last executing test programs: 2.498623834s ago: executing program 2 (id=189): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @multicast2, @local}, &(0x7f0000000100)=0xc) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x12c, r1, 0x1, 0x70bd25, 0x25dfcbfe, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x805}, 0x90) 2.462724451s ago: executing program 2 (id=191): r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4e, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000800000091100600000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x24}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x24008095}, 0x4004084) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r1, &(0x7f0000009780)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000940)=ANY=[@ANYBLOB="1000000000000000b37884c2098785bf"], 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r5, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, 0x0, 0x80) add_key(&(0x7f0000000000)='big_key\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) setresgid(0xee00, 0xee01, 0x0) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001b40), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10122, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mq_open(&(0x7f00000010c0)='\\\\\x00', 0x40, 0x0, 0x0) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r10, 0x1, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x4, r9, &(0x7f0000000080)="f0ff000000", 0x5, 0x2a25}]) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000300)=ANY=[@ANYRES64=r9, @ANYRESOCT=r9, @ANYRESHEX, @ANYRESHEX=r9, @ANYRES8=r9, @ANYRES16=r2, @ANYRES64, @ANYRESOCT=0x0, @ANYRES64=r8, @ANYRESDEC=r4, @ANYRES64=r7, @ANYRESHEX], 0xfc, 0x313, &(0x7f0000000580)="$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") r11 = syz_open_dev$video4linux(&(0x7f0000000040), 0xfffffffffffffffe, 0x200) ioctl$VIDIOC_SUBDEV_S_FMT(r11, 0xc0585605, &(0x7f00000001c0)={0x1, 0x0, {0xfffffffd, 0xb77, 0x1015, 0x7, 0xa, 0x2, 0x3, 0xa4de36948e08189f}}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140), 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff6c7625d7cc944305608a2989984f924167620bf14618f6cfd0804f13c3ace81f7d61f67705c39355213fee0098679b5d599f9245e5caf26181217b995d7ba17fe430f051d0796f352b07cf75a1cba698b0baa8e9e94fdf32d8f6c4c87a54303d97cdc9cbf4abeff7b0de494ef634e6895ca57b9ac0527778649ac5c85436f6dd93345dd3114acd4ab11fa388baffe78846ba10d02afd3999c4814b55f882fdae26a67913b4172471d8d3705314"], 0x0) 2.376488408s ago: executing program 2 (id=192): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) ioctl$NILFS_IOCTL_GET_CPSTAT(r0, 0x80186e83, &(0x7f0000000400)) r2 = syz_open_dev$vim2m(&(0x7f0000001fc0), 0x26cfb598, 0x2) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000340), 0x84880, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000002040)=@multiplanar_overlay={0x4, 0x3, 0x4, 0x200002, 0x5, {0x77359400}, {0x3, 0xc, 0x34, 0x17, 0x9, 0x0, "fbffffff"}, 0x1, 0x3, {&(0x7f0000000380)=[{0x3, 0xfffffffa, {0xe}, 0x3}, {0xb, 0xcf7, {0x2}, 0x40}]}, 0x200, 0x0, r3}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000c00000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000a0000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000000000085000000ba000000b7000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x0, 0x0, 0x1}, 0x18) prctl$PR_SET_SECUREBITS(0x1c, 0x21) prctl$PR_SET_SECUREBITS(0x1c, 0x34) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r5, 0x40047452, 0xf0ff1f00000000) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="070000000000000000000c0000001c00038008000400001000000800020020000000080005007180bbda180001801400020073797a5f74756e"], 0x48}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000007c0)="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", 0x13a}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="5ca2", 0x2}], 0x1}}], 0x2, 0x2404c445) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 2.370223761s ago: executing program 1 (id=194): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000099f0001000000000095"], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) 2.347035071s ago: executing program 1 (id=195): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x0, 0xbf}, &(0x7f0000000400), &(0x7f0000011000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0x6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}, 0x20) 2.345875887s ago: executing program 2 (id=196): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x3, 0x235}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x9, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = fcntl$dupfd(r2, 0x0, r2) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x63, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x6}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x6}]}}]}, 0x48}}, 0x4000010) ioctl$TCFLSH(r7, 0x400455c8, 0x2) ioctl$TIOCSETD(r7, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)=0xfc) close_range(r1, 0xffffffffffffffff, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.791104352s ago: executing program 2 (id=202): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x3, 0x490, &(0x7f0000000580)="$eJzs3UFrXNUeAPD/nSR9aZu+pO+9RV/BWmwlLdqZpLFtcFEriK4Kat3HmExCyCQTMpO2CUVS/ACCiAquXLkR/ACC9COIUNC9iCiirS5cqCMzudPWOJMETHNx5veD03vOPTPzP6eTOXPPPZe5AXSt4xFxKSJ6IuJ0RAym+3NpivWNVH/c3Ts3puopiVrtyg9JJOm+5msl6fZg+rT+iHj5hYjXkr/GrayuzU+WSsXltFyoLiwVKqtrZ+YWJmeLs8XFsbHR8+MXxs+Nj+xaXy8+9807b374/MVPn7z21cR3p16vN2sgrXuwH7tpo+t9jf+Lpt6IWH4YwTLQk/anL+uGAACwI/Vj/P9ExGON4//B6GkczQEAAACdpPbMQPyaRNQAAACAjpVrXAOb5PLptQADkcvl8xvX8P4vDuRK5Ur1iZnyyuL0xrWyQ9GXm5krFUfSa4WHoi+pl0cb+fvls5vKYxFxOCLeHtzfKOenyqXprE9+AAAAQJc4uGn+//PgxvwfAAAA6DBDWTcAAAAAeOjM/wEAAKDzmf8DAABAR3vx8uV6qjXvfz19dXVlvnz1zHSxMp9fWJnKT5WXl/Kz5fJs4zf7FrZ7vVK5vPRULK5cL1SLlWqhsro2sVBeWaxONO7rPVF0n2gAAADYe4cfvfVlEhHrT+9vpLp9aZ25OnS2XNYNADLTk3UDgMz0Zt0AIDPm+ECyTX1/u4rPdr8tAADAwzH8f+v/0K2s/0P3sv4P3cv6P3Qvc3zA+j8AAHS+gUZKcvl0LXAgcrl8PuJQ47YAfcnMXKk4EhH/jogvBvv+VS+PZt1oAAAAAAAAAAAAAAAAAAAAAAAAAPiHqdWSqAEAAAAdLSL3bZLe/2t48OTA5vMD+5JfBhvbiLj2/pV3r09Wq8uj9f0/3ttffS/dfzaLMxgAAADAZs15enMeDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC76e6dG1PNtJdxv382IoZaxe+N/sa2P/oi4sBPSfQ+8LwkInp2If76zYg40ip+Um9WDKWt2Bw/FxH7M45/cBfiQze7VR9/LrX6/OXieGPb+vPXm6a/q/34l7s3/vW0Gf8O7TDG0dsfF9rGvxlxtLf1+NOMn7SJf2KH8V99ZW2tXV3tg4jhlt8/yZ9iFaoLS4XK6tqZuYXJ2eJscXFsbPT8+IXxc+MjhZm5UjH9t2WMtx755Pet+n+gTfyhbfp/cof9/+329Tv/3SL+qROt3/8jW8Sv/008nn4P1OuHm/n1jfyDjn30+bGt+j/dpv/bvf+ndtj/0y+98fUOHwoA7IHK6tr8ZKlUXJaRkZG5l8l6ZAIAAHbb/YP+rFsCAAAAAAAAAAAAAAAAAAAA3Wsvfk4s6z4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzEHwEAAP//0wfUAw==") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r1, &(0x7f0000001b40)=[{{&(0x7f0000001c00)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c, 0x0}}, {{&(0x7f0000000100)={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=[@flowinfo={{0x14, 0x29, 0xb, 0x42c6}}], 0x18}}], 0x2, 0x40000) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000), &(0x7f00000001c0)=0x4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000440)=0x91) sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x3) mlockall(0x2) r6 = shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_LOCK(0x0, 0xb) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) shmctl$SHM_LOCK(r6, 0xb) r7 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r7, &(0x7f0000ff1000/0x3000)=nil, 0x400c) mremap(&(0x7f0000ff1000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) 1.790839749s ago: executing program 4 (id=203): r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xb, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1, 0x1, 0x9, 0x1, 0x8}, 0xe, 0x1, 0x32, 0x5, 0x9, 0x7, 0x9, 0x1d, 0x1, 0xffffff5c, {0xa632, 0x23, 0x3, 0x40, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c84c}, 0x400c000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031620d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001900)={0x14, 0x10, 0x701, 0x0, 0xffffffff, {0xd}}, 0x14}}, 0x20008080) 536.454184ms ago: executing program 2 (id=206): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMETA(r3, 0x4b63, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x40000001, 0x2000007, 0xffff}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448cc, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r5, &(0x7f00000044c0), 0x4000000000001c0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r6, &(0x7f0000001800)={&(0x7f0000000040)=@in6={0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000001740)=[{&(0x7f00000000c0)="ead8388a14ab76bb449d3f16bed31537211d721a6ee4678cc5d4bcc5ac39e050fc13e2e19532e4a4fb9cd706a5f431785a3d760f2e090b92486d63a8b096fadf22f2245d09391aa00fe25314c5abf10c5336a7", 0x53}, {&(0x7f0000000140)="f4ec34df6b9899fb3d9ad52d1085aafe4d37b7451c76a991c1ff4404593fc9632a9881b4f2e1e87b30430666fad5519cbaa67f69f00be3c850564b1b901744b3241b28b6cc9ee21296d30eddb878a331c9933f67c126483d177911ad5bc8", 0x5e}, {&(0x7f00000001c0)="0bd0fe9658892cbc871d539b68259ce8ea57d9834dffc823d3be8a52e370730ebbc1106be8b70ed9e8fe93975a5c22c8a7f5b026e8c420b2dbce17cfc2515a799d9a167010fa20eef531d2715ab47fbabc603616edf2c99ee6198d420b6437a263a867601d89d34ba95fec", 0x6b}, {&(0x7f0000000240)="5333036ea9452f47f50ed0291a99921b272c20ac621a412df0002113f3a9b650218ba8c15e24364715528f8633463c4c424335c54e7a5e4d9b0950b780306fad92f25a444221f31056b0e096d691988f76649ba4a8d378fef7c220f4dfd2847ff4ec534921c5f53ff920e546cce3f36b5d14fb5c156163248cb94577911d671887", 0x81}, {&(0x7f0000000580)="bfb1ef0a2f4e0ea20cc5cb1d70dbd73257438bb311c0a11d610822fef494783f7c5c05d274ecad90e5201146e8ccf5daf64e2ae7aa45c6a50718bb1066f037790f4969826cb18717ef8022397d724bee2202329f9244be83ed95243770ed36e195ddb785cd65315282b42be99ffc0b9ebabe67cae09b569df56d1f6fd0b3ca82a6e1f99038afe02b00a700f99aa1b1b016aeeea4c4f44d23dedb035d7ca285d8f4544a7d595d871023bad01240abb40d84cf519bee693d68bebe5be8c2fe88d30564383262d32a6d2a9a9e53151fb82f0108cd2cf0a7acf479b826ca731a5f387baf796c2f6f1c5e6aee008d8a8734c1acca768c3ad843d76a2aed2d86fd24ddb02a260e15990c7c1ef349c50c730af7f1584aeb47c9243cb29170ca6aa8921c4eceec1c751104a576a1d186288c152d325d458003b7f2138bba72ad008e4c5eca0132f3370090e2351f5c6e358219ed45ad2b7c183fc064cf6723530210b1b2b0494a70b70b556cdeb688c2a27bbd3477ee67e441558384eeeadac7d18a53e42107bd30edb35ae1f0d8dd927e8c75daee8e98086921ae74c25a0423c2419662d6ff730f56a0c364f3a12c5dd61a3d9b49054e6a6b4f8f5a817e6e4fcdfd0bea2472c11a39d482caabca23928a26a6ef3322ee0c7d0c331715521cf287198d61743050c23ac1d1c78d0bd34ef794c7c252bddd6a6d51831007203f2119324993e5e3128bdfc95e771ea7772f71bcc372570f77c21766518dac8ea1dbb867b74d18e569a19b2860face4b20e62e064c3befc6cde4df9605e477fb20c6727cd537f2289d3ea1e8fdbff77f26cfc2fbea61c02d26bfad7d7822009c37e3434d08d99f34b75acb27e1cc2a9b84942ed94208f63bfd5c315828b77401b57d561abb39917cc1dbd0eee568a5ff30c293c76449334cef6776b35961f9abe94483b6058424571105b9f0389df4e59481950d30b864099e05531523b0fa17d89c4a0cfbd378018b1bd09ca1110fac680d4cd89bc6a88c3ca2b590727837ca39f34655a84dd12db227bc5e3733bf164cb69338c9a40f63d414b788e5afa2916950f07d6dbb169c3a36c7f561a7cad7337fcdcd40ce63367e01f41c311d357990392df990c8d79041da9542d47b284ae1b7fa7096b955e5115a49471cd9b3f51594018e3ec8eb6933fd53fcf46fd27889ab4ea63d820169b5d717e5c068eae4acadcde7d99b8be73c3c58baf99616496244574e44f932ea20ff24ef64945e9a66ef3cc1f691d7e258726d36fe9f594587de096b47ed97d6fcc492c302702317ad3150df262f4b653f266806958e81561a1ec69ca44a324fd42a447a5408051839969146c0e002af7a5611a981026783d97b17084172c1e0e5cc7053218ffbe9743998a0bcbdce66bc29550f716250155db880bb3096dc6a351c486bd3fa8dc3390ef8299ba0a382722bb47aedd850cfee3f6b2e18b7c16406a686574fe3253927007dd9b865412551b7d577e7dce7590c1b5fd4e9c4ebc69dbfe6c95ae9ce443c68d088d10aeaa6a74c1b1a0eaae587430d29c8509085c8d3a14ed60cfb90129aa3de983a236514f594a0765cdf1061141e6a905a31aa03a954a2a947a525b7251bab0f9b5cde9b8bbb2784ea33df7e8195f589fce658a4c63709721a769b790bf95bdfa33a1635159ead9082f9ef4ae7702d3b41e65d7225eca3e029952bb93a5e6bce76437fe9aa9f5226477fa389ad6870d44fb61bff0bacaf3a60f5031c003095d242d2ef82bbb6bb56bcc68f2cab0700fdeaef09bdce32ddaf716b0d3959e06e854054eeee6fef0c8009c7df2144ce1c28e2ffa94288c640d82be7ef296b394c660191b84c80d74227685e908d4774d918a061f17dc7064748ef1fa7214d52700822baf19ded591e1dfc1aff1bfbd0a1992de16dbeba5fd500c9b13b4ed7348a9684672dc0ff9a96af7dd7d3c39168701f669d59e315e9b1d2949258a09a4217fa5931c2ecdd3f9677256ff0066f208b41c8f142f0f5d503445d9d28f51382233452e74f8ca11a33fde2edee24255aa09961a4a4cb0c2c836ef96cdd9cf7b45706d6cdcd9aae7da79c773fdf8efe91acb0c8a82d9fe9ce8eb6bba5190979ea2967662699737278e2add9b93b8afa099cddc0d9a9ec474e79bdc6dfdd3d5dfce7262c355549e33639733df3c22758207d12d072a3c218b46a61880ee019b8d615dc08e4ae2498996fc1db926ac9a483418dd9c2719d19f12a63b7644704c7df1496d66ec7ada71d16b9aa403404d9cd0ea09ffe2427b935c5f11789dd382af3f93d3ad164e0ea6fd9c2d81a802a8d4263a34e46cb346685f1e593a310fbc40f412984a7c2aa9aeb6198af7beb64bbfa1600be44f860abc308f160f3b42d6f3fa95d4cb297ea3c10ef12ef42246c033d4b74c5d8b0222df0f140f972ff89c703f2dabcc7b89960ada3df4d09cdf1ba6145b13881d077ee5127ee429cf705a9a9a1470ca744b95b105279ea9a249a9e6e74254dbecb60ab7bebfd237533478455e83f18d60fbe8af4defbb7b62ac5ad8a37290d8aa77a368716620969adfc85c4eff355505b4e626adab1e02c978e8128ab649224e4bad047d3d0b7dfae6af93a568360c8452d53d447e72a4790f30cc7dcfe86df2b95e085cc8824b8798ee448524ef48dec9316c6b5ceb9f7ab2207461cdb3ce413eca62a4804a9c844ec64daa9643506924c0ba9ad5a442331576f9d27e18a75258ab1e23351b7569d38b72c0338bab0e2e5b9cae1040b600fb0fd11d9d63eb97152491211b8c32a90fca18ed4cfdbf298afbdc3a06f18cc3591f13823587816aace8311803771a5aa6834d25c9fe3fb6daeb785c84c5e32a3662535eb69384f97398e5e55b0161390381dc2a3c60d9c4b6d7adf78cdea129a59a125ee4ae3bda21beb0d63d8689452217a04910ef6da2456f8dd248da2e9f7ab8e3274b89c83f0451df1219557fa361078aa8f118b2c985632b2f5ad8af36aa9749618175d09b58c7bcc920ec70784edeff3ee0934db290fcb1af8097be7dfd1ae625a23c09850044880283edc991163f91c2324c0eb08ac8616ec24971492e870a5688327a7a3ab3e360d65be8c27f8378434fd505223cca7c89bdd91eb5b7705c5cca237dfd79c1a7fbbf98ee99839a3f64e13a7a39a5bc123d4e9d344551e3e04322215a727ff35afa9331229c8faa03362a7003bc045b9e4a92fb25d0a65634ad21be4db5b1971c0762940135f12a6cf92371ccf39d44a7d7044f23b7f93756837699ebdbf785d6c20713fe99c615d93ffab129c5602c88eedb0e136860d83bfb5ca8fc75212a71fcc662a9aeea0542f79815fe03d4b566f6a0b307c95d57fedd0ddd0568c44d21db01823be3beeff5dd531ee6cc83f815ac84ac4f1cd3278261dfb93dc566097e27d027329e365969e55b0731ce6b36f2232096b7428928ca480b649a4a5d9f45ae6a403467f8b23c728c84c6cd5f780851d37ac4f7f33bf1383badd7ce703517350bf950a7a40bf5813c1302373ed62d04d74f0390ba07fbfd28bf8bb8f40860a287eb21731b9f8e8696728a8f433a9e209ee5643803898c814ec1d26c57227ed3561865095c29166838dcbc6c015e352c482894fc35c247fa6d1f18d2182e65b36346f833721214938135b376d7c3cfddb383e757b8d9a80ec78c1bd6bd91448c55f568c9fbadfe05f98c5fd750997706c2a98cd0114d64099b2d0f619cca9ab20801fc0b4b29823b3dd791bc407234bea9a2bbd17dc13eea7b9ee9087b34de43231df17134736093513d6b7324e3ebb6f1feb6ad472970a56f134636104a491b88a03a185a03d1cb60ce2e2fad88ce90870986deff3223bde86d201f950c41394e43f313d6e27ae1db895078bb31e4a7dcca675dc29a21a7bd45a8128bb6e8b0f2a0e019d05bca2e4927700681556732ebf934400a25f606b900fcc543269b747c87a7e3cb8bcccc5653e40f26c3ac3cbc74ce1c89b875e09ba6da262db949e4b536b2188675373934e748be9e3a5bb450a78c4a17626536b4ebb8336a22be531ee61066f1bc0fc27edb3820224bebe7878bc61f20205b2fb43742116e6c90e99ac3df8e0a7e36877b58209ca644a1aef12bc9f532a1acf8c519b3994217343bd2a84c71f7470139ab956449350423a95146765249707ecd4c4db28cada6e0a219abad90b29a2118bb5d271afb7730e9de9069976058e0ef987626e26cdf63c022b2ed35cef50f76cccf29b407baa8c5d58d60c63b59545a9b094ec6823959b4cf0f58adb72c7f8cbeff0413498dea1947a9e369429a93d582e361dda5c703d17320512d023698829b7fde4c3d5b787eff418fab2fccc4086a3e1264444e08a8361d2c72187f39b203adee090c5abe2123c8d77c2082725ff8b0904cc6feecd39f721aa7e9a5f8fbb94f6afb6e08535d48732e23f08e3d5e9451378f52a12f41fffc852238469893fc6093436fa398e9022fb01550427893a6942a38cb1bf814e5f96f3c0757452e3e88808b5d01f4f7cfb9fff55b9f45d8c5b77c11ea799079aeba00620037766859ac15032624ada35ba67bbede1693bc35caceb3e5862948fbcaabb4b0e2841ec73a326754a18e1d62de846af70def7b05b5d7a4e8e5fdcbe3c70e9539abfca588068c63aa6de05bb375bc9fd737d1eeaff525245d82a972b981c24d7d14660493b1031f6664678aeafa0f505f25f480efcb8f63588e94c6c2e255569daaae9f81caa6dd9628f5d5729d6aff0c4a26f707abb079cff50bb0c213e2a7c7fab0bb8768c721a22e31d8ccc3c224cddfbca1fcb604be12097cdfe4e056e9afbd4a93a288506e52feeddbb6ce090edabe27344ad696c0fcb9885e2fc448468a877bad8aef52c87316c058bc624386ae6c8dfa09e6bbfaae1b6503ddd020f1a16b61c4a3fde79e6dd65127f564c920926b572a9f9bbd837fb70e48673b24762d14ae1f045657650887252a74b5bfee665deb59387ac3748e88dd50b5af507ba208478b1069ff1cb91c9f5f125a294805b86948f34a833a1a8b1ff9f751167f39f8409d3bc710209b8e6c7813231922965e040e7aca936feeca249a3dd82fce455e9cc150197f971df1547a5423b880bfe1f549a8c0812906ffddc4e4cb4b221b8bc6d5e60bbf0a07ba1e535ab57d25426bc043aee9466cf8a60fb4f92de0c45b66525821cb0242099a786c11649b86a673c5b4c1b4eca4bc6ba713e8d330218e04702ad238ef931bbadabc16f73068c8fce7646e1b3c19c76ffa6fdad70a2d3c9758474974d229f2f168ad870c04117feeca0615eb8d3a4f8d1851148a8701673b0f539b32ef2d2718a01068275074c8a5b854a33e9f1270f09c1b23d3f1c735ab8c19d1c8f620768380ad1aa594ac1af7d10d429c8be98659863e0912bc397f7c10c2e5084da95ec83e7ba0630ff495cdb47657fa8af5b6c4d75842bee7da152a6ccb48bd31e8016cd79778c23326dc34d9a27727be687d1bcd384152b8f22cbc978d4035343b96e74b913aa16b2259fd6a66db1b200c8ca12cc7e51cf2ea49b86063f4a1f8acc15020eaaef87e4fea5fe73213b13e5ac09e513b5e66bb29214503477f788282cda23119a153c23c6bb4fb77c692a2af98276bacc009af085379b86edd254cde37f938c7239cfbd80ce94954fd4e22e4237fd15d8dede5b3deca726c8e7649e0292d58df1f2d9961bf9e6f4a2a2203ebd6af66cfd4b06ddb0c44433344060712394159487d675aa033c3a595f09db3a43bdb975e8d3ba746178ccc850b2a3ae", 0x1000}, {&(0x7f0000001580)="18ba2d2435ea4d6a6b05e928bcd606d0095b6c4e93d0943ecc8ccbf6f837cdbff4c1df29d4e37f07395361c21c070eecd9d36c93de53f13cffa0c763477750c6aef827a9aceaa95f58ac7d36f5ec6b6e142e25120951a9a9aa63deb3bcb9af9193ffb0e4f99384db6eb3e8811e766f5ea6eb2dec6b39e7", 0x77}, {&(0x7f0000001600)="b93484c5c2508a56f16f77b1b169ebc1800a19982ab6725e4fc75edb8328ad183759cba59a68ac6524d2ef16423cd57581382358437ae31e51451473e5f316b1fff902c7e9bdbe2b219649c27947f34217b1af64bd03141b24f4f17662fc9418309b52fa6b16b8dc7152926d7f3a8b15e701fce723", 0x75}, {&(0x7f0000001680)="f879487378c0aef0ad2b7b6a5a4791e6a815d1724d182e26088547a66d848960639d3ba89a42a31f34dbfa2d6107d78bd0749a1d2c1989ff76bd1e08418e713100", 0x41}, {&(0x7f0000001700)="9b41a556e3c3ca853f18bd842db7558dd10210286885fcac10b4a74024ea41a4acb58da93058cce16f52281b5f24", 0x2e}], 0x9}, 0x4000011) r7 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001ec66e7d586e", 0x8}], 0x1, &(0x7f0000000440)=[@ip_tos_int={{0x14, 0x0, 0x7}}], 0x18}, 0x404c090) 531.823186ms ago: executing program 0 (id=207): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\b', @ANYRES16=r2, @ANYBLOB="000127bd7000fcdbdf250300000005000500db0000000500030000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20009805}, 0x40004) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000000104030000000000000000000700000105000100020000000600064000000000"], 0x24}, 0x1, 0x0, 0x0, 0x44090}, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x444200, 0xa) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000300)={r6}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(0xffffffffffffffff, 0xc0186445, &(0x7f0000000180)={0xaf, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000000240)={r4, 0x6, 0x6, 0x0, 0x2, [r6, 0x0, r7, r8], [0x12, 0x985, 0x8, 0x20], [0x2aa, 0xa, 0x3, 0x9], [0x8, 0x6, 0x7, 0x2]}) 531.524057ms ago: executing program 4 (id=208): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000002c0)={0x83ad, 0xa, 0xb78, 0x5, 0xc, "b15c933095a5b821784e2c16a09b4fcaba3f75"}) r1 = semget$private(0x0, 0x6, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001740)=ANY=[@ANYBLOB="180100002d00010003000000fbdbdf25060117800c0003000925000000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) semctl$SEM_STAT_ANY(r1, 0x3, 0x14, &(0x7f0000000000)=""/165) semtimedop(r1, &(0x7f0000000100)=[{0x1, 0x1f}, {0x0, 0x0, 0x1000}], 0x2, &(0x7f0000000140)={0x77359400}) 522.078795ms ago: executing program 0 (id=209): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42797000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0x10, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0xf}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000b80)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004598002800020000fe06907800000000fffffffffffd4e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="4fed000090780000"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$comedi(0xffffffffffffff9c, 0x0, 0x109040, 0x0) 494.935348ms ago: executing program 4 (id=210): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x3, 0xd) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @multicast2, 0x1, 0x5, [@empty, @remote, @multicast1, @dev={0xac, 0x14, 0x14, 0x32}, @loopback]}, 0x24) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4048040) r3 = accept(r1, &(0x7f0000000100)=@ethernet={0x0, @broadcast}, &(0x7f0000000180)=0x80) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000001c0)={'wg1\x00'}) 400.444853ms ago: executing program 3 (id=211): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000002800)={0x4, 0x3, 0x0, "833461025a78ffb29963084f401a544b75d000"}) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/51, 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001c40)) r5 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1, r5}) close_range(r2, 0xffffffffffffffff, 0x2000000000000) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0xffffffffffffffff, 0x40000) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002a0000000800580000000000080001007063690011000200303030303a30303a31302e30000000000800030000000000"], 0x40}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd53, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x0, 0x14, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc", 0x0, 0xa1b, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0, 0x0, 0x0, 0x1}, 0x50) write$cgroup_devices(r6, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x4110, r6, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183042, 0x20) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r9, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x1, r8, &(0x7f00000000c0)='p', 0x1, 0x600, 0x0, 0x0, r8}]) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x171) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x2004008, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@verity_on}, {@xino_auto}, {@metacopy_on}, {@redirect_dir_off}]}) syz_io_uring_setup(0x79d, &(0x7f0000000480)={0x0, 0x799, 0x2, 0x3, 0x2c6}, &(0x7f0000000500), &(0x7f0000000600), &(0x7f0000000640)) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x121542, 0x60) ioctl$BINDER_FREEZE(r6, 0x400c620e, &(0x7f0000000080)={0x0, 0x0, 0x9}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103) 399.924535ms ago: executing program 0 (id=212): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="00000000b99b5c65df4bb84674d78e", 0xf}], 0x1}}], 0x1, 0x20008000) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x800, 0x0) recvmsg(r1, 0x0, 0x123) shutdown(r1, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x64) 396.962612ms ago: executing program 4 (id=213): r0 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24, r2}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010025bd7000fddbdf25eeff7700", @ANYRES32=0x0, @ANYBLOB="390902000360000008001b0000000000080004"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 380.041771ms ago: executing program 4 (id=214): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000006c0)="3b000000010001", 0x7) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53, 0x0, 0x1}, 0x28) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40885}, 0x240080d0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = fsopen(&(0x7f00000002c0)='logfs\x00', 0x1) ioctl$BTRFS_IOC_ENCODED_WRITE(r4, 0x40809440, &(0x7f0000000780)={&(0x7f0000000700)=[{&(0x7f0000000280)="b02a02aefd71b4875cdd469c10d7298884dc7383510d015574e096a4f0634c96929830ae8cf53f75edb590", 0x2b}, {&(0x7f00000002c0)}, {&(0x7f0000000300)="e13237d0688ddb0bd87cf6ac5979f95769bb218c8ebf6d7eb7082958d96639b914141fd64708217ec0e71aa70e7761d093801015a353eb9e3b25490563e10b75f6ea4a5cf0c49623674b617496", 0x4d}, {&(0x7f0000000440)="f5eee7d828619dab8f3220b9643a4f1e55d2b515fac2c467702cfe60cc987d9e9e71dc58fe31f5719c62ce83ac6c86378fc23b52ccbcebe8263e553a9f3baf469c5c61054addc452ade82b3de0eab4cb066ef774090ae425c96fc05b14884fbf036295c41eebfd99b4e163cb51ebb8ce7e3a9293b048e70923608d5462e019097dcb40710110af0b5bb4", 0x8a}, {&(0x7f0000000500)="70488697c27014d96e09847a4a0746bfb58a9dd70293939e8999a541338e5b60652e2c2ce11e733d630d98781a207efb3b54412f703eb78101453e9e3d6bd27db2d3c4e5f5c51afefffcfc6bda7f242213fd1f20d9b892689de00e4e510ac5ae67fcf09b7851b60f552170e4cb21d568c3", 0x71}, {&(0x7f0000000580)="80ca", 0x2}, {&(0x7f00000005c0)="addae38521eaaa125d0b59f61dbe72959b836fbb4c8614dede80", 0x1a}], 0x7, 0x6, 0x0, 0xfffffffffffffffa, 0x8000000000000001, 0x9, 0x4, 0x8}) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) r6 = bpf$MAP_CREATE(0x0, &(0x7f000000a180)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, 0x0}}], 0x1, 0x48000) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r8, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r3, r5, 0x16, 0x0, @void}, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xca4bccd54687ade7, 0x4007010, r7, 0x9b6e6000) sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r9, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x200, @link='syz0\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8090}, 0x44000) 311.239424ms ago: executing program 0 (id=215): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) unlinkat(r1, &(0x7f0000000140)='./file0\x00', 0x200) 256.483755ms ago: executing program 4 (id=216): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x2, 0x3, 0x0, 0x3, 0xa, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1000, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x50}, 0x1, 0x7}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000014000780080011400000000005001500130000000500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400001800000000c92e8a468e"], 0x48) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r5, 0x25, 0x0, @void}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@can_newroute={0x1b8, 0x18, 0x8, 0x70bd28, 0x25dfdbff, {0x1d, 0x1, 0x7}, [@CGW_FILTER={0xc, 0xb, {{0x0, 0x1, 0x1, 0x1}, {0x1, 0x1}}}, @CGW_MOD_SET={0x15, 0x4, {{{0x0, 0x1, 0x1}, 0x7, 0x1, 0x0, 0x0, "d32fcdea4a06ca20"}, 0x2}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3}, 0x1, 0x1, 0x0, 0x0, "5b700613ff64622c"}, 0x4}}, @CGW_MOD_SET={0x15, 0x4, {{{}, 0x1, 0x1, 0x0, 0x0, "a98cb2d3202d7d83"}, 0x4}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x0, 0x0, 0x1}, 0x8, 0x3, 0x0, 0x0, "10094e3101d1c2f3"}, 0x2}}, @CGW_CS_CRC8={0x11e, 0x6, {0x65, 0x28, 0x73, 0x5, 0xec, "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", 0x2, "c9ec9e6ca465ce0e5db0ca293333e9b95f79fc59"}}, @CGW_MOD_UID={0x8, 0xe, 0xee00}, @CGW_CS_XOR={0x8, 0x5, {0x3, 0xfffffffffffffff9, 0xfffffffffffffffd, 0x2}}, @CGW_SRC_IF={0x8, 0x9, r5}]}, 0x1b8}}, 0x40000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x0, 0x24008010) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fadvise64(r7, 0x8, 0x9, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0xd, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r9, 0xc0405602, &(0x7f0000000040)={0x1, 0x1, 0x1, "feec647800b6d83bb5684a562acea6e800", 0x721517}) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000180)={0xff, 0x2, 0x2, 0x0, 0x8}) 256.116191ms ago: executing program 1 (id=217): mount(&(0x7f0000000140)=@filename='./cgroup\x00', &(0x7f0000000280)='./cgroup\x00', 0x0, 0x75809, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x6a, @dev={0xfe, 0x80, '\x00', 0xf}, 0x8}}}, &(0x7f0000000040)=0x84) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0xc, &(0x7f0000000080)=0x271) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) mount(0x0, &(0x7f00000007c0)='./cgroup\x00', 0x0, 0x200002c, 0x0) 235.182795ms ago: executing program 3 (id=218): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="01082cbd7000000000000b00000008000300", @ANYRES32=r1, @ANYBLOB="2c005080110001005817cd1317223ccff37e2f4d2e0000000400060008000700000000000500020004000011579e3f0008021100"], 0x54}, 0x1, 0x0, 0x0, 0x44151}, 0x0) 203.509171ms ago: executing program 3 (id=219): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000680)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@errors_continue}, {@bh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}], [{@smackfsdef}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x35, 0x36, 0x33, 0x34, 0x63, 0x33, 0x30], 0x2d, [0x63, 0x61, 0x32, 0x31], 0x2d, [0x63, 0x65, 0x39, 0x38], 0x2d, [0x33, 0x33, 0x38, 0x39], 0x2d, [0x31, 0x35, 0x66, 0x66, 0x36, 0x66, 0x37, 0x31]}}}]}, 0x1, 0x56f, &(0x7f0000003780)="$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") (async) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'abort'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@permit_directio}, {@obj_type={'obj_type', 0x3d, 'user.incfs.metadata\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'jqfmt=vfsv1'}}]}) (async) chdir(&(0x7f00000003c0)='./bus\x00') r1 = syz_open_dev$loop(&(0x7f0000000040), 0x83b2, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x40101287, 0x0) (async) setxattr$incfs_metadata(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x1) (async) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) process_madvise(r3, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000080)="95d6ac56", 0x4}], 0x2, 0x10, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x104, 0xff, 0x0, 0x1}, 0x48) (async) ioctl$XFS_IOC_FSGEOMETRY_V1(r0, 0x80705864, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x8, &(0x7f0000000d40)=ANY=[@ANYBLOB="b4000000000000001e1000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7030000000000008500000021000000b7000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000040)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x6}, 0x22) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000003740)='./file1\x00', &(0x7f0000003d00), 0x800) 196.541095ms ago: executing program 1 (id=220): ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000040)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x28, 0x0, 0x4001, 0xffff7dfc, {0x0, 0x0, 0x0, r6, {0x10}, {0x9}, {0x2, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) 189.400742ms ago: executing program 0 (id=221): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x200000, &(0x7f0000000200), 0x6, 0x5af, &(0x7f0000000dc0)="$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") r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@map=0x1, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$RTC_UIE_ON(r0, 0x7003) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x1, 0x3a, 0x8, 0xffffffffffffffff}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, 0xfffffffffffffffe) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x4040) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) symlinkat(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1, &(0x7f0000000000)='./file1\x00') 112.304586ms ago: executing program 3 (id=222): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_buf(r0, 0x6, 0x0, 0x0, &(0x7f00000003c0)) (async) epoll_create1(0x0) setrlimit(0x6, &(0x7f0000000000)={0x6c, 0x8}) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000200)=0xc) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x10, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid={'access', 0x3d, r5}}]}}) (async) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000801, r5, &(0x7f0000000080)={0x5, 0xf9fc, 0x0, 0x8, 0xb030, 0x81, 0x101, 0x2, 0xbd}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000840)={[{@delalloc}, {@noload}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}, {@noblock_validity}, {@nogrpid}, {@mblk_io_submit}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x65cf}}], [], 0x3d}, 0x65, 0x51c, &(0x7f0000000200)="$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") 99.878387ms ago: executing program 3 (id=223): socket$nl_netfilter(0x10, 0x3, 0xc) 76.986562ms ago: executing program 1 (id=224): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) unshare(0x6020400) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, 0x0, 0x5) (async, rerun: 32) write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) (rerun: 32) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x9}, 0x1c) (async) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) (async) listen(r4, 0x204) (async, rerun: 32) r5 = socket$netlink(0x10, 0x3, 0x4) (rerun: 32) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 668.2µs ago: executing program 3 (id=225): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000440)='\x00!', 0xfffffe37}], 0x1, 0x1, 0x3d) r1 = accept4(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000100)=0x80, 0x80000) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r2, &(0x7f0000000380)={0x24, @short={0x2, 0x1, 0xfffe}}, 0x14) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000180)=""/218, &(0x7f0000000280)=0xda) 457.086µs ago: executing program 1 (id=226): syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') (async) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 0s ago: executing program 0 (id=227): r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000007c0)='./file0\x00', 0x212000, &(0x7f0000000ec0)=ANY=[], 0x1, 0x1be, &(0x7f0000000540)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x8, 0x0) pselect6(0x40, &(0x7f0000000740)={0x4, 0x500000, 0x638c, 0x100, 0x401, 0x1, 0x200, 0x7}, 0x0, 0xfffffffffffffffe, 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203010902fcff000000ac0009040000000206"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="000a04000000d5620963"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000200)={0x14, &(0x7f0000000100)={0x0, 0x22, 0x98, {0x98, 0x7, "c975503e7f8a4e5251a9fdfd871b9d9917a0f16667e8c1e5ffa6c718e673b9bc462f0874945bedcea8763a3cb6ce639d3f3e821ec767ac139cb200562114afda201ae4fd72ce9d1885d010a1835c6877e908a4c6d48492fa8afd49b50dab7696c8e35c6259c009dcc775693d947de9e07d045a3fa5987e674e79f5d818902b17577ece7cbf9f3af0d9cdaa80321b70045fadde506036"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000700)={0x44, &(0x7f00000002c0)={0x20, 0xa, 0xf, "d5080a9a164866b39e4c495bf4ae62"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1c}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x47}, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0x938f, 0x800, 0x1, 0x6, 0x6, 0x1, 0x5, 0x5, 0x1, 0x5, 0x2, 0xae50}}, &(0x7f00000003c0)={0x20, 0x85, 0x4, 0x9}, &(0x7f0000000400)={0x20, 0x83, 0x2}, &(0x7f0000000440)={0x20, 0x87, 0x2, 0x5}, &(0x7f0000000480)={0x20, 0x89, 0x2}}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DROP_PRIVILEGES(r4, 0x4004551e, &(0x7f0000000280)=0x9) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704c9b72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd2c67100cc9d523a00fd53d03000000000000004a62fb73c33424b437bb192c9d06ea6ed0491ba35c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1964f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe8def4b73905ca14d90d1f600"}) r5 = dup(r3) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000000) write$UHID_INPUT(r5, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$UFFDIO_UNREGISTER(r5, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000115000/0x1000)=nil, 0x1000}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa2540400, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.165' (ED25519) to the list of known hosts. [ 28.654986][ T4694] cgroup: Unknown subsys name 'net' [ 28.784817][ T4694] cgroup: Unknown subsys name 'cpuset' [ 28.786866][ T4694] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.965296][ T4694] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 29.845576][ T4712] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.847439][ T4712] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.849121][ T4712] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.849265][ T4712] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.849529][ T4712] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.849686][ T4712] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.850009][ T4712] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.850219][ T4712] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.857448][ T4710] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.857738][ T4710] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.857886][ T4710] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.858198][ T4710] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.858428][ T4710] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.874209][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.874405][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.877331][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.889967][ T4722] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.890112][ T4722] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.890541][ T4722] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.890756][ T4722] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.894616][ T4709] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.897691][ T4709] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.899340][ T4709] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.900934][ T4709] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.902582][ T4709] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.223313][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.227162][ T4714] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.228773][ T4714] bridge_slave_0: entered allmulticast mode [ 30.230762][ T4714] bridge_slave_0: entered promiscuous mode [ 30.248061][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.248368][ T4714] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.248434][ T4714] bridge_slave_1: entered allmulticast mode [ 30.248889][ T4714] bridge_slave_1: entered promiscuous mode [ 30.276564][ T4714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.277818][ T4714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.303664][ T4714] team0: Port device team_slave_0 added [ 30.304748][ T4706] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.304816][ T4706] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.304874][ T4706] bridge_slave_0: entered allmulticast mode [ 30.305290][ T4706] bridge_slave_0: entered promiscuous mode [ 30.305897][ T4707] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.305918][ T4707] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.305967][ T4707] bridge_slave_0: entered allmulticast mode [ 30.306391][ T4707] bridge_slave_0: entered promiscuous mode [ 30.307132][ T4707] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.307154][ T4707] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.307200][ T4707] bridge_slave_1: entered allmulticast mode [ 30.307989][ T4707] bridge_slave_1: entered promiscuous mode [ 30.311776][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.311804][ T4716] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.311862][ T4716] bridge_slave_0: entered allmulticast mode [ 30.312394][ T4716] bridge_slave_0: entered promiscuous mode [ 30.313983][ T4706] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.314038][ T4706] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.314090][ T4706] bridge_slave_1: entered allmulticast mode [ 30.314634][ T4706] bridge_slave_1: entered promiscuous mode [ 30.324916][ T4714] team0: Port device team_slave_1 added [ 30.329943][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.330033][ T4716] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.330099][ T4716] bridge_slave_1: entered allmulticast mode [ 30.330528][ T4716] bridge_slave_1: entered promiscuous mode [ 30.340611][ T4707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.343272][ T4707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.355898][ T4706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.363337][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.364829][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.364901][ T4714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.365658][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.365666][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.365682][ T4714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.376584][ T4714] hsr_slave_0: entered promiscuous mode [ 30.377063][ T4714] hsr_slave_1: entered promiscuous mode [ 30.386775][ T4716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.389161][ T4706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.392758][ T4707] team0: Port device team_slave_0 added [ 30.394584][ T4707] team0: Port device team_slave_1 added [ 30.395669][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.396969][ T4715] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.398329][ T4715] bridge_slave_0: entered allmulticast mode [ 30.399908][ T4715] bridge_slave_0: entered promiscuous mode [ 30.405870][ T4716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.418826][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.420087][ T4715] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.421634][ T4715] bridge_slave_1: entered allmulticast mode [ 30.423183][ T4715] bridge_slave_1: entered promiscuous mode [ 30.427358][ T4706] team0: Port device team_slave_0 added [ 30.431941][ T4706] team0: Port device team_slave_1 added [ 30.432468][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.432476][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.432490][ T4707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.443298][ T4706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.444581][ T4706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.449148][ T4706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.451816][ T4716] team0: Port device team_slave_0 added [ 30.452578][ T4716] team0: Port device team_slave_1 added [ 30.456035][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.456057][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.456072][ T4707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.463960][ T4706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.463977][ T4706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.464004][ T4706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.469143][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.469152][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.469167][ T4716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.471429][ T4715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.483795][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.483805][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.483818][ T4716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.486883][ T4715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.500676][ T4707] hsr_slave_0: entered promiscuous mode [ 30.500982][ T4707] hsr_slave_1: entered promiscuous mode [ 30.501193][ T4707] debugfs: 'hsr0' already exists in 'hsr' [ 30.501226][ T4707] Cannot create hsr debugfs directory [ 30.516421][ T4706] hsr_slave_0: entered promiscuous mode [ 30.516725][ T4706] hsr_slave_1: entered promiscuous mode [ 30.516938][ T4706] debugfs: 'hsr0' already exists in 'hsr' [ 30.516948][ T4706] Cannot create hsr debugfs directory [ 30.519834][ T4716] hsr_slave_0: entered promiscuous mode [ 30.520131][ T4716] hsr_slave_1: entered promiscuous mode [ 30.520324][ T4716] debugfs: 'hsr0' already exists in 'hsr' [ 30.520334][ T4716] Cannot create hsr debugfs directory [ 30.521004][ T4715] team0: Port device team_slave_0 added [ 30.522088][ T4715] team0: Port device team_slave_1 added [ 30.566242][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.566266][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.566281][ T4715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.566832][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.566839][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.566853][ T4715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.621888][ T4715] hsr_slave_0: entered promiscuous mode [ 30.622216][ T4715] hsr_slave_1: entered promiscuous mode [ 30.622420][ T4715] debugfs: 'hsr0' already exists in 'hsr' [ 30.622429][ T4715] Cannot create hsr debugfs directory [ 30.653112][ T4714] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.656196][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.667135][ T4714] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.669471][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.669844][ T4714] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.671821][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.678220][ T4714] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.680554][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.704892][ T4707] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.707234][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.708750][ T4707] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.710940][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.712512][ T4707] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.714596][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.717471][ T4707] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.719591][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.734752][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.734798][ T4714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.734954][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.734987][ T4714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.749334][ T4707] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.749391][ T4707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.749461][ T4707] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.749496][ T4707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.752612][ T4706] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.757793][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.758067][ T4706] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.759984][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.774578][ T4706] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.776672][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.776971][ T4706] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.778552][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.789344][ T4716] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.791528][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.797801][ T4716] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.800142][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.800754][ T4716] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.802420][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.808332][ T4716] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.810315][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.821789][ T4706] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.821827][ T4706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.821914][ T4706] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.821957][ T4706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.828191][ T4707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.831898][ T4714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.836651][ T1441] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.838267][ T1441] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.840192][ T1441] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.842486][ T1441] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.843996][ T1441] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.845297][ T1441] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.852189][ T4707] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.865888][ T4715] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.866877][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.867138][ T4715] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.868250][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.876020][ T4715] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.878161][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.878437][ T4715] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.880269][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.882458][ T3542] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.882508][ T3542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.883375][ T3542] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.883405][ T3542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.898707][ T4714] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.902005][ T3542] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.902041][ T3542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.909899][ T4707] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.909930][ T4707] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.931383][ T4716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.936086][ T4706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.942745][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.942792][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.957245][ T4716] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.960844][ T3542] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.960890][ T3542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.962390][ T4706] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.971206][ T4714] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.977108][ T1441] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.977146][ T1441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.977725][ T1441] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.977745][ T1441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.989755][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.989800][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.001278][ T4716] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.008398][ T4706] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.010421][ T4706] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.022226][ T4715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.034141][ T4715] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.045480][ T3542] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.045519][ T3542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.056851][ T3542] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.056885][ T3542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.177468][ T4707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.211112][ T4707] veth0_vlan: entered promiscuous mode [ 31.230729][ T4714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.232921][ T4707] veth1_vlan: entered promiscuous mode [ 31.247340][ T4707] veth0_macvtap: entered promiscuous mode [ 31.255117][ T4716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.261436][ T4707] veth1_macvtap: entered promiscuous mode [ 31.267975][ T4706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.272919][ T4715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.290216][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.298897][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.316169][ T39] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.316381][ T39] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.316406][ T39] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.316424][ T39] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.326939][ T4716] veth0_vlan: entered promiscuous mode [ 31.329839][ T4706] veth0_vlan: entered promiscuous mode [ 31.331107][ T4716] veth1_vlan: entered promiscuous mode [ 31.338114][ T4706] veth1_vlan: entered promiscuous mode [ 31.357941][ T4715] veth0_vlan: entered promiscuous mode [ 31.368556][ T4716] veth0_macvtap: entered promiscuous mode [ 31.376449][ T4715] veth1_vlan: entered promiscuous mode [ 31.377748][ T4716] veth1_macvtap: entered promiscuous mode [ 31.380011][ T4714] veth0_vlan: entered promiscuous mode [ 31.382028][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.382627][ T4714] veth1_vlan: entered promiscuous mode [ 31.383290][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.385383][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.385403][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.407933][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.407982][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.408001][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.408019][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.408370][ T4706] veth0_macvtap: entered promiscuous mode [ 31.412826][ T4714] veth0_macvtap: entered promiscuous mode [ 31.416641][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.416668][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.420099][ T4706] veth1_macvtap: entered promiscuous mode [ 31.426526][ T4715] veth0_macvtap: entered promiscuous mode [ 31.431247][ T4714] veth1_macvtap: entered promiscuous mode [ 31.445928][ T4715] veth1_macvtap: entered promiscuous mode [ 31.457839][ T4707] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.460251][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.463917][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.465099][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.472394][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.473550][ T14] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.473686][ T14] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.473706][ T14] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.473722][ T14] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.476962][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.501596][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.501622][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.503495][ T14] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.503571][ T14] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.503626][ T14] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.503756][ T14] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.505201][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.515596][ T4884] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.4' sets config #0 [ 31.527078][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.527121][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.527149][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.527170][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.547348][ T3542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.547375][ T3542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.568952][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.568973][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.592983][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.593007][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.598012][ T3542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.598022][ T3542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.627261][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.627284][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.641240][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.641267][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.650632][ T4888] loop3: detected capacity change from 0 to 1024 [ 31.658568][ T4888] ======================================================= [ 31.658568][ T4888] WARNING: The mand mount option has been deprecated and [ 31.658568][ T4888] and is ignored by this kernel. Remove the mand [ 31.658568][ T4888] option from the mount to silence this warning. [ 31.658568][ T4888] ======================================================= [ 31.663882][ T4887] loop1: detected capacity change from 0 to 2048 [ 31.678169][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.678196][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.692585][ T4887] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.697889][ T4888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 32.072431][ T4709] Bluetooth: hci1: command tx timeout [ 32.072646][ T4709] Bluetooth: hci0: command tx timeout [ 32.072727][ T4709] Bluetooth: hci2: command tx timeout [ 32.072794][ T4709] Bluetooth: hci4: command tx timeout [ 32.072858][ T4709] Bluetooth: hci3: command tx timeout [ 32.106207][ T4894] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6: bg 0: block 112: padding at end of block bitmap is not set [ 32.109472][ T4894] EXT4-fs (loop3): Remounting filesystem read-only [ 32.860468][ T4707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 32.867231][ T4716] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.979789][ T4909] loop2: detected capacity change from 0 to 8192 [ 32.986329][ T4913] loop3: detected capacity change from 0 to 128 [ 33.259643][ T4924] netlink: 176 bytes leftover after parsing attributes in process `syz.0.14'. [ 33.261718][ T4922] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.12' sets config #0 [ 33.287550][ T4925] loop3: detected capacity change from 0 to 1024 [ 33.289515][ T4925] EXT4-fs: Ignoring removed orlov option [ 33.291812][ T4925] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 33.310361][ T4925] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.403035][ T4935] Injecting memory failure for pfn 0x11fc20 at process virtual address 0x20000000 [ 33.421078][ T4935] Memory failure: 0x11fc20: recovery action for clean LRU page: Recovered [ 33.421109][ T4935] Injecting memory failure for pfn 0x11fc15 at process virtual address 0x20001000 [ 33.421194][ T4935] Memory failure: 0x11fc15: recovery action for clean LRU page: Recovered [ 33.421209][ T4935] Injecting memory failure for pfn 0x11fc1f at process virtual address 0x20002000 [ 33.421244][ T4935] Memory failure: 0x11fc1f: recovery action for clean LRU page: Recovered [ 33.421265][ T4935] Injecting memory failure for pfn 0x21cf58 at process virtual address 0x20003000 [ 33.421299][ T4935] Memory failure: 0x21cf58: unhandlable page. [ 33.421309][ T4935] Memory failure: 0x21cf58: recovery action for get hwpoison page: Ignored [ 33.508222][ T4938] syzkaller0: entered promiscuous mode [ 33.508286][ T4938] syzkaller0: entered allmulticast mode [ 33.733068][ T4707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.798343][ T4944] loop1: detected capacity change from 0 to 2048 [ 33.814213][ T4944] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.838873][ T4948] loop0: detected capacity change from 0 to 1024 [ 33.858178][ T4948] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.865918][ T4955] fuse: Unknown parameter 'rEDtmode' [ 33.894445][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.901914][ T4716] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.972047][ T4963] capability: warning: `syz.2.25' uses deprecated v2 capabilities in a way that may be insecure [ 33.987958][ T4965] loop1: detected capacity change from 0 to 1024 [ 33.994515][ T4965] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 33.994550][ T4965] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 33.994703][ T4965] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 33.995333][ T4965] EXT4-fs (loop1): invalid journal inode [ 33.995365][ T4965] EXT4-fs (loop1): can't get journal size [ 33.995644][ T4965] EXT4-fs error (device loop1): ext4_protect_reserved_inode:182: inode #3: comm syz.1.23: blocks 2-2 from inode overlap system zone [ 33.995683][ T4965] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 33.996052][ T4965] EXT4-fs (loop1): failed to initialize system zone (-117) [ 33.996097][ T4965] EXT4-fs (loop1): mount failed [ 34.014463][ T4970] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 34.014483][ T4970] IPv6: NLM_F_CREATE should be set when creating new route [ 34.071100][ T4975] loop0: detected capacity change from 0 to 1024 [ 34.074355][ T4709] Bluetooth: hci4: command tx timeout [ 34.074390][ T4709] Bluetooth: hci2: command tx timeout [ 34.074413][ T4709] Bluetooth: hci0: command tx timeout [ 34.074435][ T4709] Bluetooth: hci1: command tx timeout [ 34.074526][ T4722] Bluetooth: hci3: command tx timeout [ 34.075592][ T4975] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 34.076208][ T4975] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 34.077282][ T4975] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 34.077334][ T4975] EXT4-fs error (device loop0): ext4_get_journal_inode:5896: comm syz.0.27: inode #1: comm syz.0.27: iget: illegal inode # [ 34.077517][ T4975] loop0: lost filesystem error report for type 5 error -117 [ 34.078254][ T4975] EXT4-fs (loop0): no journal found [ 34.078276][ T4975] EXT4-fs (loop0): can't get journal size [ 34.083454][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 34.083478][ C0] EXT4-fs (loop0): initial error at time 34: ext4_get_journal_inode:5896 [ 34.083503][ C0] EXT4-fs (loop0): last error at time 34: ext4_get_journal_inode:5896 [ 34.095861][ T4975] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e118, mo2=0002] [ 34.095919][ T4975] EXT4-fs (loop0): failed to initialize system zone (-22) [ 34.095957][ T4975] EXT4-fs (loop0): mount failed [ 34.129000][ T4982] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 34.130446][ T4982] overlayfs: failed to set xattr on upper [ 34.131568][ T4982] overlayfs: ...falling back to redirect_dir=nofollow. [ 34.132876][ T4982] overlayfs: ...falling back to uuid=null. [ 34.136128][ T4982] evm: overlay not supported [ 34.138254][ T4982] overlayfs: failed lookup in lower (/, name='bus', err=-40): overlapping layers [ 34.245256][ T4983] loop2: detected capacity change from 0 to 1024 [ 34.449161][ T4983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 35.102344][ T4986] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 35.335119][ T4990] netlink: 'syz.0.30': attribute type 2 has an invalid length. [ 35.354984][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 35.417476][ T5009] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.36: bg 0: block 393: padding at end of block bitmap is not set [ 35.417510][ T5009] loop2: lost filesystem error report for type 5 error -117 [ 35.420472][ T5009] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 35.420489][ T5009] loop2: lost filesystem error report for type 5 error -117 [ 35.421110][ T5009] EXT4-fs (loop2): 2 truncates cleaned up [ 35.421583][ T5009] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.492095][ T5018] : renamed from virt_wifi0 [ 36.395693][ T4722] Bluetooth: hci1: command tx timeout [ 36.395737][ T4722] Bluetooth: hci0: command tx timeout [ 36.395768][ T4722] Bluetooth: hci2: command tx timeout [ 36.395789][ T4722] Bluetooth: hci4: command tx timeout [ 36.399658][ T50] Bluetooth: hci3: command tx timeout [ 37.032084][ T5032] netlink: 32 bytes leftover after parsing attributes in process `syz.1.35'. [ 37.127463][ T5035] netlink: 40 bytes leftover after parsing attributes in process `syz.3.39'. [ 37.190595][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.274301][ T30] audit: type=1326 audit(37.260:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5010 comm="syz.1.35" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a777aa8 code=0x7fc00000 [ 37.967604][ T5062] set_capacity_and_notify: 1 callbacks suppressed [ 37.967641][ T5062] loop3: detected capacity change from 0 to 1024 [ 37.980648][ T5062] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 37.995392][ T5066] Bluetooth: MGMT ver 1.23 [ 37.997146][ T5066] netlink: 40 bytes leftover after parsing attributes in process `syz.0.47'. [ 38.108161][ T5073] loop0: detected capacity change from 0 to 512 [ 38.120145][ T5073] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.48: inode has both inline data and extents flags [ 38.120175][ T5073] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 38.120320][ T5073] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.48: couldn't read orphan inode 15 (err -117) [ 38.120333][ T5073] loop0: lost filesystem error report for type 5 error -117 [ 38.121230][ T5073] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.170650][ T5076] syzkaller0: entered promiscuous mode [ 38.171852][ T5076] syzkaller0: entered allmulticast mode [ 38.267895][ T4707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 38.342485][ T5085] loop1: detected capacity change from 0 to 512 [ 38.353420][ T5090] loop2: detected capacity change from 0 to 256 [ 38.434438][ T5103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.57'. [ 38.459390][ T5105] Zero length message leads to an empty skb [ 38.473775][ T4709] Bluetooth: hci3: command tx timeout [ 38.474160][ T4709] Bluetooth: hci4: command tx timeout [ 38.474184][ T4709] Bluetooth: hci2: command tx timeout [ 38.474202][ T4709] Bluetooth: hci0: command tx timeout [ 38.474220][ T4709] Bluetooth: hci1: command tx timeout [ 38.478833][ T5110] loop3: detected capacity change from 0 to 256 [ 38.593131][ T5129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.64'. [ 38.649302][ T30] audit: type=1326 audit(38.640:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5125 comm="syz.2.65" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8b77aa8 code=0x0 [ 38.655212][ T5135] tipc: Started in network mode [ 38.655241][ T5135] tipc: Node identity 4, cluster identity 4711 [ 38.655249][ T5135] tipc: Node number set to 4 [ 38.670397][ T5137] loop1: detected capacity change from 0 to 256 [ 38.687783][ T5137] FAT-fs (loop1): Directory bread(block 64) failed [ 38.689502][ T5137] FAT-fs (loop1): Directory bread(block 65) failed [ 38.690844][ T5137] FAT-fs (loop1): Directory bread(block 66) failed [ 38.692136][ T5137] FAT-fs (loop1): Directory bread(block 67) failed [ 38.693746][ T5137] FAT-fs (loop1): Directory bread(block 68) failed [ 38.693798][ T5137] FAT-fs (loop1): Directory bread(block 69) failed [ 38.693829][ T5137] FAT-fs (loop1): Directory bread(block 70) failed [ 38.693842][ T5137] FAT-fs (loop1): Directory bread(block 71) failed [ 38.693867][ T5137] FAT-fs (loop1): Directory bread(block 72) failed [ 38.693878][ T5137] FAT-fs (loop1): Directory bread(block 73) failed [ 38.730129][ T5139] loop1: detected capacity change from 0 to 512 [ 38.794347][ T5141] can0: slcan on ttyS3. [ 38.845617][ T5141] can0 (unregistered): slcan off ttyS3. [ 38.847334][ T5141] capability: warning: `syz.1.67' uses 32-bit capabilities (legacy support in use) [ 38.899336][ T5147] loop4: detected capacity change from 0 to 128 [ 38.900047][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.909088][ T5147] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.940070][ T5151] loop0: detected capacity change from 0 to 1024 [ 38.940620][ T4714] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.949998][ T5151] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 38.960647][ T5151] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.70: Invalid block bitmap block 0 in block_group 0 [ 38.960677][ T5151] loop0: lost filesystem error report for type 5 error -117 [ 38.963462][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 38.963486][ C0] EXT4-fs (loop0): initial error at time 38: ext4_read_block_bitmap_nowait:483 [ 38.963511][ C0] EXT4-fs (loop0): last error at time 38: ext4_read_block_bitmap_nowait:483 [ 38.970183][ T5151] Quota error (device loop0): write_blk: dquota write failed [ 38.970221][ T5151] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 38.970254][ T5151] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.70: Failed to acquire dquot type 0 [ 38.970270][ T5151] loop0: lost filesystem error report for type 5 error -117 [ 38.977361][ T5151] EXT4-fs error (device loop0): ext4_free_blocks:6718: comm syz.0.70: Freeing blocks not in datazone - block = 0, count = 4096 [ 38.977397][ T5151] loop0: lost filesystem error report for type 5 error -117 [ 38.982248][ T5151] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.70: Invalid inode bitmap blk 0 in block_group 0 [ 38.988247][ T5151] loop0: lost filesystem error report for type 5 error -117 [ 38.989042][ T5151] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 38.989082][ T5151] loop0: lost filesystem error report for type 5 error -117 [ 38.992132][ T5151] EXT4-fs (loop0): 1 orphan inode deleted [ 38.992615][ T5151] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.000544][ T5155] netlink: 24 bytes leftover after parsing attributes in process `syz.4.71'. [ 39.033641][ T12] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-7 [ 39.033704][ T12] EXT4-fs error (device loop0): ext4_release_dquot:7070: comm kworker/u8:0: Failed to release dquot type 0 [ 39.042524][ T5151] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.136462][ T5181] loop4: detected capacity change from 0 to 1024 [ 39.165928][ T5181] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 39.167726][ T5181] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 39.168053][ T5181] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 39.168144][ T5181] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 39.170640][ T5181] EXT4-fs error (device loop4): ext4_get_journal_inode:5896: inode #17: comm syz.4.75: iget: bad i_size value: 4398046511204 [ 39.170678][ T5181] loop4: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 39.172100][ T5181] EXT4-fs (loop4): no journal found [ 39.329241][ T5192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.77'. [ 39.329271][ T5192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.77'. [ 39.513132][ T5200] binder: BINDER_SET_CONTEXT_MGR already set [ 39.514850][ T5200] binder: 5199:5200 ioctl 4018620d 20004a80 returned -16 [ 39.515489][ T5200] binder: 5199:5200 got transaction to invalid handle, 3 [ 39.515515][ T5200] binder: 5199:5200 cannot find target node [ 39.515531][ T5200] binder: 5199:5200 transaction call to 0:0 failed 2/29201/-22, code 0 size 0-0 line 3236 [ 39.540741][ T4708] binder: undelivered TRANSACTION_ERROR: 29201 [ 39.654303][ T5206] ext4: Unknown parameter 'K' [ 39.780727][ T5209] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 39.780803][ T5209] EXT4-fs: error: could not find journal device path [ 40.439821][ T5211] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 40.440325][ T5211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.83'. [ 40.709520][ T5224] Driver unsupported XDP return value 0 on prog (id 43) dev N/A, expect packet loss! [ 40.844091][ T5227] FAT-fs (loop4): Directory bread(block 64) failed [ 40.846555][ T5227] FAT-fs (loop4): Directory bread(block 65) failed [ 40.846620][ T5227] FAT-fs (loop4): Directory bread(block 66) failed [ 40.846639][ T5227] FAT-fs (loop4): Directory bread(block 67) failed [ 40.846669][ T5227] FAT-fs (loop4): Directory bread(block 68) failed [ 40.846685][ T5227] FAT-fs (loop4): Directory bread(block 69) failed [ 40.846714][ T5227] FAT-fs (loop4): Directory bread(block 70) failed [ 40.846728][ T5227] FAT-fs (loop4): Directory bread(block 71) failed [ 40.846754][ T5227] FAT-fs (loop4): Directory bread(block 72) failed [ 40.846768][ T5227] FAT-fs (loop4): Directory bread(block 73) failed [ 40.876912][ T5216] syz.2.85 uses obsolete (PF_INET,SOCK_PACKET) [ 40.878755][ T5216] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 40.888623][ T5227] syz.4.88: attempt to access beyond end of device [ 40.888623][ T5227] loop4: rw=2049, sector=1192, nr_sectors = 24 limit=256 [ 40.891517][ T5227] syz.4.88: attempt to access beyond end of device [ 40.891517][ T5227] loop4: rw=2049, sector=1216, nr_sectors = 4 limit=256 [ 40.895562][ T5227] syz.4.88: attempt to access beyond end of device [ 40.895562][ T5227] loop4: rw=2049, sector=1216, nr_sectors = 8 limit=256 [ 40.900420][ T5227] syz.4.88: attempt to access beyond end of device [ 40.900420][ T5227] loop4: rw=2049, sector=1256, nr_sectors = 4 limit=256 [ 40.900688][ T5227] syz.4.88: attempt to access beyond end of device [ 40.900688][ T5227] loop4: rw=2049, sector=1256, nr_sectors = 8 limit=256 [ 40.900795][ T5227] syz.4.88: attempt to access beyond end of device [ 40.900795][ T5227] loop4: rw=2049, sector=1264, nr_sectors = 4 limit=256 [ 40.900971][ T5227] syz.4.88: attempt to access beyond end of device [ 40.900971][ T5227] loop4: rw=2049, sector=1264, nr_sectors = 8 limit=256 [ 40.901074][ T5227] syz.4.88: attempt to access beyond end of device [ 40.901074][ T5227] loop4: rw=2049, sector=1272, nr_sectors = 4 limit=256 [ 40.908521][ T5229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.89'. [ 40.908559][ T5229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.89'. [ 40.914041][ T5227] syz.4.88: attempt to access beyond end of device [ 40.914041][ T5227] loop4: rw=2049, sector=1272, nr_sectors = 8 limit=256 [ 40.914173][ T5227] syz.4.88: attempt to access beyond end of device [ 40.914173][ T5227] loop4: rw=2049, sector=1280, nr_sectors = 4 limit=256 [ 41.565500][ T5232] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 41.567532][ T5232] EXT4-fs error (device loop0): ext4_free_blocks:6718: comm syz.0.90: Freeing blocks not in datazone - block = 0, count = 16 [ 41.608683][ T5237] EXT4-fs: Ignoring removed nobh option [ 41.610183][ T5237] EXT4-fs: old and new quota format mixing [ 41.621068][ T5242] Filesystem uses "xz" compression. This is not supported [ 41.622737][ T5242] Filesystem uses "xz" compression. This is not supported [ 41.652995][ T30] audit: type=1326 audit(41.640:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5231 comm="syz.0.90" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffafd77aa8 code=0x0 [ 41.659759][ T5242] Filesystem uses "xz" compression. This is not supported [ 41.662742][ T5242] Filesystem uses "xz" compression. This is not supported [ 41.690420][ T5242] Filesystem uses "xz" compression. This is not supported [ 41.709931][ T5242] Filesystem uses "xz" compression. This is not supported [ 41.718686][ T5242] Filesystem uses "xz" compression. This is not supported [ 41.792131][ T5248] netlink: 16 bytes leftover after parsing attributes in process `syz.1.91'. [ 42.208966][ T5242] Filesystem uses "xz" compression. This is not supported [ 42.347484][ T5242] Filesystem uses "xz" compression. This is not supported [ 42.352714][ T5242] Filesystem uses "xz" compression. This is not supported [ 42.361740][ T5242] Filesystem uses "xz" compression. This is not supported [ 42.562352][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 42.783828][ T5161] Bluetooth: hci5: Frame reassembly failed (-84) [ 42.784366][ T5273] Bluetooth: hci5: Frame reassembly failed (-84) [ 43.169551][ T5313] set_capacity_and_notify: 17 callbacks suppressed [ 43.169585][ T5313] loop4: detected capacity change from 0 to 512 [ 43.173599][ T5313] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 43.173625][ T5313] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 43.189046][ T5313] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 43.189762][ T5313] EXT4-fs (loop4): 1 truncate cleaned up [ 43.190214][ T5313] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.267394][ T5317] loop3: detected capacity change from 0 to 512 [ 43.268566][ T5317] journal_path: Lookup failure for './file1' [ 43.268580][ T5317] EXT4-fs: error: could not find journal device path [ 43.270720][ T5317] fuse: fd is not a fuse device [ 44.067972][ T4714] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.088315][ T5329] loop4: detected capacity change from 0 to 8 [ 44.100277][ T5329] bridge_slave_0: left allmulticast mode [ 44.100306][ T5329] bridge_slave_0: left promiscuous mode [ 44.100409][ T5329] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.112844][ T5329] bridge_slave_1: left allmulticast mode [ 44.113643][ T5329] bridge_slave_1: left promiscuous mode [ 44.113743][ T5329] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.124147][ T5329] bond0: (slave bond_slave_0): Releasing backup interface [ 44.151002][ T5330] SQUASHFS error: Unable to read inode 0xa7 [ 44.161101][ T5329] bond0: (slave bond_slave_1): Releasing backup interface [ 44.178566][ T5329] team0: Port device team_slave_0 removed [ 44.181900][ T5329] team0: Port device team_slave_1 removed [ 44.185268][ T5329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.186729][ T5329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.189193][ T5329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.190778][ T5329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.195080][ T5329] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 44.256308][ T5336] netlink: 40 bytes leftover after parsing attributes in process `syz.3.120'. [ 44.461682][ T5344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.123'. [ 44.536268][ T5357] loop3: detected capacity change from 0 to 256 [ 44.544793][ T5357] overlay: filesystem on ./file0 not supported [ 44.548301][ T5357] random: crng reseeded on system resumption [ 44.555409][ T5354] netlink: 36 bytes leftover after parsing attributes in process `syz.4.126'. [ 44.644937][ T5371] netlink: 28 bytes leftover after parsing attributes in process `syz.3.131'. [ 44.654635][ T5371] netlink: 56 bytes leftover after parsing attributes in process `syz.3.131'. [ 44.661870][ T5373] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.133'. [ 44.718605][ T5383] faux_driver vkms: [drm] Unknown color mode 11; guessing buffer size. [ 44.720834][ T5383] loop1: detected capacity change from 0 to 512 [ 44.722370][ T5383] vfat: Unknown parameter '9ۣM ܱ D' [ 44.785542][ T5391] loop3: detected capacity change from 0 to 512 [ 44.805572][ T4709] Bluetooth: hci5: command 0x1003 tx timeout [ 44.805657][ T50] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 44.817429][ T5391] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.871561][ T5400] loop1: detected capacity change from 0 to 8192 [ 44.880357][ T5396] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.883141][ T5400] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 44.935510][ T5401] wg1 speed is unknown, defaulting to 1000 [ 44.935554][ T5401] wg1 speed is unknown, defaulting to 1000 [ 44.936140][ T5401] wg1 speed is unknown, defaulting to 1000 [ 44.936997][ T5401] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 44.938667][ T5401] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 44.975142][ T5401] wg1 speed is unknown, defaulting to 1000 [ 44.975573][ T5401] wg1 speed is unknown, defaulting to 1000 [ 44.981109][ T4707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.985988][ T5401] wg1 speed is unknown, defaulting to 1000 [ 44.986361][ T5401] wg1 speed is unknown, defaulting to 1000 [ 44.986700][ T5401] wg1 speed is unknown, defaulting to 1000 [ 45.060389][ T5410] tracefs: Unknown parameter '0x0000000000000000' [ 45.246431][ T5412] binfmt_misc: register: failed to install interpreter file ./file0 [ 45.274886][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 45.301852][ T5396] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.332210][ T5418] netlink: 32 bytes leftover after parsing attributes in process `syz.3.147'. [ 45.465013][ T5424] loop3: detected capacity change from 0 to 2048 [ 45.559934][ T5414] syz_tun: entered allmulticast mode [ 45.560346][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 45.572486][ T5421] syz_tun (unregistering): left allmulticast mode [ 45.577133][ T5424] loop3: p1 < > [ 45.596890][ T4699] udevd[4699]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 45.612232][ T5426] loop3: detected capacity change from 0 to 1024 [ 45.626180][ T5426] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 45.653805][ T5396] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.659689][ T5426] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.148: bg 0: block 112: padding at end of block bitmap is not set [ 45.662128][ T5426] EXT4-fs (loop3): Remounting filesystem read-only [ 45.672782][ T4707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 45.690128][ T5430] loop3: detected capacity change from 0 to 256 [ 45.705865][ T5430] FAT-fs (loop3): IO charset cp93Klfortname=lower not found [ 45.715330][ T5396] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.742326][ T5430] FAT-fs (loop3): IO charset cp93Klfortname=lower not found [ 45.857574][ T5445] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.868286][ T5162] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.875688][ T5185] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.898930][ T5448] netlink: 19 bytes leftover after parsing attributes in process `syz.2.155'. [ 45.900811][ T4706] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.906567][ T5448] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 45.925762][ T5172] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.925966][ T5185] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.926743][ T5452] ext4: Unknown parameter 'euid<00000000000000000000' [ 46.004419][ T5461] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 46.054547][ T5463] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.060633][ T5463] EXT4-fs error (device loop0): ext4_validate_block_bitmap:423: comm syz.0.161: bg 0: bad block bitmap checksum [ 46.091618][ T5463] netlink: 'syz.0.161': attribute type 2 has an invalid length. [ 46.091644][ T5463] netlink: 'syz.0.161': attribute type 11 has an invalid length. [ 46.091667][ T5463] netlink: 132 bytes leftover after parsing attributes in process `syz.0.161'. [ 46.101241][ T5474] netlink: 192 bytes leftover after parsing attributes in process `syz.1.165'. [ 46.125925][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.146984][ T5484] vfat: Unknown parameter 'nonum' [ 46.207238][ T5497] netlink: 'syz.3.171': attribute type 12 has an invalid length. [ 46.207713][ T5497] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 46.247385][ T5499] netlink: 'syz.0.173': attribute type 1 has an invalid length. [ 46.247414][ T5499] netlink: 'syz.0.173': attribute type 2 has an invalid length. [ 46.251213][ T50] Bluetooth: hci1: unexpected subevent 0x1a length: 10 > 6 [ 46.286446][ T5504] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 46.291456][ T5504] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 46.295613][ T5504] EXT4-fs error (device loop2): htree_dirblock_to_tree:1051: inode #2: comm syz.2.175: Directory block failed checksum [ 46.299418][ T5504] netlink: 'syz.2.175': attribute type 1 has an invalid length. [ 46.316084][ T5504] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.327949][ T5504] bond1: (slave ip6gretap1): making interface the new active one [ 46.330114][ T5504] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 46.350059][ T5504] veth3: entered promiscuous mode [ 46.351505][ T5504] bond1: (slave veth3): Enslaving as an active interface with a down link [ 46.362757][ T5504] erspan0: entered allmulticast mode [ 46.376803][ T5504] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 46.404396][ T5504] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 46.437274][ T5523] EXT4-fs (loop0): bs(8192) > ps(4096) unsupported for encrypt [ 46.476118][ T4715] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.509173][ T5521] netlink: 'syz.1.180': attribute type 10 has an invalid length. [ 46.525830][ T5521] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 46.529709][ T5521] team0: Port device netdevsim1 added [ 46.532041][ T5521] Injecting memory failure for pfn 0x121201 at process virtual address 0x20001000 [ 46.536220][ T5521] Memory failure: 0x121201: Sending SIGBUS to syz.1.180:5521 due to hardware memory corruption [ 46.538336][ T5521] Memory failure: 0x121201: recovery action for unsplit thp: Failed [ 46.580001][ T5535] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 46.582178][ T5535] Cannot find add_set index 0 as target [ 46.665281][ T30] audit: type=1326 audit(46.660:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5539 comm="syz.2.185" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8b77aa8 code=0x7ffc0000 [ 46.665698][ T30] audit: type=1326 audit(46.660:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5539 comm="syz.2.185" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8b77aa8 code=0x7ffc0000 [ 46.665763][ T30] audit: type=1326 audit(46.660:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5539 comm="syz.2.185" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8b77aa8 code=0x7ffc0000 [ 46.665953][ T30] audit: type=1326 audit(46.660:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5539 comm="syz.2.185" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8b77aa8 code=0x7ffc0000 [ 46.666036][ T30] audit: type=1326 audit(46.660:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5539 comm="syz.2.185" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffa8b77aa8 code=0x7ffc0000 [ 46.666150][ T30] audit: type=1326 audit(46.660:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5539 comm="syz.2.185" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8b77aa8 code=0x7ffc0000 [ 46.666220][ T30] audit: type=1326 audit(46.660:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5539 comm="syz.2.185" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8b77aa8 code=0x7ffc0000 [ 46.666337][ T30] audit: type=1326 audit(46.660:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5539 comm="syz.2.185" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffa8b5a96c code=0x7ffc0000 [ 46.667505][ T30] audit: type=1326 audit(46.660:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5539 comm="syz.2.185" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffa8b5a96c code=0x7ffc0000 [ 46.668702][ T30] audit: type=1326 audit(46.660:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5539 comm="syz.2.185" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffa8b5a96c code=0x7ffc0000 [ 46.778405][ T50] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 46.850678][ T5558] vfat: Unknown parameter '' [ 47.103819][ T5578] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.503145][ T5172] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 47.507507][ T5172] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 47.511361][ T5172] EXT4-fs (loop4): This should not happen!! Data will be lost [ 47.511361][ T5172] [ 47.513313][ T5172] EXT4-fs (loop4): Total free blocks count 0 [ 47.515775][ T5172] EXT4-fs (loop4): Free/Dirty block details [ 47.517402][ T5172] EXT4-fs (loop4): free_blocks=4096 [ 47.518478][ T5172] EXT4-fs (loop4): dirty_blocks=512 [ 47.522769][ T5172] EXT4-fs (loop4): Block reservation details [ 47.522789][ T5172] EXT4-fs (loop4): i_reserved_data_blocks=32 [ 47.527032][ T1329] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 47.529574][ T4714] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 48.286154][ T5597] syzkaller0: entered promiscuous mode [ 48.286186][ T5597] syzkaller0: entered allmulticast mode [ 48.290828][ T5594] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.708315][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.781075][ T5615] netlink: 'syz.4.208': attribute type 1 has an invalid length. [ 48.841165][ T5621] netlink: 'syz.4.210': attribute type 10 has an invalid length. [ 48.846619][ T5621] team0: Port device dummy0 added [ 48.858232][ T5621] netlink: 'syz.4.210': attribute type 10 has an invalid length. [ 48.865605][ T5621] team0: Port device dummy0 removed [ 48.867246][ T5621] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 48.967394][ T5627] Injecting memory failure for pfn 0x12046d at process virtual address 0x20ffe000 [ 48.970246][ T5627] Memory failure: 0x12046d: recovery action for clean LRU page: Recovered [ 48.970613][ T5627] Injecting memory failure for pfn 0x121abe at process virtual address 0x20fff000 [ 48.970717][ T5627] Memory failure: 0x121abe: recovery action for clean LRU page: Recovered [ 49.119508][ T5646] set_capacity_and_notify: 13 callbacks suppressed [ 49.122274][ T5646] loop3: detected capacity change from 0 to 1024 [ 49.147317][ T5653] loop0: detected capacity change from 0 to 1024 [ 49.168742][ T5655] loop3: detected capacity change from 0 to 512 [ 49.168749][ T5653] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.169071][ T5655] EXT4-fs: Ignoring removed mblk_io_submit option [ 49.172605][ T5655] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 49.175884][ T5655] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 49.176033][ T5655] EXT4-fs (loop3): orphan cleanup on readonly fs [ 49.177452][ T5655] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.222: Invalid block bitmap block 0 in block_group 0 [ 49.177467][ T5655] loop3: lost filesystem error report for type 5 error -117 [ 49.179588][ T5655] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.222: Invalid block bitmap block 0 in block_group 0 [ 49.179603][ T5655] loop3: lost filesystem error report for type 5 error -117 [ 49.180391][ T5655] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.222: Invalid block bitmap block 0 in block_group 0 [ 49.180413][ T5655] loop3: lost filesystem error report for type 5 error -117 [ 49.180600][ T5655] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.222: Failed to acquire dquot type 1 [ 49.180612][ T5655] loop3: lost filesystem error report for type 5 error -28 [ 49.180822][ T5655] EXT4-fs (loop3): 1 orphan inode deleted [ 49.181723][ T5173] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:18: Failed to release dquot type 1 [ 49.181736][ T5173] loop3: lost filesystem error report for type 5 error -117 [ 49.183446][ C0] EXT4-fs (loop3): error count since last fsck: 5 [ 49.183460][ C0] EXT4-fs (loop3): last error at time 49: ext4_release_dquot:7070 [ 49.185807][ T5655] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.201361][ T4707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.284686][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.294040][ T5670] ================================================================== [ 49.294053][ T5670] BUG: KASAN: slab-use-after-free in dvb_frontend_release+0x374/0x414 [ 49.294072][ T5670] Read of size 4 at addr ffff0000cc3afe3c by task syz.1.226/5670 [ 49.294079][ T5670] [ 49.294083][ T5670] CPU: 1 UID: 0 PID: 5670 Comm: syz.1.226 Not tainted syzkaller #0 PREEMPT [ 49.294092][ T5670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 49.294096][ T5670] Call trace: [ 49.294099][ T5670] show_stack+0x2c/0x3c (C) [ 49.294111][ T5670] __dump_stack+0x30/0x40 [ 49.294121][ T5670] dump_stack_lvl+0xd8/0x12c [ 49.294131][ T5670] print_address_description+0xb0/0x238 [ 49.294139][ T5670] print_report+0x68/0x84 [ 49.294145][ T5670] kasan_report+0x8c/0xc4 [ 49.294155][ T5670] __asan_report_load4_noabort+0x20/0x2c [ 49.294165][ T5670] dvb_frontend_release+0x374/0x414 [ 49.294173][ T5670] __fput+0x340/0x744 [ 49.294180][ T5670] ____fput+0x20/0x30 [ 49.294187][ T5670] task_work_run+0x1c4/0x254 [ 49.294196][ T5670] exit_to_user_mode_loop+0x10c/0x17c [ 49.294205][ T5670] el0_svc+0x18c/0x260 [ 49.294213][ T5670] el0t_64_sync_handler+0x48/0x148 [ 49.294220][ T5670] el0t_64_sync+0x198/0x19c [ 49.294228][ T5670] [ 49.294229][ T5670] Allocated by task 1: [ 49.294233][ T5670] kasan_save_track+0x40/0x78 [ 49.294240][ T5670] kasan_save_alloc_info+0x44/0x54 [ 49.294248][ T5670] __kasan_kmalloc+0x9c/0xb4 [ 49.294255][ T5670] __kmalloc_cache_noprof+0x2d4/0x624 [ 49.294263][ T5670] dvb_register_device+0x1ac/0x16ec [ 49.294271][ T5670] dvb_register_frontend+0x464/0x698 [ 49.294278][ T5670] vidtv_bridge_probe+0x57c/0xa24 [ 49.294286][ T5670] platform_probe+0xfc/0x198 [ 49.294294][ T5670] really_probe+0x2a8/0x7e8 [ 49.294299][ T5670] __driver_probe_device+0x1e0/0x33c [ 49.294305][ T5670] driver_probe_device+0x6c/0x19c [ 49.294310][ T5670] __driver_attach+0x164/0x374 [ 49.294315][ T5670] bus_for_each_dev+0x128/0x1b4 [ 49.294323][ T5670] driver_attach+0x4c/0x5c [ 49.294328][ T5670] bus_add_driver+0x208/0x4fc [ 49.294336][ T5670] driver_register+0x220/0x30c [ 49.294341][ T5670] __platform_driver_register+0x6c/0x80 [ 49.294348][ T5670] vidtv_bridge_init+0x34/0x5c [ 49.294357][ T5670] do_one_initcall+0x274/0xc20 [ 49.294365][ T5670] do_initcall_level+0x128/0x1c4 [ 49.294372][ T5670] do_initcalls+0x70/0xd0 [ 49.294377][ T5670] do_basic_setup+0x7c/0x90 [ 49.294383][ T5670] kernel_init_freeable+0x268/0x3a8 [ 49.294389][ T5670] kernel_init+0x24/0x1dc [ 49.294401][ T5670] ret_from_fork+0x10/0x20 [ 49.294406][ T5670] [ 49.294408][ T5670] Freed by task 5670: [ 49.294412][ T5670] kasan_save_track+0x40/0x78 [ 49.294419][ T5670] kasan_save_free_info+0x58/0x70 [ 49.294429][ T5670] __kasan_slab_free+0x74/0xa4 [ 49.294437][ T5670] kfree+0x188/0x690 [ 49.294443][ T5670] dvb_device_put+0x64/0xd0 [ 49.294451][ T5670] dvb_generic_release+0xec/0x154 [ 49.294459][ T5670] dvb_frontend_release+0x114/0x414 [ 49.294465][ T5670] __fput+0x340/0x744 [ 49.294470][ T5670] ____fput+0x20/0x30 [ 49.294476][ T5670] task_work_run+0x1c4/0x254 [ 49.294483][ T5670] exit_to_user_mode_loop+0x10c/0x17c [ 49.294489][ T5670] el0_svc+0x18c/0x260 [ 49.294494][ T5670] el0t_64_sync_handler+0x48/0x148 [ 49.294500][ T5670] el0t_64_sync+0x198/0x19c [ 49.294505][ T5670] [ 49.294507][ T5670] The buggy address belongs to the object at ffff0000cc3afe00 [ 49.294507][ T5670] which belongs to the cache kmalloc-256 of size 256 [ 49.294512][ T5670] The buggy address is located 60 bytes inside of [ 49.294512][ T5670] freed 256-byte region [ffff0000cc3afe00, ffff0000cc3aff00) [ 49.294519][ T5670] [ 49.294521][ T5670] The buggy address belongs to the physical page: [ 49.294525][ T5670] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff0000cc3af000 pfn:0x10c3ae [ 49.294532][ T5670] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 49.294538][ T5670] flags: 0x5ffc00000000240(workingset|head|node=0|zone=2|lastcpupid=0x7ff) [ 49.294546][ T5670] page_type: f5(slab) [ 49.294553][ T5670] raw: 05ffc00000000240 ffff0000c0001b40 fffffdffc3363810 fffffdffc32ba790 [ 49.294559][ T5670] raw: ffff0000cc3af000 0000000800100005 00000000f5000000 0000000000000000 [ 49.294564][ T5670] head: 05ffc00000000240 ffff0000c0001b40 fffffdffc3363810 fffffdffc32ba790 [ 49.294570][ T5670] head: ffff0000cc3af000 0000000800100005 00000000f5000000 0000000000000000 [ 49.294576][ T5670] head: 05ffc00000000001 fffffdffc330eb81 00000000ffffffff 00000000ffffffff [ 49.294581][ T5670] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 49.294584][ T5670] page dumped because: kasan: bad access detected [ 49.294587][ T5670] [ 49.294588][ T5670] Memory state around the buggy address: [ 49.294592][ T5670] ffff0000cc3afd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 49.294597][ T5670] ffff0000cc3afd80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 49.294601][ T5670] >ffff0000cc3afe00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 49.294604][ T5670] ^ [ 49.294608][ T5670] ffff0000cc3afe80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 49.294612][ T5670] ffff0000cc3aff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 49.294615][ T5670] ================================================================== [ 49.311460][ T5674] loop0: detected capacity change from 0 to 128 [ 49.318272][ T5670] Disabling lock debugging due to kernel taint [ 49.643485][ T4708] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 49.793449][ T4708] usb 1-1: Using ep0 maxpacket: 16 [ 49.795367][ T4708] usb 1-1: config index 0 descriptor too short (expected 65532, got 18) [ 49.796792][ T4708] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 49.798260][ T4708] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 49.799735][ T4708] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 49.799749][ T4708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.799760][ T4708] usb 1-1: Product: syz [ 49.799767][ T4708] usb 1-1: Manufacturer: syz [ 49.799773][ T4708] usb 1-1: SerialNumber: syz [ 49.803840][ T4708] r8152-cfgselector 1-1: Unknown version 0x0000 [ 49.803850][ T4708] r8152-cfgselector 1-1: config 0 descriptor?? [ 52.322898][ T866] r8152-cfgselector 1-1: USB disconnect, device number 2