last executing test programs: 4.56630784s ago: executing program 1 (id=190): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e22, @loopback}, {0x2, 0x4e23, @local}, 0xe8, 0x0, 0x0, 0x0, 0x5, &(0x7f00000000c0)='pimreg0\x00', 0x278c313, 0x4, 0x8f}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file1\x00', 0x804, &(0x7f0000000880)={[{@iocharset={'iocharset', 0x3d, 'cp932'}}, {@shortname_win95}, {@shortname_lower}, {@uni_xlateno}, {@uni_xlateno}, {@shortname_mixed}, {@rodir}, {@utf8}, {@fat=@time_offset={'time_offset', 0x3d, 0x352}}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@fat=@errors_continue}, {@rodir}, {@utf8}, {@utf8no}, {@utf8no}, {@shortname_lower}, {@utf8no}, {@uni_xlate}]}, 0x1, 0x281, &(0x7f0000000440)="$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") pivot_root(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file1\x00') r1 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000540)='./file2\x00', 0x800, &(0x7f0000000440)=ANY=[], 0x1, 0x1d4, &(0x7f0000000080)="$eJzKKC4sZmdgYPj7sSaZQYABDBgZeBguMDAysDAwMKgzQsQYmCDUeij/BZSeCZW2gfIFoPRCKF1xS3vdmlN+Z0566motk2VmaPXUlkcWk0vtMXKTXMwjwcwQmnpkUXFlVXZiTk5qUTELQ8WtJRtOB55gYGFkuKbSLMHp8EeewyFJ00GH6YiPR9aMxhLOSVKaYmxsmQpnz1xnYGDQOMLwaAXzxjrPvMa6wtSpeWl5SVVZVVnzJk7cOLOxs7Fx5cS6qDS/VYwtKS6bmjoZmRy2qAlsZjZUn2SjPeFd+6qHSQ6sPR5+zfsZGBhSmS8ZLyySOrWiauaEL0p/GA2/M9zhKVshoaHhJHFFwqLBhOFIHXuDK0PFreSUBoY0hTDGJDU2sbYtZ+aEMPOzuS1QaEk+wRR6lGPpTAmLA0JVJ39aar51SHSbse2pA9sZnsPHedYU9AkaHZdgcFoo+F8GZExCQ0OZxlqmpbYLvhRp/JXw4mRwymBwt2da1gwNSJaG/wwMDCuhPFmwnoTkFR46mppGKckJDZtivzAwFBgqM2zdw7laoIEBKdpUGBgYtjPC4hYCrsEYo2AUjIJRMApGwSgYBaNgFIyCUTAKRgQABAAA//+XZJVd") syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e04031220"], 0x7) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) socket$inet6(0xa, 0x5, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) pipe2(0x0, 0x0) r6 = memfd_create(0x0, 0x0) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x9) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r8, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) 3.478551688s ago: executing program 1 (id=204): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x48, 0x2, 0x6, 0x301, 0x6c, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x48}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() (async) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f00000004c0)='./file0\x00', 0xa40000, 0x0, 0xfc, 0x0, 0x0) (async) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x14011, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r4 = semget$private(0x0, 0x4000000009, 0x42a) semop(r4, &(0x7f00000002c0)=[{0x0, 0xff}, {0x4, 0x202}, {0x0, 0x8, 0x1000}, {0x0, 0xfff}], 0x4) (async) semop(r4, &(0x7f0000000200), 0x53) (async) semctl$GETNCNT(r4, 0x0, 0xe, 0x0) (async) semctl$IPC_RMID(r4, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) 2.954303336s ago: executing program 2 (id=212): openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='/proc/sys/fs/binfmt_misc/register\x00', &(0x7f00000000c0)='-$%\x00', 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000001, 0x10010, r0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x80010, 0xffffffffffffffff, 0x4baf000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r2, &(0x7f00000001c0), &(0x7f00000001c0)=@buf="91a130", 0x1}, 0x20) socketpair$unix(0x1, 0x2, 0x0, 0x0) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r6, &(0x7f0000000080)="800009e92208a1ce", 0x7b51, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x2000000, @mcast1, 0x9}, 0x1c) r7 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r7, r7, r7}, &(0x7f0000000100)=""/83, 0x53, &(0x7f0000000340)={&(0x7f0000000300)={'sm3\x00'}}) 2.578457649s ago: executing program 1 (id=216): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x81}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lseek(0xffffffffffffffff, 0xd48a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000080)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x40, 0x71, 0x10, 0x12}}, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0xd1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) 2.438997225s ago: executing program 3 (id=217): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mount$binderfs(0x0, &(0x7f0000002c00)='./binderfs\x00', &(0x7f0000002c40), 0x1, &(0x7f0000002cc0)={[{@stats}]}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0, 0x0, 0x0, 0x0, 0x61}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno', 0xa) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0xf}, {0x1, [{@any, 0xbb, 0x80, 0x2, "f329d1", 0x8}]}}}, 0x12) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18, &(0x7f0000000340)={[{@numtail}, {@shortname_win95}, {@utf8no}, {}, {@numtail}, {@rodir}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '1255'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@rodir}, {@shortname_winnt}, {@uni_xlate}, {@fat=@uid}, {@utf8no}, {@shortname_win95}, {@utf8}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp864'}}], [{@smackfshat={'smackfshat', 0x3d, '-#($$:'}}]}, 0x7, 0x2b1, &(0x7f0000000600)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xa0) getdents64(r3, &(0x7f0000001280)=""/4089, 0xff9) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0xff}, {0x1, [{@any, 0x2, 0x6, "41dc6b", 0x10, 0x8, "a04cf2d00f62c5fa3d48f5e88a28991154fbac22fe0209571a86cad3db6da15c226c5940212258ed8501862621ced6d75ad03767710b467f52e28d4b9aaeee908cca995f3811696be09027d65dd95bb62471397e5ec93f57f17f3e54c9947d72f0d80319ed07a9ac75a1c2ef37c242aef4285e96bfbeaf6da10dc822c9444e38c43678db446d3f111bf45532871100634eac1d1735c95084d923c03d60effc49689b316e8dc8083334fd116871b3028e514baf3d037f6e1455f8f2cd642f4daa7fcb96399d3592c63a06983641c87ad0bc84214882b58b014c220c88b8fd1db9b4fb4d414b8dae6102f6abbe0b3a9e4c"}]}}}, 0x102) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = gettid() r6 = syz_open_procfs(r5, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r6, &(0x7f0000000180)='1\x00', 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007"], 0x50}}, 0x90) 2.333429245s ago: executing program 4 (id=218): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="a20c2c6e6f3d000000", @ANYRESHEX=r0, @ANYBLOB=',\x00']) 2.332810948s ago: executing program 4 (id=219): socket(0x2b, 0x80801, 0x1) (async) r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @mcast1, 0x7}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @mcast1, 0x7}, 0x1c) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000002c0)) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)={0x40000009}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x1, 0x1, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x1, 0x1, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000580)={0xa0002008}) socket$nl_sock_diag(0x10, 0x3, 0x4) 2.302038353s ago: executing program 3 (id=221): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") lsm_get_self_attr(0x69, &(0x7f0000000140)={0x0, 0x0, 0x11e, 0xfe, ""/254}, &(0x7f0000000280)=0x11e, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="740000000206050000000000000000000000fffc0e0003006269746d61703a697000000005000400000000000900020073797a31000000002c000780050003001f0000001800018014000240fe80000000000000000000000000001808000840000000120500050002000000050001000600"], 0x74}, 0x1, 0x0, 0x0, 0x4010}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f00000007c0)={[{@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@rodir}, {@shortname_winnt}, {@fat=@check_normal}, {@uni_xlate}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@utf8no}, {@shortname_winnt}, {@rodir}, {@shortname_win95}, {@utf8}, {@utf8no}]}, 0x2, 0x289, &(0x7f00000001c0)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r1, &(0x7f0000001f80)=""/4106, 0x100a) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) fallocate(r2, 0x0, 0x9, 0x10001) copy_file_range(r2, 0x0, r2, &(0x7f00000000c0)=0xae8, 0x863, 0x0) 2.196894s ago: executing program 0 (id=222): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f00000003c0)='\\x 1000', 0x7) 2.145118325s ago: executing program 3 (id=223): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000180)=0x74c, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x6c, 0x2c, 0xd3b, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xc, 0x3}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0xf, 0x1, 0x0, 0x0, {{0x9}, {0x9, 0x4004, 0x2, 0x6, 0x3, 0x1, 0x2}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0xa6, 0x2, 0x7}, {0x8, 0x0, 0x2}}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x410c4}, 0x4880) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x444}) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000800000000000000000000073013b000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r6, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r7, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x53, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/109, 0x20001c34}], 0x1, 0x0) 2.144699234s ago: executing program 0 (id=224): r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, 0x0, &(0x7f0000001000)=0x11) 2.127807814s ago: executing program 0 (id=225): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d000000000000000000000010040000001000000000000009030000000000000061"], 0x0, 0x52}, 0x28) 2.078417221s ago: executing program 0 (id=226): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x50, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000102f4020010000000000000000000000000002200100000000000000000058650000010008"], 0x0) 2.055117239s ago: executing program 0 (id=227): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000d042abc70000010000000fc001de182b27c9c0b32944b382a03072ad3f3d967c225fa000f111e150afd6fafbebd46f92983ed124e72486fba816369da138b948049a3b32c56fe24a8f9690d", @ANYRES32=0x0, @ANYBLOB="0100000000000000240012d681d87f00626f6e640000000014000280050001006af34d9894abee6cfba03eded92c510500000005001b0000000000ad9427090a898c48862e1c8370f3fef2c7a320a1b27823a6f9866fc5888ff2d8a52e2b1c473ffcc7742d595ed863ceef0000000000000000518a950dc6d150cccccefe64a4b834c283e1c646d082725a3586e643b643aa3d3f9410842af50cfcbad2c0708ea16229c2d18441d74e41338ca5b503ce1a25f18ac25b67b4799e782567ff52d419bc4712bd95f4edb5"], 0x44}}, 0x0) 2.045221568s ago: executing program 2 (id=228): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x70bd27, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x1}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) r1 = syz_socket_connect_nvme_tcp() r2 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xab43, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x146) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x10012, r3, 0x1000) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x22, &(0x7f0000000380)={0x0}, 0x1) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth1_to_hsr\x00', &(0x7f0000000000)=@ethtool_channels={0x3c, 0x7fffffff, 0xac, 0x4000000, 0x2, 0x6, 0x8000, 0x5, 0x1}}) 1.688912392s ago: executing program 4 (id=229): r0 = io_uring_setup(0x269, &(0x7f0000000000)={0x0, 0x7527, 0x100, 0x1, 0x233}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5400004811bb22986cac2b45e62abb00060a09040000000000000000020000000900020073797a32000020000900010073797a300000000028000480240001800b00010065787468647200001400028008000440000000d608000640000000011400000011000100"], 0x7c}}, 0x8050) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0x1, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r1, &(0x7f0000000540)={&(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f00000001c0)="475a72fa51ce048eae44a6aa2867e62caa3c451661a8c1cfce9c4fe6fa8b748e033723acec3cfe9a773a21d273428c14be4e0ad6b7080314b6d84ba187691f47d4ea1745259ae6175a4e214a2af444c89ba42593fa", 0x55}, {&(0x7f0000000240)}, {&(0x7f00000002c0)="b0751b011f1684e9c21d09cfc04f41ce8ad3b6b88f9d5dd65752fe7032370f1c72e5438c2d1dbd1d6ff77de31fd9127d631d38eb9b452e1cb558c58e9453a9bbaa7419b114f29c218b4ab626265b1f9ba26d550aa63b07b4e2f0a88b86647cbaab04648d380e8fd2a1a310fd89481d1022cd7df61e340afbd6807337d647075d4903e6970c1cfffb7bdb21ccc923d361d40cf5ad597502fdac419939ef", 0x9d}], 0x3, &(0x7f0000000500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @loopback, @multicast2}}}], 0x20}, 0x40000) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, '\x00', [{}, {}]}, 0x2) r3 = syz_io_uring_setup(0x4b43, &(0x7f0000000080)={0x0, 0xafec, 0x4000, 0x6, 0x145}, &(0x7f0000000280)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000780)=ANY=[@ANYRESHEX], 0xffc9) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000380)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0xa, {0x8000}, 0x1}) socket$unix(0x1, 0x0, 0x0) io_uring_enter(r3, 0x6516, 0x6d93, 0x8, 0x0, 0x0) 1.688042431s ago: executing program 0 (id=230): syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x40, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100001080000000", @ANYRES32, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x7fffffff, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000001c0)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0xa}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="3f00000000000000280012800b00010062726964676500001800028005000700089932350000000c002e000300000003000000281f0ba9bf89a579ef08e72ce4b3113275c99393712d791f3528054215fedb942ee36dc2ff74cc7166fd9268f9"], 0x48}}, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r11 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0x7) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r14, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000007060500000000000000000005000004050001000700"], 0x30}, 0x1, 0x0, 0x0, 0x6e2ad4a38b3c8764}, 0x40000) setuid(r12) 1.686222719s ago: executing program 1 (id=231): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000200100000000000000000000000000006401010200000000000000000000000000000005000000030a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000000ffff89ffffffffff0000000000000000ffffffffffffffffffffff7f0000000000000100000000000000000000000000040a00000000000000000000008040000000000000000008000000000000000001000003000020004400050000000000000000000000000000000000000004d23c0000000a000000ff"], 0xfc}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x1c}}, 0x24004001) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x4}, 0x18, 0x0}, 0xe07e872424db6f0e) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='autogroup\x00') writev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)='-2', 0x2}], 0x1) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r1) sendmsg$IPVS_CMD_DEL_SERVICE(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r6, 0x20, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004880}, 0x10) 1.684552475s ago: executing program 2 (id=232): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a09040000000000000000020000000900010073797a30000000000900020073797a3200000000300004802c0001800c00010062697477697365"], 0x8c}, 0x1, 0x0, 0x0, 0x20008811}, 0x4000890) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 1.549038042s ago: executing program 4 (id=233): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000008000000000000000000000000000000000800010002000000"], 0x20}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f00000000c0)={[{@journal_async_commit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x101}}]}, 0x9, 0x60c, &(0x7f00000001c0)="$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") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$inet6(r2, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="12aa527fa5b1f3ce302683b3717b427fc395b00c5675558c59f5c2fb09dbdbd9db1103275f9329b45f6c76fc50a135850cfdfcd42d42ce2cf0ac09e2fbdd832bd04059ec50095c36e421155099f1bfac65117e48efef93c90ef7f3275d2163e80c78f5936006fa0b61a9db618e869438044d48f9c0bdcd39bdea1e841f0d69c8a49e25e05b5f088be159c8e2a6ae10d020bf72064cc1", 0x96}, {&(0x7f0000000300)="36e7f0bb7501705768a8", 0xa}], 0x2}}], 0x1, 0x40) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800710, &(0x7f0000000280)={[{@noinit_itable}], [{@smackfsdef={'smackfsdef', 0x3d, 'ex\x044\x00\x9f\x190\xcd\xfa:y\xa3\x17\xfdZ\a%h\xf8\x1aw\xd8 YTu\xbb\x14\xa1\xa8\xa5H\xce\x1b\x9c\x16K\x89\xdfi\xc7\xc4\xdb\xf4\xd9\xa2o\x9e6n\xbb\x17^\x10\xb8\x1dr\xdb\x16h\xf6\xa1\xa2K\xeb{(o\x81U\xcbH\x88\x12\x01B\x91\x01\x009\xab>\xaeJ\x93\x90\xeb\'\x0f\n,\x94\xab\x977~\'\xd8\xb6>\x92,\x8e\xd3\x1a[X\xee\x15\xb2\x97\x8b3\xe30\xf8\x8b\xfe\x89\x06\xa0\xce`P\xb0u\xdd\xd4\xd0\xbb\x89\xc0\xec\xfe\xe4\xcc\x8d\xe8\x97-\xa7\xdf\x9e\xac>N\x83\x93\x94L\xb0\xd8\xc8\xbd\x1at\x81\xbc\xf9J\xa9\xd6\xab\x95\x03R\xa2\xd5\xb9Sen2M\xac7\xfa\xf6\x7f\xe0\xc0\x95\x02\xb4\xe1[\xf8\xde7\xf2/'}}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$eJzs3M1rXFUfAODfnXz0K23y9u3b923fVqNVLH4kTfphFy5UFAQVBF3UZUzSWjttpInQlqBRpK4L7sWl4NKVOzeiLsQ/QMGlFIoGoakgRO5XOklm0nx22szzwGTOuffce86595zJmXvm3gBaVm/6J4noioifI6I7j85P0Ju/zUxPDt+anhxOYnb29d+TLN3N6cnhMmm53Y4icrgSUfk4iWeTxfmOX75ybqhaHb1YxPsnzr/bP375ylNnzw+dGT0zemHw5MljRweePjF4fN52dXa1yLY6y9J63dz//tiBfS+9ee3V4VPX3vr+y3Rfew/m62vrcUe3FpXi5XrJetOj9sdsZuG6R5ed2f1hZ004aW9iQViRtohIT1dH1v+7oy1un7zuePGjphYO2FDp/6YtjVdPzQKbWBLNLgHQHOU/+vT7b/mKv+/S4OMecOO5iM4iPDM9OTwzdx2gPSrF8o4NzL83Ik5N/fVZ+oqVXocAAFiFbGzz5ILxX6YSe7P3fK5jVzGH0hMR/4qI3RHx74jYExH/icjS/jci/pdvPNu9zPx7F8QXj38q1+uWeZ2k479nasZ+MzX1L9562orYzqz+Hcnps9XRI8UxORwdW9L4wBJ5fPNCZ8N1teO/9JXmX44FiwJcb88v0M3tZGRoYmi9DsKNDyP2t9erfzI3E5C2gH0RsX9lu95VBs4+/sWBRonuXP8lrMM80+znEY/l538qFtS/lDSYn0zb+InB4/1bozp6pL9sFYv98NPV1xrlv6b6r4P0/G+f3/4XpOj+M8nnazuiWh29OL7yPK7+8knD7zQraP9z0vbfmbyRzVn/+Ha+7NLQxMTFgYjO5JUsXnSWrZEuH7y97aUiXqZP63/4UP3+v7vYJq3//yMibcQHI3Y9EBEPFmV/KCIejohDS9T/u+cfeWeJ+ieRRFPP/0jdz7+59t+T1M7XryLQdu7brxvN2y/v/B+LqeyzNpd9/t3Bcgu4xsMHAAAA94VKRHRFUunLw71dUan09eW/4d8T2yvVsfGJJ06PvXdhJL9HoCc6KuWVru6a66EDyVSxxzw+WFwrLtcfLa4bf9q2LYv3DY9VR5pcd2h1O+b3/yj7f+q3tmaXDthwjefRlrg1ANgUFvb/SpPKAdx9y/kdje8CsDnV6f/1nqEBbEKe1wKtq17//2BBfNH43wgBNoXF/f/XOo+sAzYj439oXfo/tC79H1rSWu7rX32gvFlgycRlEeum2brsO/xbJVA+HmYj89oWt5dEJQt0xT1Q99UEupeTOCK+WnNebetQ5rTH3N3jU/PAIQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPvYPwEAAP//O47fqw==") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) quotactl_fd$Q_QUOTAOFF(r3, 0xffffffff80000300, 0x0, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000100)={0x9, {{0xa, 0x4e23, 0x6, @private2, 0x4}}}, 0x88) 1.540576363s ago: executing program 2 (id=234): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) r3 = io_uring_setup(0x5387, &(0x7f00000000c0)={0x0, 0x59bc, 0x80, 0x1, 0x7a}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x4, 0x20000000000002, 0x7, 0xb596, 0x2, 0xfffffff4, {0x6, 0x1, 0x0, 0x80000000000000ff, 0x3, 0xfffffffffffffffd, 0x4, 0x58, 0x5, 0x2000, 0x9, r5, r6, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0x800f9, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x00\x00'}}]}, 0x0, 0x0, 0x0}) r7 = syz_open_dev$dvb_frontend(&(0x7f0000004a40), 0xf, 0x10000) r8 = syz_open_dev$cec(&(0x7f0000004a80), 0x0, 0x400080) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000004b80)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001540)=[{&(0x7f0000000340)={0x2c, 0x14, 0x200, 0x70bd28, 0x25dfdbfc, "", [@typed={0x8, 0x10c, 0x0, 0x0, @uid}, @typed={0x8, 0xd5, 0x0, 0x0, @pid=r0}, @typed={0xc, 0x14f, 0x0, 0x0, @u64=0x1}]}, 0x2c}, {&(0x7f0000000380)={0x1ac, 0x34, 0x0, 0x70bd28, 0x25dfdbfb, "", [@nested={0xc, 0x5f, 0x0, 0x1, [@typed={0x8, 0x11a, 0x0, 0x0, @uid=0xee00}]}, @generic="e1f8adbe335df6a295ea7706132fcbf6986f063d92e3f8637a3ff103bf6fda54ddda4ef1c6732e1d894cdc8b7b90ef75f782b368a7d5528c548a40d2798d126f2df70afcc2d9e950cf353d9917b9eaedbb8aae461515dc731025366f91a13b740694075a8f5f08cb824cf1cde3c109b437bcfc00d2dfc7c681ec9e0caf32436c26d7712da732678855593f2301c7afe2f736bf5f7e49e8b753ffac1fa8d24d8f79409be6e2ebd4f42c46f423ec38529ae20e31b77f9553fb81762952f3833789a1b1be1944fb913d9e0b80163a1feb024f832922fdec543644527707b18d8d02ab", @nested={0xa9, 0x103, 0x0, 0x1, [@generic="97bae6f56b6bead7829350", @typed={0x8, 0x67, 0x0, 0x0, @pid=r0}, @generic="1da977114d9e30a4b9493391f8357a36b377e32557945433bcda15a085a73510bdc59c872ce232d26ef18b96bf8bf52ba45b9298bd1f25ad3e5d72b052b6678ffd563e95b232b3011857ded750eb2b2fa7a4d5b8d678026f65b07544d0b6e5746f981d4f41", @generic="ec5f3bbe501515f45b2f114f40cca00e39d34b1b7f6f56f2ee4a17100d6c98c6287db16cbe09985d71cfb7021a"]}]}, 0x1ac}, {&(0x7f00000008c0)={0x25c, 0x1d, 0x800, 0x70bd26, 0x25dfdbfd, "", [@generic="26d9650a65a9f787b9372461bb2b041f973711fdb7e0cc3e5d9a325704ab4ab5b73fe7d23083d61be6e27c1da2f0fa547d25cfd96a6f62b3858ccfbfab592ea166904d27763f7cf0f796851b2a22a688c4c3f618a2b3cae667c18b814ed84776d7a6ae02f47041df4ab1ba825e853426e43783abc3c39dcf9e46b45d03ea8d57b76a59e97fca47a77f39f6f2fa731b2f244d66d766d52453241f76abdf7134754e816d3b633143d770cb51467e400149a8d9be10a8e933df73712c1bf51ff35f8e58479df2a170eb1e8646c27f08b50f26d76f0ab0296c7c5d873d047794880166023cf34632752bbaa5bea498025209d6e7", @typed={0x5, 0xb0, 0x0, 0x0, @str='\x00'}, @typed={0x4, 0xb3}, @typed={0x5, 0x2d, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0xcc, 0x0, 0x0, @uid}, @nested={0x6a, 0xd6, 0x0, 0x1, [@nested={0x4, 0x168}, @generic="11c451c9320027803736d94367a21901620199b8eee9d16a110fab70d633cb0dea0079fc22ce6c4d5c59656102e03ddd781da73730a966582da9c96ed465d94bba105e8d60124d9f5ce433117f2da4fac4203d847f9c6471bea74f99bb670746b6e7"]}, @generic="60a5793b1b17e92e80f42065afd0669f545eed64107ef54de43dc896fc0284dba66c6fbe6628bf798dd799ae7fab1210b9f1058fec67d9b7ee6723eed64be3911dc113feb2c84ea79e6beba5e7fa7e6150ec49f57e3e2ea8a1a0b76a4658bee31f7ca538d1a3543a5db24498bc6f3bd893f5c2fb6584a3452926c8aeaa9996092a4da50b5e9e09ef6e73320c356160f0772031c9d892ee9f8f9b7a7a28fa3ee0246c634a56ff9e596d776d4950ec374be2f362de63fed92bff19e165f74b8304c115bbf5258d73b2", @typed={0x8, 0x9c, 0x0, 0x0, @pid=r0}]}, 0x25c}, {&(0x7f0000000b40)={0x1c, 0x2e, 0x1, 0x70bd2a, 0x25dfdbfb, "", [@nested={0xc, 0x141, 0x0, 0x1, [@nested={0x4, 0xe}, @nested={0x4, 0x46}]}]}, 0x1c}, {&(0x7f0000001280)={0x290, 0x11, 0x2, 0x70bd28, 0x25dfdbfd, "", [@nested={0x2c, 0xb9, 0x0, 0x1, [@typed={0x7, 0xd1, 0x0, 0x0, @str='^+\x00'}, @nested={0x4, 0xab}, @nested={0x4, 0x15}, @nested={0x4, 0x151}, @typed={0x14, 0x81, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2e}}]}, @generic="1535868f66a4c20f3b550a1e0c803f3438301e79629db2c1e9cc4d1a782469bb8310edf9ab16e8c5741c129547b6dc3515ea1e67963cf4c3f9e68b156cd97ae58ac3fc06995e6bb1f8807d0da623871d45def256238470e9a4f0d7a413083cdbbc049d07ebc4fb82dba4d8e10a95ca6f7db345549dac1fc3f03c516f009d7c55cadaa0f9b6c2a67a8162413411af202d8e9fdcc68b807ce9679ba644c3c6c61ce09513a46095f068238c1b995f02b25eb892853a468e792c5a661489300a321da20c819e2e6468438ec30f77da51d71c2c31892201d7ac03efeafac0096aaa1cbc4a5a7cb30f293f2bda408571165deb830771089cddbb5a", @typed={0x4, 0xc9}, @generic="bdf65c15c1c103c063dc25fa514aaa0ab9b65b0a5675be7367d9bf1a1a07f81aa8b06c961d5d3b5ed84a4aabf0afa535aff4a58a09b142b9b930478d5eea9f5c90efb66212e5d88493b36a7acb6ba1125970f52dd7ec5fb0337d81f29eff98e3e2d1fb10775392da5a5e0a7e580d4c6f13f0bad56c732d6d57df446d7f11170f74411385bb93a2e2", @typed={0x8, 0xe7, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0xaf, 0x0, 0x0, @uid}, @typed={0x8, 0x152, 0x0, 0x0, @pid}, @generic="afb0c2ca4987175e37667a5a3605ff391c7b9e6267b995e2500605f71752e666e4a59a91e0bb1f68ba67540f2651a14b76f92dc2fd4a9bbdfd27b0e44acc1da0b1", @generic="c8e2c324769ff2cef917d7085e6170936c4e71ce05766433a11693c9cb0bdd1f525d425e5df9ad560b1b78a533d99d8e5886a1c4bf2c28d1b01554ae0f419a69b7e69cc4049be49d79b20bfa0e0a22190f3cdba6f61d777d756c0c2490ceade01fa45fe96431fd491f7a32d7a3c8530a21671e826881a8"]}, 0x290}], 0x5, &(0x7f0000004ac0)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, r6}}}, @rights={{0x38, 0x1, 0x1, [r3, r7, r3, r1, r1, r3, r8, r3, r1, r1]}}], 0x98, 0x44000}, 0x4008800) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0xfffffffffffffec0, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x1}, 0x0, 0x0, 0x7}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x84}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x0, 0x0}, 0x10) sendmmsg$inet(r10, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f00007ce000/0x3000)=nil, 0x3000, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x8205, &(0x7f00000027c0), 0x81, 0x63e, &(0x7f0000000c40)="$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") 508.248989ms ago: executing program 3 (id=235): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f00000003c0)='\\x 1000', 0x7) 298.26104ms ago: executing program 2 (id=236): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800010000000007140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400008000000500050000000514010008"], 0x4a) 233.332888ms ago: executing program 4 (id=237): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x50, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000102f4020010000000000000000000000000002200100000000000000000000000001010008"], 0x0) 232.327199ms ago: executing program 1 (id=238): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x52) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4051}, 0x20008001) recvmsg$can_raw(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x200008d4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40000000004000079104800000000006325f0fe0000000095000000000000001efabe947d3afc75fcc7d53a828be0ff8c238408ad5e5cd04aa19b979d159982b3759b9919d6241bf2bf3ce9993a7bd6c813124cbb42f18dd5cc733756fefe6ba97407457d0c8bb9293bc6d3ca67c2fb30a553bd80bd78b5b4509ec81cd65c01e4bf509dfbe3efa5621cf8cd4d158f54a90f74883dcccecbb886c8a44e7c660f0ea9c77afbe5c7923b9faff85ecdac2cae64111140cd00d7925c916f935ca1034f04036b58291dd24fb8d0cccb7a68750a664331f96b6e546dc640cbd8532706a8b2ffacd4f5bbe392763bc8262e4d9e958318d9ad6e2ec7abd161bd3baf4e020000000000000024d09dd70bced9eb79ebd709fcb7412a26c974613e526b2c9b8a9387460581f02033bba1709a6f040990849eccc8cac902676b3634b61e3a06df30cade3b458c8b6ea610d65d9647da86dc70fad90d0525960dd51d82fea5925ecf3e5803d333a35e9a2fe240e59a46b29f38a915f4020db289329c9440eee3ed29cf514838e2d8fe4f"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) 223.928509ms ago: executing program 3 (id=239): umount2(&(0x7f0000000340)='./file0\x00', 0x1) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e24, 0x20, @loopback, 0xfffffe01}}}, 0x108) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r4, 0x3, 0x0, &(0x7f0000002140)=""/4110, &(0x7f00000000c0)=0x100e) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x4080010) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async, rerun: 64) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) (async) getsockopt$inet6_buf(r3, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3, 0x4e}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x20040040) (async) syz_open_dev$hidraw(&(0x7f0000000300), 0x8, 0x105500) (async) r6 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000400)={0xf0f03f, 0x6e}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000000fe67e1d5f5e73bb111401000000000000000000080003000300000008004b001300000008004a0001000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 174.619773ms ago: executing program 4 (id=240): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) syz_emit_ethernet(0x123, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x115, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x101, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "9c67524ed6ed152d4f775bbc411126513b67aa2818e6f3aeb55bee6ae1049f195705bc8bd9b1085cd41af77353267df8a1d4cecdb01908186ea04e641c89a2ee0432e9c0894a8d7aff0c865e96548d507f048f907320b0f8b1e83b5f1425b63ad9c6adfd09578bbda92c9bd8f57d6efd752a6f20487ebea241d612212e3ccb077a5150c08f56aed6ee45acd4439043886b78cc5562b00bc57cf509d90b02a7bc86919f1b882f556e6aac5e9b93ee545b2b68bd014e2a49c332432ef4adeb61ac418aa4e20ee299f1a8b7a72e985223996b11a8913f3b1c23b10f88c3de28660457a37126fd3b639453"}}}}}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x3, 0x4) r2 = add_key$keyring(&(0x7f00000101c0), &(0x7f0000010180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r2, 0x30}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @multicast2, 0x9, 0x1e}}) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) (async, rerun: 64) r7 = socket(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xfffbffff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) (rerun: 64) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r8, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, r9, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r7}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x20000011) (async) readv(r0, &(0x7f0000004000)=[{&(0x7f0000002c40)=""/248, 0xf8}, {&(0x7f0000002d40)=""/168, 0xa8}], 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x201, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x20}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) 101.185235ms ago: executing program 1 (id=241): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411000000160012000a00037c0248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b551d77f9565b777f41282e", 0xd8}], 0x1}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002b40)={r2, &(0x7f0000001a80), 0x0}, 0x20) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{0x1b, 0x8}, {0x80000001, 0x1}]}, 0x14, 0x2) rt_sigprocmask(0x0, &(0x7f0000000400)={[0xfffff7feffff7ffc]}, 0x0, 0x8) r3 = gettid() tkill(r3, 0x12) setrlimit(0xb, &(0x7f0000000000)) tkill(r3, 0xb) io_pgetevents(0x0, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={[0x2368e8ff]}, 0x8}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x7c, r4, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x881}, 0x11) 101.030346ms ago: executing program 3 (id=242): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x81}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lseek(0xffffffffffffffff, 0xd48a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000080)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x40, 0x71, 0x10, 0x12}}, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0xd1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) 0s ago: executing program 2 (id=243): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000080)={0x28, 0x140f, 0x1, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'cma\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1000000}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}}, 0x40810) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3008048, &(0x7f0000000080), 0x1, 0x485, &(0x7f0000000540)="$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") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.71' (ED25519) to the list of known hosts. syzkaller login: [ 28.687650][ T4701] cgroup: Unknown subsys name 'net' [ 28.857476][ T4701] cgroup: Unknown subsys name 'cpuset' [ 28.859501][ T4701] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.015437][ T4701] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 29.819017][ T4727] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.819364][ T4727] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.819615][ T4727] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.819783][ T4729] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.820223][ T4727] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.820383][ T4727] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.820718][ T4727] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.820930][ T4727] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.829056][ T4729] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.829209][ T4729] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.829296][ T4725] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.829788][ T4727] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.829919][ T4727] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.830017][ T4727] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.830189][ T4727] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.830604][ T4727] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.830816][ T4727] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.833804][ T4726] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.833910][ T4726] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.843946][ T4727] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.844981][ T4727] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.846713][ T4727] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.849113][ T4717] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.854196][ T4727] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.866331][ T4727] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.230672][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.230893][ T4714] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.230960][ T4714] bridge_slave_0: entered allmulticast mode [ 30.231413][ T4714] bridge_slave_0: entered promiscuous mode [ 30.246881][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.246918][ T4713] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.246975][ T4713] bridge_slave_0: entered allmulticast mode [ 30.247371][ T4713] bridge_slave_0: entered promiscuous mode [ 30.248855][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.248933][ T4713] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.248990][ T4713] bridge_slave_1: entered allmulticast mode [ 30.249416][ T4713] bridge_slave_1: entered promiscuous mode [ 30.250180][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.250205][ T4714] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.250259][ T4714] bridge_slave_1: entered allmulticast mode [ 30.250766][ T4714] bridge_slave_1: entered promiscuous mode [ 30.283539][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.285006][ T4712] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.286603][ T4712] bridge_slave_0: entered allmulticast mode [ 30.287052][ T4712] bridge_slave_0: entered promiscuous mode [ 30.287857][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.287877][ T4712] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.287922][ T4712] bridge_slave_1: entered allmulticast mode [ 30.288312][ T4712] bridge_slave_1: entered promiscuous mode [ 30.289786][ T4714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.290725][ T4714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.312455][ T4713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.315992][ T4713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.317205][ T4714] team0: Port device team_slave_0 added [ 30.318504][ T4714] team0: Port device team_slave_1 added [ 30.337187][ T4712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.338109][ T4712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.341618][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.343015][ T4715] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.344591][ T4715] bridge_slave_0: entered allmulticast mode [ 30.346406][ T4715] bridge_slave_0: entered promiscuous mode [ 30.348505][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.349938][ T4715] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.351488][ T4715] bridge_slave_1: entered allmulticast mode [ 30.352560][ T4715] bridge_slave_1: entered promiscuous mode [ 30.361436][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.361463][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.361476][ T4714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.365665][ T4712] team0: Port device team_slave_0 added [ 30.366672][ T4712] team0: Port device team_slave_1 added [ 30.375636][ T4713] team0: Port device team_slave_0 added [ 30.377144][ T4713] team0: Port device team_slave_1 added [ 30.378538][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.379847][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.384311][ T4714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.389519][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.390867][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.390899][ T4712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.395144][ T4715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.403394][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.404865][ T4716] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.406221][ T4716] bridge_slave_0: entered allmulticast mode [ 30.407796][ T4716] bridge_slave_0: entered promiscuous mode [ 30.409737][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.409761][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.409777][ T4712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.411451][ T4715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.414431][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.414439][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.414451][ T4713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.414996][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.415003][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.415014][ T4713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.425400][ T4713] hsr_slave_0: entered promiscuous mode [ 30.425739][ T4713] hsr_slave_1: entered promiscuous mode [ 30.442506][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.443941][ T4716] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.445316][ T4716] bridge_slave_1: entered allmulticast mode [ 30.446739][ T4716] bridge_slave_1: entered promiscuous mode [ 30.457180][ T4715] team0: Port device team_slave_0 added [ 30.458372][ T4715] team0: Port device team_slave_1 added [ 30.466926][ T4714] hsr_slave_0: entered promiscuous mode [ 30.468438][ T4714] hsr_slave_1: entered promiscuous mode [ 30.468641][ T4714] debugfs: 'hsr0' already exists in 'hsr' [ 30.468686][ T4714] Cannot create hsr debugfs directory [ 30.476542][ T4716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.488566][ T4716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.493659][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.493681][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.493694][ T4715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.494224][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.494231][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.494245][ T4715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.513658][ T4712] hsr_slave_0: entered promiscuous mode [ 30.513967][ T4712] hsr_slave_1: entered promiscuous mode [ 30.514147][ T4712] debugfs: 'hsr0' already exists in 'hsr' [ 30.514156][ T4712] Cannot create hsr debugfs directory [ 30.519094][ T4715] hsr_slave_0: entered promiscuous mode [ 30.520433][ T4715] hsr_slave_1: entered promiscuous mode [ 30.521683][ T4715] debugfs: 'hsr0' already exists in 'hsr' [ 30.522729][ T4715] Cannot create hsr debugfs directory [ 30.528970][ T4716] team0: Port device team_slave_0 added [ 30.530939][ T4716] team0: Port device team_slave_1 added [ 30.559935][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.561306][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.563880][ T4716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.577641][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.577664][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.577685][ T4716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.599600][ T4716] hsr_slave_0: entered promiscuous mode [ 30.599930][ T4716] hsr_slave_1: entered promiscuous mode [ 30.600128][ T4716] debugfs: 'hsr0' already exists in 'hsr' [ 30.600138][ T4716] Cannot create hsr debugfs directory [ 30.649137][ T4713] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.652297][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.653959][ T4713] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.656520][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.666692][ T4713] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.668897][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.678747][ T4713] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.681214][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.698618][ T4714] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.701343][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.703071][ T4714] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.705239][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.707972][ T4714] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.708980][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.709619][ T4714] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.710719][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.717894][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.717939][ T4713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.718076][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.718104][ T4713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.728092][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.728135][ T4714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.728204][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.728242][ T4714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.753964][ T4716] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.755018][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.755303][ T4716] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.758553][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.759247][ T4716] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.760691][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.761934][ T4714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.762971][ T4716] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.763857][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.785633][ T4715] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.788441][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.789044][ T4715] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.790307][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.791025][ T4715] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.792679][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.795536][ T1190] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.797799][ T1190] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.799452][ T1190] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.801122][ T1190] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.815578][ T4715] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.817939][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.820086][ T4714] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.822099][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.822126][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.837734][ T4713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.840139][ T1190] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.840177][ T1190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.851310][ T4713] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.853748][ T4712] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.856955][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.861742][ T3597] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.861781][ T3597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.862130][ T3597] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.862148][ T3597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.870595][ T4712] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.872557][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.873518][ T4712] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.874744][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.876407][ T4712] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.878501][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.905780][ T4713] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.905809][ T4713] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.929516][ T4715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.933794][ T4715] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.949493][ T3597] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.949592][ T3597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.950426][ T3597] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.950447][ T3597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.958738][ T4715] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.960661][ T4715] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.964468][ T4716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.980748][ T4716] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.990890][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.990931][ T3296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.991264][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.991299][ T3296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.034181][ T4712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.043136][ T4716] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.074638][ T4712] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.080115][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.080153][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.084418][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.084459][ T3296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.093205][ T4714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.112571][ T4712] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.114569][ T4712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.134273][ T4713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.159541][ T4714] veth0_vlan: entered promiscuous mode [ 31.172811][ T4714] veth1_vlan: entered promiscuous mode [ 31.180011][ T4713] veth0_vlan: entered promiscuous mode [ 31.183010][ T4713] veth1_vlan: entered promiscuous mode [ 31.191554][ T4715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.234532][ T4714] veth0_macvtap: entered promiscuous mode [ 31.242287][ T4713] veth0_macvtap: entered promiscuous mode [ 31.243413][ T4713] veth1_macvtap: entered promiscuous mode [ 31.245283][ T4714] veth1_macvtap: entered promiscuous mode [ 31.249899][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.252338][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.276685][ T99] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.276876][ T99] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.276902][ T99] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.276926][ T99] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.290298][ T4716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.292018][ T3687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.292048][ T3687] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.295410][ T4715] veth0_vlan: entered promiscuous mode [ 31.300837][ T4715] veth1_vlan: entered promiscuous mode [ 31.306839][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.311648][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.322755][ T3597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.324436][ T3597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.324728][ T4712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.337283][ T4716] veth0_vlan: entered promiscuous mode [ 31.350671][ T4716] veth1_vlan: entered promiscuous mode [ 31.359914][ T4715] veth0_macvtap: entered promiscuous mode [ 31.377760][ T4716] veth0_macvtap: entered promiscuous mode [ 31.383719][ T4715] veth1_macvtap: entered promiscuous mode [ 31.389020][ T4716] veth1_macvtap: entered promiscuous mode [ 31.401150][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.402281][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.403243][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.406390][ T3597] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.407025][ T3597] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.407087][ T3597] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.407168][ T3597] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.407221][ T3597] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.412271][ T1190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.412282][ T1190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.420747][ T4714] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.421510][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.436815][ T3296] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.438370][ T3296] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.439924][ T3296] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.458049][ T3597] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.458075][ T3597] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.471497][ T3597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.471524][ T3597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.483646][ T1190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.483680][ T1190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.505866][ T99] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.505890][ T99] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.524994][ T4712] veth0_vlan: entered promiscuous mode [ 31.528192][ T3296] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.531669][ T3597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.531696][ T3597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.544540][ T4712] veth1_vlan: entered promiscuous mode [ 31.554750][ T4712] veth0_macvtap: entered promiscuous mode [ 31.567377][ T3296] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.575390][ T4712] veth1_macvtap: entered promiscuous mode [ 31.584927][ T4894] Zero length message leads to an empty skb [ 31.596513][ T4898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 31.600516][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.603592][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.627287][ T3296] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.635045][ T3296] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.638123][ T3296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.640546][ T3296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.642118][ T3296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.642135][ T3296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.643516][ T3296] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.666431][ T3296] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.666593][ T99] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.666630][ T99] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.869816][ T4911] loop0: detected capacity change from 0 to 256 [ 31.887708][ T50] Bluetooth: hci2: command tx timeout [ 31.888901][ T50] Bluetooth: hci3: command tx timeout [ 31.890117][ T50] Bluetooth: hci4: command tx timeout [ 31.891285][ T50] Bluetooth: hci0: command tx timeout [ 31.980086][ T50] Bluetooth: hci1: command tx timeout [ 32.747482][ T4915] faux_driver vgem: [drm] Unknown color mode 265; guessing buffer size. [ 32.899553][ T4921] 0fc5:1227:bi [ 32.910918][ T4923] loop4: detected capacity change from 0 to 128 [ 32.927191][ T4923] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.715020][ T4935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12'. [ 33.925715][ T4925] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 33.956252][ T4727] Bluetooth: hci0: command tx timeout [ 33.956282][ T4727] Bluetooth: hci4: command tx timeout [ 33.956301][ T4727] Bluetooth: hci3: command tx timeout [ 33.956318][ T4727] Bluetooth: hci2: command tx timeout [ 34.026181][ T50] Bluetooth: hci1: command tx timeout [ 34.074802][ T4957] binder: 4955:4957 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 34.178981][ T4962] loop0: detected capacity change from 0 to 512 [ 34.179276][ T4962] EXT4-fs: Ignoring removed bh option [ 34.179297][ T4962] EXT4-fs: Ignoring removed orlov option [ 34.179306][ T4962] EXT4-fs: quotafile must be on filesystem root [ 34.556545][ T4972] loop1: detected capacity change from 0 to 256 [ 35.354714][ T4712] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 35.390406][ T4980] loop2: detected capacity change from 0 to 128 [ 35.390945][ T4980] ======================================================= [ 35.390945][ T4980] WARNING: The mand mount option has been deprecated and [ 35.390945][ T4980] and is ignored by this kernel. Remove the mand [ 35.390945][ T4980] option from the mount to silence this warning. [ 35.390945][ T4980] ======================================================= [ 35.540629][ T4987] loop4: detected capacity change from 0 to 1024 [ 35.547627][ T4987] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (40992!=35945) [ 35.547696][ T4987] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 35.548499][ T4987] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 35.548602][ T4987] EXT4-fs (loop4): orphan cleanup on readonly fs [ 35.548899][ T4987] Quota error (device loop4): v2_read_file_info: Number of blocks too big for quota file size (134223872 > 6144). [ 35.548958][ T4987] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 35.548972][ T4987] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 35.549306][ T4987] EXT4-fs error (device loop4): ext4_free_blocks:6718: comm syz.4.22: Freeing blocks not in datazone - block = 0, count = 4096 [ 35.549359][ T4987] loop4: lost filesystem error report for type 5 error -117 [ 35.550015][ T4987] EXT4-fs (loop4): 1 truncate cleaned up [ 35.550462][ T4987] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 35.650388][ T5008] netlink: 28 bytes leftover after parsing attributes in process `syz.3.29'. [ 35.674544][ T5008] netlink: 28 bytes leftover after parsing attributes in process `syz.3.29'. [ 35.694455][ T5008] Format for deleting device is "id" (uint). [ 35.698776][ T4712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.026489][ T50] Bluetooth: hci2: command tx timeout [ 36.026506][ T4727] Bluetooth: hci3: command tx timeout [ 36.026535][ T4727] Bluetooth: hci4: command tx timeout [ 36.026563][ T4727] Bluetooth: hci0: command tx timeout [ 36.112520][ T50] Bluetooth: hci1: command tx timeout [ 36.126806][ T5022] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 37.454954][ T5064] loop0: detected capacity change from 0 to 256 [ 37.739578][ T5060] loop2: detected capacity change from 0 to 32768 [ 37.792335][ T5060] loop2: p1 p3 < > [ 37.839264][ T5075] loop1: detected capacity change from 0 to 128 [ 37.920688][ T5079] loop2: detected capacity change from 0 to 512 [ 37.926047][ T5079] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.932999][ T5079] Invalid option length (0) for dns_resolver key [ 37.946645][ T5001] udevd[5001]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 37.949192][ T4704] udevd[4704]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 37.949240][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.994173][ T5088] loop2: detected capacity change from 0 to 8192 [ 38.038593][ T5088] Dev loop2: unable to read partition block 1332580712448 [ 38.039293][ T5088] loop2: RDSK (10166784) unable to read partition table [ 38.039376][ T5088] loop2: partition table beyond EOD, truncated [ 38.039399][ T5088] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 38.107787][ T4718] Bluetooth: hci0: command tx timeout [ 38.107823][ T4718] Bluetooth: hci4: command tx timeout [ 38.107850][ T4718] Bluetooth: hci3: command tx timeout [ 38.109104][ T50] Bluetooth: hci2: command tx timeout [ 38.186559][ T50] Bluetooth: hci1: command tx timeout [ 38.533277][ T5108] netlink: 12 bytes leftover after parsing attributes in process `syz.2.58'. [ 38.544601][ T5108] file system registered [ 38.563886][ T5108] read descriptors [ 38.579889][ T5117] loop0: detected capacity change from 0 to 128 [ 38.593293][ T4716] ffs_data_put(): freeing [ 38.761337][ T5139] loop1: detected capacity change from 0 to 128 [ 38.761674][ T5139] vfat: Unknown parameter 'no' [ 38.788593][ T5148] loop2: detected capacity change from 0 to 256 [ 38.970856][ T5170] loop3: detected capacity change from 0 to 512 [ 38.971524][ T5170] EXT4-fs: Ignoring removed oldalloc option [ 38.974565][ T5170] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 38.980903][ T5170] EXT4-fs (loop3): 1 truncate cleaned up [ 38.983848][ T5170] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.002866][ T5173] bpf getsockopt: ignoring program buffer with optlen=1869770799 (max_optlen=4096) [ 39.020723][ T4714] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.068342][ T5181] Driver unsupported XDP return value 0 on prog (id 22) dev N/A, expect packet loss! [ 39.073920][ T5177] veth2: entered allmulticast mode [ 39.458100][ T5198] loop2: detected capacity change from 0 to 512 [ 39.463398][ T5198] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.86: corrupted in-inode xattr: invalid ea_ino [ 39.463463][ T5198] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 39.465099][ T5198] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.86: couldn't read orphan inode 15 (err -117) [ 39.465120][ T5198] loop2: lost filesystem error report for type 5 error -117 [ 39.465679][ T5198] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.478768][ T5198] syz.2.86 (pid 5198) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 39.496994][ T5198] evm: overlay not supported [ 39.516997][ T5198] overlayfs: orphan index entry (index/00fb1d00010000000000000000000000000000000013000000e3f57f2e, ftype=4000, nlink=2) [ 39.533226][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.572515][ T5202] vfat: Unknown parameter 'shortname5mixed' [ 39.596638][ T5208] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 39.665841][ T5211] netlink: 20 bytes leftover after parsing attributes in process `syz.0.91'. [ 39.849878][ T4716] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 39.903444][ T5220] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.974348][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.976375][ T5227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.95'. [ 40.015130][ T5231] netlink: 20 bytes leftover after parsing attributes in process `syz.2.92'. [ 40.106298][ T5235] EXT4-fs: Ignoring removed bh option [ 40.110948][ T5235] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 40.113234][ T5235] EXT4-fs (loop1): 1 truncate cleaned up [ 40.117514][ T5235] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.173079][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.185725][ T5240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.99'. [ 40.238602][ T5245] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 40.314561][ T5243] ext4: Unknown parameter ' [ 40.314561][ T5243] ' [ 40.317894][ T5248] netlink: 44 bytes leftover after parsing attributes in process `syz.0.95'. [ 40.357719][ T5252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.102'. [ 40.847186][ T30] audit: type=1326 audit(104.830:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5257 comm="syz.1.104" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3d79228 code=0x7ffc0000 [ 40.857594][ T30] audit: type=1326 audit(104.830:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5257 comm="syz.1.104" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3d79228 code=0x7ffc0000 [ 40.862836][ T30] audit: type=1326 audit(104.830:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5257 comm="syz.1.104" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3d79228 code=0x7ffc0000 [ 40.878387][ T30] audit: type=1326 audit(104.830:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5257 comm="syz.1.104" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3d79228 code=0x7ffc0000 [ 40.887705][ T30] audit: type=1326 audit(104.830:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5257 comm="syz.1.104" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb3d79228 code=0x7ffc0000 [ 40.893078][ T30] audit: type=1326 audit(104.830:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5257 comm="syz.1.104" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3d79228 code=0x7ffc0000 [ 40.897686][ T30] audit: type=1326 audit(104.830:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5257 comm="syz.1.104" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3d79228 code=0x7ffc0000 [ 40.902777][ T30] audit: type=1326 audit(104.830:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5257 comm="syz.1.104" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3d79228 code=0x7ffc0000 [ 40.906885][ T30] audit: type=1326 audit(104.830:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5257 comm="syz.1.104" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3d79228 code=0x7ffc0000 [ 40.911448][ T30] audit: type=1326 audit(104.830:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5257 comm="syz.1.104" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb3d79228 code=0x7ffc0000 [ 41.021703][ T5264] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.036972][ T5264] EXT4-fs (loop3): shut down requested (2) [ 41.039549][ T5264] fscrypt (loop3, inode 12): Error -5 getting encryption context [ 41.080220][ T4714] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.112686][ T5275] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 41.271063][ T5286] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (45634!=0) [ 41.271096][ T5286] EXT4-fs (loop0): group descriptors corrupted! [ 41.371530][ T5294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 41.467346][ T5302] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 41.497798][ T5310] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 41.500753][ T5310] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 41.501214][ T5310] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.526224][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.536512][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 41.621828][ T5324] overlay: Unknown parameter 'defcontext' [ 41.633285][ T5326] vfat: Unknown parameter 'nfsonumtail' [ 41.636355][ T5324] netlink: 56 bytes leftover after parsing attributes in process `syz.0.128'. [ 41.641893][ T5326] binder: 5325:5326 tried to acquire reference to desc 0, got 1 instead [ 41.642047][ T5326] binder: 5325:5326 got transaction with unaligned buffers size, 4348 [ 41.642106][ T5326] binder: 5325:5326 transaction call to 5325:0 failed 8/29201/-22, code 0 size 0-0 line 3464 [ 41.705843][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 42.295741][ T5341] FAT-fs (loop4): codepage cp21059 not found [ 43.362393][ T5354] Injecting memory failure for pfn 0x219070 at process virtual address 0x20ffc000 [ 43.366448][ T5352] set_capacity_and_notify: 11 callbacks suppressed [ 43.366462][ T5352] loop4: detected capacity change from 0 to 128 [ 43.369443][ T5354] Memory failure: 0x219070: unhandlable page. [ 43.369473][ T5354] Memory failure: 0x219070: recovery action for get hwpoison page: Ignored [ 43.383379][ T5352] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 43.383685][ T5352] System zones: 1-3, 19-19, 35-36 [ 43.384710][ T5352] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 43.629579][ T4712] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.723580][ T5375] netlink: 'syz.4.144': attribute type 21 has an invalid length. [ 43.723612][ T5375] netlink: 128 bytes leftover after parsing attributes in process `syz.4.144'. [ 43.724005][ T5375] netlink: 'syz.4.144': attribute type 5 has an invalid length. [ 43.724014][ T5375] netlink: 3 bytes leftover after parsing attributes in process `syz.4.144'. [ 43.831350][ T1190] Bluetooth: hci5: Frame reassembly failed (-84) [ 44.232210][ T5391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 44.591970][ T5395] netlink: 136 bytes leftover after parsing attributes in process `syz.1.151'. [ 44.666233][ T5401] loop1: detected capacity change from 0 to 2048 [ 44.678643][ T5399] syz.3.150 uses obsolete (PF_INET,SOCK_PACKET) [ 44.703526][ T5401] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.776621][ T5413] overlayfs: failed to resolve './file2': -2 [ 44.778438][ T5414] loop4: detected capacity change from 0 to 128 [ 44.786431][ T5414] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.794191][ T5414] fscrypt (loop4, inode 12): Direct key flag not allowed with different contents and filenames modes [ 44.819663][ T4712] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.055994][ T5446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 45.094407][ T5449] loop0: detected capacity change from 0 to 512 [ 45.096494][ T5449] ext4: Unknown parameter '+!^$' [ 45.160827][ T5449] loop0: detected capacity change from 0 to 4096 [ 45.161170][ T5449] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.166965][ T5449] EXT4-fs (loop0): Test dummy encryption mode enabled [ 45.173388][ T5449] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.202936][ T5400] syz.1.153 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 45.202970][ T5400] CPU: 0 UID: 0 PID: 5400 Comm: syz.1.153 Not tainted syzkaller #0 PREEMPT [ 45.202983][ T5400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 45.202989][ T5400] Call trace: [ 45.202993][ T5400] show_stack+0x2c/0x3c (C) [ 45.203012][ T5400] __dump_stack+0x30/0x40 [ 45.203025][ T5400] dump_stack_lvl+0xd8/0x12c [ 45.203035][ T5400] dump_stack+0x1c/0x28 [ 45.203044][ T5400] dump_header+0xbc/0x3f0 [ 45.203052][ T5400] oom_kill_process+0x248/0x8a0 [ 45.203063][ T5400] out_of_memory+0xd24/0x1064 [ 45.203071][ T5400] mem_cgroup_out_of_memory+0xe8/0x170 [ 45.203083][ T5400] try_charge_memcg+0x8ec/0xc64 [ 45.203090][ T5400] charge_memcg+0x17c/0x280 [ 45.203097][ T5400] mem_cgroup_swapin_charge_folio+0x2b0/0x3f8 [ 45.203105][ T5400] swap_cache_alloc_folio+0x3f4/0x9a4 [ 45.203115][ T5400] swap_cache_read_folio+0x60/0x220 [ 45.203123][ T5400] swapin_readahead+0x708/0xa8c [ 45.203130][ T5400] do_swap_page+0x28c/0x3ce0 [ 45.203138][ T5400] handle_mm_fault+0x10b0/0x2514 [ 45.203145][ T5400] do_page_fault+0x77c/0xb88 [ 45.203156][ T5400] do_translation_fault+0xc4/0x114 [ 45.203165][ T5400] do_mem_abort+0x70/0x194 [ 45.203173][ T5400] el0_da+0x78/0x254 [ 45.203184][ T5400] el0t_64_sync_handler+0xd8/0x104 [ 45.203192][ T5400] el0t_64_sync+0x198/0x19c [ 45.232853][ T5400] memory: usage 307200kB, limit 307200kB, failcnt 3441 [ 45.232888][ T5400] memory+swap: usage 308416kB, limit 9007199254740988kB, failcnt 0 [ 45.232909][ T5400] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 45.232917][ T5400] Memory cgroup stats for /syz1: [ 45.233018][ T5400] cache 12288 [ 45.233023][ T5400] rss 0 [ 45.233027][ T5400] rss_huge 0 [ 45.233031][ T5400] shmem 0 [ 45.233034][ T5400] mapped_file 397312 [ 45.233038][ T5400] dirty 0 [ 45.233042][ T5400] writeback 0 [ 45.233046][ T5400] workingset_refault_anon 14 [ 45.233050][ T5400] workingset_refault_file 37 [ 45.233053][ T5400] swap 1245184 [ 45.233056][ T5400] swapcached 7593984 [ 45.233059][ T5400] pgpgin 23912 [ 45.233062][ T5400] pgpgout 25439 [ 45.233065][ T5400] pgfault 26820 [ 45.233068][ T5400] pgmajfault 15 [ 45.233071][ T5400] inactive_anon 0 [ 45.233074][ T5400] active_anon 0 [ 45.233077][ T5400] inactive_file 0 [ 45.233080][ T5400] active_file 12288 [ 45.233083][ T5400] unevictable 0 [ 45.233086][ T5400] hierarchical_memory_limit 314572800 [ 45.233089][ T5400] hierarchical_memsw_limit 9223372036854771712 [ 45.233092][ T5400] total_cache 12288 [ 45.233095][ T5400] total_rss 0 [ 45.233098][ T5400] total_rss_huge 0 [ 45.233101][ T5400] total_shmem 0 [ 45.233104][ T5400] total_mapped_file 397312 [ 45.233107][ T5400] total_dirty 0 [ 45.233110][ T5400] total_writeback 0 [ 45.233113][ T5400] total_workingset_refault_anon 14 [ 45.233116][ T5400] total_workingset_refault_file 37 [ 45.233119][ T5400] total_swap 1245184 [ 45.233122][ T5400] total_swapcached 7593984 [ 45.233125][ T5400] total_pgpgin 23912 [ 45.233128][ T5400] total_pgpgout 25439 [ 45.233131][ T5400] total_pgfault 26820 [ 45.233134][ T5400] total_pgmajfault 15 [ 45.233137][ T5400] total_inactive_anon 0 [ 45.233140][ T5400] total_active_anon 0 [ 45.233143][ T5400] total_inactive_file 0 [ 45.233146][ T5400] total_active_file 12288 [ 45.233149][ T5400] total_unevictable 0 [ 45.233152][ T5400] anon_cost 2 [ 45.233155][ T5400] file_cost 0 [ 45.233158][ T5400] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.153,pid=5400,uid=0 [ 45.233614][ T5400] Memory cgroup out of memory: Killed process 5400 (syz.1.153) total-vm:102772kB, anon-rss:1220kB, file-rss:23500kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 45.327023][ T4715] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.382112][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.599523][ T5459] Process accounting resumed [ 45.849730][ T50] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 45.849732][ T4727] Bluetooth: hci5: command 0x1003 tx timeout [ 45.919742][ T5499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 46.001645][ T5503] loop4: detected capacity change from 0 to 256 [ 46.024347][ T5503] netlink: 64 bytes leftover after parsing attributes in process `syz.4.184'. [ 46.080079][ T5505] capability: warning: `syz.4.185' uses deprecated v2 capabilities in a way that may be insecure [ 46.164903][ T5517] Injecting memory failure for pfn 0x1384f1 at process virtual address 0x20000000 [ 46.169437][ T5518] loop1: detected capacity change from 0 to 256 [ 46.173904][ T5517] Memory failure: 0x1384f1: Sending SIGBUS to syz.4.187:5517 due to hardware memory corruption [ 46.173988][ T5517] Memory failure: 0x1384f1: recovery action for dirty LRU page: Recovered [ 46.174009][ T5517] Injecting memory failure for pfn 0x219070 at process virtual address 0x20001000 [ 46.174055][ T5517] Memory failure: 0x219070: Sending SIGBUS to syz.4.187:5517 due to hardware memory corruption [ 46.174070][ T5517] Memory failure: 0x219070: recovery action for already poisoned page: Failed [ 46.638733][ T5538] netlink: 'syz.2.197': attribute type 1 has an invalid length. [ 46.647189][ T5527] binder: 5525:5527 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 46.647220][ T5527] binder: 5527 RLIMIT_NICE not set [ 46.678631][ T5544] loop3: detected capacity change from 0 to 1024 [ 46.680004][ T5544] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 46.680121][ T5544] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 46.680140][ T5544] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 46.680188][ T5544] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 46.681180][ T5544] EXT4-fs error (device loop3): ext4_get_journal_inode:5900: inode #17: comm syz.3.199: iget: bad i_size value: 4398046511204 [ 46.681205][ T5544] loop3: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 46.682007][ T5544] EXT4-fs (loop3): no journal found [ 46.690885][ T5538] bond1: entered promiscuous mode [ 46.691044][ T5538] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.703159][ T5544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.703364][ T5544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.707628][ T5544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.709512][ T5544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.716396][ T5544] device-mapper: ioctl: Unable to rename non-existent device, to uuid §$ [ 46.719696][ T5536] loop4: detected capacity change from 0 to 512 [ 46.727884][ T5536] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c02c, mo2=0002] [ 46.728016][ T5536] EXT4-fs (loop4): orphan cleanup on readonly fs [ 46.730791][ T5536] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 46.735190][ T5536] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 46.736553][ T5536] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz.4.195: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 46.742089][ T5536] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 46.742303][ T5536] EXT4-fs (loop4): Remounting filesystem read-only [ 46.742796][ T5536] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.809674][ T5553] netlink: 'syz.2.202': attribute type 2 has an invalid length. [ 47.605421][ T4712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.733408][ T5579] loop4: detected capacity change from 0 to 512 [ 47.744189][ T5579] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.759593][ T5579] tipc: Started in network mode [ 47.759627][ T5579] tipc: Node identity 7f000001, cluster identity 4711 [ 47.759888][ T5579] tipc: New replicast peer: 127.0.0.1 [ 47.760068][ T5579] tipc: Enabled bearer , priority 10 [ 47.770167][ T5579] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 5 (only 1 groups) [ 47.805793][ T4712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.150983][ T5590] netlink: 'syz.3.215': attribute type 1 has an invalid length. [ 48.172936][ T5590] bond1: entered promiscuous mode [ 48.173187][ T5590] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.187766][ T5595] hsr0: entered promiscuous mode [ 48.189131][ T5595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.213'. [ 48.189151][ T5595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.213'. [ 48.189171][ T5595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.213'. [ 48.189840][ T5595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.213'. [ 48.218337][ T5595] hsr_slave_0: left promiscuous mode [ 48.220598][ T5595] hsr_slave_1: left promiscuous mode [ 48.225347][ T5595] hsr0 (unregistering): left promiscuous mode [ 48.233420][ T5590] veth3: entered promiscuous mode [ 48.234620][ T5590] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 48.293779][ T5598] loop3: detected capacity change from 0 to 256 [ 48.373111][ T5601] 9p: Bad value for 'rfdno' [ 48.436162][ T5606] loop3: detected capacity change from 0 to 1024 [ 48.493563][ T5606] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 48.515726][ T5606] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 16: comm syz.3.221: path /52/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 48.521622][ T5606] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm syz.3.221: lblock 0 mapped to illegal pblock 0 (length 6) [ 48.543378][ T4714] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 48.673734][ T5629] netlink: 36 bytes leftover after parsing attributes in process `syz.0.227'. [ 49.034041][ T4473] tipc: Node number set to 2130706433 [ 49.058208][ T5641] netlink: 28 bytes leftover after parsing attributes in process `syz.2.232'. [ 49.064354][ T5641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.232'. [ 49.067535][ T5641] netlink: 28 bytes leftover after parsing attributes in process `syz.2.232'. [ 49.075961][ T24] kernel read not supported for file /video7 (pid: 24 comm: kworker/1:0) [ 49.234656][ T5657] loop4: detected capacity change from 0 to 1024 [ 49.242576][ T5657] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 49.242644][ T5657] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 49.243322][ T5657] jbd2_journal_init_inode: Cannot locate journal superblock [ 49.243330][ T5657] EXT4-fs (loop4): Could not load journal inode [ 50.167013][ T5668] loop2: detected capacity change from 0 to 1024 [ 50.212428][ T5668] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 50.212495][ T5668] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 50.219754][ T5668] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 50.220557][ T5668] EXT4-fs (loop2): orphan cleanup on readonly fs [ 50.225628][ T5668] EXT4-fs error (device loop2): ext4_read_inode_bitmap:169: comm syz.2.234: Inode bitmap for bg 0 marked uninitialized [ 50.225697][ T5668] loop2: lost filesystem error report for type 5 error -117 [ 50.233085][ T5668] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.423271][ T5658] __nla_validate_parse: 2 callbacks suppressed [ 50.423307][ T5658] netlink: 12 bytes leftover after parsing attributes in process `syz.0.230'. [ 50.489846][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.503948][ T5658] netlink: 20 bytes leftover after parsing attributes in process `syz.0.230'. [ 50.504006][ T5658] netlink: 20 bytes leftover after parsing attributes in process `syz.0.230'. [ 50.612763][ T5639] syz.0.230 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 50.616790][ T5722] netlink: 'syz.1.241': attribute type 4 has an invalid length. [ 50.625592][ T5639] CPU: 0 UID: 0 PID: 5639 Comm: syz.0.230 Not tainted syzkaller #0 PREEMPT [ 50.625614][ T5639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 50.625620][ T5639] Call trace: [ 50.625624][ T5639] show_stack+0x2c/0x3c (C) [ 50.625646][ T5639] __dump_stack+0x30/0x40 [ 50.625662][ T5639] dump_stack_lvl+0xd8/0x12c [ 50.625673][ T5639] dump_stack+0x1c/0x28 [ 50.625684][ T5639] dump_header+0xbc/0x3f0 [ 50.625693][ T5639] oom_kill_process+0x248/0x8a0 [ 50.625703][ T5639] out_of_memory+0xd24/0x1064 [ 50.625712][ T5639] mem_cgroup_out_of_memory+0xe8/0x170 [ 50.625721][ T5639] try_charge_memcg+0x8ec/0xc64 [ 50.625729][ T5639] charge_memcg+0x17c/0x280 [ 50.625737][ T5639] mem_cgroup_swapin_charge_folio+0x2b0/0x3f8 [ 50.625745][ T5639] swap_cache_alloc_folio+0x3f4/0x9a4 [ 50.625754][ T5639] swap_cache_read_folio+0x60/0x220 [ 50.625762][ T5639] swapin_readahead+0x708/0xa8c [ 50.625770][ T5639] do_swap_page+0x28c/0x3ce0 [ 50.625777][ T5639] handle_mm_fault+0x10b0/0x2514 [ 50.625785][ T5639] do_page_fault+0x77c/0xb88 [ 50.625795][ T5639] do_translation_fault+0xc4/0x114 [ 50.625804][ T5639] do_mem_abort+0x70/0x194 [ 50.625813][ T5639] el0_da+0x78/0x254 [ 50.625822][ T5639] el0t_64_sync_handler+0xd8/0x104 [ 50.625831][ T5639] el0t_64_sync+0x198/0x19c [ 50.625858][ T5639] memory: usage 307200kB, limit 307200kB, failcnt 353 [ 50.625871][ T5639] memory+swap: usage 307536kB, limit 9007199254740988kB, failcnt 0 [ 50.625887][ T5639] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 50.625898][ T5639] Memory cgroup stats for /syz0: [ 50.625962][ T5639] cache 4096 [ 50.625971][ T5639] rss 0 [ 50.625979][ T5639] rss_huge 0 [ 50.625986][ T5639] shmem 0 [ 50.625993][ T5639] mapped_file 0 [ 50.626000][ T5639] dirty 0 [ 50.626006][ T5639] writeback 0 [ 50.626012][ T5639] workingset_refault_anon 20 [ 50.626019][ T5639] workingset_refault_file 1 [ 50.626026][ T5639] swap 348160 [ 50.626032][ T5639] swapcached 6713344 [ 50.626038][ T5639] pgpgin 24123 [ 50.626045][ T5639] pgpgout 25650 [ 50.626051][ T5639] pgfault 30409 [ 50.626057][ T5639] pgmajfault 15 [ 50.626064][ T5639] inactive_anon 20480 [ 50.626070][ T5639] active_anon 0 [ 50.626076][ T5639] inactive_file 4096 [ 50.626083][ T5639] active_file 0 [ 50.626089][ T5639] unevictable 0 [ 50.626096][ T5639] hierarchical_memory_limit 314572800 [ 50.626102][ T5639] hierarchical_memsw_limit 9223372036854771712 [ 50.626109][ T5639] total_cache 4096 [ 50.626115][ T5639] total_rss 0 [ 50.626122][ T5639] total_rss_huge 0 [ 50.626128][ T5639] total_shmem 0 [ 50.626134][ T5639] total_mapped_file 0 [ 50.626141][ T5639] total_dirty 0 [ 50.626147][ T5639] total_writeback 0 [ 50.626153][ T5639] total_workingset_refault_anon 20 [ 50.626160][ T5639] total_workingset_refault_file 1 [ 50.626167][ T5639] total_swap 348160 [ 50.626173][ T5639] total_swapcached 6713344 [ 50.626179][ T5639] total_pgpgin 24123 [ 50.626186][ T5639] total_pgpgout 25650 [ 50.626192][ T5639] total_pgfault 30409 [ 50.626199][ T5639] total_pgmajfault 15 [ 50.626205][ T5639] total_inactive_anon 20480 [ 50.626212][ T5639] total_active_anon 0 [ 50.626218][ T5639] total_inactive_file 4096 [ 50.626224][ T5639] total_active_file 0 [ 50.626231][ T5639] total_unevictable 0 [ 50.626237][ T5639] anon_cost 0 [ 50.626243][ T5639] file_cost 0 [ 50.626250][ T5639] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.230,pid=5637,uid=0 [ 50.626343][ T5639] Memory cgroup out of memory: Killed process 5637 (syz.0.230) total-vm:106864kB, anon-rss:1208kB, file-rss:27208kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 50.846089][ T5730] loop2: detected capacity change from 0 to 512 [ 50.857425][ T5730] ------------[ cut here ]------------ [ 50.857445][ T5730] EA inode 11 i_nlink=0 [ 50.858925][ T5730] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x480/0x488, CPU#0: syz.2.243/5730 [ 50.861553][ T5730] Modules linked in: [ 50.862244][ T5730] CPU: 0 UID: 0 PID: 5730 Comm: syz.2.243 Not tainted syzkaller #0 PREEMPT [ 50.863871][ T5730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 50.865869][ T5730] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 50.867399][ T5730] pc : ext4_xattr_inode_update_ref+0x480/0x488 [ 50.868435][ T5730] lr : ext4_xattr_inode_update_ref+0x480/0x488 [ 50.869500][ T5730] sp : ffff8000988e6f40 [ 50.870222][ T5730] x29: ffff8000988e6fe0 x28: 0000000000000000 x27: 1fffe0001b636b11 [ 50.871618][ T5730] x26: ffff0000db1b56e0 x25: dfff800000000000 x24: ffff8000988e6f60 [ 50.872996][ T5730] x23: ffff70001311cdec x22: ffff80008a19c000 x21: 0000000000000000 [ 50.874364][ T5730] x20: 0000000000000001 x19: ffff0000db1b56a0 x18: 1fffe00034bb7428 [ 50.875752][ T5730] x17: 0000000000000003 x16: ffff800088b37000 x15: ffff800088bed220 [ 50.877142][ T5730] x14: ffff0001a5dba14c x13: 0000000000000001 x12: 0000000000000000 [ 50.878536][ T5730] x11: ffff80008a5d5e28 x10: 0000000000000003 x9 : 26840050b6d58b00 [ 50.879899][ T5730] x8 : 26840050b6d58b00 x7 : 0000000000000000 x6 : 0000000000000000 [ 50.881238][ T5730] x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff80008015611c [ 50.882639][ T5730] x2 : 0000000000000006 x1 : ffff0000c99d8000 x0 : 0000000000000001 [ 50.883991][ T5730] Call trace: [ 50.884545][ T5730] ext4_xattr_inode_update_ref+0x480/0x488 (P) [ 50.885604][ T5730] ext4_xattr_inode_dec_ref_all+0x7f0/0xb84 [ 50.886661][ T5730] ext4_xattr_delete_inode+0x778/0x900 [ 50.887550][ T5730] ext4_evict_inode+0xa0c/0xfb8 [ 50.888351][ T5730] evict+0x4c0/0x74c [ 50.888961][ T5730] iput+0x8f0/0xc2c [ 50.889564][ T5730] ext4_process_orphan+0x24c/0x2c0 [ 50.890400][ T5730] ext4_orphan_cleanup+0x7d4/0xd20 [ 50.891278][ T5730] ext4_fill_super+0x4628/0x4e14 [ 50.892136][ T5730] get_tree_bdev_flags+0x388/0x43c [ 50.893018][ T5730] get_tree_bdev+0x2c/0x3c [ 50.893782][ T5730] ext4_get_tree+0x28/0x38 [ 50.894497][ T5730] vfs_get_tree+0x90/0x28c [ 50.895186][ T5730] fc_mount+0x24/0xac [ 50.895873][ T5730] do_new_mount+0x2a4/0x538 [ 50.896601][ T5730] path_mount+0x5f0/0xa88 [ 50.897348][ T5730] do_mount+0xe8/0x148 [ 50.898070][ T5730] __arm64_sys_mount+0x33c/0x388 [ 50.898928][ T5730] invoke_syscall+0x98/0x244 [ 50.899703][ T5730] el0_svc_common+0xec/0x23c [ 50.900464][ T5730] do_el0_svc+0x4c/0x5c [ 50.901175][ T5730] el0_svc+0x64/0x260 [ 50.901847][ T5730] el0t_64_sync_handler+0x44/0x104 [ 50.902743][ T5730] el0t_64_sync+0x198/0x19c [ 50.903475][ T5730] irq event stamp: 1646 [ 50.904149][ T5730] hardirqs last enabled at (1645): [] finish_task_switch+0x234/0x858 [ 50.905755][ T5730] hardirqs last disabled at (1646): [] el1_brk64+0x20/0x54 [ 50.907151][ T5730] softirqs last enabled at (1202): [] do_sve_acc+0x32c/0x4b8 [ 50.908635][ T5730] softirqs last disabled at (1200): [] do_sve_acc+0x10c/0x4b8 [ 50.910196][ T5730] ---[ end trace 0000000000000000 ]--- [ 50.956158][ T5730] EXT4-fs (loop2): 1 orphan inode deleted [ 50.956627][ T5730] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.985567][ T4715] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 50.985598][ T4715] CPU: 0 UID: 0 PID: 4715 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT [ 50.985611][ T4715] Tainted: [W]=WARN [ 50.985614][ T4715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 50.985618][ T4715] Call trace: [ 50.985620][ T4715] show_stack+0x2c/0x3c (C) [ 50.985637][ T4715] __dump_stack+0x30/0x40 [ 50.985647][ T4715] dump_stack_lvl+0xd8/0x12c [ 50.985660][ T4715] dump_stack+0x1c/0x28 [ 50.985671][ T4715] dump_header+0xbc/0x3f0 [ 50.985678][ T4715] oom_kill_process+0x248/0x8a0 [ 50.985688][ T4715] out_of_memory+0xd24/0x1064 [ 50.985696][ T4715] mem_cgroup_out_of_memory+0xe8/0x170 [ 50.985705][ T4715] try_charge_memcg+0x8ec/0xc64 [ 50.985712][ T4715] charge_memcg+0x17c/0x280 [ 50.985719][ T4715] mem_cgroup_swapin_charge_folio+0x2b0/0x3f8 [ 50.985727][ T4715] swap_cache_alloc_folio+0x3f4/0x9a4 [ 50.985736][ T4715] swap_cache_read_folio+0x60/0x220 [ 50.985745][ T4715] swapin_readahead+0x964/0xa8c [ 50.985754][ T4715] do_swap_page+0x28c/0x3ce0 [ 50.985762][ T4715] handle_mm_fault+0x10b0/0x2514 [ 50.985769][ T4715] do_page_fault+0x77c/0xb88 [ 50.985779][ T4715] do_translation_fault+0xc4/0x114 [ 50.985788][ T4715] do_mem_abort+0x70/0x194 [ 50.985797][ T4715] el0_da+0x78/0x254 [ 50.985805][ T4715] el0t_64_sync_handler+0xd8/0x104 [ 50.985813][ T4715] el0t_64_sync+0x198/0x19c [ 50.988080][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.004287][ T4715] memory: usage 307200kB, limit 307200kB, failcnt 888 [ 51.004311][ T4715] memory+swap: usage 307536kB, limit 9007199254740988kB, failcnt 0 [ 51.004321][ T4715] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 51.004328][ T4715] Memory cgroup stats for /syz0: [ 51.004381][ T4715] cache 0 [ 51.004386][ T4715] rss 0 [ 51.004390][ T4715] rss_huge 0 [ 51.004393][ T4715] shmem 0 [ 51.004397][ T4715] mapped_file 0 [ 51.004401][ T4715] dirty 0 [ 51.004404][ T4715] writeback 0 [ 51.004408][ T4715] workingset_refault_anon 22 [ 51.004411][ T4715] workingset_refault_file 1 [ 51.004414][ T4715] swap 344064 [ 51.004417][ T4715] swapcached 6721536 [ 51.004420][ T4715] pgpgin 24125 [ 51.004423][ T4715] pgpgout 25652 [ 51.004426][ T4715] pgfault 30411 [ 51.004429][ T4715] pgmajfault 16 [ 51.004432][ T4715] inactive_anon 24576 [ 51.004435][ T4715] active_anon 0 [ 51.004438][ T4715] inactive_file 0 [ 51.004441][ T4715] active_file 0 [ 51.004444][ T4715] unevictable 0 [ 51.004447][ T4715] hierarchical_memory_limit 314572800 [ 51.004451][ T4715] hierarchical_memsw_limit 9223372036854771712 [ 51.004454][ T4715] total_cache 0 [ 51.004457][ T4715] total_rss 0 [ 51.004460][ T4715] total_rss_huge 0 [ 51.004463][ T4715] total_shmem 0 [ 51.004466][ T4715] total_mapped_file 0 [ 51.004469][ T4715] total_dirty 0 [ 51.004472][ T4715] total_writeback 0 [ 51.004475][ T4715] total_workingset_refault_anon 22 [ 51.004478][ T4715] total_workingset_refault_file 1 [ 51.004481][ T4715] total_swap 344064 [ 51.004484][ T4715] total_swapcached 6721536 [ 51.004487][ T4715] total_pgpgin 24125 [ 51.004490][ T4715] total_pgpgout 25652 [ 51.004493][ T4715] total_pgfault 30411 [ 51.004496][ T4715] total_pgmajfault 16 [ 51.004499][ T4715] total_inactive_anon 24576 [ 51.004502][ T4715] total_active_anon 0 [ 51.004505][ T4715] total_inactive_file 0 [ 51.004508][ T4715] total_active_file 0 [ 51.004511][ T4715] total_unevictable 0 [ 51.004514][ T4715] anon_cost 7 [ 51.004517][ T4715] file_cost 0 [ 51.004520][ T4715] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.156,pid=5419,uid=0 [ 51.004575][ T4715] Memory cgroup out of memory: Killed process 5419 (syz.0.156) total-vm:98544kB, anon-rss:1212kB, file-rss:20804kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000