#1: sed/9609 [ 191.683257][ C1] Modules linked in: [ 191.683916][ C1] CPU: 1 UID: 0 PID: 9609 Comm: sed Tainted: G L syzkaller #0 PREEMPT [ 191.685600][ C1] Tainted: [L]=SOFTLOCKUP [ 191.686343][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 191.688056][ C1] pstate: 634000c5 (nZCv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 191.689411][ C1] pc : __queue_work+0x1050/0x1440 [ 191.690297][ C1] lr : __queue_work+0x1050/0x1440 [ 191.691128][ C1] sp : ffff80008eaf7b40 [ 191.691864][ C1] x29: ffff80008eaf7b70 x28: 0000000000000008 x27: dfff800000000000 [ 191.693209][ C1] x26: ffff0000f6ac71c0 x25: 1fffe0001e7e7af9 x24: 0000000000000101 [ 191.694638][ C1] x23: 0000000000000100 x22: ffff0000f1784a70 x21: ffff0000f6ac7000 [ 191.696097][ C1] x20: ffff80008a117000 x19: ffff0000f1784a58 x18: 1fffe00035bd2e28 [ 191.697550][ C1] x17: ffff800125426000 x16: ffff80008eaf0000 x15: 0000000000000000 [ 191.698931][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 191.700341][ C1] x11: 0000000000000000 x10: 0000000000000103 x9 : 66e67f87033b3800 [ 191.701758][ C1] x8 : 66e67f87033b3800 x7 : ffff80008048ce54 x6 : 0000000000000000 [ 191.703132][ C1] x5 : 0000000000000001 x4 : 0000000000000000 x3 : ffff8000802f7014 [ 191.704551][ C1] x2 : 0000000000000101 x1 : ffff0000f3f3d7c0 x0 : 0000000000000000 [ 191.705962][ C1] Call trace: [ 191.706532][ C1] __queue_work+0x1050/0x1440 (P) [ 191.707398][ C1] delayed_work_timer_fn+0x74/0x94 [ 191.708276][ C1] call_timer_fn+0x194/0xa4c [ 191.709096][ C1] __run_timer_base+0x558/0x744 [ 191.709954][ C1] run_timer_base+0x84/0x1b8 [ 191.710770][ C1] run_timer_softirq+0x20/0x48 [ 191.711597][ C1] handle_softirqs+0x2ec/0xd98 [ 191.712400][ C1] __do_softirq+0x14/0x20 [ 191.713115][ C1] ____do_softirq+0x14/0x20 [ 191.713889][ C1] call_on_irq_stack+0x30/0x48 [ 191.714723][ C1] do_softirq_own_stack+0x20/0x2c [ 191.715595][ C1] __irq_exit_rcu+0x1ac/0x428 [ 191.716379][ C1] irq_exit_rcu+0x14/0x84 [ 191.717176][ C1] el1_interrupt+0x40/0x60 [ 191.717907][ C1] el1h_64_irq_handler+0x18/0x24 [ 191.718788][ C1] el1h_64_irq+0x6c/0x70 [ 191.719476][ C1] preempt_schedule_irq+0x6c/0x174 (P) [ 191.720468][ C1] raw_irqentry_exit_cond_resched+0x30/0x40 [ 191.721456][ C1] irqentry_exit_to_kernel_mode_preempt+0x44/0x54 [ 191.722568][ C1] arm64_exit_to_kernel_mode+0x3c/0x94 [ 191.723530][ C1] el1_interrupt+0x4c/0x60 [ 191.724297][ C1] el1h_64_irq_handler+0x18/0x24 [ 191.725150][ C1] el1h_64_irq+0x6c/0x70 [ 191.725861][ C1] __local_bh_enable_ip+0x1f0/0x35c (P) [ 191.726811][ C1] fpsimd_restore_current_state+0x3a4/0x9c8 [ 191.727797][ C1] exit_to_user_mode_loop+0xe0/0x17c [ 191.728639][ C1] el0_interrupt+0x1ac/0x2c0 [ 191.729402][ C1] __el0_irq_handler_common+0x18/0x24 [ 191.730341][ C1] el0t_64_irq_handler+0x10/0x1c [ 191.731190][ C1] el0t_64_irq+0x198/0x19c [ 191.731957][ C1] irq event stamp: 11501 [ 191.732710][ C1] hardirqs last enabled at (11500): [] _raw_spin_unlock_irq+0x30/0x80 [ 191.734440][ C1] hardirqs last disabled at (11501): [] _raw_spin_lock_irq+0x28/0x70 [ 191.736060][ C1] softirqs last enabled at (11420): [] fpsimd_restore_current_state+0x39c/0x9c8 [ 191.737895][ C1] softirqs last disabled at (11491): [] __do_softirq+0x14/0x20 [ 191.739492][ C1] ---[ end trace 0000000000000000 ]--- [ 191.755224][ T9611] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1145'. [ 191.757437][ T8123] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.757487][ T8123] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.757515][ T8123] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.757542][ T8123] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.773989][ T9607] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1147'. [ 191.862354][ T9490] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 191.862383][ T9490] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 191.880513][ T4399] 8021q: adding VLAN 0 to HW filter on device eth9 [ 192.033814][ T4399] 8021q: adding VLAN 0 to HW filter on device eth10 [ 192.170338][ T4399] 8021q: adding VLAN 0 to HW filter on device eth11 [ 192.211020][ T8123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.211051][ T8123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.227820][ T8123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.227847][ T8123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.432933][ T8113] hsr_slave_0: left promiscuous mode [ 192.434121][ T8113] hsr_slave_1: left promiscuous mode [ 192.434847][ T8113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.434859][ T8113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.439549][ T8113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.440206][ T8113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.462283][ T8113] veth1_macvtap: left promiscuous mode [ 192.463407][ T8113] veth0_macvtap: left promiscuous mode [ 192.464495][ T8113] veth1_vlan: left promiscuous mode [ 192.601994][ T8113] team0 (unregistering): Port device team_slave_1 removed [ 192.607404][ T8113] team0 (unregistering): Port device team_slave_0 removed [ 192.904799][ T8113] IPVS: stop unused estimator thread 0...