last executing test programs: 4.641439419s ago: executing program 4 (id=291): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21081e, &(0x7f0000000380)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0x1, 0x51b, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) pwritev2(r0, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) 4.489352091s ago: executing program 4 (id=295): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000019c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001a80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20040002) r3 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@remote, 0x800, 0x0, 0x103, 0xb}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0fdffffb70200000800fff818230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000004f00000095"], &(0x7f0000000300)='GPL\x00', 0x8}, 0x94) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r6, 0x1, 0x23, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r6, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb3}, 0x2}], 0x1, 0x10100, 0x0) sendmsg$inet6(r4, &(0x7f0000000080)={&(0x7f0000000000)={0xa, 0x4e23, 0x80000, @mcast1, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1400000000000000290000000300"], 0x18}, 0x0) sendto$inet6(r4, &(0x7f00000000c0)="bf48ec3915ba9b9103ecf76b0b7eb5f1e3bb84b95474331594535a18ad9652982ad908f22645ea0efdb7dafa010b1a1e45b3839b13723bba93cf996998bb088e8de86fe2c420c9894984db617f958ee360298406c68fb383bf47d83dcfc57cc680bd42c27e0754f67696997fa77837d5699a54cd3866a1fae864e3f366", 0x7d, 0x44000, &(0x7f0000000180)={0xa, 0x4e23, 0xc, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) 3.656854898s ago: executing program 4 (id=307): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) io_uring_setup(0x7f, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x8000) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_DISEQC_RESET_OVERLOAD(r1, 0x6f3e, 0x0) connect$x25(r0, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) mmap(&(0x7f0000ffd000/0x3000)=nil, 0xfffffffff000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x739040) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) ioctl$BLKBSZSET(r2, 0x40081271, 0xffffffffffffffff) 3.645362042s ago: executing program 4 (id=308): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0x0, 0x3, 0x10001, 0x8}, 0x4b}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2) close(r2) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00073c001400004000ff1100000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x9124) ioctl$TCFLSH(r0, 0x400455c8, 0x400000009) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 2.780998507s ago: executing program 1 (id=321): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x28, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}]}, 0x40}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r0) r3 = timerfd_create(0x8, 0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1ec) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x400a8, 0x0, 0x5, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x921c18, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2125099, 0x0) syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000c00)=ANY=[], 0x3, 0x0, 0x0) r4 = timerfd_create(0x8, 0x0) timerfd_settime(r4, 0x0, &(0x7f0000000100)={{}, {0x77359400}}, 0x0) timerfd_settime(r3, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timerfd_gettime(r3, 0x0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x34, r2, 0x1, 0x7ffffc, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x100000}}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}}, 0x0) 2.720152541s ago: executing program 1 (id=325): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x10040) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e22, 0x3, @remote, 0xba}}, 0x0, 0x0, 0x33, 0x0, "ee57832bb22e9cbad7cd67a170e00a5b47a16053732f20ce66ed4dc6f9ba1dfb8c8db5c0fa69005ed1bb3ec574c0504cef31e2c71a06f94bbc7fc4ae5cbd1afdd36d13536f2f07e425685054625d3e84"}, 0xd8) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c20000000800450000b0000000000011907800000000000000004e214e20009c907801000000030000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2600dcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd0000000000bcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b34734b9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) recvfrom(r2, 0x0, 0x0, 0x40000200, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450c0028000000000806907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="4c0800ca904c970251119bd6035c9c3666472b2113950f54b37a31612ea254e0059fc406c0efbaa6c9f01eea6632e72732ab09928c1bf636054a1f9592dcfb50632dea83acc25c1afea1c3b2169035ecda9ffde5fc4979fae265c575e50fe1e6ef9e77b89551"], 0x0) sendmmsg$inet6(r0, &(0x7f0000002f00)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00', 0xcd89}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000180)='; ', 0x2}], 0x1}}, {{&(0x7f00000002c0)={0xa, 0x4e20, 0x2, @private1, 0x8}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000540)=';', 0x1}], 0x1}}, {{&(0x7f0000000840)={0xa, 0x4e23, 0x800, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000001d80)=[{&(0x7f0000001cc0)='l', 0x1}], 0x1}}], 0x3, 0x4004851) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x10001) renameat2(0xffffffffffffff9c, &(0x7f0000000300)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r3, 0xc02464bb, &(0x7f0000000180)={0x2, 0x0, 0xe13, 0x7ffffff5}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000300)=""/128, 0x80}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)}, {&(0x7f00000018c0)=""/200, 0xc8}, {&(0x7f00000019c0)=""/36, 0x24}, {&(0x7f0000001a00)=""/188, 0xbc}, {&(0x7f00000003c0)=""/99, 0x63}], 0x7, &(0x7f0000001dc0)=""/4096, 0x1000}, 0xff}], 0x1, 0x40000002, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x18, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 1.855675118s ago: executing program 1 (id=335): ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0xad3c3b, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = inotify_init1(0x800) r1 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x44000160) r2 = dup(r0) inotify_rm_watch(r2, r1) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000280)) mount$nfs4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x106c0e0, &(0x7f00000006c0)={[{'inode64'}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb, 0x2) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x40, 0x0, 0x0, 0x80000001}, {0x6}]}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xfe, 0x10000000, &(0x7f0000000100)="b9ff03006044238cb89e14f088a81bff88a800008100630677fbac141442e934a0a662079f4b4dfe87e5feca6aab845013f288a81a3908020b098da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000e00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r7, &(0x7f0000002e40)={0x18, 0x0, r8, {0x7ff}}, 0x18) setsockopt$inet6_int(r6, 0x29, 0x33, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeed, 0x8031, 0xffffffffffffffff, 0xe014f000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x64) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000001c0)={0x9, 0x2, 0x1}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x8, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'X\x00\b\x00'}}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002e80)=ANY=[@ANYBLOB="340000000606010400000000000000000a000001050001000700000f8145eaa4a06b00090003320c797a32000000000900020073797a3100000020ee284814afecab9e573886927d086b712e"], 0x34}, 0x1, 0x0, 0x0, 0x40004004}, 0x4000) 1.740168881s ago: executing program 0 (id=336): prlimit64(0x0, 0x2, &(0x7f0000000040), 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4008, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x193042, 0x0) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50}, 0x2000) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000001200)={'gre0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x4b) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) (async) landlock_restrict_self(0xffffffffffffffff, 0x4) (async) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x200, 0x2, 0x7}, 0x18, 0x7) landlock_restrict_self(r1, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x2c800) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xa02, 0xcf) sendfile(r2, r2, 0x0, 0x2) 1.736159012s ago: executing program 0 (id=337): lsm_get_self_attr(0x68, 0x0, &(0x7f0000000200), 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYRESDEC], 0x8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0x5428, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071118200000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 1.661447915s ago: executing program 0 (id=338): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7ffffffffffe, 0x2) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa01"], 0x18) fstat(r0, 0xfffffffffffffffe) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)="9a22e0ca583726c036e326fb8bf5c205430cb6740058c916efac065e668c2faa0b4db1adc313c2ebeaaf75dbbdde3dbcf247c596ded4f4a6fa9db08b7b6ea9a3d420a25de444c3c6b04522154070c5faf3380bb7d558", 0x56, r0}, 0x68) ioctl$XFS_IOC_FSGEOMETRY(r1, 0x8100587e, &(0x7f00000001c0)) 1.661018267s ago: executing program 0 (id=339): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0xa800, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x40, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x5) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) sendmsg$NL80211_CMD_GET_MPATH(r6, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='E\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000327bd7000ffdbdf25150000000a00060008021100000000000a001a0008021100000000000a000600ffffffffffff0000"], 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x80) writev(r4, &(0x7f0000000600)=[{&(0x7f0000000040)='X', 0x1}], 0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8081, 0x0, 0x0) accept(r3, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaafffffffffff486dd604dd31800180600fc010000000000000000000000000000fe8000010000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078000002020000"], 0x0) 1.489204591s ago: executing program 1 (id=343): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x40000) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f0000000040)={0x5, 0x34325241, 0xf00, 0x870, 0x3, @stepwise={{0x1, 0x3}, {0x0, 0x92e}, {0xa, 0x6}}}) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="380000002d000100000000001f00000000000000", @ANYRES32, @ANYBLOB="0b000080976b64086860300014000180325531db20a2d0431d1ef0f29674d908"], 0x38}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="350d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 1.484147208s ago: executing program 2 (id=344): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x44, r2, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x44}}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x144, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0x9a, 0xa8, @random="a88421f56c57c809c2b4299972eaefee00debbc7dda29a06fc3ff6cbf3649c9c61b761950e98fcbdfa35a16cc62fe429e728b27e3c2d0317ae1120098b2844cb78b23dd8404acea96c5f531252608093570b85eea28deebb35daba5f06af8e4cbc7877162ff73b6a90c8cb36397b9454703ed6cfe831e0ca2111c923fd7454bd43d5c20a15f00691ee830a62f37e2e167aa396de6316"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x144}}, 0xc081) (async) syz_read_part_table(0x1057, &(0x7f0000001080)="$eJzsz0FqwlAYBOBpSJMUSrvutifoGXoHD+R1XHkKQRCvI278JQnJEdTF963+mYEHLzxVk+r6qm4KH0t7raohTfI25yFt8j0Wk+5zOZJ8tdO5/03O67On9mec++TvP7nVbLvuh0sd35PN7gFfBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICXdw8AAP//pUAXbQ==") 1.393290585s ago: executing program 1 (id=346): r0 = getpid() r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000000)=0x7, 0x4) getsockopt$inet6_int(r2, 0x29, 0x10, 0x0, &(0x7f0000000180)) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x40100, 0x0, 0x11}, 0x18) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000007c0)={0x7, 0x2, {r0}, {0xee00}, 0x9, 0x8000000000000001}) r5 = syz_open_procfs(r4, &(0x7f0000000240)='clear_refs\x00') writev(r5, &(0x7f0000003080)=[{&(0x7f0000000900)="d971645ff1fb8e11027f475fcc4421ac49609b4531009c6bac207fe873f68a8e902a2f18bc3aebdd4b5a4c7aafd65039c5d8e3ef895fca36d004022ae44373a3a9f7f0591003cb956029d3b520b1b758f4708991eb26a14e8b64a4603bac8f142cb517eaf86c3bc08c", 0x69}, {&(0x7f0000000980)="df67f50dab8d3e2f212a3f62e59acd33d71b94540044bb56a115f0f35e6b70808ebecad0aafaea74d13802d794b83ac18950c05130af66f62bc84737a9f1024bbc8ad041feba98234e1b1e77d09b0777f52dc9d7c87668c79849ee9b90425870944445ae7974", 0x66}, {&(0x7f0000000a00)="c86d8d02c446df8b33ce5e9521f4a9f5788aad7dbc41abfde57f7f6578c872877652e9b4a2d7faa8ddb087080d9be7b48b96ffe6a514", 0x36}, {&(0x7f0000001e40)="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", 0xff5}, {&(0x7f0000002e40)="2a27129fe024348086500f79b626b87e0f722fc2ce6b256acf5da62ba2287d1ffc3602ce4c2c60ff9ac4dc9c34e20a38615e83ff7dfb17a7398ab528e9b6ceece747336b7e3879cf6123b0fb166e87934210f0ca0c4d93a728cdeb2388ad5add1bee050e1b8c1fa208f8ad212d0a9b6adfa6add142b31facc3d2d3065273e8ad998e0ad5ff4a8f85f2592602621b005261f0ced1d79c80013e7726fedc339960f1184dbfce98beb83b72ded336c3daeca7dba86e1a3c7d2479a493cf1d32b45268619dbbc7ac9afffa332aaedbb08314e184ab895c9f0ed4ef1d0e", 0xdb}, {&(0x7f0000002f40)="eac4eddd38dc4f1f804ef3aa3e27c400278e39d37502794100578c01e6a3e3e6de02e356c80afd3853857482d7679fbfec003f369e7033c918813faa7c2cc20983689c6e7f61ea374712fe59a6b7640bcbcde2a68c7ec8c5c6dd7f2582f7a76955c654169042e2825cee6107acfe", 0x6e}, {&(0x7f0000002fc0)="6d1cdb", 0x3}, {&(0x7f0000003000)="828498d229ebe68f34381b542413042a49fdf19b5f99a99da9bcb9a60024a012bf8ff87e3e6ac00e10b4717df0a15356b28367c64b3f9aa31563a1e9227642f556ec7a75c22ed0a467f979fdb229248c1ebb2d646dd45855699b0a4a6c", 0x5d}], 0x8) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="00032dbd7000ffdbdf251a1800000c00cc00"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) move_mount(r3, &(0x7f0000000100)='./file0\x00', r5, &(0x7f0000000140)='./file0\x00', 0x0) r6 = syz_pidfd_open(r0, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000440), 0x10) listen(r7, 0xfffffffe) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000008c0)={0x28, 0x0, 0xffffd8ef, @local}, 0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r9, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) openat(r9, &(0x7f00000002c0)='./file0\x00', 0x40000, 0x83) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[], 0x28}], 0x1}, 0x14008010) writev(r8, &(0x7f0000000800)=[{&(0x7f0000000840)="1db6ed74c738cb28b40c830581fcf00a2c8db5f572ec22607f90b21855ec8820c3880d023e1ef90d", 0x28}], 0x1) r10 = accept4$unix(r7, 0x0, 0x0, 0x0) r11 = semget(0x1, 0x4, 0x39c) semop(r11, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semctl$GETALL(r11, 0x0, 0xd, &(0x7f0000000000)=""/188) recvmsg(r7, &(0x7f0000000680)={&(0x7f00000001c0)=@nfc_llcp, 0x80, &(0x7f0000000540)=[{&(0x7f0000000280)=""/6, 0x6}, {&(0x7f0000000340)=""/112, 0x70}, {&(0x7f00000003c0)=""/117, 0x75}, {&(0x7f0000000480)=""/131, 0x83}], 0x4, &(0x7f0000000580)=""/238, 0xee}, 0x12000) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6) recvmmsg(r10, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) process_madvise(r6, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000000)="915f", 0x2}], 0x2, 0x65, 0x0) 1.38015431s ago: executing program 2 (id=348): r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'team0\x00', &(0x7f00000004c0)=@ethtool_drvinfo={0x3, "f31d16382dd2b23685da25b18683774e20a56e7efe03ba742aa24571e25c4641", "2e2cabb3816fa647d6d2a73840afe25a085978a660e2cac8e5a2884941b6c3f2", "80733a10c676a09dd30c3097cb9148ad2edc01df4482ec757e4fab1f1945d563", "8742edc62f26d44a7d8c42b227f92bbe370e677c92b9a333dc5a0ad92f7beb58", "9ff15b2fd4b3fc1b9bdd4b054a68d2a01758cac89cf30468d50ae436eea2c01e", "952a1d785bbb70442d9a296b", 0x8d0, 0x3, 0x1000, 0x6, 0x5}}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/packet\x00') pread64(r2, &(0x7f0000000180)=""/249, 0xf9, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) lseek(r1, 0x8000000000000001, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000400)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="3c2eec2d96638d4a6adc744fb7466dfe7cb9c6f4c3b122d6acb3f550fca60db85cda1c161b6bdce1bbb5e9e35342b8abbb7f9aed3ad5", @ANYRESHEX=0x0, @ANYBLOB="ab263e3871c208422a9484f7bf9a54c8b0915d237c4345b1f31bb646207626b79509d1be4029648099324d556c88dab10a17d7172bd64e119e44b2198fb8baffbf74722c161fa2e147af245e1974a0e512fdac977d4ba312539655c80b5b1bf7be93e3b807607759db22f44071e7b2667063313fb8ca41ecd11595ffb00475d2f359fa53c2d9229ad5cbfc567f4fde10a76f94a8e77ee6dcd6dfb8b59f142cdaf4fb", @ANYBLOB="14133284949f8641d95434e5e0865dceaa1c6966f99c6560195294238f9303635278a6cd9852a27a159d4f2d8d743241ce56017bfc9cc15702c5a55da414c409ff1c886849bba154a2e9c8431bbb091379445122f25276e3f631a7ac2d7f82f2d0af910b0410d8027a2f4da781e81ddb9f96c51bc0c58250e5dc91a40beea191d9858b7c3a994ba409fb4a9121321951b74f552f023a87b895c3c1728d0796d9ffa810bb37715bd77cb4df7d6dacc3c4fcb879bba5dbbf7a6e56e38bec8d7f58991f610ec024969b6121e1fe31d6691069ca5dfa7c9629070bfce4d7fcfdf0c66b8657b5e4c5ab8b61809c", @ANYRES8=r1], 0xfe, 0x1227, &(0x7f00000024c0)="$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") 1.260442924s ago: executing program 2 (id=351): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x0, 0x4, 0xc}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000100000000000000000000008500000017000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000003000000095", @ANYBLOB="1e61b748ebd6a5a2cc2765753ca14bdbcef5e4d5423273d19fa45eb3e0b2daf6935209c47f24594b79122dfb649c775f8e52871ad62142c81fdb71c464d0b684275a61a6e2c3efb0c22d29507ce23303211a7771b2be3e0dbefbed641e0f56ea5896aa7fca8210edf191bc7492d2fc89f1fcc0c7c2580d6b7b507b1f964fab", @ANYRESHEX=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) 1.252789582s ago: executing program 2 (id=352): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000640)='U', 0x1080}], 0x1}, 0x0) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x1000) 1.137348674s ago: executing program 3 (id=354): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18cd2, &(0x7f0000000380)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d392c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c636865636b3d72656c617865642c73686f72746e616d653d6d697865642c756e695f786c6174653d312c757466383d312c756e695f786c6174653d302c6572726f72733d72656d6f756e742d726f2c726f6469722c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c757466383d302c00283166de58ff3db4467e997c1c7844f90dc946ea39d063e216b64813b91b570668a5a35a6b11edf3d0c0c25f6225f3046a9bd4b1c33092ac2a782235c07ed8ea6e7195254afa2cc68fe39bcf54336a564d1b7fe3149684f385a86a8902e82993103f15bc8805b29f2ae81b9572f1567fce26a02d056d29b0293353abbd29f808a7571984a215f1de5c07163fb96a1065491147dc539be9187197db55c615636d3596aa5e30b6ad872a196f9fad19faf0e013667d"], 0xc1, 0x29b, &(0x7f00000013c0)="$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") r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffdc4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1808000001040000000000000000000018140000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000003e316d15409879ff00000000350901000700000095000000000000003e9800000000000026080000000000008500000007000000b70000000000000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) landlock_restrict_self(r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18cd2, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xc1, 0x29b, &(0x7f00000013c0)="$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") (async) landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffdc4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1808000001040000000000000000000018140000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000003e316d15409879ff00000000350901000700000095000000000000003e9800000000000026080000000000008500000007000000b70000000000000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) landlock_restrict_self(r0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b) (async) 1.121117009s ago: executing program 3 (id=355): r0 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x2, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000540)={0x2, @pix={0xfffff26d, 0x40000000, 0x42303159, 0x5, 0x10, 0xf21, 0xb, 0x8000, 0x0, 0x6, 0x2, 0x7}}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x1, &(0x7f0000000000)=[r3]) setregid(0x0, r3) socket$inet(0x2, 0x2, 0x1) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="ca4440000000", @ANYRES16=r4, @ANYBLOB="0500000000000000000006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20800) (async) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000ffdbdf252600000008000300", @ANYRES32=r5, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc00) 1.118790451s ago: executing program 2 (id=356): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002880)=@delchain={0x7a8, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x688, 0x2, [@TCA_BPF_ACT={0x684, 0x1, [@m_xt={0x120, 0x5, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}]}, {0xed, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b2"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0xe8, 0xa, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x9b6, 0x7, 0x4, 0x1b}}, @TCA_DEF_DATA={0xa, 0x3, '%{^):\x00'}]}, {0x95, 0x6, "f2687c5aa78339e616deb3f19827c994141f940d92a804637d54cb155e6be27b3c2ad1ec52a0a08ca0fb9f17a3ef6ce3652e6f0136028c9b46b33e74015138ea6ba9c60c29dd78378bb28567c803e2a63a94c5fba4bb4bb2adcab7d81ccda8c5f8e000b81344003a049b8353b716e0d9c0c6c5fbd0a6ac6532013f1ee7bfec23f8da74544263415dacc108fada4f83a23b"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x120, 0x8, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0xe5, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79fe1641184874514b60b0177c40385157c0c21b37875e7e4a2e75b3cc54be7d719fa695469336b975cb56bf3667e66922c0cf263fb2e4901e74673ec3bf8e140cb438b8aae24d0722b0ea76c66d09a9ae2578f669067fc7f4e7e11e7d6206ac703d98c3cd3b5372b60c63437cedd6c47eeb235ad519ca418c057a0c2e2efdad1db459ffde7207d4b45"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0x234, 0x6, 0x0, 0x0, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xab7, 0x4c1adacc, 0x5, 0x99, 0x6}, @remote, @local, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x401, 0x7, 0x6, 0x5}, @rand_addr=0x64010102, @rand_addr=0x64010102, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x5, 0x5, 0x0, 0xd}, @private=0xa010100, @empty, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4ef0, 0x1, 0x4, 0x10000, 0xc0e}, @multicast1, @rand_addr=0x64010100, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xe21, 0x1, 0x3, 0xfd30, 0x1}, @multicast2, @local, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x11d, 0x5, 0x3, 0x1}, @multicast1, @empty, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xffffff7f, 0x5, 0x79, 0x74e69dde}, @broadcast, @empty, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff000, 0x2cf, 0xffffffffffffffff, 0x7, 0xfffffffb}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10, 0x8, 0x10000000, 0x1ff, 0x2}, @loopback, @rand_addr=0x64010100, 0xffffff00}}]}, {0xa1, 0x6, "72c2816ab98a21c440078477977f213e81d0d0ff724f9d0109cdd14889252206b3196663ec1f74e5725f9c0ecf9c39784a71c0f063e45546f47be19f4cc6f84d49f14e97170ef06821de0ad03324f247a528ffe670b5612e99cdea1c052893a8bebddc718dcdb6f83131ecdce1ff76574eb3bd9c8a9b939e1f685c662f3dd9528cd9f8393594571e1dfda71bd155c1a9a37b984aaccd6f745144019213"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x124, 0x9, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1ff, 0x5, 0x7, 0x1, 0x1e1c}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd784, 0x7ff, 0x20000000, 0x9, 0x4}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x5, 0x8, 0x1}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x20000000, 0x6, 0x6a}, 0x80}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x2, 0xfffffffffffffff7, 0x9, 0x7}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x200, 0x0, 0xb, 0xd}, 0xf40f}}]}, {0x49, 0x6, "b243cf248ea5504cf7e5a67f45c10cd2a166afa2d80373ea83920403cb721db30d012aa4e92778532221b7b7d71aecab94a386e573c76fcd9950dd50dae93cd9061a328ed0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0xe4, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xd4, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0xa0, 0xb, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xe, 0x3, ')&%!J*).,\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x3, 0x1, 0x40, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x8, 0x6, 0x3, 0xf}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x1, 0x0, 0x37, 0x80000000}}, @TCA_DEF_PARMS={0x18, 0x2, {0x965, 0x3, 0x6, 0x8, 0x8}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x7a8}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xc, 0x42}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty}, 0x1c) pipe2(0x0, 0x80000) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000100)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_emit_ethernet(0x77, &(0x7f00000042c0)={@random="83a740a1f7cc", @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "5085d6", 0x41, 0x88, 0x0, @dev, @local, {[@srh={0x0, 0x0, 0x4, 0x0, 0x0, 0x40, 0x1}], "427fc9e6c4c7854ae1769a300f1779abc3f42fa305fa5a7d5126e4a9c9bfc90f68f5526c83e7dab5f47304561c8a05525f69047fa45c1ee3e0"}}}}}, 0x0) ioctl$UBLK_U_CMD_GET_QUEUE_AFFINITY(r2, 0x80207501, &(0x7f0000000540)={0x0, 0xffff, 0x8, &(0x7f0000000340)}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) r6 = socket(0x10, 0x803, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r6) r8 = landlock_create_ruleset(&(0x7f0000000200)={0x581}, 0x18, 0x0) writev(r8, &(0x7f0000000640)=[{&(0x7f0000000240)="1e", 0x1}, {0x0}], 0x2) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r7, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x181}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xa6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8844}, 0x8010) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x400d0, 0x0, 0x0) 1.040413876s ago: executing program 3 (id=357): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="b40800000000000073113800000000008510000002000000b7000000000000009500c200000000009500001200000000978397f6f8d449eca162e33d3cc50e3ea2bda29b6c5c0dd4ae4a5723d7bb1782d799214e20806df14107bbb18383f65bfa943f096ffd3f1a5195665bd897b554a4229f80258ac79116086d8764612511b5fbf0562c4034196f45d920ce764e50311836d630a55bd079ffb7c7bfd4d9e226"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0xa, [{0xb}]}]}}, &(0x7f0000000f40)=""/4089, 0x2e, 0xff9, 0x8}, 0x28) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="1950125f8a4e6da6e07e2626bc2c", 0x0, 0x1, 0x0, 0x1, 0x0, &(0x7f0000000200)="b7", 0x0}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x30, r6, 0x1, 0x70bd2c, 0xffffffff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0xa}]}]}, 0x30}}, 0x40) write$cgroup_devices(r3, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f00000002c0)='veth0_to_hsr\x00', 0x10) syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @empty}, "8ff57934ea79b45b"}}}}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000001002bbd70000000000007000000961a03a21ca2a2cb48b63bd0cf433a0f393eed1d221fba1f86bc92c3d3b222000000", @ANYRES32=0x0], 0x18}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r7, &(0x7f0000000180)={0xe0000009}) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/address_bits', 0x0, 0x0) preadv(r9, &(0x7f0000000040)=[{&(0x7f0000000340)=""/117, 0x92}], 0x1, 0x0, 0xa0000000) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001500)=""/4144, 0x1030}], 0x1}, 0x42) symlinkat(&(0x7f0000000000)='./file0\x00', r9, &(0x7f0000000140)='./file0\x00') 973.38624ms ago: executing program 3 (id=358): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000003380)=0x8000, 0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000bc0)={[{@nodelalloc}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x10000005}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@nolazytime}, {@resgid}, {@noload}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@barrier_val={'barrier', 0x3d, 0x81}}], [{@flag='lazytime'}]}, 0xfd, 0x573, &(0x7f0000000640)="$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") openat$smackfs_access(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="b40800000000000073113800000000008510000002000000b7000000000000009500c200000000009500001200000000978397f6f8d449eca162e33d3cc50e3ea2bda29b6c5c0dd4ae4a5723d7bb1782d799214e20806df14107bbb18383f65bfa943f096ffd3f1a5195665bd897b554a4229f80258ac79116086d8764612511b5fbf0562c4034196f45d920ce764e50311836d630a55bd079ffb7c7bfd4d9e226"], &(0x7f0000000080)='GPL\x00', 0x4, 0xbc, &(0x7f000000cf3d)=""/188, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)="1950125f8a4e6da6e07e2626bc2c", 0x0, 0x1, 0x0, 0x1, 0x0, &(0x7f0000000200)="b7", 0x0}, 0x50) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r3, &(0x7f0000000500)=[{&(0x7f0000000040)=@in={0x2, 0xb, @rand_addr=0x64010100}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)='l', 0x1}], 0x1, &(0x7f0000000000)=[@dstaddrv6={0x20, 0x84, 0x8, @empty}], 0x20, 0x54c05}], 0x1, 0x4044040) 734.545188ms ago: executing program 0 (id=359): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0xdea1a290e9769446) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000480)='~i', 0x2}], 0x1, 0x7ff, 0x7f, 0x5) 729.400707ms ago: executing program 4 (id=360): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip6_tables_names\x00') (async) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x6, 0x1e, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000340)={0x1ff, 0x1f9, 0x7}) (async, rerun: 64) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) (rerun: 64) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0xb5, 0xa, 0x31384142, 0x8, 0x0, 0x7, 0xa, 0x800, 0x1, 0x6, 0x0, 0x3}}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000400)={0xedb, 0x5, 0xc}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3, 0x1, 0x6}) (async, rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) 673.497956ms ago: executing program 3 (id=361): r0 = socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000140)="b5a305b1f197ccba700631834d812de8a5f6012b28169eb3a8d3f1cdbc7cab8218d255643a9a6be4eba4c02309f8ce210302610a579fa4755e92ca2715b9a34f9cecd15ff38f8299c1a05b47cfee12b14669ba29e9e864742ae7a81309e3a5d654b0221bf2439ff221f1eb14e3fa3cac932e5314c677356ef49408440d4d968c4dd11093dfdf600981565ff12eb52d589b770a0fc314724787ff4dcb5ac572e725da6354f37849597b647d9e435dade442507fe4bb48f639c7bf4c55d867e97451800604e43cf33525296f6534c6d63b2ad55ae552e2af1ddea188bc01f8", 0xde}], 0x1, 0x4) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000000)=[{0x30, 0x0, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x6, 0xfffff00c}, {0x6, 0xff, 0xa1, 0x401}]}, 0x10) sendmmsg$inet(r3, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 668.026253ms ago: executing program 4 (id=362): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200400, &(0x7f0000000140)={[{@dioread_nolock}, {@jqfmt_vfsv0}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x4a}, 0x28) read$FUSE(0xffffffffffffffff, &(0x7f0000000980)={0x2020}, 0x2020) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x1, 0x4, 0x800077, 0x20800000000412, 0x1, 0x3e, 0x1000, 0x8, 0xfffffffc}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=@newtaction={0x18, 0x12, 0xbf68af9d17701211, 0x0, 0x0, {0x7}, [{0x4}]}, 0x18}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f00000029c0)=ANY=[@ANYBLOB="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"], 0x1e) r4 = syz_open_dev$usbfs(0x0, 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x81, &(0x7f00000004c0)={0x0, 0x3, 0x18}, 0x8, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0}) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}]}, @void}, 0x27) 655.367412ms ago: executing program 0 (id=363): r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0xa, 0x80) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)=0x3) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0xb, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000000) syz_open_dev$evdev(&(0x7f00000001c0), 0xa, 0x80) (async) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)=0x3) (async) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0xb, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000000) (async) 503.13925ms ago: executing program 1 (id=364): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x2, 0x7ffc1ffb}]}) clock_adjtime(0x0, &(0x7f00000002c0)={0x6, 0x100000001, 0x7, 0xa00000, 0xf4, 0x1, 0x0, 0xfffffffffffffffb, 0x2, 0x101, 0x794, 0x2, 0x20000000000, 0x0, 0xfffffffffffffff8, 0x8, 0x100000001, 0x28d, 0x6, 0x1, 0x8, 0x6, 0x4, 0x19, 0x3, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() prlimit64(r0, 0xa, &(0x7f0000000500)={0x1, 0xd5}, &(0x7f0000000540)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) dup3(r4, r5, 0x80000) dup3(r3, r5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x35, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, r7}, 0x94) read$FUSE(0xffffffffffffffff, &(0x7f0000000c00)={0x2020}, 0x2020) fstat(r1, &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000030c0)={[{@inlinecrypt}, {@nobh}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@noacl}, {@nodelalloc}, {@inlinecrypt}, {@journal_checksum}, {@lazytime}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}], [{@fowner_gt={'fowner>', r8}}]}, 0x0, 0x5fc, &(0x7f0000000600)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000000)=@rnullb, 0x0, &(0x7f0000000140)={0x7, 0x6, 0x800077, 0x20800000000415, 0x80006, 0x7, 0x1000, 0xf67, 0xfffffffc}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x18) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002dc0)={&(0x7f0000002d40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@float={0x6, 0x0, 0x0, 0x10, 0x10}, @restrict={0x5, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x30, 0x0, 0x5f, 0x0, 0x5f, 0x5f, 0x61, 0x5f]}}, &(0x7f0000002d80), 0x3a, 0x0, 0x1, 0x7, 0x10000}, 0x28) r11 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') lseek(r11, 0xba, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003000)={0x18, 0x5, &(0x7f0000002c40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4c99}, [@map_fd={0x18, 0x8, 0x1, 0x0, r9}]}, &(0x7f0000002c80)='GPL\x00', 0x101, 0x0, 0x0, 0x40e00, 0x4a, '\x00', r6, 0x0, r10, 0x8, &(0x7f0000002ec0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000002f00)={0x1, 0xd, 0x11d20811, 0x2}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000002f40)=[r2, r11, r1], &(0x7f0000002f80)=[{0x0, 0x4, 0x1, 0x6}, {0x0, 0x1, 0x2, 0xc}, {0x3, 0x5, 0x5, 0xb}, {0x2, 0x1, 0xd, 0x3}, {0x1, 0x5, 0x1, 0x6}, {0x5, 0x3, 0x8, 0x4}, {0x2, 0x2, 0x10, 0xa}], 0x10, 0xb377}, 0x94) 502.785276ms ago: executing program 3 (id=365): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x40007f, @local, 0xc7}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c010000100013fc010000000000000000000000000000ff0200000000001400000000000000010004fffe4e0100020000000021000000", @ANYRES32=r4, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRESDEC=r1, @ANYRESOCT=r2], 0x15c}, 0x1, 0x0, 0x0, 0x24048000}, 0x8002054) ioctl(r1, 0x8b2c, &(0x7f0000000040)) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r5, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xb}}, 0x10) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="070000a0211bd600", @ANYRES16=0x0, @ANYBLOB="000228bd7000fbdbdf255a00000008000300", @ANYRES32=r0, @ANYBLOB="0c0099000700000049000000"], 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) 0s ago: executing program 2 (id=366): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000400)=0x7, 0x4) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x52, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001e80)=[{{&(0x7f0000002140)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000740)="f2", 0x1}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001c40)=[{&(0x7f0000000440)="f5", 0xffe0}], 0x4d}}], 0x2, 0x240000d4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r5, &(0x7f0000000180), 0x4000190, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xf, &(0x7f0000002c00)=ANY=[@ANYBLOB="1800000003000000000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b700002300000000950000000000000061f7c6354391d422bc93bd1b4ea028473247f2b3f5fe311fae2e732eb2346e2b7973963acb8f817ca5e18372592c5a90134b623eaeb9c519ed23d8fc1c329dfea5d76329b2c622ba435a89f391f24b34536251ac1b0cf9fa0653eb0b999c0000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendto$inet6(r1, 0x0, 0x0, 0x44000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @remote, 0x8000000}, 0x1c) recvmmsg(r4, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff1b}, 0x6}, {{&(0x7f0000000400)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0, &(0x7f0000000600)=[{&(0x7f0000000c00)=""/4096}, {&(0x7f0000001c00)=""/4096}], 0x0, &(0x7f0000000640)=""/48}, 0x9}, {{&(0x7f0000000680)=@l2={0x1f, 0x0, @fixed}, 0x0, &(0x7f0000000880)=[{&(0x7f0000000700)=""/216}, {&(0x7f0000000800)=""/78}], 0x0, &(0x7f00000008c0)=""/229}, 0x4}], 0x800000000000151, 0x1022, 0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000002180)={[0xfffffffffffffff7]}, 0x8, 0x80000) close(0x3) syz_clone3(&(0x7f00000021c0)={0x281881100, &(0x7f0000000040), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={&(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x1, 0x4}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000500)={r7, 0x3, 0xff, 0x6, 0x1, [], [0xc8f, 0x6, 0xfffffff8, 0x1], [0x8, 0x4, 0x3f0, 0x10000], [0x80, 0x0, 0x22, 0xc]}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f0000000040)={r8}) add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r9 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r10, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r10, 0x40045567, 0x0) write$uinput_user_dev(r10, &(0x7f0000000540)={'syz1\x00', {0x6, 0x7fff, 0x0, 0xb}, 0x6, [0x9, 0x8, 0x5, 0x6, 0x6, 0x3000000, 0xafc, 0x32, 0x838, 0x9, 0x6ff5, 0x9f5, 0x5, 0x1000000, 0x0, 0x6, 0x8001, 0x6, 0x4a4c, 0x3, 0xfffffffd, 0x9, 0x10, 0x8001, 0x5, 0x2, 0xd4a, 0xffefe87a, 0x8000001, 0x8, 0x9, 0x9, 0x8, 0x9, 0x0, 0xe, 0xf9c6, 0x3ff, 0x3ff, 0x4, 0xd, 0xff, 0x8, 0x9, 0x80000001, 0x83f5, 0x0, 0x2, 0xfe0, 0x7ff, 0x8, 0x3, 0x4, 0x2, 0xa45, 0x1df, 0xffff, 0x0, 0x2, 0x9, 0xf, 0x101, 0x200, 0x9a0], [0x3, 0x8, 0x6, 0xd, 0x80000001, 0xad10, 0x6, 0x13a0, 0x86, 0x7fff, 0x101, 0x8, 0x5, 0x1, 0x2, 0xffff, 0x4, 0x4a, 0xf, 0xfffff32a, 0xfffffff7, 0x4c4, 0x400, 0x7f, 0x10000, 0x7, 0x4, 0x8, 0x30, 0x9, 0x1, 0x3, 0x4c6fbc51, 0x10001, 0xd35, 0xa, 0x9, 0x0, 0xfff, 0x200, 0x20, 0x9, 0x0, 0x80, 0x0, 0x3, 0x3, 0x2, 0x8, 0x6, 0xe51, 0x1, 0x7, 0x8, 0x4, 0x2, 0x0, 0x62, 0x7, 0x6, 0x4, 0x6, 0xfff, 0x4], [0x5166, 0x9, 0x6, 0x10000, 0x6, 0x8, 0xffffffff, 0xfd, 0x20, 0x8, 0x9, 0x74, 0x283, 0x2, 0x4d, 0x6, 0x4, 0x3ff, 0x10000, 0x5, 0x40, 0x4, 0x7, 0x0, 0x4, 0x2, 0x80008001, 0x9, 0x1, 0xffff, 0x5, 0x7, 0x1, 0x9, 0x4, 0xfff, 0x3, 0x0, 0x5, 0x80000001, 0x53c2, 0x4, 0x4, 0x3, 0x80, 0x50, 0x3, 0xc, 0x8, 0x5, 0x4, 0x400, 0x3, 0x5, 0x86, 0x6, 0x400000, 0xb, 0x4, 0x100, 0x420, 0xfe6c, 0x2, 0x9], [0x3, 0x9, 0xffffffff, 0x2, 0x66, 0xffff, 0x401, 0x6, 0x8, 0x3, 0x4, 0x4, 0x9, 0x7, 0xce, 0x2, 0x8001, 0x1, 0x7, 0x6, 0x601000, 0x9, 0x5, 0xd, 0x1, 0x446, 0x1, 0x2, 0x0, 0x3, 0x2, 0x375, 0xfffffff1, 0x5, 0x5, 0x4, 0x7fff, 0x4, 0x3a2, 0x3, 0x2005, 0x80000001, 0xee6, 0x800, 0x7, 0x3, 0x1, 0x7, 0x3, 0x9, 0xc, 0x3, 0x1, 0x1, 0x3, 0x296, 0x6, 0xb, 0xf, 0x4, 0x6, 0x7, 0xd, 0x400]}, 0x45c) ioctl$UI_DEV_CREATE(r10, 0x5501) write$uinput_user_dev(r10, &(0x7f0000000a40)={'syz1\x00', {0x0, 0x0, 0x6, 0x101}, 0xfffffffd, [0x8, 0x0, 0x0, 0x4, 0x1, 0x0, 0x401, 0x0, 0x4, 0x20008001, 0x2000, 0x3, 0x2f, 0x7, 0x80, 0x80001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, 0x90, 0x801, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x3, 0x0, 0x8, 0x0, 0x0, 0xfffffff9, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0xffff1e06, 0x3], [0xfffffffd, 0x3, 0x6, 0x6, 0x0, 0x2, 0x3, 0xff, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x6189fbd8, 0x0, 0x400000, 0x0, 0x40000fff, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x9e2b, 0x0, 0xfffffffa, 0x5, 0x7aae62b1, 0x100000, 0x0, 0x40002, 0xffffffff, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0xfd5], [0x0, 0xfffffffc, 0x0, 0xd1, 0x0, 0x0, 0x0, 0xfa, 0x0, 0x0, 0x3, 0x7, 0x4, 0x1, 0x0, 0x3, 0x0, 0xb, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x3, 0x8000000, 0x4, 0x0, 0x0, 0x99, 0xfffffffd, 0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x836, 0x1, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x100000, 0x0, 0x0, 0x0, 0xe9cb], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4bdf, 0x4a92, 0xf152, 0x0, 0x10004, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9bf, 0x0, 0x8000, 0x0, 0x800, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0xfffffffe, 0x0, 0x5, 0x8, 0x0, 0x735, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xb6, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0xcfb0]}, 0x45c) keyctl$instantiate(0xc, r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6c6f61642064656661756c7420747275737465643a2f646576a3e4a9dae627d93b164c78a3c32f6472692f6361726423002030303030303030303620"], 0x3c, r9) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.27' (ED25519) to the list of known hosts. [ 28.693174][ T4693] cgroup: Unknown subsys name 'net' [ 28.872676][ T4693] cgroup: Unknown subsys name 'cpuset' [ 28.874617][ T4693] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.064837][ T4693] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 30.603605][ T4711] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.604345][ T4713] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.604683][ T4713] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.604847][ T4713] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.605167][ T4713] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.611646][ T4713] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.611903][ T4711] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.616059][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.631168][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.632847][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.634979][ T4708] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.642007][ T4708] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.643562][ T4708] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.666216][ T4708] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.674040][ T4708] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.677764][ T4722] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.680026][ T4722] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.683000][ T4722] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.683284][ T4722] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.683433][ T4722] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.683749][ T4722] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.683962][ T4722] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.696873][ T4713] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.697059][ T4713] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.701983][ T4711] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 31.032760][ T4706] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.033131][ T4706] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.033244][ T4706] bridge_slave_0: entered allmulticast mode [ 31.033710][ T4706] bridge_slave_0: entered promiscuous mode [ 31.037742][ T4706] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.037765][ T4706] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.037860][ T4706] bridge_slave_1: entered allmulticast mode [ 31.038251][ T4706] bridge_slave_1: entered promiscuous mode [ 31.061144][ T4706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.064198][ T4706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.080642][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.080715][ T4715] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.080811][ T4715] bridge_slave_0: entered allmulticast mode [ 31.081279][ T4715] bridge_slave_0: entered promiscuous mode [ 31.082088][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.082106][ T4715] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.083417][ T4715] bridge_slave_1: entered allmulticast mode [ 31.084403][ T4715] bridge_slave_1: entered promiscuous mode [ 31.084943][ T4720] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.084972][ T4720] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.085066][ T4720] bridge_slave_0: entered allmulticast mode [ 31.085614][ T4720] bridge_slave_0: entered promiscuous mode [ 31.086395][ T4720] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.086420][ T4720] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.086467][ T4720] bridge_slave_1: entered allmulticast mode [ 31.086896][ T4720] bridge_slave_1: entered promiscuous mode [ 31.122712][ T4706] team0: Port device team_slave_0 added [ 31.124034][ T4715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.125247][ T4715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.132024][ T4705] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.132121][ T4705] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.132176][ T4705] bridge_slave_0: entered allmulticast mode [ 31.132611][ T4705] bridge_slave_0: entered promiscuous mode [ 31.136416][ T4726] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.136435][ T4726] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.136517][ T4726] bridge_slave_0: entered allmulticast mode [ 31.136970][ T4726] bridge_slave_0: entered promiscuous mode [ 31.138115][ T4706] team0: Port device team_slave_1 added [ 31.143250][ T4720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.143409][ T4705] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.143463][ T4705] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.143513][ T4705] bridge_slave_1: entered allmulticast mode [ 31.143918][ T4705] bridge_slave_1: entered promiscuous mode [ 31.147628][ T4726] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.147654][ T4726] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.147703][ T4726] bridge_slave_1: entered allmulticast mode [ 31.148240][ T4726] bridge_slave_1: entered promiscuous mode [ 31.155745][ T4715] team0: Port device team_slave_0 added [ 31.156890][ T4720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.163093][ T4706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.163118][ T4706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.163134][ T4706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.167962][ T4726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.169492][ T4715] team0: Port device team_slave_1 added [ 31.178223][ T4706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.178248][ T4706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.178261][ T4706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.179493][ T4726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.186564][ T4720] team0: Port device team_slave_0 added [ 31.187777][ T4720] team0: Port device team_slave_1 added [ 31.196672][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.196695][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.196823][ T4715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.197401][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.197408][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.197423][ T4715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.201123][ T4705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.202853][ T4705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.210111][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.210121][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.210134][ T4720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.210642][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.210649][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.210664][ T4720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.220993][ T4720] hsr_slave_0: entered promiscuous mode [ 31.221687][ T4720] hsr_slave_1: entered promiscuous mode [ 31.223180][ T4726] team0: Port device team_slave_0 added [ 31.224168][ T4726] team0: Port device team_slave_1 added [ 31.246559][ T4705] team0: Port device team_slave_0 added [ 31.250467][ T4705] team0: Port device team_slave_1 added [ 31.259027][ T4715] hsr_slave_0: entered promiscuous mode [ 31.259753][ T4715] hsr_slave_1: entered promiscuous mode [ 31.259960][ T4715] debugfs: 'hsr0' already exists in 'hsr' [ 31.259991][ T4715] Cannot create hsr debugfs directory [ 31.273576][ T4706] hsr_slave_0: entered promiscuous mode [ 31.274321][ T4706] hsr_slave_1: entered promiscuous mode [ 31.274526][ T4706] debugfs: 'hsr0' already exists in 'hsr' [ 31.274535][ T4706] Cannot create hsr debugfs directory [ 31.277999][ T4726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.278021][ T4726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.278045][ T4726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.282245][ T4705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.282254][ T4705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.282267][ T4705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.282896][ T4705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.282904][ T4705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.282920][ T4705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.294811][ T4726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.294820][ T4726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.294834][ T4726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.344166][ T4705] hsr_slave_0: entered promiscuous mode [ 31.344918][ T4705] hsr_slave_1: entered promiscuous mode [ 31.345105][ T4705] debugfs: 'hsr0' already exists in 'hsr' [ 31.345114][ T4705] Cannot create hsr debugfs directory [ 31.346828][ T4726] hsr_slave_0: entered promiscuous mode [ 31.347124][ T4726] hsr_slave_1: entered promiscuous mode [ 31.347333][ T4726] debugfs: 'hsr0' already exists in 'hsr' [ 31.347342][ T4726] Cannot create hsr debugfs directory [ 31.423564][ T4720] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.426446][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.430848][ T4720] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.433299][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.434999][ T4720] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.437333][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.438874][ T4720] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.441398][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.477168][ T4706] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.480297][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.481737][ T4706] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.483885][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.485455][ T4706] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.487584][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.489085][ T4706] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.491643][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.503146][ T4720] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.503199][ T4720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.503345][ T4720] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.503372][ T4720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.520373][ T4715] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.523474][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.528963][ T4715] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.530987][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.532038][ T4715] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.533224][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.536079][ T4706] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.536120][ T4706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.536216][ T4706] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.536249][ T4706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.537392][ T4715] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.538499][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.560613][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.560661][ T4715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.560749][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.560783][ T4715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.567451][ T4720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.574945][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.575402][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.578666][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.580047][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.581884][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.583503][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.603018][ T4720] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.604273][ T4705] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.605294][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.605565][ T4705] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.606604][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.609172][ T4706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.614270][ T4715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.615645][ T4705] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.616825][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.617096][ T4705] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.619076][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.623173][ T922] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.623223][ T922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.623665][ T922] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.623697][ T922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.627295][ T4706] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.639396][ T922] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.639440][ T922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.648107][ T4715] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.655326][ T4720] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.657622][ T4720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.663125][ T922] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.663163][ T922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.666271][ T922] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.666307][ T922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.670280][ T922] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.670324][ T922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.686637][ T4726] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.690159][ T4726] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.697173][ T4726] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.698798][ T4726] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.705933][ T4706] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.710395][ T4726] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.713858][ T4726] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.714164][ T4726] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.715994][ T4726] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.722932][ T4715] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.722960][ T4715] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.810134][ T4705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.819361][ T4726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.826372][ T4726] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.828499][ T4705] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.845200][ T3333] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.845255][ T3333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.848244][ T3333] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.848284][ T3333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.851223][ T3333] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.851265][ T3333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.877652][ T4720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.880738][ T3515] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.880793][ T3515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.896416][ T4705] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.896455][ T4705] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.906229][ T4726] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.908103][ T4726] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.917187][ T4720] veth0_vlan: entered promiscuous mode [ 31.924276][ T4720] veth1_vlan: entered promiscuous mode [ 31.942918][ T4715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.950079][ T4720] veth0_macvtap: entered promiscuous mode [ 31.958600][ T4720] veth1_macvtap: entered promiscuous mode [ 31.971095][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.975188][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.987757][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.987889][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.987956][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.988027][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.039114][ T4706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.045107][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.046566][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.055155][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.055188][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.110144][ T4720] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.116343][ T4715] veth0_vlan: entered promiscuous mode [ 32.129630][ T4726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.132855][ T4706] veth0_vlan: entered promiscuous mode [ 32.137074][ T4715] veth1_vlan: entered promiscuous mode [ 32.144044][ T4706] veth1_vlan: entered promiscuous mode [ 32.150341][ T4882] loop2: detected capacity change from 0 to 1024 [ 32.154353][ T4882] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 32.157309][ T4715] veth0_macvtap: entered promiscuous mode [ 32.163920][ T4715] veth1_macvtap: entered promiscuous mode [ 32.180458][ T4706] veth0_macvtap: entered promiscuous mode [ 32.184315][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.185338][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.196692][ T4882] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.204472][ T4705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.208199][ T40] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.214083][ T4706] veth1_macvtap: entered promiscuous mode [ 32.218413][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.219946][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.226062][ T40] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.226673][ T40] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.226974][ T40] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.227119][ T40] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.227225][ T40] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.227353][ T40] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.227433][ T40] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.244421][ T922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.244454][ T922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.268843][ T4720] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 32.272743][ T4720] EXT4-fs error (device loop2): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /0/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 32.274949][ T4720] EXT4-fs (loop2): Remounting filesystem read-only [ 32.281071][ T4726] veth0_vlan: entered promiscuous mode [ 32.284658][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.284680][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.284684][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.300896][ T4726] veth1_vlan: entered promiscuous mode [ 32.314524][ T4705] veth0_vlan: entered promiscuous mode [ 32.339337][ T4726] veth0_macvtap: entered promiscuous mode [ 32.343489][ T4705] veth1_vlan: entered promiscuous mode [ 32.345470][ T3515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.345496][ T3515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.356248][ T4726] veth1_macvtap: entered promiscuous mode [ 32.360830][ T4889] loop2: detected capacity change from 0 to 8192 [ 32.372397][ T4726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.375007][ T4726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.387615][ T40] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.387684][ T40] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.388047][ T40] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.388087][ T40] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.388528][ T1204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.388546][ T1204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.457302][ T1204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.457325][ T1204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.466060][ T4705] veth0_macvtap: entered promiscuous mode [ 32.467340][ T4705] veth1_macvtap: entered promiscuous mode [ 32.491909][ T3333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.491936][ T3333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.513248][ T4705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.516094][ T4705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.525521][ T40] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.525623][ T40] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.525685][ T40] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.525738][ T40] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.589990][ T1204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.590021][ T1204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.590212][ T3333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.590219][ T3333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.609503][ T4909] capability: warning: `syz.3.4' uses 32-bit capabilities (legacy support in use) [ 32.653916][ T50] Bluetooth: hci1: command tx timeout [ 32.655012][ T4918] binfmt_misc: register: failed to install interpreter file ./file2 [ 32.661498][ T50] Bluetooth: hci0: command tx timeout [ 32.666690][ T4918] binfmt_misc: register: failed to install interpreter file ./file2 [ 32.673637][ T4923] loop0: detected capacity change from 0 to 256 [ 32.675273][ T4923] ======================================================= [ 32.675273][ T4923] WARNING: The mand mount option has been deprecated and [ 32.675273][ T4923] and is ignored by this kernel. Remove the mand [ 32.675273][ T4923] option from the mount to silence this warning. [ 32.675273][ T4923] ======================================================= [ 32.683036][ T4923] vfat: Unknown parameter 'nnonumtail' [ 32.690165][ T4923] nbd: must specify a size in bytes for the device [ 32.707277][ T4929] process 'syz.3.14' launched '/dev/fd/3' with NULL argv: empty string added [ 32.741505][ T50] Bluetooth: hci4: command tx timeout [ 32.742101][ T50] Bluetooth: hci3: command tx timeout [ 32.742204][ T50] Bluetooth: hci2: command tx timeout [ 32.799264][ T4938] loop1: detected capacity change from 0 to 128 [ 32.866456][ T4935] bond1: option lp_interval: invalid value (0) [ 32.866488][ T4935] bond1: option lp_interval: allowed values 1 - 2147483647 [ 32.870929][ T4935] bond1 (unregistering): Released all slaves [ 32.875716][ T4949] loop4: detected capacity change from 0 to 512 [ 33.134024][ T4949] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.134078][ T4949] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 33.134116][ T4949] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 33.134942][ T4949] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 33.135202][ T4949] EXT4-fs: failed to create workqueue [ 33.135207][ T4949] EXT4-fs (loop4): mount failed [ 33.256938][ T4962] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 33.263940][ T4961] netlink: 20 bytes leftover after parsing attributes in process `syz.4.24'. [ 33.339770][ T4967] netlink: 'syz.4.26': attribute type 2 has an invalid length. [ 33.407465][ T4975] loop2: detected capacity change from 0 to 2048 [ 33.447422][ T4975] Alternate GPT is invalid, using primary GPT. [ 33.448972][ T4975] loop2: p2 p3 p7 [ 33.508179][ T4975] 9p: Bad value for 'wfdno' [ 33.589768][ T4986] loop2: detected capacity change from 0 to 256 [ 33.809462][ T4993] netlink: 20 bytes leftover after parsing attributes in process `syz.0.33'. [ 33.852741][ T5002] loop3: detected capacity change from 0 to 512 [ 33.878056][ T5002] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.882903][ T5002] EXT4-fs error (device loop3): ext4_empty_dir:3082: inode #12: comm syz.3.37: invalid size [ 33.893359][ T4726] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.913886][ T5009] syz.1.35 uses obsolete (PF_INET,SOCK_PACKET) [ 34.224188][ T5017] loop3: detected capacity change from 0 to 512 [ 34.238482][ T5017] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.39: corrupted in-inode xattr: invalid ea_ino [ 34.238565][ T5017] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 34.239152][ T5017] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.39: couldn't read orphan inode 15 (err -117) [ 34.239205][ T5017] loop3: lost filesystem error report for type 5 error -117 [ 34.240224][ T5017] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.294977][ T5019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.39'. [ 34.731299][ T50] Bluetooth: hci0: command tx timeout [ 34.731333][ T50] Bluetooth: hci1: command tx timeout [ 34.811324][ T4711] Bluetooth: hci4: command tx timeout [ 34.811393][ T50] Bluetooth: hci3: command tx timeout [ 34.811641][ T4722] Bluetooth: hci2: command tx timeout [ 35.211382][ T4713] Bluetooth: hci4: Opcode 0x206a failed: -110 [ 36.537319][ T4979] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 36.565352][ T4726] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.596630][ T5027] netlink: 'syz.0.44': attribute type 1 has an invalid length. [ 36.598116][ T5027] netlink: 224 bytes leftover after parsing attributes in process `syz.0.44'. [ 36.599753][ T5027] NCSI netlink: No device for ifindex 0 [ 36.619118][ T5032] netlink: 64 bytes leftover after parsing attributes in process `syz.0.46'. [ 36.640419][ T5035] netlink: 'syz.4.45': attribute type 2 has an invalid length. [ 36.676350][ T5040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.48'. [ 36.689799][ T5044] Zero length message leads to an empty skb [ 36.697909][ T5043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.50'. [ 36.717420][ T5046] loop0: detected capacity change from 0 to 2048 [ 36.760347][ T5046] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.795222][ T5059] netlink: 80 bytes leftover after parsing attributes in process `syz.4.54'. [ 36.812183][ T4713] Bluetooth: hci1: command tx timeout [ 36.812220][ T4713] Bluetooth: hci0: command tx timeout [ 36.838187][ T4705] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.851948][ T5065] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(37) [ 36.851969][ T5065] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 36.854666][ T5065] vhci_hcd vhci_hcd.0: Device attached [ 36.892189][ T4722] Bluetooth: hci2: command tx timeout [ 36.892558][ T4722] Bluetooth: hci3: command tx timeout [ 36.892593][ T4722] Bluetooth: hci4: command 0x040f tx timeout [ 36.945514][ T5083] sctp: [Deprecated]: syz.4.62 (pid 5083) Use of int in max_burst socket option. [ 36.945514][ T5083] Use struct sctp_assoc_value instead [ 36.945786][ T5083] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 36.994941][ T5093] netlink: 'syz.4.65': attribute type 10 has an invalid length. [ 37.033182][ T4798] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 37.047960][ T5105] EXT4-fs: Mount option(s) incompatible with ext3 [ 37.058076][ T5097] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.085164][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.096034][ T4798] usb 8-1: new full-speed USB device number 2 using vhci_hcd [ 37.172871][ T5115] set_capacity_and_notify: 3 callbacks suppressed [ 37.172907][ T5115] loop4: detected capacity change from 0 to 512 [ 37.173624][ T5115] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 37.207629][ T5122] loop0: detected capacity change from 0 to 256 [ 37.211045][ T5125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.75'. [ 37.217554][ T5122] FAT-fs (loop0): Directory bread(block 64) failed [ 37.217599][ T5122] FAT-fs (loop0): Directory bread(block 65) failed [ 37.218097][ T5122] FAT-fs (loop0): Directory bread(block 66) failed [ 37.218116][ T5122] FAT-fs (loop0): Directory bread(block 67) failed [ 37.218142][ T5122] FAT-fs (loop0): Directory bread(block 68) failed [ 37.218154][ T5122] FAT-fs (loop0): Directory bread(block 69) failed [ 37.218204][ T5122] FAT-fs (loop0): Directory bread(block 70) failed [ 37.218214][ T5122] FAT-fs (loop0): Directory bread(block 71) failed [ 37.218235][ T5122] FAT-fs (loop0): Directory bread(block 72) failed [ 37.218245][ T5122] FAT-fs (loop0): Directory bread(block 73) failed [ 37.260919][ T5129] loop4: detected capacity change from 0 to 128 [ 37.263296][ T5129] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 37.337240][ T5136] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 37.343195][ T5135] netlink: 'syz.4.78': attribute type 8 has an invalid length. [ 37.344703][ T5135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.78'. [ 37.344879][ T5139] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:0 [ 37.351105][ T5135] bond0: entered promiscuous mode [ 37.351728][ T5135] bond_slave_0: entered promiscuous mode [ 37.351850][ T5135] bond_slave_1: entered promiscuous mode [ 37.356938][ T5135] gretap0: entered promiscuous mode [ 37.361771][ T5135] team0: entered promiscuous mode [ 37.362830][ T5135] team_slave_0: entered promiscuous mode [ 37.362937][ T5135] team_slave_1: entered promiscuous mode [ 37.364092][ T5135] hsr1: entered promiscuous mode [ 37.369251][ T5067] vhci_hcd: connection reset by peer [ 37.370836][ T12] vhci_hcd vhci_hcd.3: stop threads [ 37.370983][ T12] vhci_hcd vhci_hcd.3: release socket [ 37.374234][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 37.382098][ T5142] loop0: detected capacity change from 0 to 512 [ 37.384062][ T5142] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 38.056282][ T5160] syzkaller0: entered promiscuous mode [ 38.056318][ T5160] syzkaller0: entered allmulticast mode [ 38.101249][ T5164] nullb0: AHDI p1 [ 38.173306][ T5170] loop0: detected capacity change from 0 to 256 [ 38.199476][ T5170] FAT-fs (loop0): Directory bread(block 64) failed [ 38.200903][ T5170] FAT-fs (loop0): Directory bread(block 65) failed [ 38.204562][ T4713] Bluetooth: hci0: adv larger than maximum supported [ 38.205326][ T5170] FAT-fs (loop0): Directory bread(block 66) failed [ 38.208286][ T5170] FAT-fs (loop0): Directory bread(block 67) failed [ 38.209801][ T5170] FAT-fs (loop0): Directory bread(block 68) failed [ 38.211322][ T5170] FAT-fs (loop0): Directory bread(block 69) failed [ 38.212833][ T5170] FAT-fs (loop0): Directory bread(block 70) failed [ 38.212875][ T5170] FAT-fs (loop0): Directory bread(block 71) failed [ 38.212915][ T5170] FAT-fs (loop0): Directory bread(block 72) failed [ 38.212935][ T5170] FAT-fs (loop0): Directory bread(block 73) failed [ 38.260980][ T5175] loop1: detected capacity change from 0 to 256 [ 38.276480][ T5175] FAT-fs (loop1): Directory bread(block 64) failed [ 38.276512][ T5175] FAT-fs (loop1): Directory bread(block 65) failed [ 38.276636][ T5175] FAT-fs (loop1): Directory bread(block 66) failed [ 38.276650][ T5175] FAT-fs (loop1): Directory bread(block 67) failed [ 38.276676][ T5175] FAT-fs (loop1): Directory bread(block 68) failed [ 38.276688][ T5175] FAT-fs (loop1): Directory bread(block 69) failed [ 38.276710][ T5175] FAT-fs (loop1): Directory bread(block 70) failed [ 38.276721][ T5175] FAT-fs (loop1): Directory bread(block 71) failed [ 38.276743][ T5175] FAT-fs (loop1): Directory bread(block 72) failed [ 38.276753][ T5175] FAT-fs (loop1): Directory bread(block 73) failed [ 38.348471][ T5172] syz.1.91: attempt to access beyond end of device [ 38.348471][ T5172] loop1: rw=2049, sector=1224, nr_sectors = 120 limit=256 [ 38.406298][ T5181] __nla_validate_parse: 4 callbacks suppressed [ 38.407976][ T5181] netlink: 36 bytes leftover after parsing attributes in process `syz.0.95'. [ 38.425828][ T5184] loop1: detected capacity change from 0 to 512 [ 38.461126][ T5184] loop1: detected capacity change from 0 to 512 [ 38.490718][ T5184] loop1: detected capacity change from 0 to 512 [ 38.522511][ T5184] loop1: detected capacity change from 0 to 512 [ 38.910266][ T5223] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.912477][ T4713] Bluetooth: hci0: command tx timeout [ 38.912554][ T4713] Bluetooth: hci1: command tx timeout [ 38.918985][ T5223] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 38.971632][ T50] Bluetooth: hci2: command tx timeout [ 38.972934][ T4713] Bluetooth: hci3: command tx timeout [ 38.974781][ T4722] Bluetooth: hci4: command 0x040f tx timeout [ 39.179727][ T5236] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.223850][ T4726] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.241887][ T5246] C: renamed from veth1_to_team (while UP) [ 39.244768][ T5246] netlink: 'syz.1.111': attribute type 8 has an invalid length. [ 39.245012][ T5246] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 39.247496][ T5245] netlink: 'syz.1.111': attribute type 8 has an invalid length. [ 39.247682][ T5245] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 39.305314][ T5251] warning: `syz.1.113' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 39.318044][ T5251] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 39.330553][ T5251] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 39.330626][ T5251] System zones: 1-12 [ 39.331875][ T5251] EXT4-fs (loop1): 1 truncate cleaned up [ 39.332349][ T5251] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.342774][ T4706] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.364020][ T5255] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 39.366410][ T4814] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.371742][ T4814] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 39.591889][ T5267] netlink: 28 bytes leftover after parsing attributes in process `syz.2.118'. [ 39.597432][ T5270] netlink: 52 bytes leftover after parsing attributes in process `syz.0.121'. [ 39.605879][ T5273] capability: warning: `syz.1.119' uses deprecated v2 capabilities in a way that may be insecure [ 39.621826][ T5271] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 39.663804][ T5275] netlink: 44 bytes leftover after parsing attributes in process `syz.2.122'. [ 39.764425][ T5285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.126'. [ 39.764463][ T5285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.126'. [ 39.912058][ T5292] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 39.914540][ T5292] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.129: corrupted in-inode xattr: e_value size too large [ 39.914584][ T5292] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 39.917979][ T5292] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.129: couldn't read orphan inode 15 (err -117) [ 39.918016][ T5292] loop3: lost filesystem error report for type 5 error -117 [ 39.922627][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 39.922641][ C0] EXT4-fs (loop3): initial error at time 39: ext4_iget_extra_inode:5128: inode 15 [ 39.922657][ C0] EXT4-fs (loop3): last error at time 39: ext4_orphan_get:1402 [ 39.926108][ T5292] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.949547][ T4726] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.030132][ T5302] fuse: Bad value for 'rootmode' [ 40.037199][ T5304] binder: 5303:5304 ioctl c0306201 20000080 returned -14 [ 40.037752][ T5304] binder: 5303:5304 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 40.037766][ T5304] binder: 5304 RLIMIT_NICE not set [ 40.086714][ T5307] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 40.086784][ T5307] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 40.086813][ T5307] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.136: Failed to acquire dquot type 1 [ 40.086828][ T5307] loop3: lost filesystem error report for type 5 error -117 [ 40.088754][ T5307] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 40.088795][ T5307] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 40.088807][ T5307] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.136: Failed to acquire dquot type 1 [ 40.088816][ T5307] loop3: lost filesystem error report for type 5 error -117 [ 40.092558][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 40.092571][ C0] EXT4-fs (loop3): last error at time 40: ext4_acquire_dquot:7034 [ 40.099164][ T5307] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.136: bg 0: block 248: padding at end of block bitmap is not set [ 40.099194][ T5307] loop3: lost filesystem error report for type 5 error -117 [ 40.099994][ T5309] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 40.100366][ T5307] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 40.100395][ T5307] loop3: lost filesystem error report for type 5 error -117 [ 40.102728][ T5307] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 40.104391][ T5307] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 40.104415][ T5307] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.136: Failed to acquire dquot type 1 [ 40.104429][ T5307] loop3: lost filesystem error report for type 5 error -117 [ 40.108752][ T5309] bond1 (unregistering): Released all slaves [ 40.112455][ T5307] EXT4-fs (loop3): 1 orphan inode deleted [ 40.113797][ T5307] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.116648][ T5307] EXT4-fs (loop3): shut down requested (1) [ 40.167103][ T5320] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 40.325819][ T5329] faux_driver vkms: [drm] Unknown color mode 7; guessing buffer size. [ 40.353997][ T4726] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.978985][ T5348] netlink: 56 bytes leftover after parsing attributes in process `syz.4.147'. [ 40.983242][ T5348] netlink: 148 bytes leftover after parsing attributes in process `syz.4.147'. [ 41.020755][ T5361] EXT4-fs (loop3): Test dummy encryption mode enabled [ 41.024039][ T5361] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.084048][ T5361] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 41.084288][ T4722] Bluetooth: hci4: command 0x040f tx timeout [ 41.436203][ T4726] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.849079][ T5398] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 41.850848][ T5398] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.163: corrupted in-inode xattr: e_value size too large [ 41.850888][ T5398] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 41.853665][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 41.853677][ C0] EXT4-fs (loop3): initial error at time 41: ext4_iget_extra_inode:5128: inode 15 [ 41.853695][ C0] EXT4-fs (loop3): last error at time 41: ext4_iget_extra_inode:5128: inode 15 [ 41.860376][ T5398] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.163: couldn't read orphan inode 15 (err -117) [ 41.860397][ T5398] loop3: lost filesystem error report for type 5 error -117 [ 41.865028][ T5398] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.988853][ T5409] Quota error (device loop4): v2_read_file_info: Block with free entry 56325 out of range (1, 6). [ 41.988988][ T5409] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 41.989210][ T5409] EXT4-fs (loop4): mount failed [ 42.010549][ T5409] netlink: 48 bytes leftover after parsing attributes in process `syz.4.167'. [ 42.024672][ T4726] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.163225][ T5424] tmpfs: Bad value for 'mpol' [ 42.291494][ T4798] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 42.466091][ T5450] block device autoloading is deprecated and will be removed. [ 42.468054][ T5450] openvswitch: netlink: Key type 30 is not supported [ 42.549019][ T5456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.180'. [ 42.556417][ T5456] veth1_macvtap: left promiscuous mode [ 42.628484][ T5464] set_capacity_and_notify: 24 callbacks suppressed [ 42.628524][ T5464] loop3: detected capacity change from 0 to 2048 [ 42.628861][ T5464] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.628871][ T5464] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.628899][ T5464] ext4: Bad value for 'max_batch_time' [ 42.638825][ T5469] loop0: detected capacity change from 0 to 256 [ 42.643855][ T5466] syz.0.185: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0 [ 42.644658][ T5466] CPU: 1 UID: 0 PID: 5466 Comm: syz.0.185 Tainted: G L syzkaller #0 PREEMPT [ 42.644684][ T5466] Tainted: [L]=SOFTLOCKUP [ 42.644692][ T5466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 42.644698][ T5466] Call trace: [ 42.644701][ T5466] show_stack+0x2c/0x3c (C) [ 42.644720][ T5466] __dump_stack+0x30/0x40 [ 42.644731][ T5466] dump_stack_lvl+0xd8/0x12c [ 42.644740][ T5466] dump_stack+0x1c/0x28 [ 42.644749][ T5466] warn_alloc+0x1c4/0x2e0 [ 42.644759][ T5466] __vmalloc_node_range_noprof+0x11c/0x10dc [ 42.644769][ T5466] __vmalloc_node_noprof+0xec/0x14c [ 42.644778][ T5466] vmalloc_noprof+0x3c/0x4c [ 42.644787][ T5466] dvb_dvr_do_ioctl+0x120/0x1f8 [ 42.644796][ T5466] dvb_usercopy+0x29c/0x4d4 [ 42.644805][ T5466] dvb_dvr_ioctl+0x3c/0x54 [ 42.644812][ T5466] __arm64_sys_ioctl+0x14c/0x1c4 [ 42.644822][ T5466] invoke_syscall+0x98/0x244 [ 42.644832][ T5466] el0_svc_common+0xe8/0x23c [ 42.644841][ T5466] do_el0_svc+0x48/0x58 [ 42.644850][ T5466] el0_svc+0x64/0x260 [ 42.644858][ T5466] el0t_64_sync_handler+0x48/0x148 [ 42.644865][ T5466] el0t_64_sync+0x198/0x19c [ 42.644874][ T5466] Mem-Info: [ 42.644879][ T5466] active_anon:50 inactive_anon:5374 isolated_anon:0 [ 42.644879][ T5466] active_file:2290 inactive_file:4692 isolated_file:0 [ 42.644879][ T5466] unevictable:768 dirty:1778 writeback:0 [ 42.644879][ T5466] slab_reclaimable:8394 slab_unreclaimable:89390 [ 42.644879][ T5466] mapped:29083 shmem:969 pagetables:1049 [ 42.644879][ T5466] sec_pagetables:0 bounce:0 [ 42.644879][ T5466] kernel_misc_reclaimable:0 [ 42.644879][ T5466] free:1479370 free_pcp:21041 free_cma:7616 [ 42.644900][ T5466] Node 0 active_anon:200kB inactive_anon:21496kB active_file:9160kB inactive_file:18768kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:116332kB dirty:7112kB writeback:0kB shmem:3876kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8688kB pagetables:4196kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 42.644920][ T5466] Node 0 DMA free:3077888kB boost:0kB min:20352kB low:25440kB high:30528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 42.644942][ T5466] lowmem_reserve[]: 0 0 3653 3653 3653 [ 42.644960][ T5466] Node 0 Normal free:2839592kB boost:0kB min:24700kB low:30872kB high:37044kB reserved_highatomic:0KB free_highatomic:0KB active_anon:200kB inactive_anon:21496kB active_file:9160kB inactive_file:18768kB unevictable:3072kB writepending:7112kB zspages:0kB present:5242880kB managed:3741116kB mlocked:0kB bounce:0kB free_pcp:84164kB local_pcp:50388kB free_cma:0kB [ 42.644981][ T5466] lowmem_reserve[]: 0 0 0 0 0 [ 42.644998][ T5466] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 42.645061][ T5466] Node 0 Normal: 1694*4kB (UM) 374*8kB (UME) 102*16kB (UM) 19*32kB (UME) 6*64kB (UM) 3*128kB (M) 4*256kB (UM) 3*512kB (UM) 10*1024kB (ME) 2*2048kB (UM) 686*4096kB (M) = 2839528kB [ 42.645133][ T5466] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 42.645140][ T5466] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 42.645146][ T5466] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 42.645152][ T5466] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 42.645158][ T5466] 7947 total pagecache pages [ 42.645161][ T5466] 0 pages in swap cache [ 42.645165][ T5466] Free swap = 124996kB [ 42.645168][ T5466] Total swap = 124996kB [ 42.645171][ T5466] 2097152 pages RAM [ 42.645174][ T5466] 0 pages HighMem/MovableOnly [ 42.645177][ T5466] 391825 pages reserved [ 42.645180][ T5466] 8192 pages cma reserved [ 42.645183][ T5466] 0 pages hwpoisoned [ 42.788689][ T5479] loop1: detected capacity change from 0 to 1024 [ 42.789102][ T5479] EXT4-fs: Ignoring removed i_version option [ 42.789145][ T5479] EXT4-fs: inline encryption not supported [ 42.790534][ T5479] EXT4-fs (loop1): Test dummy encryption mode enabled [ 42.791833][ T5479] EXT4-fs (loop1): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 42.795282][ T5479] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #4: comm syz.1.188: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 42.795304][ T5479] loop1: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 42.795411][ T5479] EXT4-fs error (device loop1): ext4_quota_enable:7228: comm syz.1.188: Bad quota inode: 4, type: 1 [ 42.795423][ T5479] loop1: lost filesystem error report for type 5 error -117 [ 42.795490][ T5479] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 42.795739][ T5479] EXT4-fs (loop1): mount failed [ 42.882044][ T5495] loop0: detected capacity change from 0 to 2048 [ 42.883958][ T5495] EXT4-fs: Ignoring removed nomblk_io_submit option [ 42.888310][ T5495] EXT4-fs: Mount option(s) incompatible with ext2 [ 42.901080][ T5497] loop3: detected capacity change from 0 to 128 [ 42.916036][ T5495] loop0: detected capacity change from 0 to 512 [ 42.938345][ T5497] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.944985][ T5495] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.032035][ T4726] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.850394][ T5518] binder: BINDER_SET_CONTEXT_MGR already set [ 43.850423][ T5518] binder: 5517:5518 ioctl 4018620d 20001000 returned -16 [ 43.850736][ T5518] binder: 5517:5518 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 43.850754][ T5518] binder: 5518 RLIMIT_NICE not set [ 43.860337][ T4705] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.945555][ T5533] __nla_validate_parse: 1 callbacks suppressed [ 43.947217][ T5533] netlink: 36 bytes leftover after parsing attributes in process `syz.2.202'. [ 44.270084][ T5558] loop3: detected capacity change from 0 to 256 [ 44.287462][ T5558] FAT-fs (loop3): Directory bread(block 64) failed [ 44.287497][ T5558] FAT-fs (loop3): Directory bread(block 65) failed [ 44.287542][ T5558] FAT-fs (loop3): Directory bread(block 66) failed [ 44.293269][ T5558] FAT-fs (loop3): Directory bread(block 67) failed [ 44.296272][ T5558] FAT-fs (loop3): Directory bread(block 68) failed [ 44.298784][ T5558] FAT-fs (loop3): Directory bread(block 69) failed [ 44.298842][ T5558] FAT-fs (loop3): Directory bread(block 70) failed [ 44.298866][ T5558] FAT-fs (loop3): Directory bread(block 71) failed [ 44.298902][ T5558] FAT-fs (loop3): Directory bread(block 72) failed [ 44.298922][ T5558] FAT-fs (loop3): Directory bread(block 73) failed [ 44.375077][ T5568] loop3: detected capacity change from 0 to 512 [ 44.392683][ T5568] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.445795][ T4726] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.026987][ T5513] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 46.077745][ T5590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.218'. [ 46.077780][ T5590] netlink: 40 bytes leftover after parsing attributes in process `syz.4.218'. [ 46.151101][ T5598] macvlan1: entered promiscuous mode [ 46.156880][ T5598] ipvlan0: entered promiscuous mode [ 46.157384][ T5598] ipvlan0: left promiscuous mode [ 46.163978][ T5598] macvlan1: left promiscuous mode [ 46.188319][ T5604] loop3: detected capacity change from 0 to 512 [ 46.188742][ T5604] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.242198][ T5604] EXT4-fs (loop3): orphan cleanup on readonly fs [ 46.242228][ T5604] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 46.246189][ T5604] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.219: attempt to clear invalid blocks 2 len 1 [ 46.246221][ T5604] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 46.249512][ T5604] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 46.249989][ T5604] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.219: invalid indirect mapped block 1819239214 (level 0) [ 46.250016][ T5604] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 46.251783][ C0] EXT4-fs (loop3): error count since last fsck: 3 [ 46.251797][ C0] EXT4-fs (loop3): initial error at time 46: ext4_clear_blocks:876: inode 13 [ 46.251817][ C0] EXT4-fs (loop3): last error at time 46: ext4_free_branches:1023: inode 13 [ 46.265450][ T5604] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.219: invalid indirect mapped block 1819239214 (level 1) [ 46.265488][ T5604] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 46.267560][ T5604] EXT4-fs (loop3): 1 truncate cleaned up [ 46.268028][ T5604] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.279659][ T5604] EXT4-fs (loop3): Quota file not on filesystem root. Journaled quota will not work [ 46.323402][ T4726] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.336719][ T5619] loop9: detected capacity change from 0 to 7 [ 46.338866][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 46.338909][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 46.342674][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 46.342704][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 46.345915][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 46.345946][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 46.349340][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 46.349366][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 46.353871][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 46.353895][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 46.357553][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 46.357579][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 46.360725][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 46.360751][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 46.360935][ T5619] ldm_validate_partition_table(): Disk read failed. [ 46.363858][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 46.363879][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 46.364838][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 46.364869][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 46.367847][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 46.367865][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 46.377837][ T5619] Dev loop9: unable to read RDB block 0 [ 46.384729][ T5619] loop9: unable to read partition table [ 46.384806][ T5619] loop9: partition table beyond EOD, truncated [ 46.384825][ T5619] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 46.510014][ T5633] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 46.526119][ T4699] udevd[4699]: incorrect ext4 checksum on /dev/loop3 [ 46.628176][ T30] audit: type=1326 audit(46.600:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5639 comm="syz.4.235" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4d77aa8 code=0x0 [ 46.721445][ T5651] netlink: 12 bytes leftover after parsing attributes in process `syz.4.235'. [ 46.721475][ T5651] netlink: 12 bytes leftover after parsing attributes in process `syz.4.235'. [ 46.934256][ T5689] fuseblk: Bad value for 'rootmode' [ 47.130313][ T5709] FAT-fs (loop0): Directory bread(block 64) failed [ 47.130358][ T5709] FAT-fs (loop0): Directory bread(block 65) failed [ 47.130397][ T5709] FAT-fs (loop0): Directory bread(block 66) failed [ 47.130409][ T5709] FAT-fs (loop0): Directory bread(block 67) failed [ 47.130432][ T5709] FAT-fs (loop0): Directory bread(block 68) failed [ 47.130442][ T5709] FAT-fs (loop0): Directory bread(block 69) failed [ 47.130465][ T5709] FAT-fs (loop0): Directory bread(block 70) failed [ 47.130476][ T5709] FAT-fs (loop0): Directory bread(block 71) failed [ 47.130497][ T5709] FAT-fs (loop0): Directory bread(block 72) failed [ 47.130507][ T5709] FAT-fs (loop0): Directory bread(block 73) failed [ 47.230296][ T30] audit: type=1326 audit(47.200:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5717 comm="syz.0.251" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f577aa8 code=0x7ffc0000 [ 47.230396][ T30] audit: type=1326 audit(47.200:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5717 comm="syz.0.251" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f577aa8 code=0x7ffc0000 [ 47.230487][ T30] audit: type=1326 audit(47.200:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5717 comm="syz.0.251" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=116 compat=0 ip=0xffff7f577aa8 code=0x7ffc0000 [ 47.241088][ T30] audit: type=1326 audit(47.210:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5717 comm="syz.0.251" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f577aa8 code=0x7ffc0000 [ 47.243343][ T30] audit: type=1326 audit(47.220:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5717 comm="syz.0.251" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff7f577aa8 code=0x7ffc0000 [ 47.243514][ T30] audit: type=1326 audit(47.220:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5717 comm="syz.0.251" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f577aa8 code=0x7ffc0000 [ 47.243760][ T30] audit: type=1326 audit(47.220:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5717 comm="syz.0.251" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f577aa8 code=0x7ffc0000 [ 47.244292][ T30] audit: type=1326 audit(47.220:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5717 comm="syz.0.251" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=63 compat=0 ip=0xffff7f55a96c code=0x7ffc0000 [ 47.244377][ T30] audit: type=1326 audit(47.220:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5717 comm="syz.0.251" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f577aa8 code=0x7ffc0000 [ 47.475376][ T5724] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.483230][ T5724] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 47.486935][ T5724] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 33 with error 28 [ 47.489580][ T5724] EXT4-fs (loop4): This should not happen!! Data will be lost [ 47.489580][ T5724] [ 47.492163][ T5724] EXT4-fs (loop4): Total free blocks count 0 [ 47.493407][ T5724] EXT4-fs (loop4): Free/Dirty block details [ 47.493452][ T5724] EXT4-fs (loop4): free_blocks=65280 [ 47.493473][ T5724] EXT4-fs (loop4): dirty_blocks=33 [ 47.493489][ T5724] EXT4-fs (loop4): Block reservation details [ 47.493505][ T5724] EXT4-fs (loop4): i_reserved_data_blocks=33 [ 47.510293][ T4715] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 47.512103][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.645794][ T5729] No such timeout policy "syz1" [ 47.806969][ T5738] set_capacity_and_notify: 5 callbacks suppressed [ 47.807003][ T5738] loop1: detected capacity change from 0 to 128 [ 47.814606][ T5738] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.879291][ T4706] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.969930][ T5754] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 48.147831][ T5776] Illegal XDP return value 4294967274 on prog (id 64) dev syz_tun, expect packet loss! [ 48.200108][ T5780] loop3: detected capacity change from 0 to 8192 [ 48.279674][ T5786] Injecting memory failure for pfn 0x122674 at process virtual address 0x20001000 [ 48.283671][ T5786] Memory failure: 0x122674: Sending SIGBUS to syz.3.268:5786 due to hardware memory corruption [ 48.283752][ T5786] Memory failure: 0x122674: recovery action for dirty LRU page: Recovered [ 48.283777][ T5786] Injecting memory failure for pfn 0x21970d at process virtual address 0x20002000 [ 48.283841][ T5786] Memory failure: 0x21970d: unhandlable page. [ 48.283847][ T5786] Memory failure: 0x21970d: recovery action for get hwpoison page: Ignored [ 48.289143][ T5786] loop3: detected capacity change from 0 to 256 [ 48.594618][ T5789] loop4: detected capacity change from 0 to 128 [ 48.811181][ T5813] netlink: 40 bytes leftover after parsing attributes in process `syz.4.277'. [ 49.147556][ T5822] loop4: detected capacity change from 0 to 512 [ 49.207007][ T5824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.280'. [ 49.260228][ T5826] loop3: detected capacity change from 0 to 8 [ 49.260605][ T5826] squashfs: Bad value for 'errors' [ 49.627832][ T5847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.285'. [ 49.827395][ T5850] syz_tun: entered allmulticast mode [ 50.112199][ T5862] loop4: detected capacity change from 0 to 512 [ 50.113901][ T5862] EXT4-fs: Ignoring removed nobh option [ 50.143940][ T5862] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.226988][ T5869] bond1 (unregistering): Released all slaves [ 50.257752][ T5875] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 50.265116][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.328820][ T4707] kernel read not supported for file /237/limits (pid: 4707 comm: kworker/1:3) [ 50.331264][ T5883] loop7: detected capacity change from 0 to 7 [ 50.334291][ T5883] ldm_validate_partition_table(): Disk read failed. [ 50.334859][ T5883] Dev loop7: unable to read RDB block 0 [ 50.335654][ T5883] loop7: unable to read partition table [ 50.335714][ T5883] loop7: partition table beyond EOD, truncated [ 50.335724][ T5883] loop_reread_partitions: partition scan of loop7 (Sj %`ր5) failed (rc=-5) [ 50.344288][ T5883] Bluetooth: MGMT ver 1.23 [ 50.344366][ T5883] Bluetooth: hci0: service_discovery: too big uuid_count value 32772 [ 50.373883][ T5869] netlink: 40 bytes leftover after parsing attributes in process `syz.1.292'. [ 50.393878][ T5890] netlink: 'syz.3.297': attribute type 21 has an invalid length. [ 50.393912][ T5890] IPv6: NLM_F_CREATE should be specified when creating new route [ 50.394034][ T5890] IPv6: Can't replace route, no match found [ 50.429355][ T5846] syz_tun: left allmulticast mode [ 50.855274][ T5909] loop0: detected capacity change from 0 to 512 [ 50.868453][ T5909] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 50.868482][ T5909] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 50.868506][ T5909] System zones: 0-1, 15-15, 18-18, 34-34 [ 50.868621][ T5909] EXT4-fs (loop0): orphan cleanup on readonly fs [ 50.868684][ T5909] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 50.868696][ T5909] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 50.870327][ T5909] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.302: bad orphan inode 16 [ 50.870354][ T5909] loop0: lost filesystem error report for type 5 error -117 [ 50.870478][ T5909] ext4_test_bit(bit=15, block=18) = 1 [ 50.870488][ T5909] is_bad_inode(inode)=0 [ 50.870494][ T5909] NEXT_ORPHAN(inode)=0 [ 50.870499][ T5909] max_ino=32 [ 50.870503][ T5909] i_nlink=2 [ 50.870964][ T5909] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.910395][ T4705] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.931974][ T5904] loop3: detected capacity change from 0 to 512 [ 50.932584][ T5904] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 50.933408][ T5904] EXT4-fs (loop3): orphan cleanup on readonly fs [ 50.933555][ T5904] EXT4-fs (loop3): 1 truncate cleaned up [ 50.934397][ T5904] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 50.997671][ T4726] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.042673][ T5922] netlink: 28 bytes leftover after parsing attributes in process `syz.3.305'. [ 51.042713][ T5922] netlink: 'syz.3.305': attribute type 7 has an invalid length. [ 51.042721][ T5922] netlink: 'syz.3.305': attribute type 8 has an invalid length. [ 51.042728][ T5922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.305'. [ 51.044818][ T5922] gretap0: entered promiscuous mode [ 51.045810][ T5922] gretap0: left promiscuous mode [ 51.160390][ T5928] vfat: Bad value for 'shortname' [ 51.170405][ T5928] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 51.181950][ T5930] syzkaller0: entered promiscuous mode [ 51.181982][ T5930] syzkaller0: entered allmulticast mode [ 51.443923][ T5938] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.752046][ T5948] team0: Device ipvlan1 failed to register rx_handler [ 51.756701][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.828071][ T5954] EXT4-fs: Ignoring removed bh option [ 51.841024][ T5956] vfat: Unknown parameter '00000000000000000000' [ 51.844874][ T5954] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.928173][ T5972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.319'. [ 51.967335][ T5972] veth0_to_bond: entered allmulticast mode [ 52.008123][ T5977] netlink: 'syz.1.321': attribute type 40 has an invalid length. [ 52.015047][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.109061][ T5987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.323'. [ 52.110704][ T5987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.323'. [ 52.112033][ T5987] netlink: 'syz.2.323': attribute type 18 has an invalid length. [ 52.112059][ T5987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.323'. [ 52.131390][ T5992] ext4: Unknown parameter 'fowner>00000000000000000000' [ 52.592998][ T6022] ptrace attach of "ci-upstream-gce-arm64/syz-executor exec"[4720] was attempted by "ci-upstream-gce-arm64/syz-executor exec"[6022] [ 52.603696][ T6025] netlink: 20 bytes leftover after parsing attributes in process `syz.3.333'. [ 52.604330][ T6025] netlink: 'syz.3.333': attribute type 5 has an invalid length. [ 52.878246][ T6027] set_capacity_and_notify: 7 callbacks suppressed [ 52.878275][ T6027] loop0: detected capacity change from 0 to 256 [ 52.887307][ T6027] FAT-fs (loop0): Directory bread(block 64) failed [ 52.887342][ T6027] FAT-fs (loop0): Directory bread(block 65) failed [ 52.887373][ T6027] FAT-fs (loop0): Directory bread(block 66) failed [ 52.887385][ T6027] FAT-fs (loop0): Directory bread(block 67) failed [ 52.887407][ T6027] FAT-fs (loop0): Directory bread(block 68) failed [ 52.887418][ T6027] FAT-fs (loop0): Directory bread(block 69) failed [ 52.887440][ T6027] FAT-fs (loop0): Directory bread(block 70) failed [ 52.887450][ T6027] FAT-fs (loop0): Directory bread(block 71) failed [ 52.887471][ T6027] FAT-fs (loop0): Directory bread(block 72) failed [ 52.887481][ T6027] FAT-fs (loop0): Directory bread(block 73) failed [ 53.037312][ T6031] mmap: syz.0.336 (6031): VmData 37511168 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 53.112863][ T6037] Injecting memory failure for pfn 0x135ecb at process virtual address 0x20000000 [ 53.119872][ T6037] Memory failure: 0x135ecb: Sending SIGBUS to syz.0.339:6037 due to hardware memory corruption [ 53.119937][ T6037] Memory failure: 0x135ecb: recovery action for dirty LRU page: Recovered [ 53.119962][ T6037] Injecting memory failure for pfn 0x21970d at process virtual address 0x20001000 [ 53.120030][ T6037] Memory failure: 0x21970d: Sending SIGBUS to syz.0.339:6037 due to hardware memory corruption [ 53.120048][ T6037] Memory failure: 0x21970d: recovery action for already poisoned page: Failed [ 53.134518][ T6029] Injecting memory failure for pfn 0x11e98e at process virtual address 0x20000000 [ 53.137571][ T6029] Memory failure: 0x11e98e: recovery action for clean LRU page: Recovered [ 53.137611][ T6029] Injecting memory failure for pfn 0x120f85 at process virtual address 0x20001000 [ 53.137675][ T6029] Memory failure: 0x120f85: recovery action for clean LRU page: Recovered [ 53.137685][ T6029] Injecting memory failure for pfn 0x120f83 at process virtual address 0x20002000 [ 53.137724][ T6029] Memory failure: 0x120f83: recovery action for clean LRU page: Recovered [ 53.195718][ T4713] Bluetooth: hci5: command 0xfc11 tx timeout [ 53.195802][ T4722] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 53.290816][ T6048] vlan2: entered allmulticast mode [ 53.290852][ T6048] erspan0: entered allmulticast mode [ 53.331724][ T6053] bond0: entered promiscuous mode [ 53.331755][ T6053] bond_slave_0: entered promiscuous mode [ 53.331816][ T6053] bond_slave_1: entered promiscuous mode [ 53.332571][ T6053] team0: entered promiscuous mode [ 53.332581][ T6053] team_slave_0: entered promiscuous mode [ 53.332658][ T6053] team_slave_1: entered promiscuous mode [ 53.333237][ T6053] debugfs: 'hsr1' already exists in 'hsr' [ 53.333248][ T6053] Cannot create hsr debugfs directory [ 53.333285][ T6053] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 53.333314][ T6053] hsr1: entered promiscuous mode [ 53.333451][ T6053] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 53.334049][ T6055] netlink: 'syz.3.345': attribute type 3 has an invalid length. [ 53.367685][ T6059] loop2: detected capacity change from 0 to 8192 [ 53.381215][ T6059] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 53.381244][ T6059] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 53.381740][ T6059] loop2: unable to read partition table [ 53.381805][ T6059] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 53.462787][ T6066] loop2: detected capacity change from 0 to 8192 [ 53.465382][ T6066] vfat: Unknown parameter '00000000000000000000<.-cJjtOFm|ñ"֬P\kỵSB:0x0000000000000000&>8qB*TȰ]#|CEF v& Ѿ@)d2MUlڱ [ 53.465382][ T6066] +NDtr' [ 53.479523][ T6071] Soft offlining pfn 0x11fd65 at process virtual address 0x20000000 [ 53.484979][ T6071] Soft offline: 0x11fd65: page migration failed 1, type 0x5ffc0000002181c(referenced|uptodate|dirty|owner_2|arch_1|swapbacked|node=0|zone=2|lastcpupid=0x7ff) [ 53.503583][ T6073] loop3: detected capacity change from 0 to 512 [ 53.503941][ T6073] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.518035][ T6073] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.350: iget: bad extra_isize 90 (inode size 256) [ 53.518071][ T6073] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 53.520952][ T6073] EXT4-fs (loop3): Remounting filesystem read-only [ 53.524207][ T6073] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 53.526213][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 53.526227][ C0] EXT4-fs (loop3): initial error at time 524341: ext4_xattr_inode_iget:441: inode 11 [ 53.526242][ C0] EXT4-fs (loop3): last error at time 524341: ext4_xattr_inode_iget:441: inode 11 [ 53.532148][ T6073] EXT4-fs (loop3): 1 orphan inode deleted [ 53.533767][ T6073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.552029][ T4726] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.623087][ T6082] loop3: detected capacity change from 0 to 256 [ 53.790985][ T6096] loop3: detected capacity change from 0 to 1024 [ 54.044913][ T6096] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.077234][ T6102] loop0: detected capacity change from 0 to 1024 [ 54.077613][ T6102] EXT4-fs: Ignoring removed orlov option [ 54.084700][ T4726] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.097357][ T6102] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.137656][ T6113] loop4: detected capacity change from 0 to 512 [ 54.140321][ T6113] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 54.143216][ T4705] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.182282][ T6113] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.255837][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 54.255872][ T30] audit: type=1326 audit(524342.360:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6122 comm="syz.1.364" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6977aa8 code=0x7ffc0000 [ 54.255967][ T30] audit: type=1326 audit(524342.360:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6122 comm="syz.1.364" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6977aa8 code=0x7ffc0000 [ 54.256970][ T30] audit: type=1326 audit(524342.360:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6122 comm="syz.1.364" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=266 compat=0 ip=0xffffb6977aa8 code=0x7ffc0000 [ 54.257070][ T30] audit: type=1326 audit(524342.370:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6122 comm="syz.1.364" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6977aa8 code=0x7ffc0000 [ 54.257299][ T30] audit: type=1326 audit(524342.370:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6122 comm="syz.1.364" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6977aa8 code=0x7ffc0000 [ 54.257419][ T30] audit: type=1326 audit(524342.370:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6122 comm="syz.1.364" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=261 compat=0 ip=0xffffb6977aa8 code=0x7ffc0000 [ 54.257498][ T30] audit: type=1326 audit(524342.370:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6122 comm="syz.1.364" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6977aa8 code=0x7ffc0000 [ 54.257578][ T30] audit: type=1326 audit(524342.370:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6122 comm="syz.1.364" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6977aa8 code=0x7ffc0000 [ 54.257693][ T30] audit: type=1326 audit(524342.370:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6122 comm="syz.1.364" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=119 compat=0 ip=0xffffb6977aa8 code=0x7ffc0000 [ 54.257972][ T30] audit: type=1326 audit(524342.370:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6122 comm="syz.1.364" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6977aa8 code=0x7ffc0000 [ 54.362441][ T6127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 54.494251][ T6128] loop1: detected capacity change from 0 to 1024 [ 54.502491][ T6128] EXT4-fs: inline encryption not supported [ 54.502578][ T6128] EXT4-fs: Ignoring removed nobh option [ 54.503248][ T6128] journal_path: Lookup failure for './file0' [ 54.503402][ T6128] EXT4-fs: error: could not find journal device path [ 54.732254][ T6129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 54.733503][ T6127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 54.809399][ T39] [ 54.813178][ T39] ====================================================== [ 54.814362][ T39] WARNING: possible circular locking dependency detected [ 54.815589][ T39] syzkaller #0 Tainted: G L [ 54.816536][ T39] ------------------------------------------------------ [ 54.817803][ T39] kworker/u8:2/39 is trying to acquire lock: [ 54.818825][ T39] ffff0000d2faa938 (jbd2_handle){++++}-{0:0}, at: wait_transaction_locked+0x170/0x220 [ 54.820480][ T39] [ 54.820480][ T39] but task is already holding lock: [ 54.821764][ T39] ffff0000d2facc18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x16c/0x2d8 [ 54.823508][ T39] [ 54.823508][ T39] which lock already depends on the new lock. [ 54.823508][ T39] [ 54.825225][ T39] [ 54.825225][ T39] the existing dependency chain (in reverse order) is: [ 54.826715][ T39] [ 54.826715][ T39] -> #2 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 54.828224][ T39] percpu_down_read_internal+0x5c/0x294 [ 54.829258][ T39] ext4_writepages+0x16c/0x2d8 [ 54.830190][ T39] do_writepages+0x270/0x468 [ 54.831061][ T39] __writeback_single_inode+0x144/0x1808 [ 54.832142][ T39] writeback_single_inode+0x3b8/0xaa0 [ 54.833173][ T39] write_inode_now+0x170/0x208 [ 54.834111][ T39] iput+0x6bc/0xb90 [ 54.834841][ T39] ext4_xattr_block_set+0x12dc/0x2188 [ 54.835876][ T39] ext4_expand_extra_isize_ea+0xb18/0x13a0 [ 54.836965][ T39] __ext4_expand_extra_isize+0x29c/0x370 [ 54.838033][ T39] __ext4_mark_inode_dirty+0x3a4/0x810 [ 54.839089][ T39] ext4_evict_inode+0x7a0/0xfc4 [ 54.840014][ T39] evict+0x4b8/0x740 [ 54.840776][ T39] iput+0x858/0xb90 [ 54.841542][ T39] ext4_process_orphan+0x240/0x2b4 [ 54.842514][ T39] ext4_orphan_cleanup+0x7b8/0xd30 [ 54.843461][ T39] ext4_fill_super+0x45a4/0x4d60 [ 54.844397][ T39] get_tree_bdev_flags+0x380/0x434 [ 54.845384][ T39] get_tree_bdev+0x2c/0x3c [ 54.846242][ T39] ext4_get_tree+0x28/0x38 [ 54.847085][ T39] vfs_get_tree+0x90/0x28c [ 54.847914][ T39] fc_mount+0x24/0xac [ 54.848709][ T39] do_new_mount+0x2a4/0x540 [ 54.849545][ T39] path_mount+0x5d0/0xa68 [ 54.850427][ T39] do_mount+0xe8/0x148 [ 54.851172][ T39] __arm64_sys_mount+0x334/0x380 [ 54.852106][ T39] invoke_syscall+0x98/0x244 [ 54.852976][ T39] el0_svc_common+0xe8/0x23c [ 54.853868][ T39] do_el0_svc+0x48/0x58 [ 54.854712][ T39] el0_svc+0x64/0x260 [ 54.855490][ T39] el0t_64_sync_handler+0x48/0x148 [ 54.856409][ T39] el0t_64_sync+0x198/0x19c [ 54.857248][ T39] [ 54.857248][ T39] -> #1 (&ei->xattr_sem){++++}-{4:4}: [ 54.858490][ T39] down_write+0x50/0xc0 [ 54.859265][ T39] ext4_xattr_set_handle+0x138/0xe00 [ 54.860263][ T39] ext4_initxattrs+0xa4/0x118 [ 54.861188][ T39] security_inode_init_security+0x24c/0x378 [ 54.862273][ T39] ext4_init_security+0x44/0x58 [ 54.863198][ T39] __ext4_new_inode+0x28dc/0x3390 [ 54.864114][ T39] ext4_create+0x1e8/0x3f4 [ 54.864996][ T39] path_openat+0x1244/0x2a6c [ 54.865905][ T39] do_file_open+0x1c4/0x2e4 [ 54.866744][ T39] do_sys_openat2+0x114/0x1e8 [ 54.867637][ T39] do_sys_open+0xac/0xdc [ 54.868493][ T39] __arm64_sys_openat+0x9c/0xb8 [ 54.869438][ T39] invoke_syscall+0x98/0x244 [ 54.870400][ T39] el0_svc_common+0xe8/0x23c [ 54.871311][ T39] do_el0_svc+0x48/0x58 [ 54.872147][ T39] el0_svc+0x64/0x260 [ 54.872941][ T39] el0t_64_sync_handler+0x48/0x148 [ 54.873868][ T39] el0t_64_sync+0x198/0x19c [ 54.874709][ T39] [ 54.874709][ T39] -> #0 (jbd2_handle){++++}-{0:0}: [ 54.876008][ T39] __lock_acquire+0x1780/0x2f44 [ 54.876929][ T39] lock_acquire+0x140/0x368 [ 54.877808][ T39] wait_transaction_locked+0x178/0x220 [ 54.878827][ T39] start_this_handle+0x5b0/0x1c10 [ 54.879773][ T39] jbd2__journal_start+0x260/0x520 [ 54.880764][ T39] __ext4_journal_start_sb+0x228/0x948 [ 54.881802][ T39] ext4_do_writepages+0xb18/0x3ac8 [ 54.882744][ T39] ext4_writepages+0x194/0x2d8 [ 54.883725][ T39] do_writepages+0x270/0x468 [ 54.884548][ T39] __writeback_single_inode+0x144/0x1808 [ 54.885621][ T39] writeback_sb_inodes+0x79c/0x1744 [ 54.886627][ T39] __writeback_inodes_wb+0xec/0x210 [ 54.887583][ T39] wb_writeback+0x3e8/0x10e0 [ 54.888502][ T39] wb_workfn+0x9ac/0xcb4 [ 54.889354][ T39] process_scheduled_works+0x79c/0x1098 [ 54.890411][ T39] worker_thread+0x754/0xba0 [ 54.891313][ T39] kthread+0x2f8/0x3c8 [ 54.892116][ T39] ret_from_fork+0x10/0x20 [ 54.892993][ T39] [ 54.892993][ T39] other info that might help us debug this: [ 54.892993][ T39] [ 54.894299][ T6125] __nla_validate_parse: 4 callbacks suppressed [ 54.894327][ T6125] netlink: 108 bytes leftover after parsing attributes in process `syz.3.365'. [ 54.897323][ T39] Chain exists of: [ 54.897323][ T39] jbd2_handle --> &ei->xattr_sem --> &sbi->s_writepages_rwsem [ 54.897323][ T39] [ 54.899629][ T39] Possible unsafe locking scenario: [ 54.899629][ T39] [ 54.900869][ T39] CPU0 CPU1 [ 54.901850][ T39] ---- ---- [ 54.902755][ T39] rlock(&sbi->s_writepages_rwsem); [ 54.903635][ T39] lock(&ei->xattr_sem); [ 54.904799][ T39] lock(&sbi->s_writepages_rwsem); [ 54.906154][ T39] lock(jbd2_handle); [ 54.906834][ T39] [ 54.906834][ T39] *** DEADLOCK *** [ 54.906834][ T39] [ 54.908257][ T39] 4 locks held by kworker/u8:2/39: [ 54.909093][ T39] #0: ffff0000c2489140 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x748/0x1098 [ 54.911001][ T39] #1: ffff80008fff7c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x750/0x1098 [ 54.913173][ T39] #2: ffff0000d2fae0d8 (&type->s_umount_key#31){++++}-{4:4}, at: super_trylock_shared+0x24/0xdc [ 54.915038][ T39] #3: ffff0000d2facc18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x16c/0x2d8 [ 54.916878][ T39] [ 54.916878][ T39] stack backtrace: [ 54.917869][ T39] CPU: 1 UID: 0 PID: 39 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT [ 54.919616][ T39] Tainted: [L]=SOFTLOCKUP [ 54.920335][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 54.922088][ T39] Workqueue: writeback wb_workfn (flush-259:0) [ 54.923143][ T39] Call trace: [ 54.923711][ T39] show_stack+0x2c/0x3c (C) [ 54.924468][ T39] __dump_stack+0x30/0x40 [ 54.925211][ T39] dump_stack_lvl+0xd8/0x12c [ 54.925965][ T39] dump_stack+0x1c/0x28 [ 54.926700][ T39] print_circular_bug+0x328/0x330 [ 54.927524][ T39] check_noncircular+0x158/0x174 [ 54.928343][ T39] __lock_acquire+0x1780/0x2f44 [ 54.929209][ T39] lock_acquire+0x140/0x368 [ 54.929995][ T39] wait_transaction_locked+0x178/0x220 [ 54.930919][ T39] start_this_handle+0x5b0/0x1c10 [ 54.931779][ T39] jbd2__journal_start+0x260/0x520 [ 54.932667][ T39] __ext4_journal_start_sb+0x228/0x948 [ 54.933592][ T39] ext4_do_writepages+0xb18/0x3ac8 [ 54.934483][ T39] ext4_writepages+0x194/0x2d8 [ 54.935293][ T39] do_writepages+0x270/0x468 [ 54.936068][ T39] __writeback_single_inode+0x144/0x1808 [ 54.937086][ T39] writeback_sb_inodes+0x79c/0x1744 [ 54.937989][ T39] __writeback_inodes_wb+0xec/0x210 [ 54.938871][ T39] wb_writeback+0x3e8/0x10e0 [ 54.939624][ T39] wb_workfn+0x9ac/0xcb4 [ 54.940319][ T39] process_scheduled_works+0x79c/0x1098 [ 54.941253][ T39] worker_thread+0x754/0xba0 [ 54.942044][ T39] kthread+0x2f8/0x3c8 [ 54.942735][ T39] ret_from_fork+0x10/0x20 [ 55.009546][ T6135] input: syz1 as /devices/virtual/input/input6 [ 55.462924][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.182943][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.184219][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.200500][ T24] cfg80211: failed to load regulatory.db