last executing test programs: 22.759323017s ago: executing program 32 (id=184): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x1, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 22.756770085s ago: executing program 1 (id=187): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x400b8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0x1a1c08, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x80) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0/file0/../file0\x00', 0x0, 0x2125099, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000e80)={'filter\x00', 0x104, 0x4, 0x3e8, 0x1f0, 0x0, 0x108, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x7}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xa010102, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket(0x25, 0x6, 0x4) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x1000000, &(0x7f0000004440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}, 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r1, &(0x7f0000002c00)={0x2020}, 0x2020) 22.646424872s ago: executing program 33 (id=188): r0 = syz_open_dev$media(&(0x7f0000000000), 0x9, 0x220100) pwritev2(r0, &(0x7f0000000440)=[{&(0x7f0000000040)="bb4590101ddf2fe12a6489a1ce6447f97be5216d25ec3032a5ddabc303619b5eee3cfeaa84ebc85922c77d3ce197b49736a6819b308d1bf4f31cb8e8bfc364e11805c3436dd1246e67ac08d7cb1cccd2eb3310d2120f90913f8b3aaf8d03605e93943eb0e5a99871e1715580c2ad777c", 0x70}, {&(0x7f00000000c0)="8f4af279dba2e1c8b13d86247cb74050ad736a99368509b3093a5e065ef0ac2d246b51d43c8bae1c1ef725c68cee1b088adff9e7e2ff192751d5e02305aab75416025589bc22f3d175c4c60fd0cf54bff47cfa81bc63bcc370161b1956f80e6d98bd855102c7cc3681baa7294240c1c273b54ef9ded596aa9c79e20cb023999ff8aa60dd818bcc1f241790e0831c6f1a7ce1948aa4f9c467d279ff399cf05f2646327f6934c5719fa362ac97eec252355dbc36e98e8178e9d8846fd6a6268ce6fd2603c1f08dbf4cec25526dcd44c66dfd6577840f22352a5b2d60e0f54a61a0ae1a360fd9f0d4f895fe0ac2fffe5537299ba772deba899323ad7a8b24ea", 0xfe}, {&(0x7f00000001c0)="d3332ff72faf2811d741c9d1159abcc132facbfd7a7008dde6616e2ca5f316ca180b61df6e953a4f48484a7f8adb1115bbf25fd1a480159c330fa295e3be4b52bc5a73a6d4953bcc5435031bb91c3418dcd05ec9b7c31140cba84ed950", 0x5d}, {&(0x7f0000000240)="97d880c42bffe60685645941165f8bd60801ba3a4170", 0x16}, {&(0x7f0000000280)="dea353d3c04a90757b862a4b8eeedd120fc75ee948e5111992116708e11833508640f6572bfde8dd6b63d7bd3c0663a97571cf381b1c5ea7b69828c60baba7fb3c488f48ff6fd2fabb7832cbbae87a2cd8cee2e18b54b9b7e4796afd51ea1431dd68bae20da22a22dccac32f8982aee0f0d09b3ada72be8e49183a3e7975c6fa45043de420c35d16ccda17bb654c968548d97a60e9cbab489b8d51beadec0aa88bd900789635ec4f4defbf193258c7a14a4386316836849c3d79c98b776c056c141a35b39bad24244c839f5cde30a2a0936d3629216e30fb55cc55182916fd7a", 0xe0}, {&(0x7f0000000380)="cbb8ab7e0b55ab00ab80754fc6ef24051aa18e5d80310e06cede0921658cc34aed4384f728dd3e45e85d8eec88a66a916edb4b29895c5d854472e0c3bd361572163e5fe867a24f345ad957dcfa60570f4a171f79e35e27c79381ac1d7ec2cc6adea5b3dae3f8b85ff4fc8c654e247f89510a732421f3994ec97557615d3988f27b8183fe19946604371c7601a511608429fc8983beac81c388975bfbad1a8dc1fa6021a43df87dddacdd1dd8739134c690197d7f93005a5b90a53ed0065bef", 0xbf}], 0x6, 0xfff, 0x8, 0xa) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f00000004c0)=0x1) r1 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000500)={0x2, 0x4e20, @loopback}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={0x1, 0xffffffffffffffff}, 0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000005c0)=0x14) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000600), 0x109000, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0xb, 0x0, r2, 0x4, '\x00', r3, r4, 0x0, 0x4, 0x3}, 0x50) r6 = dup(r5) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f00000006c0)={0x0, @bt={0x4, 0x3, 0x1, 0x0, 0x754c, 0xffff, 0x1, 0x7, 0x3, 0xbe, 0x80000000, 0x1, 0xffff0001, 0x637a, 0x1f, 0x8, {0x3, 0x8}, 0x2, 0x2c}}) r7 = socket$unix(0x1, 0x1, 0x0) recvfrom$unix(r7, &(0x7f0000000780)=""/155, 0x9b, 0x40000100, &(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e) mkdirat(r6, &(0x7f00000008c0)='./file1\x00', 0x40) getpeername$tipc(r4, &(0x7f0000000900)=@id, &(0x7f0000000940)=0x10) fcntl$F_SET_RW_HINT(r7, 0x40c, &(0x7f0000000980)=0x4) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x4) ioctl$TCSBRKP(r4, 0x5425, 0x8) readlinkat(0xffffffffffffffff, &(0x7f0000000ac0)='./file1\x00', &(0x7f0000000b00)=""/24, 0x18) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000b40)={0x0}, &(0x7f0000000b80)=0xc) sched_setscheduler(r8, 0x6, &(0x7f0000000bc0)=0x800) lgetxattr(&(0x7f0000000c00)='./file1/../file0\x00', &(0x7f0000000c40)=@random={'btrfs.', '{]\x00'}, &(0x7f0000000c80)=""/220, 0xdc) ioctl$EVIOCGKEY(r6, 0x80404518, &(0x7f0000000d80)=""/2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000dc0)) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000e00)={0x22, 0x3, 0x0, {0x4, 0x1, 0x0, '\x00'}}, 0x22) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000e40)=[{{0x0, 0x0, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}, {{0x1, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x4, 0x1, 0x1}}, {{0x3}, {0x2, 0x1}}, {{0x2, 0x0, 0x1}, {0x1, 0x1, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x0, 0x1}}], 0x30) connect$tipc(r6, &(0x7f0000000e80)=@id={0x1e, 0x3, 0x1, {0x4e22, 0x3}}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), r6) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r9, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x200080a0}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x30, r10, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x50}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="7374bd47a194"}]}, 0x30}, 0x1, 0x0, 0x0, 0x80c4}, 0x8012) 21.811563349s ago: executing program 1 (id=199): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) (async) sendmsg$can_raw(r6, &(0x7f0000000280)={&(0x7f00000005c0)={0x1d, r5}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@can={{}, 0x1, 0x0, 0x4, 0x0, "500000b74b958e56"}, 0x10}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001c00010023bd7000ffdbdf2507000000", @ANYRES32=r3, @ANYBLOB="800081040a0002"], 0x28}, 0x1, 0x0, 0x0, 0x200440c5}, 0x14) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x440042, 0x1) close(r7) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) (async) r9 = accept4(r8, 0x0, 0x0, 0x800) (async) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000000400)={r11, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x8}, &(0x7f00000001c0)=0x90) (async) sendmmsg$alg(r9, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)=[@assoc={0x18, 0x117, 0x4, 0x8}], 0x18, 0x40040}], 0x1, 0x40) (async) sendmsg$RDMA_NLDEV_CMD_GET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) (async) recvmsg(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), 0x38}, 0x40000061) (async) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000000080)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d85c10616d58b360b7fd92a8553f403bb14d30eb3e76f78d6c97d143e285d81b61679eb2e6d37b6f50023fb8583ec8fceb508", @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',\x00']) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r7, 0x4) 21.231043539s ago: executing program 1 (id=201): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x0, 0x0, 0x0, 0x6248, 0x0, 0x0, 0x40f00, 0x26, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000010000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800024000ffff120800014000000000140003"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[], 0x90}, 0x1, 0x7}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020732500000000005642207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r4, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, "04e7ffffff00", "fc094e36a7e397030000007e580400030000000000000000ffff00", "c700", "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) writev(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) read$FUSE(r5, &(0x7f0000006200)={0x2020}, 0xffe8) read$FUSE(r5, &(0x7f00000000c0)={0x2020}, 0x2020) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x80, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xae}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6b}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000001}, 0x80) syz_emit_ethernet(0x46, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6c00000000102c0100000000000000000000000000000000ff020000000000000000000000000001ff"], 0x0) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000002200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000021c0)={&(0x7f00000022c0)=ANY=[@ANYBLOB="640000000d06050000000000000000000700000113000300686173683a6e65742c696661636500f240f0b7000500010007000000100003006269746d61703a706f72740013000300686173683a6e65742c696661636500000d000300686173683a6d616300000000"], 0x64}, 0x1, 0x0, 0x0, 0x20000815}, 0x4008088) recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/23, 0x2c}, 0x12}], 0x1, 0x20, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002280)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtclass={0x2c, 0x28, 0x200, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x8, 0xc}, {0x4, 0xfff1}, {0xa, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', r8, 0x4, 0x2, 0xf, 0x0, 0x55, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x40, 0xe3e1, 0xd00}}) 21.229999876s ago: executing program 34 (id=201): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x0, 0x0, 0x0, 0x6248, 0x0, 0x0, 0x40f00, 0x26, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000010000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800024000ffff120800014000000000140003"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[], 0x90}, 0x1, 0x7}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020732500000000005642207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r4, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, "04e7ffffff00", "fc094e36a7e397030000007e580400030000000000000000ffff00", "c700", "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) writev(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) read$FUSE(r5, &(0x7f0000006200)={0x2020}, 0xffe8) read$FUSE(r5, &(0x7f00000000c0)={0x2020}, 0x2020) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x80, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xae}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6b}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000001}, 0x80) syz_emit_ethernet(0x46, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6c00000000102c0100000000000000000000000000000000ff020000000000000000000000000001ff"], 0x0) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000002200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000021c0)={&(0x7f00000022c0)=ANY=[@ANYBLOB="640000000d06050000000000000000000700000113000300686173683a6e65742c696661636500f240f0b7000500010007000000100003006269746d61703a706f72740013000300686173683a6e65742c696661636500000d000300686173683a6d616300000000"], 0x64}, 0x1, 0x0, 0x0, 0x20000815}, 0x4008088) recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/23, 0x2c}, 0x12}], 0x1, 0x20, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002280)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtclass={0x2c, 0x28, 0x200, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x8, 0xc}, {0x4, 0xfff1}, {0xa, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', r8, 0x4, 0x2, 0xf, 0x0, 0x55, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x40, 0xe3e1, 0xd00}}) 16.32192871s ago: executing program 7 (id=255): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) read(r1, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3}) r2 = syz_io_uring_setup(0x141c, &(0x7f00000000c0)={0x0, 0x55ee, 0x1, 0x1, 0x193}, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit$UBLK(r3, r4, r5, &(0x7f00000025c0)=@ublk_io_cmd_sqes={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, 0x8b1f, 0x0, 0x0, '\x00', @commit_and_fetch_cmd={0x1, 0x849, 0xc, 0x0}}) syz_io_uring_submit$UBLK(r3, r4, r5, &(0x7f0000000480)=@ublk_get_params_sqe={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0x80207509, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0}}) io_uring_enter(r2, 0x20, 0xd9db, 0x8, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x30, r8, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r8, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x9, 0x3a}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x8400) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) socket$kcm(0x2, 0xa, 0x73) socket$kcm(0x2, 0xa, 0x73) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r11 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a1}) io_uring_register$IORING_REGISTER_BUFFERS(r11, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000300)={[{@acl}, {@norecovery}, {@bsdgroups}, {@noload}, {@delalloc}, {@resuid}, {@discard}, {@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x7fffffff}}, {@errors_remount}]}, 0xfa, 0x477, &(0x7f0000000dc0)="$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") r12 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x2e0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r12, 0x8004587d, &(0x7f0000000040)={@id={0x2, 0x0, @b}}) quotactl$Q_QUOTAON(0xffffffff80000101, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 16.209876525s ago: executing program 5 (id=256): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r0, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) 16.048548567s ago: executing program 5 (id=257): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) 15.938600999s ago: executing program 5 (id=259): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (rerun: 64) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) syz_open_procfs$userns(r2, &(0x7f0000000100)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="04000000ff0a"}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 64) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 64) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) (async, rerun: 32) r7 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x42, 0x0) (async, rerun: 32) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0xeee909b3cc2146f}, '\x00', "3499a517a1df1c71496cffeebaabfe5eb548502ce0f59ce4a4af09f0438ece31", "4277dea9", "ef9e00"}, 0x38) (async, rerun: 32) r8 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) r9 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64) connect$pppl2tp(r9, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x1, 0x3, 0x3, {0xa, 0x4e21, 0x8, @mcast2, 0x1}}}, 0x32) (async, rerun: 64) close_range(r8, 0xffffffffffffffff, 0x0) (async, rerun: 32) sendto$inet6(r6, &(0x7f0000000340)="d1", 0x1, 0x20000044, 0x0, 0x0) (rerun: 32) connect$pppl2tp(r7, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @multicast1}, 0x3, 0x1, 0x1, 0x1}}, 0x26) (async) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x40000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) 15.755215443s ago: executing program 7 (id=262): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000001c0)={0x60, 0x2, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0xf, 0x5c}) capget(&(0x7f0000000080)={0x20071026, r0}, &(0x7f00000000c0)={0xfffffff9, 0x6, 0x8, 0xd, 0x10000, 0x100}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/2663], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/2663], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 15.702504897s ago: executing program 7 (id=264): r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, &(0x7f00000000c0)="800009f3220800ce", 0x8, 0x800, &(0x7f0000000280)={0xa, 0xfe80, 0x0, @mcast2, 0x9}, 0x1c) 15.659090572s ago: executing program 7 (id=265): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) ioctl$UBLK_U_CMD_GET_DEV_INFO(r0, 0x80207502, &(0x7f0000000900)={0x0, 0xffff, 0x40, &(0x7f00000008c0)=@ublk_ctrl_dev_info_new=@any_dev}) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000980)=0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000300)=""/173, &(0x7f00000003c0)=0xad) shutdown(r1, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) accept$inet6(r1, &(0x7f0000000440)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000880)=0x1c) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000380)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) sched_setscheduler(r4, 0x3, &(0x7f0000000400)=0xe2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x1}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={r5, 0x54, &(0x7f0000000280)=[@in6={0xa, 0x4e22, 0x5, @mcast2, 0xb}, @in6={0xa, 0x4e23, 0x7, @remote}, @in6={0xa, 0x4e22, 0x2, @remote, 0xfffff801}]}, &(0x7f0000000340)=0x10) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file4\x00', 0xa18c14, &(0x7f0000000480)={[{@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@shortname_lower}, {@utf8no}, {@shortname_win95}, {@numtail}, {@shortname_win95}, {@utf8no}, {@rodir}, {@fat=@time_offset={'time_offset', 0x3d, 0xe4}}, {@shortname_lower}]}, 0x1, 0x29b, &(0x7f0000000580)="$eJzs3c9qK1UYAPBv0iRNVEgWrkRwQBeuwr33CW6QChezUrLQjV5sC5KEQgMB/2Dsyr3gynfwHXwAN76BC5eCO7sQR5KZSdI0bY3EVOrvt5kvc74v509OWyjMyUevjgbHZ+PTiy9+jkYjicrTeBqXSbSjEqWvAgB4SC6zLH7LcnflVqMeEVmreFXZw/AAgH/BNn//AYCH4b33P3in2+sdvZumjYjR15N+Evk1b++exicxjJN4FK34IyJbyOOXnvWOopqm5T8DJs3oR4w+/LF43f01Yl7/OFrRXq+vF1npXLwxmk76s55n11q8kER0syRPeRKteDkiq0XxJvnl7We9oyfp9fro1+PN178rxv/nSXSiFT99HGcxjOP5Wyzrv3ycpm9l3/7+eT6DfkQynfQP53lL2cFePhAAAAAAAAAAAAAAAAAAAAAAAP4XOulCe/X8nPI0wE5nc/uN5wMVJ/xMV87XeZSmaXmMz6Rfi7y+Gq9Uo3p/MwcAAAAAAAAAAAAAAAAAAID/jvGnnw2eD4cn51eCH7JZ0Lw1Zz2ortwpH+u/u2pzMPg+YvuqvxPEQTG0YXKti6Rs2kFfh9skNzd1GpWb1rA6jHzw32w/sNd2NcFbg3J3DZ4ncUdyY/MmWdl15TY8HydbbMhsw9Id3FhV39Hc6y/+0/LmxoWazbi2WMyrVY3ZJ7lyp7bjn5Q1yc5/9wAAAAAAAAAAAAAAAAAAAFctH/qNX641XtzLkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg75bf/78Ior1+Zz2YFsXzO5Xbkw/Pxxu6be95mgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxwfwUAAP//5OlVhQ==") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) clock_adjtime(0x17, &(0x7f0000000000)={0x1ea33, 0x9, 0x379ee6, 0x0, 0x4000009, 0x0, 0x89, 0x3, 0x6, 0x7, 0xffffffff, 0x800, 0x9, 0x2, 0x8001, 0xffffffffffffffff, 0x800000, 0x5, 0x8000e, 0x5, 0x200, 0x1, 0x11cb, 0x8, 0x40, 0x9}) fcntl$setlease(r6, 0x400, 0x1) bind(r3, &(0x7f0000000100)=@ll={0x11, 0xf7, 0x0, 0x1, 0x8, 0x6, @local}, 0x80) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$getsig(0x4202, r8, 0x6c4, 0x0) ptrace$setsig(0x4203, r8, 0x8, &(0x7f0000000180)={0xf, 0x0, 0x5}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x20, r10, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x78}}, 0xc000) sendto$inet6(r1, &(0x7f0000000180)="12c3b3d18aa3a7e292e900d84c6e2cf9ca6164d384a006b65bac1b2d943ae1eecccdb4d5b4dfaec5e2721b4f89ed68fbcf735b8b88e34fb950bdd5920e4df6309a2d4ca7e12baa7f916077f0a91f8a711a0ae2688674a5fbf85580fcae9bdac5908efd3ec73bc2abc205bfddaa0caa31c8030e02984a4f5ef429353a49822db45afd", 0x82, 0x40, &(0x7f0000000240)={0xa, 0x4e20, 0xe, @dev={0xfe, 0x80, '\x00', 0x16}, 0x8001}, 0x1c) 15.183062441s ago: executing program 5 (id=266): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), 0x0, 0x400b8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0x1a1c08, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x80) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0/file0/../file0\x00', 0x0, 0x2125099, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000e80)={'filter\x00', 0x104, 0x4, 0x3e8, 0x1f0, 0x0, 0x108, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x7}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xa010102, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket(0x25, 0x6, 0x4) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x1000000, &(0x7f0000004440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}, 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r1, &(0x7f0000002c00)={0x2020}, 0x2020) 15.182557381s ago: executing program 7 (id=267): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r0, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) 14.341880903s ago: executing program 5 (id=275): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x67d}) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000fee000/0x10000)=nil, 0x10000}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000100001000000000000000000010015fcf460c528000a28000000000a01040000000000000000010080030900010073797a300000000008000240000000012c000000030a01010000000000000000010002000900010073797a30000000000900030073797a32000000002c000008030aec7c3ea6000000000000010000050c00024000000000000000010900010073797a3000000000140000001100010000000000000000000700000a"], 0xa8}}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0xfffffffc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="00010000c580000008001b000000"], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 14.042776216s ago: executing program 7 (id=277): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) connect$llc(r1, &(0x7f0000000100)={0x1a, 0x65d, 0x4, 0xf4, 0x6, 0xb, @local}, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) unshare(0x22020600) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x10, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x106a655, 0x0, 0x0, 0x0, 0x7ff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@call={0x85, 0x0, 0x0, 0x11}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = fsopen(&(0x7f0000000200)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xc8b573f2c15a223a) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r8, &(0x7f00000076c0)=""/4126, 0x101e) getdents64(r7, &(0x7f0000001f80)=""/4105, 0x1009) getdents64(r7, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x4001, 0x3, 0x430, 0x300, 0xb, 0x148, 0x0, 0x148, 0x398, 0x230, 0x242, 0x398, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {}, 0x73}, 0x0, 0x2d0, 0x300, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x8}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0xe, 0x0, 0x6, './file0\x00'}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x6}, 0x0, 0x1}}}, {{@uncond, 0xec010000, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x80000001}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0) 13.803061096s ago: executing program 35 (id=277): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) connect$llc(r1, &(0x7f0000000100)={0x1a, 0x65d, 0x4, 0xf4, 0x6, 0xb, @local}, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) unshare(0x22020600) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x10, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x106a655, 0x0, 0x0, 0x0, 0x7ff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@call={0x85, 0x0, 0x0, 0x11}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = fsopen(&(0x7f0000000200)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xc8b573f2c15a223a) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r8, &(0x7f00000076c0)=""/4126, 0x101e) getdents64(r7, &(0x7f0000001f80)=""/4105, 0x1009) getdents64(r7, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x4001, 0x3, 0x430, 0x300, 0xb, 0x148, 0x0, 0x148, 0x398, 0x230, 0x242, 0x398, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {}, 0x73}, 0x0, 0x2d0, 0x300, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x8}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0xe, 0x0, 0x6, './file0\x00'}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x6}, 0x0, 0x1}}}, {{@uncond, 0xec010000, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x80000001}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0) 13.79393354s ago: executing program 5 (id=279): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./bus\x00', 0x3000490, &(0x7f0000000980)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@mblk_io_submit}, {@nouid32}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xc}}, {@bh}, {}]}, 0x45, 0x7bf, &(0x7f0000001140)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000880)=ANY=[@ANYBLOB="5c0000000201010200000000000000000a0008000c00198008000100aa0000003c0001802c0001"], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x14) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001a00010028bd7000fdffffff0a000000", @ANYRES32=0x0, @ANYBLOB="01008000140002"], 0x44}, 0x1, 0x0, 0x0, 0xc1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) 13.723747146s ago: executing program 36 (id=279): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./bus\x00', 0x3000490, &(0x7f0000000980)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@mblk_io_submit}, {@nouid32}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xc}}, {@bh}, {}]}, 0x45, 0x7bf, &(0x7f0000001140)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000880)=ANY=[@ANYBLOB="5c0000000201010200000000000000000a0008000c00198008000100aa0000003c0001802c0001"], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x14) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001a00010028bd7000fdffffff0a000000", @ANYRES32=0x0, @ANYBLOB="01008000140002"], 0x44}, 0x1, 0x0, 0x0, 0xc1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) 13.295046231s ago: executing program 0 (id=283): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r2 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x40400) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f00000001c0)={0x9, 0x100, 0x2, {0xb, 0xfdfffe40, 0x20800409, 0x7bd7bdcb}}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000495e086409b6ff64a379016d6dd9b42030500"/36, @ANYRES32=0x0, @ANYBLOB="0100000000040000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB="0a000200aaaaaaaaaaaa0000"], 0x48}}, 0x0) 13.175111539s ago: executing program 0 (id=284): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r4) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000440)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000000000000c000000180001801400020076657468305f766972745f77696669001c00038014000180"], 0x48}}, 0x804) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'netdevsim0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x22000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x38, r5, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x38}}, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x3}, {}, {0x2, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000001800), 0xc0241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4401}) (async) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000240)="0bc3", 0x27}, {&(0x7f0000000680)='\x00\x00', 0x2}], 0x2) 13.020126274s ago: executing program 0 (id=286): socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) msgrcv(0x0, 0x0, 0x0, 0x3, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000010) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x80c4}, 0x4) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgctl$IPC_RMID(0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000340)={@generic={0x1, "de7be275a164c42b239811fa0b56ad225d8194c844d4a6a95aa925fd6c7225a423c805d9b256026eb0ef011d118d0cb9f65e03245dec7e0c7264bbc33873f79186fc9f60f011ab5711ac8a99d6ded1dc192c870f2f0b2fdcb4433518148693b03a5cdc50ea32609662d0daa40826eb4ae1db09b290f2043437f772ec71b5"}, {&(0x7f0000000040)=""/32, 0x20}, &(0x7f0000000080), 0x50}, 0xa0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x4, [{0x0, 0x4}]}, @ptr={0x0, 0x0, 0x0, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x5a}, 0x20) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(&(0x7f0000000040), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) keyctl$restrict_keyring(0x1d, r6, 0x0, 0x0) add_key$keyring(&(0x7f0000000400), &(0x7f0000000540)={'syz', 0x2}, 0x0, 0x0, r6) openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x484000, 0x80, 0x18}, 0x18) 12.122992841s ago: executing program 0 (id=291): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400b8, 0x0, 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0x1a1c08, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x80) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0/file0/../file0\x00', 0x0, 0x2125099, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000e80)={'filter\x00', 0x104, 0x4, 0x3e8, 0x1f0, 0x0, 0x108, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x7}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xa010102, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket(0x25, 0x6, 0x4) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x1000000, &(0x7f0000004440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}, 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r1, &(0x7f0000002c00)={0x2020}, 0x2020) 10.521393872s ago: executing program 0 (id=298): r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, &(0x7f00000000c0)="800009f3220800ce", 0x8, 0x800, &(0x7f0000000280)={0xa, 0x0, 0xf5, @mcast2, 0x9}, 0x1c) 10.520786484s ago: executing program 6 (id=299): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) getdents64(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) socket$kcm(0x29, 0x7, 0x0) socket(0x1e, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x103}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000280), 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000180)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '?'}}, {@smackfsroot={'smackfsroot', 0x3d, 'ext4\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '[,*^)'}}, {@subj_role={'subj_role', 0x3d, ',-Fk'}}, {@subj_user={'subj_user', 0x3d, 'memory.events.local\x00'}}, {@subj_role={'subj_role', 0x3d, ')'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'ext4\x00'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = shmget(0x1, 0x4000, 0x800, &(0x7f0000ffb000/0x4000)=nil) shmat(r4, &(0x7f0000ffd000/0x2000)=nil, 0x4000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) mq_unlink(0x0) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r6, &(0x7f0000000880)={&(0x7f0000000040)={0xa, 0x4e24, 0x40002, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000001c0)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000002d000000390000003300020100000000df0c6f8e0f183a7593f7becce25e9a60b1bd8700dbbfd1ce8e36dccda8a97beca572eae9dff8c6de0a423dc17af336fc63f013e045520d26e666b0bcaa6794880ae0cd"], 0x18}, 0x2400c046) kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, r6, &(0x7f0000000140)={r0, r3, 0x3}) listen(r5, 0x3) accept4$bt_l2cap(r5, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) close(r0) 10.520064118s ago: executing program 0 (id=300): r0 = socket(0xa, 0x3, 0x3a) (async) r1 = memfd_create(&(0x7f0000000540)='\xdd#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\xf9\xff\xff\xff\x00\x17?$^\xe1Ob\xe1Y\x03\x00\x00\x00\x00\x00\x00\x00\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\xdc\xaa<\x96\xedE>{\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\xdc\n\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\x87\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T[\xb7\xa4\xb0\bk&\xede\x8b\xc2\xb2\xcd\xef\xcf\x0fE\xc5\x86]\xc0]}\xdd^\xf6&\x16>c\x9d\x9c\xc9\x01\x04\x00\x00\xe9h\xbd\x10p\x8f\x14\x1f2\"\x1b;\xfda\x19\x8bo^\x96\x9a~Q\xce\x95\x02\xb8e\xbbG\xb0V[\xfe\x80\x94$y\x8a\\@\xa9^\x95!IJ\xcf\xf7\xafoX/qG\x97ITp\x01\xae\f\"n;%\xecT\xf6\xb6\xbf;\xde\xec\xb4z\xaa\xd9%\xa5;wy~\xcb\x9a\xd7\r\xe2\xcd\xf0C\x16\xbf0\x89\xb4\xf5\x86\xf3\x99\x9bq\xd3\x15\xe1:\x86\xe4\x14\x805K\xcf\xf6\xda\xd1A>\xf4r>\xfdyAH\x0f\x00'/426, 0x0) fsetxattr$security_ima(r1, &(0x7f0000000080), &(0x7f0000000040)=ANY=[@ANYBLOB="027f2c412b9843db6daf"], 0xa, 0x0) (async) getsockopt$nfc_llcp(r0, 0x3a, 0x1, 0x0, 0x20000000) (async) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x80000001}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000004200)={0xc, 0xc, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000004000000000000008aaa000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d0000009500000000000000"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) syz_emit_ethernet(0xb6, &(0x7f0000000200)=ANY=[@ANYBLOB="b595c0b062050a28c2e17bbbba484b49bba5478fc1dcdc24eb059efb115cb09174436718532b27dbbfc7b15537ee9930b660617e88f898cd577f99a067b53206f31fecb018b28c2e6cfaa15814ce1b0b706b5fd9115387d7e51f3d9f9d77b482ba562dfd525af4f217ec5c404aa8240820d38c734f0360b2a2b0a6135b5a577fa4bec01f16b70c96952228ff9b504c1b114a38a101810a79ae8bdcb170ee9827a07e89aa78ffd4a4c058f91928078717114308d558a52ac67bc003dbaf0c62058d00e65a594846c38e392c4c375be43bc944ef8d4ebe", @ANYRES64=r2], 0x0) (async) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 10.519790882s ago: executing program 37 (id=300): r0 = socket(0xa, 0x3, 0x3a) (async) r1 = memfd_create(&(0x7f0000000540)='\xdd#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\xf9\xff\xff\xff\x00\x17?$^\xe1Ob\xe1Y\x03\x00\x00\x00\x00\x00\x00\x00\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\xdc\xaa<\x96\xedE>{\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\xdc\n\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\x87\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T[\xb7\xa4\xb0\bk&\xede\x8b\xc2\xb2\xcd\xef\xcf\x0fE\xc5\x86]\xc0]}\xdd^\xf6&\x16>c\x9d\x9c\xc9\x01\x04\x00\x00\xe9h\xbd\x10p\x8f\x14\x1f2\"\x1b;\xfda\x19\x8bo^\x96\x9a~Q\xce\x95\x02\xb8e\xbbG\xb0V[\xfe\x80\x94$y\x8a\\@\xa9^\x95!IJ\xcf\xf7\xafoX/qG\x97ITp\x01\xae\f\"n;%\xecT\xf6\xb6\xbf;\xde\xec\xb4z\xaa\xd9%\xa5;wy~\xcb\x9a\xd7\r\xe2\xcd\xf0C\x16\xbf0\x89\xb4\xf5\x86\xf3\x99\x9bq\xd3\x15\xe1:\x86\xe4\x14\x805K\xcf\xf6\xda\xd1A>\xf4r>\xfdyAH\x0f\x00'/426, 0x0) fsetxattr$security_ima(r1, &(0x7f0000000080), &(0x7f0000000040)=ANY=[@ANYBLOB="027f2c412b9843db6daf"], 0xa, 0x0) (async) getsockopt$nfc_llcp(r0, 0x3a, 0x1, 0x0, 0x20000000) (async) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x80000001}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000004200)={0xc, 0xc, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000004000000000000008aaa000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d0000009500000000000000"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) syz_emit_ethernet(0xb6, &(0x7f0000000200)=ANY=[@ANYBLOB="b595c0b062050a28c2e17bbbba484b49bba5478fc1dcdc24eb059efb115cb09174436718532b27dbbfc7b15537ee9930b660617e88f898cd577f99a067b53206f31fecb018b28c2e6cfaa15814ce1b0b706b5fd9115387d7e51f3d9f9d77b482ba562dfd525af4f217ec5c404aa8240820d38c734f0360b2a2b0a6135b5a577fa4bec01f16b70c96952228ff9b504c1b114a38a101810a79ae8bdcb170ee9827a07e89aa78ffd4a4c058f91928078717114308d558a52ac67bc003dbaf0c62058d00e65a594846c38e392c4c375be43bc944ef8d4ebe", @ANYRES64=r2], 0x0) (async) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 10.179172585s ago: executing program 6 (id=304): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) 10.176948567s ago: executing program 6 (id=305): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_SENDMSG={0x9, 0x8, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000480)="d5a4", 0x2}], 0x1}, 0x0, 0x48840}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x2000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000021c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @broadcast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@ipv6={0x86dd, @udp={0x0, 0x6, '0\x00\t', 0x48, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, {[], {0x0, 0x4e21, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "f716714497ec415380059e6b40ff3f27e21e930559b73920", "ef2b605df0710cb64d6bbc13af368d99f5b1979de8732ae46a501906b6b6fbed"}}}}}}}, 0x0) 10.102904914s ago: executing program 6 (id=306): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400b8, 0x0, 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0x1a1c08, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x80) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0/file0/../file0\x00', 0x0, 0x2125099, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000e80)={'filter\x00', 0x104, 0x4, 0x3e8, 0x1f0, 0x0, 0x108, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x7}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xa010102, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket(0x25, 0x6, 0x4) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x1000000, &(0x7f0000004440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}, 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r1, &(0x7f0000002c00)={0x2020}, 0x2020) 9.213518984s ago: executing program 6 (id=310): prlimit64(0x0, 0xb, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={0x1}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0x1}, &(0x7f0000000680), &(0x7f00000006c0)='%-5lx \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_lsm={0x1d, 0xb, &(0x7f0000000300)=@raw=[@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5d}], &(0x7f00000003c0)='syzkaller\x00', 0x8, 0x5e, &(0x7f0000000400)=""/94, 0x1e00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740), 0x0, 0x10, 0x4}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008040) sendmsg$nl_route(r0, 0x0, 0x80) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000480)={0x1, {{0xa, 0x4e23, 0x10000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, {{0xa, 0x4e21, 0xffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}}, 0x108) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000380)={0x401, 0x1, 0x0, "eee98fa706178749cb4dfd93e33c9b6b7bd152f35ed734fc70157dcb4f1891e2"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000080", @ANYRES32=0x0, @ANYBLOB="7b130000000000001c0012800b00010067656e65766500000c000280060005004e200000"], 0x3c}}, 0x40800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 8.855149055s ago: executing program 6 (id=312): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0f800000000b7060000ffffffff2d640500000000006504000001000040c304000110000000b7050000020000006a0a00fe000000008500fffd15000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c56f0979bd10b97163c1d6d0e196bf02f46c7e81eb72c00000000d0d26b5069f8a98f7dc8f76b74635fde9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346b1004006000000e1ffff8816326d7d25c32aac1c7d5b5be399f6609876b5887437a172fbc02a74067529194e533583412dff048f000000008b260000b2728a0481e9f0da43bb6cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bf1339454c13ad3e328a100000000b515a1000000000000000eb2e9c15b6c8f6198282df27badac8507bc7d202e0990e0"], &(0x7f0000000340)='GPL\x00'}, 0x48) 8.799909681s ago: executing program 38 (id=312): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) 5.998081288s ago: executing program 9 (id=353): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000701000/0x3000)=nil) r0 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a1}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r1 = userfaultfd(0x801) close(0x3) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="6803000010001307fefffffffcdbdf2564010101000000000000000000000000e0000001000000000000000000000000000000004e2100020a0000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x368}, 0x1, 0x0, 0x0, 0x880}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kexec_load(0x7f8, 0x8, &(0x7f0000000680)=[{&(0x7f0000000100)="bea902ddcf05301421208d4ac5fafff4df773b5c98a504171757b7b512685d8fcfbca9cd6041a6a65dbcb1d2a9021f7cc9ba4075b7199011dbfd8b56da3c518b7ae4eb35b5dabbec1c786327183a4bac350b42018e921deb56ebb2c1f43023c8612a3248c386246dfbc5f800ec4d231e2a32", 0x72, 0x6, 0x7fff}, {&(0x7f0000000180)="93b423ca9e00539789e9b2bd366d683c17c3586a130669c70d1bacffa13b95a7ee122332442aa84b24b4b267aefdb42963d21a78c30565999f24ad753e5254ef1a8ec14d2a81ec4fb0cb9309b32b26af44a4ec85eb1590e7b49548f98247aadab04578124c0c1eac2c1ff80e148cd2413224adeeb50fb0e7702aee16e287fc7b38d732190ffb94189c2445d63529b922fc11aac27aa7e57b652245bc73bec364781fe6d11a25a489706faf1ea30b2968a424e6faebfb7b8216168ba0eddd883ac5a812aa212527", 0xc7, 0x3, 0x3}, {&(0x7f0000000300)="6ec5cccd3b9d2913106908133d5746c7bb852c14e0e9ff0d0c0888805f855af740d2803f43b232a421f744599d6a94e065e504ca838cf453679072794637b941f2e8e9e58cba427ea23c1c1bab57c71dd0850583211939f5c8734e5336a9b90218907307ef4547b9f8e10424514c4294396fd5ed6bd11dd34e36903f783c6fe60d7602e95824d2af81e12c89a678d3c50e51a06481160eb07b37798118ddbdabbf42f1a179bb1c1aa895268226a841a4bfaf4b138255e33517befe1068c724", 0xbf, 0x41a0, 0x7}, {&(0x7f00000003c0)="31fcd925801a27dbd49b", 0xa, 0xd2, 0x1489}, {&(0x7f0000000400)="38ec964c5ca76bd25d8ccf1b7a6a1dce8c0b65b8f1d035a5eed28a9db47f59301939de4bad1698c14c94d2fe50bf49a05b2e02123237bd03171dd119f70057", 0x3f, 0x1, 0x8001}, {&(0x7f0000000440)="ea0fee55f4a0477819334f20db9c1d5b9568f2debe6bafcbd2b29d2c279ec3a179d6bbe1ca555667588cd260d11498a10c7025a88a687e77fe0be3346154fa2c5d410db1f9cd52477076742cff818cd8daed6e10e91fe6060bf093b1ab775680e10e856db84e94c6be3b2c2f22570a2c8f31bab01c730e2807efe0de046c99ec9e6fcf815693daac897a5b1d82b4b0ac227a90ab561053ff8356e5902e8ca8e8b929ad93c71cd74ca7ae1e81c43a1102db711d94828cbeb6f91f2913482d361c5e332af153c4bed87f80555a876d3cb68ba55933b01407e1f1c8024fb4e967a33ad8c53065", 0xe5, 0x2, 0x3}, {&(0x7f0000000540)="637204061319f2668b521e8f1e3dc25b8967b07669cd455981123c128c09ae43fc019b8e43d129813ec246f94101c4ad1ad4f87ffe0da608bb912163f9f5da60ca8ce724e9dd93aead2047578c", 0x4d, 0x5, 0xf780000000000000}, {&(0x7f00000005c0)="a098ac5e016304f6526abcdc50dc5a30ca0519cc2d55ff8362651ec04de37c9a910410c360b1c289d3faec8ddc0bb135a578246684fa2eff70a9b7e20a0871520c5cdf335868b0867be427ee1db4caf2701f82caf5c9c73c9589906f6a635c9318e4ccba68aa8fbf50c2501f6cbc6f2229bc27108cec550d03a59b74a5df6c04e9a7f13878dbc017d6eb6619244004a69bf0929ac1bc1732c17cce0534cd0d0a4df2c4bdc4edb6e102a6fd324498e6dc561b5521fe", 0xb5, 0x8000, 0x4}], 0x20001) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 5.56683019s ago: executing program 9 (id=354): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x5}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x110, 0xffffffffffffffff, 0x822f2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2, 0x0) r4 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000140)={'comedi_parport\x00', [0x296, 0x2, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x8500, 0x1003, 0x1000004, 0xf, 0x7f, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x200009ea, 0x20000010, 0x40000, 0x8, 0x4008, 0x746f, 0x8, 0x5, 0x8, 0x7a2e6ff0, 0x4, 0x7ffd]}) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0) fstatfs(r5, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x66f}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xc9}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x28}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x4e20, 0x5, @loopback, 0x10001}, 0x1c) fsopen(0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, 0x0, 0x800) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c0c5}, 0x5) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000480)={0x0, 0x6, 0x59ee}, 0x8) 5.415142018s ago: executing program 9 (id=355): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x81, 0x3b6, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x1a1c82, 0x0) read$nci(r0, &(0x7f0000000040)=""/4, 0x4) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000000c0)=ANY=[], 0x26) read$FUSE(r0, &(0x7f0000001580)={0x2020}, 0x2020) 5.376259942s ago: executing program 9 (id=356): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r1, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5320, 0x5a}}}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x40}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x8}, @NL80211_ATTR_BSS_CTS_PROT={0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xffff}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x100) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000080)={[{@test_dummy_encryption}, {@nogrpid}, {@norecovery}]}, 0x3, 0x47b, &(0x7f0000000880)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0xc801}, 0x10) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40086602, &(0x7f0000000000)) 5.132849641s ago: executing program 9 (id=359): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) 4.394814835s ago: executing program 9 (id=362): r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000d00)={[{@noauto_da_alloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x4c7, &(0x7f0000002d80)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x193042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x84) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r2, r4, 0x16, 0x0, @void}, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) r5 = socket$inet6(0xa, 0x80003, 0x9) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) pwrite64(r6, &(0x7f0000000180)="3af91a", 0x3, 0xe7c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 4.369858144s ago: executing program 39 (id=362): r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000d00)={[{@noauto_da_alloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x4c7, &(0x7f0000002d80)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x193042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x84) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r2, r4, 0x16, 0x0, @void}, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) r5 = socket$inet6(0xa, 0x80003, 0x9) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) pwrite64(r6, &(0x7f0000000180)="3af91a", 0x3, 0xe7c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 2.575139759s ago: executing program 8 (id=380): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000385000/0x2000)=nil, 0x2000, 0x1000000) 2.338917093s ago: executing program 3 (id=384): socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) msgrcv(0x0, 0x0, 0x0, 0x3, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000010) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x80c4}, 0x4) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgctl$IPC_RMID(0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000340)={@generic={0x1, "de7be275a164c42b239811fa0b56ad225d8194c844d4a6a95aa925fd6c7225a423c805d9b256026eb0ef011d118d0cb9f65e03245dec7e0c7264bbc33873f79186fc9f60f011ab5711ac8a99d6ded1dc192c870f2f0b2fdcb4433518148693b03a5cdc50ea32609662d0daa40826eb4ae1db09b290f2043437f772ec71b5"}, {&(0x7f0000000040)=""/32, 0x20}, &(0x7f0000000080), 0x50}, 0xa0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x4, [{0x0, 0x4}]}, @ptr={0x0, 0x0, 0x0, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x5a}, 0x20) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000040), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) keyctl$restrict_keyring(0x1d, r5, 0x0, 0x0) add_key$keyring(&(0x7f0000000400), &(0x7f0000000540)={'syz', 0x2}, 0x0, 0x0, r5) openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x484000, 0x80, 0x18}, 0x18) 1.670637418s ago: executing program 8 (id=390): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x15, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000071180a000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) recvmsg(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_USE_CARRIER={0x5, 0x1e, 0x5}]}}}]}, 0x44}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.478963231s ago: executing program 4 (id=393): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYRESHEX], 0xc8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8001000d, 0xad, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x8d}, 0x90) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000b40)=[{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000080)="f7", 0xfffffffffffffdee}, {&(0x7f0000000680)="4fff3a30347d090e9b46928e3b0b9d5165d3a4e49337198bd12d4265f5d80ed4ddd1abf643cceb6f85c7b5d4901a89fe066136701ace03fea70b89d5ff498b3ffe1e0fa3d85d18207db98a89e1671f5e6ce92b1d7970e1fff3c5cefd19aeade751b9a12dd63036316e41d514fc98cc45cfbc0f19436f6fdf195d1b5f8e38a7ff47b5d2f7b99047", 0x87}, {&(0x7f0000000900)="12f9297a6cdf6ef092bc1fbe2081aac51f79fca4b56318910600000000000000ded00f4ea28668a677c60ce1e88da169ece1feffc5ddbfc6adf8cc8328425897b112688f71b3432bde8b4c7dc848e01cb7dff7ac09dd0d25579307ec41e2ddc2db4c5fd311a856843ae3b5f98e759ebc6d39fa66e7f55ce16fb7c2a46493a4fb3ae00873876992bf5023d7d5f60179edbae94d0692089e9b138c40d7cc", 0x9d}], 0x3, &(0x7f0000000000), 0x0, 0x28044854}, {0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000a00)="1bf2317a9e2f36c56188750ba6c25f64576bff228cd4f6e12a1b327e0319bbfaf4280d6485f4a2e1a672c0efca8b3e2ae30dd144e4dab794bab3b7698df2ea35c2403e26592f93b280876ea9f65a48301b3879e292e7df342f3157a95aaa802d1142c74501ca74d09b4387d513f1747315596d8adde85b50636bb1d0089cd557e7c6a683da1aba57ff80d22b710da304331b06cd6ac5c38c4d59cb3a19edd6e20d1d1958fef2a0c4c3b4cac8b8c1d9ce14cfa1dfd17ee80ec50380e378"}], 0x0, &(0x7f0000000b00)=[@assoc={0x0, 0x117, 0x4, 0xa927}], 0x0, 0x8851}], 0x1, 0x40800) recvmsg(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)=""/93, 0x5d}], 0x1}, 0x0) eventfd2(0x8, 0x1000) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x206180, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xb) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f00000001c0)}, 0x5) 1.473225019s ago: executing program 8 (id=394): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) 1.46830148s ago: executing program 2 (id=395): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0xb, 0x1, 0x7, 0xfff9, 0x3, 0x0, 0x8, 'syz0\x00'}) 1.394667204s ago: executing program 8 (id=396): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@ipv6_delrule={0x80, 0x21, 0x20, 0x70bd2d, 0x25dfdbfd, {0xa, 0x14, 0x0, 0x96, 0x0, 0x0, 0x0, 0x5, 0x10002}, [@FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FRA_DST={0x14, 0x1, @mcast2}, @FRA_DST={0x14, 0x1, @empty}, @FRA_SRC={0x14, 0x2, @loopback}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x80880) 1.33963284s ago: executing program 3 (id=397): socket$nl_generic(0x10, 0x3, 0x10) r0 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000001c0), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000140)="d8", 0x1, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000000)=@secondary) r1 = request_key(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, r0) socket$kcm(0x10, 0x2, 0x0) r2 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f00000004c0)={{0x67, @dev={0xac, 0x14, 0x14, 0x22}, 0x4e20, 0x1, 'lblc\x00', 0xe, 0x9, 0x2d}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x4e21, 0x4, 0xb, 0x8001, 0x3d5e}}, 0x44) r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r2, r0, r4, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) r6 = syz_io_uring_setup(0x1000f04, &(0x7f0000000140)={0x0, 0x595f, 0x40000, 0x40, 0x10000051}, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x5}) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000240)=0xb) io_uring_enter(r6, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000100)={0x208, 0x1, 0x85, 0x7a7, 0x4f, "0d418107009188b791e15b1b6f6ff88c6b00", 0x86, 0x100022}) 1.339226796s ago: executing program 2 (id=398): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r0}, 0x38) io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0x2000ab}) r1 = epoll_create1(0x80000) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x2800818, &(0x7f0000001380)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRES32], 0x6, 0x2d9, &(0x7f00000028c0)="$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") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r2, &(0x7f00000000c0)=@abs={0x1, 0x5c}, 0x6e) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x20) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f00000000c0)={0xe000001a}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="04005b"], 0x28}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) close(0x3) syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x20000) r11 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_NAPI(r11, 0x1b, &(0x7f0000000040)={0xe66}, 0x1) syz_ublk_add_dev(r11, r12, r13, r14, &(0x7f00000001c0)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0x65, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x4}}}, 0x0) r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r15, &(0x7f0000000340)=""/19, 0x13, 0x0) r16 = shmget$private(0x0, 0x4000, 0x1, &(0x7f00008fc000/0x4000)=nil) r17 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xee01, r18, 0x0) shmctl$SHM_LOCK(r16, 0xb) 1.251098614s ago: executing program 8 (id=399): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000385000/0x2000)=nil, 0x2000, 0x1000000) 1.1715984s ago: executing program 2 (id=400): r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, &(0x7f00000000c0)="800009f3220800ce", 0x8, 0x800, &(0x7f0000000280)={0xa, 0x0, 0x1000000, @mcast2, 0x9}, 0x1c) 1.150570917s ago: executing program 3 (id=401): r0 = socket(0x10, 0x803, 0x0) r1 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x3, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x80010182, 0x1}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x4, 0x4, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000600850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) sendmsg$unix(r8, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000440)={[{@fat=@uid={'uid', 0x3d, 0xee00}}, {@shortname_winnt}, {@numtail}, {@fat=@usefree}, {@utf8no}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@fat=@umask={'umask', 0x3d, 0x3}}, {@fat=@tz_utc}, {}, {@fat=@errors_remount}, {@utf8no}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@fat=@nfs_nostale_ro}]}, 0x0, 0x29f, &(0x7f0000000840)="$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") r10 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r10, &(0x7f0000002c00)={0x2020}, 0x2020) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r14 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r12, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r13}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r14}]}, 0x24}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) 1.103105102s ago: executing program 4 (id=402): ioctl$DRM_IOCTL_MODE_SETGAMMA(0xffffffffffffffff, 0xc02064a5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000003380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000003500)={&(0x7f0000000180)={0x3c, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xf}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xfc, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 1.078741616s ago: executing program 2 (id=403): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xfffc, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0x0, 0x0, &(0x7f00000000c0)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20542, 0x15) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000000c0)=0x8, 0x4) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xc00) pwrite64(r2, &(0x7f00000001c0)='S', 0x1, 0x9690) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2a) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x4001) setsockopt$MRT6_PIM(r5, 0x29, 0xcf, &(0x7f0000000180), 0x4) 1.049308191s ago: executing program 4 (id=404): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x800, &(0x7f0000000300)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@usrjquota}, {@test_dummy_encryption}, {@block_validity}, {@nodelalloc}, {@minixdf}, {@auto_da_alloc}]}, 0x1, 0xba6, &(0x7f0000000c00)="$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") (async) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@security={'security\x00', 0xe, 0x4, 0x2a0, 0xffffffff, 0x98, 0x90, 0x130, 0xffffffff, 0xffffffff, 0x208, 0x208, 0x208, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x42}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x130}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8044810}, 0x20000000) (async) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) chdir(&(0x7f00000003c0)='./bus\x00') r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r5, 0x10c, 0x8, &(0x7f0000001b00), &(0x7f00000004c0)=0x4) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) (async) mount$nfs(&(0x7f0000000400)='/dev/net/tun\x00', &(0x7f0000000480)='./bus\x00', &(0x7f0000000500), 0x1000010, &(0x7f00000005c0)={[{'/dev/net/tun\x00'}, {'-$'}, {',)!'}], [{@context={'context', 0x3d, 'root'}}, {@flag='mand'}, {@smackfstransmute={'smackfstransmute', 0x3d, ':}'}}, {@fsmagic={'fsmagic', 0x3d, 0x8000000000000000}}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6, 0x10, 0x4, 0x7fff0000}]}) (async) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) pwritev2(r0, &(0x7f0000001c00)=[{&(0x7f0000000780)="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", 0xfa}, {&(0x7f0000000880)="e98c108a8036483fb38bd89882a3814b089cfc908be1714d4e4a56f8703bc7c878a4e167f2ad24b6f541ff2cf3953c58b7fcf555837d6eae2cfc0e43f146a0d7b1ec56c74809827a4e71f0acb2fc895e1567269394b19e8769b3691fbd946a3e378af8fce754f05e52d4b191e9747078f19fc7d35c69f1387a593b21718dce0a96e91a528a6be94ce379c4b7414d2404644aaaecb7f4c10102c688b6b6cc96b0238f77fbd195db97cc7f96e783ca04b681486546390a375d13edac0edc5e952d88ad6d153eb08e39c2a5381011e341d0294246c0b414caf1e2b65e13", 0xdc}, {&(0x7f0000000980)="e3e45dbb291d839a72", 0x9}, {&(0x7f0000000a00)="8b51a51ea5f03b25555dee6b9301bd411f4e39b9c483976d08110958e3937a89407842497aa97f288bf59941b8295f8f4f06993cfacfd0bacb44e055c79ca27ef115a9aeb59cdc06b8b6465dfd326d60c49891f120a684847a6bdb51977c21aa7712e6990e5b40cd5cbe77a0ac2bf9a84740410ddb0b0f78f6db6c258b1de3ffae58729c2781fd5b6186240cda95fa9797682697e0c880a851113bab230328f7cb213762568b1113f673670aa752a2e6ea00d17d06f9ebde7979b6f104f646b7bf3bde9f0737acb5775359", 0xcb}, {&(0x7f0000000b00)="b6c2a81f3b22cd58297c09f7bd937c919c71dbfe295b56c3015cd6f2d9f0f64b7cddf78e3391543e93ee22a00f796f7ddf3a98c618c06fb4f463be9dd7c8725d8cc60d4571843ab9a315d510b6a6cb2ea75de6fb138dcf186a2a2edfefb169c5ffb7f1b27b7a7da7fe507ac4fc9f26874357bb0dbc33", 0x76}, {&(0x7f00000017c0)="b8d6a76ab1a5f21eb0af757cdcb9fe68f98f800f4868cff3819ffe49c2357f5f3ee72005ee3e6b79f118806fc2839b6bca4d9207b6543804922bebc18c1578079f03d74dba73d573dc70ea203a15cb63644e0faada021b95268b2da57f4eddbed62bcf7fead81f116ce912c20e1343e2d85cfff6e25818424f99e78a30926e207e722b183e5ab760667454a51dd79230a99dcb44b8a3222847ac1d90b3136d20fcd873e9f50dd5cdbee369cd33f13fde53e641db26d36f0f331f44b237f59fe880a61761117c35", 0xc7}, {&(0x7f00000018c0)="655cc8e4ff2cef3554796f95f2f3744ad7492806831fe94fdf4813bab9dbb63a449141167c868068df6d29730efd0fc8d5f44ca4c0eebf048e8eed81dce557da59179f180152f0d55942dcd0b8bda902549422ccf424be567deca349251112cfd9b70d45ccec684ff179e882b9f5b96a5bc9e96c03c3f7bfe6d4bfe0b3c75498c427bc5ce632d3e4e42c1556165465f21a98d6d7f1d21c1a946ca70c6f7c59bf1c1ec626d261384207201766fac9887ecfabd16a53113e96d3a0a30e52c18a8fdaf4653ba2e6165adf50a35c3eb70ebee6f0cd9ed5ed912fc1d81e4e9ebabfb0d2b4707c9415710e141e0cf836cd98df1a", 0xf1}, {&(0x7f00000019c0)="0253d4c74d4c82787655fa34f1c1b931e07d62f95d086607c2edc5d1cf05640091b5a3438ea5c7e54bb59c9485f917812fff28e00c73c4a5562bb7b463a0e70417d85d7242d06374efecf49efb66498a38ae11601408fe6a60177e1df31986540c64108eac22b43a5d7fcaef74d9cfdb7009facf0c24b8d1f083f70ee3678726b0f71b473fa2e2ae8270e66ce6d547916b543ebbbb85fa46240b826155f8cb52239e087b4e95d10774c603db6ef651d440ea619d2adcd57700f01c5708de53", 0xbf}, {&(0x7f0000001a80)="495947f65f83e0ece108ed922f6cd61e", 0x10}, {&(0x7f0000001b40)="8af5db12e5ed76506609de4342e9eda799c479cf1b27f9de21069801393ba1da9cda3ae3c545ec5552024e3a6b40408efef62b09a2b6aaa229de68a2dbafd4bd30a59bbbc5eee1bf215427515ff08d129b631d6828611a77ecdcf6303a526f874749ea0d9361b924380d84a22cd79bc901819972140e2082979127e36abe9f4e69a3d284230c3951335ce873b85428c225843470f708e47abbfe8680fc", 0x9d}], 0xa, 0x7b1, 0x7, 0x6) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file5\x00', 0x0, 0x35ce9dbc6723c18f, &(0x7f0000000080)) 958.93787ms ago: executing program 3 (id=405): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @tid=r0}, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @vti={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x30, r6, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x2b6}]}, 0x30}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000011000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000024001a80200004801c000180"], 0x44}}, 0x0) r7 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xd) write$binfmt_misc(r7, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000400)=ANY=[@ANYBLOB="38000000031400000009000200737a30000000000800410073697700140033006c6f000000000000000000000000000030adc5119c0f150bb8b88fbefe42dbdd094b0dab73826f0a4f25f1625d8dce150522c6935f58ae46c47ff3de8d2178213c015a1ef0cf54982065f24d7afc6bf92c1011efc0ff73383f4c6bf05a056438c5a2b15e1a575df5"], 0x38}, 0x1, 0x0, 0x0, 0x2400005c}, 0x0) (async) userfaultfd(0x80001) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001514030129bd7000"/32], 0x20}}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_emit_ethernet(0xb3, &(0x7f0000001000)={@local, @dev, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "f15b88", 0x7d, 0x6, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, {[@srh={0x3b, 0x8, 0x4, 0x4, 0x58, 0x50, 0x7f, [@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x16}, @private1={0xfc, 0x1, '\x00', 0x1}]}, @fragment={0x5e, 0x0, 0x1, 0x1, 0x0, 0x15, 0x68}], @payload_named={{{{{0x2d, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, 0x2, 0x2, 0x0, 0x2, 0x7, 0x2, 0x2, 0xa, 0x2, 0x1, 0x4e24, 0x4e24}, 0x3, 0x1}, 0x3, 0x2}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000001940), r10) 944.60673ms ago: executing program 2 (id=406): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x81, 0x3b6, &(0x7f00000006c0)="$eJzs3cFrm2UYAPCnadd20zUFRVARXwYevISu/gMrsoFYUOYi04PwzaYakiUjCZUM0eHFq/+B9+HRmyD+Azvo3Zu3XTzuMPZJ8iVd0mWbtbZh+vtB+Z587/t8fb835OPJITx3r353vbHbrexmvShdSFGKiNK9iPVhVFgYHUvDeDkm3Yo3y1d/f+2Djz5+d2t7++LllC5tXXlrM6W09vrPX3z5w7lfes99+OPaTytxZ/2Tu39u/nHnpTsv331w5fN6N9W7aandS1m61m73smvNWtqpdxuVlN5v1rJuLdVb3Vpnany32b5xo5+y1s7ZMzc6tW43Za1+atT6qddOvbV+yj7L6q1UqVTS2TPB01RvX76cbRXx6hPmXTipBXEMOp2tbPAZXnlkpHp7LgsCAObqqPX/8tHq/9Z0/X8quo3KC28Ulz50/d9R/x/SZP3Pf9Wg/l8efX4jIn/4PUD9DwAAAAAAAAAAAAAAz4J7eV7O87w8Pu7/OGD0es7L45g98v4f+Jv3+jheEz/cW41ofrtX3asWx2J8azfq0YxabEQ57g8eC2NFfOmd7YsbaWg9zl7/eph/7teI6uJ0/vkox/rs/PNFftrPj8HxVJyZzN+Mcrw4O39zZv5ybHw/kV+Jcvz2abSjGTvDx9vD/K/Op/T2e9sH8leG8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4f6iksVej6Hu/V404HXuj/v2VhxPWp/vjF/mj/vql2Ihy3J/dn39jZn/+pXhlab73DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABj3f7NRtZs1jonFYx7/g/PLI+Dx2ctFNNvHRg6HdOTV552nb8f5HmeP8jzfGqodKjrnB7d5IyhwZW/WS2GizM7rX9re1cXTvStPEpwKiKeMCcfbeDk0GL8k//1/P4+z5yzEhHHeqdrg6A0/w0/dHDijyIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYu/2m34MXC/NeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPPS7d9sZM3mYmcU1KaDpTh4JmsuxmMmPy6Y9z0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8S/4KAAD//xp0CCU=") read$nci(0xffffffffffffffff, &(0x7f0000000040)=""/4, 0x4) read$FUSE(0xffffffffffffffff, &(0x7f0000001580)={0x2020}, 0x2020) 790.481674ms ago: executing program 4 (id=407): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40042, 0x1b5) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) io_setup(0x7, &(0x7f00000000c0)=0x0) io_destroy(r2) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x26, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000308", 0x60, 0x3a, 0x0, @private1, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b52ab", 0x0, 0x2b, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [@srh={0x11, 0x4, 0x4, 0x2, 0x1, 0x0, 0x0, [@private2, @mcast1]}, @dstopts={0x88}]}}}}}}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40042, 0x1b5) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) io_setup(0x7, &(0x7f00000000c0)) (async) io_destroy(r2) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x26, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) (async) syz_emit_ethernet(0x96, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000308", 0x60, 0x3a, 0x0, @private1, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b52ab", 0x0, 0x2b, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [@srh={0x11, 0x4, 0x4, 0x2, 0x1, 0x0, 0x0, [@private2, @mcast1]}, @dstopts={0x88}]}}}}}}}, 0x0) (async) 703.120892ms ago: executing program 2 (id=408): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x48, &(0x7f0000000100)={0x88, 0x5, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x8a, 0x3, [0x7]}}, @calipso={0x7, 0x18, {0x3, 0x4, 0x5, 0x80, [0x7, 0x8000000000000000]}}]}, 0x38) acct(&(0x7f00000005c0)='./file0/file0\x00') write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x5090880b, 0x0, 0x10, 0xd, 0x40, 0x0, 0x0, 0x2f, 0x1}}, 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) 702.513267ms ago: executing program 3 (id=409): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x210001, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$FIONCLEX(r0, 0x5450) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@remote, r2}, 0x14) sendto$x25(r1, &(0x7f0000000180)="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", 0xfa, 0x8010, &(0x7f0000000280)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x101000, 0x0) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000300)) r4 = getpid() sched_setscheduler(r4, 0x6, &(0x7f0000000400)=0x8000) r5 = syz_open_dev$vcsn(&(0x7f0000000440), 0x9, 0x200001) write$FUSE_NOTIFY_POLL(r5, &(0x7f0000000480)={0x18, 0x1, 0x0, {0x9f74}}, 0x18) ioctl$TIOCMSET(r1, 0x5418, &(0x7f00000004c0)=0x8) r6 = syz_open_dev$vcsu(&(0x7f0000000500), 0x4, 0x480800) file_setattr(r6, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x2000, 0x5, 0x6, 0x100, 0x200}, 0x18, 0x1000) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000000700)={0x1, 0x1, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/135, 0x87}], &(0x7f00000006c0)=[0xfffffffffffffffa, 0x7fffffff, 0x2eec, 0x1, 0x5, 0xe]}, 0x20) ioctl$BTRFS_IOC_ENCODED_READ(0xffffffffffffffff, 0x80809440, &(0x7f0000000900)={&(0x7f00000008c0)=[{&(0x7f0000000740)="35bd198ae60456f5e63120b7565ac5004e642e8be111ebdef55e45d66db3e592ea61bc76cf47c3dbf71a969dc471e5d427455bfdb1d12e6e8931fa50c0642bb0de99f584e6", 0x45}, {&(0x7f00000007c0)="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", 0xfe}], 0x2, 0x2, 0x0, 0x80000001, 0xa0, 0x5, 0x6, 0x1}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r3, &(0x7f0000001d80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001d40)={&(0x7f0000000a40)={0x1300, r7, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TESTDATA={0xc3, 0x45, "96171706ada173ddce443b9cc01294661c5e9aa3d25829a131911f1009353265c32d5f59b8bddd2b419028d7c695a99511306574ab2d80c1ef280bf47ada833d247a766d3e470e931fc26bfc89a7e8227aeb1c12af969cb155d44f41d1f0d7144dfbcbef8daae4b47719acd72c052a32483fa7da2eaa772c65328d7ef398c20594b5d0356062d0a49927e683f4c5171c76332718dfc735d841e8ca4283f2b41aee4d338db6b4da623777123d2c655d6d9a8777f9784c1527c5105099941e48"}, @NL80211_ATTR_TESTDATA={0x59, 0x45, "d06bd4bfc3da1382dbd2618e8e72d79956a0c5b8ce4f7a07825e125e53acecfd661feb8836942842edcdb7fb26a5a878455cdce757084bac5dd77f6069fc342e2dda39c8d67dd945379e001974218e0f57ed1b1552"}, @NL80211_ATTR_TESTDATA={0x1004, 0x45, "6f56e5644937513b78581915b2467b3a6947c447887b13494111c404d185977841831ca9240cefd5dcb6c2aebc11f74bd9993ab2dc401cf84a3a63294a8d557c29f47cef49c66cd8ecfbdf0577f7f91dc027c262d1546a2e0bbc3ad3b6924ec1baabc99ec8b3f8e75541131e28753f0d87aa66003c325ea5934dea6b5196f027fc6e94f9674f23fd4069497c84d07be86d8f22644167b95f5b25e97cd20a6bd827deb686517b43c1834641239838ef0bf6297db9bd427a20a6d530c421af800a16c18b51c896efdb476e2a009475b2295938cf4e36a65f51c80849709fab305f48c37e396844456bdd1cbd9bb19194cefd6379f63150070c297a9be2db5f02517bd777da6a622ae7424afea6b46bd147332a59fbc3d195d8f207a582fb23c6a372721a30be4a9a4f14336897ded5e439fd93635c99ee2abb1d6b1bec0cf3d18e62f1a0e8534f1deb3d86d7233cdff372dac4974e4873679d690c0be93ba95dbc4b20807b1faf80acbf339301695f275ff21f1f75cb4874e81061368df8acb36487fd17a4484bc57d67fe49731239b96b1218814390030178d28fab1a6c5be4c8e3397fb00e261b317808fc1681fc3db417ceb9e530c8a7a8f411c434bc5b3d84c0c65fde1c8ee714488d59258a39cbf73d3dd96b18fd6f31c412b1aef24990a1778cc68502100996c8db4576d5fd18cae7bfbcf7867d6b0b7b2eb552b9f988b7a46fc4cec79d24c6cf038e1dbeadc091e0edae10310a28e2b592c40628127e309bdf165662e3bc1e0f862fe76fc9dbc2ca171b92761a2782a61c7e15f4b55544a3fac7928a7328f2919a446124aaf4eb02837faf3f416b323d5e8c01c49eef63c8c029e1869aaee0f58321bd2fb6e3c7040f6708f733f8c1be8338658601d769e30ec94481ba1e509ed20ff39ff0f78cfdc2b0f4e4654310b7cb27940167b6e35f8e08cb09fcdcee74b19522126579a4f0a69b5105795526eeb2dcb2a8d0bdf75fe06c819829b0fdea072feda9fc69c42e27c79b107a337a6133f8aabc7a60c865d13740bb3bfbaf9a0d8e367e6e32fe319af007ecbc6f64bcb258188040d540a99e450d72c93eef51bd524e8aa9047ee02129821141bdcb9c00c7b0cd3fb7d6526b3f77a721e56f51e092597bdb3cd7686a2d4cfdc234852658f7ce93a0282385495183d6bb86049e64b82fa7898452a81cf0f9e29180516d2c7c20c027fc6fc2795eea126928ae7c3c04406c95e6228d22bcecb21c72a0e79b051de1f55a56391e40255391820cf5271a163b6b3ad5fc476b6232ab763bbcbabf1be7707f5a7e9eaa0443015081968eee6373f4d991a8f7dd503e719945fa7f9ad1cb6f22c5c57022bb008525145a82b44511d030b0177f5538c90c11c05e219428995d60f1c246cb10e6d6f89b78aba70be475e673e1e715c744bcb4cd3f4528fa9262361537b04aff2e07eee86db8c8d915bef5ec0e638376d61a72320015f10eaac72ec54540ff4511f9560558f52551ea9836f5142cd757751652aa82028e85a30c7db3632ef0305d0659fd616ccfccccac6b10e34240d70041c6023354b67129304028c26debb89607584f55fc4a3acd81b8dd5d718a90f43a4cde4041422c53ebc58101a4791fcf6f3a8127178374e6bcb7246d55b0b63f7a132929733c0fcb90b0ddcfc4d9f5d65b9e07d5001be3c6db5c82defe4dea45af338edf228fb2026357a252d1d864eaec518fc91c3cca87ae3626d42c7919eef946e39792e73a47e93913bee0c3d7f2e85cb0936d15341991e95eb4723ab0752ae6af66a040a8729b594502e9b21fc421aa287fd5683b600c0727bcd2014f78832edc9b496a71a9d3b554cd7be41c9f87175c3930029b0b148b5dec0cdb10c04473b73950a0e1cc4a619bc74b6c929370c6ecb811390cf3d50aae4e5336dcedcd6b15b0ba84500da1ec15ae284fb3a13f3018bf85a3401b2dae214aebeffdf954d2f54f1dac177985580b499ce831b1daaa9dbed29bbe088fc22eec2ff176e104f561da1ee616150fe03d6dbfd88672c57fb28de1a3e49850e358fac0bdbc8756ac0c345220db0ac34b1efc3de85f546e5db0cae363fc48e885e5c50ebe8a805d8d392bce3a1dc0e10470441552cdaa71063c0ab1a922a681be365b2942f6826823196a5289fca498eb67fc5f777eb2c5ab7d3e5404b49c4c2c013ddf3af1915e67a5a71aa633aa82d1cc98de8d02d59d97885e4f8f7c41d983ccd423b3ae28b147767dce589bf86c054da3b81dc1e6b8e0ec63e05c8457b3be4383dc13b14e483e0632e10ccb6e2aeb415f985364e4dbb6d8cd7993990e028efa78329f26cd1372312db1944d0849f3f3614a3100f64f5a2aea756f96b0af7a6c3720f45e4803852ca04d573eca8643255ddc604f7d3a0157cdaaebb2c28020c37fad96d9c839c7b2064453cc14d978a5c5e67854c3dfa502087e8cee5dc3a0a99086cddd9aa04d9df10d10b6e70e6987893e2d8ef9bbdfb451ae4321da770672c5f5cb9248be9a2faf47c174b3565f8efa351f18512170f91986364fd7001aca664a49bd2de6548b9fce070617f4ef7ed2154425dee2ee30c1e4e42ee2e1a9a5f911f77cfb1c812e1a468ad6667aed41ad97faa6978561dbe39202712ce2cab9c0de6992eccd68468da388cf1fb0f8c02c36fcd8d3f870bddb9a1c6cd77651a81361e8cbe812b8512238ea3d6dc4575b765d4e3fade56fac612f4c9f6193a6e0003d5af2456a07937b8b563be1124b41b8a4b288ce0ff03d3dd9594a14d435917994b84d1ce84fb11152faf953ae95ceeccf613818f9518738a9856ffac3fbc291b5e372a895d5f51fb5960673b5ceea4679b87eb7443d0c708ccc1946aa3d55b77bb50f92ef1cb9d337c45830bab573329d7c3e57c7712811532b5ac496af5a4fb7f1a66efe2da44b3a624113221f16074eaa9e2b8b961f6e02ca50ee9dd9b48d91a0c5826b1c19fefb02a410e751edba4bdfa2ed01588be0c368305824b0496bef8e7d0fba9ecc2e6c8fa70a184ac719375c1b58974aa69b9158241b4cb135a067278d363a9e18d781cec6efa842e986a163bd687f9a16a1b1b52b17f0912c7f2a0b77f0f55bed7ab9cb450b67e14a981dfe41ab26576b73d70fadefa055ce1ecc5500d00c15221e49a4c8750016942accf89d29d2c11d2aa4ec09fce1a90d018bf52f4b8a2a7f38ccf78db9edb65c0cc3b6dac203c0bf6b8e4c47b5ee22050a3ad701813d71de59c7cb969f89d09a3118ca32499446ea63beea87d8517d3421c97744781f7a776d652040333d3c7440c70cb58614003523d829bf05b4ccaf9dd42b443e7928882c7fb9b25f582563f2bb1f9a8061206dc8411cdd1c165916e386dd2761883107d3a2381b87b7b3ab7e8a07df9e7fb4b85264bc66a824e2b01263f48a01ac23ea74a39770180bcb844be48c0670256a5ffdbbafb0a8984e3cfb7e1e5fd9e9aeb55d2c881ba605313ec379d0a2fd52d03f807d2bf828d621a22802b0eb0e136ce40efba62f5ee86082051aa428f940caf1bd3ab67c3ec6a82af51297e0afe124e35515e259cd543d206b4fcaa314ba368baf856c59215fcdb79966b5fc45c9963b4bc1ca2d59012fdba9bcc2a510727aafb7b312e06bd41b492eea65e61b9846573c5eb83e356e1f6a048201903ecaa7b321f2d41a032effce2a243ab44a5b0a1feabade9d75d39e12285552e3897c859815f898ff5c9caddddea7cab1899d1bf4a58c9a4d97d18a8bb45fc535efd2b1425bfffcfdb236120263703076decb24fff3b4a6cf89c83be9febc01201598cb92ed3ff3860df2bf5815ebaa0e728c3e695bff60bf97f9850987da210b6031758f79c55ce040574e9d2d52f7e05d9c1ffeab0f253510729d3ad9851d088259b908756720c27b0f1e00e92ca8db639759a1738b01a52481b02fcb59d000604af8c6950a40fa495f80bd4a76c7bb9870a8b1457acb77c003aa66d598a860229c340a125a6fb9ceafd04ea7ffbd92b2269599f95b7b87e08169451627878fb9dcb671fc2967b420df7c21f5f9b24c1a6849df80197f8d08ba8b0b91e0fffcb70a1b75ad3601948b97d9a84cff56d420fb5adf60e18f38892d36dff5a8da1346cf877fb38f13739e1506ab542ca43d556a4a1ea87b3f2f3aefab52ca6f25b68bde0047d81c74ab845577d8be2a01409a3d20f811a6f152de3355b21334852b7092fa06ab78dd7cd6f11069906502829491394831b2e1e498f302cd273532955f125471636876cd5af323af9dce0f1eb5a5432dab0dd739cd469369e575321800cdf7565d223ca93d73beabaee9b8a9ea0e0055f21e26e7ff7b9d43361a19c40d69af292f7172f34de1a5d2688583b6738e804305b989cda12e31d5694b28b7d37c1752d3afd8ba4e89ab5e58ae083771dec00b86de8335085dffe771c09cc60751f4f865ec72a1edd672247247dd44c64e46663778645b95bb7382650fa567469baa129273c1fb0ca47765ca5b8ff5ac8c26c4dd6bcd49e1be7f0a2e56bce208fc1d6c107c95435e3abed5770423701295feeb01b6b9e97f2267a02d110d8bbd20d635f0aaa64eef8b113459dee60ec88b879f9345c6744e607dc5c8559bf15545d494472db0941aaaf6653e58ac1060831147260a38009595dd216c9eef24b78037306c9f93e52b8c9ea9558f83a5a53e375356bde2d3a3c37c4586cff519db5f9e791b4ffe663e4e18cb962efb77602c685b3854a68366eb1b7f58868e06102d97f5aa267b05ddbf2e1a0211268b4f2d1e8bded555fc3cfeb977b828af688169a45516c7d8cc94881a495e387b3537af033a72306332a4983c47bd1aa7ffe0fa5858c1a731320a66091a8222a2588ddc34a46e0efba27d75ea8d8c52eb49d262fd22ed4520ed295de07504e0a2d64b51dc9d85900a9dfde9464fb67601db7b2d0bab21034b448158cab4a084e62e8618ff371680e22f7b266b07dd34f22dde4f0a3a2ea7b8658a540bd2f16c93f05ca0647d10875deb84c6fdc0d5630f37ee61cbe9649ab6bc550d6d9b4c6edf8962d77849d75ef27118813eb2dedabbf3389f45e2cc333ab9c4b32c0cab88528aab14a8cf2bfc33975a411b4000c8c35a89b59eccc4af220176899bb94d67a443ac535b4203825f484b7128148f3529265946847cad1a7e926ffaaa676171d1997781bf96733caed74832cc516478fc899ee7d832abe523b114496ba5cd41d11b8e603e5e114b75d2603c3b7266aada76d4a52e085446c9492c28d4423c94895c27926e8401707b284b28455136a1a7a9283f49418af732f873700eb99793bac729c1934223865fe100f4db30c445eb2dc9312a91aad87befd4f28b35626c299eb90413e8a6fbf19a240a5f3a28ad4f9bed790c74f9a5cabb25429c74c5f9d421ccec4dcda01d8335debdae9bad59f99ca9390d69f37dade1fd2ab69891c4e9837fbf3ed92892a888194278f5624679a8d080a9effcdb914e4250a75998acd824de9bfcc4d6fcafb89653ab07583d8c5cc3e384c8e196678bd4ea1a7ea413dacf65909ada3990ee2256ec403036578aadf915fbdae572a3ed2561fd627f5ff05db6074311875268899d30c8c32b5b47e2482556e9848d5052928f563e838c3629a3f3300ddda9430548e5a08d6bebfd0bc6cbe8854bd93d0fb16572a389b1d6df592c79bc71ed2ad690b0b7ccd33e939bc2821a54ea55b96947090e5d52669d7909fdd598a0a57af865bf8018874eb6fc01b727012dc6e81af8047f631bca849aedc91792050443c8a56b9253"}, @NL80211_ATTR_TESTDATA={0xdb, 0x45, "986ed0eb62058ea9714e2093877fb4a97024ead6ad2907693193cd83f1c8d389fa6c80e1f832dd25146a61f637d54834fdb9775ac6151440107cbda8e4c786aa85615f8cb804c504eef77637c7ef333c2d5b26d308800d139df8585f07126eab73660e7449b3d582f9ebb889e135c1a1e527d7190afd2e41a1fe2a43ba791255d307c0a954de1238e9162ad09ef335a467596be3d59cc4bba4e673adb38f70276fde285c3cb200f24c02fe3d85758d85625cc1fab186417db7d71b863b75c6325f25a2949f3f20fb56840da55a21fb00e02c9f5f271aa6"}, @NL80211_ATTR_TESTDATA={0xe1, 0x45, "721f380529df69efa6213902bdad11aadd8e6f3b2871a8ef33433d55b604c273add9370aa18a37fcb738b42429e7a58dfe10e21abcf52fcd62f969d936940cc051b0df3b1afc66c6821c939e9400f722abcde772a068727b1c3c3d5f3c17b191244f55a9f65f4216ec57b1b4d67591c9b0b4d377267ee3c297c273a09b516fd4712940a621d9d4b506aac3ac2ebd42e387d1ac849bf9b6fd63f54e775b323231b1b56a91e20369674c4dd69b3aab036899150f1aa9037061ea32bd404253b72c62d7ba6c49f0d36faa86de3948fa4d7d19200a02a96f167e929f402283"}]}, 0x1300}}, 0x40044001) ioctl$UBLK_U_IO_COMMIT_AND_FETCH_REQ(r3, 0xc0107521, &(0x7f0000002dc0)={0x4, 0x7fc, 0xcbbd, &(0x7f0000001dc0)=@buf_4k="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"}) r9 = syz_open_dev$video(&(0x7f0000002e40), 0x2, 0x82) ioctl$VIDIOC_S_PARM(r9, 0xc0cc5616, &(0x7f0000002e80)={0x2, @capture={0x1000, 0x0, {0x9, 0x6}, 0x7, 0x2}}) ioctl$DRM_IOCTL_AGP_INFO(r6, 0x80386433, &(0x7f0000002f80)=""/96) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000003000)={0x0, 0x8e4}, 0x8) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000003080)={0x0, 0x9}) 673.692782ms ago: executing program 3 (id=410): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000884) r3 = memfd_create(&(0x7f00000003c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\x97\xb0[\xf2\x84j\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xb6\xe4\xce31\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3d\xa7\x05Y\xab\xf3\x9c\xf9\xa9\x0fa\xc20xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) r12 = syz_open_dev$tty1(0xc, 0x4, 0x3) setuid(0xee01) ioctl$KDSIGACCEPT(r12, 0x4b4e, 0x1b) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$inet6(r8, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000290000003700000073000000000000001800000000000000290000003b0000000000000000000000280000000000000029000000050000002b02020100000000fe8000000000000000000000000000bb1800000000"], 0x70}, 0x20000004) syz_usb_connect(0x1, 0x3ed, &(0x7f0000000540)={{0x12, 0x1, 0x250, 0xa0, 0xdd, 0xf6, 0x20, 0xccd, 0x99, 0x60ef, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3db, 0x2, 0x0, 0x3, 0x90, 0x9, "", [{{0x9, 0x4, 0x97, 0x8, 0x3, 0x9c, 0x98, 0x24, 0x40, [], [{{0x9, 0x5, 0x5, 0x0, 0x8, 0x4, 0x94, 0x9}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x5, 0x7, 0xa, [@generic={0xaf, 0x0, "da442790579a171e2951c061ab7e473b30d073bf5336cfad02c0daa9575eb61704273735b81cfcb6864df2b78c1b4250c1cc2fc308124308c9799f378bcc4cf678e50a45770612039cc2e7d0826ffbb4630a303e306a9d15be432cbfa00470592f5d2e8aa6baa3ce5f4471a9e3431c2aa85610c96b440f5067d36b0e9e86840376ab724050a99d1c6482ea5393be17427d9eca6f15a2a1ed4fc9aeffcfd3147c0b0565ab195f95163626b2974e"}, @generic={0xb1, 0x6, "a1f17ad99953cabab2c876232b47a19dc81fc01ffbc8fff7be66e7108aeb570bcb27aa82bef3eba34beaebf9408d84e13a82eb0356b92478430556e91d808797c0584c8435aa25dd5f101c046ffd1c18d1e8bd990479c82e6b461575c972468e7badadef47ccd121e3b8dbbdc8d5ac74bcc84781555ebb215076adaa0987f05764780950d646f9883312b164e3f359999ef4eca612ffe788ef1a12dafa4f8c5e14eaa29c1ec40bac1f942f82f8625c"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x10, 0x3, 0x78, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x40, 0x9}, @generic={0x6d, 0x24, "03eab66774c8f204937a06d8bc0375f5eead97da2cdf92917cf0d99df5d3afe543e392984940dd029e0c048bcfeee1c07608ac196929e9f62c1de28eec816c73c79bf11de74e37767c05abcad6ac09216688345268c442bf3ba3b4ab9d6453e751e9a01d792a30a540392e"}]}}]}}, {{0x9, 0x4, 0xcb, 0x38, 0xc, 0x8c, 0x29, 0x3f, 0x0, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "820f2da60f"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x9, 0xb9, 0x9}, {0x6, 0x24, 0x1a, 0x2, 0x8}}], [{{0x9, 0x5, 0x1, 0x10, 0x20, 0xe, 0xdc, 0x7}}, {{0x9, 0x5, 0x6, 0x3, 0x40, 0x7f, 0xff, 0x5f, [@generic={0x22, 0x2, "df54a90d41e70d1bf498de6608c3d7a6c678c073ce244bdc2180e68261f1c062"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x8}]}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x0, 0x1, 0xfd}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x0, 0x0, 0x1}}, {{0x9, 0x5, 0x5, 0x3, 0x8, 0x1, 0xfe, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xf0d0}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xff, 0x8}]}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0x2, 0x97, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0x2}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x2, 0x49, 0xe}}, {{0x9, 0x5, 0x9, 0xc, 0x214, 0xf5, 0x0, 0x2}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x80, 0x8a, 0x9b, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x3}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x6, 0x8, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x1}]}}, {{0x9, 0x5, 0x9, 0x3, 0x3ff, 0x6, 0x4, 0xfc}}, {{0x9, 0x5, 0x0, 0xc, 0x20, 0xe, 0xd, 0xa, [@generic={0xf7, 0x7, "c9bd9ccfac1ee148ac1f71f4e04798ccf7ef29ac5dfd048335c12065ede612e1e889e84a555b0819e471f2484ae58322ecc104186bd76e77d901c70ee10cb12cf45d32e49704f302b9bc721b01de318bf91219e049b0f0f1eb5f80cf023cba97250abf9019fad96f3b607197836087bbe1acf24df2e92202d9e2c2eb722a2dd39e8779274ee22adcfc92aedce992977adc0c0d541c6eb048d4eb54f116a9b59c65b8902e515b4592963121ddc3fb10e4c60041614a96ac5380821083f1398affd342706a872c309690b25aec7b99ac5ec6435a7ecbab20372faba087ed3380b86d7a187734907362ac4b3c5a0e4fe01fa9d59dd102"}]}}]}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000940)={0xa, 0x6, 0x250, 0x5, 0xd, 0x7, 0xdf, 0x40}, 0x3b, &(0x7f0000000980)={0x5, 0xf, 0x3b, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "299e6970ad72bf3f1b5222be8fc28705"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xc, 0x8, 0x65}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x4, 0xb}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "49f0c34f1564a668df3a769f360beae4"}]}, 0x9, [{0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x480a}}, {0x47, &(0x7f0000000a00)=@string={0x47, 0x3, "91b4f5182c0e23b260b1163899d3125178ec98b5c6efd2aad12a689dc1d50ef737f040513fc8654bcdc68e9ecfd01896ea25b1dd6c52240d1465342b627ededa3c2194005a"}}, {0xbf, &(0x7f0000000a80)=@string={0xbf, 0x3, "01ade410bbeaec8ed195fadea82e731cd206ebfea00037bc3bbf87239c3a46e1c3313520cd2eaf437077efd36cb68caff13732708c31f20daf38409b3a6008a171b76b4d23d7227db01499d4904297dcb5a3fa1ca80990d5ef336e39f0c86363683dcda995ac9636f1b5ec7b2c9234241fb392934c4eece4cb8ca068cec7443b0628a6dfb3a59036fa71fae6ace1bbaeeda7685c2e312d35e012dfb1fd8687b94d89647738efa4c1607f15a623a7e61a57a9229bad92a1143c76dd9537"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x140a}}, {0xdc, &(0x7f0000000b80)=ANY=[@ANYBLOB="dc036e8c3e36cdb3cc5a8b8574fa45a9000073539773e21f9cba4d6b77a498fa69621d13efc6418c9aaff1c20a02f4dd2a1c0f63a923c86b9a617ff4807dbd2bba7860792982167d004dd3d0f1e5d631661372c15af75c9443163298ade79eb65cfb2009790ac925876e0e23f271463b92ca9406c2731259c1e77abaaa48efcf3e332eeb8238d02867dd11141e258d67a6bbb3b2949915d363b78a7de5715dcfbd6e7162459e7d929997b4cda17fa7f2948ac51a082f3da103b6e2a7abb0f531a9310ac3815e568868c7b93ea8ea343d749126b180e904d9769c1d3d"]}, {0xfa, &(0x7f0000000c80)=@string={0xfa, 0x3, "5ea2aa84e62315af2523be37d637770bf7e41e0fd82d29e55201cb847ca74ac460bdb61cf97b756b32ebf7111387a400bce0cc4fd59c209859de75c05edd9606c4cb634c058ec4feae45c3db58684da8bd836704b21557f04118d0a51100b5006a61404844bb2a62b76b9b5248766585e6fe033f8ac6d2737030f6685568ab85459d65a62fa5f134e1a78bfa9565461433c38604f71561cd5111e12ada7e65e05b255b2163404250b76432a746b84e36b326e84a39c350c99647fae41ea1760bb70758ae669de47e17a468903a98ec89dd3e2f1630c50cfbcb6172c1d1e591ea1c28e50515e89673739688f9f4f9ab4b572275d9aff12f53"}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x2809}}, {0xff, &(0x7f0000000dc0)=@string={0xff, 0x3, "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"}}, {0xef, &(0x7f0000000ec0)=@string={0xef, 0x3, "6186c868c50427b11758b119953ac9d17bb80f964f9f1c9d5597441bdf259baa8eb7b6b6b967a74a742e7da32d5602a4ffebc0a38d6e5b180f737d63cd61ef459c42a9b64bd12ef402ce7f9c87b60a8c39bebb5a53e033078c8d696e915b91375f3a3ba00a6f80728a5204f3264c703b51404e73136eb6129c680288f3fd3851f61a7a90324852074d605f13bfc312d62dd7ec0c73b702cf440501505de53b674c4df0f145297798df378c2b994c65619e75f1298e62be435fce6845decf238fab3f21300287acf7e09b90320f2417c28f6d8f781d93e078c13d95fc101393f9c0a5f896d237c13ce672be2156"}}]}) 665.798147ms ago: executing program 4 (id=411): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0x33}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0xc00e}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x4000000, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xd0, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_USERDATA={0x9f, 0xd, 0x1, 0x0, "54c47520900fc73e9cb2d4d3df5306e3cc72754cb8bcff24366ff3c828440f243f2fc5edfc41e283237ba4188941768b2ad882bbfc3cef9b9a413cd424f92916e5327899c679ca995761805a00878dccf6d52981f67c89ad8447cf53e11cdf6d0deaea41f2ea8de2d54a4bb7f7f5ecc9c44c8aa5257d734f8acc6ba26624f5ee6a97ed104f673ddd3c49e661c51a5414abf5ed362f7794aaea5b64"}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x78, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x3c, 0xb, 0x0, 0x1, [{0x20, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0xe, 0x2}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x190}}, 0x0) connect$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) 641.954753ms ago: executing program 1 (id=363): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000200)={'fscrypt:', @auto=[0x65, 0x66, 0x38, 0x38, 0x33, 0x62, 0x37, 0xc, 0x39, 0x35, 0x61, 0x64, 0x65, 0x39, 0x63, 0x33]}, &(0x7f0000000280)={0x0, "296fff591a2236cc61a1f688788959cec0fe9363504b9effbd8e1211c327207cccfaa1fa4b842f50491a5af718a9ec0c0a56a2add4d03a7d2861154693717480", 0x2d}, 0x48, r2) keyctl$unlink(0x9, r3, r2) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001b40), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000000)={0x2c, r4, 0x21, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x25}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x802}, 0x0) landlock_restrict_self(r0, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84) 547.177935ms ago: executing program 1 (id=412): r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, &(0x7f00000000c0)="800009f3220800ce", 0x8, 0x800, &(0x7f0000000280)={0xa, 0x0, 0x3000000, @mcast2, 0x9}, 0x1c) 536.708645ms ago: executing program 1 (id=413): r0 = socket$kcm(0x11, 0xd, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0xc0c00) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000580)={0x1, 0x0, 0x7, &(0x7f0000000540)={0x1c, "584fc4dfae9a34fb1ffbb539b436cc843759a57bf235d2f60200"}}) (async) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000580)={0x1, 0x0, 0x7, &(0x7f0000000540)={0x1c, "584fc4dfae9a34fb1ffbb539b436cc843759a57bf235d2f60200"}}) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='projid_map\x00') exit(0x4) statx(r3, 0x0, 0x1000, 0x100, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000a08200002c0012801700010062726964676500001c00028008000500010000000500250001000000050029000000020008000a00", @ANYRES32=r4], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x24048060) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000005c0)=""/4096, &(0x7f00000015c0)=0x1000) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000200)='bridge0\x00') (async) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000200)='bridge0\x00') 536.069639ms ago: executing program 4 (id=414): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x65) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r4, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) getrlimit(0x8, &(0x7f00000001c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = openat$smackfs_revoke_subject(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$smackfs_label(r5, 0x0, 0x2) syz_usbip_server_init(0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000004900)={0xffffffffffffffff, 0x0, 0x980, 0xa1, &(0x7f00000037c0)="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", &(0x7f00000047c0)=""/161, 0x0, 0x0, 0x1f, 0x35, &(0x7f0000004880)="e4f1c7b40e80d3df0ae5d6a958903eeb4ed1608156f695388dd43c52ac3c5c", &(0x7f00000048c0)="fe88e69b82ac7f227d09c54a30e9e2413305b58d104bab178bba3ea683687de49232e9172152d7ec5d80b5cc34629da382510e8ed1", 0x0, 0x0, 0x5}, 0x50) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000200)={'IDLETIMER\x00'}, &(0x7f0000000240)=0x1e) r6 = openat(0xffffffffffffff9c, 0x0, 0x490042, 0x0) pwrite64(r6, 0x0, 0x0, 0x8080c61) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f40)={'vlan0\x00', &(0x7f0000000e40)=@ethtool_drvinfo={0x3, "ad2d53b155f55222074ac545b0b526834451f5c63771cddd30b1de1aee81de2a", "7d774b76005c8846835ae47ff6ba275800", "07ffda7e8037293db8c178f1f44bc1156e55e87a9c45eef2eef7630542683565", "70df1710d3518991326dbd966869e5a5a02f091c53bc8045071241d866110bdb", "c6eda83fa7ff6dedb263ae5efc60938baa18c9acce190528f7c8b31464be1e81", "183f19e71e9dc3962aa67400"}}) 0s ago: executing program 8 (id=415): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) kernel console output (not intermixed with test programs): 31.581940][ T3871] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.581968][ T3871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.604926][ T4709] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.617624][ T4710] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.619613][ T4710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.686182][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.709288][ T4711] veth0_vlan: entered promiscuous mode [ 31.713086][ T4711] veth1_vlan: entered promiscuous mode [ 31.719831][ T4711] veth0_macvtap: entered promiscuous mode [ 31.722221][ T4711] veth1_macvtap: entered promiscuous mode [ 31.725990][ T4715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.741091][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.745842][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.761206][ T4715] veth0_vlan: entered promiscuous mode [ 31.766653][ T128] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.766797][ T128] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.766827][ T128] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.766844][ T128] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.775609][ T4715] veth1_vlan: entered promiscuous mode [ 31.812240][ T4714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.831844][ T4715] veth0_macvtap: entered promiscuous mode [ 31.847034][ T4714] veth0_vlan: entered promiscuous mode [ 31.852756][ T4714] veth1_vlan: entered promiscuous mode [ 31.861990][ T4715] veth1_macvtap: entered promiscuous mode [ 31.864754][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.864797][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.875262][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.896720][ T4714] veth0_macvtap: entered promiscuous mode [ 31.900126][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.901362][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.910285][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.910365][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.910537][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.910565][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.910583][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.910604][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.922445][ T4714] veth1_macvtap: entered promiscuous mode [ 31.930886][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.933364][ T4709] veth0_vlan: entered promiscuous mode [ 31.965090][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.965122][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.973719][ T4711] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.974543][ T4709] veth1_vlan: entered promiscuous mode [ 31.983303][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.985050][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.007760][ T39] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.007822][ T39] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.007845][ T39] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.007862][ T39] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.009768][ T4709] veth0_macvtap: entered promiscuous mode [ 32.011113][ T4709] veth1_macvtap: entered promiscuous mode [ 32.014914][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.016058][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.039157][ T4888] loop0: detected capacity change from 0 to 256 [ 32.045950][ T4888] vfat: Unknown parameter 'uni_xlatg' [ 32.055269][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.055308][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.058641][ T39] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.059212][ T128] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.059238][ T128] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.059258][ T128] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.066303][ T4888] loop0: detected capacity change from 0 to 1024 [ 32.071553][ T4888] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 32.100957][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.102394][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.141793][ T128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.141826][ T128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.191646][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.191683][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.347787][ T50] Bluetooth: hci0: command tx timeout [ 32.348017][ T50] Bluetooth: hci2: command tx timeout [ 32.348107][ T50] Bluetooth: hci1: command tx timeout [ 32.348338][ T50] Bluetooth: hci4: command tx timeout [ 32.434643][ T4719] Bluetooth: hci3: command tx timeout [ 32.451842][ T4803] IPVS: starting estimator thread 0... [ 32.478827][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.478868][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.481046][ T4900] loop3: detected capacity change from 0 to 512 [ 32.481445][ T4900] journal_path: Lookup failure for './file1/file0' [ 32.481459][ T4900] EXT4-fs: error: could not find journal device path [ 32.493115][ T4901] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 32.501709][ T4710] veth0_vlan: entered promiscuous mode [ 32.514206][ T4710] veth1_vlan: entered promiscuous mode [ 32.528951][ T4710] veth0_macvtap: entered promiscuous mode [ 32.535671][ T4710] veth1_macvtap: entered promiscuous mode [ 32.537111][ T4896] IPVS: using max 61 ests per chain, 146400 per kthread [ 32.549902][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.552593][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.559823][ T4904] loop2: detected capacity change from 0 to 1024 [ 32.561976][ T4904] EXT4-fs: Ignoring removed bh option [ 32.564551][ T4904] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 32.566639][ T128] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.568865][ T128] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.568891][ T128] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.568909][ T128] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.603319][ T4904] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.616365][ T4908] loop3: detected capacity change from 0 to 128 [ 32.654869][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.654900][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.692726][ T4911] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #12: block 7: comm syz.2.7: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 32.714001][ T4911] EXT4-fs (loop2): Remounting filesystem read-only [ 32.719222][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.719260][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.875517][ T4919] syz.1.2 (4919): drop_caches: 4 [ 33.218230][ T4920] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 33.828328][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.977105][ T4929] loop0: detected capacity change from 0 to 512 [ 33.979365][ T4929] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.979400][ T4929] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 33.983659][ T4929] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 33.984060][ T4929] EXT4-fs: failed to create workqueue [ 33.984083][ T4929] EXT4-fs (loop0): mount failed [ 34.010971][ T30] audit: type=1326 audit(33.970:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4934 comm="syz.4.13" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6f77b68 code=0x0 [ 34.100584][ T4944] macvlan2: entered promiscuous mode [ 34.103606][ T4944] macvlan2: entered allmulticast mode [ 34.111294][ T4944] dummy0: entered allmulticast mode [ 34.111805][ T4944] dummy0: entered promiscuous mode [ 34.119194][ T4944] team0: Port device macvlan2 added [ 34.136198][ T4954] faux_driver vkms: [drm] Unknown color mode 32769; guessing buffer size. [ 34.204000][ T4922] kernel read not supported for file /newroot/7 (pid: 4922 comm: kworker/1:5) [ 34.208833][ T4965] netlink: 40 bytes leftover after parsing attributes in process `syz.3.20'. [ 34.235330][ T4818] hsr0: entered promiscuous mode [ 34.286180][ T4850] Bluetooth: hci5: Frame reassembly failed (-84) [ 34.327733][ T4976] ======================================================= [ 34.327733][ T4976] WARNING: The mand mount option has been deprecated and [ 34.327733][ T4976] and is ignored by this kernel. Remove the mand [ 34.327733][ T4976] option from the mount to silence this warning. [ 34.327733][ T4976] ======================================================= [ 34.350535][ T4978] loop2: detected capacity change from 0 to 512 [ 34.379660][ T4978] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.396949][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.427144][ T50] Bluetooth: hci4: command tx timeout [ 34.427181][ T50] Bluetooth: hci1: command tx timeout [ 34.427210][ T50] Bluetooth: hci2: command tx timeout [ 34.427229][ T50] Bluetooth: hci0: command tx timeout [ 34.450451][ T4992] netlink: 76 bytes leftover after parsing attributes in process `syz.2.26'. [ 34.451574][ T4992] netlink: 52 bytes leftover after parsing attributes in process `syz.2.26'. [ 34.452940][ T4992] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.453377][ T4992] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.507464][ T4712] Bluetooth: hci3: command tx timeout [ 34.539312][ T4995] loop2: detected capacity change from 0 to 1024 [ 34.549893][ T4995] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 34.554770][ T4995] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.27: lblock 0 mapped to illegal pblock 0 (length 1) [ 34.558281][ T4995] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 34.558323][ T4995] EXT4-fs (loop2): This should not happen!! Data will be lost [ 34.558323][ T4995] [ 34.569666][ T4995] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: comm syz.2.27: lblock 0 mapped to illegal pblock 0 (length 1) [ 34.571481][ T4995] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 3: comm syz.2.27: lblock 3 mapped to illegal pblock 3 (length 3) [ 34.572017][ T4995] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 34.572034][ T4995] EXT4-fs (loop2): This should not happen!! Data will be lost [ 34.572034][ T4995] [ 34.920482][ T5000] capability: warning: `syz.4.28' uses deprecated v2 capabilities in a way that may be insecure [ 34.974666][ T5001] Zero length message leads to an empty skb [ 34.976487][ T5001] bond0: (slave virt_wifi0): The slave device specified does not support setting the MAC address [ 34.976695][ T5001] bond0: (slave virt_wifi0): Error -95 calling set_mac_address [ 35.325375][ T5024] netlink: 616 bytes leftover after parsing attributes in process `syz.0.35'. [ 35.351105][ T40] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 35.356893][ T5031] netlink: 14 bytes leftover after parsing attributes in process `syz.3.37'. [ 35.359048][ T40] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 35.359077][ T40] EXT4-fs (loop2): This should not happen!! Data will be lost [ 35.359077][ T40] [ 35.363774][ T4709] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 35.366049][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 35.389898][ T5031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 35.396605][ T5032] netlink: 'syz.0.35': attribute type 21 has an invalid length. [ 35.396657][ T5032] netlink: 128 bytes leftover after parsing attributes in process `syz.0.35'. [ 35.433455][ T5031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 35.528408][ T5031] bond0 (unregistering): Released all slaves [ 35.544223][ T5032] netlink: 'syz.0.35': attribute type 4 has an invalid length. [ 35.544265][ T5032] netlink: 'syz.0.35': attribute type 3 has an invalid length. [ 35.544275][ T5032] netlink: 3 bytes leftover after parsing attributes in process `syz.0.35'. [ 35.780233][ T5050] loop4: detected capacity change from 0 to 8 [ 35.807986][ T5056] netlink: 16 bytes leftover after parsing attributes in process `syz.2.45'. [ 35.811201][ T5056] netlink: 16 bytes leftover after parsing attributes in process `syz.2.45'. [ 35.813139][ T5056] netlink: 20 bytes leftover after parsing attributes in process `syz.2.45'. [ 35.906300][ T5064] loop2: detected capacity change from 0 to 2048 [ 35.907462][ T5064] EXT4-fs: Ignoring removed mblk_io_submit option [ 35.907484][ T5064] EXT4-fs: Ignoring removed bh option [ 35.919766][ T5064] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.998260][ T4816] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 36.024919][ T5068] FAT-fs (loop3): invalid media value (0x00) [ 36.024969][ T5068] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 36.024982][ T5068] FAT-fs (loop3): Can't find a valid FAT filesystem [ 36.143201][ T5064] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.49: bg 0: block 234: padding at end of block bitmap is not set [ 36.146733][ T5064] EXT4-fs (loop2): Remounting filesystem read-only [ 36.160357][ T4816] usb 1-1: Using ep0 maxpacket: 8 [ 36.163004][ T4816] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 36.163043][ T4816] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 36.164545][ T4816] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 36.164559][ T4816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.164568][ T4816] usb 1-1: Product: ᠓ [ 36.164575][ T4816] usb 1-1: Manufacturer: 餕꬛پ◾掚ʯᾫȈ㺃➪銮Ӥ櫠┃淍跗솉詐퍶矨庱☪Ѣ뛎ꖋ搫硠ᅴ埻徲휓㐇蓰ꊠ軹봲옯 [ 36.164584][ T4816] usb 1-1: SerialNumber: ᰊ [ 36.180471][ T5073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.182713][ T5073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.186300][ T5073] xt_CT: You must specify a L4 protocol and not use inversions on it [ 36.236012][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.272562][ T5076] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 36.308813][ T5079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.311092][ T5079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.319185][ T5079] warning: `syz.2.54' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 36.347364][ T4719] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 36.348516][ T4712] Bluetooth: hci5: command 0x1003 tx timeout [ 36.507290][ T4719] Bluetooth: hci0: command tx timeout [ 36.507879][ T4719] Bluetooth: hci2: command tx timeout [ 36.507897][ T4719] Bluetooth: hci1: command tx timeout [ 36.507927][ T4719] Bluetooth: hci4: command tx timeout [ 36.541328][ T5092] Driver unsupported XDP return value 0 on prog (id 8) dev N/A, expect packet loss! [ 36.598682][ T4712] Bluetooth: hci3: command tx timeout [ 37.285787][ T5128] netlink: 'syz.2.68': attribute type 9 has an invalid length. [ 37.434560][ T5132] set_capacity_and_notify: 2 callbacks suppressed [ 37.434601][ T5132] loop2: detected capacity change from 0 to 1024 [ 37.443908][ T5132] loop2: detected capacity change from 0 to 128 [ 37.468144][ T5132] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 37.478880][ T5130] loop4: detected capacity change from 0 to 4096 [ 37.479792][ T5130] EXT4-fs: Ignoring removed nomblk_io_submit option [ 37.482054][ T5130] EXT4-fs (loop4): Test dummy encryption mode enabled [ 37.485654][ T5130] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 37.485760][ T5130] System zones: 0-5 [ 37.490570][ T5130] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.515462][ T4709] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.532569][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.589087][ T5142] loop2: detected capacity change from 0 to 512 [ 37.599495][ T5142] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.71: corrupted in-inode xattr: e_value out of bounds [ 37.602411][ T5142] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 37.605644][ T5142] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.71: couldn't read orphan inode 15 (err -117) [ 37.607737][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 37.607753][ C1] EXT4-fs (loop2): initial error at time 37: ext4_iget_extra_inode:5180: inode 15 [ 37.607771][ C1] EXT4-fs (loop2): last error at time 37: ext4_iget_extra_inode:5180: inode 15 [ 37.620271][ T5142] loop2: lost filesystem error report for type 5 error -117 [ 37.621097][ T5142] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.869412][ T5167] loop4: detected capacity change from 0 to 8192 [ 37.912496][ T5167] xt_hashlimit: size too large, truncated to 1048576 [ 37.961784][ T5172] loop1: detected capacity change from 0 to 2048 [ 37.969592][ T5172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.075502][ T5181] loop4: detected capacity change from 0 to 2048 [ 38.077876][ T5181] EXT4-fs: Ignoring removed mblk_io_submit option [ 38.077949][ T5181] EXT4-fs: Ignoring removed bh option [ 38.101913][ T5181] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.345811][ T5181] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.83: bg 0: block 234: padding at end of block bitmap is not set [ 38.347705][ T5181] EXT4-fs (loop4): Remounting filesystem read-only [ 38.418100][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.587124][ T4712] Bluetooth: hci4: command tx timeout [ 38.587166][ T4712] Bluetooth: hci1: command tx timeout [ 38.587886][ T4712] Bluetooth: hci2: command tx timeout [ 38.587902][ T4712] Bluetooth: hci0: command tx timeout [ 38.618180][ T5193] loop4: detected capacity change from 0 to 1024 [ 38.622533][ T5193] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.635220][ T5193] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.667937][ T4719] Bluetooth: hci3: command tx timeout [ 38.693807][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.719287][ T4816] cdc_ncm 1-1:1.0: bind() failure [ 38.724991][ T4816] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 38.728640][ T4816] cdc_ncm 1-1:1.1: bind() failure [ 38.743877][ T4816] usb 1-1: USB disconnect, device number 2 [ 38.778560][ T5198] tap0: tun_chr_ioctl cmd 1074025681 [ 38.778941][ T5198] tap0: tun_chr_ioctl cmd 1074025681 [ 38.932057][ T4709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.191997][ T5212] loop0: detected capacity change from 0 to 256 [ 39.396883][ T40] wlan1: Trigger new scan to find an IBSS to join [ 39.462858][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.519888][ T5217] __nla_validate_parse: 5 callbacks suppressed [ 39.520153][ T5217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.93'. [ 39.525880][ T5219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.526081][ T5219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.526792][ T5217] loop4: detected capacity change from 0 to 128 [ 39.764014][ T5224] netlink: 7 bytes leftover after parsing attributes in process `syz.2.92'. [ 40.262367][ T5224] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 40.675272][ T5217] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.678674][ T5217] syz.4.93 (pid 5217) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 40.763357][ T5217] fscrypt: Adiantum using implementation "adiantum(xchacha12-lib,aes-lib)" [ 40.773052][ T5217] netlink: 12 bytes leftover after parsing attributes in process `syz.4.93'. [ 40.806441][ T5242] ext4: Unknown parameter 'fscontext' [ 40.813441][ T5242] netlink: 72 bytes leftover after parsing attributes in process `syz.0.96'. [ 40.843515][ T4710] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.917653][ T5249] process 'syz.0.100' launched './file1' with NULL argv: empty string added [ 40.950366][ T5256] netlink: 'syz.0.100': attribute type 4 has an invalid length. [ 40.950407][ T5256] netlink: 156 bytes leftover after parsing attributes in process `syz.0.100'. [ 40.951866][ T5256] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 40.951960][ T5256] netlink: 'syz.0.100': attribute type 4 has an invalid length. [ 40.951969][ T5256] netlink: 156 bytes leftover after parsing attributes in process `syz.0.100'. [ 40.951982][ T5256] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 40.952033][ T5256] netlink: 'syz.0.100': attribute type 4 has an invalid length. [ 40.952041][ T5256] netlink: 156 bytes leftover after parsing attributes in process `syz.0.100'. [ 40.952050][ T5256] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 40.952098][ T5256] netlink: 'syz.0.100': attribute type 4 has an invalid length. [ 40.952104][ T5256] netlink: 156 bytes leftover after parsing attributes in process `syz.0.100'. [ 40.952113][ T5256] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 40.952158][ T5256] netlink: 'syz.0.100': attribute type 4 has an invalid length. [ 40.952164][ T5256] netlink: 156 bytes leftover after parsing attributes in process `syz.0.100'. [ 40.952172][ T5256] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 40.952222][ T5256] netlink: 'syz.0.100': attribute type 4 has an invalid length. [ 40.952228][ T5256] netlink: 156 bytes leftover after parsing attributes in process `syz.0.100'. [ 40.952236][ T5256] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 40.952287][ T5256] netlink: 'syz.0.100': attribute type 4 has an invalid length. [ 40.952297][ T5256] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 40.952341][ T5256] netlink: 'syz.0.100': attribute type 4 has an invalid length. [ 40.952350][ T5256] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 40.952395][ T5256] netlink: 'syz.0.100': attribute type 4 has an invalid length. [ 40.952405][ T5256] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 40.952452][ T5256] netlink: 'syz.0.100': attribute type 4 has an invalid length. [ 40.967106][ T5253] syzkaller1: entered promiscuous mode [ 40.967122][ T5253] syzkaller1: entered allmulticast mode [ 40.980342][ T5255] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.980364][ T5255] EXT4-fs: Ignoring removed bh option [ 41.084775][ T5255] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.242673][ T5267] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.300180][ T5267] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.494656][ T5274] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.620100][ T5255] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.102: bg 0: block 234: padding at end of block bitmap is not set [ 41.620876][ T5255] EXT4-fs (loop3): Remounting filesystem read-only [ 41.707888][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.774971][ T5285] binder: 5284:5285 got transaction to invalid handle, 1 [ 41.775031][ T5285] binder: 5284:5285 cannot find target node [ 41.775046][ T5285] binder: 5284:5285 transaction call to 0:0 failed 2/29201/-22, code 0 size 0-0 line 3234 [ 41.793282][ T5285] EXT4-fs: Ignoring removed i_version option [ 41.796138][ T5285] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 41.800881][ T5285] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.851382][ T4795] binder: undelivered TRANSACTION_ERROR: 29201 [ 41.876334][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.878412][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.909962][ T5296] syz.2.113: attempt to access beyond end of device [ 41.909962][ T5296] loop2: rw=0, sector=17179852721, nr_sectors = 1 limit=512 [ 41.910403][ T5296] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 41.910417][ T5296] FAT-fs (loop2): Filesystem has been set read-only [ 41.910639][ T5296] syz.2.113: attempt to access beyond end of device [ 41.910639][ T5296] loop2: rw=0, sector=17179852721, nr_sectors = 1 limit=512 [ 41.910697][ T5296] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 41.911081][ T5296] syz.2.113: attempt to access beyond end of device [ 41.911081][ T5296] loop2: rw=524288, sector=17179852706, nr_sectors = 8 limit=512 [ 41.950255][ T5298] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 41.952271][ T5298] unable to read xattr id index table [ 41.962623][ T5298] SQUASHFS error: zlib decompression failed, data probably corrupt [ 41.962658][ T5298] SQUASHFS error: Failed to read block 0x13e: -5 [ 41.962683][ T5298] SQUASHFS error: Unable to read metadata cache entry [13c] [ 41.962697][ T5298] SQUASHFS error: Unable to read directory block [13c:26] [ 42.000923][ T5306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.002720][ T5306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.032109][ T5308] EXT4-fs: Mount option(s) incompatible with ext3 [ 42.319142][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.986860][ T30] audit: type=1326 audit(42.940:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5311 comm="syz.3.117" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c177b68 code=0x7fc00000 [ 43.070565][ T5353] set_capacity_and_notify: 8 callbacks suppressed [ 43.070794][ T5353] loop0: detected capacity change from 0 to 2048 [ 43.099139][ T5353] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.131506][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.158290][ T39] wlan1: Trigger new scan to find an IBSS to join [ 43.236703][ T5364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.236902][ T5364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.331232][ T5369] loop0: detected capacity change from 0 to 256 [ 43.342137][ T5371] loop1: detected capacity change from 0 to 256 [ 43.991575][ T5428] 9p: Bad value for 'rfdno' [ 44.108911][ T1293] wlan1: Trigger new scan to find an IBSS to join [ 44.636015][ T5459] loop3: detected capacity change from 0 to 512 [ 44.643223][ T5459] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.165: inode has both inline data and extents flags [ 44.646021][ T5459] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 44.646300][ T5459] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.165: couldn't read orphan inode 15 (err -117) [ 44.648677][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 44.648690][ C0] EXT4-fs (loop3): initial error at time 44: ext4_orphan_get:1399: inode 15 [ 44.648708][ C0] EXT4-fs (loop3): last error at time 44: ext4_orphan_get:1399: inode 15 [ 44.656212][ T5459] loop3: lost filesystem error report for type 5 error -117 [ 44.659611][ T5459] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.689731][ T5459] EXT4-fs error (device loop3): ext4_check_dx_root:2201: inode #2: comm syz.3.165: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 44.751694][ T4715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.830035][ T5475] loop0: detected capacity change from 0 to 128 [ 44.834836][ T5475] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.861020][ T30] audit: type=1326 audit(44.820:4): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=5474 comm="syz.0.171" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff82b77b68 code=0x0 [ 44.906095][ T5481] loop3: detected capacity change from 0 to 256 [ 44.913597][ T5481] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 44.937005][ T5481] net_ratelimit: 24 callbacks suppressed [ 44.939978][ T5481] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 44.998893][ T4715] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00) [ 44.998938][ T4715] FAT-fs (loop3): Filesystem has been set read-only [ 44.999134][ T4715] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00) [ 45.172504][ T5493] loop1: detected capacity change from 0 to 8192 [ 45.189531][ T5493] Dev loop1: RDB in block 1 has bad checksum [ 45.295578][ T5504] TC_ACT_REPEAT abuse ? [ 45.461842][ T1293] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.482566][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.486427][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.489659][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.490703][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.491012][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.547078][ T4719] Bluetooth: hci1: command 0x0406 tx timeout [ 45.556123][ T1293] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.591500][ T4712] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 45.593385][ T4712] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 45.594127][ T4712] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 45.595826][ T4712] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 45.596112][ T4712] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 45.644522][ T1293] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.673410][ T4711] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.715203][ T1293] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.782180][ T5513] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.782804][ T5513] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.782900][ T5513] bridge_slave_0: entered allmulticast mode [ 45.783388][ T5513] bridge_slave_0: entered promiscuous mode [ 45.786495][ T5513] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.786528][ T5513] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.786550][ T5545] loop0: detected capacity change from 0 to 2048 [ 45.786595][ T5513] bridge_slave_1: entered allmulticast mode [ 45.789326][ T5513] bridge_slave_1: entered promiscuous mode [ 45.805054][ T5513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.810817][ T5513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.815335][ T5545] EXT4-fs warning (device loop0): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop0. [ 45.843399][ T5513] team0: Port device team_slave_0 added [ 45.866447][ T5513] team0: Port device team_slave_1 added [ 45.932717][ T5513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.936076][ T5513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.936131][ T5513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.936933][ T5513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.936950][ T5513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.936972][ T5513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.976989][ T5513] hsr_slave_0: entered promiscuous mode [ 45.977517][ T5555] loop4: detected capacity change from 0 to 512 [ 45.978571][ T5513] hsr_slave_1: entered promiscuous mode [ 45.978803][ T5513] debugfs: 'hsr0' already exists in 'hsr' [ 45.978813][ T5513] Cannot create hsr debugfs directory [ 46.033084][ T1293] bridge_slave_1: left allmulticast mode [ 46.033133][ T1293] bridge_slave_1: left promiscuous mode [ 46.033592][ T1293] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.036557][ T5555] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.054590][ T1293] bridge_slave_0: left allmulticast mode [ 46.054644][ T1293] bridge_slave_0: left promiscuous mode [ 46.054758][ T1293] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.067874][ T5562] ip6t_srh: unknown srh invflags 4000 [ 46.221849][ T1293] bond1 (unregistering): Released all slaves [ 46.271815][ T5513] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 46.309579][ T5513] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 46.326891][ T5513] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 46.338811][ T5513] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 46.340788][ T5513] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 46.346505][ T5513] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 46.386281][ T5513] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 46.393068][ T5513] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 46.446947][ T4400] 8021q: adding VLAN 0 to HW filter on device eth0 [ 46.816379][ T4400] 8021q: adding VLAN 0 to HW filter on device eth1 [ 46.839386][ T5524] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.840889][ T5524] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.842261][ T5524] bridge_slave_0: entered allmulticast mode [ 46.844571][ T5524] bridge_slave_0: entered promiscuous mode [ 46.846199][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.851956][ T5524] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.852040][ T5524] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.852165][ T5524] bridge_slave_1: entered allmulticast mode [ 46.852659][ T5524] bridge_slave_1: entered promiscuous mode [ 46.879918][ T5524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.881328][ T5513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.933863][ T5524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.937210][ T4922] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 46.986805][ T5524] team0: Port device team_slave_0 added [ 46.990151][ T5524] team0: Port device team_slave_1 added [ 47.015679][ T5623] loop4: detected capacity change from 0 to 2048 [ 47.029950][ T4712] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.030756][ T4712] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.031195][ T4712] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.031521][ T4712] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.031788][ T4712] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.056522][ T1293] hsr_slave_0: left promiscuous mode [ 47.058144][ T1293] hsr_slave_1: left promiscuous mode [ 47.058927][ T1293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.058960][ T1293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.062877][ T1293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.064940][ T1293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.067605][ T3871] wlan1: Trigger new scan to find an IBSS to join [ 47.076020][ T1293] veth1_macvtap: left promiscuous mode [ 47.078303][ T5623] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.081327][ T1293] veth0_macvtap: left promiscuous mode [ 47.082974][ T1293] veth1_vlan: left promiscuous mode [ 47.083921][ T1293] veth0_vlan: left promiscuous mode [ 47.087524][ T4922] usb 1-1: Using ep0 maxpacket: 8 [ 47.095272][ T4922] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 47.095312][ T4922] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 47.095323][ T4922] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 47.095334][ T4922] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 47.095351][ T4922] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 47.095360][ T4922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.148662][ T15] wlan1: Trigger new scan to find an IBSS to join [ 47.197252][ T1293] team0 (unregistering): Port device team_slave_1 removed [ 47.202927][ T1293] team0 (unregistering): Port device team_slave_0 removed [ 47.272065][ T4400] 8021q: adding VLAN 0 to HW filter on device eth2 [ 47.278626][ T5623] can0: slcan on ptm0. [ 47.285775][ T5513] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.291431][ T5524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.291469][ T5524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.291944][ T5524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.293686][ T5524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.293696][ T5524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.293712][ T5524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.317566][ T5524] hsr_slave_0: entered promiscuous mode [ 47.318966][ T5524] hsr_slave_1: entered promiscuous mode [ 47.339450][ T5623] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 47.341849][ T5623] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 47.351352][ T5623] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 16: comm syz.4.202: bad entry in directory: directory entry overrun - offset=108, inode=646161, rec_len=4096, size=4096 fake=0 [ 47.389695][ T4922] usb 1-1: GET_CAPABILITIES returned 0 [ 47.389739][ T4922] usbtmc 1-1:16.0: can't read capabilities [ 47.403472][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.403536][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.404591][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.404613][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.412731][ T5513] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 47.414463][ T5513] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.437763][ T5622] can0 (unregistered): slcan off ptm0. [ 47.483526][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.540443][ T4400] 8021q: adding VLAN 0 to HW filter on device eth3 [ 47.547125][ T4712] Bluetooth: hci0: command tx timeout [ 47.580476][ T5661] __nla_validate_parse: 35 callbacks suppressed [ 47.580526][ T5661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.203'. [ 47.580542][ T5661] nbd: must specify a device to reconfigure [ 47.588459][ T5524] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 47.594181][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 47.594274][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 47.594287][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 47.594299][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 47.594310][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 47.604426][ T5524] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.605090][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 47.605113][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 47.605125][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 47.605137][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 47.605148][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 47.605159][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 47.605169][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 47.605180][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 47.605190][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 47.605201][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 47.605211][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 47.612908][ T26] usb 1-1: USB disconnect, device number 3 [ 47.616394][ T1293] IPVS: stop unused estimator thread 0... [ 47.621310][ T5524] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 47.627188][ T4712] Bluetooth: hci4: command tx timeout [ 47.635303][ T5524] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.652994][ T5524] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 47.656750][ T5524] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.663580][ T5524] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 47.666658][ T5524] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.699765][ T5668] x_tables: duplicate underflow at hook 1 [ 47.705575][ T5668] EXT4-fs: Ignoring removed nobh option [ 47.710178][ T5668] ext4: Unknown parameter 'dont_measure' [ 47.750164][ T1293] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.818758][ T5524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.826994][ T1293] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.846764][ T5513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.853537][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.855287][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.856630][ T5625] bridge_slave_0: entered allmulticast mode [ 47.858452][ T5625] bridge_slave_0: entered promiscuous mode [ 47.860448][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.861827][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.863152][ T5625] bridge_slave_1: entered allmulticast mode [ 47.864775][ T5625] bridge_slave_1: entered promiscuous mode [ 47.875830][ T5524] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.894847][ T3871] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.894900][ T3871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.911316][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.920182][ T4850] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.920229][ T4850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.939086][ T1293] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.948967][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.965517][ T5524] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.974982][ T5625] team0: Port device team_slave_0 added [ 47.975903][ T5625] team0: Port device team_slave_1 added [ 47.998279][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.999715][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.003526][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.006246][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.006257][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.006269][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.014234][ T39] wlan1: Creating new IBSS network, BSSID 7e:ed:d3:d0:76:d0 [ 48.026621][ T5625] hsr_slave_0: entered promiscuous mode [ 48.028681][ T5625] hsr_slave_1: entered promiscuous mode [ 48.030074][ T5625] debugfs: 'hsr0' already exists in 'hsr' [ 48.031191][ T5625] Cannot create hsr debugfs directory [ 48.053879][ T1293] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.115553][ T5513] veth0_vlan: entered promiscuous mode [ 48.125340][ T5513] veth1_vlan: entered promiscuous mode [ 48.181165][ T5524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.221169][ T5513] veth0_macvtap: entered promiscuous mode [ 48.234198][ T5513] veth1_macvtap: entered promiscuous mode [ 48.244420][ T5513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.247387][ T5513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.270440][ T15] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.270581][ T15] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.270668][ T15] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.270752][ T15] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.309428][ T1293] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.392401][ T5625] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 48.415285][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.415781][ T5625] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 48.418328][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.490571][ T5625] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 48.547870][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.549845][ T5625] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 48.561385][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.581766][ T1293] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.676024][ T4850] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.676061][ T4850] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.676190][ T4850] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.676196][ T4850] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.702607][ T4400] 8021q: adding VLAN 0 to HW filter on device eth4 [ 48.730510][ T5524] veth0_vlan: entered promiscuous mode [ 48.770476][ T1293] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.808460][ T5524] veth1_vlan: entered promiscuous mode [ 48.848530][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.854155][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.857189][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.857242][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.863217][ T5524] veth0_macvtap: entered promiscuous mode [ 48.864677][ T5524] veth1_macvtap: entered promiscuous mode [ 48.896229][ T1293] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.930862][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.930915][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.939076][ T5524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.940308][ T5524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.945508][ T4850] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.011145][ T4850] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.012479][ T4850] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.012516][ T4850] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.067362][ T4712] Bluetooth: hci2: command tx timeout [ 49.068360][ T39] wlan1: Trigger new scan to find an IBSS to join [ 49.105689][ T5800] validate_nla: 26 callbacks suppressed [ 49.105742][ T5800] netlink: 'syz.0.220': attribute type 27 has an invalid length. [ 49.105758][ T5800] netlink: 'syz.0.220': attribute type 3 has an invalid length. [ 49.105772][ T5800] netlink: 132 bytes leftover after parsing attributes in process `syz.0.220'. [ 49.126692][ T5796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.220'. [ 49.156566][ T5796] netlink: 'syz.0.220': attribute type 10 has an invalid length. [ 49.166481][ T4400] 8021q: adding VLAN 0 to HW filter on device eth5 [ 49.166712][ T5796] team0: Device veth1_vlan is up. Set it down before adding it as a team port [ 49.202646][ T3871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.202690][ T3871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.226293][ T1293] bridge_slave_1: left allmulticast mode [ 49.226338][ T1293] bridge_slave_1: left promiscuous mode [ 49.226454][ T1293] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.249237][ T1293] bridge_slave_0: left allmulticast mode [ 49.249284][ T1293] bridge_slave_0: left promiscuous mode [ 49.249382][ T1293] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.278455][ T1293] bridge_slave_1: left allmulticast mode [ 49.278491][ T1293] bridge_slave_1: left promiscuous mode [ 49.278587][ T1293] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.282732][ T1293] bridge_slave_0: left allmulticast mode [ 49.282760][ T1293] bridge_slave_0: left promiscuous mode [ 49.282820][ T1293] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.380089][ T1293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.394676][ T1293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.421062][ T1293] bond0 (unregistering): Released all slaves [ 49.465690][ T1293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.499623][ T1293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.528896][ T1293] bond0 (unregistering): Released all slaves [ 49.542564][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.542602][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.627099][ T4712] Bluetooth: hci0: command tx timeout [ 49.636736][ T5827] set_capacity_and_notify: 2 callbacks suppressed [ 49.639040][ T5827] loop0: detected capacity change from 0 to 2048 [ 49.648851][ T5830] loop6: detected capacity change from 0 to 4096 [ 49.671693][ T5830] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.682713][ T5827] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 49.707272][ T4712] Bluetooth: hci4: command tx timeout [ 49.740102][ T5839] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:169: inode #12: comm syz.0.227: inline data xattr refers to an external xattr inode [ 49.743382][ T5839] EXT4-fs (loop0): Remounting filesystem read-only [ 49.790007][ T5849] EXT4-fs error (device loop6): ext4_get_first_dir_block:3557: inode #12: block 80: comm syz.6.189: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 49.806530][ T5849] EXT4-fs error (device loop6): ext4_get_first_dir_block:3560: inode #12: comm syz.6.189: directory missing '..' [ 49.819725][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 49.888991][ T4400] 8021q: adding VLAN 0 to HW filter on device eth6 [ 49.909802][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.948117][ T5866] mmap: syz.4.232 (5866): VmData 37625856 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 50.033184][ T5876] netlink: 16 bytes leftover after parsing attributes in process `syz.5.234'. [ 50.049079][ T15] wlan1: Creating new IBSS network, BSSID 1e:45:27:e7:70:b1 [ 50.079848][ T5883] loop0: detected capacity change from 0 to 4096 [ 50.102219][ T5876] netlink: 16 bytes leftover after parsing attributes in process `syz.5.234'. [ 50.108143][ T39] wlan1: Trigger new scan to find an IBSS to join [ 50.108229][ T39] wlan1: Trigger new scan to find an IBSS to join [ 50.109064][ T5883] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.112037][ T5883] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.161775][ T5892] loop4: detected capacity change from 0 to 4096 [ 50.162225][ T5892] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.170387][ T5892] EXT4-fs (loop4): Test dummy encryption mode enabled [ 50.183493][ T5892] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 50.183554][ T5892] System zones: 0-5 [ 50.185814][ T5892] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.274695][ T5883] loop0: detected capacity change from 0 to 4096 [ 50.280556][ T5625] veth0_vlan: entered promiscuous mode [ 50.282798][ T5625] veth1_vlan: entered promiscuous mode [ 50.296997][ T5883] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.307966][ T5883] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.313844][ T5625] veth0_macvtap: entered promiscuous mode [ 50.315246][ T5625] veth1_macvtap: entered promiscuous mode [ 50.354010][ T1293] hsr_slave_0: left promiscuous mode [ 50.355174][ T1293] hsr_slave_1: left promiscuous mode [ 50.360309][ T1293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.360347][ T1293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.362762][ T1293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.362777][ T1293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.378737][ T1293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.378779][ T1293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.380989][ T1293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.381024][ T1293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.431288][ T1293] dummy0: left allmulticast mode [ 50.431474][ T1293] veth1_macvtap: left promiscuous mode [ 50.431500][ T1293] veth0_macvtap: left promiscuous mode [ 50.431545][ T1293] veth1_vlan: left promiscuous mode [ 50.431586][ T1293] veth0_vlan: left promiscuous mode [ 50.443015][ T1293] veth1_macvtap: left promiscuous mode [ 50.443058][ T1293] veth0_macvtap: left promiscuous mode [ 50.443106][ T1293] veth1_vlan: left promiscuous mode [ 50.443140][ T1293] veth0_vlan: left promiscuous mode [ 50.503237][ T5524] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.546878][ T5883] loop0: detected capacity change from 0 to 4096 [ 50.563357][ T5883] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.564539][ T5883] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.660508][ T5883] loop0: detected capacity change from 0 to 4096 [ 50.677469][ T5912] loop6: detected capacity change from 0 to 1024 [ 50.681334][ T5883] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.682363][ T5883] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.687493][ T5912] overlayfs: failed lookup in lower (newroot/1, name='file0', err=-40): overlapping layers [ 50.690633][ T5912] overlayfs: failed lookup in lower (newroot/1, name='file0', err=-40): overlapping layers [ 50.740190][ T1293] team0 (unregistering): Port device macvlan2 removed [ 50.801072][ T5883] loop0: detected capacity change from 0 to 4096 [ 50.816855][ T5883] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.831071][ T5883] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.944102][ T1293] team0 (unregistering): Port device team_slave_1 removed [ 50.962766][ T1293] team0 (unregistering): Port device team_slave_0 removed [ 51.008185][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.049863][ T15] wlan1: Creating new IBSS network, BSSID c2:d5:33:cd:94:27 [ 51.144272][ T1293] team0 (unregistering): Port device team_slave_1 removed [ 51.147641][ T4712] Bluetooth: hci2: command tx timeout [ 51.148247][ T5927] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 51.154038][ T1293] team0 (unregistering): Port device team_slave_0 removed [ 51.223539][ T4400] 8021q: adding VLAN 0 to HW filter on device eth7 [ 51.223893][ T5911] netlink: 'syz.6.237': attribute type 4 has an invalid length. [ 51.234518][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.235571][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.252224][ T39] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.252283][ T39] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.252320][ T39] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.252346][ T39] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.358999][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.359033][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.390784][ T5941] netlink: 8 bytes leftover after parsing attributes in process `syz.5.246'. [ 51.392655][ T5941] netlink: 8 bytes leftover after parsing attributes in process `syz.5.246'. [ 51.411740][ T5941] loop5: detected capacity change from 0 to 512 [ 51.456281][ T5941] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.512506][ T3871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.513649][ T3871] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.535420][ T5943] netlink: 16 bytes leftover after parsing attributes in process `syz.0.245'. [ 51.536147][ T5944] autofs: Unknown parameter 'batadv_slave_1' [ 51.558155][ T5956] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 51.568548][ T5943] ext4: Unknown parameter '' [ 51.737105][ T4712] Bluetooth: hci0: command tx timeout [ 51.787212][ T4712] Bluetooth: hci4: command tx timeout [ 51.801603][ T5513] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.862947][ T4400] 8021q: adding VLAN 0 to HW filter on device eth8 [ 51.899084][ T5979] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.902352][ T5987] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 51.912276][ T5979] EXT4-fs error (device loop6): ext4_lookup:1785: inode #14: comm syz.6.253: invalid fast symlink length 39 [ 51.948052][ T5979] syzkaller0: entered promiscuous mode [ 51.948097][ T5979] syzkaller0: entered allmulticast mode [ 51.975724][ T5513] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 51.995433][ T5984] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.255: corrupted in-inode xattr: e_value size too large [ 51.995481][ T5984] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 51.998083][ T5984] EXT4-fs (loop7): Remounting filesystem read-only [ 51.998610][ T5984] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.014398][ T5984] EXT4-fs (loop7): shut down requested (2) [ 52.039526][ T5984] Injecting memory failure for pfn 0x13cb14 at process virtual address 0x20000000 [ 52.059751][ T5984] Memory failure: 0x13cb14: Sending SIGBUS to syz.7.255:5984 due to hardware memory corruption [ 52.059869][ T5984] Memory failure: 0x13cb14: recovery action for dirty LRU page: Recovered [ 52.059884][ T5984] Injecting memory failure for pfn 0x11d351 at process virtual address 0x20001000 [ 52.065716][ T5984] Memory failure: 0x11d351: Sending SIGBUS to syz.7.255:5984 due to hardware memory corruption [ 52.065788][ T5984] Memory failure: 0x11d351: recovery action for dirty LRU page: Recovered [ 52.065805][ T5984] Injecting memory failure for pfn 0x1387a9 at process virtual address 0x20002000 [ 52.068708][ T5984] Memory failure: 0x1387a9: Sending SIGBUS to syz.7.255:5984 due to hardware memory corruption [ 52.068748][ T5984] Memory failure: 0x1387a9: recovery action for dirty LRU page: Recovered [ 52.068761][ T5984] Injecting memory failure for pfn 0x119244 at process virtual address 0x20003000 [ 52.069110][ T5984] Memory failure: 0x119244: Sending SIGBUS to syz.7.255:5984 due to hardware memory corruption [ 52.069128][ T5984] Memory failure: 0x119244: recovery action for dirty LRU page: Recovered [ 52.069137][ T5984] Injecting memory failure for pfn 0x133d64 at process virtual address 0x20004000 [ 52.069167][ T5984] Memory failure: 0x133d64: Sending SIGBUS to syz.7.255:5984 due to hardware memory corruption [ 52.069183][ T5984] Memory failure: 0x133d64: recovery action for dirty LRU page: Recovered [ 52.069191][ T5984] Injecting memory failure for pfn 0x11d211 at process virtual address 0x20005000 [ 52.069217][ T5984] Memory failure: 0x11d211: Sending SIGBUS to syz.7.255:5984 due to hardware memory corruption [ 52.069233][ T5984] Memory failure: 0x11d211: recovery action for dirty LRU page: Recovered [ 52.069240][ T5984] Injecting memory failure for pfn 0x105e80 at process virtual address 0x20006000 [ 52.069264][ T5984] Memory failure: 0x105e80: Sending SIGBUS to syz.7.255:5984 due to hardware memory corruption [ 52.069280][ T5984] Memory failure: 0x105e80: recovery action for dirty LRU page: Recovered [ 52.069287][ T5984] Injecting memory failure for pfn 0x11e6c9 at process virtual address 0x20007000 [ 52.069311][ T5984] Memory failure: 0x11e6c9: Sending SIGBUS to syz.7.255:5984 due to hardware memory corruption [ 52.069327][ T5984] Memory failure: 0x11e6c9: recovery action for dirty LRU page: Recovered [ 52.069334][ T5984] Injecting memory failure for pfn 0x11e6a2 at process virtual address 0x20008000 [ 52.069357][ T5984] Memory failure: 0x11e6a2: Sending SIGBUS to syz.7.255:5984 due to hardware memory corruption [ 52.069373][ T5984] Memory failure: 0x11e6a2: recovery action for dirty LRU page: Recovered [ 52.069380][ T5984] Injecting memory failure for pfn 0x132514 at process virtual address 0x20009000 [ 52.069404][ T5984] Memory failure: 0x132514: Sending SIGBUS to syz.7.255:5984 due to hardware memory corruption [ 52.069419][ T5984] Memory failure: 0x132514: recovery action for dirty LRU page: Recovered [ 52.069426][ T5984] Injecting memory failure for pfn 0x11e6d3 at process virtual address 0x2000a000 [ 52.069449][ T5984] Memory failure: 0x11e6d3: Sending SIGBUS to syz.7.255:5984 due to hardware memory corruption [ 52.069464][ T5984] Memory failure: 0x11e6d3: recovery action for dirty LRU page: Recovered [ 52.069471][ T5984] Injecting memory failure for pfn 0x11e6ca at process virtual address 0x2000b000 [ 52.069494][ T5984] Memory failure: 0x11e6ca: Sending SIGBUS to syz.7.255:5984 due to hardware memory corruption [ 52.069510][ T5984] Memory failure: 0x11e6ca: recovery action for dirty LRU page: Recovered [ 52.069517][ T5984] Injecting memory failure for pfn 0x11d242 at process virtual address 0x2000c000 [ 52.072345][ T5984] Memory failure: 0x11d242: Sending SIGBUS to syz.7.255:5984 due to hardware memory corruption [ 52.072382][ T5984] Memory failure: 0x11d242: recovery action for dirty LRU page: Recovered [ 52.072399][ T5984] Injecting memory failure for pfn 0x11216f at process virtual address 0x2000d000 [ 52.075735][ T5984] Memory failure: 0x11216f: Sending SIGBUS to syz.7.255:5984 due to hardware memory corruption [ 52.075773][ T5984] Memory failure: 0x11216f: recovery action for dirty LRU page: Recovered [ 52.075788][ T5984] Injecting memory failure for pfn 0x10619d at process virtual address 0x2000e000 [ 52.085873][ T5984] Memory failure: 0x10619d: Sending SIGBUS to syz.7.255:5984 due to hardware memory corruption [ 52.085916][ T5984] Memory failure: 0x10619d: recovery action for dirty LRU page: Recovered [ 52.085929][ T5984] Injecting memory failure for pfn 0x115dea at process virtual address 0x2000f000 [ 52.085971][ T5984] Memory failure: 0x115dea: Sending SIGBUS to syz.7.255:5984 due to hardware memory corruption [ 52.085991][ T5984] Memory failure: 0x115dea: recovery action for dirty LRU page: Recovered [ 52.086001][ T5984] Injecting memory failure for pfn 0x10cd98 at process virtual address 0x20010000 [ 52.086029][ T5984] Memory failure: 0x10cd98: Sending SIGBUS to syz.7.255:5984 due to hardware memory corruption [ 52.086047][ T5984] Memory failure: 0x10cd98: recovery action for dirty LRU page: Recovered [ 52.086055][ T5984] Injecting memory failure for pfn 0x12df4e at process virtual address 0x20011000 [ 52.086081][ T5984] Memory failure: 0x12df4e: Sending SIGBUS to syz.7.255:5984 due to hardware memory corruption [ 52.086097][ T5984] Memory failure: 0x12df4e: recovery action for dirty LRU page: Recovered [ 52.086105][ T5984] Injecting memory failure for pfn 0x13289e at process virtual address 0x20012000 [ 52.086129][ T5984] Memory failure: 0x13289e: Sending SIGBUS to syz.7.255:5984 due to hardware memory corruption [ 52.086145][ T5984] Memory failure: 0x13289e: recovery action for dirty LRU page: Recovered [ 52.086153][ T5984] Injecting memory failure for pfn 0x1274c3 at process virtual address 0x20013000 [ 52.086177][ T5984] Memory failure: 0x1274c3: Sending SIGBUS to syz.7.255:5984 due to hardware memory corruption [ 52.086193][ T5984] Memory failure: 0x1274c3: recovery action for dirty LRU page: Recovered [ 52.086201][ T5984] Injecting memory failure for pfn 0x10912c at process virtual address 0x20014000 [ 52.086225][ T5984] Memory failure: 0x10912c: Sending SIGBUS to syz.7.255:5984 due to hardware memory corruption [ 52.086240][ T5984] Memory failure: 0x10912c: recovery action for dirty LRU page: Recovered [ 52.086248][ T5984] Injecting memory failure for pfn 0x13289f at process virtual address 0x20015000 [ 52.086272][ T5984] Memory failure: 0x13289f: Sending SIGBUS to syz.7.255:5984 due to hardware memory corruption [ 52.086287][ T5984] Memory failure: 0x13289f: recovery action for dirty LRU page: Recovered [ 52.086294][ T5984] Injecting memory failure for pfn 0x112dc4 at process virtual address 0x20016000 [ 52.086318][ T5984] Memory failure: 0x112dc4: Sending SIGBUS to syz.7.255:5984 due to hardware memory corruption [ 52.086333][ T5984] Memory failure: 0x112dc4: recovery action for dirty LRU page: Recovered [ 52.086341][ T5984] Injecting memory failure for pfn 0x11693b at process virtual address 0x20017000 [ 52.086364][ T5984] Memory failure: 0x11693b: Sending SIGBUS to syz.7.255:5984 due to hardware memory corruption [ 52.086379][ T5984] Memory failure: 0x11693b: recovery action for dirty LRU page: Recovered [ 52.086386][ T5984] Injecting memory failure for pfn 0x11e75b at process virtual address 0x20018000 [ 52.086411][ T5984] Memory failure: 0x11e75b: Sending SIGBUS to syz.7.255:5984 due to hardware memory corruption [ 52.086426][ T5984] Memory failure: 0x11e75b: recovery action for dirty LRU page: Recovered [ 52.086433][ T5984] Injecting memory failure for pfn 0x1276ce at process virtual address 0x20019000 [ 52.086456][ T5984] Memory failure: 0x1276ce: Sending SIGBUS to syz.7.255:5984 due to hardware memory corruption [ 52.086471][ T5984] Memory failure: 0x1276ce: recovery action for dirty LRU page: Recovered [ 52.086478][ T5984] Injecting memory failure for pfn 0x114d39 at process virtual address 0x2001a000 [ 52.086503][ T5984] Memory failure: 0x114d39: Sending SIGBUS to syz.7.255:5984 due to hardware memory corruption [ 52.086518][ T5984] Memory failure: 0x114d39: recovery action for dirty LRU page: Recovered [ 52.086525][ T5984] Injecting memory failure for pfn 0x12745e at process virtual address 0x2001b000 [ 52.086548][ T5984] Memory failure: 0x12745e: Sending SIGBUS to syz.7.255:5984 due to hardware memory corruption [ 52.086563][ T5984] Memory failure: 0x12745e: recovery action for dirty LRU page: Recovered [ 52.086570][ T5984] Injecting memory failure for pfn 0x113b62 at process virtual address 0x2001c000 [ 52.086593][ T5984] Memory failure: 0x113b62: Sending SIGBUS to syz.7.255:5984 due to hardware memory corruption [ 52.086608][ T5984] Memory failure: 0x113b62: recovery action for dirty LRU page: Recovered [ 52.086615][ T5984] Injecting memory failure for pfn 0x11d0b3 at process virtual address 0x2001d000 [ 52.086639][ T5984] Memory failure: 0x11d0b3: Sending SIGBUS to syz.7.255:5984 due to hardware memory corruption [ 52.086654][ T5984] Memory failure: 0x11d0b3: recovery action for dirty LRU page: Recovered [ 52.096922][ T5984] Injecting memory failure for pfn 0x11d1c9 at process virtual address 0x2001e000 [ 52.098486][ T5984] Memory failure: 0x11d1c9: unhandlable page. [ 52.098499][ T5984] Memory failure: 0x11d1c9: recovery action for get hwpoison page: Ignored [ 52.369477][ T6017] netlink: 'syz.4.260': attribute type 3 has an invalid length. [ 52.398011][ T5625] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.546836][ T6038] IPVS: length: 173 != 24 [ 52.590070][ T6038] netlink: 4 bytes leftover after parsing attributes in process `syz.7.265'. [ 52.946747][ T6020] dummy0: entered promiscuous mode [ 52.950723][ T6021] vlan2: entered promiscuous mode [ 52.950832][ T6021] batadv0: entered promiscuous mode [ 52.966462][ T4400] 8021q: adding VLAN 0 to HW filter on device eth9 [ 52.996620][ T5625] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 52.996657][ T5625] FAT-fs (loop7): Filesystem has been set read-only [ 53.005362][ T5625] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 53.024870][ T5524] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.034643][ T6016] dummy0: left promiscuous mode [ 53.068307][ T40] wlan1: Trigger new scan to find an IBSS to join [ 53.212535][ T6062] loop4: p2 < > p4 [ 53.212567][ T6062] loop4: partition table partially beyond EOD, truncated [ 53.259732][ T6062] loop4: p4 start 50331648 is beyond EOD, truncated [ 53.390329][ T5148] udevd[5148]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 53.483871][ T4400] 8021q: adding VLAN 0 to HW filter on device eth10 [ 53.524861][ T6095] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.526424][ T6095] EXT4-fs (loop4): Test dummy encryption mode enabled [ 53.528376][ T6095] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 53.528441][ T6095] System zones: 0-5 [ 53.530978][ T6095] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.798049][ T4712] Bluetooth: hci0: command tx timeout [ 53.867451][ T4712] Bluetooth: hci4: command tx timeout [ 53.946481][ T4400] 8021q: adding VLAN 0 to HW filter on device eth11 [ 54.195779][ T6121] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 54.445268][ T1293] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.493784][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.545478][ T4719] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.546236][ T4719] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.546517][ T4719] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.546836][ T4719] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.548080][ T4719] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.559380][ T1293] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.625535][ T4719] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.628507][ T4719] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.629051][ T4719] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.629440][ T4719] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.629659][ T4719] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.639233][ T6131] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 54.639258][ T6131] unable to read xattr id index table [ 54.660332][ T1293] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.701731][ T6142] fs-verity (loop4, inode 15): Unrecognized descriptor size: 0 bytes [ 54.762055][ T1293] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.184323][ T1293] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.321386][ T1293] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.506959][ T1293] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.522107][ T4400] 8021q: adding VLAN 0 to HW filter on device eth12 [ 55.561767][ T6132] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.563080][ T6132] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.563200][ T6132] bridge_slave_0: entered allmulticast mode [ 55.568134][ T6132] bridge_slave_0: entered promiscuous mode [ 55.578733][ T6132] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.578788][ T6132] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.578908][ T6132] bridge_slave_1: entered allmulticast mode [ 55.584166][ T6132] bridge_slave_1: entered promiscuous mode [ 55.596138][ T1293] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.605664][ T6138] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.605723][ T6138] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.605958][ T6138] bridge_slave_0: entered allmulticast mode [ 55.606474][ T6138] bridge_slave_0: entered promiscuous mode [ 55.607534][ T6138] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.607555][ T6138] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.607622][ T6138] bridge_slave_1: entered allmulticast mode [ 55.608162][ T6138] bridge_slave_1: entered promiscuous mode [ 55.648511][ T6132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.652732][ T6132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.659374][ T6138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.672589][ T6138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.697881][ T6132] team0: Port device team_slave_0 added [ 55.701505][ T6132] team0: Port device team_slave_1 added [ 55.721295][ T6138] team0: Port device team_slave_0 added [ 55.755068][ T6138] team0: Port device team_slave_1 added [ 55.760458][ T6132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.760500][ T6132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.760524][ T6132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.762157][ T4400] 8021q: adding VLAN 0 to HW filter on device eth13 [ 55.768776][ T6132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.768788][ T6132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.768803][ T6132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.774591][ T6138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.774602][ T6138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.774615][ T6138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.780730][ T6138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.780742][ T6138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.780758][ T6138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.848434][ T6138] hsr_slave_0: entered promiscuous mode [ 55.848867][ T6138] hsr_slave_1: entered promiscuous mode [ 55.849168][ T6138] debugfs: 'hsr0' already exists in 'hsr' [ 55.849180][ T6138] Cannot create hsr debugfs directory [ 55.920340][ T6132] hsr_slave_0: entered promiscuous mode [ 55.922229][ T6132] hsr_slave_1: entered promiscuous mode [ 55.922687][ T6132] debugfs: 'hsr0' already exists in 'hsr' [ 55.922698][ T6132] Cannot create hsr debugfs directory [ 55.925716][ T1293] bridge_slave_1: left allmulticast mode [ 55.925755][ T1293] bridge_slave_1: left promiscuous mode [ 55.925840][ T1293] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.928816][ T1293] bridge_slave_0: left allmulticast mode [ 55.928831][ T1293] bridge_slave_0: left promiscuous mode [ 55.928914][ T1293] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.945049][ T1293] bridge_slave_1: left allmulticast mode [ 55.945093][ T1293] bridge_slave_1: left promiscuous mode [ 55.945192][ T1293] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.951259][ T1293] bridge_slave_0: left allmulticast mode [ 55.951299][ T1293] bridge_slave_0: left promiscuous mode [ 55.951366][ T1293] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.108190][ T4850] wlan1: Trigger new scan to find an IBSS to join [ 56.136776][ T1293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.158510][ T1293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.188306][ T1293] bond0 (unregistering): Released all slaves [ 56.231157][ T1293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.268846][ T1293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.308873][ T1293] bond0 (unregistering): Released all slaves [ 56.316718][ T6239] virt_wifi0: entered promiscuous mode [ 56.316754][ T6239] virt_wifi0: entered allmulticast mode [ 56.327882][ T4400] 8021q: adding VLAN 0 to HW filter on device eth14 [ 56.372868][ T6252] Bluetooth: MGMT ver 1.23 [ 56.373989][ T6252] Bluetooth: hci0: invalid len left 7, exp >= 115 [ 56.616693][ T6266] netlink: 56 bytes leftover after parsing attributes in process `syz.4.297'. [ 56.626803][ T4719] Bluetooth: hci0: command tx timeout [ 56.668085][ T4719] Bluetooth: hci2: command tx timeout [ 56.805404][ T6263] netlink: 28 bytes leftover after parsing attributes in process `syz.6.296'. [ 56.903546][ T6132] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 56.908079][ T6132] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.908551][ T6132] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 56.910381][ T6132] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.918778][ T6132] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 56.927460][ T6132] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.927869][ T6132] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 56.930206][ T6132] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.971896][ T4400] 8021q: adding VLAN 0 to HW filter on device eth15 [ 57.073497][ T6138] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 57.076188][ T6138] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 57.079943][ T6138] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 57.082529][ T6138] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 57.082930][ T6138] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 57.084692][ T6138] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 57.086568][ T6138] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 57.091476][ T6138] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 57.129810][ T6290] set_capacity_and_notify: 10 callbacks suppressed [ 57.130517][ T6290] loop6: detected capacity change from 0 to 2048 [ 57.179246][ T40] wlan1: Creating new IBSS network, BSSID aa:cd:85:0b:06:a0 [ 57.222944][ T4719] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 57.222983][ T4719] CPU: 0 UID: 0 PID: 4719 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT [ 57.222998][ T4719] Tainted: [L]=SOFTLOCKUP [ 57.223002][ T4719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 57.223009][ T4719] Workqueue: hci4 hci_rx_work [ 57.223031][ T4719] Call trace: [ 57.223035][ T4719] show_stack+0x2c/0x3c (C) [ 57.223055][ T4719] __dump_stack+0x30/0x40 [ 57.223068][ T4719] dump_stack_lvl+0xd8/0x12c [ 57.223079][ T4719] dump_stack+0x1c/0x28 [ 57.223091][ T4719] sysfs_warn_dup+0x9c/0xb8 [ 57.223105][ T4719] sysfs_create_dir_ns+0x190/0x1f4 [ 57.223116][ T4719] kobject_add_internal+0x290/0x6f0 [ 57.223130][ T4719] kobject_add_varg+0x9c/0xe8 [ 57.223141][ T4719] kobject_add+0x110/0x1c8 [ 57.223152][ T4719] device_add+0x394/0x9e0 [ 57.223165][ T4719] hci_conn_add_sysfs+0xbc/0x1e8 [ 57.223176][ T4719] le_conn_complete_evt+0xc68/0x10f8 [ 57.223185][ T4719] hci_le_conn_complete_evt+0x114/0x3d8 [ 57.223198][ T4719] hci_le_meta_evt+0x2b0/0x46c [ 57.223208][ T4719] hci_event_packet+0x4c0/0x9c8 [ 57.223217][ T4719] hci_rx_work+0x2f4/0xd78 [ 57.223228][ T4719] process_scheduled_works+0x788/0x10b8 [ 57.223239][ T4719] worker_thread+0x798/0xbd0 [ 57.223249][ T4719] kthread+0x304/0x3d4 [ 57.223258][ T4719] ret_from_fork+0x10/0x20 [ 57.223275][ T4719] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 57.223291][ T4719] Bluetooth: hci4: failed to register connection device [ 57.234111][ T6132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.331902][ T1293] hsr_slave_0: left promiscuous mode [ 57.334852][ T4719] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 57.337267][ T1293] hsr_slave_1: left promiscuous mode [ 57.337650][ T1293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.337663][ T1293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.337857][ T4719] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 57.338681][ T1293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.338693][ T1293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.339918][ T4719] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 57.344395][ T4719] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 57.345467][ T1293] hsr_slave_0: left promiscuous mode [ 57.346768][ T4719] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 57.346826][ T1293] hsr_slave_1: left promiscuous mode [ 57.348468][ T1293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.348482][ T1293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.349439][ T1293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.349452][ T1293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.356600][ T1293] veth1_macvtap: left promiscuous mode [ 57.356629][ T1293] veth0_macvtap: left promiscuous mode [ 57.356674][ T1293] veth1_vlan: left promiscuous mode [ 57.356709][ T1293] veth0_vlan: left promiscuous mode [ 57.361590][ T1293] veth1_macvtap: left promiscuous mode [ 57.361633][ T1293] veth0_macvtap: left promiscuous mode [ 57.361692][ T1293] veth1_vlan: left promiscuous mode [ 57.361730][ T1293] veth0_vlan: left promiscuous mode [ 57.506687][ T1293] team0 (unregistering): Port device team_slave_1 removed [ 57.511211][ T1293] team0 (unregistering): Port device team_slave_0 removed [ 57.621073][ T1293] team0 (unregistering): Port device team_slave_1 removed [ 57.624931][ T1293] team0 (unregistering): Port device team_slave_0 removed [ 57.676595][ T6132] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.678464][ T4400] 8021q: adding VLAN 0 to HW filter on device eth16 [ 57.707364][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.707415][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.729758][ T6138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.732199][ T4850] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.732254][ T4850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.749257][ T6138] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.772883][ T3638] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.772942][ T3638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.805726][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.805777][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.843475][ T6138] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.843525][ T6138] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.105834][ T4400] 8021q: adding VLAN 0 to HW filter on device eth17 [ 58.146043][ T6314] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.146090][ T6314] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.146164][ T6314] bridge_slave_0: entered allmulticast mode [ 58.151597][ T6314] bridge_slave_0: entered promiscuous mode [ 58.156477][ T6314] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.158216][ T6314] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.159960][ T6314] bridge_slave_1: entered allmulticast mode [ 58.162027][ T6314] bridge_slave_1: entered promiscuous mode [ 58.175303][ T1293] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.192544][ T6314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.193791][ T6314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.213292][ T6314] team0: Port device team_slave_0 added [ 58.216461][ T6314] team0: Port device team_slave_1 added [ 58.233269][ T6314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.233298][ T6314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.233328][ T6314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.233874][ T6314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.233882][ T6314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.233897][ T6314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.245869][ T6314] hsr_slave_0: entered promiscuous mode [ 58.246197][ T6314] hsr_slave_1: entered promiscuous mode [ 58.246414][ T6314] debugfs: 'hsr0' already exists in 'hsr' [ 58.246423][ T6314] Cannot create hsr debugfs directory [ 58.272301][ T1293] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.290394][ T6138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.291331][ T6132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.332886][ T1293] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.438589][ T1293] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.454548][ T6132] veth0_vlan: entered promiscuous mode [ 58.463410][ T4400] 8021q: adding VLAN 0 to HW filter on device eth18 [ 58.466058][ T6132] veth1_vlan: entered promiscuous mode [ 58.496727][ T6138] veth0_vlan: entered promiscuous mode [ 58.505465][ T6138] veth1_vlan: entered promiscuous mode [ 58.512569][ T6132] veth0_macvtap: entered promiscuous mode [ 58.517315][ T6132] veth1_macvtap: entered promiscuous mode [ 58.538110][ T6132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.549242][ T6132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.551587][ T6138] veth0_macvtap: entered promiscuous mode [ 58.573331][ T6138] veth1_macvtap: entered promiscuous mode [ 58.595539][ T4850] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.595603][ T4850] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.595625][ T4850] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.595642][ T4850] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.626531][ T6138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.651966][ T6138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.671971][ T4400] 8021q: adding VLAN 0 to HW filter on device eth19 [ 58.677467][ T4712] Bluetooth: hci0: command tx timeout [ 58.680886][ T1293] bridge_slave_1: left allmulticast mode [ 58.680922][ T1293] bridge_slave_1: left promiscuous mode [ 58.681041][ T1293] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.685406][ T1293] bridge_slave_0: left allmulticast mode [ 58.686441][ T1293] bridge_slave_0: left promiscuous mode [ 58.689963][ T1293] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.748766][ T4712] Bluetooth: hci2: command tx timeout [ 58.749582][ T6426] loop4: detected capacity change from 0 to 2048 [ 58.770159][ T6426] loop4: p1 p2 p3 [ 58.770159][ T6426] p1: [ 58.771095][ T6426] loop4: p3 start 65280 is beyond EOD, truncated [ 58.831182][ T1293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.863172][ T5148] udevd[5148]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 58.864313][ T4699] udevd[4699]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 58.870475][ T1293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.883455][ T1293] bond0 (unregistering): Released all slaves [ 58.925651][ T128] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.925719][ T128] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.925757][ T128] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.925780][ T128] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.060481][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.061974][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.081048][ T4850] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.081088][ T4850] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.100693][ T6457] netlink: 'syz.4.311': attribute type 4 has an invalid length. [ 59.105480][ T6457] netlink: 'syz.4.311': attribute type 4 has an invalid length. [ 59.153663][ T4850] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.153703][ T4850] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.209792][ T3871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.209829][ T3871] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.315814][ T1293] hsr_slave_0: left promiscuous mode [ 59.329316][ T1293] hsr_slave_1: left promiscuous mode [ 59.329739][ T1293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.329771][ T1293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.333787][ T1293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.335011][ T1293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.350679][ T1293] veth1_macvtap: left promiscuous mode [ 59.350733][ T1293] veth0_macvtap: left promiscuous mode [ 59.350795][ T1293] veth1_vlan: left promiscuous mode [ 59.350836][ T1293] veth0_vlan: left promiscuous mode [ 59.387702][ T4712] Bluetooth: hci1: command tx timeout [ 59.454006][ T4719] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 59.455587][ T4719] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 59.457214][ T4719] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 59.458816][ T4719] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 59.460354][ T4719] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 59.524008][ T1293] team0 (unregistering): Port device team_slave_1 removed [ 59.535221][ T1293] team0 (unregistering): Port device team_slave_0 removed [ 59.694117][ T6512] overlay: filesystem on ./file0 not supported as upperdir [ 59.698592][ T6512] overlay: filesystem on ./file0 not supported as upperdir [ 59.745716][ T6522] loop9: detected capacity change from 0 to 512 [ 59.814019][ T6522] syz.9.318: attempt to access beyond end of device [ 59.814019][ T6522] loop9: rw=0, sector=17179852721, nr_sectors = 1 limit=512 [ 59.814106][ T6522] FAT-fs (loop9): error, invalid access to FAT (entry 0x0fffff00) [ 59.814129][ T6522] FAT-fs (loop9): Filesystem has been set read-only [ 59.814343][ T6522] syz.9.318: attempt to access beyond end of device [ 59.814343][ T6522] loop9: rw=0, sector=17179852721, nr_sectors = 1 limit=512 [ 59.814402][ T6522] FAT-fs (loop9): error, invalid access to FAT (entry 0x0fffff00) [ 59.816735][ T6522] syz.9.318: attempt to access beyond end of device [ 59.816735][ T6522] loop9: rw=524288, sector=17179852706, nr_sectors = 8 limit=512 [ 59.914954][ T6314] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.929614][ T6539] loop4: detected capacity change from 0 to 512 [ 59.933101][ T6314] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 59.952497][ T6314] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.960496][ T6539] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.324: iget: bad extra_isize 58 (inode size 256) [ 59.960539][ T6539] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 59.961019][ T6539] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.324: error while reading EA inode 11 err=-117 [ 59.961046][ T6539] loop4: lost filesystem error report for type 5 error -117 [ 59.961203][ T6539] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 59.961305][ T6539] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.324: iget: bad extra_isize 58 (inode size 256) [ 59.961321][ T6539] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 59.962029][ T6539] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.324: error while reading EA inode 11 err=-117 [ 59.962055][ T6539] loop4: lost filesystem error report for type 5 error -117 [ 59.962211][ T6539] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.324: iget: bad extra_isize 58 (inode size 256) [ 59.962228][ T6539] loop4: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 59.962369][ T6539] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.324: error while reading EA inode 18 err=-117 [ 59.962385][ T6539] loop4: lost filesystem error report for type 5 error -117 [ 59.962551][ T6539] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.324: iget: bad extra_isize 58 (inode size 256) [ 59.962567][ T6539] loop4: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 59.962702][ T6539] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.324: error while reading EA inode 18 err=-117 [ 59.962716][ T6539] loop4: lost filesystem error report for type 5 error -117 [ 59.962970][ T6539] EXT4-fs (loop4): 1 orphan inode deleted [ 60.012133][ T6314] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 60.012510][ T6314] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.024458][ T6314] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 60.067851][ T6314] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.073824][ T6557] loop8: detected capacity change from 0 to 512 [ 60.081442][ T6314] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 60.125820][ T4400] 8021q: adding VLAN 0 to HW filter on device eth2 [ 60.205595][ T6557] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 60.207269][ T6557] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 60.207300][ T6557] EXT4-fs (loop8): This should not happen!! Data will be lost [ 60.207300][ T6557] [ 60.207317][ T6557] EXT4-fs (loop8): Total free blocks count 0 [ 60.207331][ T6557] EXT4-fs (loop8): Free/Dirty block details [ 60.207344][ T6557] EXT4-fs (loop8): free_blocks=65280 [ 60.207369][ T6557] EXT4-fs (loop8): dirty_blocks=1 [ 60.207379][ T6557] EXT4-fs (loop8): Block reservation details [ 60.207389][ T6557] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 60.271588][ T1293] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.419364][ T1293] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.434089][ T6493] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.434138][ T6493] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.434307][ T6493] bridge_slave_0: entered allmulticast mode [ 60.434805][ T6493] bridge_slave_0: entered promiscuous mode [ 60.445676][ T6595] loop4: detected capacity change from 0 to 512 [ 60.458292][ T6314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.462375][ T6493] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.462467][ T6493] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.462648][ T6493] bridge_slave_1: entered allmulticast mode [ 60.463145][ T6493] bridge_slave_1: entered promiscuous mode [ 60.523543][ T1293] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.539585][ T6314] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.542189][ T3638] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.542237][ T3638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.564794][ T6493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.565963][ T6493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.617220][ T6607] netlink: 68 bytes leftover after parsing attributes in process `syz.8.334'. [ 60.640589][ T3638] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.640639][ T3638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.650293][ T6493] team0: Port device team_slave_0 added [ 60.651181][ T6493] team0: Port device team_slave_1 added [ 60.694307][ T6608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.333'. [ 60.694353][ T6608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.333'. [ 60.715598][ T6493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.715628][ T6493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.715928][ T6493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.720412][ T6493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.720426][ T6493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.720445][ T6493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.758376][ T4719] Bluetooth: hci0: command tx timeout [ 60.759015][ T1293] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.796276][ T6314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.809989][ T6493] hsr_slave_0: entered promiscuous mode [ 60.813427][ T6493] hsr_slave_1: entered promiscuous mode [ 60.815188][ T6493] debugfs: 'hsr0' already exists in 'hsr' [ 60.816293][ T6493] Cannot create hsr debugfs directory [ 60.827267][ T4719] Bluetooth: hci2: command tx timeout [ 60.903834][ T6608] syzkaller0: entered promiscuous mode [ 60.917100][ T6608] syzkaller0: entered allmulticast mode [ 60.958738][ T6632] loop8: detected capacity change from 0 to 8 [ 61.478165][ T4719] Bluetooth: hci4: command tx timeout [ 61.479909][ T4719] Bluetooth: hci1: command tx timeout [ 61.657495][ T1293] bridge_slave_1: left allmulticast mode [ 61.658660][ T1293] bridge_slave_1: left promiscuous mode [ 61.659681][ T1293] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.662145][ T1293] bridge_slave_0: left allmulticast mode [ 61.663221][ T1293] bridge_slave_0: left promiscuous mode [ 61.664319][ T1293] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.782431][ T1293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.810000][ T1293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.822736][ T1293] bond0 (unregistering): Released all slaves [ 61.848670][ T6649] netlink: 20 bytes leftover after parsing attributes in process `syz.9.339'. [ 61.892924][ T6664] netlink: 'syz.8.343': attribute type 10 has an invalid length. [ 61.906466][ T6667] loop4: detected capacity change from 0 to 512 [ 61.921509][ T6664] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 61.938527][ T6667] syz.4.344: attempt to access beyond end of device [ 61.938527][ T6667] loop4: rw=0, sector=17179852721, nr_sectors = 1 limit=512 [ 61.938619][ T6667] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 61.938629][ T6667] FAT-fs (loop4): Filesystem has been set read-only [ 61.938818][ T6667] syz.4.344: attempt to access beyond end of device [ 61.938818][ T6667] loop4: rw=0, sector=17179852721, nr_sectors = 1 limit=512 [ 61.938870][ T6667] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 61.939020][ T6667] syz.4.344: attempt to access beyond end of device [ 61.939020][ T6667] loop4: rw=524288, sector=17179852706, nr_sectors = 8 limit=512 [ 61.987295][ T6673] netlink: 44 bytes leftover after parsing attributes in process `syz.8.346'. [ 61.995154][ T6676] IPVS: length: 173 != 24 [ 62.010855][ T6314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.016664][ T6673] netlink: 24 bytes leftover after parsing attributes in process `syz.8.346'. [ 62.448630][ T6705] netlink: 28 bytes leftover after parsing attributes in process `syz.9.353'. [ 62.569600][ T6314] veth0_vlan: entered promiscuous mode [ 62.606786][ T1293] hsr_slave_0: left promiscuous mode [ 62.612246][ T1293] hsr_slave_1: left promiscuous mode [ 62.612516][ T1293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.612528][ T1293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.613500][ T1293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.613511][ T1293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.624526][ T1293] veth1_macvtap: left promiscuous mode [ 62.626856][ T1293] veth0_macvtap: left promiscuous mode [ 62.628016][ T1293] veth1_vlan: left promiscuous mode [ 62.629165][ T1293] veth0_vlan: left promiscuous mode [ 62.752795][ T6718] loop9: detected capacity change from 0 to 512 [ 62.784091][ T6718] syz.9.355: attempt to access beyond end of device [ 62.784091][ T6718] loop9: rw=0, sector=17179852721, nr_sectors = 1 limit=512 [ 62.784187][ T6718] FAT-fs (loop9): error, invalid access to FAT (entry 0x0fffff00) [ 62.784197][ T6718] FAT-fs (loop9): Filesystem has been set read-only [ 62.784454][ T6718] syz.9.355: attempt to access beyond end of device [ 62.784454][ T6718] loop9: rw=524288, sector=17179852706, nr_sectors = 8 limit=512 [ 62.828663][ T4719] Bluetooth: hci0: command tx timeout [ 62.862425][ T1293] team0 (unregistering): Port device team_slave_1 removed [ 62.868202][ T1293] team0 (unregistering): Port device team_slave_0 removed [ 62.907717][ T4719] Bluetooth: hci2: command tx timeout [ 62.957955][ T6721] loop9: detected capacity change from 0 to 512 [ 62.977310][ T6721] EXT4-fs (loop9): Test dummy encryption mode enabled [ 62.977343][ T6721] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 62.985692][ T6721] EXT4-fs error (device loop9): ext4_orphan_get:1425: comm syz.9.356: bad orphan inode 131083 [ 62.985736][ T6721] loop9: lost filesystem error report for type 5 error -117 [ 63.000561][ T6721] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 63.002022][ T6721] overlayfs: upper fs needs to support d_type. [ 63.002162][ T6721] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 63.004072][ T6314] veth1_vlan: entered promiscuous mode [ 63.011311][ T4400] 8021q: adding VLAN 0 to HW filter on device eth1 [ 63.066180][ T6314] veth0_macvtap: entered promiscuous mode [ 63.072968][ T6314] veth1_macvtap: entered promiscuous mode [ 63.076390][ T6314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.081177][ T6314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.447836][ T3638] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.447900][ T3638] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.447945][ T3638] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.447983][ T3638] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.505118][ T6741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.508208][ T6741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.548014][ T4719] Bluetooth: hci4: command tx timeout [ 63.548261][ T4719] Bluetooth: hci1: command tx timeout [ 63.562137][ T3871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.562174][ T3871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.598780][ T6493] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.607304][ T6493] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.612472][ T6493] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.614770][ T6493] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 63.615127][ T6493] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.620037][ T6493] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 63.621135][ T6493] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.623546][ T6493] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 63.623988][ T3871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.623999][ T3871] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.683661][ T6493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.700160][ T6493] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.721478][ T3638] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.721551][ T3638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.722084][ T3638] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.722103][ T3638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.786490][ T1293] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.798572][ T4400] 8021q: adding VLAN 0 to HW filter on device eth3 [ 63.881983][ T1293] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.918501][ T4719] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.928043][ T4719] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.930932][ T4719] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.932809][ T4719] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.933232][ T4719] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.973733][ T6786] loop8: detected capacity change from 0 to 1024 [ 63.996459][ T6786] EXT4-fs warning (device loop8): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop8. [ 64.004113][ T1293] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.026893][ T6795] batadv_slave_1: entered promiscuous mode [ 64.134109][ T1293] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.236789][ T6819] loop4: detected capacity change from 0 to 128 [ 64.244420][ T6819] EXT4-fs (loop4): Test dummy encryption mode enabled [ 64.272438][ T6819] tap0: tun_chr_ioctl cmd 1074025677 [ 64.272634][ T6819] tap0: linktype set to 787 [ 64.434867][ T4710] EXT4-fs unmount: 13 callbacks suppressed [ 64.436097][ T4710] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 64.473388][ T6493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.512697][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.512760][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.518072][ T1013] cfg80211: failed to load regulatory.db [ 64.539648][ T4400] 8021q: adding VLAN 0 to HW filter on device eth20 [ 64.547313][ T1293] bridge_slave_1: left allmulticast mode [ 64.547346][ T1293] bridge_slave_1: left promiscuous mode [ 64.547446][ T1293] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.552809][ T1293] bridge_slave_0: left allmulticast mode [ 64.554470][ T1293] bridge_slave_0: left promiscuous mode [ 64.554577][ T1293] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.667660][ T1293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.700691][ T1293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.713733][ T6833] loop4: detected capacity change from 0 to 512 [ 64.715804][ T6833] EXT4-fs: Ignoring removed i_version option [ 64.717909][ T6833] EXT4-fs: Ignoring removed nobh option [ 64.730298][ T1293] bond0 (unregistering): Released all slaves [ 64.732383][ T6833] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 64.751023][ T6833] EXT4-fs (loop4): 1 truncate cleaned up [ 64.751510][ T6833] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.783424][ T6832] bond1: entered promiscuous mode [ 64.823194][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.900000][ T6493] veth0_vlan: entered promiscuous mode [ 65.015420][ T6493] veth1_vlan: entered promiscuous mode [ 65.123240][ T1293] hsr_slave_0: left promiscuous mode [ 65.124610][ T1293] hsr_slave_1: left promiscuous mode [ 65.124931][ T1293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.124950][ T1293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.130523][ T1293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.130551][ T1293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.142118][ T1293] veth1_macvtap: left promiscuous mode [ 65.142170][ T1293] veth0_macvtap: left promiscuous mode [ 65.142239][ T1293] veth1_vlan: left promiscuous mode [ 65.142289][ T1293] veth0_vlan: left promiscuous mode [ 65.182942][ T6873] netlink: 4 bytes leftover after parsing attributes in process `syz.8.377'. [ 65.274692][ T1293] team0 (unregistering): Port device team_slave_1 removed [ 65.280470][ T1293] team0 (unregistering): Port device team_slave_0 removed [ 65.345314][ T6493] veth0_macvtap: entered promiscuous mode [ 65.352281][ T6873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.352322][ T6873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.352873][ T6873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.352903][ T6873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.379033][ T6493] veth1_macvtap: entered promiscuous mode [ 65.400625][ T6880] loop4: detected capacity change from 0 to 512 [ 65.432116][ T6493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.433192][ T6493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.487146][ T128] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.487230][ T128] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.487288][ T128] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.487332][ T128] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.516129][ T6813] batadv_slave_1: left promiscuous mode [ 65.594742][ T6776] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.594797][ T6776] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.594864][ T6776] bridge_slave_0: entered allmulticast mode [ 65.618010][ T6776] bridge_slave_0: entered promiscuous mode [ 65.620141][ T6776] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.621361][ T6776] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.622669][ T6776] bridge_slave_1: entered allmulticast mode [ 65.624194][ T6776] bridge_slave_1: entered promiscuous mode [ 65.633025][ T6776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.635781][ T6776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.644500][ T6776] team0: Port device team_slave_0 added [ 65.646393][ T6776] team0: Port device team_slave_1 added [ 65.654325][ T6776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.655477][ T6776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.658509][ T4712] Bluetooth: hci1: command 0x0419 tx timeout [ 65.658538][ T4712] Bluetooth: hci4: command tx timeout [ 65.666583][ T6776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.671943][ T6776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.674909][ T6776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.674961][ T6776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.709684][ T6905] sctp: [Deprecated]: syz.3.381 (pid 6905) Use of struct sctp_assoc_value in delayed_ack socket option. [ 65.709684][ T6905] Use struct sctp_sack_info instead [ 65.720493][ T4923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.721959][ T4923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.757776][ T6776] hsr_slave_0: entered promiscuous mode [ 65.759465][ T6776] hsr_slave_1: entered promiscuous mode [ 65.774485][ T6734] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.774522][ T6734] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.883868][ T6895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.888650][ T6895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.948203][ T50] Bluetooth: hci2: command tx timeout [ 65.956134][ T6922] loop2: detected capacity change from 0 to 2048 [ 66.017346][ T6922] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -ENXIO [ 66.045534][ T4400] 8021q: adding VLAN 0 to HW filter on device eth0 [ 66.230555][ T6949] binder: 6945:6949 ioctl 40046210 0 returned -14 [ 66.271252][ T6951] loop2: detected capacity change from 0 to 512 [ 66.532219][ T4400] 8021q: adding VLAN 0 to HW filter on device eth21 [ 66.578352][ T6963] bond1: option arp_missed_max: mode dependency failed, not supported in mode balance-tlb(5) [ 66.595000][ T6963] bond1 (unregistering): Released all slaves [ 66.600997][ T6966] loop4: detected capacity change from 0 to 4096 [ 66.601412][ T6966] EXT4-fs: quotafile must be on filesystem root [ 66.619030][ T6966] overlay: filesystem on ./file0 not supported as upperdir [ 66.676296][ T6776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.695032][ T6776] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.696833][ T6776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.702378][ T6973] qrtr: Invalid version 48 [ 66.702645][ T6776] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.705246][ T6776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.716991][ T6776] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.727347][ T6776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.735220][ T6776] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.768131][ T6776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.774217][ T6776] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.786610][ T1293] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.786665][ T1293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.796036][ T3638] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.796090][ T3638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.814234][ T6776] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.817214][ T6776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.906633][ T7004] IPVS: set_ctl: invalid protocol: 103 172.20.20.34:20000 [ 66.944342][ T7010] loop2: detected capacity change from 0 to 256 [ 66.980575][ T6999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.398'. [ 67.156796][ T7026] EXT4-fs (loop2): Test dummy encryption mode enabled [ 67.162751][ T7026] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 67.221953][ T6776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.252244][ T6493] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 67.276881][ T6776] veth0_vlan: entered promiscuous mode [ 67.282191][ T6776] veth1_vlan: entered promiscuous mode [ 67.295663][ T6776] veth0_macvtap: entered promiscuous mode [ 67.301707][ T6776] veth1_macvtap: entered promiscuous mode [ 67.313096][ T6776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.319232][ T6776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.336355][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.336421][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.336461][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.336488][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.429762][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.429793][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.473513][ T3638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.473552][ T3638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.571704][ T7065] netlink: 16 bytes leftover after parsing attributes in process `syz.3.410'. [ 67.709169][ T4712] Bluetooth: hci1: command 0x0419 tx timeout [ 67.709944][ T50] Bluetooth: hci4: command tx timeout [ 67.756790][ T7083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.758426][ T7083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.973234][ T7084] set_capacity_and_notify: 3 callbacks suppressed [ 67.973260][ T7084] loop4: detected capacity change from 0 to 128 [ 68.027619][ T50] Bluetooth: hci2: command tx timeout [ 68.072847][ T7084] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 68.327404][ T7089] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 68.327426][ T7089] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 68.328192][ T7089] vhci_hcd vhci_hcd.0: Device attached [ 68.494893][ T7090] vhci_hcd: connection closed [ 68.532455][ T4850] vhci_hcd vhci_hcd.4: stop threads [ 68.563956][ T4850] vhci_hcd vhci_hcd.4: release socket [ 68.642919][ T4850] vhci_hcd vhci_hcd.4: disconnect device [ 68.762202][ T7088] [ 68.762679][ T7088] ====================================================== [ 68.763757][ T7088] WARNING: possible circular locking dependency detected [ 68.764778][ T7088] syzkaller #0 Tainted: G L [ 68.765591][ T7088] ------------------------------------------------------ [ 68.766611][ T7088] syz.4.414/7088 is trying to acquire lock: [ 68.767401][ T7088] ffff0000f39df140 (&ei->xattr_sem){++++}-{4:4}, at: ext4_xattr_set_handle+0x134/0xde4 [ 68.768979][ T7088] [ 68.768979][ T7088] but task is already holding lock: [ 68.770089][ T7088] ffff0000d2c2cc18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x280/0xc54 [ 68.771620][ T7088] [ 68.771620][ T7088] which lock already depends on the new lock. [ 68.771620][ T7088] [ 68.773230][ T7088] [ 68.773230][ T7088] the existing dependency chain (in reverse order) is: [ 68.774606][ T7088] [ 68.774606][ T7088] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 68.775985][ T7088] percpu_down_read_internal+0x5c/0x294 [ 68.776909][ T7088] ext4_writepages+0x170/0x2dc [ 68.777669][ T7088] do_writepages+0x284/0x47c [ 68.778439][ T7088] __writeback_single_inode+0x140/0x1880 [ 68.779457][ T7088] writeback_single_inode+0x400/0xb20 [ 68.780364][ T7088] write_inode_now+0x170/0x208 [ 68.781147][ T7088] iput+0x7cc/0xc2c [ 68.781786][ T7088] ext4_xattr_block_set+0x1b1c/0x21e8 [ 68.782771][ T7088] ext4_expand_extra_isize_ea+0xaf4/0x1384 [ 68.783713][ T7088] __ext4_expand_extra_isize+0x2a4/0x378 [ 68.784616][ T7088] __ext4_mark_inode_dirty+0x394/0x828 [ 68.785495][ T7088] ext4_evict_inode+0x798/0xfb8 [ 68.786283][ T7088] evict+0x4c0/0x74c [ 68.787016][ T7088] iput+0x8f0/0xc2c [ 68.787712][ T7088] ext4_process_orphan+0x24c/0x2c0 [ 68.788672][ T7088] ext4_orphan_cleanup+0x7d4/0xd20 [ 68.789616][ T7088] ext4_fill_super+0x4628/0x4e14 [ 68.790417][ T7088] get_tree_bdev_flags+0x388/0x43c [ 68.791285][ T7088] get_tree_bdev+0x2c/0x3c [ 68.791926][ T7088] ext4_get_tree+0x28/0x38 [ 68.792684][ T7088] vfs_get_tree+0x90/0x28c [ 68.793473][ T7088] fc_mount+0x24/0xac [ 68.794331][ T7088] do_new_mount+0x2a4/0x538 [ 68.795182][ T7088] path_mount+0x5f0/0xa88 [ 68.795955][ T7088] do_mount+0xe8/0x148 [ 68.796663][ T7088] __arm64_sys_mount+0x334/0x380 [ 68.797492][ T7088] invoke_syscall+0x98/0x244 [ 68.798251][ T7088] el0_svc_common+0xec/0x23c [ 68.799057][ T7088] do_el0_svc+0x4c/0x5c [ 68.799756][ T7088] el0_svc+0x64/0x260 [ 68.800434][ T7088] el0t_64_sync_handler+0x48/0x148 [ 68.801307][ T7088] el0t_64_sync+0x198/0x19c [ 68.802109][ T7088] [ 68.802109][ T7088] -> #0 (&ei->xattr_sem){++++}-{4:4}: [ 68.803294][ T7088] __lock_acquire+0x17c0/0x2ebc [ 68.804301][ T7088] lock_acquire+0x140/0x364 [ 68.805089][ T7088] down_write+0x50/0xc0 [ 68.805858][ T7088] ext4_xattr_set_handle+0x134/0xde4 [ 68.806870][ T7088] ext4_initxattrs+0xa8/0x11c [ 68.807756][ T7088] security_inode_init_security+0x244/0x370 [ 68.808875][ T7088] ext4_init_security+0x44/0x58 [ 68.809755][ T7088] __ext4_new_inode+0x286c/0x3308 [ 68.810503][ T7088] ext4_ext_migrate+0x564/0xc54 [ 68.811271][ T7088] ext4_ioctl+0x1e14/0x4430 [ 68.811954][ T7088] __arm64_sys_ioctl+0x14c/0x1c4 [ 68.812819][ T7088] invoke_syscall+0x98/0x244 [ 68.813628][ T7088] el0_svc_common+0xec/0x23c [ 68.814474][ T7088] do_el0_svc+0x4c/0x5c [ 68.815201][ T7088] el0_svc+0x64/0x260 [ 68.815913][ T7088] el0t_64_sync_handler+0x48/0x148 [ 68.816798][ T7088] el0t_64_sync+0x198/0x19c [ 68.817573][ T7088] [ 68.817573][ T7088] other info that might help us debug this: [ 68.817573][ T7088] [ 68.819149][ T7088] Possible unsafe locking scenario: [ 68.819149][ T7088] [ 68.820294][ T7088] CPU0 CPU1 [ 68.821034][ T7088] ---- ---- [ 68.821845][ T7088] lock(&sbi->s_writepages_rwsem); [ 68.822602][ T7088] lock(&ei->xattr_sem); [ 68.823702][ T7088] lock(&sbi->s_writepages_rwsem); [ 68.824929][ T7088] lock(&ei->xattr_sem); [ 68.825535][ T7088] [ 68.825535][ T7088] *** DEADLOCK *** [ 68.825535][ T7088] [ 68.826626][ T7088] 3 locks held by syz.4.414/7088: [ 68.827411][ T7088] #0: ffff0000d2cbc450 (sb_writers#3){.+.+}-{0:0}, at: mnt_want_write_file+0x64/0xdc [ 68.828828][ T7088] #1: ffff0000f39dd7e0 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: ext4_ioctl+0x1e0c/0x4430 [ 68.830162][ T7088] #2: ffff0000d2c2cc18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x280/0xc54 [ 68.831653][ T7088] [ 68.831653][ T7088] stack backtrace: [ 68.832526][ T7088] CPU: 0 UID: 0 PID: 7088 Comm: syz.4.414 Tainted: G L syzkaller #0 PREEMPT [ 68.834070][ T7088] Tainted: [L]=SOFTLOCKUP [ 68.834768][ T7088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 68.836271][ T7088] Call trace: [ 68.836830][ T7088] show_stack+0x2c/0x3c (C) [ 68.837412][ T7088] __dump_stack+0x30/0x40 [ 68.838100][ T7088] dump_stack_lvl+0xd8/0x12c [ 68.838783][ T7088] dump_stack+0x1c/0x28 [ 68.839481][ T7088] print_circular_bug+0x328/0x330 [ 68.840284][ T7088] check_noncircular+0x158/0x174 [ 68.841031][ T7088] __lock_acquire+0x17c0/0x2ebc [ 68.841726][ T7088] lock_acquire+0x140/0x364 [ 68.842369][ T7088] down_write+0x50/0xc0 [ 68.843000][ T7088] ext4_xattr_set_handle+0x134/0xde4 [ 68.843883][ T7088] ext4_initxattrs+0xa8/0x11c [ 68.844603][ T7088] security_inode_init_security+0x244/0x370 [ 68.845570][ T7088] ext4_init_security+0x44/0x58 [ 68.846329][ T7088] __ext4_new_inode+0x286c/0x3308 [ 68.847091][ T7088] ext4_ext_migrate+0x564/0xc54 [ 68.847809][ T7088] ext4_ioctl+0x1e14/0x4430 [ 68.848598][ T7088] __arm64_sys_ioctl+0x14c/0x1c4 [ 68.849354][ T7088] invoke_syscall+0x98/0x244 [ 68.850101][ T7088] el0_svc_common+0xec/0x23c [ 68.850937][ T7088] do_el0_svc+0x4c/0x5c [ 68.851567][ T7088] el0_svc+0x64/0x260 [ 68.852158][ T7088] el0t_64_sync_handler+0x48/0x148 [ 68.853000][ T7088] el0t_64_sync+0x198/0x19c [ 69.099036][ T4710] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 70.107121][ T50] Bluetooth: hci2: command tx timeout [ 70.325344][ T4400] 8021q: adding VLAN 0 to HW filter on device eth22 [ 70.943592][ T4400] 8021q: adding VLAN 0 to HW filter on device eth23 [ 71.065792][ T4400] 8021q: adding VLAN 0 to HW filter on device eth11 [ 71.440211][ T4400] 8021q: adding VLAN 0 to HW filter on device eth8 [ 71.539314][ T4400] 8021q: adding VLAN 0 to HW filter on device eth9 [ 71.646417][ T4400] 8021q: adding VLAN 0 to HW filter on device eth10 [ 72.187726][ T50] Bluetooth: hci2: command tx timeout