last executing test programs: 14.644028907s ago: executing program 2 (id=172): vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGREP(r4, 0x80084523, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x3) close(r3) ioctl$TIOCSLCKTRMIOS(r5, 0x80047437, &(0x7f00000010c0)) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x19) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r7, 0x0, 0x23b) syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r6) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x5}, 0x20000) 13.40844004s ago: executing program 2 (id=178): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000001a00)=@ublk_start_user_recovery_sqe={0x2e, 0x3b, 0x0, 0xffffffffffffffff, 0xc0207510, 0x0, 0x0, 0x0, 0x1, 0x20000000000000, 0x0, 0x0}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_CLOSE) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) (async) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x2c, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, r6, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0x59a, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x80}}}, 0x0) (async) io_uring_enter(r1, 0x788b, 0x84b, 0x68, 0x0, 0x0) (async) close(r0) 13.124108765s ago: executing program 2 (id=179): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x28000000, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x28000000, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000800)={0x0, 0x0, 0x80, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_WRITE_FIXED={0x5, 0x40, 0x4007, @fd_index=0x1, 0x2, 0x80000008000, 0x10000, 0xa, 0x1, {0x1}}) (async) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_WRITE_FIXED={0x5, 0x40, 0x4007, @fd_index=0x1, 0x2, 0x80000008000, 0x10000, 0xa, 0x1, {0x1}}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000240)=""/152, 0x98}], 0x2) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) r4 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x1}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x31) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x2000}, 0x18, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x20000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000340)={0x2000, r6}, 0x0) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000340)={0x2000, r6}, 0x0) landlock_restrict_self(r5, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x428}) (async) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x428}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r8, &(0x7f0000002180)=[{&(0x7f0000000080)=""/215, 0xd7}], 0x1, &(0x7f0000002540)=[{&(0x7f00000021c0)=""/233, 0xe9}], 0x1, 0x0) (async) process_vm_writev(r8, &(0x7f0000002180)=[{&(0x7f0000000080)=""/215, 0xd7}], 0x1, &(0x7f0000002540)=[{&(0x7f00000021c0)=""/233, 0xe9}], 0x1, 0x0) 12.885514744s ago: executing program 2 (id=185): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f0000000600), 0x5, 0x50c, &(0x7f0000001640)="$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") r0 = accept(0xffffffffffffffff, &(0x7f0000000140)=@ieee802154, &(0x7f00000001c0)=0x80) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x1060, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1) r2 = userfaultfd(0x800) open_by_handle_at(r1, &(0x7f0000000240)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r0, @ANYRESOCT=r0, @ANYRESDEC=r2, @ANYRES8=r0, @ANYRESHEX=0x0], 0x98300) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f0000000600), 0x5, 0x50c, &(0x7f0000001640)="$eJzs3U9sG1kZAPDPdpJN2izdXRDaXSS20iKVP2qcP0KbABLiBBwqISpxAamExA0lTh3FTmmiSqRw64EDAoGEOHDnwpULPVFVQpxBXDmhVlCCVFCRBnnsSZ3ETlya2Gzm95Ncz/i5/t5z8r08v3njCSC3Ljb/KURMRsQfIuJCa3f/Ey627naf3Flq3gqRJFf/Vkif19zPnpr9v/MRsRMR4xHx1S9GfKtwOG59a3t1sVqtbLT3y4219XJ9a/vyjbXFlcpK5ebM/HsLC/PTc7MLJ9bWez/8zr0rv/ny2K+e/uDRgx/97rfNak22yzrbcZJaTR+N1zseG4mIz51GsCEotdszMeyK8D9p/vw+GBHvpvl/IUrpT7M/z061ZsBpS5Ik+U/ySq/inQQ4s4rpGLhQnIqI1naxODXVGsN/KM4Vq7V641PXa5s3l1tj5dditHj9RrUy3f6s8FqMFpr7M+n28/3ZA/tzEekY+MeliXR/aqlWXR5sVwcccP5A/v+z1Mp/ICf6/8gPnDXyH/JL/kN+yX/IL/kP+SX/Ib/kP+SX/If8kv+QX535n53I9eqQ6gIM1lF//8cGWA9goL5y5UrzlmTnvy/f2tpcrd26vFypr06tbS5NLdU21qdWarWV9JydteNer1qrrc98OjZvlxuVeqNc39q+tlbbvNm4lp7Xf60yOpBWAf14/Z37fypExM5nJtJbdPzJl6twtiVJIYZ9DjIwHKVhd0DA0Dj0B/n1Ap/xe35JGPD+1uUreveMn+9Z9PlYP/aVdn/9EvUCTk/xqMJnDwdXEWDgLr3l+B/klfl/yC/z/5Bfx4zxDQ8gB46a/4/2tfy6OjT/38PTF6sPcPqOnP8HzrTJLtf/SpLke692XLtrOiI+EBF/LI2+kl3rCzgLin8ttMf/ly58bPJg6VjhX+kcwFhEfPfnV396e7HR2JhpPv73vccbP2s/PjuM+gO97Z/hy/I0y2MAIL92n9xZym6DjPv4C61FCIfjj7TnJsfTEcy53cK+tQqFE1q7sHM3It7sFr/Qvt5568jHud3SofhvtO8LrZdI6zuSXjd9MPHf6oj/0Y74b7/0uwL5cL/Z/0x3y79imtOxl3/7+5/JE1ofnfV/2ZrrzvhZ/1fq0f+902eMb//i+90O76aLvR/fjXi7a/+bxRtPYx2M36zbpT7jP/rG1z7cqyz5Zet1usXPNLfKjbX1cn1r+/KNrBbz7y0szE/PzS6U0znqcjZTfdhn3/z9g17xm+1v69H+Px9q/0S7Tp/os/3//sjDr188Iv7H3+3++/dGen/g/U+SvTp8ss/4/5j9yzd7lTXjL/d4/4vd4kdWGjHXZ/z6T77k3GEA+D9S39peXaxWKxtdNkZ7F9mwYWPQGyMxwKDH9Rw7g+mggFPzPOmHXRMAAAAAAAAAAACgX71W/94/weXEw24jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBZ8N8AAAD//6rz1eo=") (async) accept(0xffffffffffffffff, &(0x7f0000000140)=@ieee802154, &(0x7f00000001c0)=0x80) (async) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x1060, 0x0, 0x0, 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) (async) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1) (async) userfaultfd(0x800) (async) open_by_handle_at(r1, &(0x7f0000000240)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r0, @ANYRESOCT=r0, @ANYRESDEC=r2, @ANYRES8=r0, @ANYRESHEX=0x0], 0x98300) (async) 12.734622902s ago: executing program 2 (id=189): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) (async) syz_emit_ethernet(0x22, &(0x7f00000009c0)=ANY=[@ANYBLOB="aaaaaaaaaa15aaaaaaaaaa00081cebd2796cc606000142e906000009aaaad0d1b367"], 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x5, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_mreqsrc(r3, 0x0, 0x26, &(0x7f0000000040)={@remote, @rand_addr=0x640100fd, @empty}, 0xc) (async) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108) 12.506692909s ago: executing program 2 (id=196): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0, 0x0) (async) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) (async) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c8098000"}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r2) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) (async) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) r6 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) bind$xdp(r5, &(0x7f0000000240)={0x2c, 0x1, r7, 0x0, r6}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg1\x00'}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x25, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x25, 0x0, 0x0) gettid() socket$inet_sctp(0x2, 0x1, 0x84) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r8, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) (async) setsockopt$inet_tcp_int(r8, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) 12.412912258s ago: executing program 32 (id=196): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0, 0x0) (async) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) (async) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c8098000"}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r2) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) (async) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) r6 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) bind$xdp(r5, &(0x7f0000000240)={0x2c, 0x1, r7, 0x0, r6}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg1\x00'}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x25, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x25, 0x0, 0x0) gettid() socket$inet_sctp(0x2, 0x1, 0x84) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r8, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) (async) setsockopt$inet_tcp_int(r8, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) 1.300727712s ago: executing program 0 (id=360): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f00000000c0)=@framed={{}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40800000}, 0x94) 1.300478215s ago: executing program 1 (id=361): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time\x00') setns(r2, 0x80) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d000000000001000000000000000b40"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 1.235604034s ago: executing program 0 (id=362): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000010000009500000000000000359bb9f43d86b136000000008762000000f33ad18fa9b151092e9172d8ca80be3fd2fe548fa036cf6151d76a8b71e51807e420da77440079a86cdda66fedd4922a95cd42662d9dafae9602325ef1a30b8aba9c271a51a56f7f73de45084cd90fa9ac55778d6c272c473383785c34c5b372e52138cf7f6c081c29a5eec551cd928f1f289175a9ff"], &(0x7f0000000100)='syzkaller\x00', 0x7, 0xc5, &(0x7f00000004c0)=""/213, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff42}, 0x54) ioctl$NILFS_IOCTL_SET_SUINFO(0xffffffffffffffff, 0x40186e8d, &(0x7f0000000080)={&(0x7f0000000040)=[{0x8000000000000000, 0x1, 0x0, {0xb68, 0x3e, 0x2}}], 0x1, 0x20, 0x8, 0x8}) 1.235193143s ago: executing program 1 (id=363): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x0, 0x4}]}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r2, &(0x7f0000000c00)=[{{&(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r2, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r5) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r6, 0x2, 0x70bd29, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x50) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, r6, 0x8, 0x70bd26, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x8040) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001305000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x11}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 1.233644115s ago: executing program 0 (id=364): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000100)={'filter\x00', 0x0, 0x4, 0x40, [0x0, 0xc, 0x5, 0x5, 0xffffffffffffffff, 0x3], 0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000000c0)=""/64}, &(0x7f0000000180)=0x78) ioctl$OCFS2_IOC_MOVE_EXT(r0, 0x40406f06, &(0x7f00000001c0)={0x4, 0xe, 0xfffffffffffffffe, 0x80000000, 0x5}) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000040000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = syz_clone(0x80248000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f0000000200)=0x9, 0x4) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 1.223710366s ago: executing program 0 (id=365): r0 = openat(0xffffffffffffff9c, 0x0, 0x140, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x3342, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r3, 0x5) tkill(r2, 0x24) r4 = syz_io_uring_setup(0x4fd8, &(0x7f0000000380)={0x0, 0x42bd, 0x400, 0x3fe, 0x336}, &(0x7f0000000100), 0x0, &(0x7f00000001c0)=0x0) r6 = syz_clone(0x2d1f780ef8ade330, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r6, 0x0, 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472616e7d2e66642c720c39dceeb8ae192c1a", @ANYRESHEX=r0, @ANYRES8=r5, @ANYRESHEX=r4, @ANYBLOB=',\x00']) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0xe, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) syz_extract_tcp_res(&(0x7f0000000080)={0x41424344}, 0xea, 0x7ff) syz_emit_ethernet(0x4a, &(0x7f0000006340)=ANY=[@ANYBLOB="aaaaaaaaaabb0180c200000086dd608a357200140600fe8000000000000000000000000000bb00000000000000000000008b0000000000004e22", @ANYRES32=r9, @ANYRES32=0x41424344, @ANYBLOB="5007000190780000"], 0x0) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ppoll(0x0, 0xffffffffffffff10, &(0x7f0000000280), 0x0, 0x0) memfd_create(&(0x7f0000000300)='y\x105\x00\x10\x00\x00\x00\xc1\x00\x00\xb9x\x00q\xc1\xea_\x8cZ7\xcd\xa7\xd4\xa5D\x0e\xa1\xcf\x1a\x98S7\xcd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9df\xd0\x87\x88[\xb8\x1b\xa0\xac\x82\xdaS\x9bCM\x02}X\xfd\a\xd5A\x1e\x10\x19\x13\x84O\x8d&\x93\xf8\xcc\xa2\xe0;\x0e\xc5\xdc\xd0\xa7Y\xef\xe4\xd4\xef\xb8[\x17\x02\xf5\xf9\xe9e', 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r10, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) 1.102554721s ago: executing program 1 (id=366): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x74, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x28, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @local}, {0xa, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x74}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 1.003535811s ago: executing program 1 (id=367): r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$alg(0x26, 0x5, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0xfffffffc, 0x0, 0x3132564e, 0x0, 0x0, [{}, {}, {0x0, 0x3}], 0x0, 0x1}}) 999.835026ms ago: executing program 4 (id=369): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00'}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="34000000f707106e441600000000000000000700040007235c64010102ac1414bbac1e0101e0000002ac1414bb"], 0x38}}], 0x1, 0x50008000) unshare(0x64000600) gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x10, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@mcast2, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xfffffffffffffffc, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x4000000) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$peeksig(0x4209, r7, 0x0, 0x0) rt_sigqueueinfo(r7, 0x1f, &(0x7f0000000200)={0x3a, 0x7fffffff, 0x9}) 908.318737ms ago: executing program 3 (id=370): keyctl$dh_compute(0x17, &(0x7f00000002c0), 0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={'hmac(sha3-224)\x00'}}) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f00000001c0)=0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) 672.826302ms ago: executing program 4 (id=371): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) add_key$fscrypt_v1(&(0x7f0000000500), 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_clone(0x6800400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="410000000000000000008100000008000300", @ANYRES32=r2, @ANYBLOB="04006700060066008e8800000a000600ffffffffffff00002200330030240200080211000001ffffffffffff505050505050820010001f0000000000"], 0x58}}, 0x0) 631.649312ms ago: executing program 5 (id=372): set_mempolicy(0x1, 0x0, 0x9) set_mempolicy(0x0, 0x0, 0x3) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="726f6469722c6e6f6e756d7461696c3d302c757466383d302c757365667265652c73686f72746e616d653d6d697865642c756e695f786c6174653d302c6e6f6e756d74259b71b2fe7e3835cd6e91e28e61696c3d302c757466383d302c636865636b3d6e6f726d616c2c636f6465706167653d3836342c636865636b3d7374726963742c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c696f636861727365743d6370313235302c757466383d302c726f6469722c0066e535705ccaf228ef5b554bdb65bdf78d42ab429d2d5f0b0b702d92b31766f4ac5b25a182db85e145fb8072f10e80bf4441841a5f9eaa1a6a0bd0bf34a0028215eed362e1bc866c35b2642a035a64cfd447528ca171c9af825519baf54eabe8e39cfb56f8c7f6721bee6caa6b9f10bf576a1b00000000"], 0x3, 0x27b, &(0x7f0000000640)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) 544.252303ms ago: executing program 5 (id=373): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) process_madvise(r2, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000ac0)="cd", 0x1}], 0x2, 0xa, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x84, r3, 0x5, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3e, 0xe, {{{}, {}, @broadcast}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0xf, 0xa1, 0x4}}, @val={0x2d, 0x0, {0x2000, 0x1, 0x6, 0x0, {0x7fff, 0x40, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1}, 0x400, 0x9, 0x6a}}, @val={0x72, 0x6}, @void, @val={0x76, 0x58, {0x0, 0x1, 0x2b, 0x6}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x5, 0xc]}]}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x84}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20004008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000940)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x7f, 0x8001}}, './file0\x00'}) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@dioread_nolock}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@resgid}, {@norecovery}, {@abort}, {@auto_da_alloc}, {@nouid32}, {@resgid, 0x32}]}, 0x1, 0x519, &(0x7f00000014c0)="$eJzs3V1PZGcdAPD/GZgtLCA0elGbtDZuDRDdAcRuiRe1Jkavmqj1viIMhDAwBIZ2IVVp/AAmxlgTr3rljYkfwMTsRzAmm+i9UeNLdFcvNtHdMefMy7LsmQV2ZxiE3y85nOc85zn8n/9M5pnzljMBXFqvRMS1iHhQr9enI2K8WV9oTnHQmNJ2d++8v5ROSdTrb/8jiUgadWmzqUP/c6S52VBEfPNrEd9JHo+7s7e/vliplLebyzO1ja2Znb3962sbi6vl1fLm/PzcjYXXF15bmO1KnqMR8cZX/vyTH/78q2/8+nPv/eGdv059L2nWRzzMo9saqRez16JlMCK2exGsTwazDAEA+H/Q2s//dERMx3gMZHtzAAAAwEVS/9Jo/DeJqJ/I0MmaAQAAAOdKIbsHNimUmvcBjMZLH5ZKjXt4PxFXC5XqTu2zK9XdzeXGvbITUSysrFXKs817hSeimKTLc1m5vRwR9w4vl+cj4vmI+PH4cLZcWqpWlvt98gMAAAAuiZEjx///frzJf/rRLwAAAKDLJvrdAQAAAKDnHP8DAADAxef4HwAAAC60r7/1VjrVW79/vfzu3u569d3ry+Wd9dLG7lJpqbq9VVqtVlezZ/ZtHPf/KtXq1hdic/fmTK38t7FGXXV3s/bO2iM/gQ0AAACcoec/dev3SUQcfHE4m1JX+t0p4EwMnqbxn3rXD+DsDfS7A0DfnOr7H7hQiv3uANB3yTHrhz76bv6K3/SiNwAAQC9MfjL/+v/AsecGDgpn1EWgR5z/g8vL9X+4vE57/d/+AlwcxRgIB/JwubUfATr8aP1Ic97x4R0nvv5frz9VxwAAgK4ZzaakUIrIzgOMRqFQKkWMZccExWRlrVKejYiPRcTvxovPpctz2ZZJJMfdNAwAAAAAAAAAAAAAAAAAAAAAAAAAZOr1JOqnsHCq1gAAAMB5EFH4S5I9zT9icvzV0aPnB64k98azeUS897O3P7y5WKttz6X1/2zX137arP98P85gAAAAAEe1jtOz+XC/ewMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADARXP3zvtLreks4/79yxExkRd/MIay+VAUI+Lqv5IYPLRdEhEDXYh/8EFEvJAXP0m7FRPNXuTFH+5z/JEuxIfL7FY6/ryZ9/krxCvZPP/zdyMboZ5d5/Gv0B7/BnLip3Vj7dKTvXj7lzMd438Q8eJg/vjTip/E2KPxDxrjz7UT5vjtb+3vd1pX/yhiMvf7J2m3SUsztY2tmZ29/etrG4ur5dXy5vz83I2F1xdeW5idWVmrlJt/c2P86KVfPXhS/lc7xJ9o558//r56wvzv37555+ONYrG9efIw/tS1/Pf/hQ7xC813/TPNcrp+slU+aJQPe/kXv325VX4zJ//lo/lPx5H3Pz//qRPmP/2NH/zxhE0BgDOws7e/vliplLcvdeGZXo10t+hcZPFMhSu9yiJ9Xc9DgnmF7z/t5unub4dVA51XnavC0DFtIp7r68gEAAB02+PHwAAAAAAAAAAAAAAAAAAAAMBZ6/GTxu6nheKRmAfZ3248PR8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoHv+FwAA//9xi8yk") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x1000021, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x1ffffc54, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40}, 0x94) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3d}, 0x94) syz_emit_ethernet(0x3f, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="068cba240a87", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x31, 0x0, 0x0, 0x81, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x9, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x7, 0x65, 0x0, 0x0, 0x6, 0x0, @local, @loopback}, '\x00'}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setresuid(0xee01, 0x0, r5) 534.149208ms ago: executing program 4 (id=374): sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x2, 0x70bd26, 0x25dfdbfb, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000014c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001480)={&(0x7f0000000140)={0x133c, 0x14, 0x100, 0x70bd28, 0x25dfdbfd, {0x11, 0x9}, [@INET_DIAG_REQ_BYTECODE={0x55, 0x1, "5d1c1b528d447db700f5afd6373fb40f861571811b7197b7d7090153775ca100e5c3b8c91a22b3b106c2810767bc581c8c9f42f13ff9092ea8123fb2a3b11bcecba15a94f83292c2f61e1cbed31af0621f"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "eb7767d3dc80701fabe928a68ffe1a464109e4f061296b6d92beff5bef595a2ad173560823d3367259d7f1594833167573761160045d57e9747070257e915f63abdd178b88ea2b7ec43cd554856e0abb7b8b7435ec7fd3a7b5422ddf2eac38237fd4fbe060837ae2969bb936a7dae3f1ee3f0fc3d57ab5b0096c493db7302f6616c727a21cd9cca8903d80257e2c2292d54c5b1db31cd4312916076c2183ead72ce15af8a4c46eb616b4f3d3e604ab0b4365d1bd8453b847a3aeb34b5138d6e7b3793df937c009f402940c4a753d214988590c3fa7ec3154a63c04564b144032e5023bd779fbdf541108c03da345db4cf949c0ba8a93ccd648336c4a7a3ba4bf61793706f44e655650acfb5fe88706c0563146e42b605eb04ab995ceb4242e6454fc6897e2ea387517906b57f4409ea7bba40c69458b51f30e604c189ef75c3965417bce6ce80c5775f6fc50517c840075b9b75abc35431f603759e49db22dcd72d5f2b3a20119fa841ea1c5acc218b8a498711729f84f71a25d06fc33f30b0715c793efb93dc0de409d8d7a253248303d9bded1481cae8f83574817b7d6aafd2408eff55b06b44d9580ff13f128f49d79fb79ba85beffdc22d7c33383f149586dbb97eebea4b906e9a65ef465db63f90ff8691f8f53a0eed2d8a95ba9cf2437dcb62e070e5af76d9551980cd0355c7b9634a7e87b52f4b4b6d5afbf3f0cf31b7e5c1e62e8dd0d1e34654ebed8beb95cbf56280d3d340375dd661e7d7b5a1ebe976033995b87015f960d715ee8d6d7df6b167d6fff9f435401b6d25d96ee4acd4fcee3bf0cf7a620beafbbe110d18a1f30845d3aa286d96e77ee856ec61dcd6f77dc8d94db2d55ee0889dde9e3b7f96fd657c554dc0e6eacb9837a901f07ece92bfaa094eb606ba94993b64e3049697f7d2628984c1127344eb1c30b0b8596f30d542766bc739b72cc59abce85c2912688983edb742ead6a8fc25f2ec02a4b737274dbda3d00a09577db0e6a0e66e337977d7f6c687454c37333e3152495417ac0369a85f85cfb302b53fd2788cc62fa8437d3e224e38b21849dbdba90ba0c895df12c4cace9080b68a9a895c3eb1837814f1aa3b6a124b0cde8b0a0f6aea66cd5fd5060ce47280509e9b094ba9ca3a718a49fda868ddca79c9b64bd722808bce2a6eef76bdef3555cc2f475a3723b44160f896d53d9ceef532afa351db590eb99678a518807dd291b734e6df5cdde23a1bec1b8f43adea0a89e58910d111c4d6b3feea83e1483853c24da6ed1bdaea88e3864e6203c53790996ab55468d83cfc0f9f5948159699c2b4b0115888f850bacc5afe39cff93fcaa263e4880b38f04fc7b4be0dc8e28318830870cf0d9e2f00ce48c04d38d7242f37dd8415d196df9fe2b6c39aa2952956100ad09486cc67f169f08e3a2a6eb7f88736ab5fd33c98602732d2fe8d93021a183b1afe385578584d6abb20aacc62ae32bdd2b870c4385f3193ed94770a70e572bdc167c5aa8b5643f1de0b36e35faddb2455a63dfd4805e46acae347efb72f935a834f2cfa49ff18a8f6a496093a92a0b813382968eb9a03572714b60f70255a1e9d2f3d6115042c175c7858b7cba8f39f0c9c7148b7583d4581d40f59974ae1afd4068e5f18864e9afed478268853c0f81715d1c8bfe7771f871ddc75c1229c578bc26d0adb3531d33971a5ac7e08bb0b9c83355fffde839598a10f2ee9c85870f21007922665cc2cf28ee4b3be1b502c1a614ddc30eeaac7877643e36bcd6aacc088bc798eb1f27c3b94ad15da146250cb88ede5fd3d33d06c5573e19b8d83341f0778f59521e404fa15d9643bfe301b172d92ff9c9f960b1e8b3ab423e06f196eb926b44db037285a74d9c331a413a4000acbed469ecffc5163daf9f604ddbdacd26c6d959b83229d091c09f7f0fb7f039eeff5901911ed63b53526cfc53d2a1451e9ace1009bbd828127011c4eb0542df819943e74d9322430fad9186a340cdab666bbca41a23afdfaa1d9d351012d8706970a2d32f53e11bcc3ad7c547308524e39860a10d00df4b4aacb7af3c24fa9571b7bc461bde6ebc9ff783e353d91eaf951178a1bca9f24dc4ee93973add191d321dc78ea54a6a0e3c72d078068f719364c28651474e9399b3b8b8405282ff12950e9658e515bb4412b36d88ec483a944814e90c988220a3c4ea3ac4de177bc2a3069456cd6a212c3086c8ccf06b0ea14cbc1f05ad8664847625ee35bcde33f404006443066fac2fd0a031941aef43896c723dea08f5e268bd282e27d4b890d800f04cdccce56111aac1e14103c166d3be4684ddd83cd0e1e81a7c502830fe29526220c12947941f98ba7e68f0c71cbe3a294fa8266b73d6b244a86f39e89a318a3beb1aebc6d1e45da68f976bb846cb3f0e10935dbebd2a7b60e401d0c96407ba715101d780722bac42af0c5125f6ee6c8307fe0891a6f4481cb2131c44a3e6c42187fc7614c733435e6341b1371e820224a52b785438b190a5f70d878700cfafefc0fdc33fbf716010cae205ca3f26e342c2ea7518add69eda94f939a6106eea4811d245f20d3195b386c04bed387c3cc66cf0189c920f776c687dcfb211227f0fcb09b226fdc9c3ace1c5e088e6bebb9cec846aca28f6002e4178ba26a7d267cc4610280fba39a6d7e1075b16a807685a426a1c1c87bea8ed81c543b4344002b8107e3d8925848d2a588342be1b9194963e2334aeefe2bbccd4c0a331c7c87c0e923ba8eb81b08551a4f64a13b5c0f76494a34c149763a4fd259f4e5bf135ca980fa1b134fa117de85c38d4720e82a288815bbcafa9859bbd079a1194057887af6a55922ad4b5a2d9a35553e9ef095181c5a11f25f37250e194745389a888f3a5f7d47e596f05ec676a3f3e0dabe4671091cefea38a0a1d17c007060060b0dd9f88dec8e4d54cce22bde7d25756a57f62e9cd7c383fd220294ac19e650a6b990355113b83abce8248e46e0c404576e40561125846c0b1827bec3447df9b7ccd52f5d199250f3aaa6eb62ec0f5bbf0e651d8de9349b27f24e19bbf1ed6d84c0efcb00fd43d48b74570ba7230515680fc22bebe04a20d9ba97b60156175b22091f9d94593e0debf82ed61efafe7ba343ab9f99b308a533ed9b47979aedaebb5b043406189ae264125863f2860b52eb07b4e76e8de8216e22cf9388569d39c61e5c34aaaa351cf423f1a26f7612e523fa1d65890c1050187f94a48dc3eed1b7a443d9cb068f0095118df78ff2c9a55e896033855933c84eb65d1693b08a2146655b912684f71ce364ccc24112dfdeecc34e59e916f6ed91d698035d92c753d1bc6065f5fe2436b8231836afcf9bde70d8f3e2ecd6674353b747a556cf50d10f566a503245118b720c24c5ef2ff86067ebe903c6bea46fcae143e67f0d5d063a538f8231ed1a17a4832aba1e7ac575314137aedc9ac664dc023aded89254273d58fc82c71e4026cd0488b40409d47336ebc7e7d440fbbd7dfedc4651b1657b9220180ca21aaebc4fa15babcd48f57e25310f3ae5d7d106dce2fa64b82dd94f531698ccdb4710306a30c847c7a43856431f723e77e5992338b0e14dbc92929f6cf4e3412007c42b687d99e4193eff3ae13dfd9e1e9c4ff54ae4f3e7fc75a1ed01f81a6a4ea8a8d4d01d4c20a3eae1725b7efd714cf18f8f669f4536736a63375757c9e3b30bc44237bf70cd588c31b7f8f9c8ca87e85d6b5bc63c5f8be86a145dbb28713ad27d67a21a3deb99479a1f17706f77401c7dc22d538825464f26037e41e476e044fbf93cad0d1263a472c76e20821c69f5610749a717d6c404cb7c2ec18688c294c5735cf08081bfaca6ab858dbf0da84b7a4b4ee4c35c0882039c300c0b24f176a1ff6814ea4f32610d147a073da5f5e6b5c6ae9dbb079dbab68a3f050c002839ac6c7b23ee9197bd43415f253284ad1567f9fb01f6d9adeeff6a5f62ad1697a5f3852b6796f048ab0e35e308948d0438ad0818f3b5217ef6ddba95e571f3a6a97ea4179358e67df7c89cf4c6df78e826ca06f79fb0c4873114a780a7b3982b720e73b36831a4bc864f872174cd42ffc36bdcc1dc640e81475df96c4cd393d116f8f27ce9bdcc52458db89dcdeebdca6eaabc2e0f30d19c2368e0747311860c37395126fa15c948262e02c6bc9bcd8de7328ddfd4a05ab52b085473de96781a8e3c293a51edb7a65fd34c5522a4636f39d8193a94a5e741108da601efede152c9d6fc5763baa27bf0e26b88290fc1d3a5d66cd0ac0b695c8f674767f9997f83000e5a49d947d982632fe7cb66a3e8aafeae886eb5f2c723ebe480aa4ba7f992fd4c350e73c60ad382523646274a81579363618407ade8b1ae26a0560b1536a7a2e4fcb964af827a7464f2fb951057cb77a04b971208111447472ba39d83bab008673447cfe78878cf8757c6f2e62b8db495473494b5ee374f25ac8c14b5fd4ac3fec44a5bb07d3d80724f2759dae220111c33d770c1ba3204329fa0a8383d5673438ac96a2fd4bc7d95b46f71e45e778bc6aff06c309923ab5d756a90a05ed952396a4d409208d6e6e3014e4c992e5077f987ef76a169a0007430f78d93ef45dc917a3378803f2eeb2fa52671672e0dc08c044fdf8900f1a1f460ad6caff016cf9f1309ddce6f1ddf46c577fa15f364f417480151a00bee4def5ea941ff767d6071fb88ff47b263da976a0e595950451d388b19d1dfce8ce71e9232514c4bf7f982cb867e56d049cec290a793a10b2d5d79838a647c4d3d20fe940807a5489177d42b6f75b39fde67989650e61220c0280262464e9995677829d6ba64198dd17149c0aecb94fe99358518b51091ba25f7cc07c80f8d3f641b4b1824994d819b9ec523c730573fa1fa91375680212064107a3b2a8a3eb705c125166c130a0fc0860f7a082200fd1f63328eea37d39012352efb36a15f234034e04f4e21d06a35596a6661ad3303bf2dc9020ee63b5e5de098bf89644a1c5297cba41837f773654721b2fe65a8c1271fa4cb2d493a2dd7495d6ee7ba38739a1623ca940e623081a12d5199ef19566bb19a34715db55ea05589bc902ee698c2e170a959fc4aac2a1c099feed4744bcf7f4296bb42231fe1de66536781d7a36fb1063a9a3103241b2ba7b36cc24dfeb06d18ba0aabe04047300042e1623ce78bb2e832e208dfb51e1c5d00d60c497d17c9ae700e04f5611134e2ddc85ca446acbfd5eb13ca57396d1ae4857c7781f7a3d91e36bd44e118f94bda5c45cf417b86f92644d4da4ae128cb54c20b1202a7769d18ec19524e97c465cd341ece10483c451fbe93a0252e5411096946f72e8ca3c27407992903f08b418d41d733577507f1cd79ba371381c1917b6229a948f699f85c2b15fc867f0f3be7222f3efedc6c74950f6bcd98138000a3aabf89b30f6a8d1772073d3cc2a87b390cc84b58b956dff291b2054d0b3b41dfbd25106e0573e286971ac11a587ca610597f67d575edc3efe0035b3239ef80e1603135f0f572a6867e24b03478282263a9150cde2c4c9fcbb20bfa226db0c93b89322914a0b2131cf68c4b5924c2569776e2a5dad654265bd0c14a50ed6a9400694c1f2cfe156f508d7eb4d57486d6ae7ee9f8b4cf28a27d164e629d8290dd6749d1f96f1fe31f9f772ae70b1b093b2d9b0094a76a1f9073d35022d020191e267bffa3bcb97dc15dc4cf355a4b162018c168c43692a7feeaa890e6aaaf9f507544723e73097fa9391409db5777a24bdc95ec58505eb7cf0ec84e200c56f50"}, @INET_DIAG_REQ_BYTECODE={0xc5, 0x1, "e3faef38f374f5dba48aefbea5c0ead03444acc6593e797721c12e1aaba0b4f17e72fd1f177ed639afbc40159216f3cc0ad4f86aecf02348f9fae691ecf28390c95928f0d394d8919734cefd92a69b98b0ba6711a8c96f0c6194573fd983e6339ede6d43d1fc158c2b34a75cba818b1d78222cc76e2d6f77330dbf6765b66f19a45a6cd1722e46a32bbc0f777eb13b28cbf1b99face71e8e0903e9a0b4137f7653c315c77c22eb2e4b2912058ac1ed0eac2cb4281700a9c1927664c03975a11bf2"}, @INET_DIAG_REQ_BYTECODE={0x5d, 0x1, "3f164fbebfec8a3fa697953ac619f166ec7560aa59538fabbea6bb635a7fd820fa3eb69bcbb13c3ba0a0295ee0dfe44bc8042f71dd7a7eeffc6ebd0ab181a8cb7d0ccb232b4ad647868634f5d972f6c6db1cb421842e17a9b5"}, @INET_DIAG_REQ_BYTECODE={0xee, 0x1, "7d822b39964c8de11804709a4a98c289b7f353c67262b026a55c6b8f97a9cab557133bb76c0985dcdf4a5712aa1facac151091a26e7af52ed79140823187857b959a93142524c38e0f7ca09d07886425cdc841493079aec162e35ca18c9d7480d2f7429513565ee30dcef5e3596d072552e49b3ad3138addc1935333599bebaf2fa011303e7bf181f543404f7f36871e48c63adee1a6271b0bf830defc1deccd92f6e7fbeed2eb9622065e58faee1cc39330e956555280de5a20fc8c9d12b26648af59df4899f8dfdb9e48cd8dc740a9b04908152a38eb472d39d19921d18e4f95fc5bb70921e7c4f591"}, @INET_DIAG_REQ_BYTECODE={0xb3, 0x1, "abcc0eee33e32686a1df629b1141ccc89a783d1e4137107280d334fb070e35c3947677338edd707411affe032c8a3677013218108fd027362b91d85b7c1b8cca7ac6642516614c879ec244474a9e93a288ba9b8161133adffe0cd6ed498ac6fef3b75bc22ed1c5787f8dee9ebc1f073a5f7c84815fc28fa18d6db7550b798e97c8cbf12926ff48e173d7271ed32c02e0b6e9196a3865b92576724dba4501655abb9035687017fed7b49322ad925133"}]}, 0x133c}, 0x1, 0x0, 0x0, 0x8}, 0x8000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001680)={0x1, &(0x7f0000001500)="ca2a6c1d6266bfecf9cdd404bc072512b62c4afad0f552b24380fcac77562f615e950ae92bd7fb731a1ab5f9d856da6686c239d138112772bf78429788dfe8ced77d19c40defc11cccad1f6d662d38749d622a3233b410d9e87794c7bc31278f97", &(0x7f0000001580)=""/230}, 0x20) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000016c0)='./file0\x00', 0x511000, 0x100) syz_emit_vhci(&(0x7f0000001700)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x94}, "0d24f73921bd945a7da56fbc05902be3940c685b13a27544811ef1f10ebcb2dd7cf02838377fa9bf2db243f7e40fe935fef8fd4fffd52ee5ab03835e32abdb272ccae9d23d7fd918f1488c88e42d9391b7b6f47e42ca7dfaf54fa45b8d33a60d5355312a36f6760064ecbe2a5bea5e8a969625a8fa1aeb1d53885b17fdc1369629a5aaba3831926f4702f9c00c57b1c54f5b586b"}, 0x98) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001800), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x14, r3, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004044) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x4c, r4, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1ff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xa77}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffe}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffff7d}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040414}, 0x8004) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x44, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x16}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x3}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x14}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x24008080) r5 = accept(r0, &(0x7f0000001bc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000001c40)=0x80) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000001cc0)={0x7, &(0x7f0000001c80)=[{0x2, 0x4, 0xb, 0x200}, {0x9, 0xa1, 0x8f, 0x356b}, {0xc0, 0x9, 0xc, 0x4}, {0xc, 0x6, 0x4, 0xa5c0}, {0x5, 0x2, 0x8, 0xffffffff}, {0x5, 0x6, 0x0, 0xd2}, {0x7c, 0x5, 0xbf, 0x8}]}, 0x10) sendmsg$NFC_CMD_VENDOR(r2, &(0x7f0000001dc0)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x34, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x6}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x90) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001e40), r2) sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000001f40)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x4c, r7, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x4c}}, 0x40010) open_by_handle_at(r0, &(0x7f0000001f80)=@orangefs={0x14, 0x1, {"880743e12212a0c0a3bca40b193d9865", 0x7724bda3}}, 0x8c856ce6d4128d4e) r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000001fc0), 0x10000, 0x0) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000002000)={0x0, 0x2, 0x0, 0x7, 0xe, "51b9397f46082f82"}) setsockopt$IP_VS_SO_SET_EDIT(r6, 0x0, 0x483, &(0x7f0000002040)={0x84, @multicast1, 0x4e24, 0x2, 'lc\x00', 0x0, 0xffff, 0x12}, 0x2c) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000020c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r6, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x21040000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x24, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x20008001) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000021c0), &(0x7f0000002200)=0x4) sendmsg$NFNL_MSG_ACCT_DEL(r8, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x2c, 0x3, 0x7, 0x502, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xf9}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004050}, 0x4048000) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r4, 0x200, 0x6, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044880}, 0x0) socket$inet6(0xa, 0xa, 0x1) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000002500)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x2c, r4, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x200}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x800) bind$bt_hci(r6, &(0x7f0000002540)={0x1f, 0x3, 0x3}, 0x6) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000002640)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002600)={&(0x7f00000025c0)={0x1c, r7, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x8000) 467.547824ms ago: executing program 3 (id=375): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000181401"], 0x20}}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r3, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r5, r4, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) (async) getsockopt$sock_buf(r1, 0x1, 0x1f, 0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000001040)='./file0\x00', 0x0, &(0x7f0000000480), 0x3f, 0x40a, &(0x7f00000004c0)="$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") (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r8, @ANYBLOB="010000000000000000000a000000b0000480"], 0xd8}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r9, 0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000040)={'wpan4\x00'}) 379.128734ms ago: executing program 3 (id=376): r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x67db, 0x4) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r1, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/21, 0xfffffe9f}, 0x7f}], 0x1, 0x12023, 0x0) pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setresuid(0x0, 0xee01, 0xee00) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001900), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003800)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000003a80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r5, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000003ac0)={0x1c, r3, 0x11, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r3, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "7a44fad27dfed7cb182662aa1e993ed9d9645cd7beec4996"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x4c}, 0x1, 0x0, 0x0, 0xc050}, 0x8001) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0x40) process_vm_readv(0x0, &(0x7f0000008400), 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/52, 0x34}, {&(0x7f0000000040)=""/3, 0x3}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000000100)=""/160, 0xa0}], 0x4, 0x0) 284.263898ms ago: executing program 4 (id=377): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x2) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) ioctl$XFS_IOC_EXCHANGE_RANGE(r1, 0x40285881, &(0x7f00000000c0)={r0, 0x0, 0x1, 0xfffffffffffffff9, 0x3, 0x1}) ptrace$ARCH_SET_CPUID(0x1e, r2, 0x0, 0x1012) ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, &(0x7f0000000000)=0xfffffffc) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, 0x0, 0x0) getsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) rt_tgsigqueueinfo(r2, r2, 0x2f, &(0x7f0000000040)={0x31, 0x7, 0x4}) 273.688522ms ago: executing program 3 (id=378): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3801000010000100feffffbf00010000fe8000000000000000000000000000aa00000000000000000000ffff7f000001000107944e230000000000003a000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x6}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x6c}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi0\x00', 0x20401, 0x0) ioctl$COMEDI_INSN(r3, 0x8028640c, &(0x7f0000000080)={0x4000000, 0x0, 0x0, 0x0, 0x4}) close_range(r2, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3801000010000100feffffbf00010000fe8000000000000000000000000000aa00000000000000000000ffff7f000001000107944e230000000000003a000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x10) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x6}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x6c}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}}, 0xe8) (async) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) (async) openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi0\x00', 0x20401, 0x0) (async) ioctl$COMEDI_INSN(r3, 0x8028640c, &(0x7f0000000080)={0x4000000, 0x0, 0x0, 0x0, 0x4}) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) 195.484214ms ago: executing program 3 (id=379): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840), 0x3, 0x470, &(0x7f0000002f40)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0xc, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0xc, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) fchown(r0, 0xffffffffffffffff, 0x0) (async) fchown(r0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x4, 0x93d5, 0x58565559, 0x7, 0x10001, 0x9, 0x9, 0x1, 0x0, 0x4, 0x0, 0x2}}) (async) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x4, 0x93d5, 0x58565559, 0x7, 0x10001, 0x9, 0x9, 0x1, 0x0, 0x4, 0x0, 0x2}}) mkdirat(r0, &(0x7f0000000080)='./file0/file1\x00', 0x1) r2 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0xa, r3, 0x10, r4}, 0x10) 194.771593ms ago: executing program 4 (id=380): prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000140)="e397c769c2346171e47be03bd66f4946d1095be4e430627b4ff4e3e405642031141d2f8f4fbf046a27fec16f0d9b1495f4b321b02cf9151aaf8a4739b05cbec2e455fe6b9aec5ddbff2fdd98e12aad3515c5216c06e8011dec1a56999d2b23b61dd236df52ad3e533359e6d7e72bb53b0f7f30ef65865a6e3c49336703bf647d9bcd9290cfc009c8823a5412c6eb091b3c2e46de82eb5f", 0x97) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x80000001) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = fsopen(&(0x7f0000000280)='esdfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x1) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000000c0)='ro\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000440)='.\x00', 0x12000021) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)=@known='system.posix_acl_access\x00', 0x0, 0x0, 0x2) syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') 191.404056ms ago: executing program 5 (id=381): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000005ec0)=[{{&(0x7f0000000280)={0xa, 0x0, 0x0, @empty, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@rthdr={{0x18, 0x29, 0x39, {0x1d, 0x0, 0x2, 0x2}}}], 0x18}}], 0x1, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0xee, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000100000008864470b00e000680057"], 0x0) 168.716377ms ago: executing program 1 (id=382): r0 = socket$packet(0x11, 0x2, 0x300) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0x10001, &(0x7f0000ffc000/0x1000)=nil, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r1, 0x1, 0x6}, 0x10) add_key$keyring(&(0x7f0000000100), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) memfd_create(0x0, 0x1) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x24008080) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r4, &(0x7f0000002780)={0x2020}, 0x5ecfb203) read$FUSE(r4, &(0x7f00000047c0)={0x2020}, 0x2020) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x2b, @local, 0x4e22, 0x4, 'sh\x00', 0x1f, 0x7, 0x27}, {@broadcast, 0x4e23, 0x3, 0x4, 0xfffffffd, 0x7}}, 0x44) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21, 0x20}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) socket$inet6(0xa, 0x5, 0x83) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) 156.693942ms ago: executing program 5 (id=383): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0), 0x400202, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0), 0x400202, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'ip6tnl0\x00', 0x2}) ioctl$TUNSETVNETLE(r0, 0x400454dc, 0x0) (async) ioctl$TUNSETVNETLE(r0, 0x400454dc, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) sendto(r1, &(0x7f00000005c0)="a1bfc48ba931fb1ceb70ba6de68925f84d607ce82b9339dda7f5adf00381be33ea1558c858be9d3a5b2aff8f4f59bd095d7034b500b19e0d0524e7bf37b4cec2aad04aacfac1eeca892aa86fe2f21df0a4619b459cb53e0cadf8e3486c5506c18326e1a39911052c19fee16f57ff67c91e3576d08cbca1dbfbdf03bc42498ba5fe9316ab4a80fdaab89a6461775b8f4f23b0f528e97eadd7ca6308c637", 0x9d, 0x0, &(0x7f0000000700)=@sco={0x1f, @none}, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYRESDEC=r1], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f00000001c0)={0x0, 0x1}, 0x16}, 0x48) getpid() (async) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r5, 0xff, 0x1, 0x0, &(0x7f00000002c0)=0xfffffffffffffecd) process_madvise(r4, 0x0, 0x0, 0x18, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RUNLINKAT(r6, &(0x7f0000000280)={0x7, 0x4d, 0x1}, 0x7) (async) write$P9_RUNLINKAT(r6, &(0x7f0000000280)={0x7, 0x4d, 0x1}, 0x7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) 107.471664ms ago: executing program 0 (id=384): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001300)=@mangle={'mangle\x00', 0x10, 0x6, 0x540, 0x0, 0x410, 0x0, 0x2f8, 0x2f8, 0x640, 0x640, 0x640, 0x640, 0x640, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @mcast2, [], [], 'wg1\x00', 'vxcan1\x00', {0xff}, {}, 0x2c}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) (async) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) (async) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000c7f000)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000590ffe)='v4') (async) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) (async) recvmsg(r0, &(0x7f0000002ac0)={0x0, 0x0, 0x0}, 0x40002160) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x1a, 0x0, @thr={&(0x7f00000000c0)="db64234c4b2334b446fc21b3948f59022126ef3a66de3a04324a59acf68c9619ddc6bd58cb16130826eb950ad676d51e868efac5d8fb4ccdfcb0ca570d36ad090ba749751153049680bc3b970a0824c2d81527ff704b68989233238a191896c7faac3a0d9a6d165d20e2674f3ce1004364f53f507ea045e48f8738d0d61a81e21f0940ff66eb60ece7702f4e2670b60ccc38ebacf09132bd297f1d18f726071795a2ee85f606964a8e", &(0x7f0000000180)="b00efe65ab732f3673c34c9dc1ca5a10ecaef9"}}, &(0x7f0000000200)=0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x77359400}, {r3, r4+60000000}}, &(0x7f00000002c0)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0xff000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0xde, 0x0, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) 85.573745ms ago: executing program 4 (id=385): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1407, 0x400, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0xd4}, 0x4) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000100)=0x6, 0x4) fsetxattr$security_smack_transmute(r0, &(0x7f0000000140), &(0x7f0000000180), 0x4, 0x0) r1 = signalfd4(r0, &(0x7f00000001c0)={[0x12]}, 0x8, 0x0) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0xea92562869073146}, 0x4000005) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000340)={0x0, 0x2e8, 0x3}) r3 = socket$pptp(0x18, 0x1, 0x2) ppoll(&(0x7f0000000380)=[{r0, 0xc3}, {r0, 0x21b0}, {r3, 0x3010}], 0x3, &(0x7f00000003c0), &(0x7f0000000400)={[0x9]}, 0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r4, 0x404, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xf, 0x54}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "cdf85a9e31e98040902eeabe0a"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "9ae9acf89a"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004081) r6 = syz_usbip_server_init(0x1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6, 0x12, r6, 0xaf155000) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x20, 0x140a, 0x100, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0xe014}, 0x840) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), r1) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, r7, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040811}, 0x20004000) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f0000000840)={0x0, {0x3, 0x7}}) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000880)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7}) syz_emit_ethernet(0xce, &(0x7f00000008c0)={@link_local, @local, @val={@val={0x88a8, 0x7, 0x1}, {0x8100, 0x2, 0x0, 0x1}}, {@x25={0x805, {0x2, 0x6, 0x0, "fd33d5fcedf9ab1029053af088030762517250b0812700c9f84d71b0c6cf034d5a44af086a853f35e8d28e4d34161ea8d4bac506e112642abec42117325ede7358e56bc43872ff1c555512a5153a39c3c32a74e1a33eeb595f9821ae1dca3e36c5c543805a9b7338e7100c5a56bcb9590333b636b9b01f59ba61fb7acde5bf1bc1e5fbef07792ab8a988c5a49d75d99b659bd6a22721e17e5dd955140111a7cb2c06faac8928f9d61b2735b645020b75f2a0a22bbc"}}}}, &(0x7f00000009c0)={0x0, 0x2, [0x80b, 0x3e1, 0x4cb, 0x989]}) readv(r6, &(0x7f0000000d40)=[{&(0x7f0000000a00)=""/230, 0xe6}, {&(0x7f0000000b00)=""/230, 0xe6}, {&(0x7f0000000c00)=""/119, 0x77}, {&(0x7f0000000c80)=""/175, 0xaf}], 0x4) getpid() ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000dc0)={&(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000e00)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000f00)={r8, r9, r10, 0x93ba, 0xffffa51b, 0xe, 0xfffffffe, 0x8, 0x8, 0x1, 0xfffffff8, 0x6}) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x38, 0x140b, 0x8, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40848}, 0x0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x34, r4, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xab, 0x2a}}}}, [@NL80211_ATTR_KEY_SEQ={0x5, 0xa, "1b"}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "65b15df7ec"}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000002}, 0x40054) 78.940671ms ago: executing program 5 (id=386): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000a00000002000000000000010200416c806c00010800000001000004090000000400000001000000010000000061615f5f0000305f"], 0x0, 0x4a, 0x0, 0x1}, 0x28) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newtaction={0x150, 0x30, 0x100, 0xfffffffa, 0x25dfdbfb, {}, [{0x13c, 0x1, [@m_tunnel_key={0x138, 0x6, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x20}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xf5, 0x6, "483e33aed20cd6746d7f7de0a7c27c3994ad81551cc5ee4bd4ec03ac235b2ab3f31eb271619cb84f2933841648e7c931a4976edbae04e4a6e3a1ab8e8dc24c1f8a3ef4c1d0aeb70dc89d22bcd5a6ad18da3544b2c74c045ec4aa2620dfe28f2623fe547d956ba655d11f871b880a27532a5952dc426849ea823fb82354cd34a4b7b489e7c0f39f61789bd32ec4db455e740f75cebeb82178e84bb382f8f733184ec0f6f249cdee80146dcc5b3c6d554cb3bb28f8047816078ea77ecadb6c6cbc4b422847c7cba637eec863cc3430302c8ae828b8746c1db5ece957f58d0dbf5c714cb645b77444cf34c236e7ce37309e33"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x24140, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x42, 0x8, 0x70bd28, 0x25dfdbff, {0xf}, [@typed={0x8, 0xab, 0x0, 0x0, @fd=r1}]}, 0x1c}}, 0x800) socket$netlink(0x10, 0x3, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000a00000002000000000000010200416c806c00010800000001000004090000000400000001000000010000000061615f5f0000305f"], 0x0, 0x4a, 0x0, 0x1}, 0x28) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newtaction={0x150, 0x30, 0x100, 0xfffffffa, 0x25dfdbfb, {}, [{0x13c, 0x1, [@m_tunnel_key={0x138, 0x6, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x20}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xf5, 0x6, "483e33aed20cd6746d7f7de0a7c27c3994ad81551cc5ee4bd4ec03ac235b2ab3f31eb271619cb84f2933841648e7c931a4976edbae04e4a6e3a1ab8e8dc24c1f8a3ef4c1d0aeb70dc89d22bcd5a6ad18da3544b2c74c045ec4aa2620dfe28f2623fe547d956ba655d11f871b880a27532a5952dc426849ea823fb82354cd34a4b7b489e7c0f39f61789bd32ec4db455e740f75cebeb82178e84bb382f8f733184ec0f6f249cdee80146dcc5b3c6d554cb3bb28f8047816078ea77ecadb6c6cbc4b422847c7cba637eec863cc3430302c8ae828b8746c1db5ece957f58d0dbf5c714cb645b77444cf34c236e7ce37309e33"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x24140, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x42, 0x8, 0x70bd28, 0x25dfdbff, {0xf}, [@typed={0x8, 0xab, 0x0, 0x0, @fd=r1}]}, 0x1c}}, 0x800) (async) 15.311616ms ago: executing program 5 (id=387): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000840)='./bus\x00', 0x200050, &(0x7f0000001400)={[{@nojournal_checksum}, {@dax_always}, {@nouser_xattr}, {@sysvgroups}, {@barrier}, {@minixdf}, {@dax_always}, {@dioread_lock}, {@discard}]}, 0xff, 0x7cc, &(0x7f00000022c0)="$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") (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000013c0)={'erspan0\x00', &(0x7f0000001340)={'syztnl2\x00', 0x0, 0x1, 0x8, 0x5c3, 0xfffffff9, {{0xc, 0x4, 0x3, 0x37, 0x30, 0x64, 0x0, 0x5, 0x7b, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@lsrr={0x83, 0x1b, 0xb6, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010100, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}]}}}}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="b40900020000000085000000000000409500000000000000950000000000000000000000000000000000000000000000ba3c8842b1845d3af77c06164387e680cd9eef9c4f33b2c2597ebac9bbb8b92dcdcf7cdde76971e31ffb57eaec14c12a849092a166115d27f3c322f4f282a596b30cf35229fe3ab8e6"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x42, 0x50) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a0b0400000000000000000200000088000480240001800b000100736f636b6574000014000280080002400000000308000140000000024c0001800b00010065787468647200003c000280080002400000007508000340000000590800064000000002080006400000000108000440000000b905000200070000000500020007000000140001800a00010071756f7461000000040002800900010073797a30000000000900020073797a32"], 0x17c}}, 0x40880) r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='.\x00', 0x0, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000140), 0x181084a, &(0x7f0000000440)={[{@mpol={'mpol', 0x3d, {'local', '', @void}}}, {@size={'size', 0x3d, [0x74, 0x0]}}]}) (async) r5 = syz_clone(0x1248600, 0x0, 0x49, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace(0x4206, r5) (async, rerun: 64) recvmmsg$unix(r2, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)=""/44, 0x2c}, {&(0x7f00000001c0)=""/129, 0x81}, {&(0x7f0000000280)=""/241, 0xf1}, {&(0x7f0000000400)=""/3, 0x3}, {&(0x7f0000000580)=""/178, 0xb2}], 0x5, &(0x7f0000000740)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{0x0, 0x0, &(0x7f00000007c0)}}, {{&(0x7f0000000880)=@abs, 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000940)=""/76, 0x4c}, {&(0x7f00000009c0)=""/208, 0xd0}], 0x2, &(0x7f0000000b00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000000b80), 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000c00)=""/222, 0xde}, {&(0x7f0000000d00)=""/58, 0x3a}, {&(0x7f0000000d40)}, {&(0x7f0000000d80)=""/126, 0x7e}, {&(0x7f0000000e00)=""/163, 0xa3}], 0x5}}, {{&(0x7f0000000f40), 0x6e, &(0x7f0000001140)=[{&(0x7f0000000fc0)=""/11, 0xb}, {&(0x7f0000001000)=""/116, 0x74}, {&(0x7f0000001080)=""/134, 0x86}], 0x3, &(0x7f0000001180)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000001280), 0x6e, &(0x7f0000003dc0)=[{&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000003ac0)=""/67, 0x43}, {&(0x7f0000003b40)=""/134, 0x86}, {&(0x7f0000003c00)=""/99, 0x63}, {&(0x7f0000003c80)=""/18, 0x12}, {&(0x7f0000003cc0)=""/120, 0x78}, {&(0x7f0000003d40)=""/94, 0x5e}], 0x7}}, {{&(0x7f0000003e40)=@abs, 0x6e, &(0x7f0000004100)=[{&(0x7f0000003ec0)=""/23, 0x17}, {&(0x7f0000003f00)=""/197, 0xc5}, {&(0x7f0000004000)=""/220, 0xdc}], 0x3, &(0x7f0000004140)=[@cred={{0x1c}}], 0x20}}], 0x7, 0x0, 0x0) (async, rerun: 64) ptrace(0x4208, r5) (async) renameat2(r4, &(0x7f0000000380)='./file0\x00', r4, &(0x7f00000006c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async, rerun: 64) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000040)=0x2) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r7 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0x48042, 0x8c) (async, rerun: 64) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x600, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(r8, 0xc038586b, &(0x7f0000001300)={r6, &(0x7f0000000500)='\x00', 0x500, &(0x7f00000007c0)={@align=0x100, {0x2, 0x3, 0x2, 0x8}}, 0x6, &(0x7f0000000800)={@_ha_fsid}, &(0x7f0000000d40)=0x4}) (async) fallocate(r7, 0x10, 0x6, 0x8010001) 14.68149ms ago: executing program 3 (id=388): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, &(0x7f0000000040)=0xf2a, 0x4) (async, rerun: 32) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b3, 0x800, 0x1, 0x2082, 0x0, 0x0}, &(0x7f0000000180), &(0x7f0000000140), &(0x7f0000000100)) (rerun: 32) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000003600), 0x40040, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001a0001970000ff7f00000000800000", @ANYRES32=0x0, @ANYRESDEC=r2], 0x24}}, 0x20004000) (async) r3 = socket(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000006, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x25, 0x365, &(0x7f00000009c0)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x8000, 0x5a) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c583, 0x8000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xfffffff9, 0x1, 0x4, 0x8000}, 0x110b28cd, 0x0, 0x10000, 0xf, 0x93, 0xe, 0xe, 0xc, 0x5, 0x7fffffff, {0x7, 0x3, 0x80, 0x2040, 0x7, 0x76c6e0a}}}}]}, 0x78}}, 0x0) read$FUSE(r1, &(0x7f0000003b80)={0x2020}, 0x2020) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@setlink={0x28, 0x13, 0x800, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000100003040400"/20, @ANYRES32=0x0, @ANYBLOB="0101020000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r7, @ANYBLOB="08001f00080000004b05644cf4bbd6c4975f412dbacd40f80e1cd04681a6b16423d78f111b9f232f41be484f661665ee05a7cd494cf6db5dc1fdcf9cc7b489e564b5a6fe6ac4f850cb4ac78e875e0002cd9b58e377df8b48d0bf9fb79515a8b3f5078162932d712af4340e79333ffcae978e085b907a72e4f9e4ef3e39c5a9500f224e995f064d9b29f3f9cd6827e0f49e17699b14e0b45315984ce3a3745278868dd5e6c0050d4ff08808bfb94b5e82793e35bf279d0edfdf4e074a0e15cbd99e83d8819ebffbbbf8d02c4e792c591d528c0f788fede0181790d0647157613f5d5edef42aa503a83ff57c9781ef1084fa469d3c533a8e572c9edf77d40c672264907f8cdcd4cd228f2c204c4ecdd39f97ac7f3791a945d1077424cc87a786dce009403ae04a5c876ecbba43c94b0a8ceccb47afec2e748024f3c8363b"], 0x44}, 0x1, 0xba01}, 0x810) 13.275877ms ago: executing program 0 (id=389): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000240), 0x1, 0x5b7, &(0x7f0000001380)="$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") r1 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f0000001280)=ANY=[@ANYBLOB="1800000008000000000000000800000091114f000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x103402, 0x49) io_setup(0x20fe, &(0x7f00000001c0)=0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="74000000020601010000000000000000050000040900020073797a31000000000900020073797a310000000012000300686173683a6e65742c706f7274000000050001000700000011000300686173683a6e65742c6e6574000000000500050005000000050004000300"/116], 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r3, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0xa0, 0x1, 0x0, r2, &(0x7f0000000200)='p', 0x8200, 0x600}]) pwrite64(r0, &(0x7f0000000300)="4604003eaa705e9fa28c32a02cbed7b6e44841f6f44b5d26ce7d71fc5ee962115c737e5cf1e4e3e697949dab326a1be5e2f2e33cbbefa31a386c9e10787218c36245370a471be7cd", 0x48, 0x10c6e) 0s ago: executing program 1 (id=390): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='io.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000011c0)=@userptr={0x4, 0xa, 0x4, 0x0, 0x1e3, {}, {0x4, 0x2, 0x4, 0x1, 0x2, 0x6d}, 0x7, 0x2, {0x0}, 0x0, 0x0, r0}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x4}, 0x50) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r3}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='io.stat\x00', 0x275a, 0x0) (async) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) (async) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000011c0)=@userptr={0x4, 0xa, 0x4, 0x0, 0x1e3, {}, {0x4, 0x2, 0x4, 0x1, 0x2, 0x6d}, 0x7, 0x2, {0x0}, 0x0, 0x0, r0}) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x4}, 0x50) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r2) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r3}, 0x20) (async) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.20' (ED25519) to the list of known hosts. [ 28.727867][ T4696] cgroup: Unknown subsys name 'net' [ 28.879095][ T4696] cgroup: Unknown subsys name 'cpuset' [ 28.881300][ T4696] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.090419][ T4696] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 29.908581][ T4711] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.910398][ T4711] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.912082][ T4711] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.914195][ T4711] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.916656][ T4714] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.918350][ T4714] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.920139][ T4714] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.922293][ T4714] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.923776][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.929516][ T4714] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.931268][ T4714] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.933517][ T4711] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.935128][ T4711] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.937799][ T4711] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.939408][ T4711] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.185573][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.186649][ T4716] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.186722][ T4716] bridge_slave_0: entered allmulticast mode [ 30.187209][ T4716] bridge_slave_0: entered promiscuous mode [ 30.196228][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.196311][ T4716] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.196364][ T4716] bridge_slave_1: entered allmulticast mode [ 30.196867][ T4716] bridge_slave_1: entered promiscuous mode [ 30.203364][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.204802][ T4712] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.206338][ T4712] bridge_slave_0: entered allmulticast mode [ 30.208100][ T4712] bridge_slave_0: entered promiscuous mode [ 30.212672][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.214105][ T4712] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.215674][ T4712] bridge_slave_1: entered allmulticast mode [ 30.217503][ T4712] bridge_slave_1: entered promiscuous mode [ 30.219335][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.219407][ T4708] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.219461][ T4708] bridge_slave_0: entered allmulticast mode [ 30.219877][ T4708] bridge_slave_0: entered promiscuous mode [ 30.220649][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.220667][ T4708] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.220718][ T4708] bridge_slave_1: entered allmulticast mode [ 30.221143][ T4708] bridge_slave_1: entered promiscuous mode [ 30.222994][ T4716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.233926][ T4716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.241127][ T4708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.242027][ T4708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.251319][ T4708] team0: Port device team_slave_0 added [ 30.253330][ T4712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.254032][ T4716] team0: Port device team_slave_0 added [ 30.255647][ T4716] team0: Port device team_slave_1 added [ 30.256276][ T4708] team0: Port device team_slave_1 added [ 30.260005][ T4712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.271597][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.272977][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.278324][ T4708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.284049][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.285532][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.286508][ T4708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.287249][ T4712] team0: Port device team_slave_0 added [ 30.288003][ T4712] team0: Port device team_slave_1 added [ 30.293565][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.293573][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.293587][ T4712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.294098][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.294104][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.294116][ T4712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.297544][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.297553][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.297564][ T4716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.298352][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.298360][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.298373][ T4716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.318221][ T4708] hsr_slave_0: entered promiscuous mode [ 30.318574][ T4708] hsr_slave_1: entered promiscuous mode [ 30.324038][ T4716] hsr_slave_0: entered promiscuous mode [ 30.324344][ T4716] hsr_slave_1: entered promiscuous mode [ 30.324544][ T4716] debugfs: 'hsr0' already exists in 'hsr' [ 30.324578][ T4716] Cannot create hsr debugfs directory [ 30.330371][ T4712] hsr_slave_0: entered promiscuous mode [ 30.330692][ T4712] hsr_slave_1: entered promiscuous mode [ 30.330886][ T4712] debugfs: 'hsr0' already exists in 'hsr' [ 30.330894][ T4712] Cannot create hsr debugfs directory [ 30.430445][ T4708] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.438312][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.440234][ T4708] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.442939][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.444829][ T4708] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.447574][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.457490][ T4708] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.458899][ T4711] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.459303][ T4711] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.459467][ T4711] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.459774][ T4711] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.459999][ T4711] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.467953][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.480365][ T4713] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.481942][ T4713] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.483572][ T4713] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.487772][ T4713] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.488457][ T4713] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.506130][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.506180][ T4708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.506342][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.506407][ T4708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.514383][ T4716] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.525520][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.529353][ T4716] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.532741][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.534453][ T4716] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.537151][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.539461][ T4716] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.542339][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.573173][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.573217][ T4716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.573309][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.573345][ T4716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.589349][ T4712] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.591874][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.593653][ T4712] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.595834][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.603520][ T4712] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.605865][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.606154][ T4712] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.610308][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.645108][ T4708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.666762][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.666810][ T4712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.666895][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.666925][ T4712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.685786][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.687797][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.689298][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.690790][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.692229][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.693962][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.708559][ T4708] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.734496][ T1248] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.734549][ T1248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.735403][ T1248] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.735430][ T1248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.742847][ T4716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.746294][ T4716] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.750676][ T1248] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.750715][ T1248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.753984][ T1248] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.754025][ T1248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.767880][ T4712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.814773][ T4712] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.842379][ T4761] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.843962][ T4761] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.845791][ T4761] bridge_slave_0: entered allmulticast mode [ 30.846565][ T4761] bridge_slave_0: entered promiscuous mode [ 30.847428][ T4761] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.847451][ T4761] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.847503][ T4761] bridge_slave_1: entered allmulticast mode [ 30.847909][ T4761] bridge_slave_1: entered promiscuous mode [ 30.855395][ T4761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.856257][ T4761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.863849][ T1248] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.863892][ T1248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.867472][ T1248] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.867506][ T1248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.874487][ T4761] team0: Port device team_slave_0 added [ 30.875612][ T4761] team0: Port device team_slave_1 added [ 30.897530][ T4761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.899027][ T4761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.904052][ T4761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.913115][ T4765] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.914535][ T4765] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.916198][ T4765] bridge_slave_0: entered allmulticast mode [ 30.918471][ T4765] bridge_slave_0: entered promiscuous mode [ 30.920128][ T4761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.921460][ T4761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.927279][ T4761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.938747][ T4765] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.940231][ T4765] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.941779][ T4765] bridge_slave_1: entered allmulticast mode [ 30.943469][ T4765] bridge_slave_1: entered promiscuous mode [ 30.953225][ T4761] hsr_slave_0: entered promiscuous mode [ 30.954579][ T4761] hsr_slave_1: entered promiscuous mode [ 30.954938][ T4761] debugfs: 'hsr0' already exists in 'hsr' [ 30.954949][ T4761] Cannot create hsr debugfs directory [ 30.963024][ T4765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.985091][ T4765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.998044][ T4765] team0: Port device team_slave_0 added [ 31.000559][ T4765] team0: Port device team_slave_1 added [ 31.020026][ T4765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.020057][ T4765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.020072][ T4765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.031353][ T4765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.031383][ T4765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.031397][ T4765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.035125][ T4708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.074332][ T4716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.076839][ T4761] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.079555][ T4761] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.081333][ T4761] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.083815][ T4761] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.088783][ T4765] hsr_slave_0: entered promiscuous mode [ 31.090362][ T4765] hsr_slave_1: entered promiscuous mode [ 31.091662][ T4765] debugfs: 'hsr0' already exists in 'hsr' [ 31.092770][ T4765] Cannot create hsr debugfs directory [ 31.095571][ T4761] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.099488][ T4761] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.101191][ T4761] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.103566][ T4761] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.120216][ T4708] veth0_vlan: entered promiscuous mode [ 31.123138][ T4708] veth1_vlan: entered promiscuous mode [ 31.165101][ T4716] veth0_vlan: entered promiscuous mode [ 31.171254][ T4716] veth1_vlan: entered promiscuous mode [ 31.190737][ T4708] veth0_macvtap: entered promiscuous mode [ 31.198263][ T4708] veth1_macvtap: entered promiscuous mode [ 31.205922][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.222762][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.229712][ T4712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.231755][ T3623] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.233650][ T3623] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.239727][ T4716] veth0_macvtap: entered promiscuous mode [ 31.242264][ T4716] veth1_macvtap: entered promiscuous mode [ 31.245534][ T3623] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.248473][ T3623] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.256041][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.260665][ T4765] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.263349][ T4765] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.268319][ T4765] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.270671][ T4765] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.273805][ T4761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.280652][ T4712] veth0_vlan: entered promiscuous mode [ 31.282231][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.284581][ T4765] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.288860][ T4765] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.300148][ T3623] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.300200][ T3623] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.300234][ T3623] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.300259][ T3623] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.301251][ T4712] veth1_vlan: entered promiscuous mode [ 31.306237][ T4712] veth0_macvtap: entered promiscuous mode [ 31.311993][ T4765] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.314315][ T4765] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.324795][ T4712] veth1_macvtap: entered promiscuous mode [ 31.335086][ T4761] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.341595][ T1248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.341631][ T1248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.352895][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.372725][ T3556] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.372770][ T3556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.374559][ T3556] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.374581][ T3556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.388746][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.394454][ T1248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.394482][ T1248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.397627][ T3623] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.403824][ T3623] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.403867][ T3623] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.403888][ T3623] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.413216][ T4761] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.413248][ T4761] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.429567][ T3623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.429600][ T3623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.435390][ T4765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.445711][ T4765] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.452067][ T4708] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.466047][ T3623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.466074][ T3623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.490026][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.490084][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.490271][ T3556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.490281][ T3556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.505889][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.505948][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.541147][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.541179][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.632689][ T4875] loop0: detected capacity change from 0 to 512 [ 31.648714][ T4799] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.650201][ T4875] EXT4-fs (loop0): orphan cleanup on readonly fs [ 31.650929][ T4880] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3'. [ 31.657660][ T4875] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.1: corrupted in-inode xattr: invalid size in ea xattr [ 31.657734][ T4875] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 31.662363][ T4875] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1: couldn't read orphan inode 15 (err -117) [ 31.662424][ T4875] loop0: lost filesystem error report for type 5 error -117 [ 31.666452][ C1] EXT4-fs (loop0): error count since last fsck: 2 [ 31.666466][ C1] EXT4-fs (loop0): initial error at time 31: ext4_iget_extra_inode:5128: inode 15 [ 31.666484][ C1] EXT4-fs (loop0): last error at time 31: ext4_orphan_get:1402 [ 31.677238][ T4799] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 31.677581][ T4875] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 31.713431][ T4885] fido_id[4885]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 31.746194][ T4761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.864741][ T4716] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.923309][ T4765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.944713][ T4918] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 31.950749][ T4923] loop1: detected capacity change from 0 to 1024 [ 31.956877][ T4923] EXT4-fs: Ignoring removed oldalloc option [ 31.958047][ T4923] EXT4-fs: Ignoring removed orlov option [ 31.958080][ T4923] EXT4-fs: Ignoring removed oldalloc option [ 31.958103][ T4923] EXT4-fs: Ignoring removed nomblk_io_submit option [ 31.965458][ T4765] veth0_vlan: entered promiscuous mode [ 31.984050][ T4765] veth1_vlan: entered promiscuous mode [ 31.998353][ T4713] Bluetooth: hci2: command tx timeout [ 31.998358][ T4714] Bluetooth: hci0: command tx timeout [ 32.000731][ T4711] Bluetooth: hci1: command tx timeout [ 32.003404][ T4923] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.068440][ T4923] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.070626][ T4765] veth0_macvtap: entered promiscuous mode [ 32.093579][ T4765] veth1_macvtap: entered promiscuous mode [ 32.113760][ T4761] veth0_vlan: entered promiscuous mode [ 32.120669][ T4765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.121662][ T4765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.160143][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.160214][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.160249][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.160271][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.171451][ T4761] veth1_vlan: entered promiscuous mode [ 32.185330][ T4951] loop1: detected capacity change from 0 to 512 [ 32.185614][ T4951] ======================================================= [ 32.185614][ T4951] WARNING: The mand mount option has been deprecated and [ 32.185614][ T4951] and is ignored by this kernel. Remove the mand [ 32.185614][ T4951] option from the mount to silence this warning. [ 32.185614][ T4951] ======================================================= [ 32.194589][ T4951] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.194620][ T4951] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 32.201937][ T4951] EXT4-fs error (device loop1): xattr_find_entry:337: inode #15: comm syz.1.15: corrupted xattr entries [ 32.202260][ T4951] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 32.202563][ T4951] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 32.202712][ T4951] EXT4-fs (loop1): 1 truncate cleaned up [ 32.203111][ T4951] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.211953][ T4951] EXT4-fs (loop1): shut down requested (1) [ 32.216020][ T4761] veth0_macvtap: entered promiscuous mode [ 32.231994][ T4761] veth1_macvtap: entered promiscuous mode [ 32.232164][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.232186][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.234117][ T4956] binder: 4955:4956 tried to acquire reference to desc 0, got 1 instead [ 32.234573][ T4956] binder: 4955:4956 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 32.234702][ T4956] binder: 4956 RLIMIT_NICE not set [ 32.234748][ T4956] binder: 4956 RLIMIT_NICE not set [ 32.234886][ T4956] binder: release 4955:4956 transaction 5 in, still active [ 32.234896][ T4956] binder: send failed reply for transaction 5 to 4955:4956 [ 32.255373][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.263469][ T4793] binder: undelivered TRANSACTION_COMPLETE [ 32.263499][ T4793] binder: undelivered TRANSACTION_ERROR: 29189 [ 32.275475][ T4761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.280481][ T4761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.295436][ T3623] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.295579][ T3623] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.295650][ T3623] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.295711][ T3623] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.297421][ T3623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.297432][ T3623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.381310][ T4961] overlayfs: missing 'lowerdir' [ 32.382671][ T3623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.382685][ T3623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.400783][ T3623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.400814][ T3623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.478093][ T4711] Bluetooth: hci3: command tx timeout [ 32.566703][ T4711] Bluetooth: hci4: command tx timeout [ 32.614586][ T4984] loop3: detected capacity change from 0 to 256 [ 32.615158][ T4984] vfat: Unknown parameter 'nnonumtail' [ 33.641279][ T4999] loop4: detected capacity change from 0 to 256 [ 33.645702][ T5000] syz.0.26 uses obsolete (PF_INET,SOCK_PACKET) [ 33.682307][ T4999] FAT-fs (loop4): Directory bread(block 64) failed [ 33.682349][ T4999] FAT-fs (loop4): Directory bread(block 65) failed [ 33.682389][ T4999] FAT-fs (loop4): Directory bread(block 66) failed [ 33.682405][ T4999] FAT-fs (loop4): Directory bread(block 67) failed [ 33.682437][ T4999] FAT-fs (loop4): Directory bread(block 68) failed [ 33.682452][ T4999] FAT-fs (loop4): Directory bread(block 69) failed [ 33.682480][ T4999] FAT-fs (loop4): Directory bread(block 70) failed [ 33.682494][ T4999] FAT-fs (loop4): Directory bread(block 71) failed [ 33.682519][ T4999] FAT-fs (loop4): Directory bread(block 72) failed [ 33.682533][ T4999] FAT-fs (loop4): Directory bread(block 73) failed [ 33.906155][ T5022] loop2: detected capacity change from 0 to 1024 [ 33.907520][ T5024] loop0: detected capacity change from 0 to 128 [ 33.949269][ T5022] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.952331][ T5026] loop1: detected capacity change from 0 to 256 [ 33.961398][ T5011] loop3: detected capacity change from 0 to 8192 [ 34.060341][ T5038] netlink: 16 bytes leftover after parsing attributes in process `syz.0.36'. [ 34.294871][ T4713] Bluetooth: hci0: command tx timeout [ 34.294917][ T4713] Bluetooth: hci2: command tx timeout [ 34.294989][ T4711] Bluetooth: hci1: command tx timeout [ 34.389349][ T5046] xt_hashlimit: size too large, truncated to 1048576 [ 34.457878][ T5048] loop0: detected capacity change from 0 to 1024 [ 34.458203][ T5048] EXT4-fs: inline encryption not supported [ 34.458523][ T5048] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 34.458560][ T5048] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 34.459326][ T5048] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 34.459432][ T5048] EXT4-fs (loop0): orphan cleanup on readonly fs [ 34.459743][ T5048] EXT4-fs error (device loop0): ext4_quota_enable:7221: comm syz.0.39: Bad quota inum: 9, type: 2 [ 34.459756][ T5048] loop0: lost filesystem error report for type 5 error -117 [ 34.459835][ T5048] EXT4-fs (loop0): Remounting filesystem read-only [ 34.459841][ T5048] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-117, ino=9). Please run e2fsck to fix. [ 34.459922][ T5048] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 34.460339][ T5048] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 34.502816][ T4716] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.556686][ T4714] Bluetooth: hci3: command tx timeout [ 34.582584][ T5060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.584913][ T5060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.636795][ T4714] Bluetooth: hci4: command tx timeout [ 34.758090][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.848654][ T5065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.42'. [ 34.915911][ T5075] EXT4-fs (loop0): orphan cleanup on readonly fs [ 34.922372][ T5075] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.46: bg 0: block 63: padding at end of block bitmap is not set [ 34.922410][ T5075] loop0: lost filesystem error report for type 5 error -117 [ 34.926447][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 34.926460][ C1] EXT4-fs (loop0): initial error at time 524322: ext4_validate_block_bitmap:441 [ 34.926475][ C1] EXT4-fs (loop0): last error at time 524322: ext4_validate_block_bitmap:441 [ 34.936690][ T5075] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 34.940555][ T5075] EXT4-fs error (device loop0): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.0.46: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 34.940597][ T5075] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 34.946232][ T5077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.47'. [ 34.952502][ T5077] tipc: Started in network mode [ 34.952542][ T5077] tipc: Node identity 5f0000005f0700000000000000000001, cluster identity 4711 [ 34.952571][ T5077] tipc: Enabling of bearer rejected, failed to enable media [ 34.960761][ T5075] EXT4-fs warning (device loop0): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.0.46: ea_inode dec ref err=-117 [ 34.960912][ T5075] EXT4-fs (loop0): 1 orphan inode deleted [ 34.961361][ T5075] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 34.997157][ T4716] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.147340][ T5080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.48'. [ 35.147383][ T5080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.48'. [ 35.147416][ T5080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.48'. [ 35.147435][ T5080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.48'. [ 35.147452][ T5080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.48'. [ 35.147483][ T5080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.48'. [ 35.150834][ T4714] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 35.317668][ T5109] Bluetooth: MGMT ver 1.23 [ 35.357079][ T5108] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.363878][ T5106] hsr_slave_1 (unregistering): left promiscuous mode [ 35.377054][ T5113] overlayfs: missing 'lowerdir' [ 35.420319][ T5116] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 35.444837][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.665979][ T5129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.666421][ T5129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.684519][ T5129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.686611][ T5129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.751618][ T5134] netlink: 'syz.1.63': attribute type 11 has an invalid length. [ 35.880571][ T4716] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 36.000612][ T5140] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.041967][ T5138] Zero length message leads to an empty skb [ 36.051509][ T5140] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 16: comm syz.1.65: path /15/file1: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 36.060921][ T5140] EXT4-fs (loop1): Remounting filesystem read-only [ 36.156995][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.265285][ T5180] vfat: Bad value for 'uid' [ 36.275084][ T5180] vfat: Bad value for 'uid' [ 36.287570][ T4714] Bluetooth: hci1: command tx timeout [ 36.288353][ T5180] block nbd2: Unsupported socket: should be TCP or UNIX. [ 36.288386][ T4711] Bluetooth: hci2: command tx timeout [ 36.288405][ T4711] Bluetooth: hci0: command tx timeout [ 36.359064][ T5165] FAT-fs (loop0): Directory bread(block 64) failed [ 36.359102][ T5165] FAT-fs (loop0): Directory bread(block 65) failed [ 36.359141][ T5165] FAT-fs (loop0): Directory bread(block 66) failed [ 36.359157][ T5165] FAT-fs (loop0): Directory bread(block 67) failed [ 36.359183][ T5165] FAT-fs (loop0): Directory bread(block 68) failed [ 36.359198][ T5165] FAT-fs (loop0): Directory bread(block 69) failed [ 36.359223][ T5165] FAT-fs (loop0): Directory bread(block 70) failed [ 36.359237][ T5165] FAT-fs (loop0): Directory bread(block 71) failed [ 36.359265][ T5165] FAT-fs (loop0): Directory bread(block 72) failed [ 36.359279][ T5165] FAT-fs (loop0): Directory bread(block 73) failed [ 36.374606][ T5193] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.381343][ T5193] EXT4-fs (loop1): Test dummy encryption mode enabled [ 36.388818][ T5193] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 36.421660][ T5197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.453056][ T5197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.574109][ T5202] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 36.586688][ T5202] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 36.691621][ T4714] Bluetooth: hci3: command tx timeout [ 36.691778][ T4714] Bluetooth: hci4: command tx timeout [ 36.897980][ T4776] IPVS: starting estimator thread 0... [ 36.898461][ T5203] syz.0.69: attempt to access beyond end of device [ 36.898461][ T5203] loop0: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 36.898586][ T5203] syz.0.69: attempt to access beyond end of device [ 36.898586][ T5203] loop0: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 36.898734][ T5203] syz.0.69: attempt to access beyond end of device [ 36.898734][ T5203] loop0: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 36.898782][ T5203] syz.0.69: attempt to access beyond end of device [ 36.898782][ T5203] loop0: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 36.898826][ T5203] syz.0.69: attempt to access beyond end of device [ 36.898826][ T5203] loop0: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 36.898870][ T5203] syz.0.69: attempt to access beyond end of device [ 36.898870][ T5203] loop0: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 36.898918][ T5203] syz.0.69: attempt to access beyond end of device [ 36.898918][ T5203] loop0: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 36.898961][ T5203] syz.0.69: attempt to access beyond end of device [ 36.898961][ T5203] loop0: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 36.899002][ T5203] syz.0.69: attempt to access beyond end of device [ 36.899002][ T5203] loop0: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 36.899044][ T5203] syz.0.69: attempt to access beyond end of device [ 36.899044][ T5203] loop0: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 36.908682][ T5201] set_capacity_and_notify: 8 callbacks suppressed [ 36.908706][ T5201] loop2: detected capacity change from 0 to 4096 [ 36.914855][ T5201] EXT4-fs: Ignoring removed mblk_io_submit option [ 36.917509][ T5201] EXT4-fs (loop2): Test dummy encryption mode enabled [ 36.970193][ T5201] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.041581][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.073389][ T5207] IPVS: using max 50 ests per chain, 120000 per kthread [ 37.252052][ T4708] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.267018][ T5231] __nla_validate_parse: 53 callbacks suppressed [ 37.267060][ T5231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.84'. [ 37.276534][ T5228] loop0: detected capacity change from 0 to 4096 [ 37.284909][ T5228] EXT4-fs: inline encryption not supported [ 37.284943][ T5228] EXT4-fs: Ignoring removed mblk_io_submit option [ 37.284957][ T5228] EXT4-fs: Ignoring removed bh option [ 37.319132][ T5228] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 37.329029][ T5228] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 37.329500][ T5228] System zones: 0-5 [ 37.330276][ T5228] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.339364][ T5238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.85'. [ 37.383885][ T5242] loop5: detected capacity change from 0 to 8 [ 37.447169][ T5254] loop4: detected capacity change from 0 to 256 [ 37.457827][ T5242] Dev loop5: unable to read RDB block 8 [ 37.457863][ T5242] loop5: unable to read partition table [ 37.457966][ T5242] loop5: partition table beyond EOD, truncated [ 37.457998][ T5242] loop_reread_partitions: partition scan of loop5 (Sj̖P=ý?}X %`րfS5) failed (rc=-5) [ 37.476647][ C0] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 37.476730][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 37.489018][ T5254] FAT-fs (loop4): Directory bread(block 64) failed [ 37.489050][ T5254] FAT-fs (loop4): Directory bread(block 65) failed [ 37.489092][ T5254] FAT-fs (loop4): Directory bread(block 66) failed [ 37.489107][ T5254] FAT-fs (loop4): Directory bread(block 67) failed [ 37.489132][ T5254] FAT-fs (loop4): Directory bread(block 68) failed [ 37.489146][ T5254] FAT-fs (loop4): Directory bread(block 69) failed [ 37.489169][ T5254] FAT-fs (loop4): Directory bread(block 70) failed [ 37.489182][ T5254] FAT-fs (loop4): Directory bread(block 71) failed [ 37.489205][ T5254] FAT-fs (loop4): Directory bread(block 72) failed [ 37.489218][ T5254] FAT-fs (loop4): Directory bread(block 73) failed [ 37.523878][ T4716] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.588137][ T5245] loop1: detected capacity change from 0 to 2048 [ 37.664132][ T5245] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 37.664215][ T5245] EXT4-fs (loop1): mount failed [ 38.076685][ T5286] loop3: detected capacity change from 0 to 256 [ 38.079257][ T5286] vfat: Unknown parameter 'shortnaie' [ 38.134269][ T5286] loop3: detected capacity change from 0 to 512 [ 38.139478][ T5286] EXT4-fs (loop3): Test dummy encryption mode enabled [ 38.154231][ T5286] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.94: inode has both inline data and extents flags [ 38.154272][ T5286] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 38.157124][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 38.157137][ C0] EXT4-fs (loop3): initial error at time 524326: ext4_orphan_get:1397: inode 15 [ 38.157157][ C0] EXT4-fs (loop3): last error at time 524326: ext4_orphan_get:1397: inode 15 [ 38.165436][ T5286] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.94: couldn't read orphan inode 15 (err -117) [ 38.165470][ T5286] loop3: lost filesystem error report for type 5 error -117 [ 38.171909][ T5286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.342074][ T4765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.350223][ T4713] Bluetooth: hci1: command tx timeout [ 38.350257][ T4713] Bluetooth: hci0: command tx timeout [ 38.350700][ T4713] Bluetooth: hci2: command tx timeout [ 38.538325][ T5316] loop4: detected capacity change from 0 to 512 [ 38.548551][ T5316] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 38.548875][ T5316] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 38.559534][ T5316] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 38.559719][ T5316] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 38.559747][ T5316] System zones: 0-2, 18-18, 34-35 [ 38.571602][ T5316] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.630493][ T5316] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.101: bg 0: block 353: padding at end of block bitmap is not set [ 38.692236][ T4714] Bluetooth: hci4: command tx timeout [ 38.692531][ T4713] Bluetooth: hci3: command tx timeout [ 38.712484][ T4761] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.776061][ T5347] loop4: detected capacity change from 0 to 256 [ 38.781801][ T5349] x_tables: duplicate underflow at hook 1 [ 38.933221][ T5365] input: syz1 as /devices/virtual/input/input2 [ 39.442512][ T5390] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 39.449125][ T5390] bond1 (unregistering): Released all slaves [ 39.735911][ T5405] loop2: detected capacity change from 0 to 1024 [ 39.738394][ T5405] EXT4-fs: inline encryption not supported [ 39.852389][ T5405] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 40.494659][ T5409] netlink: 20 bytes leftover after parsing attributes in process `syz.3.116'. [ 40.607575][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 40.673316][ T5417] netlink: 28 bytes leftover after parsing attributes in process `syz.2.118'. [ 40.755235][ T5423] overlayfs: missing 'lowerdir' [ 41.039199][ T5426] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 41.068282][ T5426] netlink: 240 bytes leftover after parsing attributes in process `syz.4.122'. [ 41.109640][ T5431] mmap: syz.3.124 (5431): VmData 37756928 exceed data ulimit 5. Update limits or use boot option ignore_rlimit_data. [ 41.150479][ T5435] EXT4-fs: Ignoring removed i_version option [ 41.150521][ T5435] EXT4-fs: Ignoring removed nobh option [ 41.151885][ T5435] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 41.156293][ T5435] EXT4-fs (loop3): 1 truncate cleaned up [ 41.156762][ T5435] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.407120][ T4765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.512149][ T5452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.512339][ T5452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.519107][ T5453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.130'. [ 41.982332][ T5472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.134'. [ 42.031048][ T5479] process 'syz.1.136' launched './file2' with NULL argv: empty string added [ 42.224914][ T5502] bridge_slave_0: left allmulticast mode [ 42.226357][ T5502] bridge_slave_0: left promiscuous mode [ 42.227751][ T5502] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.242024][ T5502] bridge_slave_1: left allmulticast mode [ 42.243865][ T5502] bridge_slave_1: left promiscuous mode [ 42.245209][ T5502] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.250694][ T5502] bond0: (slave bond_slave_0): Releasing backup interface [ 42.285227][ T5502] bond0: (slave bond_slave_1): Releasing backup interface [ 42.336769][ T5502] team0: Port device team_slave_0 removed [ 42.340603][ T5502] team0: Port device team_slave_1 removed [ 42.342256][ T5502] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.344193][ T5502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.346672][ T5502] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.348335][ T5502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.351999][ T5502] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 42.441712][ T5512] set_capacity_and_notify: 1 callbacks suppressed [ 42.443357][ T5512] loop1: detected capacity change from 0 to 512 [ 42.446039][ T5512] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 42.497174][ T5512] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002] [ 42.499037][ T5512] System zones: 1-12 [ 42.501260][ T5512] EXT4-fs (loop1): orphan cleanup on readonly fs [ 42.505360][ T5512] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.142: invalid indirect mapped block 12 (level 1) [ 42.511810][ T5512] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 42.513988][ T5512] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.142: invalid indirect mapped block 2 (level 2) [ 42.514027][ T5512] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 42.516355][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 42.516374][ C0] EXT4-fs (loop1): initial error at time 524330: ext4_free_branches:1023: inode 11 [ 42.516393][ C0] EXT4-fs (loop1): last error at time 524330: ext4_free_branches:1023: inode 11 [ 42.532049][ T5512] EXT4-fs (loop1): 1 truncate cleaned up [ 42.534122][ T5512] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 42.539504][ T5512] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 42.541635][ T5512] PKCS7: Only support pkcs7_signedData type [ 42.564854][ T5516] netlink: 'syz.3.143': attribute type 3 has an invalid length. [ 42.569419][ T5516] netlink: 'syz.3.143': attribute type 3 has an invalid length. [ 42.627556][ T5518] sctp: [Deprecated]: syz.3.144 (pid 5518) Use of int in max_burst socket option deprecated. [ 42.627556][ T5518] Use struct sctp_assoc_value instead [ 42.716417][ T5520] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 42.719375][ T5520] PKCS7: Only support pkcs7_signedData type [ 42.736124][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 42.905617][ T5532] loop0: detected capacity change from 0 to 1024 [ 42.910621][ T5532] EXT4-fs: test_dummy_encryption requires encrypt feature [ 43.009404][ T5532] loop0: detected capacity change from 0 to 1024 [ 43.012448][ T5532] EXT4-fs: test_dummy_encryption requires encrypt feature [ 43.044406][ T5539] loop4: detected capacity change from 0 to 256 [ 43.064731][ T5539] FAT-fs (loop4): Directory bread(block 64) failed [ 43.067548][ T5539] FAT-fs (loop4): Directory bread(block 65) failed [ 43.068943][ T5539] FAT-fs (loop4): Directory bread(block 66) failed [ 43.070333][ T5539] FAT-fs (loop4): Directory bread(block 67) failed [ 43.071791][ T5539] FAT-fs (loop4): Directory bread(block 68) failed [ 43.073098][ T5539] FAT-fs (loop4): Directory bread(block 69) failed [ 43.074533][ T5539] FAT-fs (loop4): Directory bread(block 70) failed [ 43.076724][ T5539] FAT-fs (loop4): Directory bread(block 71) failed [ 43.078097][ T5539] FAT-fs (loop4): Directory bread(block 72) failed [ 43.080212][ T5539] FAT-fs (loop4): Directory bread(block 73) failed [ 43.092374][ T5543] loop1: detected capacity change from 0 to 512 [ 43.098416][ T5543] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 43.112703][ T5543] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.119084][ T5543] EXT4-fs error (device loop1): ext4_group_add:1738: inode #7: comm syz.1.150: iget: checksum invalid [ 43.125147][ T5543] EXT4-fs warning (device loop1): ext4_group_add:1740: Error opening resize inode [ 43.128546][ T5543] fuse: Bad value for 'fd' [ 43.226800][ T5539] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 43.227233][ T5539] overlayfs: failed to set xattr on upper [ 43.227302][ T5539] overlayfs: ...falling back to redirect_dir=nofollow. [ 43.227356][ T5539] overlayfs: ...falling back to uuid=null. [ 43.254307][ T5548] capability: warning: `syz.4.149' uses deprecated v2 capabilities in a way that may be insecure [ 43.254768][ T5548] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 43.254818][ T5548] overlayfs: failed to get uuid (/file0, err=-95); falling back to uuid=null. [ 43.499259][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.635073][ T1093] atkbd serio0: keyboard reset failed on [ 43.648921][ T5558] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 43.651043][ T5559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.154'. [ 43.671543][ T5561] netlink: 'syz.2.156': attribute type 4 has an invalid length. [ 43.698558][ T5565] loop2: detected capacity change from 0 to 256 [ 43.718622][ T5565] FAT-fs (loop2): Directory bread(block 64) failed [ 43.718659][ T5565] FAT-fs (loop2): Directory bread(block 65) failed [ 43.718684][ T5565] FAT-fs (loop2): Directory bread(block 66) failed [ 43.718695][ T5565] FAT-fs (loop2): Directory bread(block 67) failed [ 43.718740][ T5565] FAT-fs (loop2): Directory bread(block 68) failed [ 43.718750][ T5565] FAT-fs (loop2): Directory bread(block 69) failed [ 43.718771][ T5565] FAT-fs (loop2): Directory bread(block 70) failed [ 43.718781][ T5565] FAT-fs (loop2): Directory bread(block 71) failed [ 43.718800][ T5565] FAT-fs (loop2): Directory bread(block 72) failed [ 43.718809][ T5565] FAT-fs (loop2): Directory bread(block 73) failed [ 43.740712][ T5571] Cannot find del_set index 3 as target [ 43.767445][ T5573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.161'. [ 43.821676][ T5586] loop2: detected capacity change from 0 to 512 [ 43.827032][ T5586] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 43.830416][ T5586] EXT4-fs (loop2): invalid journal inode [ 43.830481][ T5586] EXT4-fs (loop2): can't get journal size [ 43.834540][ T5586] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 43.840429][ T5586] System zones: 1-12, 13-13 [ 43.842424][ T5586] EXT4-fs (loop2): 1 truncate cleaned up [ 43.842976][ T5586] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.865951][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.893852][ T5595] loop1: detected capacity change from 0 to 2048 [ 43.895717][ T5595] ext4: Unknown parameter 'seclabel' [ 43.929213][ T5600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.167'. [ 43.932442][ T5601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.167'. [ 43.987834][ T5597] loop2: detected capacity change from 0 to 512 [ 44.044849][ T5610] loop0: detected capacity change from 0 to 512 [ 44.046787][ T5610] EXT4-fs: old and new quota format mixing [ 44.056728][ T5610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.169'. [ 44.062818][ T5612] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.078583][ T5612] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.082945][ T5612] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.170: bg 0: block 234: padding at end of block bitmap is not set [ 44.085133][ T5612] EXT4-fs (loop2): Remounting filesystem read-only [ 44.094649][ T5612] bond1: option all_slaves_active: invalid value (8) [ 44.099248][ T5612] bond1 (unregistering): Released all slaves [ 44.100940][ T5617] tmpfs: Bad value for 'nr_inodes' [ 44.152428][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.155050][ T5618] virt_wifi0: entered promiscuous mode [ 44.157416][ T5618] virt_wifi0: entered allmulticast mode [ 45.803817][ T5659] overlayfs: failed to get inode (-116) [ 45.803951][ T5659] overlayfs: failed to get inode (-116) [ 45.804090][ T5659] overlayfs: failed to get inode (-116) [ 45.952141][ T5676] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.062250][ T4712] VFS: Lookup of '' in ext4 loop2 would have caused loop [ 46.062463][ T4712] VFS: Lookup of '' in ext4 loop2 would have caused loop [ 46.149256][ T5704] overlay: filesystem on ./file0 not supported as upperdir [ 46.212573][ T5708] input: syz1 as /devices/virtual/input/input5 [ 46.227800][ T5708] tun0: tun_chr_ioctl cmd 1074025675 [ 46.227829][ T5708] tun0: persist enabled [ 46.227921][ T5708] tun0: tun_chr_ioctl cmd 1074025675 [ 46.227928][ T5708] tun0: persist disabled [ 46.271367][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.325420][ T5728] FAT-fs (loop3): Directory bread(block 1285) failed [ 46.325461][ T5728] FAT-fs (loop3): Directory bread(block 1286) failed [ 46.325474][ T5728] FAT-fs (loop3): Directory bread(block 1287) failed [ 46.325512][ T5728] FAT-fs (loop3): Directory bread(block 1288) failed [ 46.327203][ T3711] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.331848][ T5728] FAT-fs (loop3): Directory bread(block 1285) failed [ 46.331866][ T5728] FAT-fs (loop3): Directory bread(block 1286) failed [ 46.331878][ T5728] FAT-fs (loop3): Directory bread(block 1287) failed [ 46.331895][ T5728] FAT-fs (loop3): Directory bread(block 1288) failed [ 46.331953][ T5728] FAT-fs (loop3): FAT read failed (blocknr 1281) [ 46.332257][ T5728] FAT-fs (loop3): Directory bread(block 1285) failed [ 46.342703][ T5728] Injecting memory failure for pfn 0x21950d at process virtual address 0x20162000 [ 46.424197][ T5738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 46.432345][ T4713] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.433207][ T5728] Memory failure: 0x21950d: unhandlable page. [ 46.433221][ T5728] Memory failure: 0x21950d: recovery action for get hwpoison page: Ignored [ 46.438421][ T4713] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.438891][ T4713] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.446151][ T4713] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.447073][ T4713] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.465929][ T3711] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.533427][ T5738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.199'. [ 46.533469][ T5738] netlink: 56 bytes leftover after parsing attributes in process `syz.0.199'. [ 46.533480][ T5738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.199'. [ 46.562701][ T5755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.198'. [ 46.590883][ T3711] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.658903][ T5766] vfat: Unknown parameter 'iocharset69' [ 46.674176][ T3711] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.727092][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.728085][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.728185][ T5739] bridge_slave_0: entered allmulticast mode [ 46.728643][ T5739] bridge_slave_0: entered promiscuous mode [ 46.729497][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.729519][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.729576][ T5739] bridge_slave_1: entered allmulticast mode [ 46.729981][ T5739] bridge_slave_1: entered promiscuous mode [ 46.738588][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.739742][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.751064][ T5739] team0: Port device team_slave_0 added [ 46.755074][ T5739] team0: Port device team_slave_1 added [ 46.776981][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.777007][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.777026][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.777828][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.777842][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.777859][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.790488][ T5739] hsr_slave_0: entered promiscuous mode [ 46.790960][ T5739] hsr_slave_1: entered promiscuous mode [ 46.791186][ T5739] debugfs: 'hsr0' already exists in 'hsr' [ 46.791202][ T5739] Cannot create hsr debugfs directory [ 46.852545][ T4713] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 46.854473][ T4713] Bluetooth: hci2: Injecting HCI hardware error event [ 46.855114][ T4714] Bluetooth: hci2: hardware error 0x00 [ 47.154099][ T5778] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #11: block 10: comm syz.3.204: lblock 0 mapped to illegal pblock 10 (length 1) [ 47.154136][ T5778] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 47.157590][ T5778] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 47.162174][ T5778] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.204: iget: bad extra_isize 90 (inode size 256) [ 47.165346][ T5778] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 47.166315][ T5778] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.204: error while reading EA inode 11 err=-117 [ 47.168257][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 47.168270][ C0] EXT4-fs (loop3): initial error at time 524335: ext4_map_blocks:791: inode 11: block 10 [ 47.168294][ C0] EXT4-fs (loop3): last error at time 524335: ext4_xattr_inode_iget:441: inode 11 [ 47.176092][ T5778] loop3: lost filesystem error report for type 5 error -117 [ 47.179701][ T5778] EXT4-fs (loop3): 1 orphan inode deleted [ 47.182754][ T5778] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.265921][ T3711] bridge_slave_1: left allmulticast mode [ 47.265993][ T3711] bridge_slave_1: left promiscuous mode [ 47.266886][ T3711] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.270365][ T3711] bridge_slave_0: left allmulticast mode [ 47.270988][ T3711] bridge_slave_0: left promiscuous mode [ 47.271065][ T3711] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.436093][ T3711] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.455152][ T3711] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.494245][ T3711] bond0 (unregistering): Released all slaves [ 47.499950][ T5778] warning: `syz.3.204' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 47.528163][ T4765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.542978][ T5786] netlink: 164 bytes leftover after parsing attributes in process `syz.0.206'. [ 47.598119][ T5739] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 47.619048][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.744071][ T5739] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 47.746602][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.748666][ T5739] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 47.754127][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.897380][ T4397] 8021q: adding VLAN 0 to HW filter on device eth0 [ 48.002696][ T5739] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 48.017640][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.033771][ T5818] misc userio: Begin command sent, but we're already running [ 48.096680][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.165227][ T5833] 9p: Bad value for 'wfdno' [ 48.429701][ T4713] Bluetooth: hci1: command tx timeout [ 48.432981][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.438512][ T5156] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.438553][ T5156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.443991][ T5158] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.444044][ T5158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.532957][ T4397] 8021q: adding VLAN 0 to HW filter on device eth1 [ 48.547823][ T3711] hsr_slave_0: left promiscuous mode [ 48.553139][ T3711] hsr_slave_1: left promiscuous mode [ 48.553408][ T3711] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.553434][ T3711] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.557697][ T3711] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.557719][ T3711] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.566591][ T3711] veth1_macvtap: left promiscuous mode [ 48.568579][ T3711] veth0_macvtap: left promiscuous mode [ 48.570028][ T3711] veth1_vlan: left promiscuous mode [ 48.570089][ T3711] veth0_vlan: left promiscuous mode [ 48.573410][ T5857] Driver unsupported XDP return value 0 on prog (id 30) dev N/A, expect packet loss! [ 48.689338][ T3711] team0 (unregistering): Port device team_slave_1 removed [ 48.695490][ T3711] team0 (unregistering): Port device team_slave_0 removed [ 48.898021][ T5890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.220'. [ 48.914392][ T5890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.220'. [ 48.930203][ T5890] veth1_to_batadv: entered allmulticast mode [ 48.938324][ T5890] set_capacity_and_notify: 6 callbacks suppressed [ 48.939954][ T5890] loop1: detected capacity change from 0 to 1024 [ 48.946438][ T5890] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 48.947968][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.950305][ T5890] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 48.952372][ T5890] EXT4-fs (loop1): invalid journal inode [ 48.996993][ T4397] 8021q: adding VLAN 0 to HW filter on device eth2 [ 49.019469][ T5907] loop4: detected capacity change from 0 to 512 [ 49.025810][ T5907] EXT4-fs: Invalid commit interval -2147483647, must be smaller than 21474836 [ 49.066633][ T9] atkbd serio1: keyboard reset failed on [ 49.118679][ T5921] loop1: detected capacity change from 0 to 256 [ 49.140511][ T4714] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 49.148308][ T5924] loop4: detected capacity change from 0 to 2048 [ 49.152635][ T5739] veth0_vlan: entered promiscuous mode [ 49.154309][ T5739] veth1_vlan: entered promiscuous mode [ 49.169884][ T5739] veth0_macvtap: entered promiscuous mode [ 49.173914][ T5924] GPT:first_usable_lbas don't match. [ 49.173921][ T5924] GPT:34 != 290 [ 49.173927][ T5924] GPT: Use GNU Parted to correct GPT errors. [ 49.173963][ T5924] loop4: p1 p2 p3 [ 49.187126][ T5739] veth1_macvtap: entered promiscuous mode [ 49.196904][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.197930][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.211536][ T4397] 8021q: adding VLAN 0 to HW filter on device eth3 [ 49.213938][ T5158] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.214056][ T5158] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.214082][ T5158] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.214100][ T5158] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.265335][ T4700] udevd[4700]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 49.268497][ T5132] udevd[5132]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 49.276018][ T5158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.276045][ T5158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.279545][ T4702] udevd[4702]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 49.291872][ T5152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.291904][ T5152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.313975][ T5940] Injecting memory failure for pfn 0x12307f at process virtual address 0x20000000 [ 49.320667][ T5940] Memory failure: 0x12307f: Sending SIGBUS to syz.4.226:5940 due to hardware memory corruption [ 49.320756][ T5940] Memory failure: 0x12307f: recovery action for dirty LRU page: Recovered [ 49.320785][ T5940] Injecting memory failure for pfn 0x21950d at process virtual address 0x20001000 [ 49.320852][ T5940] Memory failure: 0x21950d: Sending SIGBUS to syz.4.226:5940 due to hardware memory corruption [ 49.320870][ T5940] Memory failure: 0x21950d: recovery action for already poisoned page: Failed [ 49.374921][ T5945] netlink: 8 bytes leftover after parsing attributes in process `syz.5.197'. [ 49.374963][ T5945] netlink: 4 bytes leftover after parsing attributes in process `syz.5.197'. [ 49.416212][ T5952] loop3: detected capacity change from 0 to 128 [ 49.425205][ T5952] FAT-fs (loop3): bogus number of FAT structure [ 49.425248][ T5952] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 49.425274][ T5952] FAT-fs (loop3): Can't find a valid FAT filesystem [ 49.478203][ T5958] loop5: detected capacity change from 0 to 512 [ 49.480263][ T5958] EXT4-fs: Ignoring removed bh option [ 49.488107][ T5958] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 49.490267][ T5958] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 49.737776][ T5958] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 49.741050][ T5958] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 49.754645][ T5958] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.774402][ T5958] fscrypt (loop5, inode 12): Error -61 getting encryption context [ 49.829428][ T5739] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.832957][ T5966] loop0: detected capacity change from 0 to 512 [ 49.834949][ T5966] EXT4-fs: Ignoring removed bh option [ 49.839221][ T5966] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 49.843417][ T5966] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 not in group (block 5)! [ 49.843454][ T5966] EXT4-fs (loop0): group descriptors corrupted! [ 49.973828][ T5973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.232'. [ 50.018717][ T5975] loop1: detected capacity change from 0 to 512 [ 50.021342][ T5976] futex_wake_op: syz.5.234 tries to shift op by 32; fix this program [ 50.147890][ T5978] loop5: detected capacity change from 0 to 128 [ 50.197272][ T5978] netlink: 'syz.5.234': attribute type 3 has an invalid length. [ 50.197388][ T5978] netlink: 'syz.5.234': attribute type 3 has an invalid length. [ 50.197411][ T5978] netlink: 'syz.5.234': attribute type 3 has an invalid length. [ 50.197430][ T5978] netlink: 'syz.5.234': attribute type 3 has an invalid length. [ 50.197448][ T5978] netlink: 'syz.5.234': attribute type 3 has an invalid length. [ 50.197465][ T5978] netlink: 'syz.5.234': attribute type 3 has an invalid length. [ 50.197481][ T5978] netlink: 'syz.5.234': attribute type 3 has an invalid length. [ 50.197498][ T5978] netlink: 'syz.5.234': attribute type 3 has an invalid length. [ 50.197514][ T5978] netlink: 'syz.5.234': attribute type 3 has an invalid length. [ 50.197530][ T5978] netlink: 'syz.5.234': attribute type 3 has an invalid length. [ 50.504423][ T4714] Bluetooth: hci1: command tx timeout [ 50.765347][ T5975] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 50.803816][ T5975] EXT4-fs (loop1): 1 truncate cleaned up [ 50.804292][ T5975] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.814050][ T5985] netlink: 596 bytes leftover after parsing attributes in process `syz.4.237'. [ 50.854168][ T5975] : renamed from vlan0 (while UP) [ 50.905426][ T5989] loop3: detected capacity change from 0 to 1024 [ 50.936735][ T5989] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.951350][ T6000] EXT4-fs: Ignoring removed nobh option [ 50.960732][ T5991] autofs: Bad value for 'fd' [ 50.982249][ T6000] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.021791][ T6005] EXT4-fs error (device loop3): ext4_lookup:1785: comm syz.3.239: inode #12: comm syz.3.239: iget: illegal inode # [ 51.026880][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.032775][ T6005] EXT4-fs (loop3): Remounting filesystem read-only [ 51.092899][ T4765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.236324][ T6031] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 51.242120][ T6031] syz.4.249 (pid 6031) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 51.289030][ T4761] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.293283][ T4716] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.366299][ T6046] xt_CT: No such helper "pptp" [ 51.414317][ T6053] netlink: 16 bytes leftover after parsing attributes in process `syz.0.256'. [ 51.426316][ T6056] netlink: 20 bytes leftover after parsing attributes in process `syz.5.255'. [ 51.475636][ T6062] io-wq is not configured for unbound workers [ 51.481476][ T6062] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 51.544077][ T6069] EXT4-fs: Ignoring removed bh option [ 51.554918][ T6069] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 51.564711][ T6069] overlayfs: failed to resolve './file7': -2 [ 51.704140][ T6079] netlink: 80 bytes leftover after parsing attributes in process `syz.0.263'. [ 51.737127][ T6081] bridge1: entered promiscuous mode [ 51.876054][ T6094] EXT4-fs: inline encryption not supported [ 51.881188][ T6094] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 51.881448][ T6094] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.268: invalid indirect mapped block 2683928664 (level 1) [ 51.881480][ T6094] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 51.886984][ T6094] EXT4-fs (loop5): 1 truncate cleaned up [ 51.888909][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 51.888928][ C1] EXT4-fs (loop5): initial error at time 524340: ext4_free_branches:1023: inode 13 [ 51.888953][ C1] EXT4-fs (loop5): last error at time 524340: ext4_free_branches:1023: inode 13 [ 51.898118][ T6094] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.917118][ T5739] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.932898][ T6100] netlink: 6032 bytes leftover after parsing attributes in process `syz.5.269'. [ 52.958886][ T6122] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.968315][ T6125] EXT4-fs: Ignoring removed bh option [ 52.972576][ T6122] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.999730][ T6125] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 52.999773][ T6125] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 53.007899][ T6125] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 53.010959][ T6125] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 53.012092][ T6125] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.099349][ T5739] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.266055][ T6146] Dev loop1: RDB in block 1 has bad checksum [ 53.278683][ T6146] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.338531][ T6154] input: syz1 as /devices/virtual/input/input7 [ 53.347567][ T6153] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 53.387503][ T4716] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.428067][ T6159] ext4: Unknown parameter 'measure' [ 53.496339][ T6165] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.523698][ T4716] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.705209][ T6179] Injecting memory failure for pfn 0x123201 at process virtual address 0x20001000 [ 53.708460][ T6179] Memory failure: 0x123201: Sending SIGBUS to syz.0.289:6179 due to hardware memory corruption [ 53.708518][ T6179] Memory failure: 0x123201: recovery action for unsplit thp: Failed [ 53.740036][ T4761] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.781054][ T6185] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 53.793984][ T6185] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #3: block 5: comm syz.4.290: lblock 5 mapped to illegal pblock 5 (length 1) [ 53.797389][ T6185] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 53.798162][ T6185] Quota error (device loop4): write_blk: dquota write failed [ 53.800249][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 53.800263][ C1] EXT4-fs (loop4): initial error at time 524342: ext4_map_blocks:833: inode 3: block 5 [ 53.800284][ C1] EXT4-fs (loop4): last error at time 524342: ext4_map_blocks:833: inode 3: block 5 [ 53.802159][ T6185] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 53.802223][ T6185] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 53.802366][ T6185] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.290: Failed to acquire dquot type 0 [ 53.802379][ T6185] loop4: lost filesystem error report for type 5 error -117 [ 53.813516][ T6185] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 5: comm syz.4.290: lblock 5 mapped to illegal pblock 5 (length 1) [ 53.813539][ T6185] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 53.813644][ T6185] Quota error (device loop4): do_insert_tree: Can't read tree quota block 5 [ 53.813665][ T6185] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 53.813679][ T6185] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.290: Failed to acquire dquot type 0 [ 53.813689][ T6185] loop4: lost filesystem error report for type 5 error -117 [ 53.813888][ T6185] EXT4-fs error (device loop4): ext4_free_blocks:6718: comm syz.4.290: Freeing blocks not in datazone - block = 0, count = 4096 [ 53.813902][ T6185] loop4: lost filesystem error report for type 5 error -117 [ 53.814437][ T6185] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 5: comm syz.4.290: lblock 5 mapped to illegal pblock 5 (length 1) [ 53.814455][ T6185] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 53.814727][ T6185] Quota error (device loop4): do_insert_tree: Can't read tree quota block 5 [ 53.814760][ T6185] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 53.814774][ T6185] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.290: Failed to acquire dquot type 0 [ 53.814783][ T6185] loop4: lost filesystem error report for type 5 error -117 [ 53.814896][ T6185] EXT4-fs (loop4): 1 orphan inode deleted [ 53.815356][ T6185] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.842637][ T6185] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 5: comm syz.4.290: lblock 5 mapped to illegal pblock 5 (length 1) [ 53.845351][ T6185] Quota error (device loop4): do_insert_tree: Can't read tree quota block 5 [ 53.845376][ T6185] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 53.845392][ T6185] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.290: Failed to acquire dquot type 0 [ 53.877401][ T4761] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.907526][ T6192] set_capacity_and_notify: 16 callbacks suppressed [ 53.907557][ T6192] loop4: detected capacity change from 0 to 128 [ 54.274430][ T6203] loop5: detected capacity change from 0 to 1024 [ 54.279276][ T6203] ext3: Unknown parameter 'measure' [ 54.301925][ T6205] xt_ecn: cannot match TCP bits for non-tcp packets [ 54.363732][ T6210] loop4: detected capacity change from 0 to 2048 [ 54.372693][ T6216] loop5: detected capacity change from 0 to 512 [ 54.386207][ T30] audit: type=1326 audit(524342.729:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6215 comm="syz.5.298" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0177aa8 code=0x0 [ 54.404880][ T6210] loop4: p1 p2 p3 [ 54.404880][ T6210] p1: [ 54.405701][ T6210] loop4: p3 start 65280 is beyond EOD, truncated [ 54.507439][ T6229] syzkaller0: entered promiscuous mode [ 54.507473][ T6229] syzkaller0: entered allmulticast mode [ 54.515927][ T4702] udevd[4702]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 54.518578][ T4700] udevd[4700]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 54.670721][ T6244] loop5: detected capacity change from 0 to 512 [ 54.673608][ T6244] EXT4-fs: Ignoring removed nobh option [ 54.678557][ T6244] EXT4-fs (loop5): orphan cleanup on readonly fs [ 54.678875][ T6244] EXT4-fs error (device loop5): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.5.306: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 54.678892][ T6244] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 54.680195][ T6244] EXT4-fs (loop5): Remounting filesystem read-only [ 54.680214][ T6244] EXT4-fs warning (device loop5): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.5.306: ea_inode dec ref err=-117 [ 54.680292][ T6244] EXT4-fs (loop5): 1 orphan inode deleted [ 54.680765][ T6244] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 54.719527][ T5739] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.773251][ T6254] loop1: detected capacity change from 0 to 4096 [ 54.773703][ T6254] EXT4-fs: inline encryption not supported [ 54.774990][ T6254] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 54.775000][ T6254] EXT4-fs (loop1): Test dummy encryption mode enabled [ 54.776536][ T6254] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 54.776572][ T6254] System zones: 0-5 [ 54.777393][ T6254] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.823355][ T6263] loop3: detected capacity change from 0 to 512 [ 54.823874][ T6263] ext4: Unknown parameter 'obj_role' [ 54.878850][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.940309][ T6265] loop5: detected capacity change from 0 to 8192 [ 55.010728][ T6282] loop3: detected capacity change from 0 to 512 [ 55.026450][ T6282] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.317: bad orphan inode 11862016 [ 55.026479][ T6282] loop3: lost filesystem error report for type 5 error -117 [ 55.028690][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 55.028704][ C0] EXT4-fs (loop3): initial error at time 524343: ext4_orphan_get:1423 [ 55.028719][ C0] EXT4-fs (loop3): last error at time 524343: ext4_orphan_get:1423 [ 55.029955][ T6282] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 55.122283][ T6296] loop5: detected capacity change from 0 to 128 [ 55.122668][ T6296] vfat: Unknown parameter ' ' [ 55.136133][ T6299] EXT4-fs: Mount option(s) incompatible with ext2 [ 55.474318][ T4714] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 55.474363][ T4714] Bluetooth: hci1: Injecting HCI hardware error event [ 55.475143][ T4714] Bluetooth: hci1: hardware error 0x00 [ 55.692204][ T6313] binder: 6310:6313 unknown command 1768304430 [ 55.695296][ T6313] binder: 6310:6313 ioctl c0306201 200004c0 returned -22 [ 55.697143][ T6314] binder: 6310:6314 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 55.702689][ T6312] syzkaller0: entered promiscuous mode [ 55.703873][ T6312] syzkaller0: entered allmulticast mode [ 55.926521][ T6332] EXT4-fs: Ignoring removed bh option [ 55.930242][ T6332] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 56.013575][ T6332] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 5)! [ 56.013622][ T6332] EXT4-fs (loop4): group descriptors corrupted! [ 56.023948][ T6344] __nla_validate_parse: 3 callbacks suppressed [ 56.023977][ T6344] netlink: 12 bytes leftover after parsing attributes in process `syz.5.330'. [ 56.173154][ T6344] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #2: block 48: comm syz.5.330: bad entry in directory: directory entry overrun - offset=12, inode=2, rec_len=1024, size=1024 fake=1 [ 56.207206][ T6344] bond1 (unregistering): Released all slaves [ 56.315910][ T6384] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 56.320925][ T6384] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #3: block 1: comm syz.0.338: lblock 1 mapped to illegal pblock 1 (length 1) [ 56.320961][ T6384] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 56.325095][ T6384] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.338: Failed to acquire dquot type 0 [ 56.325132][ T6384] loop0: lost filesystem error report for type 5 error -117 [ 56.330478][ T6384] EXT4-fs error (device loop0): ext4_free_blocks:6718: comm syz.0.338: Freeing blocks not in datazone - block = 0, count = 4096 [ 56.336034][ T6384] loop0: lost filesystem error report for type 5 error -117 [ 56.337196][ C0] EXT4-fs (loop0): error count since last fsck: 3 [ 56.337224][ C0] EXT4-fs (loop0): initial error at time 524344: ext4_map_blocks:833: inode 3: block 1 [ 56.337264][ C0] EXT4-fs (loop0): last error at time 524344: ext4_free_blocks:6718 [ 56.348690][ T6384] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.338: Invalid inode bitmap blk 0 in block_group 0 [ 56.354597][ T6384] loop0: lost filesystem error report for type 5 error -117 [ 56.362835][ T5156] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:17: lblock 1 mapped to illegal pblock 1 (length 1) [ 56.362862][ T5156] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 56.371366][ T6384] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 56.371395][ T6384] loop0: lost filesystem error report for type 5 error -117 [ 56.376206][ T6384] EXT4-fs (loop0): 1 orphan inode deleted [ 56.381357][ T5156] EXT4-fs error (device loop0): ext4_release_dquot:7070: comm kworker/u8:17: Failed to release dquot type 0 [ 56.431657][ T6399] IPVS: set_ctl: invalid protocol: 92 100.1.1.1:20002 [ 56.433436][ T11] IPVS: starting estimator thread 0... [ 56.436803][ T6399] IPVS: set_ctl: invalid protocol: 1 172.20.20.187:0 [ 56.448384][ T6402] EXT4-fs: Ignoring removed bh option [ 56.450602][ T6402] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 56.452603][ T6402] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 56.460862][ T6402] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 56.463156][ T6402] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 56.515910][ T6400] IPVS: using max 57 ests per chain, 136800 per kthread [ 56.697471][ T6414] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 56.701497][ T6414] FAT-fs (loop5): Directory bread(block 524322) failed [ 56.701682][ T6414] FAT-fs (loop5): Directory bread(block 524323) failed [ 56.701699][ T6414] FAT-fs (loop5): Directory bread(block 524324) failed [ 56.701713][ T6414] FAT-fs (loop5): Directory bread(block 524325) failed [ 56.701724][ T6414] FAT-fs (loop5): Directory bread(block 524326) failed [ 56.701735][ T6414] FAT-fs (loop5): Directory bread(block 524327) failed [ 56.701746][ T6414] FAT-fs (loop5): Directory bread(block 524328) failed [ 56.701757][ T6414] FAT-fs (loop5): Directory bread(block 524329) failed [ 56.703445][ T6414] FAT-fs (loop5): Directory bread(block 524322) failed [ 56.703460][ T6414] FAT-fs (loop5): Directory bread(block 524323) failed [ 56.726574][ T5152] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 57.132509][ T6437] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 57.368655][ T6455] xt_hashlimit: size too large, truncated to 1048576 [ 57.560402][ T6472] validate_nla: 47 callbacks suppressed [ 57.560442][ T6472] netlink: 'syz.0.364': attribute type 4 has an invalid length. [ 57.561844][ T6472] ptrace attach of ""[6473] was attempted by "ci-upstream-gce-arm64/syz-executor exec"[6472] [ 57.627505][ T4714] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 57.714758][ T6485] macvlan2: entered promiscuous mode [ 57.716073][ T6485] bridge0: entered promiscuous mode [ 57.882850][ T6493] netlink: 64 bytes leftover after parsing attributes in process `syz.4.369'. [ 58.205840][ T6505] vfat: Unknown parameter 'nonumt%q~85nail' [ 58.311852][ T6521] netlink: 16 bytes leftover after parsing attributes in process `syz.3.375'. [ 58.404415][ T6528] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 58.426994][ T6528] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 58.427658][ T6528] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.373: Failed to acquire dquot type 1 [ 58.427682][ T6528] loop5: lost filesystem error report for type 5 error -28 [ 58.430672][ T6528] EXT4-fs (loop5): 1 truncate cleaned up [ 58.457804][ T6528] EXT4-fs error (device loop5): __ext4_remount:6837: comm syz.5.373: Abort forced by user [ 58.460257][ T6528] EXT4-fs (loop5): Remounting filesystem read-only [ 58.460303][ T6528] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 58.637741][ T6549] batadv_slave_0: entered promiscuous mode [ 58.644598][ T6546] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 58.665492][ T6549] bond0: entered promiscuous mode [ 58.668980][ T6549] batadv0: entered promiscuous mode [ 58.670230][ T6546] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.379: bad orphan inode 131083 [ 58.670736][ T6547] overlayfs: failed lookup in lower (newroot/69, name='file0', err=-40): overlapping layers [ 58.681566][ T6559] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 58.681597][ T6559] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 58.684539][ T6559] evm: overlay not supported [ 58.691722][ T6559] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #12: block 7: comm syz.3.379: bad entry in directory: directory entry overrun - offset=16, inode=1560281102, rec_len=1024, size=56 fake=0 [ 58.701941][ T6561] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #12: block 7: comm syz.3.379: bad entry in directory: directory entry overrun - offset=16, inode=1560281102, rec_len=1024, size=56 fake=0 [ 58.737938][ T4765] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 58.741122][ T6548] batadv_slave_0: left promiscuous mode [ 58.783043][ T6571] ext4: Unknown parameter 'nouser_xattr' [ 58.792670][ T6574] netlink: 'syz.5.387': attribute type 2 has an invalid length. [ 58.794735][ T6567] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 58.794760][ T6567] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 58.795661][ T6567] vhci_hcd vhci_hcd.0: Device attached [ 58.806021][ T6570] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 1: comm syz.0.389: lblock 1 mapped to illegal pblock 1 (length 5) [ 58.807514][ T6570] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 5 with error 117 [ 58.807533][ T6570] EXT4-fs (loop0): This should not happen!! Data will be lost [ 58.807533][ T6570] [ 58.863580][ T5665] Unable to handle kernel paging request at virtual address dfff80000000000b [ 58.865844][ T5665] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 58.867701][ T5665] Mem abort info: [ 58.867740][ T5665] ESR = 0x0000000096000005 [ 58.867753][ T5665] EC = 0x25: DABT (current EL), IL = 32 bits [ 58.867764][ T5665] SET = 0, FnV = 0 [ 58.867774][ T5665] EA = 0, S1PTW = 0 [ 58.867783][ T5665] FSC = 0x05: level 1 translation fault [ 58.867792][ T5665] Data abort info: [ 58.867799][ T5665] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 58.867807][ T5665] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 58.867816][ T5665] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 58.867825][ T5665] [dfff80000000000b] address between user and kernel address ranges [ 58.867892][ T5665] Internal error: Oops: 0000000096000005 [#1] SMP [ 58.878181][ T6571] ptrace attach of "ci-upstream-gce-arm64/syz-executor exec"[6582] was attempted by "ci-upstream-gce-arm64/syz-executor exec"[6571] [ 58.883202][ T5665] Modules linked in: [ 58.884015][ T5665] CPU: 1 UID: 0 PID: 5665 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT [ 58.885879][ T5665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 58.887687][ T5665] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 58.889111][ T5665] pc : klist_put+0x50/0x118 [ 58.889975][ T5665] lr : klist_put+0x2c/0x118 [ 58.890801][ T5665] sp : ffff800095cb77c0 [ 58.891556][ T5665] x29: ffff800095cb77c0 x28: dfff800000000000 x27: 1fffe00019aa3745 [ 58.893072][ T5665] x26: ffff700012b96f08 x25: ffff0000d6874ce0 x24: 1fffe0001b0dc70c [ 58.894632][ T5665] x23: dfff800000000000 x22: ffff0000cf8ee758 x21: 0000000000000001 [ 58.896229][ T5665] x20: 0000000000000000 x19: ffff0000d86e3860 x18: 1fffe00034bfbe20 [ 58.897835][ T5665] x17: ffff800084c9c8ac x16: ffff80008246fb44 x15: ffff8000824a0dc8 [ 58.899414][ T5665] x14: ffff800080ec4c14 x13: 0000000000000001 x12: 0000000000000000 [ 58.901015][ T5665] x11: 0000000000000000 x10: 0000000000ff0100 x9 : 0000000000000000 [ 58.902693][ T5665] x8 : 000000000000000b x7 : 0000000000000000 x6 : ffff800080b6438c [ 58.904373][ T5665] x5 : ffff0000d4f9c090 x4 : 0000000000000008 x3 : ffff800080eb4a6c [ 58.906059][ T5665] x2 : 0000000000000001 x1 : ffff0000cd51ba00 x0 : 0000000000000058 [ 58.907695][ T5665] Call trace: [ 58.908351][ T5665] klist_put+0x50/0x118 (P) [ 58.909264][ T5665] klist_del+0x24/0x34 [ 58.910047][ T5665] device_del+0x180/0x710 [ 58.910880][ T5665] netdev_unregister_kobject+0x2b4/0x3ac [ 58.912044][ T5665] unregister_netdevice_many_notify+0x13c0/0x18d8 [ 58.913335][ T5665] unregister_netdevice_queue+0x270/0x308 [ 58.914501][ T5665] unregister_netdev+0x2c/0x70 [ 58.915473][ T5665] bnep_session+0x213c/0x2318 [ 58.916445][ T5665] kthread+0x2f8/0x3c8 [ 58.917284][ T5665] ret_from_fork+0x10/0x20 [ 58.918162][ T5665] Code: f9400268 927ff914 91016280 d343fc08 (38776908) [ 58.919490][ T5665] ---[ end trace 0000000000000000 ]--- [ 59.180269][ T5665] Kernel panic - not syncing: Oops: Fatal exception [ 59.181517][ T5665] SMP: stopping secondary CPUs [ 59.182432][ T5665] Kernel Offset: disabled [ 59.183221][ T5665] CPU features: 0x0a000000,003c0008,27020501,5427fea7 [ 59.184478][ T5665] Memory Limit: none [ 59.422887][ T5665] Rebooting in 86400 seconds..