last executing test programs: 25.155962964s ago: executing program 1 (id=107): bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x42}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], 0x48) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x81, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4001af84, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x4810, &(0x7f00000000c0)={[{@init_itable}, {@bsdgroups}, {@nomblk_io_submit}, {@test_dummy_encryption_v1}, {@errors_remount}, {@sysvgroups}, {@noauto_da_alloc}]}, 0x1, 0x4ec, &(0x7f0000000c40)="$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") 19.772628153s ago: executing program 1 (id=116): prctl$PR_SET_TSC(0x1a, 0x1) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x101042, 0x65) pwrite64(r1, &(0x7f0000000000)='2', 0x1, 0x4fed0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="8031050050080000380012800e00010069703665727370616eca235e6cdcce417618fd14910f00000024000280"], 0x58}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) read$FUSE(r0, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f00000001c0)='./file0\x00', 0x8000, &(0x7f0000000a80)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRES8, @ANYRESDEC, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="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", @ANYRES8, @ANYRES32], 0xfd, 0x1e6, &(0x7f0000000880)="$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") mount$9p_fd(0x0, 0x0, 0x0, 0x80, 0x0) fchownat(0xffffffffffffff9c, 0x0, 0xee01, 0xffffffffffffffff, 0x1000) socket$unix(0x1, 0x5, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) keyctl$read(0xb, 0x0, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r0, 0x6f2d, 0x200) fdatasync(r3) 19.167938159s ago: executing program 1 (id=117): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) file_setattr(r3, 0x0, &(0x7f0000000080)={0x88, 0xd9, 0x3, 0xb, 0x57519bea}, 0x18, 0x1000) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) io_setup(0x8, &(0x7f00000001c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 14.87651105s ago: executing program 1 (id=129): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x7, 0x4, 0x800, 0x2b5, 0x20, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f00000000c0)=@framed={{0x66, 0xa, 0x0, 0x0, 0xffffffff, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x7c}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r2, 0x40086e81, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)) mlockall(0x7) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000818) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') r4 = epoll_create1(0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000040)={0x80002009}) preadv(r3, &(0x7f00000006c0)=[{&(0x7f0000000140)=""/197, 0xc5}], 0x1, 0x70, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x15, 0x0, 0xffffffffffffffff, 0x76986b96, '\x00', 0x0, r3, 0x0, 0x1, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0x1e, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8ee}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_val={0x18, 0xb, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x98}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8bb3}, @ldst={0x0, 0x3, 0x4, 0xb, 0x6, 0x40, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x8ab48b9e8a6c96d0}, 0x94) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000180)='},]&&\x00', &(0x7f00000001c0)='GPL\x00', 0x0) 14.493903297s ago: executing program 0 (id=131): r0 = getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x4, 0x36, 0x9, 0x33fb1dc717048ae0}, [@RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_PREFSRC={0x8, 0x7, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4a044}, 0x20004090) syz_usb_connect(0x5, 0x2d, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001440)=ANY=[@ANYBLOB="12010000ab51a0407b05000000000000000109021200012000000009"], 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_pidfd_open(r0, 0x0) setns(r3, 0x24020000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, 0x0, 0x0) recvmmsg(r7, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) r8 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 14.001700111s ago: executing program 1 (id=132): socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b0000000800000020000000ffffffff01000000", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000e8ff000000000000"], 0x50) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r1, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2d, 0x0, &(0x7f0000000100)) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000007c0)='./file0\x00', 0x2300045a, &(0x7f00000003c0)={[{@dioread_lock}, {@noblock_validity}, {@noinit_itable}, {@inlinecrypt}, {@quota}, {@grpjquota, 0x2e}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x8000000}}, {@errors_remount}, {}, {@grpid}], [{@dont_measure}, {@measure}, {@obj_role={'obj_role', 0x3d, '}\\.#\'!:\\*'}}, {@permit_directio}, {@smackfsdef}], 0x2c}, 0x85, 0x4f7, &(0x7f0000000800)="$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") r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448c9, 0x0) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, 0x0, r7, &(0x7f0000000480)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000140)=@sco={0x1f, @none}}) r8 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, 0xffffffffffffffff) 12.886116591s ago: executing program 1 (id=136): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2d, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0xd8263000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "3095b90b396cd8ec", "3499a517a1df1c71496cffeebaabfe5eb548502ce0f59ce4a4af09f0438ece31", "4277dea9", "0cf02f56bec1eb9e"}, 0x38) sendto$inet6(r3, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x40000) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x28, 0x0, 0x1, 0x170bd2b, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x8000) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x1, 0x9, 0x1) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000080)=0x7, 0x9, 0x1) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000240)=r0, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r6], 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 10.321955353s ago: executing program 0 (id=141): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r4 = socket(0xa, 0x3, 0x87) sendto(r4, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) ioctl$int_in(r4, 0x5452, &(0x7f0000000100)=0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_IIF={0x8, 0x3, r6}, @RTA_DST={0x8, 0x1, @remote}, @RTA_SRC={0x8, 0x2, @private=0xa010100}]}, 0x34}}, 0xea5bc50b6199d77e) sendto$inet_nvme_pdu(0xffffffffffffffff, &(0x7f00000001c0)=@data_h2c={{}, 0x0, 0x0, 0x1, 0x0, "cfbf3586"}, 0x80, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000000203020010000000000000050000"], 0x24}, 0x1, 0x0, 0x0, 0x24000804}, 0x4c844) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000540)=@ipv6_newaddrlabel={0x38, 0x48, 0x321, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r8 = syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0xd353, 0x3201, 0x3, 0x19a}, &(0x7f0000000080)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000340)={0x2e, 0xb, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x1, 0x3b7, 0x0, 0x0, 0x1000, 0x7}}}, &(0x7f00000003c0)) 9.144183018s ago: executing program 0 (id=142): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_clone(0x80200, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x200000c0}, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="02002cbd7000fcdbdf250100000024000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e080005000000000008000100", @ANYRES32=r5, @ANYBLOB="0b4b68a2948ef8c6fccadad6ce905c8aacb7a9883b7fa58a166101d8f7adfe5de19cd2cc611ec4c44350b34595464bb4e652"], 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48080) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643df82383c8aa439b5fb356bf79ca9d91c6d03708eac5824d12c85f4a2b92a7367ea7a34bd93137aa675939f5762fd1ea6ecb1a9853516409822c2b8071714a9cc6d4e99320bc47a51a", @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0, 0x3c}, 0x28) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x4, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x90, 0xbbba, 0x0, 0x18, 0x0, {0x8000, 0xca, 0x1}, {0x0, 0xfffffffd}, {0x7, 0xffff0003, 0xffffffff}, {0x7fff}, 0x2, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0xa, 0x2}) 6.110574821s ago: executing program 3 (id=145): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = epoll_create1(0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x80088a02, 0xfffffffffffff29a) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r6 = add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x2, 0x6, 0x590, 0xe0, 0x0, 0x1c0, 0xe0, 0xe0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], [0xff, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x2b, 0x8, 0x1, 0x18}, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x5}, {0xffffffffffffffff, 0x7, 0x1}, {0xffffffffffffffff, 0x23}, 0x6}}}, {{@ipv6={@remote, @mcast2, [0x0, 0x0, 0x0, 0xffffff00], [0xffffff00, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x1}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {}, {0x87, 0x2, 0x1}}}}, {{@uncond, 0x0, 0xa8, 0xf0, 0x48000000}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x14, 0x22, 0x40}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x15}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@loopback, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000200)) r7 = socket(0x28, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth1_macvtap\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x15}}) keyctl$read(0xb, r6, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, 0x0, 0x24044884) close(r4) 6.109298074s ago: executing program 0 (id=146): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='timers\x00') r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xc0) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f0000000000)={0x4, &(0x7f0000000340)=[{0x3a, '\x00', @buffer={"2b9053c646adec80cb505c0537a87849ba764eb0a00b12e3f51b0f01a90c001c", 0x20}, 0x5}, {0x31, '\x00', @buffer={"1a1ce1ba1b497db164fbbfa28dbee2907a2252a194c3c5d8630dd694a849230c", 0x20}, 0x6447}, {0x29, '\x00', @buffer={"7fd5b0696a4b0b9f7831b08a6840564caa0777fc9dbf165f44a334aa38b2e117", 0x20}, 0x9b10}, {0x3e, '\x00', @data, 0x2}]}) 5.868408844s ago: executing program 2 (id=147): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x20040040) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r4, 0x402c542c, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r7, 0x1, 0x70bd2d, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xf, 0x0, @void}, 0x10) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000140)={0x6, 0x5, 0xfffffffb, 0x3, 0xd, "4e51d01d5236922570b08e53c9119bbedc290f"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) 5.658517464s ago: executing program 4 (id=148): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x38b, 0x81, &(0x7f00000001c0), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000000c0), 0x1) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'batadv0\x00', &(0x7f0000000240)=@ethtool_gstrings={0x1b, 0x8}}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000100)={0x80000012}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f00000002c0)='E', 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) close(r1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1db002, 0x100) sendfile(r6, 0xffffffffffffffff, 0x0, 0x60000000000000) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xa0c4}, 0x4000040) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x4e22, @empty=0xac141436}}) 4.633827969s ago: executing program 2 (id=149): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) syz_emit_ethernet(0x36, &(0x7f0000000000)={@multicast, @random="35746cda00", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x0, 0x2c, 0xff, @remote, @local}}}}, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x4000000) write$UHID_INPUT(r4, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4, 0x6b35e9d94325c671, 0xffffffffffffffff, 0x0) 4.588499191s ago: executing program 3 (id=150): set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010000180040003000800"], 0x44}}, 0x20008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff00003e400000000000000000000003000000000200000002"], 0x0, 0x56}, 0x20) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x7, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003e40)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x3, 0x0, 0x0, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSPTLCK(r6, 0x40045431, &(0x7f0000000080)) r7 = ioctl$TIOCGPTPEER(r6, 0x5441, 0x6) ioctl$TIOCCONS(r7, 0x541d) close_range(r5, 0xffffffffffffffff, 0x0) 4.114486717s ago: executing program 4 (id=151): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002180)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0xfffffff9, @local, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000900)}}], 0x1, 0x1) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioprio_get$uid(0x3, 0x0) write$uinput_user_dev(r2, 0x0, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) r6 = syz_io_uring_setup(0x34b8, &(0x7f00000001c0)={0x0, 0x9554, 0x8, 0x3ff, 0x31}, &(0x7f0000000440)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x40}) io_uring_enter(r6, 0x1, 0x1, 0x1, 0x0, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x68802, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 3.69527106s ago: executing program 2 (id=152): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r5 = gettid() r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x14, 0x18, 0x1, 0x70bd29, 0x25dfdbfd, {0x1d, 0x1, 0x4}}, 0x14}}, 0x4c0c8) tkill(r5, 0xb) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 3.627785638s ago: executing program 3 (id=153): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file2\x00', 0x0, &(0x7f0000000300)={[{@grpquota}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x7}}, {@jqfmt_vfsold}]}, 0xff, 0x4f8, &(0x7f0000001040)="$eJzs3c9vG1kdAPCvnThx0uwmC3sABLtld6Ggqk7i7karPUA5IYQqIXoEqQ2JG0Wx4yh2ShN6SM9ckajECY78AZx74s4FwY1LOSDxIwI1SByMZjxJ3dRuoiaxo/jzkUbz3rypv+81nffqbxK/AIbW1YjYjYixiLgXEdPZ9Vx2xK32kdz3fO/R0v7eo6VctFp3/plL25Nr0fFnEley1yxGxA+/G/GT3KtxG9s7a4vVamUzq882axuzje2dG6u1xZXKSmW9XF6YX5j79OYn5TMb6/u1saz0lWd/2P3mz5JuTWVXOsdxltpDLxzGSYxGxPfPI9gAjGTjGRt0R3gj+ewR/yB9/qdjJP1qAgCXWas1Ha3pzjoAcNnl0xxYLl/KcgFTkc+XSu0c3rsxma/WG83r9+tb68vtXNlMFPL3V6uVuSxXOBOFXFKfT8sv6uUj9ZsR8U5E/GJ8Iq2XlurV5UH+xwcAhtiVI+v/f8bb6z8AcMkVB90BAKDvrP8AMHys/wAwfKz/ADB82uv/xKC7AQD0kff/ADB8rP8AMFR+cPt2crT2s8+/Xn6wvbVWf3BjudJYK9W2lkpL9c2N0kq9vpJ+Zk/tuNer1usb8x/H1sOZb200mrON7Z27tfrWevNu+rnedyuF9K7dPowMAOjlnfef/jmXrMifTaRHdOzlUBhoz4Dzlh90B4CBGRl0B4CBsdsXDK9TvMeXHoBLossWvS8pdvsFoVar1Tq/LgHn7NoX5f9hWHXk//0UMAwZ+X8YXvL/MLxardxJ9/yPk94IAFxscvxAj+//fy47/zb75sCPl4/e8eQ8ewUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX28H+v6VsL/CpyOdLpYi3ImImCrn7q9XKXES8HRF/Gi+MJ/X5AfcZADit/N9y2f5f16Y/mnqp6b0rh8WxiPjpr+788uFis7n5x4ix3L/GD643n2TXy/3vPQBwvIN1Oj13vJF/vvdo6eDoZ3/+/p2IKLbj7++Nxf5h/NEYTc/FKETE5L9zWb0t15G7OI3dxxHxhW7jz8VUmgNp73x6NH4S+62+xs+/FD+ftrXPyd/F58+gLzBsnibzz61uz18+rqbn7s9/MZ2hTi+b/5KXWtpP58AX8Q/mv5Ee89/Vk8b4+Pffa5cmXm17HPGl0YiD2Psd889B/FyP+B+dMP5fvvzeB73aWr+OuBbd43fGmm3WNmYb2zs3VmuLK5WVynq5vDC/MPfpzU/Ks2mOerb3avCPz66/3astGf9kj/jFY8b/tROO/zf/u/ejr74m/jc+7BY/H+++Jn6yJn79hPEXJ39X7NWWxF/uMf7jvv7XTxj/2V93Xtk2HAAYnMb2ztpitVrZVFC4+IXkn+wF6EbXwrf7FWssujf9/MP2M32kqdV6o1i9ZoyzyLoBF8HhQx8R/x10ZwAAAAAAAAAAAAAAgK768RtLgx4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAl9f/AwAA///5Y89R") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000340)='\x00\x00\x00\x00', 0x4, 0xffffffffffffffff) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000280)={0x3, 0xfffa, 0x9, 0x8, 0xfd, 0xbc, 0x29}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = inotify_init1(0x0) r6 = inotify_add_watch(r5, &(0x7f0000000200)='.\x00', 0x400) r7 = dup(r5) inotify_rm_watch(r7, r6) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) r9 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000400)={0xf0f000, 0x1}) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}, {}, {0x8, 0x6558, 0x2}}}}}}, 0x0) 3.16250774s ago: executing program 4 (id=154): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x20040040) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r4, 0x402c542c, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r7, 0x1, 0x70bd2d, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r9, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xf, 0x0, @void}, 0x10) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000140)={0x6, 0x5, 0xfffffffb, 0x3, 0xd, "4e51d01d5236922570b08e53c9119bbedc290f"}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 2.750444685s ago: executing program 2 (id=155): socket$packet(0x11, 0x3, 0x300) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x188}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_pidfd_open(r0, 0x0) process_madvise(r4, &(0x7f0000000140)=[{}, {&(0x7f0000000080)="8e417151a0", 0x5}], 0x2, 0x65, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000001600)=0x7, 0x4) r5 = socket(0x11, 0x3, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$RTC_WIE_OFF(r6, 0x7010) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x8040010) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r7) openat$urandom(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, 0x0, 0x48080) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r5, &(0x7f00000001c0)={0x11, 0x0, r8, 0x1, 0x2, 0x6, @broadcast}, 0x14) socket$kcm(0x10, 0x2, 0x0) 2.337753193s ago: executing program 0 (id=156): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x6, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1b, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x4, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x196}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r6, r11, &(0x7f0000000100)={0x0, 0x5bab, 0x891, 0x0, 0x3df}, &(0x7f0000000680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3de5, 0x2000, 0x0, 0x2d5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdbd9, 0x8000, 0x0, 0xa7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x616a, 0x8000, 0x1, 0x39d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa4a5, 0x1000, 0x0, 0x3d2}}], 0x4, &(0x7f0000001940)={0x2e, 0x1c, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x100}, 0x0, 0x0, '\x00', {0x3, 0xc74, 0x0, 0x0}}, &(0x7f00000019c0)) openat(r6, 0x0, 0x0, 0x2) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 2.337215362s ago: executing program 3 (id=157): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_debug_messages', 0x42, 0x0) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='2'], 0x32) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) readlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0xfffffffffffffffe, 0xfe9c) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r5, &(0x7f0000000540)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x40) r6 = dup(r5) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x106, 0x8}}, 0x20) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000180)={0x4, 0xfffffffffffffe4c, 0xfa00, {r8, 0x7}}, 0x45) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r6, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfffd) close_range(r0, 0xffffffffffffffff, 0x0) 2.188588241s ago: executing program 4 (id=158): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x7, 0x80, 0xfffb, 0xfe, "81000000000000000000e0ea00"}) r1 = syz_open_pts(r0, 0x141601) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xfffffffffffffffe) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000100)={0x5, 0x5, 0x5, 0xdcc, 0x15, "89c8eed74faac45d"}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x26) syz_open_procfs(0x0, &(0x7f00000003c0)='net/snmp\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lsetxattr$security_smack_transmute(&(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0x0, 0x0, 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) fcntl$setstatus(r1, 0x4, 0x102800) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="14000200fe80000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0xac2bee7485440606}, 0x4000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x2004a800) 1.385955754s ago: executing program 2 (id=159): set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010000180040003000800"], 0x44}}, 0x20008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSPTLCK(r6, 0x40045431, &(0x7f0000000080)) r7 = ioctl$TIOCGPTPEER(r6, 0x5441, 0x6) ioctl$TIOCCONS(r7, 0x541d) close_range(r5, 0xffffffffffffffff, 0x0) 1.385275851s ago: executing program 3 (id=160): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_dev$usbmon(0x0, 0xde05, 0x8000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r1, 0x838a3000) syz_clone(0x0, 0x0, 0xfffffffffffffe4b, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$int_out(r2, 0x2, &(0x7f0000000240)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) 646.262681ms ago: executing program 4 (id=161): r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x4003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0xd, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = shmget(0x0, 0x1000, 0x2, &(0x7f0000871000/0x1000)=nil) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001a00010000000000000000000a00001b00000000000000"], 0x24}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002b40)=[{&(0x7f0000000080)=""/121, 0x79}], 0x1, 0x5, 0xfffff073) shmctl$IPC_INFO(r7, 0x3, 0x0) r9 = syz_pidfd_open(r3, 0x0) ioctl$FS_IOC_GETVERSION(r9, 0x80087601, &(0x7f0000000000)) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x800, 0x3, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0x8, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) 472.648374ms ago: executing program 0 (id=162): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_setup(0x9, 0x0) syz_open_dev$hidraw(0x0, 0x7fff, 0x400) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x4000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x34, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f003, 0x1}) socket(0x10, 0x2, 0x0) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x87, 0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x2800) socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x50, 0x24, 0xe0b, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x4, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20}}]}, 0x50}}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r5, 0x4bfa, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e02100418"], 0x7) openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0) 197.796406ms ago: executing program 3 (id=163): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x254b068, &(0x7f0000000380)=ANY=[@ANYRESDEC=r2], 0x1, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0x1a1c08, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0/file0/../file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x83) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)={0x44, r3, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xb2, @name2}]}, 0x44}}, 0x0) 160.413486ms ago: executing program 4 (id=164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) openat$rtc(0xffffffffffffff9c, 0x0, 0x8002, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x20000, 0x0) syz_emit_vhci(&(0x7f0000001040)=ANY=[], 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1b, 0x3, &(0x7f00000010c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x7, 0x1, r3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r4}, &(0x7f0000000840), &(0x7f0000000340)=r3}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r7 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001000)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) readv(r7, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/35, 0x23}, {0x0, 0x36}], 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00', 0x0}) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r6, r8, 0x25, 0x4, @val=@tcx}, 0x1c) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000280), &(0x7f00000002c0)='%ps \x00'}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r9, r10, 0x4, r6}, 0x10) r11 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r11, 0x0, 0x0) sendto$inet(r11, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 0s ago: executing program 2 (id=165): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x2, 0x3, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xd, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x4040080) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r8, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f00000002c0), &(0x7f0000000040)=0x8) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000004b40)={&(0x7f0000000bc0)=@newchain={0x24, 0x64, 0x1, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0x2}, {0x10, 0xfff1}, {0xffe0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0xc054) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x408000, {0x0, 0xea60}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.237' (ED25519) to the list of known hosts. [ 28.590512][ T4697] cgroup: Unknown subsys name 'net' [ 28.740443][ T4697] cgroup: Unknown subsys name 'cpuset' [ 28.742519][ T4697] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.911797][ T4697] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 29.655924][ T4713] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.658270][ T4713] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.659842][ T4713] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.682754][ T4722] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.684693][ T4722] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.686030][ T4724] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.686350][ T4724] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.686644][ T4724] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.686816][ T4724] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.687113][ T4724] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.691121][ T4724] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.694423][ T4724] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.694603][ T4724] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.695220][ T4712] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.695457][ T4712] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.696118][ T4712] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.698786][ T4712] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.701280][ T4712] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.703939][ T4712] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.704018][ T4712] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.711995][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.713836][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.715485][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.717460][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.719333][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.058732][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.060629][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.062005][ T4709] bridge_slave_0: entered allmulticast mode [ 30.063559][ T4709] bridge_slave_0: entered promiscuous mode [ 30.067341][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.067382][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.067448][ T4709] bridge_slave_1: entered allmulticast mode [ 30.067867][ T4709] bridge_slave_1: entered promiscuous mode [ 30.108936][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.110931][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.112195][ T4710] bridge_slave_0: entered allmulticast mode [ 30.113620][ T4710] bridge_slave_0: entered promiscuous mode [ 30.122995][ T4709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.128515][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.129400][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.129462][ T4710] bridge_slave_1: entered allmulticast mode [ 30.130132][ T4710] bridge_slave_1: entered promiscuous mode [ 30.139906][ T4709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.150875][ T4710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.165731][ T4710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.169705][ T4720] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.171053][ T4720] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.172320][ T4720] bridge_slave_0: entered allmulticast mode [ 30.173800][ T4720] bridge_slave_0: entered promiscuous mode [ 30.176172][ T4709] team0: Port device team_slave_0 added [ 30.176989][ T4709] team0: Port device team_slave_1 added [ 30.188081][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.189048][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.189071][ T4709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.199361][ T4720] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.200586][ T4720] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.201855][ T4720] bridge_slave_1: entered allmulticast mode [ 30.203362][ T4720] bridge_slave_1: entered promiscuous mode [ 30.204748][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.204788][ T4718] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.204883][ T4718] bridge_slave_0: entered allmulticast mode [ 30.205290][ T4718] bridge_slave_0: entered promiscuous mode [ 30.206343][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.206365][ T4718] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.206412][ T4718] bridge_slave_1: entered allmulticast mode [ 30.206858][ T4718] bridge_slave_1: entered promiscuous mode [ 30.214371][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.214390][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.214415][ T4709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.214731][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.215041][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.215110][ T4711] bridge_slave_0: entered allmulticast mode [ 30.215562][ T4711] bridge_slave_0: entered promiscuous mode [ 30.224415][ T4718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.225401][ T4710] team0: Port device team_slave_0 added [ 30.225519][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.225575][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.225663][ T4711] bridge_slave_1: entered allmulticast mode [ 30.226406][ T4711] bridge_slave_1: entered promiscuous mode [ 30.236627][ T4720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.237844][ T4718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.238664][ T4710] team0: Port device team_slave_1 added [ 30.246284][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.248697][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.250207][ T4720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.262880][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.262907][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.262921][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.274891][ T4720] team0: Port device team_slave_0 added [ 30.275528][ T4718] team0: Port device team_slave_0 added [ 30.276753][ T4718] team0: Port device team_slave_1 added [ 30.277039][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.277046][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.277059][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.281590][ T4711] team0: Port device team_slave_0 added [ 30.282533][ T4711] team0: Port device team_slave_1 added [ 30.283537][ T4720] team0: Port device team_slave_1 added [ 30.306277][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.306300][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.306328][ T4711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.307258][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.307273][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.307300][ T4711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.307960][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.307974][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.307988][ T4718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.311085][ T4709] hsr_slave_0: entered promiscuous mode [ 30.311435][ T4709] hsr_slave_1: entered promiscuous mode [ 30.317167][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.317176][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.317192][ T4720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.318026][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.318034][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.318044][ T4720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.318424][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.318430][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.318443][ T4718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.336771][ T4710] hsr_slave_0: entered promiscuous mode [ 30.337109][ T4710] hsr_slave_1: entered promiscuous mode [ 30.337344][ T4710] debugfs: 'hsr0' already exists in 'hsr' [ 30.337385][ T4710] Cannot create hsr debugfs directory [ 30.362659][ T4720] hsr_slave_0: entered promiscuous mode [ 30.362999][ T4720] hsr_slave_1: entered promiscuous mode [ 30.363211][ T4720] debugfs: 'hsr0' already exists in 'hsr' [ 30.363220][ T4720] Cannot create hsr debugfs directory [ 30.374114][ T4711] hsr_slave_0: entered promiscuous mode [ 30.374465][ T4711] hsr_slave_1: entered promiscuous mode [ 30.374673][ T4711] debugfs: 'hsr0' already exists in 'hsr' [ 30.374683][ T4711] Cannot create hsr debugfs directory [ 30.384843][ T4718] hsr_slave_0: entered promiscuous mode [ 30.385165][ T4718] hsr_slave_1: entered promiscuous mode [ 30.385338][ T4718] debugfs: 'hsr0' already exists in 'hsr' [ 30.385348][ T4718] Cannot create hsr debugfs directory [ 30.512295][ T4709] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.515750][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.517739][ T4709] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.520410][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.520994][ T4709] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.522404][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.525601][ T4709] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.527733][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.542099][ T4720] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.545277][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.546755][ T4720] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.549470][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.552337][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.552391][ T4709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.552528][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.552556][ T4709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.558011][ T4720] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.560564][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.560894][ T4720] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.563379][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.587525][ T4720] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.587571][ T4720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.587671][ T4720] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.587707][ T4720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.592639][ T4710] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.594393][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.595311][ T4710] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.597034][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.604879][ T4710] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.607289][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.607596][ T4710] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.609703][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.624221][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.625568][ T4718] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.627594][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.627891][ T4718] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.629661][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.635871][ T4718] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.638084][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.638394][ T4718] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.640394][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.644862][ T4709] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.650565][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.650604][ T4710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.650683][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.650712][ T4710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.657274][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.659638][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.661118][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.662644][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.664338][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.679370][ T3841] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.679433][ T3841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.695265][ T4711] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.697395][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.702114][ T4711] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.704187][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.704713][ T4711] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.706265][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.711174][ T4711] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.713216][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.732613][ T4720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.748417][ T4720] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.755078][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.762076][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.762123][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.768975][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.775884][ T911] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.775943][ T911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.788047][ T4718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.796855][ T4718] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.802868][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.802913][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.803263][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.803282][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.803602][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.803620][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.815639][ T911] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.815678][ T911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.816843][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.834366][ T4711] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.837934][ T911] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.837992][ T911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.885048][ T4718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.891144][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.891190][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.984182][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.015747][ T4709] veth0_vlan: entered promiscuous mode [ 31.027027][ T4709] veth1_vlan: entered promiscuous mode [ 31.047543][ T4709] veth0_macvtap: entered promiscuous mode [ 31.053755][ T4709] veth1_macvtap: entered promiscuous mode [ 31.061396][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.063796][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.067820][ T15] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.067994][ T15] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.068058][ T15] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.068290][ T15] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.087215][ T4720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.116106][ T4718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.141441][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.172851][ T4720] veth0_vlan: entered promiscuous mode [ 31.174621][ T4720] veth1_vlan: entered promiscuous mode [ 31.183548][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.187748][ T3959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.187787][ T3959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.195989][ T4718] veth0_vlan: entered promiscuous mode [ 31.205861][ T4718] veth1_vlan: entered promiscuous mode [ 31.214097][ T3841] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.214131][ T3841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.227195][ T4718] veth0_macvtap: entered promiscuous mode [ 31.237404][ T4720] veth0_macvtap: entered promiscuous mode [ 31.244514][ T4720] veth1_macvtap: entered promiscuous mode [ 31.248185][ T4718] veth1_macvtap: entered promiscuous mode [ 31.253682][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.262756][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.266576][ T4709] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.271529][ T4711] veth0_vlan: entered promiscuous mode [ 31.276670][ T4711] veth1_vlan: entered promiscuous mode [ 31.278947][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.282641][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.299315][ T3841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.299616][ T3841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.299656][ T3841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.299677][ T3841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.316686][ T3959] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.316743][ T3959] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.316766][ T3959] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.316783][ T3959] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.325254][ T4711] veth0_macvtap: entered promiscuous mode [ 31.332255][ T4710] veth0_vlan: entered promiscuous mode [ 31.344934][ T4710] veth1_vlan: entered promiscuous mode [ 31.354695][ T4711] veth1_macvtap: entered promiscuous mode [ 31.376120][ T4710] veth0_macvtap: entered promiscuous mode [ 31.377194][ T4710] veth1_macvtap: entered promiscuous mode [ 31.385715][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.386742][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.409503][ T3959] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.413249][ T3959] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.416855][ T3959] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.418516][ T3959] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.431280][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.431310][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.433612][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.433628][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.452745][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.453926][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.455305][ T3959] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.455358][ T3959] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.455400][ T3959] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.455488][ T3959] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.468438][ T3841] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.470876][ T3841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.473343][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.473365][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.759744][ T4721] Bluetooth: hci0: command tx timeout [ 31.759993][ T4721] Bluetooth: hci1: command tx timeout [ 31.760195][ T4721] Bluetooth: hci3: command tx timeout [ 31.760382][ T4721] Bluetooth: hci2: command tx timeout [ 31.762838][ T50] Bluetooth: hci4: command tx timeout [ 32.228571][ T3841] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.228605][ T3841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.292970][ T3959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.293007][ T3959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.317407][ T911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.317438][ T911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.371612][ T3841] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.371643][ T3841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.821734][ T4915] process 'syz.4.5' launched './file1' with NULL argv: empty string added [ 32.897411][ T4916] loop1: detected capacity change from 0 to 128 [ 32.910594][ T50] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 32.913407][ T50] CPU: 0 UID: 0 PID: 50 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT [ 32.913428][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 32.913436][ T50] Workqueue: hci1 hci_rx_work [ 32.913461][ T50] Call trace: [ 32.913464][ T50] show_stack+0x2c/0x3c (C) [ 32.913486][ T50] __dump_stack+0x30/0x40 [ 32.913499][ T50] dump_stack_lvl+0xd8/0x12c [ 32.913511][ T50] dump_stack+0x1c/0x28 [ 32.913523][ T50] sysfs_warn_dup+0x9c/0xb8 [ 32.913535][ T50] sysfs_create_dir_ns+0x190/0x1f4 [ 32.913547][ T50] kobject_add_internal+0x290/0x6f0 [ 32.913560][ T50] kobject_add_varg+0x9c/0xe8 [ 32.913571][ T50] kobject_add+0x110/0x1c8 [ 32.913582][ T50] device_add+0x394/0x9e0 [ 32.913595][ T50] hci_conn_add_sysfs+0xbc/0x1e8 [ 32.913605][ T50] le_conn_complete_evt+0xc68/0x10f8 [ 32.913614][ T50] hci_le_conn_complete_evt+0x114/0x3d8 [ 32.913627][ T50] hci_le_meta_evt+0x2b0/0x46c [ 32.913636][ T50] hci_event_packet+0x4c0/0x9c8 [ 32.913645][ T50] hci_rx_work+0x2f4/0xd78 [ 32.913656][ T50] process_scheduled_works+0x788/0x10b8 [ 32.913670][ T50] worker_thread+0x798/0xbd0 [ 32.913681][ T50] kthread+0x304/0x3d4 [ 32.913689][ T50] ret_from_fork+0x10/0x20 [ 32.929341][ T50] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 32.929432][ T50] Bluetooth: hci1: failed to register connection device [ 32.957984][ T4916] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7'. [ 34.108121][ T4927] Bluetooth: MGMT ver 1.23 [ 34.211528][ T4713] Bluetooth: Wrong link type (-71) [ 34.211868][ T4713] Bluetooth: hci4: command tx timeout [ 34.211895][ T4713] Bluetooth: hci3: command tx timeout [ 34.211919][ T4713] Bluetooth: hci1: command tx timeout [ 34.211944][ T4713] Bluetooth: hci0: command tx timeout [ 34.211962][ T4713] Bluetooth: hci2: command tx timeout [ 35.371122][ T4942] sctp: [Deprecated]: syz.0.12 (pid 4942) Use of struct sctp_assoc_value in delayed_ack socket option. [ 35.371122][ T4942] Use struct sctp_sack_info instead [ 35.591002][ T4948] No such timeout policy "syz1" [ 36.190691][ T4953] ======================================================= [ 36.190691][ T4953] WARNING: The mand mount option has been deprecated and [ 36.190691][ T4953] and is ignored by this kernel. Remove the mand [ 36.190691][ T4953] option from the mount to silence this warning. [ 36.190691][ T4953] ======================================================= [ 36.259165][ T4713] Bluetooth: hci0: command tx timeout [ 36.259212][ T4713] Bluetooth: hci1: command tx timeout [ 36.259235][ T4713] Bluetooth: hci3: command tx timeout [ 36.259266][ T4713] Bluetooth: hci4: command tx timeout [ 36.263027][ T50] Bluetooth: hci2: command tx timeout [ 36.354797][ T4959] block nbd1: NBD_DISCONNECT [ 36.357116][ T4954] block nbd1: Disconnected due to user request. [ 36.358575][ T4954] block nbd1: shutting down sockets [ 36.637407][ T4970] futex_wake_op: syz.2.20 tries to shift op by 32; fix this program [ 36.669848][ T4971] tipc: Started in network mode [ 36.669943][ T4971] tipc: Node identity 84e, cluster identity 4711 [ 36.669983][ T4971] tipc: Node number set to 2126 [ 36.758751][ T4973] loop4: detected capacity change from 0 to 512 [ 37.962748][ T4979] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21'. [ 38.315477][ T4974] input: syz0 as /devices/virtual/input/input2 [ 38.435022][ T4713] Bluetooth: hci4: command tx timeout [ 38.435057][ T4713] Bluetooth: hci3: command tx timeout [ 38.435079][ T4713] Bluetooth: hci1: command tx timeout [ 38.435100][ T4713] Bluetooth: hci0: command tx timeout [ 38.435159][ T50] Bluetooth: hci2: command tx timeout [ 38.463760][ T4986] loop3: detected capacity change from 0 to 128 [ 38.466466][ T4986] EXT4-fs (loop3): Test dummy encryption mode enabled [ 38.471293][ T4986] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.562815][ T4986] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 38.591780][ T4985] loop0: detected capacity change from 0 to 512 [ 39.622644][ T4993] loop2: detected capacity change from 0 to 128 [ 40.336146][ T4985] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 40.338168][ T4985] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 40.338803][ T4985] EXT4-fs: failed to create workqueue [ 40.343586][ T4985] EXT4-fs (loop0): mount failed [ 40.345699][ T4711] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.611917][ T4721] Bluetooth: hci1: command 0x0406 tx timeout [ 40.811161][ T4993] netlink: 'syz.2.20': attribute type 3 has an invalid length. [ 40.811328][ T4993] netlink: 'syz.2.20': attribute type 3 has an invalid length. [ 40.811694][ T4993] netlink: 'syz.2.20': attribute type 3 has an invalid length. [ 40.811775][ T4993] netlink: 'syz.2.20': attribute type 3 has an invalid length. [ 40.811841][ T4993] netlink: 'syz.2.20': attribute type 3 has an invalid length. [ 40.812031][ T4993] netlink: 'syz.2.20': attribute type 3 has an invalid length. [ 40.812097][ T4993] netlink: 'syz.2.20': attribute type 3 has an invalid length. [ 40.812174][ T4993] netlink: 'syz.2.20': attribute type 3 has an invalid length. [ 40.812239][ T4993] netlink: 'syz.2.20': attribute type 3 has an invalid length. [ 40.812307][ T4993] netlink: 'syz.2.20': attribute type 3 has an invalid length. [ 41.526961][ T5003] Zero length message leads to an empty skb [ 41.601346][ T30] audit: type=1326 audit(41.280:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4997 comm="syz.4.25" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f177b68 code=0x7ffc0000 [ 41.601397][ T30] audit: type=1326 audit(41.280:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4997 comm="syz.4.25" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f177b68 code=0x7ffc0000 [ 41.601415][ T30] audit: type=1326 audit(41.280:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4997 comm="syz.4.25" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=141 compat=0 ip=0xffff9f177b68 code=0x7ffc0000 [ 41.601433][ T30] audit: type=1326 audit(41.280:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4997 comm="syz.4.25" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f177b68 code=0x7ffc0000 [ 41.601450][ T30] audit: type=1326 audit(41.280:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4997 comm="syz.4.25" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f177b68 code=0x7ffc0000 [ 41.601467][ T30] audit: type=1326 audit(41.280:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4997 comm="syz.4.25" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff9f177b68 code=0x7ffc0000 [ 41.601483][ T30] audit: type=1326 audit(41.280:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4997 comm="syz.4.25" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f177b68 code=0x7ffc0000 [ 41.601498][ T30] audit: type=1326 audit(41.280:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4997 comm="syz.4.25" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f177b68 code=0x7ffc0000 [ 41.601513][ T30] audit: type=1326 audit(41.280:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4997 comm="syz.4.25" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=119 compat=0 ip=0xffff9f177b68 code=0x7ffc0000 [ 41.601527][ T30] audit: type=1326 audit(41.280:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4997 comm="syz.4.25" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f177b68 code=0x7ffc0000 [ 41.644713][ T5010] xt_NFQUEUE: number of total queues is 0 [ 42.723911][ T5013] loop0: detected capacity change from 0 to 512 [ 42.754198][ T5013] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 42.754272][ T5013] System zones: 1-12 [ 42.754521][ T5013] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.26: Directory hole found for htree index block 0 [ 42.754561][ T5013] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 42.759025][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 42.759055][ C0] EXT4-fs (loop0): initial error at time 42: dx_probe:791: inode 2 [ 42.759090][ C0] EXT4-fs (loop0): last error at time 42: dx_probe:791: inode 2 [ 42.760160][ T5013] EXT4-fs (loop0): Remounting filesystem read-only [ 42.760285][ T5013] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 42.760337][ T5013] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 42.760792][ T5013] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.764706][ T5013] EXT4-fs (loop0): shut down requested (2) [ 43.204870][ T5030] loop4: detected capacity change from 0 to 8192 [ 43.207692][ T5029] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 43.207714][ T5029] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 43.208088][ T5029] vhci_hcd vhci_hcd.0: Device attached [ 43.247121][ T5030] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 43.500925][ T4836] usb 10-1: new low-speed USB device number 2 using vhci_hcd [ 43.723749][ T5031] vhci_hcd: connection reset by peer [ 43.740472][ T1248] vhci_hcd vhci_hcd.4: stop threads [ 43.740699][ T1248] vhci_hcd vhci_hcd.4: release socket [ 43.740974][ T1248] vhci_hcd vhci_hcd.4: disconnect device [ 43.796049][ T4720] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.815779][ T5035] sctp: [Deprecated]: syz.1.30 (pid 5035) Use of struct sctp_assoc_value in delayed_ack socket option. [ 43.815779][ T5035] Use struct sctp_sack_info instead [ 44.076035][ T5039] No such timeout policy "syz1" [ 44.588546][ T5043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.588778][ T5043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.466264][ T5062] binfmt_misc: register: failed to install interpreter file ./file0 [ 45.493341][ T5064] binfmt_misc: register: failed to install interpreter file ./file0 [ 47.445275][ T5089] loop4: detected capacity change from 0 to 512 [ 47.467579][ T5089] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 47.615751][ T5089] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 47.616341][ T5089] __quota_error: 16 callbacks suppressed [ 47.616376][ T5089] Quota error (device loop4): write_blk: dquota write failed [ 47.616467][ T5089] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 47.616644][ T5089] Quota error (device loop4): write_blk: dquota write failed [ 47.616703][ T5089] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 47.616780][ T5089] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.42: Failed to acquire dquot type 1 [ 47.616856][ T5089] loop4: lost filesystem error report for type 5 error -28 [ 47.618887][ T5089] EXT4-fs (loop4): 1 truncate cleaned up [ 47.619548][ T5089] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.665877][ T5089] EXT4-fs error (device loop4): __ext4_remount:6844: comm syz.4.42: Abort forced by user [ 47.677407][ T5089] EXT4-fs (loop4): Remounting filesystem read-only [ 47.677430][ T5089] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 47.823399][ T5098] sctp: [Deprecated]: syz.3.45 (pid 5098) Use of struct sctp_assoc_value in delayed_ack socket option. [ 47.823399][ T5098] Use struct sctp_sack_info instead [ 47.920970][ T5101] capability: warning: `syz.2.44' uses deprecated v2 capabilities in a way that may be insecure [ 47.928558][ T5101] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 48.005804][ T5102] No such timeout policy "syz1" [ 48.141858][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.157172][ T30] audit: type=1326 audit(48.140:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5103 comm="syz.0.46" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff82577b68 code=0x0 [ 48.178962][ T5107] binfmt_misc: register: failed to install interpreter file ./file0 [ 48.395418][ T5116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.46'. [ 48.680401][ T5118] loop4: detected capacity change from 0 to 1024 [ 48.927827][ T5115] netlink: 28 bytes leftover after parsing attributes in process `syz.1.48'. [ 48.988142][ T4836] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 49.088777][ T5118] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.242726][ T5126] loop2: detected capacity change from 0 to 512 [ 49.279781][ T5126] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.631214][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.633522][ T5137] binfmt_misc: register: failed to install interpreter file ./file0 [ 50.293813][ T5140] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 50.294422][ T5140] EXT4-fs (loop2): Delayed block allocation failed for inode 13 at logical offset 1 with max blocks 32 with error 28 [ 50.294449][ T5140] EXT4-fs (loop2): This should not happen!! Data will be lost [ 50.294449][ T5140] [ 50.294464][ T5140] EXT4-fs (loop2): Total free blocks count 0 [ 50.294478][ T5140] EXT4-fs (loop2): Free/Dirty block details [ 50.294494][ T5140] EXT4-fs (loop2): free_blocks=65280 [ 50.294510][ T5140] EXT4-fs (loop2): dirty_blocks=32 [ 50.294521][ T5140] EXT4-fs (loop2): Block reservation details [ 50.294531][ T5140] EXT4-fs (loop2): i_reserved_data_blocks=32 [ 50.657700][ T5150] loop1: detected capacity change from 0 to 128 [ 50.663856][ T5150] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 51.177435][ T5156] random: crng reseeded on system resumption [ 51.184650][ T5156] loop3: detected capacity change from 0 to 512 [ 51.645997][ T5156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.672671][ T4709] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.451568][ T5170] geneve2: entered promiscuous mode [ 52.451718][ T5170] geneve2: entered allmulticast mode [ 52.530845][ T4917] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 52.536143][ T1248] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 52.536232][ T1248] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 52.536461][ T1248] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 52.552862][ T4718] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #13: comm syz-executor: data will be lost [ 52.553644][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.151537][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.628849][ T5198] syz.1.64 uses obsolete (PF_INET,SOCK_PACKET) [ 55.833977][ T5193] futex_wake_op: syz.3.65 tries to shift op by -65; fix this program [ 55.922527][ T5205] sctp: [Deprecated]: syz.4.63 (pid 5205) Use of struct sctp_assoc_value in delayed_ack socket option. [ 55.922527][ T5205] Use struct sctp_sack_info instead [ 56.137906][ T5208] No such timeout policy "syz1" [ 56.293167][ T5212] loop2: detected capacity change from 0 to 256 [ 56.297832][ T5212] vfat: Unknown parameter 'obj_user' [ 56.615400][ T5213] loop2: detected capacity change from 0 to 128 [ 56.727454][ T5213] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 57.814728][ T4718] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 58.925187][ T5244] loop4: detected capacity change from 0 to 128 [ 60.077689][ T5253] ipt_REJECT: ECHOREPLY no longer supported. [ 60.621135][ T5265] vlan1: entered allmulticast mode [ 60.621223][ T5265] veth0_vlan: entered allmulticast mode [ 61.120292][ T15] Bluetooth: hci5: Frame reassembly failed (-84) [ 61.312340][ T5273] loop2: detected capacity change from 0 to 128 [ 61.321398][ T5273] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 61.498714][ T5281] tipc: Started in network mode [ 61.498788][ T5281] tipc: Node identity 7f000001, cluster identity 4711 [ 61.500851][ T5281] tipc: Enabled bearer , priority 10 [ 61.541099][ T5281] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 61.541869][ T5281] tipc: Enabled bearer , priority 10 [ 61.734371][ T4718] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 61.879421][ T5288] x_tables: ip_tables: osf match: only valid for protocol 6 [ 61.882348][ T5288] tmpfs: Bad value for 'mpol' [ 62.051337][ T5290] 9p: Bad value for 'rfdno' [ 62.704792][ T4796] tipc: Node number set to 2130706433 [ 62.796708][ T5301] xt_CT: You must specify a L4 protocol and not use inversions on it [ 62.910018][ T5304] validate_nla: 44 callbacks suppressed [ 62.910070][ T5304] netlink: 'syz.0.87': attribute type 39 has an invalid length. [ 62.986454][ T5305] loop2: detected capacity change from 0 to 7 [ 63.680363][ T4716] Bluetooth: hci5: command 0x1003 tx timeout [ 63.690502][ T4721] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 63.757190][ T5305] Dev loop2: unable to read RDB block 7 [ 63.757794][ T5305] loop2: AHDI p1 p2 p3 [ 63.757916][ T5305] loop2: partition table partially beyond EOD, truncated [ 63.759455][ T5305] loop2: p1 start 1601398130 is beyond EOD, truncated [ 63.759575][ T5305] loop2: p2 start 1702059890 is beyond EOD, truncated [ 63.853240][ T5311] loop4: detected capacity change from 0 to 1024 [ 63.937537][ T5311] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 64.063219][ T5316] loop3: detected capacity change from 0 to 512 [ 64.242272][ T5316] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 64.304821][ T5316] EXT4-fs (loop3): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 64.815078][ T5311] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #3: block 5: comm syz.4.90: lblock 5 mapped to illegal pblock 5 (length 1) [ 64.815120][ T5311] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 64.816180][ T5311] Quota error (device loop4): write_blk: dquota write failed [ 64.816210][ T5311] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 64.816264][ T5311] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 64.816302][ T5311] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.90: Failed to acquire dquot type 0 [ 64.816320][ T5311] loop4: lost filesystem error report for type 5 error -117 [ 64.816446][ T5311] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 5: comm syz.4.90: lblock 5 mapped to illegal pblock 5 (length 1) [ 64.816464][ T5311] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 64.816772][ T5311] Quota error (device loop4): do_insert_tree: Can't read tree quota block 5 [ 64.816814][ T5311] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 64.816832][ T5311] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.90: Failed to acquire dquot type 0 [ 64.816847][ T5311] loop4: lost filesystem error report for type 5 error -117 [ 64.817037][ T5311] EXT4-fs error (device loop4): ext4_free_blocks:6718: comm syz.4.90: Freeing blocks not in datazone - block = 0, count = 4096 [ 64.817055][ T5311] loop4: lost filesystem error report for type 5 error -117 [ 64.817819][ T5311] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 5: comm syz.4.90: lblock 5 mapped to illegal pblock 5 (length 1) [ 64.817849][ T5311] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 64.818800][ T5311] Quota error (device loop4): do_insert_tree: Can't read tree quota block 5 [ 64.818869][ T5311] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 64.818906][ T5311] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.90: Failed to acquire dquot type 0 [ 64.818922][ T5311] loop4: lost filesystem error report for type 5 error -117 [ 64.820062][ T5311] EXT4-fs (loop4): 1 orphan inode deleted [ 64.820521][ T5311] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.547014][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.547074][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.625601][ T5328] loop1: detected capacity change from 0 to 128 [ 65.632059][ T5328] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 65.747797][ T5330] netlink: 24 bytes leftover after parsing attributes in process `syz.2.92'. [ 65.806158][ T5331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.806341][ T5331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.978593][ T26] cfg80211: failed to load regulatory.db [ 66.148319][ T5327] loop2: detected capacity change from 0 to 32768 [ 66.267552][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.294803][ T5327] loop2: [ICS] p1 p2 p3 p4 [ 66.295020][ T5327] loop2: p1 start 1970170188 is beyond EOD, truncated [ 66.295033][ T5327] loop2: p2 start 540156012 is beyond EOD, truncated [ 66.295043][ T5327] loop2: p3 start 1684545584 is beyond EOD, truncated [ 66.295052][ T5327] loop2: p4 start 1667592992 is beyond EOD, truncated [ 66.668072][ T5341] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 66.938174][ T4709] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 67.383735][ T5349] futex_wake_op: syz.0.98 tries to shift op by -65; fix this program [ 67.459098][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.850545][ T5361] bridge0: port 3(wlan1) entered blocking state [ 67.850767][ T5361] bridge0: port 3(wlan1) entered disabled state [ 67.851385][ T5361] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 67.854437][ T5361] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 67.903157][ T5360] loop3: detected capacity change from 0 to 512 [ 67.992060][ T5360] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.99: iget: bad i_size value: 38620345925642 [ 67.992554][ T5360] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 67.998046][ T5360] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.99: couldn't read orphan inode 15 (err -117) [ 67.998086][ T5360] loop3: lost filesystem error report for type 5 error -117 [ 68.002994][ C1] EXT4-fs (loop3): error count since last fsck: 2 [ 68.003030][ C1] EXT4-fs (loop3): initial error at time 66: ext4_orphan_get:1399: inode 15 [ 68.003053][ C1] EXT4-fs (loop3): last error at time 66: ext4_orphan_get:1404 [ 68.009384][ T5360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.361588][ T5278] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 68.532548][ T5369] loop4: detected capacity change from 0 to 512 [ 68.625978][ T5369] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.815689][ T5374] netlink: 'syz.0.102': attribute type 8 has an invalid length. [ 69.331236][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.480503][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.802428][ T5402] loop2: detected capacity change from 0 to 128 [ 70.807879][ T5402] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.169703][ T5417] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 74.243007][ T5409] loop1: detected capacity change from 0 to 512 [ 74.243520][ T5409] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.267622][ T5409] EXT4-fs (loop1): Test dummy encryption mode enabled [ 74.383271][ T5421] loop4: detected capacity change from 0 to 8 [ 74.582367][ T4718] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.594043][ T5421] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 74.594068][ T5421] unable to read xattr id index table [ 74.595281][ T5421] SQUASHFS error: zlib decompression failed, data probably corrupt [ 74.595308][ T5421] SQUASHFS error: Failed to read block 0x9b: -5 [ 74.595326][ T5421] SQUASHFS error: Unable to read metadata cache entry [99] [ 74.595337][ T5421] SQUASHFS error: Unable to read inode 0x127 [ 74.621450][ T5409] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843e028, mo2=0002] [ 74.621526][ T5409] System zones: 1-12 [ 74.625181][ T5409] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 33261: comm syz.1.107: invalid block [ 74.625208][ T5409] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 74.627460][ T5409] EXT4-fs (loop1): Remounting filesystem read-only [ 74.627674][ T5409] EXT4-fs (loop1): 1 truncate cleaned up [ 74.628159][ T5409] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.005256][ T5431] faux_driver vgem: [drm] Unknown color mode 11173; guessing buffer size. [ 75.029630][ T5434] loop3: detected capacity change from 0 to 512 [ 75.050802][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.236384][ T4836] IPVS: starting estimator thread 0... [ 75.337404][ T5438] IPVS: using max 66 ests per chain, 158400 per kthread [ 75.341928][ T5442] loop1: detected capacity change from 0 to 128 [ 75.345289][ T5442] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 75.417644][ T4709] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.573174][ T5445] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 75.573600][ T5445] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 75.583560][ T5445] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 75.590492][ T5445] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 75.590635][ T5445] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 75.597184][ T5445] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 75.603227][ T5445] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 75.608320][ T5445] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 75.608394][ T5445] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 75.613348][ T5445] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 75.687037][ T5445] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 75.687081][ T5445] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 75.721231][ T5445] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 75.726432][ T5445] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 75.726552][ T5445] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 75.732551][ T5445] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 76.820056][ T5457] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.820098][ T5457] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 77.152105][ T5457] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.152389][ T5457] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 77.766799][ T4721] Bluetooth: hci0: command 0x0c1a tx timeout [ 77.833364][ T4721] Bluetooth: hci2: command 0x0c1a tx timeout [ 77.937968][ T4721] Bluetooth: hci1: command 0x0406 tx timeout [ 77.938022][ T4721] Bluetooth: hci4: command 0x0c1a tx timeout [ 77.938048][ T4721] Bluetooth: hci3: command 0x0c1a tx timeout [ 78.367935][ T5457] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.370175][ T5457] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 78.546822][ T5470] loop4: detected capacity change from 0 to 512 [ 78.547238][ T5470] EXT4-fs: Ignoring removed oldalloc option [ 78.703330][ T5470] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.122: Parent and EA inode have the same ino 15 [ 78.703511][ T5470] loop4: lost filesystem error report for type 5 error -117 [ 78.710904][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 78.710930][ C0] EXT4-fs (loop4): initial error at time 76: ext4_xattr_inode_iget:437 [ 78.710961][ C0] EXT4-fs (loop4): last error at time 76: ext4_xattr_inode_iget:437 [ 78.717835][ T5470] EXT4-fs (loop4): 1 orphan inode deleted [ 78.722726][ T5470] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.860852][ T5457] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.860993][ T5457] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 79.148733][ T3959] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 79.148779][ T3959] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 79.148824][ T3959] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 79.148843][ T3959] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 79.148876][ T3959] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 79.148894][ T3959] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 79.148923][ T3959] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 79.148945][ T3959] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 79.674003][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.794644][ T5494] loop4: detected capacity change from 0 to 256 [ 79.795037][ T5494] vfat: Unknown parameter 'uni_xlatg' [ 79.810281][ T4721] Bluetooth: hci0: command 0x0c1a tx timeout [ 79.817611][ T5496] loop3: detected capacity change from 0 to 256 [ 79.824420][ T5496] FAT-fs (loop3): data area starts beyond volume (274 > 64) [ 79.824459][ T5496] FAT-fs (loop3): Can't find a valid FAT filesystem [ 80.074047][ T4721] Bluetooth: hci3: command 0x0c1a tx timeout [ 80.074104][ T4721] Bluetooth: hci4: command 0x0c1a tx timeout [ 80.074841][ T4721] Bluetooth: hci1: command 0x0406 tx timeout [ 80.074867][ T4721] Bluetooth: hci2: command 0x0c1a tx timeout [ 80.088757][ T5494] loop4: detected capacity change from 0 to 1024 [ 80.095565][ T5494] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 80.406515][ T5504] loop2: detected capacity change from 0 to 8192 [ 80.462022][ T5506] warning: `syz.3.127' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 80.464823][ T5506] loop3: detected capacity change from 0 to 512 [ 80.475176][ T5503] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.478734][ T5506] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 80.500442][ T5506] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.602875][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.649489][ T4895] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.833489][ T5518] loop1: detected capacity change from 0 to 512 [ 81.420656][ T4895] usb 1-1: device descriptor read/64, error -71 [ 81.755240][ T5534] can0: slcan on ttyS3. [ 81.812906][ T5535] capability: warning: `syz.4.134' uses 32-bit capabilities (legacy support in use) [ 82.055832][ T4716] Bluetooth: hci0: command 0x0c1a tx timeout [ 82.087258][ T4895] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 82.294710][ T4716] Bluetooth: hci2: command 0x0c1a tx timeout [ 82.294830][ T4716] Bluetooth: hci1: command 0x0406 tx timeout [ 82.294928][ T4716] Bluetooth: hci4: command 0x0c1a tx timeout [ 82.295398][ T4716] Bluetooth: hci3: command 0x0c1a tx timeout [ 82.457035][ T4895] usb 1-1: device descriptor read/64, error -71 [ 82.472092][ T5534] can0 (unregistered): slcan off ttyS3. [ 82.569651][ T5546] netlink: 'syz.1.136': attribute type 39 has an invalid length. [ 82.803162][ T5551] loop4: detected capacity change from 0 to 1024 [ 82.819081][ T5551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.097441][ T4895] usb usb1-port1: attempt power cycle [ 84.259101][ T4399] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.276646][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.435238][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 84.887511][ T4716] Bluetooth: hci1: command 0x0406 tx timeout [ 84.932878][ T5547] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 84.932905][ T5547] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 84.935706][ T5547] vhci_hcd vhci_hcd.0: Device attached [ 85.732159][ T5563] loop2: detected capacity change from 0 to 8192 [ 85.913435][ T5563] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 86.283293][ T5582] loop4: detected capacity change from 0 to 512 [ 86.358605][ T5566] vhci_hcd: connection closed [ 86.359886][ T5582] EXT4-fs (loop4): Test dummy encryption mode enabled [ 86.369500][ T911] vhci_hcd vhci_hcd.2: stop threads [ 86.369536][ T911] vhci_hcd vhci_hcd.2: release socket [ 86.369979][ T911] vhci_hcd vhci_hcd.2: disconnect device [ 86.377173][ T5582] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.143: inode has both inline data and extents flags [ 86.377208][ T5582] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 86.377333][ T5582] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.143: couldn't read orphan inode 15 (err -117) [ 86.377349][ T5582] loop4: lost filesystem error report for type 5 error -117 [ 86.377857][ T5582] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.392483][ T5582] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 86.401389][ T5586] loop3: detected capacity change from 0 to 128 [ 86.693486][ T26] usb 6-1: new low-speed USB device number 2 using vhci_hcd [ 86.693868][ T26] usb 6-1: enqueue for inactive port 0 [ 87.386437][ T26] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 87.403293][ T5586] EXT4-fs (loop3): Test dummy encryption mode enabled [ 87.409711][ T5586] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 88.285277][ T5596] overlayfs: missing 'lowerdir' [ 88.755915][ T4711] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 88.950809][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.284146][ T5610] tipc: Started in network mode [ 89.284329][ T5610] tipc: Node identity 7f000001, cluster identity 4711 [ 89.285214][ T5610] tipc: Enabled bearer , priority 10 [ 90.484275][ T26] tipc: Node number set to 2130706433 [ 90.971511][ T5635] loop3: detected capacity change from 0 to 512 [ 90.973879][ T5635] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 91.005450][ T5635] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.459348][ T5644] syz_tun: entered allmulticast mode [ 91.575362][ T5646] tipc: Started in network mode [ 91.575492][ T5646] tipc: Node identity 7f000001, cluster identity 4711 [ 91.576288][ T5646] tipc: Enabled bearer , priority 10 [ 91.587840][ T5646] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 91.588572][ T5646] tipc: Enabled bearer , priority 10 [ 91.871127][ T5634] syz_tun: left allmulticast mode [ 92.238615][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.340258][ T26] tipc: Node number set to 2130706433 [ 94.134772][ T5676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.161'. [ 94.657059][ T50] Bluetooth: hci4: unexpected event for opcode 0x1804 [ 95.324850][ T5546] unregister_netdevice: waiting for wg1 to become free. Usage count = 3 [ 95.324999][ T5546] ref_tracker: netdev@00000000593713e8 has 1/2 users at [ 95.324999][ T5546] netdev_get_by_index+0x84/0xdc [ 95.324999][ T5546] fib6_nh_init+0x258/0x14f0 [ 95.324999][ T5546] ip6_route_info_create_nh+0x13c/0x98c [ 95.324999][ T5546] addrconf_f6i_alloc+0x1e4/0x3b4 [ 95.324999][ T5546] addrconf_permanent_addr+0x3b8/0x80c [ 95.324999][ T5546] addrconf_notify+0x690/0xbe8 [ 95.324999][ T5546] notifier_call_chain+0x1a4/0x624 [ 95.324999][ T5546] raw_notifier_call_chain+0x3c/0x50 [ 95.324999][ T5546] call_netdevice_notifiers_info+0xb8/0x120 [ 95.324999][ T5546] __dev_notify_flags+0x160/0x27c [ 95.324999][ T5546] netif_change_flags+0xd0/0x15c [ 95.324999][ T5546] do_setlink+0xc28/0x31e8 [ 95.324999][ T5546] rtnl_newlink+0xd24/0x1144 [ 95.324999][ T5546] rtnetlink_rcv_msg+0x66c/0x9bc [ 95.324999][ T5546] netlink_rcv_skb+0x238/0x414 [ 95.324999][ T5546] rtnetlink_rcv+0x28/0x38 [ 95.324999][ T5546] [ 95.325063][ T5546] ref_tracker: netdev@00000000593713e8 has 1/2 users at [ 95.325063][ T5546] netdev_tracker_alloc+0x68/0xb4 [ 95.325063][ T5546] fib_create_info+0x15cc/0x2184 [ 95.325063][ T5546] fib_table_insert+0xa4/0x12c0 [ 95.325063][ T5546] fib_magic+0x26c/0x344 [ 95.325063][ T5546] fib_add_ifaddr+0x114/0x500 [ 95.325063][ T5546] fib_inetaddr_event+0x114/0x1c0 [ 95.325063][ T5546] notifier_call_chain+0x1a4/0x624 [ 95.325063][ T5546] blocking_notifier_call_chain+0x70/0xa0 [ 95.325063][ T5546] __inet_insert_ifa+0x87c/0xa74 [ 95.325063][ T5546] inet_rtm_newaddr+0xb94/0x1130 [ 95.325063][ T5546] rtnetlink_rcv_msg+0x66c/0x9bc [ 95.325063][ T5546] netlink_rcv_skb+0x238/0x414 [ 95.325063][ T5546] rtnetlink_rcv+0x28/0x38 [ 95.325063][ T5546] netlink_unicast+0x600/0x7f8 [ 95.325063][ T5546] netlink_sendmsg+0x648/0x948 [ 95.325063][ T5546] __sock_sendmsg+0xc8/0x17c [ 95.325063][ T5546]