last executing test programs: 50.627963028s ago: executing program 0 (id=50): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2004010, &(0x7f0000000100), 0x2, 0x522, &(0x7f0000000c00)="$eJzs3U9sI1cZAPBvJsnau02bLfQAqNClFBa0WjvxtlHVC+VUIVQJ0SOHbUicKIodR7FTmrCH7JE7EpU4wYkzByQOSD1xR+IANy7lgFRgBWqQkHDlsZ11/ji2sondjX8/aeQ38zz+3tvRvGd93swLYGLdioj9iLgWEe9GxFzneNLZ4s321nrfJ48eLB88erCcRLP5zj+TrL51LHrOaXmm85n5iPjBWxE/So4F/VNEfXdvY6lSKW93DhUb1a1ifXfv7np1aa28Vt4slRYXFudfv/da6cL6+lL1Nx9fj4jf/+7LH/1x/1s/aTVrtlPX24+L1O76zGGclumI+N5lBBuDqU5/rp3n5HOdxEVKI+JzEfFydv/PxVR2NY86epm+PcLWAQCXodmci+Zc7z4AcNWlWQ4sSQudXMBspGmh0M7hvRA30kqt3rizWtvZXGnnym7GTLq6XinPd3KFN2MmWV2fLi9k5e5+pVxKju7fi4jnI+JnuevZfmG5VlkZ5xcfAJhgzxyb//+Ta8//AMAVl39czI2zHQDA6OTH3QAAYOTM/wAwecz/ADB5zP8AMHnM/wAwecz/ADBRvv/2262tedB5/vXKe7s7G7X37q6U6xuF6s5yYbm2vVVYq9XWsmf2VAd9XqVW21p4NXbeLzbK9Uaxvrt3v1rb2Wzcz57rfb88M5JeAQBnef6lD/+SRMT+G9ezLXqe9z9wrn7xslsHXKZ03A0AxmZq3A0Axubkal/ApJCPh8n1/2azGT1r90bEw8NSz8NA+/4XoQ+GCpNaNxQ+e25/8Qny/8BTTf4fJtf58v++y8NVIP8Pk6vZTKz5DwATRo4fSAbU9/7+P9/s2Rnu938AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4kmazLUkLnbXAZyNNC4WIZyPiZswkq+uV8nxEPBcRf87N5Fr7CxFh3SAAeJqlf08663/dnntl9njttdx/c9lrRPz4F+/8/P2lRmN7IeJa8q/D440POsdL42g/ADBId57uzuNdnzx6sNzdRtmej7/TXly0Ffegs7VrpmM6e81nuYYb/046+22t7ytTFxB//2FEfOG0/idZbuRmZ+XT4/FbsZ8dafz0SPw0q2u/tv4tPn8BbYFJ82Fr/HnztPsvjVvZ6+n3fz4boZ5cd/w7ODH+pYfj31Sf8e/WsDFe/cN3TxxszrXrHkZ8aTrioPvhPeNPN37SJ/4rQ8b/64tfeblfXfOXEbfjtP4nR2IVG9WtYn137+56dWmtvFbeLJUWFxbnX7/3WqmY5aiL3Uz1Sf94485z/eK3+n+jT/z8gP5/fcj+/+p/7/7wq2fE/+bXTr/+L5wRvzUnfmPI+Es3fpvvV9eKv9Kn/4Ou/50h43/0t72VEwcHLTgOAFya+u7exlKlUt5+8kL+zPekFxFiiEISsX/JIR4Xcr/+6VuD35wbWXvOWYh+VVOflRZemULuHGflL/Y+HbIw7pEJuGyPb/pxtwQAAAAAAAAAAAAAAOhnFH9ONO4+AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHV9GgAA///+udUz") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e20590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000280)={[{@verity_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@uuid_auto}, {@nfs_export_on}], [{@smackfsfloor={'smackfsfloor', 0x3d, '{%),'}}, {@obj_role={'obj_role', 0x3d, '\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'veth1_virt_wifi\x00'}}, {@seclabel}, {@uid_lt}]}) 49.131697917s ago: executing program 0 (id=67): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2004010, &(0x7f0000000100), 0x2, 0x522, &(0x7f0000000c00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e20590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000280)={[{@verity_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@uuid_auto}, {@nfs_export_on}], [{@smackfsfloor={'smackfsfloor', 0x3d, '{%),'}}, {@obj_role={'obj_role', 0x3d, '\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'veth1_virt_wifi\x00'}}, {@seclabel}, {@uid_lt}]}) 48.118807528s ago: executing program 0 (id=62): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x23, &(0x7f0000000040), &(0x7f00000001c0)=0x14) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) listns(&(0x7f0000000080)={0x20, 0x0, 0x3, 0x20000000}, 0x0, 0x1a, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000002c0)={@phonet={0x23, 0x4, 0x54, 0x1}, {&(0x7f00000000c0)=""/88, 0x58}, &(0x7f0000000000), 0x48}, 0xa0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$XFS_IOC_GOINGDOWN(r3, 0x8004587d, &(0x7f0000000440)=0x4ed0) r4 = syz_open_procfs(0x0, 0x0) write$cgroup_devices(r4, &(0x7f0000000300)={'c', ' *:* ', 'w\x00'}, 0x8) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f00000003c0)=[0x17, 0x8]}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fcntl$lock(r6, 0x5, &(0x7f0000000040)={0x0, 0x3, 0x3, 0x8}) sendmsg$NFT_BATCH(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}, 0x1, 0x0, 0x0, 0x408d4}, 0x4004) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x3, &(0x7f0000000180)=ANY=[@ANYRESDEC=r2], &(0x7f0000000380)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r9, @ANYBLOB="38030600400202002c0012801100010056726964672c0b79ba617665000000001400058008002a00", @ANYRES32=0x0, @ANYBLOB="06001f"], 0x4c}, 0x1, 0x0, 0x0, 0x80c5}, 0x40040c4) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r13 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x400}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x26}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48817}, 0x2000400c) 47.777840901s ago: executing program 0 (id=68): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080), 0x1, 0x4cf, &(0x7f0000000500)="$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") (async) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x10000, &(0x7f00000002c0)={[{@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) (async) r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000006c0)={0x8000000, 0x1, 0xcf9}) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) (async) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000000c0), 0x4) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000240)={r3, 0x12, "1fe473a8cb3169d4d5b7259627b5cf5b8a50"}, &(0x7f0000000700)=0xfdad) (async) openat(0xffffffffffffff9c, 0x0, 0x101842, 0x0) chdir(&(0x7f0000000140)='./file0\x00') (async) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x3ffffffd, 0x240) (async) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000780)={r7, 0xfffffffd, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x400, 0x9], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x7]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000440)={0x6, 0x3, 0x7}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0001}]}) close_range(r10, 0xffffffffffffffff, 0x0) r11 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r11, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r12, 0x0, 0x9, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101a, 0xd, 0x4, 0x401, 0x100, 0xa, 0x0, 0x56, 0x40, 0x7e9, 0x1401, 0x9aa5, "cb630dab3a0338057401a19241951ead1f50be109c34b204d11ab8f01c0e0e7a"}}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r11, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r12, r13], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r14, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r12, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) 47.758410303s ago: executing program 0 (id=70): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f0000000540), 0x1, 0x79e, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8801, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) write$rfkill(r0, &(0x7f0000000140)={0x8, 0x6}, 0xfe76) fallocate(r0, 0x8000000, 0xfff, 0x9) 47.513068535s ago: executing program 0 (id=72): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x17, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000820020e2898f85cc065e6eabbf4585d98579400000950021000000000058e3b9bb5c336a7cc00cd788a3d7c16ba8644320c542028f64cf2bab055d66668bda1d1a8d2e5c8a4d005cd60652c07ef708c45456f7fb4e6cc240c385027aff7924582e71a555bd346f6f73cb686b3a19563eb637b232360f9d602e8e6eb76724c89a4e6a1c486046149b14647d86ade5fa88278b8f96ea62508ad7"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) ptrace$setregset(0x4205, 0x0, 0x2, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610) prctl$PR_SET_SECCOMP(0x4e, 0x0, 0x0) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="120000000200000000000000", @ANYRES32, @ANYBLOB="a7a2bd02b8a2fe65eefcbf4d43aa2a8a54926b44cb9d0d0c86870da8655ceaabe4604b306a1c6553db2c9f063bacd260f221b67a14fa12b4b1000000006b1441ce2c2091274a042351abb636e79962ee118213be29b48ac179462b8a33f3c8ac386452898f298e37b44e8f710ee252d981ca96e0f6ae2fb089f83edf7223fdb48f330ca2d4d3398c555c238e45b0e329ead26b128dc3d7408717f7526bc2fdba3e73f57978f2c099d765edf99c3aa074c591abaf00"/194, @ANYRES64=0x0], 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r4, 0x10f, 0x82, &(0x7f0000000000), 0x4) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOGET_FSCREENINFO(r5, 0x4601, 0xffffffffffffffff) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket(0x400000000010, 0x3, 0xfffffffd) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff7, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42, 0x1000}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x5, 0x9}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4004) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0x4, 0xfff8}, {}, {0x4, 0x8001}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044810}, 0x20000000) r13 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r13, 0x6, 0x0, 0x0, 0x0) fsmount(r13, 0x0, 0x0) 42.08808616s ago: executing program 3 (id=110): openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config/usb_gadget/g1/UDC\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000380)='dummy_udc.0', 0xb) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='\n', 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300300001900010000000000000000001c140000fe00000100000000140012000a00f5d6a6c4b0639b11374230874419"], 0x30}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbbc59a1b7447f53fe76bb1121121be6cc815dd6003000000206cfffe8000000000000000080000000000aa000c000000007349384346f85bc22c22054aad9b3be48b4a62590e51bf97e2431e1c1b5b2a1adf9da6ae757747180e8be950a5484efc9339223b13f0c6605cb51463e1afe677187bc8f04bb4803af5d35160e591d3194faf817715c2f4529a02ed32c7e7a8ce3f0f"], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010800"/18, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0500000000"], 0x34}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext3\x00', &(0x7f0000000600)='./file1\x00', 0x0, &(0x7f0000000000)={[{@bsdgroups}, {@user_xattr}]}, 0x1, 0x5d7, &(0x7f0000000c80)="$eJzs3V2IXGcZAOB3ZmdSu4luK7Waaput1Tb2Zza7W4KpBcmFF9qm1P5cGYlLMtmEnc3EnQl2txY2FKGCkVC90isFQcWLiKAgXhTEeil4p5QKFlECoViKolFHzpmZZTY7u5Pt/px0z/PA2f3ON+fs9555+56Z8/XMJIDcGk1+FCL2RMSrETHSXl2+wWj718XJS6eSpRCt1tNvFtLtXpi8dKq7aXe/3cmPYsSHkl+/idhdXjluY35hZqpWq8511seas2fHGvMLD52enZquTlfPTEyOHzwwcXD84KFNO9YfPf/y515//vGrF64M/+C1vfv+mcS7p/NY73FsltEY7Twn5fho7wOFiE9v9mAZGYqIUkR8IOtAWLejv//Gs938ldP6H4mhdC1iePLoWyNx4dGsYwS2Tiu12qNDrWt0dwB2hIKShpzqvtIn17/dZbvee8zslIvgd7Erh9sXgC905nYuLuW/FMXONuUtur7f97eI0Wjef+mzd38tWdJLz23874+IxfORTtStrP9COjd2S2e7eyJif0R8LCI+HhH3RsR9Gxz7mS8m+f/Tt3r7tvP8w/Xn/xMRUYmI+yPigYh4MCIe2uDYtx9J8r/7S7198p8fd3w+6wjI0u9eyjoC0vP/gVKp3/m/uHzT9wz4UyPXdtw9YIdW+v8VF9/o7XP+z4+nns46ArL0xMGsIyBL330z6wh45XD7Ym7l638xbu/ZLml/sH2pGHuT9+4R8eGI+EhE3BkRd0XEvu79RNfpq48l21eqvX0rX/+LlzdyfKztyuGIR3vu7brYk/+OW4Y6a+9N5wPKhZOna9UDEfG+dE6ofFOyPr7GGF9f/PVj/fp/cmeS/0890Z3/S5Zk/HQucEnxcumm5fudmGpObfS4abtyPuKOUr/8Fzp3ArXv62tFxNg7HOPF/T/9bb/+Tz6V5P/eB9fOP1up9b32PG6//HcV1r4/cyw9H4x1zworvRi3XejX/+TVJP9v/FH+s5PU//Da+U/P/0v36zbWP0bp4uVv9u2fTfL/l1+9k/P/rsIzaYC7On3PTTWbc+MRuwqPr+yfWH/MO1X3+eg+X0n+99/T//X//Z19kic0qez/RsT/IuJfEfHviLgaEf+JiL9HxFtrjPnLlx/5Rb/+yWeT/P/1VfWfnST/JwbUf2FZ/a+/8Z27Dn2l39g//H6S/+HK4Pp/OA1mf6fH+7/BrjdBWccJAAAAAAAAwOYopt+BVyhWltrFYqXS/g6/22K4WKs3mg+crJ87cyI6nwctF7t3eo303A863vmsaHd94pr1yYi4NSJeGro5Xa8cr9dOZH3wkFN7Il7/2ZeP79q9Sv0nXhvKOkpgKyT1f/LbQ4tJ+211Du9en1n/Lkn9//jt2fRzWeof8kX9Q36pf8gv9Q/5pf4hv9Q/5Jf6h/xS/5Bf6h/yq7f+gXx68siRZGl1v/fzTH369Myps4cmDlRmzx2vHK/Pna1M1+vT6Sd2Zgf/vVq9fnb84Tj33Fiz2miONeYXjs3Wz51pHku/N/pYtbwNxwQM9o8/f+Hnt+575Q+FiFh85OZ0iZ7vzlarsLO59If8KmUdAJCZ9D1+IesogCwNOgWs+o9/H938WIDtUcw6ACAz9+01/w95Zf4f8sv8P+SX9/iA+X/IH/P/kF/Vucb8wsxUrbaikXVkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD51JhfmJmq1apzGho3TON83BBhbEajdGOEsVrj/wEAAP//LCZEbA==") 40.959206474s ago: executing program 3 (id=117): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f0000000540), 0x1, 0x79e, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8801, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) write$rfkill(r0, &(0x7f0000000140)={0x9, 0x6}, 0x3c) 40.891633818s ago: executing program 3 (id=118): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x1000, 0x0, 0x0, 0x0}, &(0x7f0000001340)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000240)={0x0, 0x0, 0x20}, &(0x7f0000000300)='./file1\x00', 0x18, 0x0, 0x12345}) io_uring_enter(r5, 0x1, 0x1, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2042, 0x19d) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000080000006a0a00ff000000006e000000000000009500000000000000181000001b5a7ab9130fe16c71bb94e13df32675143f5b352f3ae510f2af41a065cc88f753d51d55bbe94b469a927983744aea63f9610d0157faf31b5007a121bcae54b1110684d1bb805f23d20beac59e6d11615127420e1f3fdd014bbdda791cb7ea03dc715771ef9a7a04d4e94b226e", @ANYRES32, @ANYBLOB="100000000000002505000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x161, &(0x7f0000000180)=""/149, 0x0, 0x284, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd84, 0x10, 0x0, 0x1e}, 0x2a) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002880)={0x38, r9, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4883}, 0x4894) r10 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r10, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast1}}, 0x24) recvfrom(r10, &(0x7f00000002c0)=""/4096, 0x1000, 0x2, &(0x7f00000012c0)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x12}, 0x3366}}, 0x80) r11 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r11, 0x10f, 0x83, &(0x7f0000000080), &(0x7f0000000240)=0x4) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) 39.886067288s ago: executing program 3 (id=121): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010300000000fbdbdf252600000018000180140002"], 0x2c}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001c00010429bd7100ffdbdf2507000000", @ANYRES32=r4, @ANYBLOB="0004"], 0x28}}, 0x840) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xe0}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) r6 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000340)='./file2\x00', 0x444, &(0x7f0000000100), 0x3, 0x446, &(0x7f0000000f40)="$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") lsetxattr$trusted_overlay_redirect(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'none\x00', 0x0, 0x4001000, 0x4a}, 0x2c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)='9', 0x1}], 0x1) statx(r6, &(0x7f0000000240)='./file2\x00', 0x2000, 0x40, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x2, &(0x7f00000007c0)={[{@verity_off}, {@verity_off}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@redirect_dir_nofollow}], [{@smackfsroot={'smackfsroot', 0x3d, '-'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@euid_lt={'euid<', 0xee01}}, {@obj_type={'obj_type', 0x3d, ']]'}}, {@uid_lt={'uid<', r10}}, {@smackfstransmute={'smackfstransmute', 0x3d, '&:%@p,({-]-/'}}]}) shmctl$SHM_UNLOCK(0x0, 0xc) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff}, 0x10000) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r12}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r12, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r12, &(0x7f0000001dc0)={0x50, 0x0, r13, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) syz_fuse_handle_req(r12, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x10001, {0x5, 0x3, 0xdc, 0x8, 0x3, 0x1, {0x6, 0x8, 0xfffffffffffffff6, 0x7f, 0x1ff, 0x75, 0xfffffffe, 0x7, 0x1, 0x4000, 0xfffffff4, r14, r15, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300), 0x828, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r11, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,cache=none,access=any,version=9p2000.L,noextend,dfltuid=', @ANYRESHEX=r14, @ANYBLOB="2c6d6d61702c736d61636b6673726f6f743d6f01000000000000007569643c", @ANYRESDEC=r10, @ANYBLOB=',fowner=', @ANYRESDEC=r10, @ANYBLOB=',\x00']) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) 38.664035528s ago: executing program 3 (id=127): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x3, {0xa, 0x10000, 0x9, 0xfffffffe}}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x21, 0x1, 0x3, 0xfffffffd, {{0x17, 0x4, 0x0, 0x5, 0x5c, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x43}, {[@ssrr={0x89, 0x17, 0xed, [@empty, @dev={0xac, 0x14, 0x14, 0x2f}, @loopback, @remote, @multicast2]}, @ssrr={0x89, 0x13, 0xcb, [@multicast2, @empty, @remote, @empty]}, @end, @lsrr={0x83, 0xb, 0x4b, [@broadcast, @local]}, @cipso={0x86, 0x10, 0x3, [{0x5, 0x3, '\n'}, {0x1, 0x7, "4abba3dc4a"}]}]}}}}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000001811000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000bb000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000000000085000000ba000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x14, '\x00', r2, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00'}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@map=r1, 0x1, 0x0, 0x9, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r3, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000000480)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x8, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@fallback=r1, r4, 0x1d, 0x28, r3, @void, @void, @void, @value=r6, r5}, 0x20) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) (async) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x3, {0xa, 0x10000, 0x9, 0xfffffffe}}) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x21, 0x1, 0x3, 0xfffffffd, {{0x17, 0x4, 0x0, 0x5, 0x5c, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x43}, {[@ssrr={0x89, 0x17, 0xed, [@empty, @dev={0xac, 0x14, 0x14, 0x2f}, @loopback, @remote, @multicast2]}, @ssrr={0x89, 0x13, 0xcb, [@multicast2, @empty, @remote, @empty]}, @end, @lsrr={0x83, 0xb, 0x4b, [@broadcast, @local]}, @cipso={0x86, 0x10, 0x3, [{0x5, 0x3, '\n'}, {0x1, 0x7, "4abba3dc4a"}]}]}}}}}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000001811000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000bb000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000000000085000000ba000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x14, '\x00', r2, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00'}, 0x18) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@map=r1, 0x1, 0x0, 0x9, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0]}, 0x40) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r3, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000000480)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x8, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@fallback=r1, r4, 0x1d, 0x28, r3, @void, @void, @void, @value=r6, r5}, 0x20) (async) 37.800178365s ago: executing program 3 (id=131): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) file_setattr(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x88, 0xd9, 0x3, 0xb, 0x57519bea}, 0x18, 0x1000) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r5}}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0xe5c2}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) io_setup(0x8, &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r6, {0x10}}, './file0\x00'}) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x7, 0x4) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000340)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 37.778761675s ago: executing program 32 (id=131): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) file_setattr(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x88, 0xd9, 0x3, 0xb, 0x57519bea}, 0x18, 0x1000) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r5}}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0xe5c2}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) io_setup(0x8, &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r6, {0x10}}, './file0\x00'}) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x7, 0x4) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000340)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 32.282695896s ago: executing program 33 (id=72): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x17, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000820020e2898f85cc065e6eabbf4585d98579400000950021000000000058e3b9bb5c336a7cc00cd788a3d7c16ba8644320c542028f64cf2bab055d66668bda1d1a8d2e5c8a4d005cd60652c07ef708c45456f7fb4e6cc240c385027aff7924582e71a555bd346f6f73cb686b3a19563eb637b232360f9d602e8e6eb76724c89a4e6a1c486046149b14647d86ade5fa88278b8f96ea62508ad7"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) ptrace$setregset(0x4205, 0x0, 0x2, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610) prctl$PR_SET_SECCOMP(0x4e, 0x0, 0x0) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="120000000200000000000000", @ANYRES32, @ANYBLOB="a7a2bd02b8a2fe65eefcbf4d43aa2a8a54926b44cb9d0d0c86870da8655ceaabe4604b306a1c6553db2c9f063bacd260f221b67a14fa12b4b1000000006b1441ce2c2091274a042351abb636e79962ee118213be29b48ac179462b8a33f3c8ac386452898f298e37b44e8f710ee252d981ca96e0f6ae2fb089f83edf7223fdb48f330ca2d4d3398c555c238e45b0e329ead26b128dc3d7408717f7526bc2fdba3e73f57978f2c099d765edf99c3aa074c591abaf00"/194, @ANYRES64=0x0], 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r4, 0x10f, 0x82, &(0x7f0000000000), 0x4) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOGET_FSCREENINFO(r5, 0x4601, 0xffffffffffffffff) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket(0x400000000010, 0x3, 0xfffffffd) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff7, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42, 0x1000}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x5, 0x9}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4004) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0x4, 0xfff8}, {}, {0x4, 0x8001}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044810}, 0x20000000) r13 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r13, 0x6, 0x0, 0x0, 0x0) fsmount(r13, 0x0, 0x0) 4.155998801s ago: executing program 2 (id=365): socket$nl_route(0x10, 0x3, 0x0) 4.10657104s ago: executing program 2 (id=367): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000800200000000000080012000307ff0008001100ff070000080010000000020008000f"], 0x54}}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0x28, 0x5, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c00028008000240000000030800034000000001080001400000001414000000110001"], 0xdc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {{0x0, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) connect$vsock_stream(r6, &(0x7f0000000180)={0x28, 0x0, 0x2711, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="b40800000000000073119b00000000008510000002000000b7000000000000009500c200000000009500001200000000978397f6f8d449eca162e33d3cc50e3ea2bda29b6c5c0dd4ae4a5723d7bb1782d799214e20806df14107bbb18383f65bfa943f096ffd3f1a5195665bd897b554a4229f80258ac79116086d8764612511b5fbf0562c4034196f45d920ce764e50311836d630a55bd079ffb7c7bfd4d9e226"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, 0x0, 0x0) file_setattr(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x88, 0xd9, 0x3, 0xb, 0x57519bea}, 0x71, 0x1000) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x1010008, &(0x7f0000003500)=ANY=[@ANYBLOB="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"], 0x1, 0x372, &(0x7f00000001c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r8, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xff80cf36ce696d53}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100225bd7000fbdbdf2510000000050038000100000005002d000000000008003a000200000008002c000300004ffed1163b0b382100050038000000000008002b00050000000500370000000000"], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4) 3.53417397s ago: executing program 6 (id=372): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x0, 0x1, 0xa, 0x7}) fcntl$lock(r1, 0x6, &(0x7f0000000180)={0x1, 0x0, 0x1000, 0x59}) fcntl$lock(r1, 0x25, &(0x7f0000000040)={0x0, 0x1, 0x207a8ab9, 0x1000000000000008}) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000005a00)='./gadget\x00', 0x930aa59063c1a109) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./gadget/dummy_udc\x00', &(0x7f00000000c0), 0x10008, &(0x7f00000003c0)={[{@xattr}]}) 3.430885718s ago: executing program 6 (id=374): r0 = memfd_secret(0x80000) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCFLSH(r1, 0x804c4700, 0xfffffffffffffffe) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, r0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x1, 0x2, 0x8, "d569e80e1000fa449676000000a82917fb00000000a663004000000400", 0x7f0800}) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) madvise(&(0x7f00001a8000/0x1000)=nil, 0x1000, 0x10) r3 = syz_open_dev$vim2m(&(0x7f0000000380), 0x0, 0x2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x28, r4, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc8c, 0x16}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xd90}]]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000001c0)={0x7fffffff, 0x1, 0x4}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYRES32=r6, @ANYBLOB="00000000969d92456aacee2292740cd5234c72abd19f789df50aab77f60873b71eafd9217fa3693232549f366de7ee80f62f12000af09f6c5b3a1fda8f229f3a33a29653d6d1049a78484da08e07004702cde3ad7faa02a867c4b4a04661f30090654de2cd3541aabd5d5c04bf10714d6a8bf4cb674cce9febab979178524e05824452464c41de58c8c13ba7d19a78312a5d27f93558494fc84d5d09bd3312"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = shmget$private(0x0, 0x1000, 0x80, &(0x7f000041e000/0x1000)=nil) shmat(r7, &(0x7f0000b2f000/0x1000)=nil, 0x1000) fadvise64(r0, 0x63, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x2000, {0x0, 0x0, 0x74, r9, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x4000860) 2.968634737s ago: executing program 2 (id=377): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000440)={0x20, 0x2, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x4}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4041}, 0x44010) r1 = syz_mount_image$vfat(&(0x7f0000000540), &(0x7f00000000c0)='./file1\x00', 0xa18c14, &(0x7f0000000640)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d63703835372c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030302c646f733178666c6f7070792c696f636861727365743d63703836312c73686f72746e616d653d77696e39352c696f636861727365743d6d61637475726b6973682c636f6465706167653d3835322c756e695f786c6174653d302c636865636b3d7374726963742c726f6469722c73686f72746e616d653d6d697865642c757466383d302c726f6469722c00efc1f2666b55ac35"], 0x81, 0x2c0, &(0x7f0000000280)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) 2.777881988s ago: executing program 6 (id=378): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) socket(0x10, 0x803, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x4, 0x6, 0x4, 0x100, 0x81, 0x540000, r1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) munlockall() bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x3, 0x4, 0x4, 0xfffffc01}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000b00)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @local, 0x1, 0x6, 0x2, 0x100, 0x4, 0x86020086, r4}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 2.686448548s ago: executing program 6 (id=380): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffff, r2, 0x8}) socket$inet6(0xa, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x3000000}, 0x1c) 2.175658088s ago: executing program 2 (id=387): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000800200000000000080012000307ff0008001100ff070000080010000000020008000f"], 0x54}}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0x28, 0x5, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c00028008000240000000030800034000000001080001400000001414000000110001"], 0xdc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {{0x0, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) connect$vsock_stream(r6, &(0x7f0000000180)={0x28, 0x0, 0x2711, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="b40800000000000073119b00000000008510000002000000b7000000000000009500c200000000009500001200000000978397f6f8d449eca162e33d3cc50e3ea2bda29b6c5c0dd4ae4a5723d7bb1782d799214e20806df14107bbb18383f65bfa943f096ffd3f1a5195665bd897b554a4229f80258ac79116086d8764612511b5fbf0562c4034196f45d920ce764e50311836d630a55bd079ffb7c7bfd4d9e226"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, 0x0, 0x0) file_setattr(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x88, 0xd9, 0x3, 0xb, 0x57519bea}, 0x71, 0x1000) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x1010008, &(0x7f0000003500)=ANY=[@ANYBLOB="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"], 0x1, 0x372, &(0x7f00000001c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r8, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xff80cf36ce696d53}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100225bd7000fbdbdf2510000000050038000100000005002d000000000008003a000200000008002c000300004ffed1163b0b382100050038000000000008002b00050000000500370000000000"], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4) 1.631162213s ago: executing program 6 (id=394): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300)=0x5, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000040)="ee", 0xffffffffffffff75, 0x20004010, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x3) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000006800010027bd7000ffdbdf25020000000000040002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 1.564912975s ago: executing program 4 (id=396): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x0, 0x1, 0xa, 0x7}) fcntl$lock(r3, 0x6, &(0x7f0000000180)={0x1, 0x0, 0x1000, 0x59}) fcntl$lock(r3, 0x25, &(0x7f0000000040)={0x0, 0x1, 0x207a8ab9, 0x1000000000000008}) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000005a00)='./gadget\x00', 0x930aa59063c1a109) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./gadget/dummy_udc\x00', &(0x7f00000000c0), 0x10008, &(0x7f00000003c0)={[{@xattr}]}) 1.562755664s ago: executing program 4 (id=397): r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000240)) r2 = memfd_create(&(0x7f00000001c0)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf1<', 0x3) pwrite64(r2, &(0x7f0000000180)='q', 0x1, 0x100004) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000080)=0x1, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000000640000000000000018000000000000000000000000000000950000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) unshare(0x24020400) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r4, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3, 0x8, 0x0, 0x0}}, 0x10) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x401, 0xfffffffd, 0xc4cf, 0x7, "0441920887e87fcb367800000000080100", 0x4, 0x200}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000001c0)=0x1) sendfile(r3, r2, 0x0, 0x82) r6 = fsmount(r0, 0x0, 0x82) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dcbeec0696c37b64e3b24da3183dbe97e805165c0f63cdc2e82818254950ee03568b88091e6a86450545c0e18e09"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000380)='wg1\x00', 0x4) unlinkat(r6, &(0x7f00000003c0)='./file0\x00', 0x200) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r8, r7, 0x2, 0x0, @void}, 0x10) 1.493668685s ago: executing program 4 (id=399): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f0000000540), 0x1, 0x79e, &(0x7f00000007c0)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0xf, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8801, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) write$rfkill(r1, &(0x7f0000000140)={0x9, 0x6}, 0x8) 1.409037918s ago: executing program 4 (id=401): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x230000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00'}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000cc0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) sendmsg$nl_route(r0, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f00000000c0)=@getnexthop={0x28, 0x6a, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r2}, @NHA_OIF={0x8, 0x5, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40440d0}, 0xcb00bee6f6515a03) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff4, 0x0, 0x0, 0x0, 0xff20}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$TIOCEXCL(r3, 0x540c) waitid(0x2, 0xffffffffffffffff, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) timerfd_create(0x0, 0x0) syz_io_uring_setup(0xf03, &(0x7f0000000380)={0x0, 0x595f, 0x10000, 0x0, 0x51}, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(0x0, r4, r5, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) r6 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x34}}, 0x0) 1.344769749s ago: executing program 4 (id=402): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000005d40)=ANY=[@ANYBLOB="000086dd00000100000000000000600000001b012c00fe8000000000000000000000000000aaff0200000000000000000000000000012b000000000000000401"], 0x1b37) 933.967557ms ago: executing program 2 (id=404): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="08000100ac14"], 0x2c}}, 0xea5bc50b6199d77e) 890.985079ms ago: executing program 4 (id=406): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) openat(0xffffffffffffff9c, 0x0, 0x442, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000300)={'mangle\x00', 0x2, [{}, {}]}, 0x48) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000100)={0xf0f016, 0x2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x44, r6, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x44}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0134014030d9"}) 878.500304ms ago: executing program 1 (id=407): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f0000000540), 0x1, 0x79e, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8801, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) write$rfkill(r0, &(0x7f0000000140)={0x8, 0x6}, 0xfe76) fallocate(r0, 0x700000000000000, 0xfff, 0x9) 804.108745ms ago: executing program 1 (id=408): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r1, 0x4b44, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10}, 0xfffffffffffffc7f) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000001c0)=0xf) write$binfmt_misc(r7, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8}]}}]}, 0x3c}}, 0x20040084) close(r5) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 524.519409ms ago: executing program 1 (id=409): r0 = socket$netlink(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf19, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0xffff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000890) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018, 0xffffffffffffffff}, './file1\x00'}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000001c0)={0x4, &(0x7f0000000180)=[{0x2, 0x0, 0x3, 0x91d}, {0xbd1b, 0x1, 0x5, 0x2}, {0x0, 0x9, 0x40, 0x86d}, {0x1, 0x2, 0x9, 0x43}]}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x4}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40488e0}, 0x4040010) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) 515.873145ms ago: executing program 6 (id=410): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) listen(r3, 0x10040) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x70, 0x10, 0x401, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x20, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}, @AF_MPLS={0x4}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0066a6", 0x14, 0x6, 0x1, @loopback={0x300}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x1, 0x0, 0x6}}}}}}}, 0x0) unshare(0x2c020400) openat(0xffffffffffffff9c, 0x0, 0x0, 0x83) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x28}, [@ldst={0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x10}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") fsopen(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0x3000009, 0x0, 0x81, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, ').\x00'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x42, 0x5) r5 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r5, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) 461.123118ms ago: executing program 1 (id=411): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x0, 0x1, 0xa, 0x7}) fcntl$lock(r3, 0x6, &(0x7f0000000180)={0x1, 0x0, 0x1000, 0x59}) fcntl$lock(r3, 0x25, &(0x7f0000000040)={0x0, 0x1, 0x207a8ab9, 0x1000000000000008}) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000005a00)='./gadget\x00', 0x930aa59063c1a109) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./gadget/dummy_udc\x00', &(0x7f00000000c0), 0x10008, &(0x7f00000003c0)={[{@xattr}]}) 389.254879ms ago: executing program 5 (id=412): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x230000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00'}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000cc0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) sendmsg$nl_route(r0, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f00000000c0)=@getnexthop={0x28, 0x6a, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r2}, @NHA_OIF={0x8, 0x5, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40440d0}, 0xcb00bee6f6515a03) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff4, 0x0, 0x0, 0x0, 0xff20}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$TIOCEXCL(r3, 0x540c) waitid(0x2, 0xffffffffffffffff, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) timerfd_create(0x0, 0x0) syz_io_uring_setup(0xf03, &(0x7f0000000380)={0x0, 0x595f, 0x10000, 0x0, 0x51}, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(0x0, r4, r5, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) r6 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x34}}, 0x0) 388.125189ms ago: executing program 1 (id=413): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002d00)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000003000000010000000000000e0200000000000000000000000100008400000000000000"], 0x0, 0x4f, 0x0, 0x8}, 0x28) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 387.028491ms ago: executing program 1 (id=414): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x7fffffff, 0x3, 0x7, 0x14d11, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5, 0xe}, 0x50) r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000000c0)={{r1}, 0x0, 0x2, @unused=[0x4, 0xffff, 0x8000000000000000], @subvolid=0x8000}) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000010c0)={0x0, 0xc}, 0x8) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000001100)=[{{0x4}, {0x1, 0x0, 0x1, 0x1}}, {{0x3, 0x1}, {0x4, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x2, 0x1, 0x1}, {0x4, 0x1}}], 0x28) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000001140)=0x3, &(0x7f0000001180)=0x2) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000011c0)={0x0, 0x0}, &(0x7f0000001200)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000001240)={{{@in6=@local, @in6=@local, 0x4e21, 0x6, 0x4e23, 0x3, 0x2, 0x0, 0xa0, 0x5c, 0x0, r3}, {0x7, 0x6, 0x8, 0x6, 0x2, 0xc, 0x2, 0x1}, {0x0, 0x8, 0x3746, 0x6bf}, 0x6, 0x6e6bb9, 0x0, 0x0, 0x3, 0x3}, {{@in6=@mcast1, 0x4d3, 0x3c}, 0x7, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3502, 0x4, 0x0, 0x29, 0x6, 0x4, 0xf}}, 0xe8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r4, &(0x7f0000001340)={0x1f, 0x8001, @none, 0x6}, 0xe) syz_80211_inject_frame(&(0x7f0000001380)=@device_b, &(0x7f00000013c0)=@mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {}, @device_b, @device_b, @random="27ce077f0917", {0x9, 0x2}, @value=@ver_80211n={0x0, 0x7f, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1}}, 0x4000, 0x63, @random=0x1000, @void, @void, [{0xdd, 0x43, "ab1dd59edd99d43fd142a9f915d02f54bea76a315d9568fe037ff082ee85b960259956dbf1aa9f7e68557562107de019816f1764a1eef06ec4e19a051027fb0df07254"}]}, 0x67) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001440), 0x540, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000001480)={'wg1\x00', @random="10e4b177e35e"}) syz_80211_inject_frame(&(0x7f00000014c0)=@broadcast, &(0x7f0000001500)=@mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @broadcast, @from_mac=@device_b, {0x3, 0x2}}, 0x2, 0x40, @default, @void, @void, [{0xdd, 0x12, "3b62acdcbcb625ae9700e6acc66d41483485"}]}, 0x32) r6 = socket(0x22, 0x1, 0x3da3) syz_80211_inject_frame(&(0x7f0000001540)=@broadcast, &(0x7f0000001580)=@data_frame={@a_msdu=@type01={{0x0, 0x2, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x6}, @broadcast, @from_mac, @initial, {0x6, 0x8}, "", @void, @value=@ver_80211n={0x0, 0xf31, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}, @a_msdu=[{@broadcast, @device_b, 0xe7, "37aa1c8a9a69c1408a3157e4306509941ffdadaec73cafc16030cc07d55228611badc0e7162aed4f624d6dc475058fff21b19c8089989342721357b3930cfcb7d2834d4477faa38189a8a718c0446579889e87e2df849ab6d161e55bb6a8348fc37858d4eb8baaa6f33a5005e3ee5b6f99defe81bda12b3fdb88408316da46276efc71613815684223ebfdc689626d6ee0d3be0c505c6820abfa5198315ded27225788c0d75975af24c0d68bee8e89d8cfc223c60f7e56a5b20526f2bb5f89a0fe8f7539eb6bb7467765ca7986f2e14e97b680730b8bfe0ce6ac1933fa523116f155743136ac8b"}, {@device_a, @broadcast, 0x12, "d160cbe79d491ee7ada5dac0a6d07ef0dad6"}, {@broadcast, @device_b, 0xce, "5851136af8f5963d5358a7830da9ffedc23714256d5e5fcf357e04a4dad7c9f6c27ff7916d68ca61299c3e512be10c30ae6cd08a12e8b8295e6f1584f8559613acfd69b115b18978f8a1847bc0996d895e6b730894f4dd2bb5acacea1c82b9df7c5c7118bc41c28c6cd5d478fdd65d6cc9b2ce91f1132ab4226570c08986e24fd1bccb7f95bf109f2c027246e438c061ee595e2ce50c4295949499471fe6c43229569bcdf25d0c84b7858f5710e17dfe5d1e509161bbc340bd94c6b2778863d6020afc3586f00c343a11545308df"}, {@device_b, @device_a, 0x18, "4fbd3e425906eaca4b3edb5a23d8bb67ddc04c0fb787df4d"}, {@device_a, @device_a, 0x23, "83130d4a710f3894e95b83c16961b29463b76030e12a7761469011dd703970fa838f32"}]}, 0x26c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x5) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001800), 0x8c02, 0x0) quotactl_fd$Q_SYNC(r7, 0xffffffff80000101, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000018c0)={{r2, 0xffffffffffffffff}, &(0x7f0000001840), &(0x7f0000001880)=r2}, 0x20) fstatfs(r8, &(0x7f0000001900)=""/42) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001980), r6) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000001a80)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x60, r9, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xff}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x10}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x800}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r10, 0x84, 0x65, &(0x7f0000001ac0)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2e}}, @in6={0xa, 0x4e23, 0x5, @local}, @in6={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3281}, @in6={0xa, 0x4e24, 0x4c, @local, 0x7f}, @in6={0xa, 0x4e20, 0x2000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1ca}], 0x80) r11 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000001b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001b80)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r11, 0x8916, &(0x7f0000001bc0)={@empty, 0x18, r12}) fsopen(&(0x7f0000001c00)='fuseblk\x00', 0x1) 386.374375ms ago: executing program 5 (id=415): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40488c0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000301410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 109.931121ms ago: executing program 5 (id=416): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) (async) connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @empty}}, 0x24) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) (async) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) (async) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r3 = dup(r2) write$cgroup_subtree(r3, &(0x7f00000001c0)=ANY=[], 0x32600) (async) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x7, 0x5404, 0x204, 0x5, 0x0, 0x1, 0x1, 0x80000001}, 0x20) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000880)="c1c03939be", &(0x7f0000001a40), 0x1000009, r4}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000600)={0x0, &(0x7f00000006c0)=""/145, &(0x7f0000000480), &(0x7f0000000780), 0x4, r4}, 0x38) (async) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000740)={0x0, 0x1}, 0x8) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x409c) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a07000000000000000000020000000900010073797a30000000009c000000030a01020000000000000000020000060900010073797a300000000079000300fd721e23f25f47a7af48fbb07c400f2ffd8d27130601205b56f46dc2de1fa3d7afb2f185d0371736af66032ae4eed98dbb95537f4f247aa2bc4978345407669db4", @ANYBLOB="7a4eb2773bf0bfbc314f974e899663bcef29ec07bf9e40c1490e186b82ab8f"], 0xe4}, 0x1, 0x0, 0x0, 0xc001}, 0x0) 91.236859ms ago: executing program 5 (id=417): r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 71.870449ms ago: executing program 2 (id=418): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x12, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000010000e30000000100000000630114000000b9cf5a3f8554fe20aa00"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f0000000540), 0x1, 0x79e, &(0x7f00000007c0)="$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") socket$packet(0x11, 0x2, 0x300) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002440)='net/ptype\x00') read$FUSE(r0, &(0x7f00000061c0)={0x2020}, 0x2020) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8801, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffb000/0x4000)=nil) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000180)={0x1d, r4, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl2\x00', r4, 0x2d, 0x0, 0x8, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x8, 0x700, 0x77, 0x1}}) shmctl$IPC_RMID(r2, 0x0) write$rfkill(r1, &(0x7f0000000140)={0x9, 0x6}, 0x8) 64.584876ms ago: executing program 5 (id=419): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000140)) r1 = syz_open_dev$media(&(0x7f0000000040), 0x4, 0x142040) ioctl$XFS_IOC_FSCOUNTS(r1, 0x80205871, &(0x7f0000000000)) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000300)={0x80000000, 0x0, &(0x7f0000000380)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r1, 0xc1007c01, &(0x7f0000000080)={r2}) 0s ago: executing program 5 (id=420): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2b, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08104500001d0067000000029078e0000001e000000111fd9078000000000054b801863150f7ae531e1eb6e27f8b19aff1567c3a05f8746775804ebe8f30a54c5069ab89ee305ec9bc488b5f77744e48651c58144d6a2f"], 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x0, 0x1, "ba"}, 0x9) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffe}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000004440)=[{{&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000440)="4c797f7d046411a939123f88317dd6611975cfe37778c26475bd7a334fcdd164817a920b7611537cd7f678d300fd40087d72b357a1e1b8d02d10b6d58857a91fcac78af0a615f3679c7faa03a58697ef41bb5bd7eef7d3b3665d27bae9", 0x5d}], 0x1, &(0x7f0000000700)=[@rights={{0x18, 0x1, 0x1, [r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x1c, 0x1, 0x1, [r5, r1, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r2}}}], 0xb8, 0x50}}, {{&(0x7f0000004200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004340)=[{&(0x7f0000004280)="c610e8176e3fad62fdb4195fb0355038dfa2547fe9e8551aead535f73e2c6c374b2734bb9cde8cd5c838b5930e8108d737993b05b5897d7cc0e338a417f702489e852f4c117c60a1a28429f9755050df14faa2612966e9b8267a85e5e540e58a24636538ac40a93e092c76b3a6788ebb0f7754c202924e294329dd6f076c1adf5f77eaf4f9562dd347d283a825724a3ac24793", 0x93}], 0x1, &(0x7f0000004380)=[@rights={{0x20, 0x1, 0x1, [r1, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98, 0x80841}}], 0x2, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x54, 0x24, 0xe0b, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0x4, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_FLOW_MODE={0x8}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x3}, @TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x54}}, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000008300)={0x0, 0x0, &(0x7f00000082c0)={&(0x7f0000001300)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0xfff3, 0x8}, {0x1, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000890}, 0x26000084) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, 0x0) getsockname$packet(r9, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) kernel console output (not intermixed with test programs): [ 8.400782][ T4399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 8.402621][ T4399] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK [ 8.453947][ T39] gve 0000:00:00.0 enp0s0: Device link is up. Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.252' (ED25519) to the list of known hosts. syzkaller login: [ 28.416787][ T4698] cgroup: Unknown subsys name 'net' [ 28.546765][ T4698] cgroup: Unknown subsys name 'cpuset' [ 28.548919][ T4698] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.729919][ T4698] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 30.088979][ T4725] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.089020][ T4726] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.089890][ T4726] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.090106][ T4726] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.090286][ T4726] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.090611][ T4726] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.090837][ T4726] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.091450][ T4725] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.091794][ T4725] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.091989][ T4725] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.092595][ T4725] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.092744][ T4725] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.093011][ T4725] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.093482][ T4725] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.093838][ T4725] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.094023][ T4725] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.094128][ T4725] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.094501][ T4725] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.094714][ T4725] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.096247][ T4717] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.096642][ T4717] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.097137][ T4717] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.097337][ T4717] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.097754][ T4717] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.107096][ T4717] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.501274][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.501720][ T4713] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.501830][ T4713] bridge_slave_0: entered allmulticast mode [ 30.502315][ T4713] bridge_slave_0: entered promiscuous mode [ 30.505185][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.505213][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.505328][ T4710] bridge_slave_0: entered allmulticast mode [ 30.506167][ T4710] bridge_slave_0: entered promiscuous mode [ 30.506959][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.506979][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.507028][ T4710] bridge_slave_1: entered allmulticast mode [ 30.507435][ T4710] bridge_slave_1: entered promiscuous mode [ 30.517375][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.517438][ T4713] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.517503][ T4713] bridge_slave_1: entered allmulticast mode [ 30.517949][ T4713] bridge_slave_1: entered promiscuous mode [ 30.540306][ T4713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.541452][ T4713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.549412][ T4710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.550429][ T4710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.558536][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.559923][ T4715] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.561263][ T4715] bridge_slave_0: entered allmulticast mode [ 30.562831][ T4715] bridge_slave_0: entered promiscuous mode [ 30.572389][ T4713] team0: Port device team_slave_0 added [ 30.577905][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.577995][ T4715] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.578056][ T4715] bridge_slave_1: entered allmulticast mode [ 30.578504][ T4715] bridge_slave_1: entered promiscuous mode [ 30.585093][ T4713] team0: Port device team_slave_1 added [ 30.589216][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.589265][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.589328][ T4711] bridge_slave_0: entered allmulticast mode [ 30.589764][ T4711] bridge_slave_0: entered promiscuous mode [ 30.590622][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.590642][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.590698][ T4711] bridge_slave_1: entered allmulticast mode [ 30.591157][ T4711] bridge_slave_1: entered promiscuous mode [ 30.592101][ T4710] team0: Port device team_slave_0 added [ 30.593066][ T4710] team0: Port device team_slave_1 added [ 30.601842][ T4715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.614961][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.618832][ T4715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.622509][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.623797][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.625525][ T4713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.626299][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.626307][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.626322][ T4713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.637070][ T4713] hsr_slave_0: entered promiscuous mode [ 30.637594][ T4713] hsr_slave_1: entered promiscuous mode [ 30.638814][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.652739][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.652767][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.652782][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.653743][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.653750][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.653760][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.661121][ T4711] team0: Port device team_slave_0 added [ 30.662211][ T4711] team0: Port device team_slave_1 added [ 30.664806][ T4715] team0: Port device team_slave_0 added [ 30.682640][ T4715] team0: Port device team_slave_1 added [ 30.693324][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.693354][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.693370][ T4711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.693946][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.693953][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.693967][ T4711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.700324][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.700413][ T4712] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.700467][ T4712] bridge_slave_0: entered allmulticast mode [ 30.700915][ T4712] bridge_slave_0: entered promiscuous mode [ 30.710077][ T4710] hsr_slave_0: entered promiscuous mode [ 30.710416][ T4710] hsr_slave_1: entered promiscuous mode [ 30.710652][ T4710] debugfs: 'hsr0' already exists in 'hsr' [ 30.710704][ T4710] Cannot create hsr debugfs directory [ 30.717978][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.718054][ T4712] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.718144][ T4712] bridge_slave_1: entered allmulticast mode [ 30.718577][ T4712] bridge_slave_1: entered promiscuous mode [ 30.736738][ T4712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.737024][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.737032][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.737048][ T4715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.744549][ T4711] hsr_slave_0: entered promiscuous mode [ 30.744886][ T4711] hsr_slave_1: entered promiscuous mode [ 30.745109][ T4711] debugfs: 'hsr0' already exists in 'hsr' [ 30.745119][ T4711] Cannot create hsr debugfs directory [ 30.746819][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.746831][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.746851][ T4715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.748051][ T4712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.782071][ T4712] team0: Port device team_slave_0 added [ 30.798238][ T4712] team0: Port device team_slave_1 added [ 30.812148][ T4715] hsr_slave_0: entered promiscuous mode [ 30.812534][ T4715] hsr_slave_1: entered promiscuous mode [ 30.812762][ T4715] debugfs: 'hsr0' already exists in 'hsr' [ 30.812772][ T4715] Cannot create hsr debugfs directory [ 30.826642][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.827961][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.832560][ T4712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.846508][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.847893][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.853051][ T4712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.892208][ T4712] hsr_slave_0: entered promiscuous mode [ 30.894151][ T4712] hsr_slave_1: entered promiscuous mode [ 30.895807][ T4712] debugfs: 'hsr0' already exists in 'hsr' [ 30.895834][ T4712] Cannot create hsr debugfs directory [ 30.920331][ T4713] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.923170][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.924945][ T4713] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.927656][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.929468][ T4713] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.931884][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.941782][ T4713] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.944376][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.977602][ T4710] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.980359][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.986290][ T4710] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.988626][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.989225][ T4710] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.991012][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.993259][ T4710] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.995805][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.007411][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.007467][ T4713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.007616][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.007645][ T4713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.021190][ T4711] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.024114][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.027483][ T4711] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.029724][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.030876][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.030904][ T4710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.030973][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.031001][ T4710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.048307][ T4711] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.050685][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.054951][ T4715] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.059134][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.059519][ T4711] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.061328][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.066244][ T4715] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.068405][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.077842][ T4715] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.080116][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.080669][ T4715] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.082265][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.102536][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.102582][ T4711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.102679][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.102715][ T4711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.106794][ T4712] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.109548][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.112906][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.112960][ T4715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.113041][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.113070][ T4715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.115741][ T4712] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.117090][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.117378][ T4712] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.118931][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.138480][ T4713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.138861][ T4712] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.140664][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.152743][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.167192][ T3604] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.168753][ T3604] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.170172][ T3604] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.171564][ T3604] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.173646][ T3604] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.176947][ T3604] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.178626][ T3604] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.180254][ T3604] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.187395][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.189219][ T4713] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.191655][ T4711] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.193077][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.201180][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.201227][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.201606][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.201625][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.202020][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.202037][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.202377][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.202395][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.216645][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.216699][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.222529][ T4715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.228115][ T3604] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.228155][ T3604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.262733][ T4715] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.282888][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.282937][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.294763][ T3604] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.294815][ T3604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.303738][ T4711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.322810][ T4712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.349537][ T4715] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.351758][ T4715] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.367720][ T4712] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.392641][ T4712] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.394866][ T4712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.399397][ T3604] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.399440][ T3604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.400020][ T3604] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.400040][ T3604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.467543][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.483045][ T4710] veth0_vlan: entered promiscuous mode [ 31.487099][ T4710] veth1_vlan: entered promiscuous mode [ 31.493966][ T4710] veth0_macvtap: entered promiscuous mode [ 31.497965][ T4710] veth1_macvtap: entered promiscuous mode [ 31.512595][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.522592][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.537192][ T15] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.537301][ T15] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.537324][ T15] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.537338][ T15] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.581094][ T4713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.593452][ T3728] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.593480][ T3728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.618301][ T4713] veth0_vlan: entered promiscuous mode [ 31.621758][ T3758] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.621790][ T3758] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.627514][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.637802][ T4713] veth1_vlan: entered promiscuous mode [ 31.650826][ T4715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.652995][ T4713] veth0_macvtap: entered promiscuous mode [ 31.657593][ T4713] veth1_macvtap: entered promiscuous mode [ 31.668438][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.671036][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.682178][ T3604] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.682498][ T3604] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.682523][ T3604] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.682540][ T3604] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.693872][ T4712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.723107][ T4710] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.724865][ T4715] veth0_vlan: entered promiscuous mode [ 31.741932][ T3758] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.741966][ T3758] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.759383][ T4715] veth1_vlan: entered promiscuous mode [ 31.769080][ T3758] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.769117][ T3758] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.786481][ T4712] veth0_vlan: entered promiscuous mode [ 31.788117][ T4892] loop1: detected capacity change from 0 to 1024 [ 31.788543][ T4712] veth1_vlan: entered promiscuous mode [ 31.791130][ T4892] EXT4-fs: Ignoring removed bh option [ 31.794245][ T4892] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 31.811963][ T4711] veth0_vlan: entered promiscuous mode [ 31.813717][ T4711] veth1_vlan: entered promiscuous mode [ 31.815576][ T4892] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002] [ 31.815653][ T4892] System zones: 0-1, 3-12 [ 31.819380][ T4892] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.820793][ T4712] veth0_macvtap: entered promiscuous mode [ 31.822588][ T4712] veth1_macvtap: entered promiscuous mode [ 31.833337][ T4715] veth0_macvtap: entered promiscuous mode [ 31.848358][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.852719][ T4715] veth1_macvtap: entered promiscuous mode [ 31.865470][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.873137][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.877718][ T3604] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.878480][ T3604] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.878557][ T3604] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.891482][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.894120][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.911865][ T4711] veth0_macvtap: entered promiscuous mode [ 31.930093][ T39] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.931807][ T39] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.933543][ T39] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.935206][ T39] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.948291][ T4711] veth1_macvtap: entered promiscuous mode [ 32.086780][ T4901] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #12: block 7: comm syz.1.2: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 32.088634][ T4901] EXT4-fs (loop1): Remounting filesystem read-only [ 32.165968][ T50] Bluetooth: hci0: command tx timeout [ 32.167541][ T50] Bluetooth: hci1: command tx timeout [ 32.168875][ T50] Bluetooth: hci4: command tx timeout [ 32.169985][ T50] Bluetooth: hci2: command tx timeout [ 32.171174][ T4716] Bluetooth: hci3: command tx timeout [ 32.187377][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.192769][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.194948][ T3728] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.194960][ T3728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.223082][ T3728] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.223360][ T3728] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.223397][ T3728] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.223424][ T3728] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.224458][ T3728] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.224475][ T3728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.267518][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.267557][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.294406][ T3728] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.294436][ T3728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.324330][ T3728] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.324365][ T3728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.556980][ T4906] virt_wifi0 speed is unknown, defaulting to 1000 [ 32.557340][ T4906] virt_wifi0 speed is unknown, defaulting to 1000 [ 32.560606][ T4906] virt_wifi0 speed is unknown, defaulting to 1000 [ 32.565193][ T4906] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 32.573238][ T4906] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 32.643775][ T4906] virt_wifi0 speed is unknown, defaulting to 1000 [ 32.647609][ T4906] virt_wifi0 speed is unknown, defaulting to 1000 [ 32.651249][ T4906] virt_wifi0 speed is unknown, defaulting to 1000 [ 32.654626][ T4906] virt_wifi0 speed is unknown, defaulting to 1000 [ 32.658487][ T4906] virt_wifi0 speed is unknown, defaulting to 1000 [ 33.102610][ T4914] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 33.105469][ T4914] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 33.108086][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.421093][ T3604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.421130][ T3604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.941261][ T4933] loop1: detected capacity change from 0 to 512 [ 33.941769][ T4933] ext4: Unknown parameter 'nouser_xattr' [ 33.970292][ T4935] loop2: detected capacity change from 0 to 8192 [ 34.245804][ T4717] Bluetooth: hci3: command tx timeout [ 34.246008][ T4717] Bluetooth: hci2: command tx timeout [ 34.246213][ T4717] Bluetooth: hci4: command tx timeout [ 34.246329][ T4717] Bluetooth: hci1: command tx timeout [ 34.246389][ T4717] Bluetooth: hci0: command tx timeout [ 35.340366][ T4945] siw: device registration error -23 [ 35.754513][ T4952] Config c/1 of g1 needs at least one function. [ 35.755319][ T4952] udc dummy_udc.0: failed to start g1: -22 [ 35.755397][ T4952] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 35.757629][ T4952] UDC core: g1: couldn't find an available UDC or it's busy [ 35.799981][ T4952] loop2: detected capacity change from 0 to 512 [ 36.321899][ T4952] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 36.326251][ T4716] Bluetooth: hci0: command tx timeout [ 36.326369][ T4716] Bluetooth: hci1: command tx timeout [ 36.326389][ T4716] Bluetooth: hci4: command tx timeout [ 36.326407][ T4716] Bluetooth: hci2: command tx timeout [ 36.326424][ T4716] Bluetooth: hci3: command tx timeout [ 36.847989][ T4955] loop1: detected capacity change from 0 to 1024 [ 36.916213][ T4955] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 36.942488][ T4966] netlink: 108 bytes leftover after parsing attributes in process `syz.4.13'. [ 36.954275][ T4955] Injecting memory failure for pfn 0x138d0a at process virtual address 0x2050a000 [ 36.977436][ T4969] netlink: 108 bytes leftover after parsing attributes in process `syz.0.15'. [ 36.978363][ T4955] Memory failure: 0x138d0a: Sending SIGBUS to syz.1.14:4955 due to hardware memory corruption [ 36.978432][ T4955] Memory failure: 0x138d0a: recovery action for dirty LRU page: Recovered [ 37.194026][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 37.631823][ T4982] netlink: 108 bytes leftover after parsing attributes in process `syz.4.19'. [ 38.166950][ T4996] loop0: detected capacity change from 0 to 512 [ 38.170408][ T4996] ext4: Unknown parameter 'nouser_xattr' [ 38.390302][ T4998] lo speed is unknown, defaulting to 1000 [ 38.390348][ T4998] lo speed is unknown, defaulting to 1000 [ 38.390577][ T4998] lo speed is unknown, defaulting to 1000 [ 38.392236][ T4998] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 38.416883][ T4998] lo speed is unknown, defaulting to 1000 [ 38.417318][ T4998] lo speed is unknown, defaulting to 1000 [ 38.417664][ T4998] lo speed is unknown, defaulting to 1000 [ 38.417995][ T4998] lo speed is unknown, defaulting to 1000 [ 38.418411][ T4998] lo speed is unknown, defaulting to 1000 [ 38.471286][ T4717] Bluetooth: hci3: command tx timeout [ 38.471381][ T4717] Bluetooth: hci2: command tx timeout [ 38.471451][ T4717] Bluetooth: hci4: command tx timeout [ 38.471511][ T4717] Bluetooth: hci1: command tx timeout [ 38.471571][ T4717] Bluetooth: hci0: command tx timeout [ 38.533419][ T5001] siw: device registration error -23 [ 38.536984][ T5001] netlink: 'syz.3.20': attribute type 4 has an invalid length. [ 38.762408][ T5005] loop1: detected capacity change from 0 to 2048 [ 38.784482][ T5005] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.883877][ T5005] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #13: comm syz.1.23: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 24836(4), depth 248(248) [ 39.077350][ T5013] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.242545][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.366876][ T5024] Config c/1 of g1 needs at least one function. [ 39.367345][ T5024] udc dummy_udc.0: failed to start g1: -22 [ 39.367404][ T5024] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 39.368969][ T5024] UDC core: g1: couldn't find an available UDC or it's busy [ 39.398631][ T5024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26'. [ 39.418677][ T5024] loop2: detected capacity change from 0 to 512 [ 39.431473][ T5024] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 41.089522][ T5035] loop2: detected capacity change from 0 to 256 [ 41.100820][ T5035] FAT-fs (loop2): data area starts beyond volume (274 > 64) [ 41.100850][ T5035] FAT-fs (loop2): Can't find a valid FAT filesystem [ 41.222367][ T5026] siw: device registration error -23 [ 41.434744][ T5040] loop0: detected capacity change from 0 to 512 [ 41.438090][ T5040] ext4: Unknown parameter 'nouser_xattr' [ 41.609352][ T5013] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.730096][ T5013] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.778077][ T5013] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.820232][ T5043] Config c/1 of g1 needs at least one function. [ 41.820661][ T5043] udc dummy_udc.0: failed to start g1: -22 [ 41.820717][ T5043] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 41.822816][ T5043] UDC core: g1: couldn't find an available UDC or it's busy [ 41.850205][ T5043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30'. [ 41.869709][ T5043] loop2: detected capacity change from 0 to 512 [ 41.876463][ T5043] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 42.104582][ T3728] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.108972][ T3728] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.109191][ T3728] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.109469][ T3728] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.029214][ T5049] Zero length message leads to an empty skb [ 43.818765][ T5060] siw: device registration error -23 [ 44.527845][ T5070] netdevsim netdevsim2 ªªªªª»: renamed from netdevsim0 (while UP) [ 44.774107][ T5072] process 'syz.0.39' launched './file1' with NULL argv: empty string added [ 44.889666][ T5077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.41'. [ 44.896382][ T5077] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.900963][ T5077] bridge_slave_1 (unregistering): left allmulticast mode [ 44.901001][ T5077] bridge_slave_1 (unregistering): left promiscuous mode [ 44.901034][ T5077] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.907676][ T5079] loop3: detected capacity change from 0 to 512 [ 44.919920][ T5079] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.42: corrupted in-inode xattr: bad e_name length [ 44.922925][ T5079] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 44.923617][ T5079] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.42: couldn't read orphan inode 15 (err -117) [ 44.925499][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 44.925513][ C0] EXT4-fs (loop3): initial error at time 44: ext4_iget_extra_inode:5180: inode 15 [ 44.925541][ C0] EXT4-fs (loop3): last error at time 44: ext4_iget_extra_inode:5180: inode 15 [ 44.932861][ T5079] loop3: lost filesystem error report for type 5 error -117 [ 44.933841][ T5079] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.021572][ T5083] Config c/1 of g1 needs at least one function. [ 45.021715][ T5083] udc dummy_udc.0: failed to start g1: -22 [ 45.021744][ T5083] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 45.023029][ T5083] UDC core: g1: couldn't find an available UDC or it's busy [ 45.051220][ T5083] netlink: 20 bytes leftover after parsing attributes in process `syz.0.40'. [ 45.070536][ T5083] loop0: detected capacity change from 0 to 512 [ 45.087085][ T5083] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 45.416221][ T5081] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 46.360945][ T5091] netlink: 56 bytes leftover after parsing attributes in process `syz.2.43'. [ 46.629144][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.950927][ T5096] virt_wifi0 speed is unknown, defaulting to 1000 [ 46.951557][ T5096] lo speed is unknown, defaulting to 1000 [ 47.126799][ T5102] loop2: detected capacity change from 0 to 512 [ 47.131931][ T5102] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.48: inode has both inline data and extents flags [ 47.131988][ T5102] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 47.132434][ T5102] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.48: couldn't read orphan inode 15 (err -117) [ 47.132455][ T5102] loop2: lost filesystem error report for type 5 error -117 [ 47.133139][ T5102] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.162279][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.322290][ T5106] loop1: detected capacity change from 0 to 8192 [ 48.211798][ T5112] loop0: detected capacity change from 0 to 512 [ 48.221051][ T5112] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 48.391384][ T5120] overlay: Unknown parameter 'obj_role' [ 48.793591][ T5130] netdevsim netdevsim3 ªªªªª»: renamed from netdevsim0 (while UP) [ 49.024178][ T5131] Config c/1 of g1 needs at least one function. [ 49.024535][ T5131] udc dummy_udc.0: failed to start g1: -22 [ 49.024590][ T5131] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 49.025943][ T5131] UDC core: g1: couldn't find an available UDC or it's busy [ 49.033798][ T5131] netlink: 20 bytes leftover after parsing attributes in process `syz.2.55'. [ 49.049392][ T5131] loop2: detected capacity change from 0 to 512 [ 49.085930][ T5131] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 49.590540][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 49.644786][ T5135] loop1: detected capacity change from 0 to 2048 [ 49.653637][ T5135] ======================================================= [ 49.653637][ T5135] WARNING: The mand mount option has been deprecated and [ 49.653637][ T5135] and is ignored by this kernel. Remove the mand [ 49.653637][ T5135] option from the mount to silence this warning. [ 49.653637][ T5135] ======================================================= [ 49.735322][ T5137] loop0: detected capacity change from 0 to 512 [ 49.930047][ T5137] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 50.103750][ T5145] overlay: Unknown parameter 'obj_role' [ 50.487925][ T5143] tipc: Started in network mode [ 50.487960][ T5143] tipc: Node identity ce95c9f10c8c, cluster identity 4711 [ 50.488211][ T5143] tipc: Enabled bearer , priority 0 [ 50.498420][ T5142] tipc: Disabling bearer [ 50.572605][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 50.623501][ T5155] binder: BINDER_SET_CONTEXT_MGR already set [ 50.625712][ T5155] binder: 5152:5155 ioctl 4018620d 20000300 returned -16 [ 50.853993][ T5155] binder: 5152:5155 got transaction to invalid handle, 1 [ 50.856724][ T5155] binder: 5152:5155 cannot find target node [ 50.856765][ T5155] binder: 5152:5155 transaction async to 0:0 failed 2/29201/-22, code 0 size 0-0 line 3252 [ 50.891810][ T10] binder: undelivered TRANSACTION_ERROR: 29201 [ 51.152791][ T5176] loop0: detected capacity change from 0 to 2048 [ 51.195411][ T5176] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.211812][ T3604] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 51.213764][ T3604] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 51.213779][ T3604] EXT4-fs (loop0): This should not happen!! Data will be lost [ 51.213779][ T3604] [ 51.213786][ T3604] EXT4-fs (loop0): Total free blocks count 0 [ 51.213793][ T3604] EXT4-fs (loop0): Free/Dirty block details [ 51.213803][ T3604] EXT4-fs (loop0): free_blocks=2415919504 [ 51.213813][ T3604] EXT4-fs (loop0): dirty_blocks=16 [ 51.213819][ T3604] EXT4-fs (loop0): Block reservation details [ 51.213824][ T3604] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 51.214541][ T4712] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 51.216627][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.347967][ T5185] loop3: detected capacity change from 0 to 256 [ 51.398504][ T5185] FAT-fs (loop3): data area starts beyond volume (274 > 64) [ 51.398696][ T5185] FAT-fs (loop3): Can't find a valid FAT filesystem [ 51.611710][ T5189] loop2: detected capacity change from 0 to 256 [ 51.666449][ T5190] loop1: detected capacity change from 0 to 512 [ 51.681858][ T5190] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 51.697382][ T5189] netlink: 'syz.2.74': attribute type 1 has an invalid length. [ 51.843502][ T5194] overlay: Unknown parameter 'obj_role' [ 52.072646][ T5196] tipc: Started in network mode [ 52.073856][ T5196] tipc: Node identity befff8a51261, cluster identity 4711 [ 52.075073][ T5196] tipc: Enabled bearer , priority 0 [ 52.079575][ T5195] tipc: Disabling bearer [ 52.452184][ T5202] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.603604][ T5204] loop3: detected capacity change from 0 to 256 [ 52.618709][ T5204] FAT-fs (loop3): data area starts beyond volume (274 > 64) [ 52.618772][ T5204] FAT-fs (loop3): Can't find a valid FAT filesystem [ 52.711472][ T5202] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.773472][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 52.809348][ T5207] loop1: detected capacity change from 0 to 512 [ 52.818439][ T5202] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.836819][ T5207] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.880177][ T5215] netlink: 32 bytes leftover after parsing attributes in process `syz.2.81'. [ 52.887598][ T5202] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.907936][ T5207] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 52.911785][ T5207] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 52.914505][ T5207] EXT4-fs (loop1): This should not happen!! Data will be lost [ 52.914505][ T5207] [ 52.918721][ T5207] EXT4-fs (loop1): Total free blocks count 0 [ 52.919985][ T5207] EXT4-fs (loop1): Free/Dirty block details [ 52.921205][ T5207] EXT4-fs (loop1): free_blocks=65280 [ 52.922306][ T5207] EXT4-fs (loop1): dirty_blocks=32 [ 52.923599][ T5207] EXT4-fs (loop1): Block reservation details [ 52.924941][ T5207] EXT4-fs (loop1): i_reserved_data_blocks=32 [ 52.937402][ T4710] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 52.938173][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.128525][ T39] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.128596][ T39] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.128648][ T39] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.128692][ T39] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.418785][ T5224] loop3: detected capacity change from 0 to 8192 [ 53.563435][ T5228] Injecting memory failure for pfn 0x219250 at process virtual address 0x20000000 [ 53.594820][ T5228] Memory failure: 0x219250: unhandlable page. [ 53.594858][ T5228] Memory failure: 0x219250: recovery action for get hwpoison page: Ignored [ 53.612819][ T5228] loop4: detected capacity change from 0 to 512 [ 53.627626][ T5228] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 53.627755][ T5228] EXT4-fs (loop4): orphan cleanup on readonly fs [ 53.631141][ T5228] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 53.631232][ T5228] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 53.631243][ T5228] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.85: Failed to acquire dquot type 1 [ 53.631255][ T5228] loop4: lost filesystem error report for type 5 error -5 [ 53.635339][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 53.635354][ C0] EXT4-fs (loop4): initial error at time 53: ext4_acquire_dquot:7041 [ 53.635371][ C0] EXT4-fs (loop4): last error at time 53: ext4_acquire_dquot:7041 [ 53.639303][ T5228] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.85: bg 0: block 40: padding at end of block bitmap is not set [ 53.639331][ T5228] loop4: lost filesystem error report for type 5 error -117 [ 53.639888][ T5228] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 53.639911][ T5228] loop4: lost filesystem error report for type 5 error -117 [ 53.641432][ T5228] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #16: comm syz.4.85: data will be lost [ 53.641580][ T5228] EXT4-fs (loop4): 1 truncate cleaned up [ 53.650064][ T5228] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.800802][ T5233] netlink: 16 bytes leftover after parsing attributes in process `syz.4.85'. [ 54.127201][ T5236] loop2: detected capacity change from 0 to 256 [ 54.157720][ T5236] FAT-fs (loop2): data area starts beyond volume (274 > 64) [ 54.157758][ T5236] FAT-fs (loop2): Can't find a valid FAT filesystem [ 54.197313][ T5239] loop1: detected capacity change from 0 to 2048 [ 54.224447][ T5239] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.243390][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.307379][ T5244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.88'. [ 54.330836][ T5248] loop1: detected capacity change from 0 to 256 [ 54.354452][ T5249] loop1: Can't mount, would change RO state [ 54.354677][ T5248] loop1: Can't mount, would change RO state [ 54.396916][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.456846][ T5255] loop4: detected capacity change from 0 to 2048 [ 54.490745][ T5255] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.496704][ T5255] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz.4.91: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 24836(4), depth 248(248) [ 54.517625][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.549809][ T5261] loop1: detected capacity change from 0 to 512 [ 54.553157][ T5261] EXT4-fs: Ignoring removed oldalloc option [ 54.564319][ T5261] EXT4-fs: Mount option(s) incompatible with ext2 [ 54.572768][ T5261] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.93'. [ 54.943598][ T5277] siw: device registration error -23 [ 55.527447][ T5274] loop2: detected capacity change from 0 to 128 [ 55.559562][ T5278] syzkaller0: entered promiscuous mode [ 55.559596][ T5278] syzkaller0: entered allmulticast mode [ 55.847925][ T5283] bridge0: port 2(syz_tun) entered blocking state [ 55.847984][ T5283] bridge0: port 2(syz_tun) entered disabled state [ 55.848106][ T5283] syz_tun: entered allmulticast mode [ 55.848620][ T5283] syz_tun: entered promiscuous mode [ 55.848879][ T5283] bridge0: port 2(syz_tun) entered blocking state [ 55.848912][ T5283] bridge0: port 2(syz_tun) entered forwarding state [ 55.956835][ T5281] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.974268][ T5281] EXT4-fs warning (device loop4): ext4_begin_enable_verity:135: inode #13: comm syz.4.98: verity is only allowed on extent-based files [ 55.977450][ T5281] netlink: 'syz.4.98': attribute type 1 has an invalid length. [ 55.980957][ T5281] overlay: ./file0 is not a directory [ 55.981662][ T5285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.99'. [ 55.989499][ T5281] capability: warning: `syz.4.98' uses deprecated v2 capabilities in a way that may be insecure [ 55.991451][ T5285] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.005585][ T5285] bridge_slave_1 (unregistering): left allmulticast mode [ 56.005624][ T5285] bridge_slave_1 (unregistering): left promiscuous mode [ 56.005655][ T5285] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.013529][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.043403][ T5289] tipc: Started in network mode [ 56.044555][ T5289] tipc: Node identity 02d4b9f8d255, cluster identity 4711 [ 56.047193][ T5289] tipc: Enabled bearer , priority 0 [ 56.052320][ T5288] tipc: Disabling bearer [ 56.099343][ T5291] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.127219][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.192089][ T5299] EXT4-fs error (device loop4): __ext4_fill_super:5600: inode #2: comm syz.4.104: iget: checksum invalid [ 56.194468][ T5299] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -74 [ 56.194891][ T5299] EXT4-fs (loop4): get root inode failed [ 56.194909][ T5299] EXT4-fs (loop4): mount failed [ 56.196798][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 56.196810][ C1] EXT4-fs (loop4): initial error at time 56: __ext4_fill_super:5600: inode 2 [ 56.196828][ C1] EXT4-fs (loop4): last error at time 56: __ext4_fill_super:5600: inode 2 [ 56.264389][ T5304] bond1 (unregistering): Released all slaves [ 56.307136][ T5312] EXT4-fs (loop4): Test dummy encryption mode enabled [ 56.329578][ T5312] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 56.342246][ T4711] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.400567][ T5317] mmap: syz.4.109 (5317) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 56.710183][ T5330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.112'. [ 56.711377][ T5330] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.714112][ T5330] bridge_slave_1 (unregistering): left allmulticast mode [ 56.714145][ T5330] bridge_slave_1 (unregistering): left promiscuous mode [ 56.714193][ T5330] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.834171][ T5331] Config c/1 of g1 needs at least one function. [ 56.834615][ T5331] udc dummy_udc.0: failed to start g1: -22 [ 56.834660][ T5331] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 56.836321][ T5331] UDC core: g1: couldn't find an available UDC or it's busy [ 56.845439][ T5331] netlink: 20 bytes leftover after parsing attributes in process `syz.3.110'. [ 56.940684][ T5331] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 57.670021][ T5338] netlink: 20 bytes leftover after parsing attributes in process `syz.1.113'. [ 57.738121][ T5341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.116'. [ 57.782816][ T5343] set_capacity_and_notify: 6 callbacks suppressed [ 57.782856][ T5343] loop3: detected capacity change from 0 to 2048 [ 57.822030][ T5343] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.837195][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.834482][ T5355] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.841508][ T5356] loop2: detected capacity change from 0 to 2048 [ 58.848710][ T5356] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.851167][ T5360] netlink: 12 bytes leftover after parsing attributes in process `syz.3.121'. [ 58.851978][ T5360] netlink: 32 bytes leftover after parsing attributes in process `syz.3.121'. [ 58.860956][ T5360] loop3: detected capacity change from 0 to 512 [ 58.862648][ T5360] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 58.862679][ T5360] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 58.869952][ T5360] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.121: corrupted in-inode xattr: e_value out of bounds [ 58.872906][ T5360] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 58.873296][ T5360] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.121: couldn't read orphan inode 15 (err -117) [ 58.875253][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 58.875265][ C1] EXT4-fs (loop3): initial error at time 58: ext4_iget_extra_inode:5180: inode 15 [ 58.875284][ C1] EXT4-fs (loop3): last error at time 58: ext4_iget_extra_inode:5180: inode 15 [ 58.883014][ T5360] loop3: lost filesystem error report for type 5 error -117 [ 58.883924][ T5360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.894165][ T5355] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.898058][ T10] IPVS: starting estimator thread 0... [ 58.940891][ T5355] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.952996][ T5363] tipc: Enabled bearer , priority 10 [ 58.995339][ T5362] IPVS: using max 60 ests per chain, 144000 per kthread [ 59.019903][ T5355] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.094091][ T5205] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.099018][ T5205] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.103797][ T5205] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.103971][ T5205] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.373634][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.438140][ T5368] loop2: detected capacity change from 0 to 128 [ 60.010611][ T4936] tipc: Node number set to 2896099493 [ 60.021734][ T4715] EXT4-fs error (device loop3): ext4_readdir:265: inode #11: block 20: comm syz-executor: path /24/file2/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=131076, size=1024 fake=0 [ 60.022967][ T4715] EXT4-fs error (device loop3): ext4_empty_dir:3125: inode #11: block 20: comm syz-executor: bad entry in directory: directory entry overrun - offset=6144, inode=0, rec_len=131076, size=1024 fake=0 [ 60.023862][ T4715] EXT4-fs error (device loop3): ext4_readdir:265: inode #11: block 20: comm syz-executor: path /24/file2/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=131076, size=1024 fake=0 [ 60.024105][ T4715] EXT4-fs error (device loop3): ext4_empty_dir:3125: inode #11: block 20: comm syz-executor: bad entry in directory: directory entry overrun - offset=6144, inode=0, rec_len=131076, size=1024 fake=0 [ 60.024374][ T4715] EXT4-fs error (device loop3): ext4_readdir:265: inode #11: block 20: comm syz-executor: path /24/file2/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=131076, size=1024 fake=0 [ 60.024690][ T4715] EXT4-fs error (device loop3): ext4_empty_dir:3125: inode #11: block 20: comm syz-executor: bad entry in directory: directory entry overrun - offset=6144, inode=0, rec_len=131076, size=1024 fake=0 [ 60.024959][ T4715] EXT4-fs error (device loop3): ext4_readdir:265: inode #11: block 20: comm syz-executor: path /24/file2/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=131076, size=1024 fake=0 [ 60.025174][ T4715] EXT4-fs error (device loop3): ext4_empty_dir:3125: inode #11: block 20: comm syz-executor: bad entry in directory: directory entry overrun - offset=6144, inode=0, rec_len=131076, size=1024 fake=0 [ 60.025992][ T4715] EXT4-fs error (device loop3): ext4_readdir:265: inode #11: block 20: comm syz-executor: path /24/file2/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=131076, size=1024 fake=0 [ 60.026616][ T4715] EXT4-fs error (device loop3): ext4_empty_dir:3125: inode #11: block 20: comm syz-executor: bad entry in directory: directory entry overrun - offset=6144, inode=0, rec_len=131076, size=1024 fake=0 [ 60.641602][ T5385] FAULT_INJECTION: forcing a failure. [ 60.641602][ T5385] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 60.641652][ T5385] CPU: 1 UID: 0 PID: 5385 Comm: syz.1.128 Tainted: G L syzkaller #0 PREEMPT [ 60.641668][ T5385] Tainted: [L]=SOFTLOCKUP [ 60.641677][ T5385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 60.641683][ T5385] Call trace: [ 60.641687][ T5385] show_stack+0x2c/0x3c (C) [ 60.641713][ T5385] __dump_stack+0x30/0x40 [ 60.641728][ T5385] dump_stack_lvl+0xd8/0x12c [ 60.641738][ T5385] dump_stack+0x1c/0x28 [ 60.641748][ T5385] should_fail_ex+0x41c/0x590 [ 60.641759][ T5385] should_fail+0x14/0x24 [ 60.641769][ T5385] should_fail_usercopy+0x20/0x30 [ 60.641779][ T5385] copy_from_sockptr+0x7c/0x1e0 [ 60.641789][ T5385] packet_setsockopt+0x7f4/0xf38 [ 60.641798][ T5385] do_sock_setsockopt+0x1f0/0x330 [ 60.641807][ T5385] __sys_setsockopt+0x104/0x170 [ 60.641816][ T5385] __arm64_sys_setsockopt+0xc0/0xdc [ 60.641824][ T5385] invoke_syscall+0x98/0x244 [ 60.641834][ T5385] el0_svc_common+0xec/0x23c [ 60.641844][ T5385] do_el0_svc+0x4c/0x5c [ 60.641853][ T5385] el0_svc+0x64/0x260 [ 60.641864][ T5385] el0t_64_sync_handler+0x48/0x148 [ 60.641873][ T5385] el0t_64_sync+0x198/0x19c [ 60.844214][ T5384] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.869353][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.958485][ T5205] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.986668][ T4717] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.987072][ T5384] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.990510][ T4717] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.991348][ T4717] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.991726][ T4717] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.991949][ T4717] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.080246][ T5395] loop2: detected capacity change from 0 to 512 [ 61.083784][ T5395] ext4: Unknown parameter 'nouser_xattr' [ 61.231135][ T5205] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.270237][ T5384] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.291083][ T5399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.133'. [ 61.310052][ T5205] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.315737][ T5384] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.330428][ T5408] loop1: detected capacity change from 0 to 2048 [ 61.330832][ T5392] virt_wifi0 speed is unknown, defaulting to 1000 [ 61.331181][ T5392] lo speed is unknown, defaulting to 1000 [ 61.360045][ T5408] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.377287][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.392032][ T5205] netdevsim netdevsim3 ªªªªª» (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.402974][ T5415] loop1: detected capacity change from 0 to 128 [ 61.449843][ T15] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.452235][ T5027] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.453828][ T5027] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.453864][ T5027] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.528032][ T5392] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.528119][ T5392] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.528508][ T5392] bridge_slave_0: entered allmulticast mode [ 61.529178][ T5392] bridge_slave_0: entered promiscuous mode [ 61.530767][ T5392] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.530805][ T5392] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.530862][ T5392] bridge_slave_1: entered allmulticast mode [ 61.531293][ T5392] bridge_slave_1: entered promiscuous mode [ 61.540561][ T5392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.541627][ T5392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.552024][ T5392] team0: Port device team_slave_0 added [ 61.552878][ T5392] team0: Port device team_slave_1 added [ 61.559506][ T5392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.559532][ T5392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.559550][ T5392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.560163][ T5392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.560178][ T5392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.560199][ T5392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.572231][ T5392] hsr_slave_0: entered promiscuous mode [ 61.572635][ T5392] hsr_slave_1: entered promiscuous mode [ 61.572846][ T5392] debugfs: 'hsr0' already exists in 'hsr' [ 61.572862][ T5392] Cannot create hsr debugfs directory [ 61.664899][ T5426] Config c/1 of g1 needs at least one function. [ 61.665372][ T5426] udc dummy_udc.0: failed to start g1: -22 [ 61.665433][ T5426] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 61.667189][ T5426] UDC core: g1: couldn't find an available UDC or it's busy [ 61.695944][ T5426] netlink: 20 bytes leftover after parsing attributes in process `syz.1.137'. [ 61.795140][ T5427] loop1: detected capacity change from 0 to 512 [ 61.885717][ T5427] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 62.771893][ T5438] loop4: detected capacity change from 0 to 256 [ 63.005062][ T5438] FAT-fs (loop4): data area starts beyond volume (274 > 64) [ 63.005123][ T5438] FAT-fs (loop4): Can't find a valid FAT filesystem [ 63.058926][ T4717] Bluetooth: hci4: command tx timeout [ 63.232967][ T5205] bridge_slave_1: left allmulticast mode [ 63.234499][ T5205] bridge_slave_1: left promiscuous mode [ 63.236463][ T5205] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.243774][ T5205] bridge_slave_0: left allmulticast mode [ 63.246476][ T5205] bridge_slave_0: left promiscuous mode [ 63.248187][ T5205] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.464617][ T5205] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.521557][ T5205] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.586387][ T5205] bond0 (unregistering): Released all slaves [ 63.630026][ T5392] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 63.632392][ T5392] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.633201][ T5392] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 63.634439][ T5392] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 63.918100][ T5455] loop2: detected capacity change from 0 to 8192 [ 64.095405][ T5205] tipc: Disabling bearer [ 64.095915][ T5205] tipc: Left network mode [ 64.139837][ T5392] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 64.495774][ T1594] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.495867][ T1594] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.929775][ T5392] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 64.930631][ T24] cfg80211: failed to load regulatory.db [ 64.943750][ T5392] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 64.976988][ T5392] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.043725][ T5392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.081165][ T5469] loop2: detected capacity change from 0 to 2048 [ 65.092811][ T5470] loop4: detected capacity change from 0 to 512 [ 65.111029][ T5392] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.114954][ T5470] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 65.122711][ T5428] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.122748][ T5428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.123275][ T5428] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.123297][ T5428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.133597][ T4717] Bluetooth: hci4: command tx timeout [ 65.136875][ T5469] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.140603][ T5470] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 65.140655][ T5470] EXT4-fs: failed to create workqueue [ 65.140681][ T5470] EXT4-fs (loop4): mount failed [ 65.148407][ T5481] netlink: 'syz.1.149': attribute type 3 has an invalid length. [ 65.148437][ T5481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.149'. [ 65.171174][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.193252][ T5483] loop4: detected capacity change from 0 to 2048 [ 65.198440][ T5483] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.203723][ T5483] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz.4.150: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 24836(4), depth 248(248) [ 65.230048][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.240941][ T5487] tipc: Started in network mode [ 65.240974][ T5487] tipc: Node identity 6aa5c4925a6a, cluster identity 4711 [ 65.241571][ T5487] tipc: Enabled bearer , priority 0 [ 65.257328][ T5486] tipc: Disabling bearer [ 65.330794][ T5205] hsr_slave_0: left promiscuous mode [ 65.331120][ T5205] hsr_slave_1: left promiscuous mode [ 65.331389][ T5205] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.331411][ T5205] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.332349][ T5205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.332374][ T5205] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.341691][ T5205] veth1_macvtap: left promiscuous mode [ 65.341750][ T5205] veth0_macvtap: left promiscuous mode [ 65.341814][ T5205] veth1_vlan: left promiscuous mode [ 65.341864][ T5205] veth0_vlan: left promiscuous mode [ 65.526500][ T5504] siw: device registration error -23 [ 66.154905][ T5205] team0 (unregistering): Port device team_slave_1 removed [ 66.159741][ T5205] team0 (unregistering): Port device team_slave_0 removed [ 66.372221][ T5504] netlink: 'syz.1.152': attribute type 4 has an invalid length. [ 66.503785][ T4716] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 66.504464][ T4716] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 66.505100][ T4716] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 66.509874][ T4716] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 66.510339][ T4716] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 66.828528][ T5531] loop1: detected capacity change from 0 to 8192 [ 66.898933][ T5532] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 67.245331][ T4717] Bluetooth: hci4: command tx timeout [ 67.507156][ T5392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.566474][ T5516] virt_wifi0 speed is unknown, defaulting to 1000 [ 67.566864][ T5516] lo speed is unknown, defaulting to 1000 [ 67.772259][ T5205] IPVS: stop unused estimator thread 0... [ 67.773233][ T5557] loop2: detected capacity change from 0 to 2048 [ 67.794471][ T5557] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.816103][ T5557] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #13: comm syz.2.164: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 24836(4), depth 248(248) [ 67.895580][ T5563] Config c/1 of g1 needs at least one function. [ 67.895959][ T5563] udc dummy_udc.0: failed to start g1: -22 [ 67.896013][ T5563] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 67.898479][ T5563] UDC core: g1: couldn't find an available UDC or it's busy [ 67.945832][ T5563] netlink: 20 bytes leftover after parsing attributes in process `syz.1.163'. [ 68.035280][ T5564] loop1: detected capacity change from 0 to 512 [ 68.077756][ T5564] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 68.566101][ T4717] Bluetooth: hci5: command tx timeout [ 68.821442][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.826503][ T5569] loop4: detected capacity change from 0 to 2048 [ 68.857694][ T5569] loop4: detected capacity change from 0 to 4096 [ 68.858276][ T5569] EXT4-fs: inline encryption not supported [ 68.860413][ T5516] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.860514][ T5516] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.860586][ T5516] bridge_slave_0: entered allmulticast mode [ 68.861059][ T5516] bridge_slave_0: entered promiscuous mode [ 68.863103][ T5516] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.863233][ T5516] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.863295][ T5516] bridge_slave_1: entered allmulticast mode [ 68.863761][ T5516] bridge_slave_1: entered promiscuous mode [ 68.871662][ T5569] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 68.871705][ T5569] EXT4-fs (loop4): Test dummy encryption mode enabled [ 68.871728][ T5569] EXT4-fs (loop4): DAX unsupported by block device. [ 68.882781][ T5516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.884473][ T5569] overlayfs: missing 'workdir' [ 68.886150][ T5392] veth0_vlan: entered promiscuous mode [ 68.892829][ T5392] veth1_vlan: entered promiscuous mode [ 68.897616][ T5516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.924203][ T5392] veth0_macvtap: entered promiscuous mode [ 68.930376][ T5516] team0: Port device team_slave_0 added [ 68.932383][ T5516] team0: Port device team_slave_1 added [ 68.940652][ T5516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.943125][ T5516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.948139][ T5516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.951028][ T5392] veth1_macvtap: entered promiscuous mode [ 68.979717][ T5392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.981818][ T5392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.042904][ T5027] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.042971][ T5027] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.042999][ T5027] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.043015][ T5027] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.051875][ T5516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.051903][ T5516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.051918][ T5516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.082258][ T5516] hsr_slave_0: entered promiscuous mode [ 69.082611][ T5516] hsr_slave_1: entered promiscuous mode [ 69.082813][ T5516] debugfs: 'hsr0' already exists in 'hsr' [ 69.082824][ T5516] Cannot create hsr debugfs directory [ 69.316527][ T4717] Bluetooth: hci4: command tx timeout [ 69.344528][ T5582] netlink: 'syz.2.166': attribute type 4 has an invalid length. [ 69.601736][ T5205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.603543][ T5205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.610561][ T5586] Driver unsupported XDP return value 0 on prog (id 21) dev N/A, expect packet loss! [ 69.666202][ T5587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.168'. [ 69.668098][ T5587] netlink: 28 bytes leftover after parsing attributes in process `syz.1.168'. [ 69.671122][ T5587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.168'. [ 69.673023][ T5587] netlink: 28 bytes leftover after parsing attributes in process `syz.1.168'. [ 69.712265][ T5589] loop4: detected capacity change from 0 to 512 [ 69.736933][ T5205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.736967][ T5205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.767719][ T5595] netlink: 348 bytes leftover after parsing attributes in process `syz.4.170'. [ 69.836184][ T5516] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 69.852527][ T5516] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.852883][ T5516] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 69.866999][ T5516] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.867383][ T5516] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 69.877250][ T5516] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.877707][ T5516] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 69.893138][ T5516] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.193499][ T5610] netlink: 'syz.5.132': attribute type 11 has an invalid length. [ 70.205995][ T5610] netlink: 36 bytes leftover after parsing attributes in process `syz.5.132'. [ 70.212041][ T5612] netlink: 21 bytes leftover after parsing attributes in process `syz.5.132'. [ 70.212245][ T5610] netlink: 21 bytes leftover after parsing attributes in process `syz.5.132'. [ 70.231692][ T5516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.276982][ T5516] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.283496][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.283557][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.290526][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.290567][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.526946][ T5623] loop4: detected capacity change from 0 to 8192 [ 70.648301][ T4717] Bluetooth: hci5: command tx timeout [ 71.356694][ T5623] Dev loop4: unable to read RDB block 8 [ 71.358273][ T5623] loop4: unable to read partition table [ 71.359374][ T5623] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 71.380396][ T5629] loop1: detected capacity change from 0 to 1024 [ 71.444093][ T5629] EXT4-fs: inline encryption not supported [ 71.445953][ T5629] EXT4-fs: Ignoring removed i_version option [ 71.666720][ T5644] loop1: detected capacity change from 0 to 2048 [ 71.700808][ T5644] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.793062][ T5655] FAULT_INJECTION: forcing a failure. [ 71.793062][ T5655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.793294][ T5655] CPU: 1 UID: 0 PID: 5655 Comm: syz.4.179 Tainted: G L syzkaller #0 PREEMPT [ 71.793313][ T5655] Tainted: [L]=SOFTLOCKUP [ 71.793318][ T5655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 71.793324][ T5655] Call trace: [ 71.793327][ T5655] show_stack+0x2c/0x3c (C) [ 71.793347][ T5655] __dump_stack+0x30/0x40 [ 71.793358][ T5655] dump_stack_lvl+0xd8/0x12c [ 71.793368][ T5655] dump_stack+0x1c/0x28 [ 71.793377][ T5655] should_fail_ex+0x41c/0x590 [ 71.793388][ T5655] should_fail+0x14/0x24 [ 71.793398][ T5655] should_fail_usercopy+0x20/0x30 [ 71.793408][ T5655] _copy_from_iter+0x188/0x1064 [ 71.793416][ T5655] configfs_write_iter+0x100/0x354 [ 71.793427][ T5655] vfs_write+0x51c/0xa0c [ 71.793438][ T5655] ksys_write+0x12c/0x228 [ 71.793444][ T5655] __arm64_sys_write+0x7c/0x90 [ 71.793451][ T5655] invoke_syscall+0x98/0x244 [ 71.793462][ T5655] el0_svc_common+0xec/0x23c [ 71.793471][ T5655] do_el0_svc+0x4c/0x5c [ 71.793480][ T5655] el0_svc+0x64/0x260 [ 71.793491][ T5655] el0t_64_sync_handler+0x48/0x148 [ 71.793500][ T5655] el0t_64_sync+0x198/0x19c [ 71.813354][ T5655] loop4: detected capacity change from 0 to 512 [ 71.849452][ T5655] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 72.677714][ T5516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.725397][ T4717] Bluetooth: hci5: command tx timeout [ 72.798797][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.081147][ T5670] loop1: detected capacity change from 0 to 512 [ 73.081531][ T5670] ext4: Unknown parameter 'nouser_xattr' [ 73.239659][ T5516] veth0_vlan: entered promiscuous mode [ 73.246884][ T5516] veth1_vlan: entered promiscuous mode [ 73.262407][ T5516] veth0_macvtap: entered promiscuous mode [ 73.266294][ T5516] veth1_macvtap: entered promiscuous mode [ 73.273578][ T5516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.281682][ T5516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.287079][ T5205] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.289011][ T5205] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.289050][ T5205] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.289072][ T5205] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.337123][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.338832][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.355167][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.355194][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.892552][ T5678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.182'. [ 73.894632][ T5678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.182'. [ 74.083256][ T5683] Config c/1 of g1 needs at least one function. [ 74.083780][ T5683] udc dummy_udc.0: failed to start g1: -22 [ 74.083877][ T5683] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 74.086989][ T5683] UDC core: g1: couldn't find an available UDC or it's busy [ 74.230705][ T5683] loop4: detected capacity change from 0 to 512 [ 74.342036][ T5683] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 74.855332][ T4717] Bluetooth: hci5: command tx timeout [ 74.982317][ T5687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.185'. [ 75.350289][ T5703] loop6: detected capacity change from 0 to 128 [ 75.356769][ T5703] EXT4-fs (loop6): Test dummy encryption mode enabled [ 75.424799][ T5703] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.541626][ T5710] loop4: detected capacity change from 0 to 512 [ 75.542108][ T5710] ext4: Unknown parameter 'nouser_xattr' [ 75.548154][ T5516] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.758687][ T5720] netlink: 8 bytes leftover after parsing attributes in process `syz.6.195'. [ 75.760837][ T5720] netlink: 52 bytes leftover after parsing attributes in process `syz.6.195'. [ 76.489636][ T5735] FAULT_INJECTION: forcing a failure. [ 76.489636][ T5735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.489689][ T5735] CPU: 0 UID: 0 PID: 5735 Comm: syz.5.200 Tainted: G L syzkaller #0 PREEMPT [ 76.489706][ T5735] Tainted: [L]=SOFTLOCKUP [ 76.489710][ T5735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 76.489715][ T5735] Call trace: [ 76.489719][ T5735] show_stack+0x2c/0x3c (C) [ 76.489738][ T5735] __dump_stack+0x30/0x40 [ 76.489749][ T5735] dump_stack_lvl+0xd8/0x12c [ 76.489759][ T5735] dump_stack+0x1c/0x28 [ 76.489769][ T5735] should_fail_ex+0x41c/0x590 [ 76.489780][ T5735] should_fail+0x14/0x24 [ 76.489789][ T5735] should_fail_usercopy+0x20/0x30 [ 76.489799][ T5735] simple_read_from_buffer+0xc4/0x238 [ 76.489810][ T5735] proc_fail_nth_read+0x1a8/0x248 [ 76.489818][ T5735] vfs_read+0x230/0x8c8 [ 76.489828][ T5735] ksys_read+0x12c/0x228 [ 76.489838][ T5735] __arm64_sys_read+0x7c/0x90 [ 76.489845][ T5735] invoke_syscall+0x98/0x244 [ 76.489855][ T5735] el0_svc_common+0xec/0x23c [ 76.489864][ T5735] do_el0_svc+0x4c/0x5c [ 76.489874][ T5735] el0_svc+0x64/0x260 [ 76.489884][ T5735] el0t_64_sync_handler+0x48/0x148 [ 76.489893][ T5735] el0t_64_sync+0x198/0x19c [ 76.595082][ T5741] loop5: detected capacity change from 0 to 128 [ 76.597417][ T5741] EXT4-fs (loop5): Test dummy encryption mode enabled [ 76.611107][ T5741] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.624210][ T5392] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.017376][ T5758] tipc: Enabled bearer , priority 0 [ 77.032835][ T5756] tipc: Disabling bearer [ 77.154489][ T5767] loop2: detected capacity change from 0 to 128 [ 77.238575][ T5770] siw: device registration error -23 [ 77.249288][ T5770] netlink: 'syz.6.205': attribute type 4 has an invalid length. [ 77.995504][ T5774] loop5: detected capacity change from 0 to 1024 [ 77.998104][ T5774] EXT4-fs: Ignoring removed i_version option [ 77.998386][ T5774] EXT4-fs (loop5): Test dummy encryption mode enabled [ 78.000745][ T5776] loop4: detected capacity change from 0 to 1024 [ 78.003226][ T5776] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 78.003945][ T5774] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.096060][ T5767] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.102721][ T5776] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.105492][ T5767] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 78.203142][ T5392] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.297017][ T5788] netlink: set zone limit has 8 unknown bytes [ 78.309581][ T5789] random: crng reseeded on system resumption [ 78.627599][ T5792] loop6: detected capacity change from 0 to 8192 [ 79.335570][ T4713] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.355198][ T5787] loop5: detected capacity change from 0 to 2048 [ 79.365800][ T5787] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 79.550681][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.989443][ T5810] netlink: 4 bytes leftover after parsing attributes in process `syz.6.216'. [ 80.158998][ T5809] bridge_slave_0: left allmulticast mode [ 80.159036][ T5809] bridge_slave_0: left promiscuous mode [ 80.159118][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.172334][ T5809] bond0: (slave bond_slave_0): Releasing backup interface [ 80.199378][ T5809] bond0: (slave bond_slave_1): Releasing backup interface [ 80.209838][ T5809] team0: Port device team_slave_0 removed [ 80.212317][ T5809] team0: Port device team_slave_1 removed [ 80.212806][ T5809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.212818][ T5809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.214167][ T5809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.214177][ T5809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.216046][ T5809] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 80.225658][ T5813] geneve2: entered promiscuous mode [ 80.225699][ T5813] geneve2: entered allmulticast mode [ 80.227263][ T5813] batman_adv: batadv0: Adding interface: geneve2 [ 80.227508][ T5813] batman_adv: batadv0: Interface activated: geneve2 [ 80.230607][ T5812] tipc: Started in network mode [ 80.231034][ T5812] tipc: Node identity 66d5e1bc8099, cluster identity 4711 [ 80.231089][ T5812] tipc: Enabled bearer , priority 0 [ 80.236362][ T5811] tipc: Disabling bearer [ 80.374583][ T5826] loop5: detected capacity change from 0 to 2048 [ 80.451631][ T5826] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.530681][ T5832] netlink: 24 bytes leftover after parsing attributes in process `syz.5.224'. [ 80.533161][ T5832] netlink: 252 bytes leftover after parsing attributes in process `syz.5.224'. [ 80.563324][ T5832] netlink: 52 bytes leftover after parsing attributes in process `syz.5.224'. [ 80.897513][ T5846] syz.2.227 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 81.426222][ T5778] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 81.503306][ T15] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 81.503350][ T15] EXT4-fs (loop5): This should not happen!! Data will be lost [ 81.503350][ T15] [ 81.503362][ T15] EXT4-fs (loop5): Total free blocks count 0 [ 81.503372][ T15] EXT4-fs (loop5): Free/Dirty block details [ 81.503382][ T15] EXT4-fs (loop5): free_blocks=2415919104 [ 81.503391][ T15] EXT4-fs (loop5): dirty_blocks=7664 [ 81.503398][ T15] EXT4-fs (loop5): Block reservation details [ 81.503403][ T15] EXT4-fs (loop5): i_reserved_data_blocks=479 [ 81.538610][ T15] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2048 with error 28 [ 81.592386][ T5392] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 81.612330][ T5864] tipc: Enabled bearer , priority 0 [ 81.618830][ T5863] tipc: Disabling bearer [ 81.623575][ T5865] loop6: detected capacity change from 0 to 512 [ 81.627527][ T5865] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 81.637123][ T5865] EXT4-fs (loop6): 1 truncate cleaned up [ 81.641700][ T5865] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.648998][ T5865] overlayfs: missing 'workdir' [ 81.654849][ T5865] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #12: block 7: comm syz.6.234: bad entry in directory: directory entry overrun - offset=16, inode=2147483648, rec_len=1024, size=56 fake=0 [ 81.668603][ T5865] EXT4-fs (loop6): Remounting filesystem read-only [ 81.693476][ T5516] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.809628][ T5879] loop6: detected capacity change from 0 to 2048 [ 81.896265][ T5882] loop4: detected capacity change from 0 to 256 [ 81.981654][ T5882] FAT-fs (loop4): data area starts beyond volume (274 > 64) [ 81.981727][ T5882] FAT-fs (loop4): Can't find a valid FAT filesystem [ 82.124246][ T5879] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.131687][ T5879] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 82.135992][ T5879] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 82.138541][ T5879] EXT4-fs (loop6): This should not happen!! Data will be lost [ 82.138541][ T5879] [ 82.138558][ T5879] EXT4-fs (loop6): Total free blocks count 0 [ 82.138573][ T5879] EXT4-fs (loop6): Free/Dirty block details [ 82.138588][ T5879] EXT4-fs (loop6): free_blocks=2415919504 [ 82.138600][ T5879] EXT4-fs (loop6): dirty_blocks=16 [ 82.138607][ T5879] EXT4-fs (loop6): Block reservation details [ 82.138614][ T5879] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 82.177956][ T5516] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 82.181204][ T5516] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.698564][ T5906] virt_wifi0 speed is unknown, defaulting to 1000 [ 82.701245][ T5906] lo speed is unknown, defaulting to 1000 [ 82.776468][ T5906] »»»»»»: renamed from vlan0 (while UP) [ 82.792489][ T5906] overlayfs: missing 'lowerdir' [ 83.396906][ T5905] tipc: Enabled bearer , priority 0 [ 83.402565][ T5910] loop2: detected capacity change from 0 to 256 [ 83.653802][ T5903] tipc: Disabling bearer [ 83.980999][ T5922] netlink: 160 bytes leftover after parsing attributes in process `syz.2.251'. [ 84.788464][ T5949] loop6: detected capacity change from 0 to 512 [ 84.921760][ T5953] loop2: detected capacity change from 0 to 256 [ 84.994547][ T5953] FAT-fs (loop2): data area starts beyond volume (274 > 64) [ 84.994604][ T5953] FAT-fs (loop2): Can't find a valid FAT filesystem [ 85.165951][ T5956] random: crng reseeded on system resumption [ 85.634426][ T5967] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 85.634458][ T5967] IPv6: NLM_F_CREATE should be set when creating new route [ 85.634534][ T5967] IPv6: NLM_F_CREATE should be set when creating new route [ 85.646510][ T5967] loop6: detected capacity change from 0 to 512 [ 85.671114][ T5967] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.671178][ T5967] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.679094][ T5967] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.263: corrupted xattr block 33: invalid header [ 85.684386][ T5967] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.263: corrupted xattr block 33: invalid header [ 85.686291][ T5967] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.263: corrupted xattr block 33: invalid header [ 85.748142][ T5967] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.263: corrupted xattr block 33: invalid header [ 85.763574][ T5967] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 85.784859][ T5957] binder: 5955:5957 ERROR: BC_REGISTER_LOOPER called without request [ 85.784901][ T5957] binder: 5955:5957 got transaction to invalid handle, 1 [ 85.784913][ T5957] binder: 5955:5957 cannot find target node [ 85.784929][ T5957] binder: 5955:5957 transaction async to 0:0 failed 3/29201/-22, code 0 size 0-0 line 3252 [ 85.791141][ T5957] loop4: detected capacity change from 0 to 512 [ 85.810438][ T5957] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.810502][ T5957] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.813769][ T5957] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.833298][ T5957] loop4: detected capacity change from 0 to 512 [ 85.843853][ T5957] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #11: block 8: comm syz.4.260: lblock 0 mapped to illegal pblock 8 (length 1) [ 85.843897][ T5957] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 85.845324][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 85.845337][ C0] EXT4-fs (loop4): initial error at time 2000000008: ext4_map_blocks:791: inode 11: block 8 [ 85.845360][ C0] EXT4-fs (loop4): last error at time 2000000008: ext4_map_blocks:791: inode 11: block 8 [ 85.850854][ T5957] EXT4-fs (loop4): Remounting filesystem read-only [ 85.850981][ T5957] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 85.850995][ T5957] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 85.851033][ T5957] EXT4-fs (loop4): 1 orphan inode deleted [ 85.854145][ T5957] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.859421][ T5957] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.864706][ T5957] netlink: 20 bytes leftover after parsing attributes in process `syz.4.260'. [ 85.929394][ T5977] tipc: Enabled bearer , priority 0 [ 85.936402][ T5976] tipc: Disabling bearer [ 86.056791][ T5981] loop2: detected capacity change from 0 to 256 [ 86.071222][ T5981] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 86.394789][ T4984] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 86.398145][ T4984] EXT4-fs (loop6): This should not happen!! Data will be lost [ 86.398145][ T4984] [ 86.400169][ T4984] EXT4-fs (loop6): Total free blocks count 0 [ 86.401418][ T4984] EXT4-fs (loop6): Free/Dirty block details [ 86.402613][ T4984] EXT4-fs (loop6): free_blocks=65281 [ 86.403592][ T4984] EXT4-fs (loop6): dirty_blocks=2 [ 86.404545][ T4984] EXT4-fs (loop6): Block reservation details [ 86.406266][ T4984] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 86.412303][ T5516] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 86.421503][ T5516] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.516136][ T5996] loop6: detected capacity change from 0 to 512 [ 86.537712][ T5996] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 86.537771][ T5996] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.649423][ T6001] loop2: detected capacity change from 0 to 8192 [ 86.731448][ T6002] overlay: Unknown parameter 'obj_role' [ 87.496475][ T5516] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 87.834891][ T6014] netlink: 16 bytes leftover after parsing attributes in process `syz.1.274'. [ 87.852555][ T6013] netlink: 4 bytes leftover after parsing attributes in process `syz.5.275'. [ 87.857809][ T6013] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.871875][ T6013] bridge_slave_1 (unregistering): left allmulticast mode [ 87.873387][ T6013] bridge_slave_1 (unregistering): left promiscuous mode [ 87.875372][ T6013] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.988438][ T6025] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 87.992179][ T6025] netlink: 45 bytes leftover after parsing attributes in process `syz.6.271'. [ 87.997574][ T6018] loop1: detected capacity change from 0 to 512 [ 87.999297][ T6018] EXT4-fs: Ignoring removed bh option [ 88.000965][ T6018] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 88.010671][ T6018] EXT4-fs (loop1): 1 truncate cleaned up [ 88.028103][ T6018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.116160][ T6035] syz.2.279 uses obsolete (PF_INET,SOCK_PACKET) [ 88.434304][ T6041] loop6: detected capacity change from 0 to 8192 [ 88.440650][ T6041] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 88.468610][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.598586][ T6051] netlink: 12 bytes leftover after parsing attributes in process `syz.4.287'. [ 88.625780][ T6054] loop6: detected capacity change from 0 to 128 [ 88.626452][ T6054] EXT4-fs (loop6): Test dummy encryption mode enabled [ 88.637351][ T6054] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 88.637977][ T6054] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 88.658172][ T5516] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 88.672278][ T6045] loop1: detected capacity change from 0 to 512 [ 88.689059][ T6045] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 88.689120][ T6045] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.741732][ T6062] netlink: 4 bytes leftover after parsing attributes in process `syz.6.289'. [ 88.746886][ T6062] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.754760][ T6062] bridge_slave_1 (unregistering): left allmulticast mode [ 88.754792][ T6062] bridge_slave_1 (unregistering): left promiscuous mode [ 88.754822][ T6062] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.783706][ T6064] netlink: 104 bytes leftover after parsing attributes in process `syz.4.290'. [ 88.847642][ T6045] overlay: Unknown parameter 'obj_role' [ 88.945880][ T6070] Bluetooth: MGMT ver 1.23 [ 88.977115][ T6072] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.999344][ T5392] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.045082][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.5.294'. [ 89.169923][ T6085] EXT4-fs (loop6): Test dummy encryption mode enabled [ 89.196918][ T6085] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 89.197101][ T6085] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 89.208048][ T5516] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 89.238189][ T6089] ext2: Unknown parameter 'fsuuid' [ 89.563415][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 89.609263][ T6102] EXT4-fs: Ignoring removed mblk_io_submit option [ 89.611113][ T6102] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 89.611154][ T6102] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 89.611199][ T6102] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 89.612213][ T6102] EXT4-fs (loop2): journal inode is deleted [ 89.636475][ T6105] EXT4-fs (loop1): Test dummy encryption mode enabled [ 89.652057][ T6105] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.657172][ T6105] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 89.664438][ T6105] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 90.412699][ T6141] FAT-fs (loop5): data area starts beyond volume (274 > 64) [ 90.412732][ T6141] FAT-fs (loop5): Can't find a valid FAT filesystem [ 90.709418][ T6148] set_capacity_and_notify: 6 callbacks suppressed [ 90.709459][ T6148] loop4: detected capacity change from 0 to 4096 [ 90.731234][ T6148] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.747962][ T6148] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #15: comm syz.4.314: corrupted inode contents [ 90.756984][ T6148] EXT4-fs error (device loop4): ext4_dirty_inode:6639: inode #15: comm syz.4.314: mark_inode_dirty error [ 90.759569][ T6148] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #15: comm syz.4.314: corrupted inode contents [ 90.764142][ T6148] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.314: mark_inode_dirty error [ 90.764313][ T6148] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #15: comm syz.4.314: corrupted inode contents [ 90.766763][ T6148] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.314: mark_inode_dirty error [ 90.771288][ T6148] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #15: comm syz.4.314: corrupted inode contents [ 90.776174][ T6148] EXT4-fs error (device loop4): ext4_truncate:4691: inode #15: comm syz.4.314: mark_inode_dirty error [ 90.780854][ T6148] EXT4-fs error (device loop4) in ext4_setattr:6172: Corrupt filesystem [ 90.786299][ T6148] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #15: comm syz.4.314: corrupted inode contents [ 90.823883][ T6146] loop6: detected capacity change from 0 to 512 [ 90.824128][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.879859][ T6146] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 90.879933][ T6146] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.004658][ T6170] fuse: Unknown parameter 'ê0x00000000000000ea' [ 91.144411][ T6172] overlay: Unknown parameter 'obj_role' [ 91.316191][ T6177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.322'. [ 91.767920][ T5516] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 91.826710][ T6182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.323'. [ 91.894227][ T6192] overlay: Unknown parameter 'hash' [ 91.895979][ T6196] binder: 6195 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 91.896012][ T6196] binder: 6195:6196 ioctl c018620c 200000c0 returned -22 [ 91.945143][ T6201] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 92.027229][ T6206] use of bytesused == 0 is deprecated and will be removed in the future, [ 92.028825][ T6206] use the actual size instead. [ 92.172111][ T6210] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 93.000617][ T6222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.337'. [ 93.064476][ T6230] binder: 6229:6230 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 93.129994][ T6239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.344'. [ 93.131943][ T6239] netlink: 20 bytes leftover after parsing attributes in process `syz.2.344'. [ 93.137968][ T6234] netlink: 8 bytes leftover after parsing attributes in process `syz.6.342'. [ 93.162640][ T6236] fuse: Unknown parameter 'ÿ' [ 93.551074][ T6253] loop2: detected capacity change from 0 to 128 [ 93.551447][ T6253] EXT4-fs: inline encryption not supported [ 93.555731][ T6246] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 93.560564][ T6253] EXT4-fs (loop2): Test dummy encryption mode enabled [ 93.560624][ T6253] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (24596!=39978) [ 93.560651][ T6253] EXT4-fs (loop2): group descriptors corrupted! [ 93.636134][ T6259] loop6: detected capacity change from 0 to 128 [ 93.639075][ T6259] EXT4-fs (loop6): Test dummy encryption mode enabled [ 93.646831][ T6259] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 93.649402][ T6259] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 93.679850][ T5516] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 93.989547][ T6275] loop6: detected capacity change from 0 to 1024 [ 93.991075][ T6275] EXT4-fs: inline encryption not supported [ 94.048304][ T6275] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.054524][ T6275] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.237803][ T6293] netlink: 12 bytes leftover after parsing attributes in process `syz.6.361'. [ 94.622720][ T6307] loop4: detected capacity change from 0 to 1024 [ 94.629160][ T6307] EXT4-fs: Ignoring removed orlov option [ 94.629214][ T6307] EXT4-fs: Ignoring removed orlov option [ 94.651493][ T6307] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.680489][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.866235][ T6328] loop2: detected capacity change from 0 to 256 [ 94.896274][ T6328] FAT-fs (loop2): data area starts beyond volume (274 > 64) [ 94.896308][ T6328] FAT-fs (loop2): Can't find a valid FAT filesystem [ 95.146584][ T6358] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 95.402934][ T6377] netlink: 4 bytes leftover after parsing attributes in process `syz.6.374'. [ 95.659402][ T6386] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 95.781515][ T6388] loop2: detected capacity change from 0 to 256 [ 95.967639][ T6390] netlink: 4 bytes leftover after parsing attributes in process `syz.6.378'. [ 95.967784][ T6390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.971820][ T6390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.617771][ T6416] netlink: 4 bytes leftover after parsing attributes in process `syz.5.388'. [ 96.662186][ T6423] tipc: Cannot configure node identity twice [ 96.751082][ T6428] loop2: detected capacity change from 0 to 256 [ 96.770220][ T6428] FAT-fs (loop2): data area starts beyond volume (274 > 64) [ 96.770259][ T6428] FAT-fs (loop2): Can't find a valid FAT filesystem [ 97.104359][ T6434] tipc: Enabled bearer , priority 0 [ 97.115179][ T6433] tipc: Disabling bearer [ 97.223349][ T6443] netlink: 4 bytes leftover after parsing attributes in process `syz.6.394'. [ 97.254561][ T6447] loop4: detected capacity change from 0 to 2048 [ 97.273007][ T6447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.313787][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.367750][ T6456] netlink: 4 bytes leftover after parsing attributes in process `syz.5.400'. [ 97.412693][ T6460] binder: 6459:6460 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 97.413001][ T6460] binder: 6459:6460 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 97.413014][ T6460] binder: 6459:6460 ioctl c0306201 20000540 returned -22 [ 98.014561][ T6477] @0Ù: renamed from dummy0 (while UP) [ 98.318130][ T6490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.326393][ T6490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.326510][ T6492] tipc: Enabled bearer , priority 0 [ 98.331129][ T6491] tipc: Disabling bearer [ 98.561658][ T6495] loop6: detected capacity change from 0 to 512 [ 98.574212][ T6495] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.410: inode has both inline data and extents flags [ 98.574249][ T6495] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 98.574410][ T6495] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.410: couldn't read orphan inode 15 (err -117) [ 98.574428][ T6495] loop6: lost filesystem error report for type 5 error -117 [ 98.574980][ T6495] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.575691][ T6496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.592063][ T6484] overlayfs: failed to resolve './file1': -2 [ 98.694186][ T6510] loop2: detected capacity change from 0 to 2048 [ 98.697815][ T6510] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.740777][ T6516] netlink: 12 bytes leftover after parsing attributes in process `syz.4.421'. [ 98.771700][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.954506][ T6530] tipc: Enabled bearer , priority 0 [ 98.957513][ T6529] tipc: Disabling bearer [ 99.063310][ T6495] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.925808][ T1594] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.925852][ T1594] ieee802154 phy1 wpan1: encryption failed: -22 [ 153.608955][ T4726] Bluetooth: hci2: command 0x0406 tx timeout [ 153.609000][ T4726] Bluetooth: hci0: command 0x0406 tx timeout [ 153.609196][ T4726] Bluetooth: hci1: command 0x0406 tx timeout [ 153.612225][ T4717] Bluetooth: hci3: command 0x0406 tx timeout [ 184.336278][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 187.366300][ T1594] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.366345][ T1594] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.445467][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 212.325750][ T31] INFO: task syz.0.72:5184 blocked for more than 143 seconds. [ 212.328018][ T31] Tainted: G L syzkaller #0 [ 212.328047][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 212.328060][ T31] task:syz.0.72 state:D stack:0 pid:5184 tgid:5183 ppid:4712 task_flags:0x400140 flags:0x00000011 [ 212.328091][ T31] Call trace: [ 212.328099][ T31] __switch_to+0x2b0/0x6e0 (T) [ 212.328121][ T31] __schedule+0x1370/0x2d80 [ 212.328134][ T31] schedule+0x13c/0x20c [ 212.328147][ T31] futex_hash_allocate+0x74c/0xc20 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 212.328161][ T31] futex_hash_prctl+0xd0/0x324 [ 212.328173][ T31] __arm64_sys_prctl+0x9b8/0x14e0 [ 212.328188][ T31] invoke_syscall+0x98/0x244 [ 212.328203][ T31] el0_svc_common+0xec/0x23c [ 212.328217][ T31] do_el0_svc+0x4c/0x5c [ 212.328231][ T31] el0_svc+0x64/0x260 [ 212.328244][ T31] el0t_64_sync_handler+0x48/0x148 [ 212.328257][ T31] el0t_64_sync+0x198/0x19c [ 212.328286][ T31] [ 212.328286][ T31] Showing all locks held in the system: [ 212.328293][ T31] 2 locks held by kworker/0:0/9: [ 212.328303][ T31] 2 locks held by kworker/1:0/24: [ 212.328312][ T31] 1 lock held by khungtaskd/31: [ 212.328320][ T31] #0: ffff800088cf6fe0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 [ 212.328369][ T31] 5 locks held by kworker/u8:3/40: [ 212.328393][ T31] 2 locks held by getty/4490: [ 212.328401][ T31] #0: ffff0000d17e20a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 212.328444][ T31] #1: ffff8000924cb2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x348/0xf78 [ 212.328495][ T31] [ 212.328501][ T31] ============================================= [ 212.328501][ T31] [ 212.328509][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 212.356307][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT [ 212.357997][ T31] Tainted: [L]=SOFTLOCKUP [ 212.358653][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 212.360226][ T31] Call trace: [ 212.360713][ T31] show_stack+0x2c/0x3c (C) [ 212.361437][ T31] __dump_stack+0x30/0x40 [ 212.362167][ T31] dump_stack_lvl+0x30/0x12c [ 212.362945][ T31] dump_stack+0x1c/0x28 [ 212.363606][ T31] vpanic+0x594/0xaf8 [ 212.364237][ T31] vpanic+0x0/0xaf8 [ 212.364889][ T31] hung_task_panic+0x0/0x2c [ 212.365634][ T31] kthread+0x304/0x3d4 [ 212.366316][ T31] ret_from_fork+0x10/0x20 [ 212.367068][ T31] SMP: stopping secondary CPUs [ 212.367879][ T31] Kernel Offset: disabled [ 212.368554][ T31] CPU features: 0x14000000,003c0008,27020501,5427fea7 [ 212.369653][ T31] Memory Limit: none [ 212.624732][ T31] Rebooting in 86400 seconds..